======================================== Sat, 31 Aug 2024 - Debian 11.11 released ======================================== ========================================================================= [Date: Sat, 31 Aug 2024 10:30:43 -0000] [ftpmaster: Mark Hymers] Removed the following packages from oldstable: btrfs-modules-5.10.0-28-s390x-di | 5.10.209-2 | s390x btrfs-modules-5.10.0-31-s390x-di | 5.10.221-1 | s390x cdrom-core-modules-5.10.0-28-s390x-di | 5.10.209-2 | s390x cdrom-core-modules-5.10.0-31-s390x-di | 5.10.221-1 | s390x crc-modules-5.10.0-28-s390x-di | 5.10.209-2 | s390x crc-modules-5.10.0-31-s390x-di | 5.10.221-1 | s390x crypto-dm-modules-5.10.0-28-s390x-di | 5.10.209-2 | s390x crypto-dm-modules-5.10.0-31-s390x-di | 5.10.221-1 | s390x crypto-modules-5.10.0-28-s390x-di | 5.10.209-2 | s390x crypto-modules-5.10.0-31-s390x-di | 5.10.221-1 | s390x dasd-extra-modules-5.10.0-28-s390x-di | 5.10.209-2 | s390x dasd-extra-modules-5.10.0-31-s390x-di | 5.10.221-1 | s390x dasd-modules-5.10.0-28-s390x-di | 5.10.209-2 | s390x dasd-modules-5.10.0-31-s390x-di | 5.10.221-1 | s390x ext4-modules-5.10.0-28-s390x-di | 5.10.209-2 | s390x ext4-modules-5.10.0-31-s390x-di | 5.10.221-1 | s390x f2fs-modules-5.10.0-28-s390x-di | 5.10.209-2 | s390x f2fs-modules-5.10.0-31-s390x-di | 5.10.221-1 | s390x fat-modules-5.10.0-28-s390x-di | 5.10.209-2 | s390x fat-modules-5.10.0-31-s390x-di | 5.10.221-1 | s390x fuse-modules-5.10.0-28-s390x-di | 5.10.209-2 | s390x fuse-modules-5.10.0-31-s390x-di | 5.10.221-1 | s390x isofs-modules-5.10.0-28-s390x-di | 5.10.209-2 | s390x isofs-modules-5.10.0-31-s390x-di | 5.10.221-1 | s390x kernel-image-5.10.0-28-s390x-di | 5.10.209-2 | s390x kernel-image-5.10.0-31-s390x-di | 5.10.221-1 | s390x linux-headers-5.10.0-28-s390x | 5.10.209-2 | s390x linux-headers-5.10.0-31-s390x | 5.10.221-1 | s390x linux-image-5.10.0-28-s390x | 5.10.209-2 | s390x linux-image-5.10.0-28-s390x-dbg | 5.10.209-2 | s390x linux-image-5.10.0-31-s390x | 5.10.221-1 | s390x linux-image-5.10.0-31-s390x-dbg | 5.10.221-1 | s390x loop-modules-5.10.0-28-s390x-di | 5.10.209-2 | s390x loop-modules-5.10.0-31-s390x-di | 5.10.221-1 | s390x md-modules-5.10.0-28-s390x-di | 5.10.209-2 | s390x md-modules-5.10.0-31-s390x-di | 5.10.221-1 | s390x mtd-core-modules-5.10.0-28-s390x-di | 5.10.209-2 | s390x mtd-core-modules-5.10.0-31-s390x-di | 5.10.221-1 | s390x multipath-modules-5.10.0-28-s390x-di | 5.10.209-2 | s390x multipath-modules-5.10.0-31-s390x-di | 5.10.221-1 | s390x nbd-modules-5.10.0-28-s390x-di | 5.10.209-2 | s390x nbd-modules-5.10.0-31-s390x-di | 5.10.221-1 | s390x nic-modules-5.10.0-28-s390x-di | 5.10.209-2 | s390x nic-modules-5.10.0-31-s390x-di | 5.10.221-1 | s390x scsi-core-modules-5.10.0-28-s390x-di | 5.10.209-2 | s390x scsi-core-modules-5.10.0-31-s390x-di | 5.10.221-1 | s390x scsi-modules-5.10.0-28-s390x-di | 5.10.209-2 | s390x scsi-modules-5.10.0-31-s390x-di | 5.10.221-1 | s390x udf-modules-5.10.0-28-s390x-di | 5.10.209-2 | s390x udf-modules-5.10.0-31-s390x-di | 5.10.221-1 | s390x xfs-modules-5.10.0-28-s390x-di | 5.10.209-2 | s390x xfs-modules-5.10.0-31-s390x-di | 5.10.221-1 | s390x ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:30:53 -0000] [ftpmaster: Mark Hymers] Removed the following packages from oldstable: affs-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el affs-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el ata-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el ata-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el btrfs-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el btrfs-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el cdrom-core-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el cdrom-core-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el crc-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el crc-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el crypto-dm-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el crypto-dm-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el crypto-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el crypto-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el event-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el event-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el ext4-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el ext4-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el f2fs-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el f2fs-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el fat-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el fat-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el fb-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el fb-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el fuse-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el fuse-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el i2c-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el i2c-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el input-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el input-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el isofs-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el isofs-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el jfs-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el jfs-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el kernel-image-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el kernel-image-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el loop-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el loop-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el md-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el md-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el minix-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el minix-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el mmc-core-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el mmc-core-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el mmc-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el mmc-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el mouse-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el mouse-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el mtd-core-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el mtd-core-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el multipath-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el multipath-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el nbd-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el nbd-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el nic-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el nic-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el nic-shared-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el nic-shared-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el nic-usb-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el nic-usb-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el nic-wireless-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el nic-wireless-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el pata-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el pata-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el ppp-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el ppp-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el sata-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el sata-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el scsi-core-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el scsi-core-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el scsi-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el scsi-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el scsi-nic-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el scsi-nic-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el sound-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el sound-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el squashfs-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el squashfs-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el udf-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el udf-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el usb-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el usb-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el usb-serial-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el usb-serial-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el usb-storage-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el usb-storage-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el xfs-modules-5.10.0-28-5kc-malta-di | 5.10.209-2 | mips64el xfs-modules-5.10.0-31-5kc-malta-di | 5.10.221-1 | mips64el ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:31:05 -0000] [ftpmaster: Mark Hymers] Removed the following packages from oldstable: affs-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel affs-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel affs-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel affs-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel ata-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel ata-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel btrfs-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel btrfs-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel btrfs-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel btrfs-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel cdrom-core-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel cdrom-core-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel cdrom-core-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel cdrom-core-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel crc-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel crc-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel crc-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel crc-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel crypto-dm-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel crypto-dm-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel crypto-dm-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel crypto-dm-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel crypto-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel crypto-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel crypto-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel crypto-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel event-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel event-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel event-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel event-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel ext4-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel ext4-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel ext4-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel ext4-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel f2fs-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel f2fs-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel f2fs-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel f2fs-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel fat-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel fat-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel fat-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel fat-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel fb-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel fb-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel firewire-core-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel firewire-core-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel fuse-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel fuse-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel fuse-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel fuse-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel input-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel input-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel input-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel input-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel isofs-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel isofs-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel isofs-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel isofs-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel jfs-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel jfs-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel jfs-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel jfs-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel kernel-image-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel kernel-image-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel kernel-image-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel kernel-image-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel linux-headers-5.10.0-28-5kc-malta | 5.10.209-2 | mips64el, mipsel linux-headers-5.10.0-28-loongson-3 | 5.10.209-2 | mips64el, mipsel linux-headers-5.10.0-28-octeon | 5.10.209-2 | mips64el, mipsel linux-headers-5.10.0-31-5kc-malta | 5.10.221-1 | mips64el, mipsel linux-headers-5.10.0-31-loongson-3 | 5.10.221-1 | mips64el, mipsel linux-headers-5.10.0-31-octeon | 5.10.221-1 | mips64el, mipsel linux-image-5.10.0-28-5kc-malta | 5.10.209-2 | mips64el, mipsel linux-image-5.10.0-28-5kc-malta-dbg | 5.10.209-2 | mips64el, mipsel linux-image-5.10.0-28-loongson-3 | 5.10.209-2 | mips64el, mipsel linux-image-5.10.0-28-loongson-3-dbg | 5.10.209-2 | mips64el, mipsel linux-image-5.10.0-28-octeon | 5.10.209-2 | mips64el, mipsel linux-image-5.10.0-28-octeon-dbg | 5.10.209-2 | mips64el, mipsel linux-image-5.10.0-31-5kc-malta | 5.10.221-1 | mips64el, mipsel linux-image-5.10.0-31-5kc-malta-dbg | 5.10.221-1 | mips64el, mipsel linux-image-5.10.0-31-loongson-3 | 5.10.221-1 | mips64el, mipsel linux-image-5.10.0-31-loongson-3-dbg | 5.10.221-1 | mips64el, mipsel linux-image-5.10.0-31-octeon | 5.10.221-1 | mips64el, mipsel linux-image-5.10.0-31-octeon-dbg | 5.10.221-1 | mips64el, mipsel loop-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel loop-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel loop-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel loop-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel md-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel md-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel md-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel md-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel minix-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel minix-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel minix-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel minix-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel mtd-core-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel mtd-core-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel multipath-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel multipath-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel multipath-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel multipath-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel nbd-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel nbd-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel nbd-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel nbd-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel nfs-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel nfs-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel nic-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel nic-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel nic-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel nic-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel nic-shared-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel nic-shared-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel nic-shared-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel nic-shared-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel nic-usb-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel nic-usb-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel nic-usb-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel nic-usb-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel nic-wireless-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel nic-wireless-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel nic-wireless-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel nic-wireless-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel pata-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel pata-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel pata-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel pata-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel ppp-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel ppp-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel ppp-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel ppp-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel rtc-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel rtc-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel sata-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel sata-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel sata-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel sata-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel scsi-core-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel scsi-core-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel scsi-core-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel scsi-core-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel scsi-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel scsi-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel scsi-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel scsi-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel scsi-nic-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel scsi-nic-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel scsi-nic-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel scsi-nic-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel sound-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel sound-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel sound-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel sound-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel speakup-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel speakup-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel squashfs-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel squashfs-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel squashfs-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel squashfs-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel udf-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel udf-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel udf-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel udf-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel usb-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel usb-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel usb-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel usb-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel usb-serial-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel usb-serial-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel usb-serial-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel usb-serial-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel usb-storage-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel usb-storage-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel usb-storage-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel usb-storage-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel xfs-modules-5.10.0-28-loongson-3-di | 5.10.209-2 | mips64el, mipsel xfs-modules-5.10.0-28-octeon-di | 5.10.209-2 | mips64el, mipsel xfs-modules-5.10.0-31-loongson-3-di | 5.10.221-1 | mips64el, mipsel xfs-modules-5.10.0-31-octeon-di | 5.10.221-1 | mips64el, mipsel ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:31:17 -0000] [ftpmaster: Mark Hymers] Removed the following packages from oldstable: affs-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel affs-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel ata-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel ata-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel btrfs-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel btrfs-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel cdrom-core-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel cdrom-core-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel crc-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel crc-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel crypto-dm-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel crypto-dm-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel crypto-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel crypto-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel event-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel event-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel ext4-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel ext4-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel f2fs-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel f2fs-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel fat-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel fat-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel fb-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel fb-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel fuse-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel fuse-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel i2c-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel i2c-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel input-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel input-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel isofs-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel isofs-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel jfs-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel jfs-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel kernel-image-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel kernel-image-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel linux-headers-5.10.0-28-4kc-malta | 5.10.209-2 | mipsel linux-headers-5.10.0-31-4kc-malta | 5.10.221-1 | mipsel linux-image-5.10.0-28-4kc-malta | 5.10.209-2 | mipsel linux-image-5.10.0-28-4kc-malta-dbg | 5.10.209-2 | mipsel linux-image-5.10.0-31-4kc-malta | 5.10.221-1 | mipsel linux-image-5.10.0-31-4kc-malta-dbg | 5.10.221-1 | mipsel loop-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel loop-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel md-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel md-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel minix-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel minix-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel mmc-core-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel mmc-core-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel mmc-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel mmc-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel mouse-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel mouse-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel mtd-core-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel mtd-core-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel multipath-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel multipath-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel nbd-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel nbd-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel nic-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel nic-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel nic-shared-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel nic-shared-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel nic-usb-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel nic-usb-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel nic-wireless-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel nic-wireless-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel pata-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel pata-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel ppp-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel ppp-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel sata-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel sata-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel scsi-core-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel scsi-core-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel scsi-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel scsi-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel scsi-nic-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel scsi-nic-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel sound-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel sound-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel squashfs-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel squashfs-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel udf-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel udf-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel usb-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel usb-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel usb-serial-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel usb-serial-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel usb-storage-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel usb-storage-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel xfs-modules-5.10.0-28-4kc-malta-di | 5.10.209-2 | mipsel xfs-modules-5.10.0-31-4kc-malta-di | 5.10.221-1 | mipsel ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:31:27 -0000] [ftpmaster: Mark Hymers] Removed the following packages from oldstable: ata-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el ata-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el btrfs-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el btrfs-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el cdrom-core-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el cdrom-core-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el crc-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el crc-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el crypto-dm-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el crypto-dm-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el crypto-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el crypto-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el event-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el event-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el ext4-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el ext4-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el f2fs-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el f2fs-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el fancontrol-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el fancontrol-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el fat-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el fat-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el fb-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el fb-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el firewire-core-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el firewire-core-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el fuse-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el fuse-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el hypervisor-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el hypervisor-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el i2c-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el i2c-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el input-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el input-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el isofs-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el isofs-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el jfs-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el jfs-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el kernel-image-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el kernel-image-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el linux-headers-5.10.0-28-powerpc64le | 5.10.209-2 | ppc64el linux-headers-5.10.0-31-powerpc64le | 5.10.221-1 | ppc64el linux-image-5.10.0-28-powerpc64le | 5.10.209-2 | ppc64el linux-image-5.10.0-28-powerpc64le-dbg | 5.10.209-2 | ppc64el linux-image-5.10.0-31-powerpc64le | 5.10.221-1 | ppc64el linux-image-5.10.0-31-powerpc64le-dbg | 5.10.221-1 | ppc64el loop-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el loop-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el md-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el md-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el mouse-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el mouse-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el mtd-core-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el mtd-core-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el multipath-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el multipath-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el nbd-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el nbd-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el nic-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el nic-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el nic-shared-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el nic-shared-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el nic-usb-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el nic-usb-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el nic-wireless-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el nic-wireless-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el ppp-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el ppp-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el sata-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el sata-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el scsi-core-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el scsi-core-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el scsi-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el scsi-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el scsi-nic-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el scsi-nic-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el serial-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el serial-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el squashfs-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el squashfs-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el udf-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el udf-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el uinput-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el uinput-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el usb-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el usb-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el usb-serial-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el usb-serial-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el usb-storage-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el usb-storage-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el xfs-modules-5.10.0-28-powerpc64le-di | 5.10.209-2 | ppc64el xfs-modules-5.10.0-31-powerpc64le-di | 5.10.221-1 | ppc64el ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:31:37 -0000] [ftpmaster: Mark Hymers] Removed the following packages from oldstable: linux-headers-5.10.0-28-amd64 | 5.10.209-2 | amd64 linux-headers-5.10.0-28-cloud-amd64 | 5.10.209-2 | amd64 linux-headers-5.10.0-28-rt-amd64 | 5.10.209-2 | amd64 linux-headers-5.10.0-31-amd64 | 5.10.221-1 | amd64 linux-headers-5.10.0-31-cloud-amd64 | 5.10.221-1 | amd64 linux-headers-5.10.0-31-rt-amd64 | 5.10.221-1 | amd64 linux-image-5.10.0-28-amd64-dbg | 5.10.209-2 | amd64 linux-image-5.10.0-28-amd64-unsigned | 5.10.209-2 | amd64 linux-image-5.10.0-28-cloud-amd64-dbg | 5.10.209-2 | amd64 linux-image-5.10.0-28-cloud-amd64-unsigned | 5.10.209-2 | amd64 linux-image-5.10.0-28-rt-amd64-dbg | 5.10.209-2 | amd64 linux-image-5.10.0-28-rt-amd64-unsigned | 5.10.209-2 | amd64 linux-image-5.10.0-31-amd64-dbg | 5.10.221-1 | amd64 linux-image-5.10.0-31-amd64-unsigned | 5.10.221-1 | amd64 linux-image-5.10.0-31-cloud-amd64-dbg | 5.10.221-1 | amd64 linux-image-5.10.0-31-cloud-amd64-unsigned | 5.10.221-1 | amd64 linux-image-5.10.0-31-rt-amd64-dbg | 5.10.221-1 | amd64 linux-image-5.10.0-31-rt-amd64-unsigned | 5.10.221-1 | amd64 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:31:47 -0000] [ftpmaster: Mark Hymers] Removed the following packages from oldstable: linux-headers-5.10.0-28-arm64 | 5.10.209-2 | arm64 linux-headers-5.10.0-28-cloud-arm64 | 5.10.209-2 | arm64 linux-headers-5.10.0-28-rt-arm64 | 5.10.209-2 | arm64 linux-headers-5.10.0-31-arm64 | 5.10.221-1 | arm64 linux-headers-5.10.0-31-cloud-arm64 | 5.10.221-1 | arm64 linux-headers-5.10.0-31-rt-arm64 | 5.10.221-1 | arm64 linux-image-5.10.0-28-arm64-dbg | 5.10.209-2 | arm64 linux-image-5.10.0-28-arm64-unsigned | 5.10.209-2 | arm64 linux-image-5.10.0-28-cloud-arm64-dbg | 5.10.209-2 | arm64 linux-image-5.10.0-28-cloud-arm64-unsigned | 5.10.209-2 | arm64 linux-image-5.10.0-28-rt-arm64-dbg | 5.10.209-2 | arm64 linux-image-5.10.0-28-rt-arm64-unsigned | 5.10.209-2 | arm64 linux-image-5.10.0-31-arm64-dbg | 5.10.221-1 | arm64 linux-image-5.10.0-31-arm64-unsigned | 5.10.221-1 | arm64 linux-image-5.10.0-31-cloud-arm64-dbg | 5.10.221-1 | arm64 linux-image-5.10.0-31-cloud-arm64-unsigned | 5.10.221-1 | arm64 linux-image-5.10.0-31-rt-arm64-dbg | 5.10.221-1 | arm64 linux-image-5.10.0-31-rt-arm64-unsigned | 5.10.221-1 | arm64 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:31:58 -0000] [ftpmaster: Mark Hymers] Removed the following packages from oldstable: btrfs-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel btrfs-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel cdrom-core-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel cdrom-core-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel crc-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel crc-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel crypto-dm-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel crypto-dm-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel crypto-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel crypto-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel event-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel event-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel ext4-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel ext4-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel f2fs-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel f2fs-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel fat-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel fat-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel fb-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel fb-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel fuse-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel fuse-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel input-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel input-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel ipv6-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel ipv6-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel isofs-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel isofs-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel jffs2-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel jffs2-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel jfs-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel jfs-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel kernel-image-5.10.0-28-marvell-di | 5.10.209-2 | armel kernel-image-5.10.0-31-marvell-di | 5.10.221-1 | armel leds-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel leds-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel linux-headers-5.10.0-28-marvell | 5.10.209-2 | armel linux-headers-5.10.0-28-rpi | 5.10.209-2 | armel linux-headers-5.10.0-31-marvell | 5.10.221-1 | armel linux-headers-5.10.0-31-rpi | 5.10.221-1 | armel linux-image-5.10.0-28-marvell | 5.10.209-2 | armel linux-image-5.10.0-28-marvell-dbg | 5.10.209-2 | armel linux-image-5.10.0-28-rpi | 5.10.209-2 | armel linux-image-5.10.0-28-rpi-dbg | 5.10.209-2 | armel linux-image-5.10.0-31-marvell | 5.10.221-1 | armel linux-image-5.10.0-31-marvell-dbg | 5.10.221-1 | armel linux-image-5.10.0-31-rpi | 5.10.221-1 | armel linux-image-5.10.0-31-rpi-dbg | 5.10.221-1 | armel loop-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel loop-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel md-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel md-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel minix-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel minix-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel mmc-core-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel mmc-core-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel mmc-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel mmc-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel mouse-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel mouse-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel mtd-core-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel mtd-core-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel mtd-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel mtd-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel multipath-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel multipath-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel nbd-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel nbd-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel nic-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel nic-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel nic-shared-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel nic-shared-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel nic-usb-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel nic-usb-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel ppp-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel ppp-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel sata-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel sata-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel scsi-core-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel scsi-core-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel squashfs-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel squashfs-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel udf-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel udf-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel uinput-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel uinput-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel usb-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel usb-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel usb-serial-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel usb-serial-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel usb-storage-modules-5.10.0-28-marvell-di | 5.10.209-2 | armel usb-storage-modules-5.10.0-31-marvell-di | 5.10.221-1 | armel ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:32:42 -0000] [ftpmaster: Mark Hymers] Removed the following packages from oldstable: ata-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf ata-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf btrfs-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf btrfs-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf cdrom-core-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf cdrom-core-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf crc-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf crc-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf crypto-dm-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf crypto-dm-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf crypto-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf crypto-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf efi-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf efi-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf event-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf event-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf ext4-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf ext4-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf f2fs-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf f2fs-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf fat-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf fat-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf fb-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf fb-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf fuse-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf fuse-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf i2c-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf i2c-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf input-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf input-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf isofs-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf isofs-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf jfs-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf jfs-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf kernel-image-5.10.0-28-armmp-di | 5.10.209-2 | armhf kernel-image-5.10.0-31-armmp-di | 5.10.221-1 | armhf leds-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf leds-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf linux-headers-5.10.0-28-armmp | 5.10.209-2 | armhf linux-headers-5.10.0-28-armmp-lpae | 5.10.209-2 | armhf linux-headers-5.10.0-28-rt-armmp | 5.10.209-2 | armhf linux-headers-5.10.0-31-armmp | 5.10.221-1 | armhf linux-headers-5.10.0-31-armmp-lpae | 5.10.221-1 | armhf linux-headers-5.10.0-31-rt-armmp | 5.10.221-1 | armhf linux-image-5.10.0-28-armmp | 5.10.209-2 | armhf linux-image-5.10.0-28-armmp-dbg | 5.10.209-2 | armhf linux-image-5.10.0-28-armmp-lpae | 5.10.209-2 | armhf linux-image-5.10.0-28-armmp-lpae-dbg | 5.10.209-2 | armhf linux-image-5.10.0-28-rt-armmp | 5.10.209-2 | armhf linux-image-5.10.0-28-rt-armmp-dbg | 5.10.209-2 | armhf linux-image-5.10.0-31-armmp | 5.10.221-1 | armhf linux-image-5.10.0-31-armmp-dbg | 5.10.221-1 | armhf linux-image-5.10.0-31-armmp-lpae | 5.10.221-1 | armhf linux-image-5.10.0-31-armmp-lpae-dbg | 5.10.221-1 | armhf linux-image-5.10.0-31-rt-armmp | 5.10.221-1 | armhf linux-image-5.10.0-31-rt-armmp-dbg | 5.10.221-1 | armhf loop-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf loop-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf md-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf md-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf mmc-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf mmc-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf mtd-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf mtd-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf multipath-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf multipath-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf nbd-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf nbd-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf nic-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf nic-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf nic-shared-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf nic-shared-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf nic-usb-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf nic-usb-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf nic-wireless-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf nic-wireless-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf pata-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf pata-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf ppp-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf ppp-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf sata-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf sata-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf scsi-core-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf scsi-core-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf scsi-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf scsi-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf scsi-nic-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf scsi-nic-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf squashfs-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf squashfs-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf udf-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf udf-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf uinput-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf uinput-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf usb-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf usb-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf usb-serial-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf usb-serial-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf usb-storage-modules-5.10.0-28-armmp-di | 5.10.209-2 | armhf usb-storage-modules-5.10.0-31-armmp-di | 5.10.221-1 | armhf ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:32:52 -0000] [ftpmaster: Mark Hymers] Removed the following packages from oldstable: linux-headers-5.10.0-28-686 | 5.10.209-2 | i386 linux-headers-5.10.0-28-686-pae | 5.10.209-2 | i386 linux-headers-5.10.0-28-rt-686-pae | 5.10.209-2 | i386 linux-headers-5.10.0-31-686 | 5.10.221-1 | i386 linux-headers-5.10.0-31-686-pae | 5.10.221-1 | i386 linux-headers-5.10.0-31-rt-686-pae | 5.10.221-1 | i386 linux-image-5.10.0-28-686-dbg | 5.10.209-2 | i386 linux-image-5.10.0-28-686-pae-dbg | 5.10.209-2 | i386 linux-image-5.10.0-28-686-pae-unsigned | 5.10.209-2 | i386 linux-image-5.10.0-28-686-unsigned | 5.10.209-2 | i386 linux-image-5.10.0-28-rt-686-pae-dbg | 5.10.209-2 | i386 linux-image-5.10.0-28-rt-686-pae-unsigned | 5.10.209-2 | i386 linux-image-5.10.0-31-686-dbg | 5.10.221-1 | i386 linux-image-5.10.0-31-686-pae-dbg | 5.10.221-1 | i386 linux-image-5.10.0-31-686-pae-unsigned | 5.10.221-1 | i386 linux-image-5.10.0-31-686-unsigned | 5.10.221-1 | i386 linux-image-5.10.0-31-rt-686-pae-dbg | 5.10.221-1 | i386 linux-image-5.10.0-31-rt-686-pae-unsigned | 5.10.221-1 | i386 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:33:02 -0000] [ftpmaster: Mark Hymers] Removed the following packages from oldstable: acpi-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 acpi-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 ata-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 ata-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 btrfs-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 btrfs-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 cdrom-core-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 cdrom-core-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 crc-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 crc-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 crypto-dm-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 crypto-dm-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 crypto-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 crypto-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 efi-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 efi-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 event-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 event-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 ext4-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 ext4-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 f2fs-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 f2fs-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 fat-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 fat-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 fb-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 fb-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 firewire-core-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 firewire-core-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 fuse-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 fuse-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 i2c-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 i2c-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 input-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 input-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 isofs-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 isofs-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 jfs-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 jfs-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 kernel-image-5.10.0-28-amd64-di | 5.10.209-2 | amd64 kernel-image-5.10.0-31-amd64-di | 5.10.221-1 | amd64 linux-image-5.10.0-28-amd64 | 5.10.209-2 | amd64 linux-image-5.10.0-28-cloud-amd64 | 5.10.209-2 | amd64 linux-image-5.10.0-28-rt-amd64 | 5.10.209-2 | amd64 linux-image-5.10.0-31-amd64 | 5.10.221-1 | amd64 linux-image-5.10.0-31-cloud-amd64 | 5.10.221-1 | amd64 linux-image-5.10.0-31-rt-amd64 | 5.10.221-1 | amd64 loop-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 loop-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 md-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 md-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 mmc-core-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 mmc-core-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 mmc-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 mmc-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 mouse-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 mouse-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 mtd-core-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 mtd-core-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 multipath-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 multipath-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 nbd-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 nbd-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 nic-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 nic-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 nic-pcmcia-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 nic-pcmcia-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 nic-shared-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 nic-shared-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 nic-usb-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 nic-usb-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 nic-wireless-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 nic-wireless-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 pata-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 pata-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 pcmcia-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 pcmcia-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 pcmcia-storage-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 pcmcia-storage-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 ppp-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 ppp-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 rfkill-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 rfkill-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 sata-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 sata-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 scsi-core-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 scsi-core-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 scsi-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 scsi-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 scsi-nic-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 scsi-nic-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 serial-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 serial-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 sound-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 sound-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 speakup-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 speakup-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 squashfs-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 squashfs-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 udf-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 udf-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 uinput-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 uinput-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 usb-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 usb-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 usb-serial-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 usb-serial-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 usb-storage-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 usb-storage-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 xfs-modules-5.10.0-28-amd64-di | 5.10.209-2 | amd64 xfs-modules-5.10.0-31-amd64-di | 5.10.221-1 | amd64 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux-signed-amd64) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:33:14 -0000] [ftpmaster: Mark Hymers] Removed the following packages from oldstable: ata-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 ata-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 btrfs-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 btrfs-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 cdrom-core-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 cdrom-core-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 crc-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 crc-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 crypto-dm-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 crypto-dm-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 crypto-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 crypto-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 efi-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 efi-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 event-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 event-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 ext4-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 ext4-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 f2fs-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 f2fs-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 fat-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 fat-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 fb-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 fb-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 fuse-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 fuse-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 i2c-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 i2c-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 input-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 input-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 isofs-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 isofs-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 jfs-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 jfs-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 kernel-image-5.10.0-28-arm64-di | 5.10.209-2 | arm64 kernel-image-5.10.0-31-arm64-di | 5.10.221-1 | arm64 leds-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 leds-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 linux-image-5.10.0-28-arm64 | 5.10.209-2 | arm64 linux-image-5.10.0-28-cloud-arm64 | 5.10.209-2 | arm64 linux-image-5.10.0-28-rt-arm64 | 5.10.209-2 | arm64 linux-image-5.10.0-31-arm64 | 5.10.221-1 | arm64 linux-image-5.10.0-31-cloud-arm64 | 5.10.221-1 | arm64 linux-image-5.10.0-31-rt-arm64 | 5.10.221-1 | arm64 loop-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 loop-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 md-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 md-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 mmc-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 mmc-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 mtd-core-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 mtd-core-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 multipath-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 multipath-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 nbd-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 nbd-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 nic-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 nic-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 nic-shared-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 nic-shared-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 nic-usb-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 nic-usb-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 nic-wireless-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 nic-wireless-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 ppp-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 ppp-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 sata-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 sata-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 scsi-core-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 scsi-core-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 scsi-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 scsi-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 scsi-nic-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 scsi-nic-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 squashfs-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 squashfs-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 udf-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 udf-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 uinput-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 uinput-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 usb-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 usb-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 usb-serial-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 usb-serial-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 usb-storage-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 usb-storage-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 xfs-modules-5.10.0-28-arm64-di | 5.10.209-2 | arm64 xfs-modules-5.10.0-31-arm64-di | 5.10.221-1 | arm64 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux-signed-arm64) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:33:24 -0000] [ftpmaster: Mark Hymers] Removed the following packages from oldstable: acpi-modules-5.10.0-28-686-di | 5.10.209-2 | i386 acpi-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 acpi-modules-5.10.0-31-686-di | 5.10.221-1 | i386 acpi-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 ata-modules-5.10.0-28-686-di | 5.10.209-2 | i386 ata-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 ata-modules-5.10.0-31-686-di | 5.10.221-1 | i386 ata-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 btrfs-modules-5.10.0-28-686-di | 5.10.209-2 | i386 btrfs-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 btrfs-modules-5.10.0-31-686-di | 5.10.221-1 | i386 btrfs-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 cdrom-core-modules-5.10.0-28-686-di | 5.10.209-2 | i386 cdrom-core-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 cdrom-core-modules-5.10.0-31-686-di | 5.10.221-1 | i386 cdrom-core-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 crc-modules-5.10.0-28-686-di | 5.10.209-2 | i386 crc-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 crc-modules-5.10.0-31-686-di | 5.10.221-1 | i386 crc-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 crypto-dm-modules-5.10.0-28-686-di | 5.10.209-2 | i386 crypto-dm-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 crypto-dm-modules-5.10.0-31-686-di | 5.10.221-1 | i386 crypto-dm-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 crypto-modules-5.10.0-28-686-di | 5.10.209-2 | i386 crypto-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 crypto-modules-5.10.0-31-686-di | 5.10.221-1 | i386 crypto-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 efi-modules-5.10.0-28-686-di | 5.10.209-2 | i386 efi-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 efi-modules-5.10.0-31-686-di | 5.10.221-1 | i386 efi-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 event-modules-5.10.0-28-686-di | 5.10.209-2 | i386 event-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 event-modules-5.10.0-31-686-di | 5.10.221-1 | i386 event-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 ext4-modules-5.10.0-28-686-di | 5.10.209-2 | i386 ext4-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 ext4-modules-5.10.0-31-686-di | 5.10.221-1 | i386 ext4-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 f2fs-modules-5.10.0-28-686-di | 5.10.209-2 | i386 f2fs-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 f2fs-modules-5.10.0-31-686-di | 5.10.221-1 | i386 f2fs-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 fat-modules-5.10.0-28-686-di | 5.10.209-2 | i386 fat-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 fat-modules-5.10.0-31-686-di | 5.10.221-1 | i386 fat-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 fb-modules-5.10.0-28-686-di | 5.10.209-2 | i386 fb-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 fb-modules-5.10.0-31-686-di | 5.10.221-1 | i386 fb-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 firewire-core-modules-5.10.0-28-686-di | 5.10.209-2 | i386 firewire-core-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 firewire-core-modules-5.10.0-31-686-di | 5.10.221-1 | i386 firewire-core-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 fuse-modules-5.10.0-28-686-di | 5.10.209-2 | i386 fuse-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 fuse-modules-5.10.0-31-686-di | 5.10.221-1 | i386 fuse-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 i2c-modules-5.10.0-28-686-di | 5.10.209-2 | i386 i2c-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 i2c-modules-5.10.0-31-686-di | 5.10.221-1 | i386 i2c-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 input-modules-5.10.0-28-686-di | 5.10.209-2 | i386 input-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 input-modules-5.10.0-31-686-di | 5.10.221-1 | i386 input-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 isofs-modules-5.10.0-28-686-di | 5.10.209-2 | i386 isofs-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 isofs-modules-5.10.0-31-686-di | 5.10.221-1 | i386 isofs-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 jfs-modules-5.10.0-28-686-di | 5.10.209-2 | i386 jfs-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 jfs-modules-5.10.0-31-686-di | 5.10.221-1 | i386 jfs-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 kernel-image-5.10.0-28-686-di | 5.10.209-2 | i386 kernel-image-5.10.0-28-686-pae-di | 5.10.209-2 | i386 kernel-image-5.10.0-31-686-di | 5.10.221-1 | i386 kernel-image-5.10.0-31-686-pae-di | 5.10.221-1 | i386 linux-image-5.10.0-28-686 | 5.10.209-2 | i386 linux-image-5.10.0-28-686-pae | 5.10.209-2 | i386 linux-image-5.10.0-28-rt-686-pae | 5.10.209-2 | i386 linux-image-5.10.0-31-686 | 5.10.221-1 | i386 linux-image-5.10.0-31-686-pae | 5.10.221-1 | i386 linux-image-5.10.0-31-rt-686-pae | 5.10.221-1 | i386 loop-modules-5.10.0-28-686-di | 5.10.209-2 | i386 loop-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 loop-modules-5.10.0-31-686-di | 5.10.221-1 | i386 loop-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 md-modules-5.10.0-28-686-di | 5.10.209-2 | i386 md-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 md-modules-5.10.0-31-686-di | 5.10.221-1 | i386 md-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 mmc-core-modules-5.10.0-28-686-di | 5.10.209-2 | i386 mmc-core-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 mmc-core-modules-5.10.0-31-686-di | 5.10.221-1 | i386 mmc-core-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 mmc-modules-5.10.0-28-686-di | 5.10.209-2 | i386 mmc-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 mmc-modules-5.10.0-31-686-di | 5.10.221-1 | i386 mmc-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 mouse-modules-5.10.0-28-686-di | 5.10.209-2 | i386 mouse-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 mouse-modules-5.10.0-31-686-di | 5.10.221-1 | i386 mouse-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 mtd-core-modules-5.10.0-28-686-di | 5.10.209-2 | i386 mtd-core-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 mtd-core-modules-5.10.0-31-686-di | 5.10.221-1 | i386 mtd-core-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 multipath-modules-5.10.0-28-686-di | 5.10.209-2 | i386 multipath-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 multipath-modules-5.10.0-31-686-di | 5.10.221-1 | i386 multipath-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 nbd-modules-5.10.0-28-686-di | 5.10.209-2 | i386 nbd-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 nbd-modules-5.10.0-31-686-di | 5.10.221-1 | i386 nbd-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 nic-modules-5.10.0-28-686-di | 5.10.209-2 | i386 nic-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 nic-modules-5.10.0-31-686-di | 5.10.221-1 | i386 nic-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 nic-pcmcia-modules-5.10.0-28-686-di | 5.10.209-2 | i386 nic-pcmcia-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 nic-pcmcia-modules-5.10.0-31-686-di | 5.10.221-1 | i386 nic-pcmcia-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 nic-shared-modules-5.10.0-28-686-di | 5.10.209-2 | i386 nic-shared-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 nic-shared-modules-5.10.0-31-686-di | 5.10.221-1 | i386 nic-shared-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 nic-usb-modules-5.10.0-28-686-di | 5.10.209-2 | i386 nic-usb-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 nic-usb-modules-5.10.0-31-686-di | 5.10.221-1 | i386 nic-usb-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 nic-wireless-modules-5.10.0-28-686-di | 5.10.209-2 | i386 nic-wireless-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 nic-wireless-modules-5.10.0-31-686-di | 5.10.221-1 | i386 nic-wireless-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 pata-modules-5.10.0-28-686-di | 5.10.209-2 | i386 pata-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 pata-modules-5.10.0-31-686-di | 5.10.221-1 | i386 pata-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 pcmcia-modules-5.10.0-28-686-di | 5.10.209-2 | i386 pcmcia-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 pcmcia-modules-5.10.0-31-686-di | 5.10.221-1 | i386 pcmcia-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 pcmcia-storage-modules-5.10.0-28-686-di | 5.10.209-2 | i386 pcmcia-storage-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 pcmcia-storage-modules-5.10.0-31-686-di | 5.10.221-1 | i386 pcmcia-storage-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 ppp-modules-5.10.0-28-686-di | 5.10.209-2 | i386 ppp-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 ppp-modules-5.10.0-31-686-di | 5.10.221-1 | i386 ppp-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 rfkill-modules-5.10.0-28-686-di | 5.10.209-2 | i386 rfkill-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 rfkill-modules-5.10.0-31-686-di | 5.10.221-1 | i386 rfkill-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 sata-modules-5.10.0-28-686-di | 5.10.209-2 | i386 sata-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 sata-modules-5.10.0-31-686-di | 5.10.221-1 | i386 sata-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 scsi-core-modules-5.10.0-28-686-di | 5.10.209-2 | i386 scsi-core-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 scsi-core-modules-5.10.0-31-686-di | 5.10.221-1 | i386 scsi-core-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 scsi-modules-5.10.0-28-686-di | 5.10.209-2 | i386 scsi-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 scsi-modules-5.10.0-31-686-di | 5.10.221-1 | i386 scsi-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 scsi-nic-modules-5.10.0-28-686-di | 5.10.209-2 | i386 scsi-nic-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 scsi-nic-modules-5.10.0-31-686-di | 5.10.221-1 | i386 scsi-nic-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 serial-modules-5.10.0-28-686-di | 5.10.209-2 | i386 serial-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 serial-modules-5.10.0-31-686-di | 5.10.221-1 | i386 serial-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 sound-modules-5.10.0-28-686-di | 5.10.209-2 | i386 sound-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 sound-modules-5.10.0-31-686-di | 5.10.221-1 | i386 sound-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 speakup-modules-5.10.0-28-686-di | 5.10.209-2 | i386 speakup-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 speakup-modules-5.10.0-31-686-di | 5.10.221-1 | i386 speakup-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 squashfs-modules-5.10.0-28-686-di | 5.10.209-2 | i386 squashfs-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 squashfs-modules-5.10.0-31-686-di | 5.10.221-1 | i386 squashfs-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 udf-modules-5.10.0-28-686-di | 5.10.209-2 | i386 udf-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 udf-modules-5.10.0-31-686-di | 5.10.221-1 | i386 udf-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 uinput-modules-5.10.0-28-686-di | 5.10.209-2 | i386 uinput-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 uinput-modules-5.10.0-31-686-di | 5.10.221-1 | i386 uinput-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 usb-modules-5.10.0-28-686-di | 5.10.209-2 | i386 usb-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 usb-modules-5.10.0-31-686-di | 5.10.221-1 | i386 usb-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 usb-serial-modules-5.10.0-28-686-di | 5.10.209-2 | i386 usb-serial-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 usb-serial-modules-5.10.0-31-686-di | 5.10.221-1 | i386 usb-serial-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 usb-storage-modules-5.10.0-28-686-di | 5.10.209-2 | i386 usb-storage-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 usb-storage-modules-5.10.0-31-686-di | 5.10.221-1 | i386 usb-storage-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 xfs-modules-5.10.0-28-686-di | 5.10.209-2 | i386 xfs-modules-5.10.0-28-686-pae-di | 5.10.209-2 | i386 xfs-modules-5.10.0-31-686-di | 5.10.221-1 | i386 xfs-modules-5.10.0-31-686-pae-di | 5.10.221-1 | i386 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux-signed-i386) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:34:27 -0000] [ftpmaster: Mark Hymers] Removed the following packages from oldstable: linux-headers-5.10.0-28-common | 5.10.209-2 | all linux-headers-5.10.0-28-common-rt | 5.10.209-2 | all linux-headers-5.10.0-31-common | 5.10.221-1 | all linux-headers-5.10.0-31-common-rt | 5.10.221-1 | all linux-support-5.10.0-28 | 5.10.209-2 | all linux-support-5.10.0-31 | 5.10.221-1 | all ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux - based on source metadata) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:35:26 -0000] [ftpmaster: Mark Hymers] Removed the following packages from oldstable: libstd-rust-web-1.70 | 1.70.0+dfsg1-7~deb11u1 | i386 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by rustc-web - based on source metadata) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:35:54 -0000] [ftpmaster: Mark Hymers] Removed the following packages from oldstable: libstd-rust-web-1.70 | 1.70.0+dfsg1-7~deb11u1 | amd64 rustfmt | 1.78.0+dfsg1-2~deb11u1 | amd64 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by rustc-web - based on source metadata) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:36:09 -0000] [ftpmaster: Mark Hymers] Removed the following packages from oldstable: libstd-rust-web-1.70 | 1.70.0+dfsg1-7~deb11u1 | armhf ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by rustc-web - based on source metadata) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:36:33 -0000] [ftpmaster: Mark Hymers] Removed the following packages from oldstable: libstd-rust-web-1.70 | 1.70.0+dfsg1-7~deb11u1 | s390x ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by rustc-web - based on source metadata) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:36:47 -0000] [ftpmaster: Mark Hymers] Removed the following packages from oldstable: libstd-rust-web-1.70 | 1.70.0+dfsg1-7~deb11u1 | arm64 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by rustc-web - based on source metadata) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:37:07 -0000] [ftpmaster: Mark Hymers] Removed the following packages from oldstable: libstd-rust-web-1.70 | 1.70.0+dfsg1-7~deb11u1 | ppc64el ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by rustc-web - based on source metadata) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:22:19 -0000] [ftpmaster: Archive Administrator] Removed the following packages from bullseye: obfs4proxy | 0.0.8-1 | source obfs4proxy | 0.0.8-1+b6 | amd64, arm64, armel, armhf, i386, mips64el, mipsel, ppc64el, s390x Closed bugs: 1008164 ------------------- Reason ------------------- RoM; security issues ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:22:44 -0000] [ftpmaster: Archive Administrator] Removed the following packages from bullseye: iotjs | 1.0+715-1 | source, amd64, arm64, armel, armhf, i386, mips64el, mipsel, ppc64el, s390x iotjs-dev | 1.0+715-1 | amd64, arm64, armel, armhf, i386, mips64el, mipsel, ppc64el, s390x Closed bugs: 1078334 ------------------- Reason ------------------- RoQA: unmaintained; many security issues ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:23:26 -0000] [ftpmaster: Archive Administrator] Removed the following packages from bullseye: bcachefs-tools | 0.1+git20201025.742dbbdb-1 | source, amd64 Closed bugs: 1078588 ------------------- Reason ------------------- RoM; buggy, obsolete ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 31 Aug 2024 10:23:52 -0000] [ftpmaster: Archive Administrator] Removed the following packages from bullseye: dnet-common | 2.65 | all dnet-progs | 2.65+b2 | amd64, arm64, armel, armhf, i386, mips64el, mipsel, ppc64el, s390x dnprogs | 2.65 | source libdnet | 2.65+b2 | amd64, arm64, armel, armhf, i386, mips64el, mipsel, ppc64el, s390x libdnet-dev | 2.65+b2 | amd64, arm64, armel, armhf, i386, mips64el, mipsel, ppc64el, s390x Closed bugs: 1079021 ------------------- Reason ------------------- RoQA; obsolete; unbuildable ---------------------------------------------- ========================================================================= amd64-microcode (3.20240820.1~deb11u1) bullseye; urgency=medium . * Rebuild for bullseye * Revert merged-usr changes from unstable * Revert move to non-free-firmware . amd64-microcode (3.20240820.1) unstable; urgency=high . * Update package data from linux-firmware 20240820 * New AMD-SEV firmware from AMD upstream (20240820) + Updated SEV firmware: Family 17h models 30h-3fh: version 0.24 build 20 Family 19h models 00h-0fh: version 1.55 build 21 Family 19h models 10h-1fh: version 1.55 build 37 + New SEV firmware: Family 19h models a0h-afh: version 1.55 build 37 * SECURITY UPDATE (AMD-SB-3003): * Mitigates CVE-2023-20584: IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity. * Mitigates CVE-2023-31356: Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, potentially resulting in a loss of data integrity. amd64-microcode (3.20240710.2) unstable; urgency=high . * postrm: activate the update-initramfs dpkg trigger on remove/purge instead of always executing update-initramfs directly, just like it was done for postinst in 3.20240710.1: call update-initramfs directly only if the dpkg-trigger activation call fails. amd64-microcode (3.20240710.2~deb12u1) bookworm; urgency=high . * Rebuild for bookworm (revert merged-usr changes from unstable) . amd64-microcode (3.20240710.2) unstable; urgency=high . * postrm: activate the update-initramfs dpkg trigger on remove/purge instead of always executing update-initramfs directly, just like it was done for postinst in 3.20240710.1: call update-initramfs directly only if the dpkg-trigger activation call fails. . amd64-microcode (3.20240710.1) unstable; urgency=high . * Update package data from linux-firmware 20240709-141-g59460076 (closes: #1076128) * SECURITY UPDATE: Mitigates "Sinkclose" CVE-2023-31315 (AMD-SB-7014) on AMD Epyc processors: SMM lock bypass - Improper validation in a model specific register (MSR) could allow a malicious program with ring 0 access (kernel) to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution. Note: a firmware update is recommended for AMD Epyc (to protect the system as early as possible). Many other AMD processor models are also vulnerable to SinkClose, and can only be fixed by a firmware update at this time. * Updated Microcode patches: + Family=0x17 Model=0x01 Stepping=0x02: Patch=0x0800126f + Family=0x17 Model=0x31 Stepping=0x00: Patch=0x0830107c + Family=0x19 Model=0x01 Stepping=0x00: Patch=0x0a00107a + Family=0x19 Model=0x11 Stepping=0x02: Patch=0x0a101248 + Family=0x19 Model=0xa0 Stepping=0x02: Patch=0x0aa00215 + Family=0x19 Model=0x01 Stepping=0x02: Patch=0x0a001238 + Family=0x19 Model=0x11 Stepping=0x01: Patch=0x0a101148 + Family=0x19 Model=0x01 Stepping=0x01: Patch=0x0a0011d5 * README.Debian: "late" microcode updates are unsupported in Debian (closes: #1074514) * postinst: use dpkg-trigger to activate update-initramfs, this enables dracut integration (closes: #1000193) . amd64-microcode (3.20240116.2) unstable; urgency=medium . * Add AMD-TEE firmware to the package (closes: #1062678) + amdtee: add amd_pmf TA firmware 20230906 * debian: install amdtee to /lib/firmware/amdtee * debian/control: update short and long descriptions * debian/copyright: update with amd-pmf license . amd64-microcode (3.20240116.1) unstable; urgency=medium . * Update package data from linux-firmware 20240115-80-gb4b04a5c * Updated Microcode patches: + Family=0x17 Model=0x31 Stepping=0x00: Patch=0x0830107b + Family=0x19 Model=0x01 Stepping=0x01: Patch=0x0a0011d3 + Family=0x19 Model=0x01 Stepping=0x02: Patch=0x0a001236 . amd64-microcode (3.20231019.1) unstable; urgency=medium . * Update package data from linux-firmware 20231019 * Updated Microcode patches: + Family=0x19 Model=0x11 Stepping=0x01: Patch=0x0a101144 + Family=0x19 Model=0x11 Stepping=0x02: Patch=0x0a101244 + Family=0x19 Model=0xa0 Stepping=0x02: Patch=0x0aa00213 . amd64-microcode (3.20230823.1) unstable; urgency=medium . * Update package data from linux-firmware 20230919 * New AMD-SEV firmware from AMD upstream (20230823) + Updated SEV firmware: Family 19h models 00h-0fh: version 1.55 build 8 + New SEV firmware: Family 19h models 10h-1fh: version 1.55 build 21 * amd-ucode: Add note on fam19h warnings. amd64-microcode (3.20240710.2~deb11u1) bullseye; urgency=high . * Rebuild for bullseye * Revert merged-usr changes from unstable * Revert move to non-free-firmware . amd64-microcode (3.20240710.2) unstable; urgency=high . * postrm: activate the update-initramfs dpkg trigger on remove/purge instead of always executing update-initramfs directly, just like it was done for postinst in 3.20240710.1: call update-initramfs directly only if the dpkg-trigger activation call fails. . amd64-microcode (3.20240710.1) unstable; urgency=high . * Update package data from linux-firmware 20240709-141-g59460076 (closes: #1076128) * SECURITY UPDATE: Mitigates "Sinkclose" CVE-2023-31315 (AMD-SB-7014) on AMD Epyc processors: SMM lock bypass - Improper validation in a model specific register (MSR) could allow a malicious program with ring 0 access (kernel) to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution. Note: a firmware update is recommended for AMD Epyc (to protect the system as early as possible). Many other AMD processor models are also vulnerable to SinkClose, and can only be fixed by a firmware update at this time. * Updated Microcode patches: + Family=0x17 Model=0x01 Stepping=0x02: Patch=0x0800126f + Family=0x17 Model=0x31 Stepping=0x00: Patch=0x0830107c + Family=0x19 Model=0x01 Stepping=0x00: Patch=0x0a00107a + Family=0x19 Model=0x11 Stepping=0x02: Patch=0x0a101248 + Family=0x19 Model=0xa0 Stepping=0x02: Patch=0x0aa00215 + Family=0x19 Model=0x01 Stepping=0x02: Patch=0x0a001238 + Family=0x19 Model=0x11 Stepping=0x01: Patch=0x0a101148 + Family=0x19 Model=0x01 Stepping=0x01: Patch=0x0a0011d5 * README.Debian: "late" microcode updates are unsupported in Debian (closes: #1074514) * postinst: use dpkg-trigger to activate update-initramfs, this enables dracut integration (closes: #1000193) . amd64-microcode (3.20240116.2) unstable; urgency=medium . * Add AMD-TEE firmware to the package (closes: #1062678) + amdtee: add amd_pmf TA firmware 20230906 * debian: install amdtee to /lib/firmware/amdtee * debian/control: update short and long descriptions * debian/copyright: update with amd-pmf license . amd64-microcode (3.20240116.1) unstable; urgency=medium . * Update package data from linux-firmware 20240115-80-gb4b04a5c * Updated Microcode patches: + Family=0x17 Model=0x31 Stepping=0x00: Patch=0x0830107b + Family=0x19 Model=0x01 Stepping=0x01: Patch=0x0a0011d3 + Family=0x19 Model=0x01 Stepping=0x02: Patch=0x0a001236 . amd64-microcode (3.20231019.1) unstable; urgency=medium . * Update package data from linux-firmware 20231019 * Updated Microcode patches: + Family=0x19 Model=0x11 Stepping=0x01: Patch=0x0a101144 + Family=0x19 Model=0x11 Stepping=0x02: Patch=0x0a101244 + Family=0x19 Model=0xa0 Stepping=0x02: Patch=0x0aa00213 . amd64-microcode (3.20230823.1) unstable; urgency=medium . * Update package data from linux-firmware 20230919 * New AMD-SEV firmware from AMD upstream (20230823) + Updated SEV firmware: Family 19h models 00h-0fh: version 1.55 build 8 + New SEV firmware: Family 19h models 10h-1fh: version 1.55 build 21 * amd-ucode: Add note on fam19h warnings. amd64-microcode (3.20240710.1) unstable; urgency=high . * Update package data from linux-firmware 20240709-141-g59460076 (closes: #1076128) * SECURITY UPDATE: Mitigates "Sinkclose" CVE-2023-31315 (AMD-SB-7014) on AMD Epyc processors: SMM lock bypass - Improper validation in a model specific register (MSR) could allow a malicious program with ring 0 access (kernel) to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution. Note: a firmware update is recommended for AMD Epyc (to protect the system as early as possible). Many other AMD processor models are also vulnerable to SinkClose, and can only be fixed by a firmware update at this time. * Updated Microcode patches: + Family=0x17 Model=0x01 Stepping=0x02: Patch=0x0800126f + Family=0x17 Model=0x31 Stepping=0x00: Patch=0x0830107c + Family=0x19 Model=0x01 Stepping=0x00: Patch=0x0a00107a + Family=0x19 Model=0x11 Stepping=0x02: Patch=0x0a101248 + Family=0x19 Model=0xa0 Stepping=0x02: Patch=0x0aa00215 + Family=0x19 Model=0x01 Stepping=0x02: Patch=0x0a001238 + Family=0x19 Model=0x11 Stepping=0x01: Patch=0x0a101148 + Family=0x19 Model=0x01 Stepping=0x01: Patch=0x0a0011d5 * README.Debian: "late" microcode updates are unsupported in Debian (closes: #1074514) * postinst: use dpkg-trigger to activate update-initramfs, this enables dracut integration (closes: #1000193) amd64-microcode (3.20240116.2+nmu1) unstable; urgency=medium . * Non-maintainer upload. * Install files into /usr instead of /. (Closes: 1059372) amd64-microcode (3.20240116.2) unstable; urgency=medium . * Add AMD-TEE firmware to the package (closes: #1062678) + amdtee: add amd_pmf TA firmware 20230906 * debian: install amdtee to /lib/firmware/amdtee * debian/control: update short and long descriptions * debian/copyright: update with amd-pmf license . amd64-microcode (3.20240116.1) unstable; urgency=medium . * Update package data from linux-firmware 20240115-80-gb4b04a5c * Updated Microcode patches: + Family=0x17 Model=0x31 Stepping=0x00: Patch=0x0830107b + Family=0x19 Model=0x01 Stepping=0x01: Patch=0x0a0011d3 + Family=0x19 Model=0x01 Stepping=0x02: Patch=0x0a001236 amd64-microcode (3.20231019.1) unstable; urgency=medium . * Update package data from linux-firmware 20231019 * Updated Microcode patches: + Family=0x19 Model=0x11 Stepping=0x01: Patch=0x0a101144 + Family=0x19 Model=0x11 Stepping=0x02: Patch=0x0a101244 + Family=0x19 Model=0xa0 Stepping=0x02: Patch=0x0aa00213 amd64-microcode (3.20230823.1) unstable; urgency=medium . * Update package data from linux-firmware 20230919 * New AMD-SEV firmware from AMD upstream (20230823) + Updated SEV firmware: Family 19h models 00h-0fh: version 1.55 build 8 + New SEV firmware: Family 19h models 10h-1fh: version 1.55 build 21 * amd-ucode: Add note on fam19h warnings. amd64-microcode (3.20230808.1.1) unstable; urgency=high . * Update package data from linux-firmware 20230804-6-gf2eb058a * Fixes for CVE-2023-20569 "AMD Inception" on AMD Zen4 processors (closes: #1043381) * WARNING: for proper operation on AMD Genoa and Bergamo processors, either up-to-date BIOS (with AGESA 1.0.0.8 or newer) or up-to-date Linux kernels (minimal versions on each active Linux stable branch: v4.19.289 v5.4.250 v5.10.187 v5.15.120 v6.1.37 v6.3.11 v6.4.1) are *required* * New Microcode patches: + Family=0x19 Model=0x11 Stepping=0x01: Patch=0x0a10113e + Family=0x19 Model=0x11 Stepping=0x02: Patch=0x0a10123e + Family=0x19 Model=0xa0 Stepping=0x02: Patch=0x0aa00212 + Family=0x19 Model=0xa0 Stepping=0x01: Patch=0x0aa00116 * README: update for new release * debian/NEWS: AMD Genoa/Bergamo kernel version restrictions * debian/changelog: update entry for release 3.20230719.1, noting that it included fixes for "AMD Inception" for Zen3 processors. We did not know about AMD Inception at the time, but we always include all available microcode updates when issuing a new package, so we lucked out. * debian/changelog: correct some information in 3.20230808.1 entry and reupload as 3.20230808.1.1. There's no Zenbleed for Zen4... oops! amd64-microcode (3.20230808.1.1~deb12u1) bookworm; urgency=medium . * Rebuild for bookworm (no changes) . amd64-microcode (3.20230808.1.1) unstable; urgency=high . * Update package data from linux-firmware 20230804-6-gf2eb058a * Fixes for CVE-2023-20569 "AMD Inception" on AMD Zen4 processors (closes: #1043381) * WARNING: for proper operation on AMD Genoa and Bergamo processors, either up-to-date BIOS (with AGESA 1.0.0.8 or newer) or up-to-date Linux kernels (minimal versions on each active Linux stable branch: v4.19.289 v5.4.250 v5.10.187 v5.15.120 v6.1.37 v6.3.11 v6.4.1) are *required* * New Microcode patches: + Family=0x19 Model=0x11 Stepping=0x01: Patch=0x0a10113e + Family=0x19 Model=0x11 Stepping=0x02: Patch=0x0a10123e + Family=0x19 Model=0xa0 Stepping=0x02: Patch=0x0aa00212 + Family=0x19 Model=0xa0 Stepping=0x01: Patch=0x0aa00116 * README: update for new release * debian/NEWS: AMD Genoa/Bergamo kernel version restrictions * debian/changelog: update entry for release 3.20230719.1, noting that it included fixes for "AMD Inception" for Zen3 processors. We did not know about AMD Inception at the time, but we always include all available microcode updates when issuing a new package, so we lucked out. * debian/changelog: correct some information in 3.20230808.1 entry and reupload as 3.20230808.1.1. There's no Zenbleed for Zen4... oops! ansible (2.10.7+merged+base+2.10.17+dfsg-0+deb11u1) bullseye; urgency=medium . * Update to ansible-base 2.10.17 (Closes: #1076527) - fixes CVE-2021-3620 - fixes CVE-2021-3583 * Fix password leak in amazon.aws.ec2_instance module (CVE-2022-3697) * Document workaround for ec2 private key leak (CVE-2023-4237) * ansible-galaxy: Prevent roles from using symlinks to overwrite files outside of the installation directory (CVE-2023-5115) * Ensure templating doesn't remove unsafe designation from template data. Document user-visible changes in NEWS (CVE-2023-5764) * Fix information disclosure due to a failure to respect the ANSIBLE_NO_LOG configuration in some scenarios (CVE-2024-0690) * d/gbp.conf: Update branch config to match bullseye (DEP-14 layout) * Update d/salsa-ci.yml to recommendations * d/gbp.conf: Default to merge-mode=replace * salsa CI updates: - Use bullseye's lintian - Update salsa CI pipeline file to recommended naming * fix lintian warnings: - Update lintian overrides - Remove debian/source/include-binaries * Update autopkgtests - Remove dep to python3-crypto - Add python3-systemd to test deps for more test coverage - Fix vault tests requiring pycrypto - Add integration tests * d/control: Update maintainer and uploader * d/control: Update VCS fields apache2 (2.4.62-1~deb11u1) bullseye; urgency=medium . * New upstream version (Closes: CVE-2024-40725, CVE-2024-40898) apache2 (2.4.61-1) unstable; urgency=medium . * New upstream version 2.4.61 apache2 (2.4.61-1~deb12u1) bookworm-security; urgency=medium . * New upstream version (CLoses: CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39884) * Unfuzz patches apache2 (2.4.61-1~deb11u1) bullseye-security; urgency=medium . * New upstream version (CLoses: CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39884) * Update test framework * Unfuzz patches apache2 (2.4.60-1) unstable; urgency=medium . [ Bastien Roucariès ] * Forward port CVE-2023-25690 uwsgi tests * Fix depends of uwsgi test * Use python3 uwsgi plugin * Encode bytes for uwsgi test . [ Bryce Harrington ] * Add UFW profile integration (Closes: #1071705) . [Chris Murray] * Use https instead of http in doc (LP: #2045055) . [ Yadd ] * Bump liblua from liblua5.3-dev to liblua5.4-dev (Closes: #1071701) * Update test framework * releasing package apache2 version 2.4.59-1~deb12u1 * New upstream version (CLoses: CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573) * Unfuzz patches apache2 (2.4.59-2) unstable; urgency=medium . * Breaks against fossil due to CVE-2024-24795 follows up apache2 (2.4.59-1) unstable; urgency=medium . [ Stefan Fritsch ] * Remove old transitional packages libapache2-mod-md and libapache2-mod-proxy-uwsgi. Closes: #1032628 . [ Yadd ] * mod_proxy_connect: disable AllowCONNECT by default (Closes: #1054564) * Refresh patches * New upstream version 2.4.59 * Refresh patches * Update patches * Update test framework apache2 (2.4.59-1~deb12u1) bookworm-security; urgency=medium . * New upstream version 2.4.58 (Closes: CVE-2023-31122, CVE-2023-43622, CVE-2023-45802) * New upstream version 2.4.59 (Closes: #1068412 CVE-2024-27316 CVE-2024-24795 CVE-2023-38709) * Refresh patches * Update test framework base-files (11.1+deb11u11) bullseye; urgency=medium . * Change /etc/debian_version to 11.11, for Debian 11.11 point release. bind9 (1:9.16.50-1~deb11u2) bullseye; urgency=medium . * Add patches for CVE-2024-1737 configurable limits: + New option max-records-per-type can be used to increase the limit on the maximum number of resource record for a single RRSet (owner, class, type). The default is 100. + New option max-types-per-name can be used to increate the limit on the maximum number of types for a single name. The default is 100. * Also add the patches to fix the system tests to verify the correctness of the changes. bind9 (1:9.16.50-1~deb11u1) bullseye-security; urgency=high . * Backported from BIND 9.18.28 + CVE-2024-1737: It is possible to craft excessively large resource records sets, which have the effect of slowing down database processing. This has been addressed by adding a fixed limit to the number of records that can be stored per name and type in a cache or zone database. + CVE-2024-1737: It is possible to craft excessively large numbers of resource record types for a given owner name, which has the effect of slowing down database processing. This has been addressed by adding a fixed limit to the number of records that can be stored per name and type in a cache or zone database. + CVE-2024-1975: Validating DNS messages signed using the SIG(0) protocol could cause excessive CPU load, leading to a denial-of-service condition. Support for SIG(0) message validation was removed from this version. + CVE-2024-4076: Due to a logic error, lookups that triggered serving stale data and required lookups in local authoritative zone data could have resulted in an assertion failure. calibre (5.12.0+dfsg-1+deb11u2) bullseye; urgency=medium . * Fix #2075131 [Private bug](https://bugs.launchpad.net/calibre/+bug/2075131) (Fix for CVE-2024-7009) * Fix #2075130 [Private bug](https://bugs.launchpad.net/calibre/+bug/2075130) (Fix for CVE-2024-7008) choose-mirror (2.111+deb11u1) bullseye; urgency=medium . * Team upload * Update Mirrors.masterlist. cjson (1.7.14-1+deb11u1) bullseye; urgency=medium . * Non-maintainer upload. * Backport patch to add NULL checks to cJSON_SetValuestring and cJSON_InsertItemInArray (CVE-2023-50472, CVE-2023-50471, CVE-2024-31755) (Closes: #1059287, #1071742) cups (2.3.3op2-3+deb11u8) bullseye; urgency=medium . * fix regression of CVE-2024-35235 in case only domain sockets are used cups (2.3.3op2-3+deb11u7) bullseye; urgency=medium . * CVE-2024-35235 (Closes: #1073002) fix domain socket handling curl (7.74.0-1.3+deb11u13) bullseye; urgency=medium . * Team upload. * d/p/CVE-2024-7264-{0,1}.patch: import and rebase backported patches from bookworm to fix CVE-2024-7264 - ASN.1 date parser overread. (Closes: #1077656) debian-installer (20210731+deb11u12) bullseye; urgency=medium . * Bump Linux kernel ABI to 5.10.0-32. debian-installer-netboot-images (20210731+deb11u12) bullseye; urgency=medium . * Update to 20210731+deb11u12, from bullseye-proposed-updates. dropbear (2020.81-3+deb11u2) bullseye; urgency=medium . * Fix noremotetcp behavior. Keepalive packets were being ignored when the ‛-k’ flag (or ‛no-port-forwarding’ authorized_keys(5) restriction) was used. (Closes: #1069768) emacs (1:27.1+1-3.1+deb11u5) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331) (Closes: #1074137) exim4 (4.94.2-7+deb11u3) bullseye-security; urgency=medium . * Fix parsing of multiline RFC 2231 header filename parameter in mime ACL. CVE-2024-39929 Closes: #1075785 ffmpeg (7:4.3.7-0+deb11u1) bullseye-security; urgency=medium . * New upstream release 4.3.7 firefox-esr (115.14.0esr-1~deb11u1) bullseye-security; urgency=medium . * New upstream release. * Fixes for mfsa2024-34, also known as: CVE-2024-7519, CVE-2024-7521, CVE-2024-7522, CVE-2024-7524, CVE-2024-7525, CVE-2024-7526, CVE-2024-7527, CVE-2024-7529, CVE-2024-7531. firefox-esr (115.13.0esr-2) unstable; urgency=medium . * gfx/cairo/libpixman/src/pixman-arm-simd-asm.S: Adjust arm assembly for binutils change. firefox-esr (115.13.0esr-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2024-30, also known as: CVE-2024-6600, CVE-2024-6601, CVE-2024-6602, CVE-2024-6603, CVE-2024-6604. . * debian/repack.py, debian/upstream.mk: Handle the upstream l10n migration to github. firefox-esr (115.13.0esr-1~deb12u1) bookworm-security; urgency=medium . * New upstream release. * Fixes for mfsa2024-30, also known as: CVE-2024-6600, CVE-2024-6601, CVE-2024-6602, CVE-2024-6603, CVE-2024-6604. . * debian/repack.py, debian/upstream.mk: Handle the upstream l10n migration to github. firefox-esr (115.13.0esr-1~deb11u1) bullseye-security; urgency=medium . * New upstream release. * Fixes for mfsa2024-30, also known as: CVE-2024-6600, CVE-2024-6601, CVE-2024-6602, CVE-2024-6603, CVE-2024-6604. . * debian/repack.py, debian/upstream.mk: Handle the upstream l10n migration to github. firefox-esr (115.12.0esr-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2024-26, also known as: CVE-2024-5702, CVE-2024-5688, CVE-2024-5690, CVE-2024-5691, CVE-2024-5693, CVE-2024-5696, CVE-2024-5700. firefox-esr (115.12.0esr-1~deb12u1) bookworm-security; urgency=medium . * New upstream release. * Fixes for mfsa2024-26, also known as: CVE-2024-5702, CVE-2024-5688, CVE-2024-5690, CVE-2024-5691, CVE-2024-5693, CVE-2024-5696, CVE-2024-5700. fusiondirectory (1.3-4+deb11u1) bullseye; urgency=medium . * Non-maintainer upload. . [ Tobias Frost ] * Backport compatibility with php-cas version addressing CVE 2022-39369. . [ Abhijith PA ] * Fix CVE-2022-36179, CVE-2022-36180. gettext.js (0.7.0-2+deb11u1) bullseye; urgency=medium . * Team upload * Fix SSRF issue (Closes: #1078880, CVE-2024-43370) glewlwyd (2.5.2-2+deb11u3) bullseye; urgency=medium . * d/patches: Fix CVE-2022-27240 possible buffer overflow during webauthn signature assertion * d/patches: Fix CVE-2022-29967 static_compressed_inmemory_website_callback.c in Glewlwyd through 2.6.2 allows directory traversal * d/glewlwyd-common.install: copy bootstrap, jquery, fork-awesome instead of linking it * d/patches: Fix CVE-2023-49208: possible buffer overflow during FIDO2 signature validation in webauthn registration glibc (2.31-13+deb11u11) bullseye; urgency=medium . * debian/patches/git-updates.diff: update from upstream stable branch: - debian/patches/any/local-CVE-2024-2961-iso-2022-cn-ext.patch: upstreamed. - debian/patches/any/local-CVE-2024-33599-nscd.patch: upstreamed. - debian/patches/any/local-CVE-2024-33600-nscd.patch: upstreamed. - debian/patches/any/local-CVE-2024-33601-33602-nscd.diff: upstreamed. - Fixes ffsll() performance issue depending on code alignment. - Performance improvements for memcpy() on arm64. - Fixes y2038 regression in nscd following CVE-2024-33601 and CVE-2024-33602 fix. - Fix compatibility with make 4.4. - Fixes build with --enable-hardcoded-path-in-tests with newer linkers. graphviz (2.42.2-5+deb11u1) bullseye; urgency=medium . * Apply fix for broken scale (closes: #1075904). gtk+2.0 (2.24.33-2+deb11u1) bullseye; urgency=medium . * Team upload * d/control.in, d/gbp.conf: Set packaging branch for Debian 11 updates * d/control.in: Freeze previous Uploaders * d/p/CVE-2024-6655.patch: Add patch backported from 3.24.43 to avoid looking for modules in current working directory (CVE-2024-6655) gtk+3.0 (3.24.24-4+deb11u4) bullseye; urgency=medium . * d/p/Stop-looking-for-modules-in-cwd.patch: Add patch backported from 3.24.43 to avoid looking for modules in current working directory (CVE-2024-6655) healpix-java (3.60+ds-4+deb11u1) bullseye; urgency=medium . * Non-maintainer upload. * Fix FTBFS bug: rm: cannot remove 'images'. Closes: #1022373. imagemagick (8:6.9.11.60+dfsg-1.3+deb11u4) bullseye; urgency=medium . * CVE-2023-34151 fix was incomplete (Closes: #1070340) * Fix variation of CVE-2023-1289 found by testing. * Fix CVE-2021-20312: Fix a divide by zero (Closes: #1013282) * Fix CVE-2021-20313: Fix a divide by zero indent (2.2.12-1+deb11u1) bullseye; urgency=low . * Restore the ROUND_UP macro and adjust the initial buffer size. Patch from the author, backported from 2.2.13. Fix memory handling problem. Closes: #1036851. * Apply two patches by Petr Písař . - Fix an out-of-buffer read in search_brace()/lexi() on an condition without parentheses followed with an overlong comment. - Fix a heap buffer overwrite in search_brace(). Closes: #1049366. This one is CVE-2023-40305. * Fix a heap buffer underread in set_buf_break(). Closes: #1061543. Patch by Petr Písař . This is CVE-2024-0911. intel-microcode (3.20240813.1~deb11u1) bullseye; urgency=medium . * Build for bullseye (no changes from 3.20240813.1) . intel-microcode (3.20240813.1) unstable; urgency=medium . * New upstream microcode datafile 20240813 (closes: #1078742) - Mitigations for INTEL-SA-01083 (CVE-2024-24853) Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel Processors may allow a privileged user to potentially enable escalation of privilege via local access. - Mitigations for INTEL-SA-01118 (CVE-2024-25939) Mirrored regions with different values in 3rd Generation Intel Xeon Scalable Processors may allow a privileged user to potentially enable denial of service via local access. - Mitigations for INTEL-SA-01100 (CVE-2024-24980) Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel Xeon Processors may allow a privileged user to potentially enable escalation of privilege via local access. - Mitigations for INTEL-SA-01038 (CVE-2023-42667) Improper isolation in the Intel Core Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access. - Mitigations for INTEL-SA-01046 (CVE-2023-49141) Improper isolation in some Intel® Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access. - Fix for unspecified functional issues on several processor models * Updated microcodes: sig 0x00050657, pf_mask 0xbf, 2024-03-01, rev 0x5003707, size 39936 sig 0x0005065b, pf_mask 0xbf, 2024-04-01, rev 0x7002904, size 30720 sig 0x000606a6, pf_mask 0x87, 2024-04-01, rev 0xd0003e7, size 308224 sig 0x000606c1, pf_mask 0x10, 2024-04-03, rev 0x10002b0, size 300032 sig 0x000706e5, pf_mask 0x80, 2024-02-15, rev 0x00c6, size 114688 sig 0x000806c1, pf_mask 0x80, 2024-02-15, rev 0x00b8, size 112640 sig 0x000806c2, pf_mask 0xc2, 2024-02-15, rev 0x0038, size 99328 sig 0x000806d1, pf_mask 0xc2, 2024-02-15, rev 0x0052, size 104448 sig 0x000806e9, pf_mask 0xc0, 2024-02-01, rev 0x00f6, size 106496 sig 0x000806e9, pf_mask 0x10, 2024-02-01, rev 0x00f6, size 106496 sig 0x000806ea, pf_mask 0xc0, 2024-02-01, rev 0x00f6, size 105472 sig 0x000806eb, pf_mask 0xd0, 2024-02-01, rev 0x00f6, size 106496 sig 0x000806ec, pf_mask 0x94, 2024-02-05, rev 0x00fc, size 106496 sig 0x00090661, pf_mask 0x01, 2024-04-05, rev 0x001a, size 20480 sig 0x000906ea, pf_mask 0x22, 2024-02-01, rev 0x00f8, size 105472 sig 0x000906eb, pf_mask 0x02, 2024-02-01, rev 0x00f6, size 106496 sig 0x000906ec, pf_mask 0x22, 2024-02-01, rev 0x00f8, size 106496 sig 0x000906ed, pf_mask 0x22, 2024-02-05, rev 0x0100, size 106496 sig 0x000a0652, pf_mask 0x20, 2024-02-01, rev 0x00fc, size 97280 sig 0x000a0653, pf_mask 0x22, 2024-02-01, rev 0x00fc, size 98304 sig 0x000a0655, pf_mask 0x22, 2024-02-01, rev 0x00fc, size 97280 sig 0x000a0660, pf_mask 0x80, 2024-02-01, rev 0x00fe, size 97280 sig 0x000a0661, pf_mask 0x80, 2024-02-01, rev 0x00fc, size 97280 sig 0x000a0671, pf_mask 0x02, 2024-03-07, rev 0x0062, size 108544 sig 0x000a06a4, pf_mask 0xe6, 2024-04-15, rev 0x001e, size 137216 * source: update symlinks to reflect id of the latest release, 20240813 * postinst, postrm: switch to dpkg-trigger to run update-initramfs . intel-microcode (3.20240531.1) unstable; urgency=medium . * New upstream microcode datafile 20240531 * Fix unspecified functional issues on Pentium Silver N/J5xxx, Celeron N/J4xxx * Updated Microcodes: sig 0x000706a1, pf_mask 0x01, 2024-04-19, rev 0x0042, size 76800 * source: update symlinks to reflect id of the latest release, 20240531 intel-microcode (3.20240531.1+nmu1) unstable; urgency=medium . * Non-maintainer upload. * Install aliased files into /usr (DEP17 M2) (Closes: #1060200) * Add superficial autopkgtest for initramfs hook. intel-microcode (3.20240531.1) unstable; urgency=medium . * New upstream microcode datafile 20240531 * Fix unspecified functional issues on Pentium Silver N/J5xxx, Celeron N/J4xxx * Updated Microcodes: sig 0x000706a1, pf_mask 0x01, 2024-04-19, rev 0x0042, size 76800 * source: update symlinks to reflect id of the latest release, 20240531 intel-microcode (3.20240514.1) unstable; urgency=medium . * New upstream microcode datafile 20240514 * Mitigations for INTEL-SA-01051 (CVE-2023-45733) Hardware logic contains race conditions in some Intel Processors may allow an authenticated user to potentially enable partial information disclosure via local access. * Mitigations for INTEL-SA-01052 (CVE-2023-46103) Sequence of processor instructions leads to unexpected behavior in Intel Core Ultra Processors may allow an authenticated user to potentially enable denial of service via local access. * Mitigations for INTEL-SA-01036 (CVE-2023-45745, CVE-2023-47855) Improper input validation in some Intel TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access. * Fix for unspecified functional issues on 4th gen and 5th gen Xeon Scalable, 12th, 13th and 14th gen Intel Core processors, as well as for Core i3 N-series processors. * Updated microcodes: sig 0x000806f8, pf_mask 0x87, 2024-02-05, rev 0x2b0005c0, size 581632 sig 0x000806f7, pf_mask 0x87, 2024-02-05, rev 0x2b0005c0 sig 0x000806f6, pf_mask 0x87, 2024-02-05, rev 0x2b0005c0 sig 0x000806f5, pf_mask 0x87, 2024-02-05, rev 0x2b0005c0 sig 0x000806f4, pf_mask 0x87, 2024-02-05, rev 0x2b0005c0 sig 0x000806f8, pf_mask 0x10, 2024-02-05, rev 0x2c000390, size 614400 sig 0x000806f6, pf_mask 0x10, 2024-02-05, rev 0x2c000390 sig 0x000806f5, pf_mask 0x10, 2024-02-05, rev 0x2c000390 sig 0x000806f4, pf_mask 0x10, 2024-02-05, rev 0x2c000390 sig 0x00090672, pf_mask 0x07, 2023-12-05, rev 0x0035, size 224256 sig 0x00090675, pf_mask 0x07, 2023-12-05, rev 0x0035 sig 0x000b06f2, pf_mask 0x07, 2023-12-05, rev 0x0035 sig 0x000b06f5, pf_mask 0x07, 2023-12-05, rev 0x0035 sig 0x000906a3, pf_mask 0x80, 2023-12-05, rev 0x0433, size 222208 sig 0x000906a4, pf_mask 0x80, 2023-12-05, rev 0x0433 sig 0x000906a4, pf_mask 0x40, 2023-12-07, rev 0x0007, size 119808 sig 0x000b0671, pf_mask 0x32, 2024-01-25, rev 0x0123, size 215040 sig 0x000b06e0, pf_mask 0x11, 2023-12-07, rev 0x0017, size 138240 sig 0x000c06f2, pf_mask 0x87, 2024-02-05, rev 0x21000230, size 552960 sig 0x000c06f1, pf_mask 0x87, 2024-02-05, rev 0x21000230 * source: update symlinks to reflect id of the latest release, 20240514 intel-microcode (3.20240514.1~deb12u1) bookworm; urgency=medium . * Build for bookworm (no changes) . intel-microcode (3.20240514.1) unstable; urgency=medium . * New upstream microcode datafile 20240514 * Mitigations for INTEL-SA-01051 (CVE-2023-45733) Hardware logic contains race conditions in some Intel Processors may allow an authenticated user to potentially enable partial information disclosure via local access. * Mitigations for INTEL-SA-01052 (CVE-2023-46103) Sequence of processor instructions leads to unexpected behavior in Intel Core Ultra Processors may allow an authenticated user to potentially enable denial of service via local access. * Mitigations for INTEL-SA-01036 (CVE-2023-45745, CVE-2023-47855) Improper input validation in some Intel TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access. * Fix for unspecified functional issues on 4th gen and 5th gen Xeon Scalable, 12th, 13th and 14th gen Intel Core processors, as well as for Core i3 N-series processors. * Updated microcodes: sig 0x000806f8, pf_mask 0x87, 2024-02-05, rev 0x2b0005c0, size 581632 sig 0x000806f7, pf_mask 0x87, 2024-02-05, rev 0x2b0005c0 sig 0x000806f6, pf_mask 0x87, 2024-02-05, rev 0x2b0005c0 sig 0x000806f5, pf_mask 0x87, 2024-02-05, rev 0x2b0005c0 sig 0x000806f4, pf_mask 0x87, 2024-02-05, rev 0x2b0005c0 sig 0x000806f8, pf_mask 0x10, 2024-02-05, rev 0x2c000390, size 614400 sig 0x000806f6, pf_mask 0x10, 2024-02-05, rev 0x2c000390 sig 0x000806f5, pf_mask 0x10, 2024-02-05, rev 0x2c000390 sig 0x000806f4, pf_mask 0x10, 2024-02-05, rev 0x2c000390 sig 0x00090672, pf_mask 0x07, 2023-12-05, rev 0x0035, size 224256 sig 0x00090675, pf_mask 0x07, 2023-12-05, rev 0x0035 sig 0x000b06f2, pf_mask 0x07, 2023-12-05, rev 0x0035 sig 0x000b06f5, pf_mask 0x07, 2023-12-05, rev 0x0035 sig 0x000906a3, pf_mask 0x80, 2023-12-05, rev 0x0433, size 222208 sig 0x000906a4, pf_mask 0x80, 2023-12-05, rev 0x0433 sig 0x000906a4, pf_mask 0x40, 2023-12-07, rev 0x0007, size 119808 sig 0x000b0671, pf_mask 0x32, 2024-01-25, rev 0x0123, size 215040 sig 0x000b06e0, pf_mask 0x11, 2023-12-07, rev 0x0017, size 138240 sig 0x000c06f2, pf_mask 0x87, 2024-02-05, rev 0x21000230, size 552960 sig 0x000c06f1, pf_mask 0x87, 2024-02-05, rev 0x21000230 * source: update symlinks to reflect id of the latest release, 20240514 krb5 (1.18.3-6+deb11u5) bullseye-security; urgency=high . * CVE-2024-37370: an unauthenticated attacker can modify the extra count in an RFC 4121 GSS token, causing the token to appear truncated. * CVE-2024-37371: an attacker can cause invalid memory reads by sending an invalid GSS token. libreoffice (1:7.0.4-4+deb11u10) bullseye-security; urgency=medium . * remove-ability-to-trust-not-validated-macro-signatures-in-high-security.diff: as name says (CVE-2024-6472) libvirt (7.0.0-3+deb11u3) bullseye; urgency=medium . * Non-maintainer upload. * Fix CVE-2021-3631: SELinux MCS may be accessed by another machine. (Closes: #990709) * Fix CVE-2021-3667: Improper locking in the virStoragePoolLookupByTargetPath API. (Closes: #991594) * Fix CVE-2021-3975: Use-after-free vulnerability. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. * Fix CVE-2021-4147: Deadlock and crash in libxl driver. (Closes: #1002535) * libxl: Fix regression in domain shutdown. * Fix CVE-2022-0897: Missing locking in nwfilterConnectNumOfNWFilters. (Closes: #1009075) * Fix CVE-2024-1441: Off-by-one error in the udevListInterfacesByStatus() function. (Closes: #1066058) * Fix CVE-2024-2494: Missing check for negative array lengths in RPC server de-serialization routines. (Closes: #1067461) * Fix CVE-2024-2496: NULL pointer dereference in the udevConnectListAllInterfaces() function. libvpx (1.9.0-1+deb11u3) bullseye-security; urgency=medium . * Non-maintainer upload. * CVE-2024-5197: Integer overflows linux (5.10.223-1) bullseye-security; urgency=high . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.222 - Compiler Attributes: Add __uninitialized macro - [arm64,armhf] drm/lima: fix shared irq handling on driver remove - media: dvb: as102-fe: Fix as10x_register_addr packing - media: dvb-usb: dib0700_devices: Add missing release_firmware() - IB/core: Implement a limit on UMAD receive List - scsi: qedf: Make qedf_execute_tmf() non-preemptible - crypto: aead,cipher - zeroize key buffer after use - drm/amdgpu: Initialize timestamp for some legacy SOCs - drm/amd/display: Check index msg_id before read or write - drm/amd/display: Check pipe offset before setting vblank - drm/amd/display: Skip finding free audio for unknown engine_id - media: dw2102: Don't translate i2c read into write - sctp: prefer struct_size over open coded arithmetic - firmware: dmi: Stop decoding on broken entry - Input: ff-core - prefer struct_size over open coded arithmetic - [arm64,armhf] net: dsa: mv88e6xxx: Correct check for empty list - media: dvb-frontends: tda18271c2dd: Remove casting during div - media: s2255: Use refcount_t instead of atomic_t for num_channels - media: dvb-frontends: tda10048: Fix integer overflow - i2c: i801: Annotate apanel_addr as __ro_after_init - [powerpc*] 64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n - orangefs: fix out-of-bounds fsid access - kunit: Fix timeout message - [powerpc*] xmon: Check cpu id in commands "c#", "dp#" and "dx#" - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD - jffs2: Fix potential illegal address access in jffs2_free_inode - [s390x] pkey: Wipe sensitive data on failure - UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open() - tcp_metrics: validate source addr length - wifi: wilc1000: fix ies_len type in connect path - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CVE-2024-39487) - inet_diag: Initialize pad field in struct inet_diag_req_v2 - nilfs2: fix inode number range checks - nilfs2: add missing check for inode numbers on directory entries - mm: optimize the redundant loop of mm_update_owner_next() - mm: avoid overflows in dirty throttling logic - Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot - can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct - fsnotify: Do not generate events for O_PATH file descriptors - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes - drm/amdgpu/atomfirmware: silence UBSAN warning - mtd: rawnand: Bypass a couple of sanity checks during NAND identification - bnx2x: Fix multiple UBSAN array-index-out-of-bounds - bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues - ima: Avoid blocking in RCU read-side critical section (CVE-2024-40947) - media: dw2102: fix a potential buffer overflow - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr - ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897 - nvme-multipath: find NUMA path only for online numa-node - nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset - [x86] platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet - [x86] platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro - nvmet: fix a possible leak when destroy a ctrl during qp establishment - kbuild: fix short log for AS in link-vmlinux.sh - nilfs2: fix incorrect inode allocation from reserved inodes - mm: prevent derefencing NULL ptr in pfn_section_valid() - filelock: fix potential use-after-free in posix_lock_inode - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading - vfs: don't mod negative dentry count when on shrinker list - tcp: fix incorrect undo caused by DSACK of TLP retransmit - net: lantiq_etop: add blank line after declaration - net: ethernet: lantiq_etop: fix double free in detach - ppp: reject claimed-as-LCP but actually malformed packets - ethtool: netlink: do not return SQI value if link is down - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). - net/sched: Fix UAF when resolving a clash - [s390x] Mark psw in __load_psw_mask() as __unitialized - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() - tcp: avoid too many retransmit packets (CVE-2024-41007) - net: ks8851: Fix potential TX stall after interface reopen - USB: serial: option: add Telit generic core-dump composition - USB: serial: option: add Telit FN912 rmnet compositions - USB: serial: option: add Fibocom FM350-GL - USB: serial: option: add support for Foxconn T99W651 - USB: serial: option: add Netprisma LCUK54 series modules - USB: serial: option: add Rolling RW350-GL variants - USB: serial: mos7840: fix crash on resume - USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor - hpet: Support 32-bit userspace - nvmem: meson-efuse: Fix return value of nvmem callbacks - ALSA: hda/realtek: Enable Mute LED on HP 250 G7 - ALSA: hda/realtek: Limit mic boost on VAIO PRO PX - libceph: fix race between delayed_work() and ceph_monc_stop() - wireguard: allowedips: avoid unaligned 64-bit memory accesses - wireguard: queueing: annotate intentional data race in cpu round robin - wireguard: send: annotate intentional data race in checking empty queue - x86/retpoline: Move a NOENDBR annotation to the SRSO dummy return thunk - ipv6: annotate data-races around cnf.disable_ipv6 - ipv6: prevent NULL dereference in ip6_output() (CVE-2024-36901) - bpf: Allow reads from uninit stack - nilfs2: fix kernel bug on rename operation of broken directory - i2c: mark HostNotify target address as used https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.223 - gcc-plugins: Rename last_stmt() for GCC 14+ - filelock: Remove locks reliably when fcntl/close race is detected (CVE-2024-41012) - scsi: qedf: Set qed_slowpath_params to zero before use - ACPI: EC: Abort address space access upon error - ACPI: EC: Avoid returning AE_OK on errors in address space handler - wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata - wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() - Input: silead - Always support 10 fingers - net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() - ila: block BH in ila_output() - [arm64] armv8_deprecated: Fix warning in isndep cpuhp starting process - null_blk: fix validation of block size - kconfig: gconf: give a proper initial state to the Save button - kconfig: remove wrong expr_trans_bool() - fs/file: fix the check in find_next_fd() - mei: demote client disconnect warning on suspend to debug - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check - [powerpc*] KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() - ALSA: hda/realtek: Add more codec ID to no shutup pins list - [mips*] fix compat_sys_lseek syscall - Input: elantech - fix touchpad state on resume for Lenovo N24 - Input: i8042 - add Ayaneo Kun to i8042 quirk table - [x86] bytcr_rt5640 : inverse jack detect for Archos 101 cesium - [arm*] ALSA: dmaengine: Synchronize dma channel after drop() - [armhf] ASoC: ti: davinci-mcasp: Set min period size using FIFO config - can: kvaser_usb: fix return value for hif_usb_send_regout - [s390x] sclp: Fix sclp_init() cleanup on failure - btrfs: qgroup: fix quota root leak after quota disable failure - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx - ALSA: dmaengine_pcm: terminate dmaengine before synchronize - net: usb: qmi_wwan: add Telit FN912 compositions - net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() - [powerpc*] pseries: Whitelist dtl slub object for copying to userspace - [powerpc*] eeh: avoid possible crash when edev->pdev changes - scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() - fs: better handle deep ancestor chains in is_subdir() - spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices - hfsplus: fix uninit-value in copy_name - spi: mux: set ctlr->bits_per_word_mask - [arm*] 9324/1: fix get_user() broken with veneer - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency - bpf: Fix overrunning reservations in ringbuf (CVE-2024-41009) - bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue (CVE-2024-36938) - scsi: core: Fix a use-after-free (CVE-2022-48666) - ext4: fix error code saved on super block during file system abort - ext4: Send notifications on error - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() - net: relax socket state check at accept time. (CVE-2024-36484) - ocfs2: add bounds checking to ocfs2_check_dir_entry() - jfs: don't walk off the end of ealist - ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 - [arm64] dts: qcom: msm8996: Disable SS instance in Parkmode for USB - [arm*] ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused - filelock: Fix fcntl/close race recovery compat path - tun: add missing verification for short frame (CVE-2024-41091) - tap: add missing verification for short frame (CVE-2024-41090) . [ Salvatore Bonaccorso ] * Bump ABI to 32 * fs/nfsd: Enable NFSD_V2 and NFSD_V2_ACL. Re-enable lost NFSv2 kernel support due to upstream backporting of 2f3a4b2ac2f2 ("nfsd: allow disabling NFSv2 at compile time") in 5.10.220. (Closes: #1076864) * netfilter: ipset: Add list flush to cancel_gc linux (5.10.221-1) bullseye-security; urgency=high . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.219 - [x86] tsc: Trust initial offset in architectural TSC-adjust MSRs - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (CVE-2024-36016) - speakup: Fix sizeof() vs ARRAY_SIZE() bug - ring-buffer: Fix a race between readers and resize checks (CVE-2024-38601) - nilfs2: fix unexpected freezing of nilfs_segctor_sync() - nilfs2: fix potential hang in nilfs_detach_log_writer() (CVE-2024-38582) - ALSA: core: Fix NULL module pointer assignment at card init (CVE-2024-38605) - wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class - net: usb: qmi_wwan: add Telit FN920C04 compositions - drm/amd/display: Set color_mgmt_changed to true on unsuspend - ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating - ASoC: dt-bindings: rt5645: add cbj sleeve gpio property - ASoC: rt715: add vendor clear control register - ASoC: da7219-aad: fix usage of device_get_named_child_node() - nvme: find numa distance only if controller has valid numa id - crypto: bcm - Fix pointer arithmetic (CVE-2024-38579) - firmware: raspberrypi: Use correct device for DMA mappings - ecryptfs: Fix buffer size for tag 66 packet (CVE-2024-38578) - nilfs2: fix out-of-range warning - [x86] crypto: ccp - drop platform ifdef checks - [x86] crypto: x86/nh-avx2 - add missing vzeroupper - [x86] crypto: x86/sha256-avx2 - add missing vzeroupper - [s390x] cio: fix tracepoint subchannel type field - jffs2: prevent xattr node from overflowing the eraseblock (CVE-2024-38599) - null_blk: Fix missing mutex_destroy() at module removal - md: fix resync softlockup when bitmap size is less than array size (CVE-2024-38598) - wifi: ath10k: poll service ready message before failing - [x86] boot: Ignore relocations in .notes sections in walk_relocs() too - qed: avoid truncating work queue length - scsi: ufs: qcom: Perform read back after writing reset bit - scsi: ufs-qcom: Fix ufs RST_n spec violation - scsi: ufs: qcom: Perform read back after writing REG_UFS_SYS1CLK_1US - scsi: ufs: ufs-qcom: Fix the Qcom register name for offset 0xD0 - scsi: ufs: ufs-qcom: Clear qunipro_g4_sel for HW version major 5 - scsi: ufs: qcom: Perform read back after writing unipro mode - scsi: ufs: qcom: Perform read back after writing CGC enable - scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV - scsi: ufs: core: Perform read back after disabling interrupts - scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL - irqchip/alpine-msi: Fix off-by-one in allocation error path - ACPI: disable -Wstringop-truncation - gfs2: Fix "ignore unlock failures after withdraw" - cpufreq: Reorganize checks in cpufreq_offline() - cpufreq: Split cpufreq_offline() - cpufreq: Rearrange locking in cpufreq_remove_dev() - cpufreq: exit() callback is optional - net: export inet_lookup_reuseport and inet6_lookup_reuseport - net: remove duplicate reuseport_lookup functions - udp: Avoid call to compute_score on multiple sites - scsi: libsas: Fix the failure of adding phy with zero-address to port - scsi: hpsa: Fix allocation size for Scsi_Host private data - [x86] purgatory: Switch to the position-independent small code model - wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() - wifi: ath10k: populate board data for WCN3990 - tcp: avoid premature drops in tcp_add_backlog() - net: give more chances to rcu in netdev_wait_allrefs_any() - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" (CVE-2024-38607) - wifi: carl9170: add a proper sanity check for endpoints (CVE-2024-38567) - wifi: ar5523: enable proper endpoint verification (CVE-2024-38565) - Revert "sh: Handle calling csum_partial with misaligned data" - [amd64] HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors - scsi: bfa: Ensure the copied buf is NUL terminated (CVE-2024-38560) - scsi: qedf: Ensure the copied buf is NUL terminated (CVE-2024-38559) - wifi: mwl8k: initialize cmd->addr[] properly - usb: aqc111: stop lying about skb->truesize - net: usb: sr9700: stop lying about skb->truesize - net: ipv6: fix wrong start position when receive hop-by-hop fragment - eth: sungem: remove .ndo_poll_controller to avoid deadlocks (CVE-2024-38597) - net: ethernet: cortina: Locking fixes - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (CVE-2024-38596) - net: usb: smsc95xx: stop lying about skb->truesize - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (CVE-2024-38558) - ipv6: sr: add missing seg6_local_exit - ipv6: sr: fix incorrect unregister order - ipv6: sr: fix invalid unregister error path (CVE-2024-38612) - net/mlx5: Discard command completions in internal error (CVE-2024-38555) - drm/amd/display: Fix potential index out of bounds in color transformation function (CVE-2024-38552) - ASoC: soc-acpi: add helper to identify parent driver. - [x86] ASoC: Intel: Disable route checks for Skylake boards - mtd: rawnand: hynix: fixed typo - fbdev: shmobile: fix snprintf truncation - [arm64] drm/meson: vclk: fix calculation of 59.94 fractional rates - [powerpc*] fsl-soc: hide unused const variable - fbdev: sisfb: hide unused variables - media: ngene: Add dvb_ca_en50221_init return value check - media: radio-shark2: Avoid led_names truncations - drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference (CVE-2024-38548) - fbdev: sh7760fb: allow modular build - media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries (CVE-2024-38547) - [arm64] drm/arm/malidp: fix a possible null pointer dereference (CVE-2024-36014) - [arm*] drm: vc4: Fix possible null pointer dereference (CVE-2024-38546) - ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value - drm/bridge: lt9611: Don't log an error when DSI host can't be found - drm/bridge: tc358775: Don't log an error when DSI host can't be found - drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector - drm/mipi-dsi: use correct return type for the DSC functions - [arm64] RDMA/hns: Refactor the hns_roce_buf allocation flow - [arm64] RDMA/hns: Create QP with selected QPN for bank load balance - [arm64] RDMA/hns: Fix incorrect symbol types - [arm64] RDMA/hns: Fix return value in hns_roce_map_mr_sg - [arm64] RDMA/hns: Use complete parentheses in macros - [arm64] RDMA/hns: Modify the print level of CQE error (CVE-2024-38590) - clk: qcom: mmcc-msm8998: fix venus clock issue - [x86] insn: Fix PUSH instruction in x86 instruction decoder opcode map - ext4: avoid excessive credit estimate in ext4_tmpfile() - sunrpc: removed redundant procp check - ext4: simplify calculation of blkoff in ext4_mb_new_blocks_simple - ext4: fix unit mismatch in ext4_mb_new_blocks_simple - ext4: try all groups in ext4_mb_new_blocks_simple - ext4: remove unused parameter from ext4_mb_new_blocks_simple() - ext4: fix potential unnitialized variable - SUNRPC: Fix gss_free_in_token_pages() - RDMA/IPoIB: Fix format truncation compilation errors - net: qrtr: fix null-ptr-deref in qrtr_ns_remove - net: qrtr: ns: Fix module refcnt - netrom: fix possible dead-lock in nr_rt_ioctl() (CVE-2024-38589) - af_packet: do not call packet_read_pending() from tpacket_destruct_skb() - sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level - greybus: lights: check return of get_channel_from_mode (CVE-2024-38637) - f2fs: fix to wait on page writeback in __clone_blkaddrs() - soundwire: cadence: fix invalid PDI offset (CVE-2024-38635) - dmaengine: idma64: Add check for dma_set_max_seg_size - firmware: dmi-id: add a release callback function - serial: max3100: Lock port->lock when calling uart_handle_cts_change() (CVE-2024-38634) - serial: max3100: Update uart_driver_registered on driver removal (CVE-2024-38633) - serial: max3100: Fix bitwise types - greybus: arche-ctrl: move device table to its right location - serial: sc16is7xx: add proper sched.h include for sched_set_fifo() - f2fs: compress: support chksum - f2fs: add compress_mode mount option - f2fs: compress: clean up parameter of __f2fs_cluster_blocks() - f2fs: compress: remove unneeded preallocation - f2fs: introduce FI_COMPRESS_RELEASED instead of using IMMUTABLE bit - f2fs: compress: fix to relocate check condition in f2fs_{release,reserve}_compress_blocks() - f2fs: add cp_error check in f2fs_write_compressed_pages - f2fs: fix to force keeping write barrier for strict fsync mode - f2fs: do not allow partial truncation on pinned file - f2fs: fix typos in comments - f2fs: fix to relocate check condition in f2fs_fallocate() - f2fs: fix to check pinfile flag in f2fs_move_file_range() - iio: pressure: dps310: support negative temperature values - fpga: region: change FPGA indirect article to an - fpga: region: Rename dev to parent for parent device - docs: driver-api: fpga: avoid using UTF-8 chars - fpga: region: Use standard dev_release for class driver - fpga: region: add owner module and take its refcount - usb: gadget: u_audio: Clear uac pointer when freed. - stm class: Fix a double free in stm_register_device() (CVE-2024-38627) - ppdev: Remove usage of the deprecated ida_simple_xx() API - ppdev: Add an error check in register_device (CVE-2024-36015) - extcon: max8997: select IRQ_DOMAIN instead of depending on it - PCI/EDR: Align EDR_PORT_DPC_ENABLE_DSM with PCI Firmware r3.3 - PCI/EDR: Align EDR_PORT_LOCATE_DSM with PCI Firmware r3.3 - f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock - f2fs: fix to release node block count in error path of f2fs_new_node_page() - f2fs: compress: don't allow unaligned truncation on released compress inode - serial: sh-sci: protect invalidating RXDMA on shutdown - libsubcmd: Fix parse-options memory leak - [s390x] ipl: Fix incorrect initialization of len fields in nvme reipl block - [s390x] ipl: Fix incorrect initialization of nvme dump block - Input: ims-pcu - fix printf string overflow - Input: ioc3kbd - convert to platform remove callback returning void - Input: ioc3kbd - add device table - Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation - drm/msm/dpu: Always flush the slave INTF on the CTL - drm/bridge: tc358775: fix support for jeida-18 and jeida-24 - media: stk1160: fix bounds checking in stk1160_copy_video() (CVE-2024-38621) - scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() - media: flexcop-usb: clean up endpoint sanity checks - media: flexcop-usb: fix sanity check of bNumEndpoints - [powerpc*] pseries: Add failure related checks for h_get_mpp and h_get_ppp - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh - media: cec: cec-api: add locking in cec_release() - media: core headers: fix kernel-doc warnings - media: cec: fix a deadlock situation - media: cec: call enable_adap on s_log_addrs - media: cec: abort if the current transmit was canceled - media: cec: correctly pass on reply results - media: cec: use call_op and check for !unregistered - media: cec-adap.c: drop activate_cnt, use state info instead - media: cec: core: avoid recursive cec_claim_log_addrs - media: cec: core: avoid confusing "transmit timed out" message - null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION() - regulator: bd71828: Don't overwrite runtime voltages - [x86] kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y - nfc: nci: Fix uninit-value in nci_rx_work (CVE-2024-38381) - ASoC: tas2552: Add TX path for capturing AUDIO-OUT data - sunrpc: fix NFSACL RPC retry on soft mount - rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL - ipv6: sr: fix memleak in seg6_hmac_init_algo - params: lift param_set_uint_minmax to common code - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CVE-2024-37356)). - openvswitch: Set the skbuff pkt_type for proper pmtud support. - [arm64] asm-bug: Add .align 2 to the end of __BUG_ENTRY - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails - net: fec: avoid lock evasion when reading pps_enable - tls: fix missing memory barrier in tls_init (CVE-2024-36489) - nfc: nci: Fix kcov check in nci_rx_work() - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() - netfilter: nft_payload: restore vlan q-in-q match support - spi: Don't mark message DMA mapped when no transfer in it is - nvmet: fix ns enable/disable possible hang - net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion - dma-buf/sw-sync: don't enable IRQ from sync_print_obj() (CVE-2024-38780) - bpf: Fix potential integer overflow in resolve_btfids - enic: Validate length of nl attributes in enic_set_vf_port (CVE-2024-38659) - net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM - bpf: Allow delete from sockmap/sockhash only if update is allowed (CVE-2024-38662) - net:fec: Add fec_enet_deinit() - netfilter: tproxy: bail out if IP has been disabled on the device (CVE-2024-36270) - kconfig: fix comparison to constant symbols, 'm', 'n' - spi: stm32: Don't warn about spurious interrupts - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound - hwmon: (shtc1) Fix property misspelling - ALSA: timer: Set lower bound of start tick time (CVE-2024-38618) - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (CVE-2024-31076) - media: cec: core: add adap_nb_transmit_canceled() callback - SUNRPC: Fix loop termination condition in gss_free_in_token_pages() (CVE-2024-36288) - [arm*] binder: fix max_thread type inconsistency - mmc: core: Do not force a retune before RPMB switch - io_uring: fail NOP if non-zero op flags is passed in - afs: Don't cross .backup mountpoint from backup volume - nilfs2: fix use-after-free of timer for log writer thread (CVE-2024-38583) - vxlan: Fix regression when dropping packets due to invalid src addresses - [x86] mm: Remove broken vsyscall emulation code from the page fault code - netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (CVE-2024-27019) - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() - media: lgdt3306a: Add a check against null-pointer-def - drm/amdgpu: add error handle to avoid out-of-bounds - ata: pata_legacy: make legacy_exit() work again - ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx - [arm64] tegra: Correct Tegra132 I2C alias - [arm64] dts: qcom: qcs404: fix bluetooth device address - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING - wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU - wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE - wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path - [arm64] dts: hi3798cv200: fix the size of GICR - media: mc: mark the media devnode as registered from the, start - media: mxl5xx: Move xpt structures off stack - media: v4l2-core: hold videodev_lock until dev reg, finishes - mmc: core: Add mmc_gpiod_set_cd_config() function - mmc: sdhci-acpi: Sort DMI quirks alphabetically - mmc: sdhci-acpi: Fix Lenovo Yoga Tablet 2 Pro 1380 sdcard slot not working - mmc: sdhci-acpi: Disable write protect detection on Toshiba WT10-A - fbdev: savage: Handle err return when savagefb_check_var failed - [arm64] KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode - crypto: ecrdsa - Fix module auto-load on add_key - [x86] crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak - net/ipv6: Fix route deleting failure when metric equals 0 - net/9p: fix uninit-value in p9_client_rpc() - [x86] intel_th: pci: Add Meteor Lake-S CPU support - watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin - kdb: Fix buffer overflow during tab-complete - kdb: Use format-strings rather than '\0' injection in kdb_read() - kdb: Fix console handling when editing and tab-completing commands - kdb: Merge identical case statements in kdb_read() - kdb: Use format-specifiers rather than memset() for padding in kdb_read() - net: fix __dst_negative_advice() race - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() - [s390x] ap: Fix crash in AP internal function modify_bitmap() - nfs: fix undefined behavior in nfs_block_bits() - NFS: Fix READ_PLUS when server doesn't support OP_READ_PLUS - scsi: ufs: ufs-qcom: Clear qunipro_g4_sel for HW major version > 5 - f2fs: compress: fix compression chksum - [arm64] RDMA/hns: Use mutex instead of spinlock for ida allocation - [arm64] RDMA/hns: Fix CQ and QP cache affinity https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.220 - SUNRPC: Rename svc_encode_read_payload() - NFSD: Invoke svc_encode_result_payload() in "read" NFSD encoders - NFSD: A semicolon is not needed after a switch statement. - nfsd/nfs3: remove unused macro nfsd3_fhandleres - NFSD: Clean up the show_nf_may macro - NFSD: Remove extra "0x" in tracepoint format specifier - NFSD: Add SPDX header for fs/nfsd/trace.c - nfsd: Fix error return code in nfsd_file_cache_init() - SUNRPC: Add xdr_set_scratch_page() and xdr_reset_scratch_buffer() - SUNRPC: Prepare for xdr_stream-style decoding on the server-side - NFSD: Add common helpers to decode void args and encode void results - NFSD: Add tracepoints in nfsd_dispatch() - NFSD: Add tracepoints in nfsd4_decode/encode_compound() - NFSD: Replace the internals of the READ_BUF() macro - NFSD: Replace READ* macros in nfsd4_decode_access() - NFSD: Replace READ* macros in nfsd4_decode_close() - NFSD: Replace READ* macros in nfsd4_decode_commit() - NFSD: Change the way the expected length of a fattr4 is checked - NFSD: Replace READ* macros that decode the fattr4 size attribute - NFSD: Replace READ* macros that decode the fattr4 acl attribute - NFSD: Replace READ* macros that decode the fattr4 mode attribute - NFSD: Replace READ* macros that decode the fattr4 owner attribute - NFSD: Replace READ* macros that decode the fattr4 owner_group attribute - NFSD: Replace READ* macros that decode the fattr4 time_set attributes - NFSD: Replace READ* macros that decode the fattr4 security label attribute - NFSD: Replace READ* macros that decode the fattr4 umask attribute - NFSD: Replace READ* macros in nfsd4_decode_fattr() - NFSD: Replace READ* macros in nfsd4_decode_create() - NFSD: Replace READ* macros in nfsd4_decode_delegreturn() - NFSD: Replace READ* macros in nfsd4_decode_getattr() - NFSD: Replace READ* macros in nfsd4_decode_link() - NFSD: Relocate nfsd4_decode_opaque() - NFSD: Add helpers to decode a clientid4 and an NFSv4 state owner - NFSD: Add helper for decoding locker4 - NFSD: Replace READ* macros in nfsd4_decode_lock() - NFSD: Replace READ* macros in nfsd4_decode_lockt() - NFSD: Replace READ* macros in nfsd4_decode_locku() - NFSD: Replace READ* macros in nfsd4_decode_lookup() - NFSD: Add helper to decode NFSv4 verifiers - NFSD: Add helper to decode OPEN's createhow4 argument - NFSD: Add helper to decode OPEN's openflag4 argument - NFSD: Replace READ* macros in nfsd4_decode_share_access() - NFSD: Replace READ* macros in nfsd4_decode_share_deny() - NFSD: Add helper to decode OPEN's open_claim4 argument - NFSD: Replace READ* macros in nfsd4_decode_open() - NFSD: Replace READ* macros in nfsd4_decode_open_confirm() - NFSD: Replace READ* macros in nfsd4_decode_open_downgrade() - NFSD: Replace READ* macros in nfsd4_decode_putfh() - NFSD: Replace READ* macros in nfsd4_decode_read() - NFSD: Replace READ* macros in nfsd4_decode_readdir() - NFSD: Replace READ* macros in nfsd4_decode_remove() - NFSD: Replace READ* macros in nfsd4_decode_rename() - NFSD: Replace READ* macros in nfsd4_decode_renew() - NFSD: Replace READ* macros in nfsd4_decode_secinfo() - NFSD: Replace READ* macros in nfsd4_decode_setattr() - NFSD: Replace READ* macros in nfsd4_decode_setclientid() - NFSD: Replace READ* macros in nfsd4_decode_setclientid_confirm() - NFSD: Replace READ* macros in nfsd4_decode_verify() - NFSD: Replace READ* macros in nfsd4_decode_write() - NFSD: Replace READ* macros in nfsd4_decode_release_lockowner() - NFSD: Replace READ* macros in nfsd4_decode_cb_sec() - NFSD: Replace READ* macros in nfsd4_decode_backchannel_ctl() - NFSD: Replace READ* macros in nfsd4_decode_bind_conn_to_session() - NFSD: Add a separate decoder to handle state_protect_ops - NFSD: Add a separate decoder for ssv_sp_parms - NFSD: Add a helper to decode state_protect4_a - NFSD: Add a helper to decode nfs_impl_id4 - NFSD: Add a helper to decode channel_attrs4 - NFSD: Replace READ* macros in nfsd4_decode_create_session() - NFSD: Replace READ* macros in nfsd4_decode_destroy_session() - NFSD: Replace READ* macros in nfsd4_decode_free_stateid() - NFSD: Replace READ* macros in nfsd4_decode_getdeviceinfo() - NFSD: Replace READ* macros in nfsd4_decode_layoutcommit() - NFSD: Replace READ* macros in nfsd4_decode_layoutget() - NFSD: Replace READ* macros in nfsd4_decode_layoutreturn() - NFSD: Replace READ* macros in nfsd4_decode_secinfo_no_name() - NFSD: Replace READ* macros in nfsd4_decode_sequence() - NFSD: Replace READ* macros in nfsd4_decode_test_stateid() - NFSD: Replace READ* macros in nfsd4_decode_destroy_clientid() - NFSD: Replace READ* macros in nfsd4_decode_reclaim_complete() - NFSD: Replace READ* macros in nfsd4_decode_fallocate() - NFSD: Replace READ* macros in nfsd4_decode_nl4_server() - NFSD: Replace READ* macros in nfsd4_decode_copy() - NFSD: Replace READ* macros in nfsd4_decode_copy_notify() - NFSD: Replace READ* macros in nfsd4_decode_offload_status() - NFSD: Replace READ* macros in nfsd4_decode_seek() - NFSD: Replace READ* macros in nfsd4_decode_clone() - NFSD: Replace READ* macros in nfsd4_decode_xattr_name() - NFSD: Replace READ* macros in nfsd4_decode_setxattr() - NFSD: Replace READ* macros in nfsd4_decode_listxattrs() - NFSD: Make nfsd4_ops::opnum a u32 - NFSD: Replace READ* macros in nfsd4_decode_compound() - NFSD: Remove macros that are no longer used - nfsd: only call inode_query_iversion in the I_VERSION case - nfsd: simplify nfsd4_change_info - nfsd: minor nfsd4_change_attribute cleanup - nfsd4: don't query change attribute in v2/v3 case - Revert "nfsd4: support change_attr_type attribute" - nfsd: add a new EXPORT_OP_NOWCC flag to struct export_operations - nfsd: allow filesystems to opt out of subtree checking - nfsd: close cached files prior to a REMOVE or RENAME that would replace target - exportfs: Add a function to return the raw output from fh_to_dentry() - nfsd: Fix up nfsd to ensure that timeout errors don't result in ESTALE - nfsd: Set PF_LOCAL_THROTTLE on local filesystems only - nfsd: Record NFSv4 pre/post-op attributes as non-atomic - exec: Don't open code get_close_on_exec - exec: Move unshare_files to fix posix file locking during exec - exec: Simplify unshare_files - exec: Remove reset_files_struct - kcmp: In kcmp_epoll_target use fget_task - bpf: In bpf_task_fd_query use fget_task - proc/fd: In proc_fd_link use fget_task - Revert "fget: clarify and improve __fget_files() implementation" - file: Rename __fcheck_files to files_lookup_fd_raw - file: Factor files_lookup_fd_locked out of fcheck_files - file: Replace fcheck_files with files_lookup_fd_rcu - file: Rename fcheck lookup_fd_rcu - file: Implement task_lookup_fd_rcu - proc/fd: In tid_fd_mode use task_lookup_fd_rcu - kcmp: In get_file_raw_ptr use task_lookup_fd_rcu - file: Implement task_lookup_next_fd_rcu - proc/fd: In proc_readfd_common use task_lookup_next_fd_rcu - proc/fd: In fdinfo seq_show don't use get_files_struct - file: Merge __fd_install into fd_install - file: In f_dupfd read RLIMIT_NOFILE once. - file: Merge __alloc_fd into alloc_fd - file: Rename __close_fd to close_fd and remove the files parameter - file: Replace ksys_close with close_fd - inotify: Increase default inotify.max_user_watches limit to 1048576 - fs/lockd: convert comma to semicolon - NFSD: Fix sparse warning in nfssvc.c - NFSD: Restore NFSv4 decoding's SAVEMEM functionality - SUNRPC: Make trace_svc_process() display the RPC procedure symbolically - SUNRPC: Display RPC procedure names instead of proc numbers - SUNRPC: Move definition of XDR_UNIT - NFSD: Update GETATTR3args decoder to use struct xdr_stream - NFSD: Update ACCESS3arg decoder to use struct xdr_stream - NFSD: Update READ3arg decoder to use struct xdr_stream - NFSD: Update WRITE3arg decoder to use struct xdr_stream - NFSD: Update READLINK3arg decoder to use struct xdr_stream - NFSD: Fix returned READDIR offset cookie - NFSD: Add helper to set up the pages where the dirlist is encoded - NFSD: Update READDIR3args decoders to use struct xdr_stream - NFSD: Update COMMIT3arg decoder to use struct xdr_stream - NFSD: Update the NFSv3 DIROPargs decoder to use struct xdr_stream - NFSD: Update the RENAME3args decoder to use struct xdr_stream - NFSD: Update the LINK3args decoder to use struct xdr_stream - NFSD: Update the SETATTR3args decoder to use struct xdr_stream - NFSD: Update the CREATE3args decoder to use struct xdr_stream - NFSD: Update the MKDIR3args decoder to use struct xdr_stream - NFSD: Update the SYMLINK3args decoder to use struct xdr_stream - NFSD: Update the MKNOD3args decoder to use struct xdr_stream - NFSD: Update the NFSv2 GETATTR argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 READ argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 WRITE argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 READLINK argument decoder to use struct xdr_stream - NFSD: Add helper to set up the pages where the dirlist is encoded - NFSD: Update the NFSv2 READDIR argument decoder to use struct xdr_stream - NFSD: Update NFSv2 diropargs decoding to use struct xdr_stream - NFSD: Update the NFSv2 RENAME argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 LINK argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 SETATTR argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 CREATE argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 SYMLINK argument decoder to use struct xdr_stream - NFSD: Remove argument length checking in nfsd_dispatch() - NFSD: Update the NFSv2 GETACL argument decoder to use struct xdr_stream - NFSD: Add an xdr_stream-based decoder for NFSv2/3 ACLs - NFSD: Update the NFSv2 SETACL argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 ACL GETATTR argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 ACL ACCESS argument decoder to use struct xdr_stream - NFSD: Clean up after updating NFSv2 ACL decoders - NFSD: Update the NFSv3 GETACL argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 SETACL argument decoder to use struct xdr_stream - NFSD: Clean up after updating NFSv3 ACL decoders - nfsd: remove unused stats counters - nfsd: protect concurrent access to nfsd stats counters - nfsd: report per-export stats - nfsd4: simplify process_lookup1 - nfsd: simplify process_lock - nfsd: simplify nfsd_renew - nfsd: rename lookup_clientid->set_client - nfsd: refactor set_client - nfsd: find_cpntf_state cleanup - nfsd: remove unused set_client argument - nfsd: simplify nfsd4_check_open_reclaim - nfsd: cstate->session->se_client -> cstate->clp - NFSv4_2: SSC helper should use its own config. - nfs: use change attribute for NFS re-exports - nfsd: skip some unnecessary stats in the v4 case - inotify, memcg: account inotify instances to kmemcg - module: unexport find_module and module_mutex - module: use RCU to synchronize find_module - kallsyms: refactor {,module_}kallsyms_on_each_symbol - kallsyms: only build {,module_}kallsyms_on_each_symbol when required - fs: add file and path permissions helpers - namei: introduce struct renamedata - NFSD: Extract the svcxdr_init_encode() helper - NFSD: Update the GETATTR3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 ACCESS3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 LOOKUP3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 wccstat result encoder to use struct xdr_stream - NFSD: Update the NFSv3 READLINK3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 READ3res encode to use struct xdr_stream - NFSD: Update the NFSv3 WRITE3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 CREATE family of encoders to use struct xdr_stream - NFSD: Update the NFSv3 RENAMEv3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 LINK3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 FSSTAT3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 FSINFO3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 PATHCONF3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 COMMIT3res encoder to use struct xdr_stream - NFSD: Add a helper that encodes NFSv3 directory offset cookies - NFSD: Count bytes instead of pages in the NFSv3 READDIR encoder - NFSD: Update the NFSv3 READDIR3res encoder to use struct xdr_stream - NFSD: Update NFSv3 READDIR entry encoders to use struct xdr_stream - NFSD: Remove unused NFSv3 directory entry encoders - NFSD: Reduce svc_rqst::rq_pages churn during READDIR operations - NFSD: Update the NFSv2 stat encoder to use struct xdr_stream - NFSD: Update the NFSv2 attrstat encoder to use struct xdr_stream - NFSD: Update the NFSv2 diropres encoder to use struct xdr_stream - NFSD: Update the NFSv2 READLINK result encoder to use struct xdr_stream - NFSD: Update the NFSv2 READ result encoder to use struct xdr_stream - NFSD: Update the NFSv2 STATFS result encoder to use struct xdr_stream - NFSD: Add a helper that encodes NFSv3 directory offset cookies - NFSD: Count bytes instead of pages in the NFSv2 READDIR encoder - NFSD: Update the NFSv2 READDIR result encoder to use struct xdr_stream - NFSD: Update the NFSv2 READDIR entry encoder to use struct xdr_stream - NFSD: Remove unused NFSv2 directory entry encoders - NFSD: Add an xdr_stream-based encoder for NFSv2/3 ACLs - NFSD: Update the NFSv2 GETACL result encoder to use struct xdr_stream - NFSD: Update the NFSv2 SETACL result encoder to use struct xdr_stream - NFSD: Update the NFSv2 ACL GETATTR result encoder to use struct xdr_stream - NFSD: Update the NFSv2 ACL ACCESS result encoder to use struct xdr_stream - NFSD: Clean up after updating NFSv2 ACL encoders - NFSD: Update the NFSv3 GETACL result encoder to use struct xdr_stream - NFSD: Update the NFSv3 SETACL result encoder to use struct xdr_stream - NFSD: Clean up after updating NFSv3 ACL encoders - NFSD: Add a tracepoint to record directory entry encoding - NFSD: Clean up NFSDDBG_FACILITY macro - nfsd: helper for laundromat expiry calculations - nfsd: Log client tracking type log message as info instead of warning - nfsd: Fix typo "accesible" - nfsd: COPY with length 0 should copy to end of file - nfsd: don't ignore high bits of copy count - nfsd: report client confirmation status in "info" file - SUNRPC: Export svc_xprt_received() - UAPI: nfsfh.h: Replace one-element array with flexible-array member - NFSD: Use DEFINE_SPINLOCK() for spinlock - fsnotify: allow fsnotify_{peek,remove}_first_event with empty queue - Revert "fanotify: limit number of event merge attempts" - fanotify: reduce event objectid to 29-bit hash - fanotify: mix event info and pid into merge key hash - fsnotify: use hash table for faster events merge - fanotify: limit number of event merge attempts - fanotify: configurable limits via sysfs - fanotify: support limited functionality for unprivileged users - fanotify_user: use upper_32_bits() to verify mask - nfsd: remove unused function - nfsd: removed unused argument in nfsd_startup_generic() - nfsd: hash nfs4_files by inode number - nfsd: track filehandle aliasing in nfs4_files - nfsd: reshuffle some code - nfsd: grant read delegations to clients holding writes - nfsd: Fix fall-through warnings for Clang - NFSv4.2: Remove ifdef CONFIG_NFSD from NFSv4.2 client SSC code. - NFS: fix nfs_fetch_iversion() - fanotify: fix permission model of unprivileged group - NFSD: Add an RPC authflavor tracepoint display helper - NFSD: Add nfsd_clid_cred_mismatch tracepoint - NFSD: Add nfsd_clid_verf_mismatch tracepoint - NFSD: Remove trace_nfsd_clid_inuse_err - NFSD: Add nfsd_clid_confirmed tracepoint - NFSD: Add nfsd_clid_reclaim_complete tracepoint - NFSD: Add nfsd_clid_destroyed tracepoint - NFSD: Add a couple more nfsd_clid_expired call sites - NFSD: Add tracepoints for SETCLIENTID edge cases - NFSD: Add tracepoints for EXCHANGEID edge cases - NFSD: Constify @fh argument of knfsd_fh_hash() - NFSD: Capture every CB state transition - NFSD: Drop TRACE_DEFINE_ENUM for NFSD4_CB_ macros - NFSD: Add cb_lost tracepoint - NFSD: Adjust cb_shutdown tracepoint - NFSD: Enhance the nfsd_cb_setup tracepoint - NFSD: Add an nfsd_cb_lm_notify tracepoint - NFSD: Add an nfsd_cb_offload tracepoint - NFSD: Replace the nfsd_deleg_break tracepoint - NFSD: Add an nfsd_cb_probe tracepoint - NFSD: Remove the nfsd_cb_work and nfsd_cb_done tracepoints - NFSD: Update nfsd_cb_args tracepoint - nfsd: Prevent truncation of an unlinked inode from blocking access to its directory - nfsd: move some commit_metadata()s outside the inode lock - NFSD add vfs_fsync after async copy is done - NFSD: delay unmount source's export after inter-server copy completed. - nfsd: move fsnotify on client creation outside spinlock - nfsd4: Expose the callback address and state of each NFS4 client - nfsd: fix kernel test robot warning in SSC code - NFSD: Fix error return code in nfsd4_interssc_connect() - nfsd: rpc_peeraddr2str needs rcu lock - lockd: Remove stale comments - lockd: Create a simplified .vs_dispatch method for NLM requests - lockd: Common NLM XDR helpers - lockd: Update the NLMv1 void argument decoder to use struct xdr_stream - lockd: Update the NLMv1 TEST arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 LOCK arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 CANCEL arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 UNLOCK arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 nlm_res arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 SM_NOTIFY arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 SHARE arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 FREE_ALL arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 void results encoder to use struct xdr_stream - lockd: Update the NLMv1 TEST results encoder to use struct xdr_stream - lockd: Update the NLMv1 nlm_res results encoder to use struct xdr_stream - lockd: Update the NLMv1 SHARE results encoder to use struct xdr_stream - lockd: Update the NLMv4 void arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 TEST arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 LOCK arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 CANCEL arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 UNLOCK arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 nlm_res arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 SM_NOTIFY arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 SHARE arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 FREE_ALL arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 void results encoder to use struct xdr_stream - lockd: Update the NLMv4 TEST results encoder to use struct xdr_stream - lockd: Update the NLMv4 nlm_res results encoder to use struct xdr_stream - lockd: Update the NLMv4 SHARE results encoder to use struct xdr_stream - nfsd: remove redundant assignment to pointer 'this' - NFSD: Prevent a possible oops in the nfs_dirent() tracepoint - nfsd: fix NULL dereference in nfs3svc_encode_getaclres - kernel/pid.c: remove static qualifier from pidfd_create() - kernel/pid.c: implement additional checks upon pidfd_create() parameters - fanotify: minor cosmetic adjustments to fid labels - fanotify: introduce a generic info record copying helper - fanotify: add pidfd support to the fanotify API - fsnotify: replace igrab() with ihold() on attach connector - fsnotify: count s_fsnotify_inode_refs for attached connectors - fsnotify: count all objects with attached connectors - fsnotify: optimize the case of no marks of any type - NFSD: Clean up splice actor - SUNRPC: Add svc_rqst_replace_page() API - NFSD: Batch release pages during splice read - NFSD: remove vanity comments - sysctl: introduce new proc handler proc_dobool - lockd: change the proc_handler for nsm_use_hostnames - nlm: minor nlm_lookup_file argument change - nlm: minor refactoring - lockd: update nlm_lookup_file reexport comment - Keep read and write fds with each nlm_file - nfs: don't atempt blocking locks on nfs reexports - lockd: don't attempt blocking locks on nfs reexports - nfs: don't allow reexport reclaims - SUNRPC: Add svc_rqst::rq_auth_stat - SUNRPC: Set rq_auth_stat in the pg_authenticate() callout - SUNRPC: Eliminate the RQ_AUTHERR flag - NFS: Add a private local dispatcher for NFSv4 callback operations - NFS: Remove unused callback void decoder - fsnotify: fix sb_connectors leak - NLM: Fix svcxdr_encode_owner() - nfsd: Fix a warning for nfsd_file_close_inode - fsnotify: pass data_type to fsnotify_name() - fsnotify: pass dentry instead of inode data - fsnotify: clarify contract for create event hooks - fsnotify: Don't insert unmergeable events in hashtable - fanotify: Fold event size calculation to its own function - fanotify: Split fsid check from other fid mode checks - inotify: Don't force FS_IN_IGNORED - fsnotify: Add helper to detect overflow_event - fsnotify: Add wrapper around fsnotify_add_event - fsnotify: Retrieve super block from the data field - fsnotify: Protect fsnotify_handle_inode_event from no-inode events - fsnotify: Pass group argument to free_event - fanotify: Support null inode event in fanotify_dfid_inode - fanotify: Allow file handle encoding for unhashed events - fanotify: Encode empty file handle when no inode is provided - fanotify: Require fid_mode for any non-fd event - fsnotify: Support FS_ERROR event type - fanotify: Reserve UAPI bits for FAN_FS_ERROR - fanotify: Pre-allocate pool of error events - fanotify: Support enqueueing of error events - fanotify: Support merging of error events - fanotify: Wrap object_fh inline space in a creator macro - fanotify: Add helpers to decide whether to report FID/DFID - fanotify: WARN_ON against too large file handles - fanotify: Report fid info for file related file system errors - fanotify: Emit generic error info for error event - fanotify: Allow users to request FAN_FS_ERROR events - SUNRPC: Trace calls to .rpc_call_done - NFSD: Optimize DRC bucket pruning - NFSD: move filehandle format declarations out of "uapi". - NFSD: drop support for ancient filehandles - NFSD: simplify struct nfsfh - NFSD: Initialize pointer ni with NULL and not plain integer 0 - NFSD: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() - SUNRPC: Replace the "__be32 *p" parameter to .pc_decode - SUNRPC: Change return value type of .pc_decode - NFSD: Save location of NFSv4 COMPOUND status - SUNRPC: Replace the "__be32 *p" parameter to .pc_encode - SUNRPC: Change return value type of .pc_encode - nfsd: update create verifier comment - NFSD:fix boolreturn.cocci warning - nfsd4: remove obselete comment - NFSD: Fix exposure in nfsd4_decode_bitmap() - NFSD: Fix READDIR buffer overflow - fsnotify: clarify object type argument - fsnotify: separate mark iterator type from object type enum - fanotify: introduce group flag FAN_REPORT_TARGET_FID - fsnotify: generate FS_RENAME event with rich information - fanotify: use macros to get the offset to fanotify_info buffer - fanotify: use helpers to parcel fanotify_info buffer - fanotify: support secondary dir fh and name in fanotify_info - fanotify: record old and new parent and name in FAN_RENAME event - fanotify: record either old name new name or both for FAN_RENAME - fanotify: report old and/or new parent+name in FAN_RENAME event - fanotify: wire up FAN_RENAME event - exit: Implement kthread_exit - exit: Rename module_put_and_exit to module_put_and_kthread_exit - NFSD: Fix sparse warning - NFSD: handle errors better in write_ports_addfd() - SUNRPC: change svc_get() to return the svc. - SUNRPC/NFSD: clean up get/put functions. - SUNRPC: stop using ->sv_nrthreads as a refcount - nfsd: make nfsd_stats.th_cnt atomic_t - SUNRPC: use sv_lock to protect updates to sv_nrthreads. - NFSD: narrow nfsd_mutex protection in nfsd thread - NFSD: Make it possible to use svc_set_num_threads_sync - SUNRPC: discard svo_setup and rename svc_set_num_threads_sync() - NFSD: simplify locking for network notifier. - lockd: introduce nlmsvc_serv - lockd: simplify management of network status notifiers - lockd: move lockd_start_svc() call into lockd_create_svc() - lockd: move svc_exit_thread() into the thread - lockd: introduce lockd_put() - lockd: rename lockd_create_svc() to lockd_get() - SUNRPC: move the pool_map definitions (back) into svc.c - SUNRPC: always treat sv_nrpools==1 as "not pooled" - lockd: use svc_set_num_threads() for thread start and stop - NFS: switch the callback service back to non-pooled. - NFSD: Remove be32_to_cpu() from DRC hash function - NFSD: Fix inconsistent indenting - NFSD: simplify per-net file cache management - NFSD: Combine XDR error tracepoints - nfsd: improve stateid access bitmask documentation - NFSD: De-duplicate nfsd4_decode_bitmap4() - nfs: block notification on fs with its own ->lock - nfsd4: add refcount for nfsd4_blocked_lock - NFSD: Fix zero-length NFSv3 WRITEs - nfsd: map EBADF - nfsd: Add errno mapping for EREMOTEIO - nfsd: Retry once in nfsd_open on an -EOPENSTALE return - NFSD: Clean up nfsd_vfs_write() - NFSD: De-duplicate net_generic(SVC_NET(rqstp), nfsd_net_id) - NFSD: De-duplicate net_generic(nf->nf_net, nfsd_net_id) - nfsd: Add a tracepoint for errors in nfsd4_clone_file_range() - NFSD: Write verifier might go backwards - NFSD: Clean up the nfsd_net::nfssvc_boot field - NFSD: Rename boot verifier functions - NFSD: Trace boot verifier resets - Revert "nfsd: skip some unnecessary stats in the v4 case" - NFSD: Move fill_pre_wcc() and fill_post_wcc() - nfsd: fix crash on COPY_NOTIFY with special stateid - fanotify: remove variable set but not used - lockd: fix server crash on reboot of client holding lock - lockd: fix failure to cleanup client locks - NFSD: Fix the behavior of READ near OFFSET_MAX - NFSD: Fix ia_size underflow - NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes - NFSD: COMMIT operations must not return NFS?ERR_INVAL - NFSD: Deprecate NFS_OFFSET_MAX - nfsd: Add support for the birth time attribute - NFSD: De-duplicate hash bucket indexing - NFSD: Skip extra computation for RC_NOCACHE case - NFSD: Streamline the rare "found" case - SUNRPC: Remove the .svo_enqueue_xprt method - SUNRPC: Merge svc_do_enqueue_xprt() into svc_enqueue_xprt() - SUNRPC: Remove svo_shutdown method - SUNRPC: Rename svc_create_xprt() - SUNRPC: Rename svc_close_xprt() - SUNRPC: Remove svc_shutdown_net() - NFSD: Remove svc_serv_ops::svo_module - NFSD: Move svc_serv_ops::svo_function into struct svc_serv - NFSD: Remove CONFIG_NFSD_V3 - NFSD: Clean up _lm_ operation names - nfsd: fix using the correct variable for sizeof() - fsnotify: fix merge with parent's ignored mask - fsnotify: optimize FS_MODIFY events with no ignored masks - fsnotify: remove redundant parameter judgment - SUNRPC: Return true/false (not 1/0) from bool functions - nfsd: Fix a write performance regression - nfsd: Clean up nfsd_file_put() - fanotify: do not allow setting dirent events in mask of non-dir - fs/lock: documentation cleanup. Replace inode->i_lock with flc_lock. - inotify: move control flags from mask to mark flags - fsnotify: pass flags argument to fsnotify_alloc_group() - fsnotify: make allow_dups a property of the group - fsnotify: create helpers for group mark_mutex lock - inotify: use fsnotify group lock helpers - nfsd: use fsnotify group lock helpers - dnotify: use fsnotify group lock helpers - fsnotify: allow adding an inode mark without pinning inode - fanotify: create helper fanotify_mark_user_flags() - fanotify: factor out helper fanotify_mark_update_flags() - fanotify: implement "evictable" inode marks - fanotify: use fsnotify group lock helpers - fanotify: enable "evictable" inode marks - fsnotify: introduce mark type iterator - fsnotify: consistent behavior for parent not watching children - fanotify: fix incorrect fmode_t casts - NFSD: Clean up nfsd_splice_actor() - NFSD: add courteous server support for thread with only delegation - NFSD: add support for share reservation conflict to courteous server - NFSD: move create/destroy of laundry_wq to init_nfsd and exit_nfsd - fs/lock: add helper locks_owner_has_blockers to check for blockers - fs/lock: add 2 callbacks to lock_manager_operations to resolve conflict - NFSD: add support for lock conflict to courteous server - NFSD: Show state of courtesy client in client info - NFSD: Clean up nfsd3_proc_create() - NFSD: Avoid calling fh_drop_write() twice in do_nfsd_create() - NFSD: Refactor nfsd_create_setattr() - NFSD: Refactor NFSv3 CREATE - NFSD: Refactor NFSv4 OPEN(CREATE) - NFSD: Remove do_nfsd_create() - NFSD: Clean up nfsd_open_verified() - NFSD: Instantiate a struct file when creating a regular NFSv4 file - NFSD: Remove dprintk call sites from tail of nfsd4_open() - NFSD: Fix whitespace - NFSD: Move documenting comment for nfsd4_process_open2() - NFSD: Trace filecache opens - NFSD: Clean up the show_nf_flags() macro - SUNRPC: Use RMW bitops in single-threaded hot paths - nfsd: Unregister the cld notifier when laundry_wq create failed - nfsd: Fix null-ptr-deref in nfsd_fill_super() - nfsd: destroy percpu stats counters after reply cache shutdown - NFSD: Modernize nfsd4_release_lockowner() - NFSD: Add documenting comment for nfsd4_release_lockowner() - NFSD: nfsd_file_put() can sleep - NFSD: Fix potential use-after-free in nfsd_file_put() - SUNRPC: Optimize xdr_reserve_space() - fanotify: refine the validation checks on non-dir inode mask - NFS: restore module put when manager exits. - NFSD: Decode NFSv4 birth time attribute - lockd: set fl_owner when unlocking files - lockd: fix nlm_close_files - fs: inotify: Fix typo in inotify comment - fanotify: prepare for setting event flags in ignore mask - fanotify: cleanups for fanotify_mark() input validations - fanotify: introduce FAN_MARK_IGNORE - fsnotify: Fix comment typo - nfsd: eliminate the NFSD_FILE_BREAK_* flags - SUNRPC: Fix xdr_encode_bool() - NLM: Defend against file_lock changes after vfs_test_lock() - NFSD: Fix space and spelling mistake - nfsd: remove redundant assignment to variable len - NFSD: Demote a WARN to a pr_warn() - NFSD: Report filecache LRU size - NFSD: Report count of calls to nfsd_file_acquire() - NFSD: Report count of freed filecache items - NFSD: Report average age of filecache items - NFSD: Add nfsd_file_lru_dispose_list() helper - NFSD: Refactor nfsd_file_gc() - NFSD: Refactor nfsd_file_lru_scan() - NFSD: Report the number of items evicted by the LRU walk - NFSD: Record number of flush calls - NFSD: Zero counters when the filecache is re-initialized - NFSD: Hook up the filecache stat file - NFSD: WARN when freeing an item still linked via nf_lru - NFSD: Trace filecache LRU activity - NFSD: Leave open files out of the filecache LRU - NFSD: Fix the filecache LRU shrinker - NFSD: Never call nfsd_file_gc() in foreground paths - NFSD: No longer record nf_hashval in the trace log - NFSD: Remove lockdep assertion from unhash_and_release_locked() - NFSD: nfsd_file_unhash can compute hashval from nf->nf_inode - NFSD: Refactor __nfsd_file_close_inode() - NFSD: nfsd_file_hash_remove can compute hashval - NFSD: Remove nfsd_file::nf_hashval - NFSD: Replace the "init once" mechanism - NFSD: Set up an rhashtable for the filecache - NFSD: Convert the filecache to use rhashtable - NFSD: Clean up unused code after rhashtable conversion - NFSD: Separate tracepoints for acquire and create - NFSD: Move nfsd_file_trace_alloc() tracepoint - NFSD: NFSv4 CLOSE should release an nfsd_file immediately - NFSD: Ensure nf_inode is never dereferenced - NFSD: refactoring v4 specific code to a helper in nfs4state.c - NFSD: keep track of the number of v4 clients in the system - NFSD: limit the number of v4 clients to 1024 per 1GB of system memory - nfsd: silence extraneous printk on nfsd.ko insertion - NFSD: Optimize nfsd4_encode_operation() - NFSD: Optimize nfsd4_encode_fattr() - NFSD: Clean up SPLICE_OK in nfsd4_encode_read() - NFSD: Add an nfsd4_read::rd_eof field - NFSD: Optimize nfsd4_encode_readv() - NFSD: Simplify starting_len - NFSD: Use xdr_pad_size() - NFSD: Clean up nfsd4_encode_readlink() - NFSD: Fix strncpy() fortify warning - NFSD: nfserrno(-ENOMEM) is nfserr_jukebox - NFSD: Shrink size of struct nfsd4_copy_notify - NFSD: Shrink size of struct nfsd4_copy - NFSD: Reorder the fields in struct nfsd4_op - NFSD: Make nfs4_put_copy() static - NFSD: Replace boolean fields in struct nfsd4_copy - NFSD: Refactor nfsd4_cleanup_inter_ssc() (1/2) - NFSD: Refactor nfsd4_cleanup_inter_ssc() (2/2) - NFSD: Refactor nfsd4_do_copy() - NFSD: Remove kmalloc from nfsd4_do_async_copy() - NFSD: Add nfsd4_send_cb_offload() - NFSD: Move copy offload callback arguments into a separate structure - NFSD: drop fh argument from alloc_init_deleg - NFSD: verify the opened dentry after setting a delegation - NFSD: introduce struct nfsd_attrs - NFSD: set attributes when creating symlinks - NFSD: add security label to struct nfsd_attrs - NFSD: add posix ACLs to struct nfsd_attrs - NFSD: change nfsd_create()/nfsd_symlink() to unlock directory before returning. - NFSD: always drop directory lock in nfsd_unlink() - NFSD: only call fh_unlock() once in nfsd_link() - NFSD: reduce locking in nfsd_lookup() - NFSD: use explicit lock/unlock for directory ops - NFSD: use (un)lock_inode instead of fh_(un)lock for file operations - NFSD: discard fh_locked flag and fh_lock/fh_unlock - lockd: detect and reject lock arguments that overflow - NFSD: fix regression with setting ACLs. - nfsd_splice_actor(): handle compound pages - NFSD: move from strlcpy with unused retval to strscpy - lockd: move from strlcpy with unused retval to strscpy - NFSD enforce filehandle check for source file in COPY - NFSD: remove redundant variable status - nfsd: Avoid some useless tests - nfsd: Propagate some error code returned by memdup_user() - NFSD: Increase NFSD_MAX_OPS_PER_COMPOUND - NFSD: Protect against send buffer overflow in NFSv2 READDIR (CVE-2022-43945) - NFSD: Protect against send buffer overflow in NFSv3 READDIR (CVE-2022-43945) - NFSD: Protect against send buffer overflow in NFSv2 READ (CVE-2022-43945) - NFSD: Protect against send buffer overflow in NFSv3 READ (CVE-2022-43945) - NFSD: drop fname and flen args from nfsd_create_locked() - NFSD: Fix handling of oversized NFSv4 COMPOUND requests - nfsd: clean up mounted_on_fileid handling - nfsd: remove nfsd4_prepare_cb_recall() declaration - NFSD: Add tracepoints to report NFSv4 callback completions - NFSD: Add a mechanism to wait for a DELEGRETURN - NFSD: Refactor nfsd_setattr() - NFSD: Make nfsd4_setattr() wait before returning NFS4ERR_DELAY - NFSD: Make nfsd4_rename() wait before returning NFS4ERR_DELAY - NFSD: Make nfsd4_remove() wait before returning NFS4ERR_DELAY - NFSD: keep track of the number of courtesy clients in the system - NFSD: add shrinker to reap courtesy clients on low memory condition - SUNRPC: Parametrize how much of argsize should be zeroed - NFSD: Reduce amount of struct nfsd4_compoundargs that needs clearing - NFSD: Refactor common code out of dirlist helpers - NFSD: Use xdr_inline_decode() to decode NFSv3 symlinks - NFSD: Clean up WRITE arg decoders - NFSD: Clean up nfs4svc_encode_compoundres() - NFSD: Remove "inline" directives on op_rsize_bop helpers - NFSD: Remove unused nfsd4_compoundargs::cachetype field - NFSD: Pack struct nfsd4_compoundres - nfsd: use DEFINE_PROC_SHOW_ATTRIBUTE to define nfsd_proc_ops - nfsd: use DEFINE_SHOW_ATTRIBUTE to define export_features_fops and supported_enctypes_fops - nfsd: use DEFINE_SHOW_ATTRIBUTE to define client_info_fops - nfsd: use DEFINE_SHOW_ATTRIBUTE to define nfsd_reply_cache_stats_fops - nfsd: use DEFINE_SHOW_ATTRIBUTE to define nfsd_file_cache_stats_fops - NFSD: Rename the fields in copy_stateid_t - NFSD: Cap rsize_bop result based on send buffer size - nfsd: only fill out return pointer on success in nfsd4_lookup_stateid - nfsd: fix comments about spinlock handling with delegations - nfsd: make nfsd4_run_cb a bool return function - nfsd: extra checks when freeing delegation stateids - fs/notify: constify path - fsnotify: remove unused declaration - fanotify: Remove obsoleted fanotify_event_has_path() - nfsd: fix nfsd_file_unhash_and_dispose - nfsd: rework hashtable handling in nfsd_do_file_acquire - NFSD: unregister shrinker when nfsd_init_net() fails - nfsd: fix net-namespace logic in __nfsd_file_cache_purge - nfsd: fix use-after-free in nfsd_file_do_acquire tracepoint - nfsd: put the export reference in nfsd4_verify_deleg_dentry - NFSD: Fix reads with a non-zero offset that don't end on a page boundary - filelock: add a new locks_inode_context accessor function - lockd: use locks_inode_context helper - nfsd: use locks_inode_context helper - NFSD: Simplify READ_PLUS - NFSD: Remove redundant assignment to variable host_err - NFSD: Finish converting the NFSv2 GETACL result encoder - NFSD: Finish converting the NFSv3 GETACL result encoder - nfsd: ignore requests to disable unsupported versions - nfsd: move nfserrno() to vfs.c - nfsd: allow disabling NFSv2 at compile time - exportfs: use pr_debug for unreachable debug statements - NFSD: Pass the target nfsd_file to nfsd_commit() - NFSD: Revert "NFSD: NFSv4 CLOSE should release an nfsd_file immediately" - NFSD: Add an NFSD_FILE_GC flag to enable nfsd_file garbage collection - NFSD: Flesh out a documenting comment for filecache.c - NFSD: Clean up nfs4_preprocess_stateid_op() call sites - NFSD: Trace stateids returned via DELEGRETURN - NFSD: Trace delegation revocations - NFSD: Use const pointers as parameters to fh_ helpers - NFSD: Update file_hashtbl() helpers - NFSD: Clean up nfsd4_init_file() - NFSD: Add a nfsd4_file_hash_remove() helper - NFSD: Clean up find_or_add_file() - NFSD: Refactor find_file() - NFSD: Use rhashtable for managing nfs4_file objects - NFSD: Fix licensing header in filecache.c - nfsd: remove the pages_flushed statistic from filecache - nfsd: reorganize filecache.c - nfsd: fix up the filecache laundrette scheduling - NFSD: Add an nfsd_file_fsync tracepoint - lockd: set other missing fields when unlocking files - nfsd: return error if nfs4_setacl fails - NFSD: Use struct_size() helper in alloc_session() - lockd: set missing fl_flags field when retrieving args - lockd: ensure we use the correct file descriptor when unlocking - lockd: fix file selection in nlmsvc_cancel_blocked - NFSD: pass range end to vfs_fsync_range() instead of count - NFSD: refactoring courtesy_client_reaper to a generic low memory shrinker - NFSD: add support for sending CB_RECALL_ANY - NFSD: add delegation reaper to react to low memory condition - NFSD: Use only RQ_DROPME to signal the need to drop a reply - NFSD: Avoid clashing function prototypes - nfsd: rework refcounting in filecache - nfsd: fix handling of cached open files in nfsd4_open codepath - Revert "SUNRPC: Use RMW bitops in single-threaded hot paths" - NFSD: Use set_bit(RQ_DROPME) - NFSD: fix use-after-free in nfsd4_ssc_setup_dul() - NFSD: register/unregister of nfsd-client shrinker at nfsd startup/shutdown time - NFSD: replace delayed_work with work_struct for nfsd_client_shrinker - nfsd: don't free files unconditionally in __nfsd_file_cache_purge - nfsd: don't destroy global nfs4_file table in per-net shutdown - NFSD: enhance inter-server copy cleanup - nfsd: allow nfsd_file_get to sanely handle a NULL pointer - nfsd: clean up potential nfsd_file refcount leaks in COPY codepath - NFSD: fix leaked reference count of nfsd4_ssc_umount_item - nfsd: don't hand out delegation on setuid files being opened for write - NFSD: fix problems with cleanup on errors in nfsd4_copy - nfsd: fix courtesy client with deny mode handling in nfs4_upgrade_open - nfsd: don't fsync nfsd_files on last close - NFSD: copy the whole verifier in nfsd_copy_write_verifier - NFSD: Protect against filesystem freezing - lockd: set file_lock start and end when decoding nlm4 testargs - nfsd: don't replace page in rq_pages if it's a continuation of last page - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - nfsd: call op_release, even when op_func returns an error - nfsd: don't open-code clear_and_wake_up_bit - nfsd: NFSD_FILE_KEY_INODE only needs to find GC'ed entries - nfsd: simplify test_bit return in NFSD_FILE_KEY_FULL comparator - nfsd: don't kill nfsd_files because of lease break error - nfsd: add some comments to nfsd_file_do_acquire - nfsd: don't take/put an extra reference when putting a file - nfsd: update comment over __nfsd_file_cache_purge - nfsd: allow reaping files still under writeback - NFSD: Convert filecache to rhltable - nfsd: simplify the delayed disposal list code - NFSD: Fix problem of COMMIT and NFS4ERR_DELAY in infinite loop - nfsd: make a copy of struct iattr before calling notify_change - nfsd: fix double fget() bug in __write_ports_addfd() - lockd: drop inappropriate svc_get() from locked_get() - NFSD: Add an nfsd4_encode_nfstime4() helper - nfsd: Fix creation time serialization order - nfsd: don't allow nfsd threads to be signalled. - nfsd: Simplify code around svc_exit_thread() call in nfsd() - nfsd: separate nfsd_last_thread() from nfsd_put() - Documentation: Add missing documentation for EXPORT_OP flags - NFSD: fix possible oops when nfsd/pool_stats is closed. - nfsd: call nfsd_last_thread() before final nfsd_put() - nfsd: drop the nfsd_put helper - nfsd: fix RELEASE_LOCKOWNER (CVE-2024-26629) - nfsd: don't take fi_lock in nfsd_break_deleg_cb() - nfsd: don't call locks_release_private() twice concurrently - nfsd: Fix a regression in nfsd_setattr() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.221 - null_blk: Print correct max open zones limit in null_init_zoned_dev() - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() - wifi: cfg80211: pmsr: use correct nla_get_uX functions - wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64 - wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids - wifi: iwlwifi: mvm: don't read past the mfuart notifcation - wifi: mac80211: correctly parse Spatial Reuse Parameter Set element - [armhf] net/ncsi: add NCSI Intel OEM command to keep PHY up - [armhf] net/ncsi: Simplify Kconfig/dts control flow - [armhf] net/ncsi: Fix the multi thread manner of NCSI driver - ipv6: sr: block BH in seg6_output_core() and seg6_input_core() - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (CVE-2024-36978) - vxlan: Fix regression when dropping packets due to invalid src addresses - tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB - net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (CVE-2024-36974) - ptp: Fix error message on failed pin verification - af_unix: Annotate data-race of sk->sk_state in unix_inq_len(). - af_unix: Annotate data-races around sk->sk_state in unix_write_space() and poll(). - af_unix: Annotate data-races around sk->sk_state in sendmsg() and recvmsg(). - af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG. - af_unix: Annotate data-race of net->unx.sysctl_max_dgram_qlen. - af_unix: Use unix_recvq_full_lockless() in unix_stream_connect(). - af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen(). - af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill(). - ipv6: fix possible race in __fib6_drop_pcpu_from() - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete - drm/amd/display: Handle Y carry-over in VCP X.Y calculation - serial: sc16is7xx: replace hardcoded divisor value with BIT() macro - serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler - btrfs: fix leak of qgroup extent records after transaction abort - nilfs2: Remove check for PageError - nilfs2: return the mapped address from nilfs_get_page() - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages - mei: me: release irq in mei_me_pci_resume error path - jfs: xattr: fix buffer overflow for invalid xattr - xhci: Set correct transferred length for cancelled bulk transfers - xhci: Apply reset resume quirk to Etron EJ188 xHCI host - xhci: Apply broken streams quirk to Etron EJ188 xHCI host - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory - [powerpc*] uaccess: Fix build errors seen with GCC 13/14 - Input: try trimming too long modalias strings - SUNRPC: return proper error from gss_wrap_req_priv - gpio: tqmx86: fix typo in Kconfig label - HID: core: remove unnecessary WARN_ON() in implement() - gpio: tqmx86: store IRQ trigger type and unmask status separately - [amd64] iommu/amd: Introduce pci segment structure - [amd64] iommu/amd: Fix sysfs leak in iommu init - iommu: Return right value in iommu_sva_bind_device() - HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() - drm/vmwgfx: 3D disabled should not effect STDU memory limits - net: sfp: Always call `sfp_sm_mod_remove()` on remove - [arm64] net: hns3: add cond_resched() to hns3 ring buffer init process - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet - drm/komeda: check for error-valued pointer - drm/bridge/panel: Fix runtime warning on panel bridge release - tcp: fix race in tcp_v6_syn_recv_sock() - net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets - Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type - net: stmmac: replace priv->speed with the portTransmitRate from the tc-cbs parameters - net/ipv6: Fix the RT cache flush via sysctl using a previous delay - ionic: fix use after netif_napi_del() - iio: adc: ad9467: fix scan type sign - iio: dac: ad5592r: fix temperature channel scaling value - iio: imu: inv_icm42600: delete unneeded update watermark call - drivers: core: synchronize really_probe() and dev_uevent() - [armhf] drm/exynos/vidi: fix memory leak in .get_modes() - [armhf] drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found - [x86] vmci: prevent speculation leaks by sanitizing event in event_deliver() - fs/proc: fix softlockup in __read_vmcore - ocfs2: use coarse time for new created files - ocfs2: fix races between hole punching and AIO+DIO - PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id - dmaengine: axi-dmac: fix possible race in remove() - remoteproc: k3-r5: Do not allow core1 to power up before core0 via sysfs - [x86] intel_th: pci: Add Granite Rapids support - [x86] intel_th: pci: Add Granite Rapids SOC support - [x86] intel_th: pci: Add Sapphire Rapids SOC support - [x86] intel_th: pci: Add Meteor Lake-S support - [x86] intel_th: pci: Add Lunar Lake support - nilfs2: fix potential kernel bug due to lack of writeback flag waiting (CVE-2024-37078) - tick/nohz_full: Don't abuse smp_call_function_single() in tick_setup_device() - serial: 8250_pxa: Configure tx_loadsz to match FIFO IRQ level - hugetlb_encode.h: fix undefined behaviour (34 << 26) - mptcp: ensure snd_una is properly initialized on connect - mptcp: pm: inc RmAddr MIB counter once per RM_ADDR ID - mptcp: pm: update add_addr counters after connect - remoteproc: k3-r5: Jump to error handling labels in start/stop errors - greybus: Fix use-after-free bug in gb_interface_release due to race condition. - usb-storage: alauda: Check whether the media is initialized (CVE-2024-38619) - i2c: at91: Fix the functionality flags of the slave-only interface - i2c: designware: Fix the functionality flags of the slave-only interface - zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING - padata: Disable BH when taking works lock on MT path - rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment - rcutorture: Fix invalid context warning when enable srcu barrier testing - block/ioctl: prefer different overflow check - batman-adv: bypass empty buckets in batadv_purge_orig_ref() - wifi: ath9k: work around memset overflow warning - af_packet: avoid a false positive warning in packet_setsockopt() - drop_monitor: replace spin_lock by raw_spin_lock - scsi: qedi: Fix crash while reading debugfs attribute - netpoll: Fix race condition in netpoll_owner_active - HID: Add quirk for Logitech Casa touchpad - ACPI: video: Add backlight=native quirk for Lenovo Slim 7 16ARH7 - Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl - drm/amd/display: Exit idle optimizations before HDCP execution - [x86] ASoC: Intel: sof_sdw: add JD2 quirk for HP Omen 14 - [arm64,armhf] drm/lima: add mask irq callback to gp and pp - [arm64,armhf] drm/lima: mask irqs in timeout path before hard reset - [powerpc*] pseries: Enforce hcall result buffer validity and size - [powerpc*] io: Avoid clang null pointer arithmetic warnings - power: supply: cros_usbpd: provide ID table for avoiding fallback match - f2fs: remove clear SB_INLINECRYPT flag in default_options - usb: misc: uss720: check for incompatible versions of the Belkin F5U002 - udf: udftime: prevent overflow in udf_disk_stamp_to_time() - PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports - [mips*] Octeon: Add PCIe link status check - serial: exar: adding missing CTI and Exar PCI ids - [mips*] Routerboard 532: Fix vendor retry check code - [mips*] bmips: BCM6358: make sure CBR is correctly set - tracing: Build event generation tests only as modules - cipso: fix total option length computation - netrom: Fix a memory leak in nr_heartbeat_expiry() - ipv6: prevent possible NULL deref in fib6_nh_init() - ipv6: prevent possible NULL dereference in rt6_probe() - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() - netns: Make get_net_ns() handle zero refcount net - qca_spi: Make interrupt remembering atomic - net/sched: act_api: rely on rcu in tcf_idr_check_alloc - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() - tipc: force a dst refcount before doing decryption - net/sched: act_ct: set 'net' pointer when creating new nf_flow_table - sched: act_ct: add netns into the key of tcf_ct_flow_table - net: stmmac: No need to calculate speed divider when offload is disabled - virtio_net: checksum offloading handling fix - netfilter: ipset: Fix suspicious rcu_dereference_protected() - net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings - regulator: core: Fix modpost error "regulator_get_regmap" undefined - dmaengine: ioat: switch from 'pci_' to 'dma_' API - dmaengine: ioat: Drop redundant pci_enable_pcie_error_reporting() - dmaengine: ioatdma: Fix leaking on version mismatch - dmaengine: ioat: use PCI core macros for PCIe Capability - dmaengine: ioatdma: Fix error path in ioat3_dma_probe() - dmaengine: ioatdma: Fix kmemleak in ioat_pci_probe() - dmaengine: ioatdma: Fix missing kmem_cache_destroy() - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." - RDMA/mlx5: Add check for srq max_sge attribute - ALSA: hda/realtek: Limit mic boost on N14AP7 - drm/radeon: fix UBSAN warning in kv_dpm.c - gcov: add support for GCC 14 - kcov: don't lose track of remote references during softirqs - i2c: ocores: set IACK bit after core is enabled - dt-bindings: i2c: google,cros-ec-i2c-tunnel: correct path to i2c-controller schema - drm/amd/display: revert Exit idle optimizations before HDCP execution - [armhf] dts: samsung: smdkv310: fix keypad no-autorepeat - [armhf] dts: samsung: exynos4412-origen: fix keypad no-autorepeat - [armhf] dts: samsung: smdk4412: fix keypad no-autorepeat - rtlwifi: rtl8192de: Style clean-ups - wifi: rtlwifi: rtl8192de: Fix 5 GHz TX power - pmdomain: ti-sci: Fix duplicate PD referrals - knfsd: LOOKUP can return an illegal error value - spmi: hisi-spmi-controller: Do not override device identifier - bcache: fix variable length array abuse in btree_iter (CVE-2024-39482) - tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test - [x86] cpu/vfm: Add new macros to work with (vendor/family/model) values - [x86] cpu: Fix x86_match_cpu() to match just X86_VENDOR_INTEL - r8169: remove unneeded memory barrier in rtl_tx - r8169: improve rtl_tx - r8169: improve rtl8169_start_xmit - r8169: remove nr_frags argument from rtl_tx_slots_avail - r8169: remove not needed check in rtl8169_start_xmit - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (CVE-2024-38586) - Revert "kheaders: substituting --sort in archive creation" - kheaders: explicitly define file modes for archived headers - perf/core: Fix missing wakeup when waiting for context reference - PCI: Add PCI_ERROR_RESPONSE and related definitions - [x86] amd_nb: Check for invalid SMN reads - cifs: missed ref-counting smb session in find - smb: client: fix deadlock in smb2_find_smb_tcon() (CVE-2024-39468) - ACPI: Add quirks for AMD Renoir/Lucienne CPUs to force the D3 hint - [x86] ACPI: x86: Add a quirk for Dell Inspiron 14 2-in-1 for StorageD3Enable - [x86] ACPI: x86: Add another system to quirk list for forcing StorageD3Enable - [x86] ACPI: x86: utils: Add Cezanne to the list for forcing StorageD3Enable - [x86] ACPI: x86: utils: Add Picasso to the list for forcing StorageD3Enable - [x86] ACPI: x86: Force StorageD3Enable on more products - Input: ili210x - fix ili251x_read_touch_data() return value - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER - [arm64,armhf] pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins - [arm64,armhf] pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins - [arm64,armhf] pinctrl/rockchip: separate struct rockchip_pin_bank to a head file - [arm64,armhf] pinctrl: rockchip: use dedicated pinctrl type for RK3328 - [arm64,armhf] pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set - drm/amdgpu: fix UBSAN warning in kv_dpm.c - netfilter: nf_tables: validate family when identifying table via handle - SUNRPC: Fix null pointer dereference in svc_rqst_free() - SUNRPC: Fix a NULL pointer deref in trace_svc_stats_latency() - SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation - SUNRPC: Fix svcxdr_init_encode's buflen calculation - nfsd: hold a lighter-weight client reference over CB_RECALL_ANY - net: dsa: microchip: fix initial port flush problem - net: phy: micrel: add Microchip KSZ 9477 to the device table - xdp: Move the rxq_info.mem clearing to unreg_mem_model() - xdp: Allow registering memory model without rxq reference - xdp: Remove WARN() from __xdp_reg_mem_model() - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep - mtd: partitions: redboot: Added conversion of operands to a larger type - bpf: Add a check for struct bpf_fib_lookup size - net/iucv: Avoid explicit cpumask var allocation on stack - net/dpaa2: Avoid explicit cpumask var allocation on stack - ALSA: emux: improve patch ioctl data validation - media: dvbdev: Initialize sbuf - soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message - drm/radeon/radeon_display: Decrease the size of allocated memory - nvme: fixup comment for nvme RDMA Provider Type - drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA - gpio: davinci: Validate the obtained number of IRQs - gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1) - [x86] stop playing stack games in profile_pc() - ocfs2: fix DIO failure due to insufficient transaction credits - mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos - mmc: sdhci: Do not invert write-protect twice - mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro() - counter: ti-eqep: enable clock at probe - iio: adc: ad7266: Fix variable checking bug - net: usb: ax88179_178a: improve link status logs - usb: gadget: printer: SS+ support - usb: gadget: printer: fix races against disable (CVE-2024-25741) - usb: musb: da8xx: fix a resource leak in probe() - usb: atm: cxacru: fix endpoint checking in cxacru_bind() - serial: 8250_omap: Implementation of Errata i2310 - tty: mcf: MCF54418 has 10 UARTS - net: can: j1939: Initialize unused data in j1939_send_one() - net: can: j1939: recover socket queue on CAN bus error during BAM transmission - net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new - kbuild: Install dtb files as 0644 in Makefile.dtbinst - csky, hexagon: fix broken sys_sync_file_range - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes - [x86] drm/i915/gt: Fix potential UAF by revoke of fence registers - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes - batman-adv: Don't accept TT entries for out-of-spec VIDs - ata: ahci: Clean up sysfs file on error - ata: libata-core: Fix double free on error - ftruncate: pass a signed offset - syscalls: fix compat_sys_io_pgetevents_time64 usage - mtd: spinand: macronix: Add support for serial NAND flash - pwm: stm32: Refuse too small period requests - nfs: Leave pages in the pagecache if readpage failed - ipv6: annotate some data-races around sk->sk_prot - ipv6: Fix data races around sk->sk_prot. - tcp: Fix data races around icsk->icsk_af_ops. - drivers: fix typo in firmware/efi/memmap.c - efi: Correct comment on efi_memmap_alloc - efi: memmap: Move manipulation routines into x86 arch tree - efi: xen: Set EFI_PARAVIRT for Xen dom0 boot on all architectures - [x86] efi/x86: Free EFI memory map only when installing a new one. - [arm64] KVM: arm64: vgic-v4: Make the doorbell request robust w.r.t preemption - [arm64] dts: rockchip: Add sound-dai-cells for RK3368 - xdp: xdp_mem_allocator can be NULL in trace_mem_connect(). - serial: 8250_omap: Fix Errata i2310 with RX FIFO level check - tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset() . [ Salvatore Bonaccorso ] * Bump ABI to 31 * Refresh "fanotify: Taint on use of FANOTIFY_ACCESS_PERMISSIONS" * [rt] Refresh "sunrpc: Make svc_xprt_do_enqueue() use" * Refresh "firmware: Remove redundant log messages from drivers" * [rt] Update to 5.10.221-rt113 linux-signed-amd64 (5.10.223+1) bullseye-security; urgency=high . * Sign kernel from linux 5.10.223-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.222 - Compiler Attributes: Add __uninitialized macro - [arm64,armhf] drm/lima: fix shared irq handling on driver remove - media: dvb: as102-fe: Fix as10x_register_addr packing - media: dvb-usb: dib0700_devices: Add missing release_firmware() - IB/core: Implement a limit on UMAD receive List - scsi: qedf: Make qedf_execute_tmf() non-preemptible - crypto: aead,cipher - zeroize key buffer after use - drm/amdgpu: Initialize timestamp for some legacy SOCs - drm/amd/display: Check index msg_id before read or write - drm/amd/display: Check pipe offset before setting vblank - drm/amd/display: Skip finding free audio for unknown engine_id - media: dw2102: Don't translate i2c read into write - sctp: prefer struct_size over open coded arithmetic - firmware: dmi: Stop decoding on broken entry - Input: ff-core - prefer struct_size over open coded arithmetic - [arm64,armhf] net: dsa: mv88e6xxx: Correct check for empty list - media: dvb-frontends: tda18271c2dd: Remove casting during div - media: s2255: Use refcount_t instead of atomic_t for num_channels - media: dvb-frontends: tda10048: Fix integer overflow - i2c: i801: Annotate apanel_addr as __ro_after_init - [powerpc*] 64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n - orangefs: fix out-of-bounds fsid access - kunit: Fix timeout message - [powerpc*] xmon: Check cpu id in commands "c#", "dp#" and "dx#" - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD - jffs2: Fix potential illegal address access in jffs2_free_inode - [s390x] pkey: Wipe sensitive data on failure - UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open() - tcp_metrics: validate source addr length - wifi: wilc1000: fix ies_len type in connect path - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CVE-2024-39487) - inet_diag: Initialize pad field in struct inet_diag_req_v2 - nilfs2: fix inode number range checks - nilfs2: add missing check for inode numbers on directory entries - mm: optimize the redundant loop of mm_update_owner_next() - mm: avoid overflows in dirty throttling logic - Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot - can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct - fsnotify: Do not generate events for O_PATH file descriptors - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes - drm/amdgpu/atomfirmware: silence UBSAN warning - mtd: rawnand: Bypass a couple of sanity checks during NAND identification - bnx2x: Fix multiple UBSAN array-index-out-of-bounds - bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues - ima: Avoid blocking in RCU read-side critical section (CVE-2024-40947) - media: dw2102: fix a potential buffer overflow - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr - ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897 - nvme-multipath: find NUMA path only for online numa-node - nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset - [x86] platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet - [x86] platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro - nvmet: fix a possible leak when destroy a ctrl during qp establishment - kbuild: fix short log for AS in link-vmlinux.sh - nilfs2: fix incorrect inode allocation from reserved inodes - mm: prevent derefencing NULL ptr in pfn_section_valid() - filelock: fix potential use-after-free in posix_lock_inode - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading - vfs: don't mod negative dentry count when on shrinker list - tcp: fix incorrect undo caused by DSACK of TLP retransmit - net: lantiq_etop: add blank line after declaration - net: ethernet: lantiq_etop: fix double free in detach - ppp: reject claimed-as-LCP but actually malformed packets - ethtool: netlink: do not return SQI value if link is down - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). - net/sched: Fix UAF when resolving a clash - [s390x] Mark psw in __load_psw_mask() as __unitialized - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() - tcp: avoid too many retransmit packets (CVE-2024-41007) - net: ks8851: Fix potential TX stall after interface reopen - USB: serial: option: add Telit generic core-dump composition - USB: serial: option: add Telit FN912 rmnet compositions - USB: serial: option: add Fibocom FM350-GL - USB: serial: option: add support for Foxconn T99W651 - USB: serial: option: add Netprisma LCUK54 series modules - USB: serial: option: add Rolling RW350-GL variants - USB: serial: mos7840: fix crash on resume - USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor - hpet: Support 32-bit userspace - nvmem: meson-efuse: Fix return value of nvmem callbacks - ALSA: hda/realtek: Enable Mute LED on HP 250 G7 - ALSA: hda/realtek: Limit mic boost on VAIO PRO PX - libceph: fix race between delayed_work() and ceph_monc_stop() - wireguard: allowedips: avoid unaligned 64-bit memory accesses - wireguard: queueing: annotate intentional data race in cpu round robin - wireguard: send: annotate intentional data race in checking empty queue - x86/retpoline: Move a NOENDBR annotation to the SRSO dummy return thunk - ipv6: annotate data-races around cnf.disable_ipv6 - ipv6: prevent NULL dereference in ip6_output() (CVE-2024-36901) - bpf: Allow reads from uninit stack - nilfs2: fix kernel bug on rename operation of broken directory - i2c: mark HostNotify target address as used https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.223 - gcc-plugins: Rename last_stmt() for GCC 14+ - filelock: Remove locks reliably when fcntl/close race is detected (CVE-2024-41012) - scsi: qedf: Set qed_slowpath_params to zero before use - ACPI: EC: Abort address space access upon error - ACPI: EC: Avoid returning AE_OK on errors in address space handler - wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata - wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() - Input: silead - Always support 10 fingers - net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() - ila: block BH in ila_output() - [arm64] armv8_deprecated: Fix warning in isndep cpuhp starting process - null_blk: fix validation of block size - kconfig: gconf: give a proper initial state to the Save button - kconfig: remove wrong expr_trans_bool() - fs/file: fix the check in find_next_fd() - mei: demote client disconnect warning on suspend to debug - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check - [powerpc*] KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() - ALSA: hda/realtek: Add more codec ID to no shutup pins list - [mips*] fix compat_sys_lseek syscall - Input: elantech - fix touchpad state on resume for Lenovo N24 - Input: i8042 - add Ayaneo Kun to i8042 quirk table - [x86] bytcr_rt5640 : inverse jack detect for Archos 101 cesium - [arm*] ALSA: dmaengine: Synchronize dma channel after drop() - [armhf] ASoC: ti: davinci-mcasp: Set min period size using FIFO config - can: kvaser_usb: fix return value for hif_usb_send_regout - [s390x] sclp: Fix sclp_init() cleanup on failure - btrfs: qgroup: fix quota root leak after quota disable failure - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx - ALSA: dmaengine_pcm: terminate dmaengine before synchronize - net: usb: qmi_wwan: add Telit FN912 compositions - net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() - [powerpc*] pseries: Whitelist dtl slub object for copying to userspace - [powerpc*] eeh: avoid possible crash when edev->pdev changes - scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() - fs: better handle deep ancestor chains in is_subdir() - spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices - hfsplus: fix uninit-value in copy_name - spi: mux: set ctlr->bits_per_word_mask - [arm*] 9324/1: fix get_user() broken with veneer - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency - bpf: Fix overrunning reservations in ringbuf (CVE-2024-41009) - bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue (CVE-2024-36938) - scsi: core: Fix a use-after-free (CVE-2022-48666) - ext4: fix error code saved on super block during file system abort - ext4: Send notifications on error - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() - net: relax socket state check at accept time. (CVE-2024-36484) - ocfs2: add bounds checking to ocfs2_check_dir_entry() - jfs: don't walk off the end of ealist - ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 - [arm64] dts: qcom: msm8996: Disable SS instance in Parkmode for USB - [arm*] ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused - filelock: Fix fcntl/close race recovery compat path - tun: add missing verification for short frame (CVE-2024-41091) - tap: add missing verification for short frame (CVE-2024-41090) . [ Salvatore Bonaccorso ] * Bump ABI to 32 * fs/nfsd: Enable NFSD_V2 and NFSD_V2_ACL. Re-enable lost NFSv2 kernel support due to upstream backporting of 2f3a4b2ac2f2 ("nfsd: allow disabling NFSv2 at compile time") in 5.10.220. (Closes: #1076864) * netfilter: ipset: Add list flush to cancel_gc linux-signed-amd64 (5.10.221+1) bullseye-security; urgency=high . * Sign kernel from linux 5.10.221-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.219 - [x86] tsc: Trust initial offset in architectural TSC-adjust MSRs - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (CVE-2024-36016) - speakup: Fix sizeof() vs ARRAY_SIZE() bug - ring-buffer: Fix a race between readers and resize checks (CVE-2024-38601) - nilfs2: fix unexpected freezing of nilfs_segctor_sync() - nilfs2: fix potential hang in nilfs_detach_log_writer() (CVE-2024-38582) - ALSA: core: Fix NULL module pointer assignment at card init (CVE-2024-38605) - wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class - net: usb: qmi_wwan: add Telit FN920C04 compositions - drm/amd/display: Set color_mgmt_changed to true on unsuspend - ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating - ASoC: dt-bindings: rt5645: add cbj sleeve gpio property - ASoC: rt715: add vendor clear control register - ASoC: da7219-aad: fix usage of device_get_named_child_node() - nvme: find numa distance only if controller has valid numa id - crypto: bcm - Fix pointer arithmetic (CVE-2024-38579) - firmware: raspberrypi: Use correct device for DMA mappings - ecryptfs: Fix buffer size for tag 66 packet (CVE-2024-38578) - nilfs2: fix out-of-range warning - [x86] crypto: ccp - drop platform ifdef checks - [x86] crypto: x86/nh-avx2 - add missing vzeroupper - [x86] crypto: x86/sha256-avx2 - add missing vzeroupper - [s390x] cio: fix tracepoint subchannel type field - jffs2: prevent xattr node from overflowing the eraseblock (CVE-2024-38599) - null_blk: Fix missing mutex_destroy() at module removal - md: fix resync softlockup when bitmap size is less than array size (CVE-2024-38598) - wifi: ath10k: poll service ready message before failing - [x86] boot: Ignore relocations in .notes sections in walk_relocs() too - qed: avoid truncating work queue length - scsi: ufs: qcom: Perform read back after writing reset bit - scsi: ufs-qcom: Fix ufs RST_n spec violation - scsi: ufs: qcom: Perform read back after writing REG_UFS_SYS1CLK_1US - scsi: ufs: ufs-qcom: Fix the Qcom register name for offset 0xD0 - scsi: ufs: ufs-qcom: Clear qunipro_g4_sel for HW version major 5 - scsi: ufs: qcom: Perform read back after writing unipro mode - scsi: ufs: qcom: Perform read back after writing CGC enable - scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV - scsi: ufs: core: Perform read back after disabling interrupts - scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL - irqchip/alpine-msi: Fix off-by-one in allocation error path - ACPI: disable -Wstringop-truncation - gfs2: Fix "ignore unlock failures after withdraw" - cpufreq: Reorganize checks in cpufreq_offline() - cpufreq: Split cpufreq_offline() - cpufreq: Rearrange locking in cpufreq_remove_dev() - cpufreq: exit() callback is optional - net: export inet_lookup_reuseport and inet6_lookup_reuseport - net: remove duplicate reuseport_lookup functions - udp: Avoid call to compute_score on multiple sites - scsi: libsas: Fix the failure of adding phy with zero-address to port - scsi: hpsa: Fix allocation size for Scsi_Host private data - [x86] purgatory: Switch to the position-independent small code model - wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() - wifi: ath10k: populate board data for WCN3990 - tcp: avoid premature drops in tcp_add_backlog() - net: give more chances to rcu in netdev_wait_allrefs_any() - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" (CVE-2024-38607) - wifi: carl9170: add a proper sanity check for endpoints (CVE-2024-38567) - wifi: ar5523: enable proper endpoint verification (CVE-2024-38565) - Revert "sh: Handle calling csum_partial with misaligned data" - [amd64] HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors - scsi: bfa: Ensure the copied buf is NUL terminated (CVE-2024-38560) - scsi: qedf: Ensure the copied buf is NUL terminated (CVE-2024-38559) - wifi: mwl8k: initialize cmd->addr[] properly - usb: aqc111: stop lying about skb->truesize - net: usb: sr9700: stop lying about skb->truesize - net: ipv6: fix wrong start position when receive hop-by-hop fragment - eth: sungem: remove .ndo_poll_controller to avoid deadlocks (CVE-2024-38597) - net: ethernet: cortina: Locking fixes - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (CVE-2024-38596) - net: usb: smsc95xx: stop lying about skb->truesize - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (CVE-2024-38558) - ipv6: sr: add missing seg6_local_exit - ipv6: sr: fix incorrect unregister order - ipv6: sr: fix invalid unregister error path (CVE-2024-38612) - net/mlx5: Discard command completions in internal error (CVE-2024-38555) - drm/amd/display: Fix potential index out of bounds in color transformation function (CVE-2024-38552) - ASoC: soc-acpi: add helper to identify parent driver. - [x86] ASoC: Intel: Disable route checks for Skylake boards - mtd: rawnand: hynix: fixed typo - fbdev: shmobile: fix snprintf truncation - [arm64] drm/meson: vclk: fix calculation of 59.94 fractional rates - [powerpc*] fsl-soc: hide unused const variable - fbdev: sisfb: hide unused variables - media: ngene: Add dvb_ca_en50221_init return value check - media: radio-shark2: Avoid led_names truncations - drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference (CVE-2024-38548) - fbdev: sh7760fb: allow modular build - media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries (CVE-2024-38547) - [arm64] drm/arm/malidp: fix a possible null pointer dereference (CVE-2024-36014) - [arm*] drm: vc4: Fix possible null pointer dereference (CVE-2024-38546) - ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value - drm/bridge: lt9611: Don't log an error when DSI host can't be found - drm/bridge: tc358775: Don't log an error when DSI host can't be found - drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector - drm/mipi-dsi: use correct return type for the DSC functions - [arm64] RDMA/hns: Refactor the hns_roce_buf allocation flow - [arm64] RDMA/hns: Create QP with selected QPN for bank load balance - [arm64] RDMA/hns: Fix incorrect symbol types - [arm64] RDMA/hns: Fix return value in hns_roce_map_mr_sg - [arm64] RDMA/hns: Use complete parentheses in macros - [arm64] RDMA/hns: Modify the print level of CQE error (CVE-2024-38590) - clk: qcom: mmcc-msm8998: fix venus clock issue - [x86] insn: Fix PUSH instruction in x86 instruction decoder opcode map - ext4: avoid excessive credit estimate in ext4_tmpfile() - sunrpc: removed redundant procp check - ext4: simplify calculation of blkoff in ext4_mb_new_blocks_simple - ext4: fix unit mismatch in ext4_mb_new_blocks_simple - ext4: try all groups in ext4_mb_new_blocks_simple - ext4: remove unused parameter from ext4_mb_new_blocks_simple() - ext4: fix potential unnitialized variable - SUNRPC: Fix gss_free_in_token_pages() - RDMA/IPoIB: Fix format truncation compilation errors - net: qrtr: fix null-ptr-deref in qrtr_ns_remove - net: qrtr: ns: Fix module refcnt - netrom: fix possible dead-lock in nr_rt_ioctl() (CVE-2024-38589) - af_packet: do not call packet_read_pending() from tpacket_destruct_skb() - sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level - greybus: lights: check return of get_channel_from_mode (CVE-2024-38637) - f2fs: fix to wait on page writeback in __clone_blkaddrs() - soundwire: cadence: fix invalid PDI offset (CVE-2024-38635) - dmaengine: idma64: Add check for dma_set_max_seg_size - firmware: dmi-id: add a release callback function - serial: max3100: Lock port->lock when calling uart_handle_cts_change() (CVE-2024-38634) - serial: max3100: Update uart_driver_registered on driver removal (CVE-2024-38633) - serial: max3100: Fix bitwise types - greybus: arche-ctrl: move device table to its right location - serial: sc16is7xx: add proper sched.h include for sched_set_fifo() - f2fs: compress: support chksum - f2fs: add compress_mode mount option - f2fs: compress: clean up parameter of __f2fs_cluster_blocks() - f2fs: compress: remove unneeded preallocation - f2fs: introduce FI_COMPRESS_RELEASED instead of using IMMUTABLE bit - f2fs: compress: fix to relocate check condition in f2fs_{release,reserve}_compress_blocks() - f2fs: add cp_error check in f2fs_write_compressed_pages - f2fs: fix to force keeping write barrier for strict fsync mode - f2fs: do not allow partial truncation on pinned file - f2fs: fix typos in comments - f2fs: fix to relocate check condition in f2fs_fallocate() - f2fs: fix to check pinfile flag in f2fs_move_file_range() - iio: pressure: dps310: support negative temperature values - fpga: region: change FPGA indirect article to an - fpga: region: Rename dev to parent for parent device - docs: driver-api: fpga: avoid using UTF-8 chars - fpga: region: Use standard dev_release for class driver - fpga: region: add owner module and take its refcount - usb: gadget: u_audio: Clear uac pointer when freed. - stm class: Fix a double free in stm_register_device() (CVE-2024-38627) - ppdev: Remove usage of the deprecated ida_simple_xx() API - ppdev: Add an error check in register_device (CVE-2024-36015) - extcon: max8997: select IRQ_DOMAIN instead of depending on it - PCI/EDR: Align EDR_PORT_DPC_ENABLE_DSM with PCI Firmware r3.3 - PCI/EDR: Align EDR_PORT_LOCATE_DSM with PCI Firmware r3.3 - f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock - f2fs: fix to release node block count in error path of f2fs_new_node_page() - f2fs: compress: don't allow unaligned truncation on released compress inode - serial: sh-sci: protect invalidating RXDMA on shutdown - libsubcmd: Fix parse-options memory leak - [s390x] ipl: Fix incorrect initialization of len fields in nvme reipl block - [s390x] ipl: Fix incorrect initialization of nvme dump block - Input: ims-pcu - fix printf string overflow - Input: ioc3kbd - convert to platform remove callback returning void - Input: ioc3kbd - add device table - Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation - drm/msm/dpu: Always flush the slave INTF on the CTL - drm/bridge: tc358775: fix support for jeida-18 and jeida-24 - media: stk1160: fix bounds checking in stk1160_copy_video() (CVE-2024-38621) - scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() - media: flexcop-usb: clean up endpoint sanity checks - media: flexcop-usb: fix sanity check of bNumEndpoints - [powerpc*] pseries: Add failure related checks for h_get_mpp and h_get_ppp - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh - media: cec: cec-api: add locking in cec_release() - media: core headers: fix kernel-doc warnings - media: cec: fix a deadlock situation - media: cec: call enable_adap on s_log_addrs - media: cec: abort if the current transmit was canceled - media: cec: correctly pass on reply results - media: cec: use call_op and check for !unregistered - media: cec-adap.c: drop activate_cnt, use state info instead - media: cec: core: avoid recursive cec_claim_log_addrs - media: cec: core: avoid confusing "transmit timed out" message - null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION() - regulator: bd71828: Don't overwrite runtime voltages - [x86] kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y - nfc: nci: Fix uninit-value in nci_rx_work (CVE-2024-38381) - ASoC: tas2552: Add TX path for capturing AUDIO-OUT data - sunrpc: fix NFSACL RPC retry on soft mount - rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL - ipv6: sr: fix memleak in seg6_hmac_init_algo - params: lift param_set_uint_minmax to common code - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CVE-2024-37356)). - openvswitch: Set the skbuff pkt_type for proper pmtud support. - [arm64] asm-bug: Add .align 2 to the end of __BUG_ENTRY - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails - net: fec: avoid lock evasion when reading pps_enable - tls: fix missing memory barrier in tls_init (CVE-2024-36489) - nfc: nci: Fix kcov check in nci_rx_work() - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() - netfilter: nft_payload: restore vlan q-in-q match support - spi: Don't mark message DMA mapped when no transfer in it is - nvmet: fix ns enable/disable possible hang - net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion - dma-buf/sw-sync: don't enable IRQ from sync_print_obj() (CVE-2024-38780) - bpf: Fix potential integer overflow in resolve_btfids - enic: Validate length of nl attributes in enic_set_vf_port (CVE-2024-38659) - net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM - bpf: Allow delete from sockmap/sockhash only if update is allowed (CVE-2024-38662) - net:fec: Add fec_enet_deinit() - netfilter: tproxy: bail out if IP has been disabled on the device (CVE-2024-36270) - kconfig: fix comparison to constant symbols, 'm', 'n' - spi: stm32: Don't warn about spurious interrupts - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound - hwmon: (shtc1) Fix property misspelling - ALSA: timer: Set lower bound of start tick time (CVE-2024-38618) - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (CVE-2024-31076) - media: cec: core: add adap_nb_transmit_canceled() callback - SUNRPC: Fix loop termination condition in gss_free_in_token_pages() (CVE-2024-36288) - [arm*] binder: fix max_thread type inconsistency - mmc: core: Do not force a retune before RPMB switch - io_uring: fail NOP if non-zero op flags is passed in - afs: Don't cross .backup mountpoint from backup volume - nilfs2: fix use-after-free of timer for log writer thread (CVE-2024-38583) - vxlan: Fix regression when dropping packets due to invalid src addresses - [x86] mm: Remove broken vsyscall emulation code from the page fault code - netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (CVE-2024-27019) - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() - media: lgdt3306a: Add a check against null-pointer-def - drm/amdgpu: add error handle to avoid out-of-bounds - ata: pata_legacy: make legacy_exit() work again - ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx - [arm64] tegra: Correct Tegra132 I2C alias - [arm64] dts: qcom: qcs404: fix bluetooth device address - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING - wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU - wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE - wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path - [arm64] dts: hi3798cv200: fix the size of GICR - media: mc: mark the media devnode as registered from the, start - media: mxl5xx: Move xpt structures off stack - media: v4l2-core: hold videodev_lock until dev reg, finishes - mmc: core: Add mmc_gpiod_set_cd_config() function - mmc: sdhci-acpi: Sort DMI quirks alphabetically - mmc: sdhci-acpi: Fix Lenovo Yoga Tablet 2 Pro 1380 sdcard slot not working - mmc: sdhci-acpi: Disable write protect detection on Toshiba WT10-A - fbdev: savage: Handle err return when savagefb_check_var failed - [arm64] KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode - crypto: ecrdsa - Fix module auto-load on add_key - [x86] crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak - net/ipv6: Fix route deleting failure when metric equals 0 - net/9p: fix uninit-value in p9_client_rpc() - [x86] intel_th: pci: Add Meteor Lake-S CPU support - watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin - kdb: Fix buffer overflow during tab-complete - kdb: Use format-strings rather than '\0' injection in kdb_read() - kdb: Fix console handling when editing and tab-completing commands - kdb: Merge identical case statements in kdb_read() - kdb: Use format-specifiers rather than memset() for padding in kdb_read() - net: fix __dst_negative_advice() race - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() - [s390x] ap: Fix crash in AP internal function modify_bitmap() - nfs: fix undefined behavior in nfs_block_bits() - NFS: Fix READ_PLUS when server doesn't support OP_READ_PLUS - scsi: ufs: ufs-qcom: Clear qunipro_g4_sel for HW major version > 5 - f2fs: compress: fix compression chksum - [arm64] RDMA/hns: Use mutex instead of spinlock for ida allocation - [arm64] RDMA/hns: Fix CQ and QP cache affinity https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.220 - SUNRPC: Rename svc_encode_read_payload() - NFSD: Invoke svc_encode_result_payload() in "read" NFSD encoders - NFSD: A semicolon is not needed after a switch statement. - nfsd/nfs3: remove unused macro nfsd3_fhandleres - NFSD: Clean up the show_nf_may macro - NFSD: Remove extra "0x" in tracepoint format specifier - NFSD: Add SPDX header for fs/nfsd/trace.c - nfsd: Fix error return code in nfsd_file_cache_init() - SUNRPC: Add xdr_set_scratch_page() and xdr_reset_scratch_buffer() - SUNRPC: Prepare for xdr_stream-style decoding on the server-side - NFSD: Add common helpers to decode void args and encode void results - NFSD: Add tracepoints in nfsd_dispatch() - NFSD: Add tracepoints in nfsd4_decode/encode_compound() - NFSD: Replace the internals of the READ_BUF() macro - NFSD: Replace READ* macros in nfsd4_decode_access() - NFSD: Replace READ* macros in nfsd4_decode_close() - NFSD: Replace READ* macros in nfsd4_decode_commit() - NFSD: Change the way the expected length of a fattr4 is checked - NFSD: Replace READ* macros that decode the fattr4 size attribute - NFSD: Replace READ* macros that decode the fattr4 acl attribute - NFSD: Replace READ* macros that decode the fattr4 mode attribute - NFSD: Replace READ* macros that decode the fattr4 owner attribute - NFSD: Replace READ* macros that decode the fattr4 owner_group attribute - NFSD: Replace READ* macros that decode the fattr4 time_set attributes - NFSD: Replace READ* macros that decode the fattr4 security label attribute - NFSD: Replace READ* macros that decode the fattr4 umask attribute - NFSD: Replace READ* macros in nfsd4_decode_fattr() - NFSD: Replace READ* macros in nfsd4_decode_create() - NFSD: Replace READ* macros in nfsd4_decode_delegreturn() - NFSD: Replace READ* macros in nfsd4_decode_getattr() - NFSD: Replace READ* macros in nfsd4_decode_link() - NFSD: Relocate nfsd4_decode_opaque() - NFSD: Add helpers to decode a clientid4 and an NFSv4 state owner - NFSD: Add helper for decoding locker4 - NFSD: Replace READ* macros in nfsd4_decode_lock() - NFSD: Replace READ* macros in nfsd4_decode_lockt() - NFSD: Replace READ* macros in nfsd4_decode_locku() - NFSD: Replace READ* macros in nfsd4_decode_lookup() - NFSD: Add helper to decode NFSv4 verifiers - NFSD: Add helper to decode OPEN's createhow4 argument - NFSD: Add helper to decode OPEN's openflag4 argument - NFSD: Replace READ* macros in nfsd4_decode_share_access() - NFSD: Replace READ* macros in nfsd4_decode_share_deny() - NFSD: Add helper to decode OPEN's open_claim4 argument - NFSD: Replace READ* macros in nfsd4_decode_open() - NFSD: Replace READ* macros in nfsd4_decode_open_confirm() - NFSD: Replace READ* macros in nfsd4_decode_open_downgrade() - NFSD: Replace READ* macros in nfsd4_decode_putfh() - NFSD: Replace READ* macros in nfsd4_decode_read() - NFSD: Replace READ* macros in nfsd4_decode_readdir() - NFSD: Replace READ* macros in nfsd4_decode_remove() - NFSD: Replace READ* macros in nfsd4_decode_rename() - NFSD: Replace READ* macros in nfsd4_decode_renew() - NFSD: Replace READ* macros in nfsd4_decode_secinfo() - NFSD: Replace READ* macros in nfsd4_decode_setattr() - NFSD: Replace READ* macros in nfsd4_decode_setclientid() - NFSD: Replace READ* macros in nfsd4_decode_setclientid_confirm() - NFSD: Replace READ* macros in nfsd4_decode_verify() - NFSD: Replace READ* macros in nfsd4_decode_write() - NFSD: Replace READ* macros in nfsd4_decode_release_lockowner() - NFSD: Replace READ* macros in nfsd4_decode_cb_sec() - NFSD: Replace READ* macros in nfsd4_decode_backchannel_ctl() - NFSD: Replace READ* macros in nfsd4_decode_bind_conn_to_session() - NFSD: Add a separate decoder to handle state_protect_ops - NFSD: Add a separate decoder for ssv_sp_parms - NFSD: Add a helper to decode state_protect4_a - NFSD: Add a helper to decode nfs_impl_id4 - NFSD: Add a helper to decode channel_attrs4 - NFSD: Replace READ* macros in nfsd4_decode_create_session() - NFSD: Replace READ* macros in nfsd4_decode_destroy_session() - NFSD: Replace READ* macros in nfsd4_decode_free_stateid() - NFSD: Replace READ* macros in nfsd4_decode_getdeviceinfo() - NFSD: Replace READ* macros in nfsd4_decode_layoutcommit() - NFSD: Replace READ* macros in nfsd4_decode_layoutget() - NFSD: Replace READ* macros in nfsd4_decode_layoutreturn() - NFSD: Replace READ* macros in nfsd4_decode_secinfo_no_name() - NFSD: Replace READ* macros in nfsd4_decode_sequence() - NFSD: Replace READ* macros in nfsd4_decode_test_stateid() - NFSD: Replace READ* macros in nfsd4_decode_destroy_clientid() - NFSD: Replace READ* macros in nfsd4_decode_reclaim_complete() - NFSD: Replace READ* macros in nfsd4_decode_fallocate() - NFSD: Replace READ* macros in nfsd4_decode_nl4_server() - NFSD: Replace READ* macros in nfsd4_decode_copy() - NFSD: Replace READ* macros in nfsd4_decode_copy_notify() - NFSD: Replace READ* macros in nfsd4_decode_offload_status() - NFSD: Replace READ* macros in nfsd4_decode_seek() - NFSD: Replace READ* macros in nfsd4_decode_clone() - NFSD: Replace READ* macros in nfsd4_decode_xattr_name() - NFSD: Replace READ* macros in nfsd4_decode_setxattr() - NFSD: Replace READ* macros in nfsd4_decode_listxattrs() - NFSD: Make nfsd4_ops::opnum a u32 - NFSD: Replace READ* macros in nfsd4_decode_compound() - NFSD: Remove macros that are no longer used - nfsd: only call inode_query_iversion in the I_VERSION case - nfsd: simplify nfsd4_change_info - nfsd: minor nfsd4_change_attribute cleanup - nfsd4: don't query change attribute in v2/v3 case - Revert "nfsd4: support change_attr_type attribute" - nfsd: add a new EXPORT_OP_NOWCC flag to struct export_operations - nfsd: allow filesystems to opt out of subtree checking - nfsd: close cached files prior to a REMOVE or RENAME that would replace target - exportfs: Add a function to return the raw output from fh_to_dentry() - nfsd: Fix up nfsd to ensure that timeout errors don't result in ESTALE - nfsd: Set PF_LOCAL_THROTTLE on local filesystems only - nfsd: Record NFSv4 pre/post-op attributes as non-atomic - exec: Don't open code get_close_on_exec - exec: Move unshare_files to fix posix file locking during exec - exec: Simplify unshare_files - exec: Remove reset_files_struct - kcmp: In kcmp_epoll_target use fget_task - bpf: In bpf_task_fd_query use fget_task - proc/fd: In proc_fd_link use fget_task - Revert "fget: clarify and improve __fget_files() implementation" - file: Rename __fcheck_files to files_lookup_fd_raw - file: Factor files_lookup_fd_locked out of fcheck_files - file: Replace fcheck_files with files_lookup_fd_rcu - file: Rename fcheck lookup_fd_rcu - file: Implement task_lookup_fd_rcu - proc/fd: In tid_fd_mode use task_lookup_fd_rcu - kcmp: In get_file_raw_ptr use task_lookup_fd_rcu - file: Implement task_lookup_next_fd_rcu - proc/fd: In proc_readfd_common use task_lookup_next_fd_rcu - proc/fd: In fdinfo seq_show don't use get_files_struct - file: Merge __fd_install into fd_install - file: In f_dupfd read RLIMIT_NOFILE once. - file: Merge __alloc_fd into alloc_fd - file: Rename __close_fd to close_fd and remove the files parameter - file: Replace ksys_close with close_fd - inotify: Increase default inotify.max_user_watches limit to 1048576 - fs/lockd: convert comma to semicolon - NFSD: Fix sparse warning in nfssvc.c - NFSD: Restore NFSv4 decoding's SAVEMEM functionality - SUNRPC: Make trace_svc_process() display the RPC procedure symbolically - SUNRPC: Display RPC procedure names instead of proc numbers - SUNRPC: Move definition of XDR_UNIT - NFSD: Update GETATTR3args decoder to use struct xdr_stream - NFSD: Update ACCESS3arg decoder to use struct xdr_stream - NFSD: Update READ3arg decoder to use struct xdr_stream - NFSD: Update WRITE3arg decoder to use struct xdr_stream - NFSD: Update READLINK3arg decoder to use struct xdr_stream - NFSD: Fix returned READDIR offset cookie - NFSD: Add helper to set up the pages where the dirlist is encoded - NFSD: Update READDIR3args decoders to use struct xdr_stream - NFSD: Update COMMIT3arg decoder to use struct xdr_stream - NFSD: Update the NFSv3 DIROPargs decoder to use struct xdr_stream - NFSD: Update the RENAME3args decoder to use struct xdr_stream - NFSD: Update the LINK3args decoder to use struct xdr_stream - NFSD: Update the SETATTR3args decoder to use struct xdr_stream - NFSD: Update the CREATE3args decoder to use struct xdr_stream - NFSD: Update the MKDIR3args decoder to use struct xdr_stream - NFSD: Update the SYMLINK3args decoder to use struct xdr_stream - NFSD: Update the MKNOD3args decoder to use struct xdr_stream - NFSD: Update the NFSv2 GETATTR argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 READ argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 WRITE argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 READLINK argument decoder to use struct xdr_stream - NFSD: Add helper to set up the pages where the dirlist is encoded - NFSD: Update the NFSv2 READDIR argument decoder to use struct xdr_stream - NFSD: Update NFSv2 diropargs decoding to use struct xdr_stream - NFSD: Update the NFSv2 RENAME argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 LINK argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 SETATTR argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 CREATE argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 SYMLINK argument decoder to use struct xdr_stream - NFSD: Remove argument length checking in nfsd_dispatch() - NFSD: Update the NFSv2 GETACL argument decoder to use struct xdr_stream - NFSD: Add an xdr_stream-based decoder for NFSv2/3 ACLs - NFSD: Update the NFSv2 SETACL argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 ACL GETATTR argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 ACL ACCESS argument decoder to use struct xdr_stream - NFSD: Clean up after updating NFSv2 ACL decoders - NFSD: Update the NFSv3 GETACL argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 SETACL argument decoder to use struct xdr_stream - NFSD: Clean up after updating NFSv3 ACL decoders - nfsd: remove unused stats counters - nfsd: protect concurrent access to nfsd stats counters - nfsd: report per-export stats - nfsd4: simplify process_lookup1 - nfsd: simplify process_lock - nfsd: simplify nfsd_renew - nfsd: rename lookup_clientid->set_client - nfsd: refactor set_client - nfsd: find_cpntf_state cleanup - nfsd: remove unused set_client argument - nfsd: simplify nfsd4_check_open_reclaim - nfsd: cstate->session->se_client -> cstate->clp - NFSv4_2: SSC helper should use its own config. - nfs: use change attribute for NFS re-exports - nfsd: skip some unnecessary stats in the v4 case - inotify, memcg: account inotify instances to kmemcg - module: unexport find_module and module_mutex - module: use RCU to synchronize find_module - kallsyms: refactor {,module_}kallsyms_on_each_symbol - kallsyms: only build {,module_}kallsyms_on_each_symbol when required - fs: add file and path permissions helpers - namei: introduce struct renamedata - NFSD: Extract the svcxdr_init_encode() helper - NFSD: Update the GETATTR3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 ACCESS3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 LOOKUP3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 wccstat result encoder to use struct xdr_stream - NFSD: Update the NFSv3 READLINK3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 READ3res encode to use struct xdr_stream - NFSD: Update the NFSv3 WRITE3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 CREATE family of encoders to use struct xdr_stream - NFSD: Update the NFSv3 RENAMEv3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 LINK3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 FSSTAT3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 FSINFO3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 PATHCONF3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 COMMIT3res encoder to use struct xdr_stream - NFSD: Add a helper that encodes NFSv3 directory offset cookies - NFSD: Count bytes instead of pages in the NFSv3 READDIR encoder - NFSD: Update the NFSv3 READDIR3res encoder to use struct xdr_stream - NFSD: Update NFSv3 READDIR entry encoders to use struct xdr_stream - NFSD: Remove unused NFSv3 directory entry encoders - NFSD: Reduce svc_rqst::rq_pages churn during READDIR operations - NFSD: Update the NFSv2 stat encoder to use struct xdr_stream - NFSD: Update the NFSv2 attrstat encoder to use struct xdr_stream - NFSD: Update the NFSv2 diropres encoder to use struct xdr_stream - NFSD: Update the NFSv2 READLINK result encoder to use struct xdr_stream - NFSD: Update the NFSv2 READ result encoder to use struct xdr_stream - NFSD: Update the NFSv2 STATFS result encoder to use struct xdr_stream - NFSD: Add a helper that encodes NFSv3 directory offset cookies - NFSD: Count bytes instead of pages in the NFSv2 READDIR encoder - NFSD: Update the NFSv2 READDIR result encoder to use struct xdr_stream - NFSD: Update the NFSv2 READDIR entry encoder to use struct xdr_stream - NFSD: Remove unused NFSv2 directory entry encoders - NFSD: Add an xdr_stream-based encoder for NFSv2/3 ACLs - NFSD: Update the NFSv2 GETACL result encoder to use struct xdr_stream - NFSD: Update the NFSv2 SETACL result encoder to use struct xdr_stream - NFSD: Update the NFSv2 ACL GETATTR result encoder to use struct xdr_stream - NFSD: Update the NFSv2 ACL ACCESS result encoder to use struct xdr_stream - NFSD: Clean up after updating NFSv2 ACL encoders - NFSD: Update the NFSv3 GETACL result encoder to use struct xdr_stream - NFSD: Update the NFSv3 SETACL result encoder to use struct xdr_stream - NFSD: Clean up after updating NFSv3 ACL encoders - NFSD: Add a tracepoint to record directory entry encoding - NFSD: Clean up NFSDDBG_FACILITY macro - nfsd: helper for laundromat expiry calculations - nfsd: Log client tracking type log message as info instead of warning - nfsd: Fix typo "accesible" - nfsd: COPY with length 0 should copy to end of file - nfsd: don't ignore high bits of copy count - nfsd: report client confirmation status in "info" file - SUNRPC: Export svc_xprt_received() - UAPI: nfsfh.h: Replace one-element array with flexible-array member - NFSD: Use DEFINE_SPINLOCK() for spinlock - fsnotify: allow fsnotify_{peek,remove}_first_event with empty queue - Revert "fanotify: limit number of event merge attempts" - fanotify: reduce event objectid to 29-bit hash - fanotify: mix event info and pid into merge key hash - fsnotify: use hash table for faster events merge - fanotify: limit number of event merge attempts - fanotify: configurable limits via sysfs - fanotify: support limited functionality for unprivileged users - fanotify_user: use upper_32_bits() to verify mask - nfsd: remove unused function - nfsd: removed unused argument in nfsd_startup_generic() - nfsd: hash nfs4_files by inode number - nfsd: track filehandle aliasing in nfs4_files - nfsd: reshuffle some code - nfsd: grant read delegations to clients holding writes - nfsd: Fix fall-through warnings for Clang - NFSv4.2: Remove ifdef CONFIG_NFSD from NFSv4.2 client SSC code. - NFS: fix nfs_fetch_iversion() - fanotify: fix permission model of unprivileged group - NFSD: Add an RPC authflavor tracepoint display helper - NFSD: Add nfsd_clid_cred_mismatch tracepoint - NFSD: Add nfsd_clid_verf_mismatch tracepoint - NFSD: Remove trace_nfsd_clid_inuse_err - NFSD: Add nfsd_clid_confirmed tracepoint - NFSD: Add nfsd_clid_reclaim_complete tracepoint - NFSD: Add nfsd_clid_destroyed tracepoint - NFSD: Add a couple more nfsd_clid_expired call sites - NFSD: Add tracepoints for SETCLIENTID edge cases - NFSD: Add tracepoints for EXCHANGEID edge cases - NFSD: Constify @fh argument of knfsd_fh_hash() - NFSD: Capture every CB state transition - NFSD: Drop TRACE_DEFINE_ENUM for NFSD4_CB_ macros - NFSD: Add cb_lost tracepoint - NFSD: Adjust cb_shutdown tracepoint - NFSD: Enhance the nfsd_cb_setup tracepoint - NFSD: Add an nfsd_cb_lm_notify tracepoint - NFSD: Add an nfsd_cb_offload tracepoint - NFSD: Replace the nfsd_deleg_break tracepoint - NFSD: Add an nfsd_cb_probe tracepoint - NFSD: Remove the nfsd_cb_work and nfsd_cb_done tracepoints - NFSD: Update nfsd_cb_args tracepoint - nfsd: Prevent truncation of an unlinked inode from blocking access to its directory - nfsd: move some commit_metadata()s outside the inode lock - NFSD add vfs_fsync after async copy is done - NFSD: delay unmount source's export after inter-server copy completed. - nfsd: move fsnotify on client creation outside spinlock - nfsd4: Expose the callback address and state of each NFS4 client - nfsd: fix kernel test robot warning in SSC code - NFSD: Fix error return code in nfsd4_interssc_connect() - nfsd: rpc_peeraddr2str needs rcu lock - lockd: Remove stale comments - lockd: Create a simplified .vs_dispatch method for NLM requests - lockd: Common NLM XDR helpers - lockd: Update the NLMv1 void argument decoder to use struct xdr_stream - lockd: Update the NLMv1 TEST arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 LOCK arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 CANCEL arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 UNLOCK arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 nlm_res arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 SM_NOTIFY arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 SHARE arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 FREE_ALL arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 void results encoder to use struct xdr_stream - lockd: Update the NLMv1 TEST results encoder to use struct xdr_stream - lockd: Update the NLMv1 nlm_res results encoder to use struct xdr_stream - lockd: Update the NLMv1 SHARE results encoder to use struct xdr_stream - lockd: Update the NLMv4 void arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 TEST arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 LOCK arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 CANCEL arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 UNLOCK arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 nlm_res arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 SM_NOTIFY arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 SHARE arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 FREE_ALL arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 void results encoder to use struct xdr_stream - lockd: Update the NLMv4 TEST results encoder to use struct xdr_stream - lockd: Update the NLMv4 nlm_res results encoder to use struct xdr_stream - lockd: Update the NLMv4 SHARE results encoder to use struct xdr_stream - nfsd: remove redundant assignment to pointer 'this' - NFSD: Prevent a possible oops in the nfs_dirent() tracepoint - nfsd: fix NULL dereference in nfs3svc_encode_getaclres - kernel/pid.c: remove static qualifier from pidfd_create() - kernel/pid.c: implement additional checks upon pidfd_create() parameters - fanotify: minor cosmetic adjustments to fid labels - fanotify: introduce a generic info record copying helper - fanotify: add pidfd support to the fanotify API - fsnotify: replace igrab() with ihold() on attach connector - fsnotify: count s_fsnotify_inode_refs for attached connectors - fsnotify: count all objects with attached connectors - fsnotify: optimize the case of no marks of any type - NFSD: Clean up splice actor - SUNRPC: Add svc_rqst_replace_page() API - NFSD: Batch release pages during splice read - NFSD: remove vanity comments - sysctl: introduce new proc handler proc_dobool - lockd: change the proc_handler for nsm_use_hostnames - nlm: minor nlm_lookup_file argument change - nlm: minor refactoring - lockd: update nlm_lookup_file reexport comment - Keep read and write fds with each nlm_file - nfs: don't atempt blocking locks on nfs reexports - lockd: don't attempt blocking locks on nfs reexports - nfs: don't allow reexport reclaims - SUNRPC: Add svc_rqst::rq_auth_stat - SUNRPC: Set rq_auth_stat in the pg_authenticate() callout - SUNRPC: Eliminate the RQ_AUTHERR flag - NFS: Add a private local dispatcher for NFSv4 callback operations - NFS: Remove unused callback void decoder - fsnotify: fix sb_connectors leak - NLM: Fix svcxdr_encode_owner() - nfsd: Fix a warning for nfsd_file_close_inode - fsnotify: pass data_type to fsnotify_name() - fsnotify: pass dentry instead of inode data - fsnotify: clarify contract for create event hooks - fsnotify: Don't insert unmergeable events in hashtable - fanotify: Fold event size calculation to its own function - fanotify: Split fsid check from other fid mode checks - inotify: Don't force FS_IN_IGNORED - fsnotify: Add helper to detect overflow_event - fsnotify: Add wrapper around fsnotify_add_event - fsnotify: Retrieve super block from the data field - fsnotify: Protect fsnotify_handle_inode_event from no-inode events - fsnotify: Pass group argument to free_event - fanotify: Support null inode event in fanotify_dfid_inode - fanotify: Allow file handle encoding for unhashed events - fanotify: Encode empty file handle when no inode is provided - fanotify: Require fid_mode for any non-fd event - fsnotify: Support FS_ERROR event type - fanotify: Reserve UAPI bits for FAN_FS_ERROR - fanotify: Pre-allocate pool of error events - fanotify: Support enqueueing of error events - fanotify: Support merging of error events - fanotify: Wrap object_fh inline space in a creator macro - fanotify: Add helpers to decide whether to report FID/DFID - fanotify: WARN_ON against too large file handles - fanotify: Report fid info for file related file system errors - fanotify: Emit generic error info for error event - fanotify: Allow users to request FAN_FS_ERROR events - SUNRPC: Trace calls to .rpc_call_done - NFSD: Optimize DRC bucket pruning - NFSD: move filehandle format declarations out of "uapi". - NFSD: drop support for ancient filehandles - NFSD: simplify struct nfsfh - NFSD: Initialize pointer ni with NULL and not plain integer 0 - NFSD: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() - SUNRPC: Replace the "__be32 *p" parameter to .pc_decode - SUNRPC: Change return value type of .pc_decode - NFSD: Save location of NFSv4 COMPOUND status - SUNRPC: Replace the "__be32 *p" parameter to .pc_encode - SUNRPC: Change return value type of .pc_encode - nfsd: update create verifier comment - NFSD:fix boolreturn.cocci warning - nfsd4: remove obselete comment - NFSD: Fix exposure in nfsd4_decode_bitmap() - NFSD: Fix READDIR buffer overflow - fsnotify: clarify object type argument - fsnotify: separate mark iterator type from object type enum - fanotify: introduce group flag FAN_REPORT_TARGET_FID - fsnotify: generate FS_RENAME event with rich information - fanotify: use macros to get the offset to fanotify_info buffer - fanotify: use helpers to parcel fanotify_info buffer - fanotify: support secondary dir fh and name in fanotify_info - fanotify: record old and new parent and name in FAN_RENAME event - fanotify: record either old name new name or both for FAN_RENAME - fanotify: report old and/or new parent+name in FAN_RENAME event - fanotify: wire up FAN_RENAME event - exit: Implement kthread_exit - exit: Rename module_put_and_exit to module_put_and_kthread_exit - NFSD: Fix sparse warning - NFSD: handle errors better in write_ports_addfd() - SUNRPC: change svc_get() to return the svc. - SUNRPC/NFSD: clean up get/put functions. - SUNRPC: stop using ->sv_nrthreads as a refcount - nfsd: make nfsd_stats.th_cnt atomic_t - SUNRPC: use sv_lock to protect updates to sv_nrthreads. - NFSD: narrow nfsd_mutex protection in nfsd thread - NFSD: Make it possible to use svc_set_num_threads_sync - SUNRPC: discard svo_setup and rename svc_set_num_threads_sync() - NFSD: simplify locking for network notifier. - lockd: introduce nlmsvc_serv - lockd: simplify management of network status notifiers - lockd: move lockd_start_svc() call into lockd_create_svc() - lockd: move svc_exit_thread() into the thread - lockd: introduce lockd_put() - lockd: rename lockd_create_svc() to lockd_get() - SUNRPC: move the pool_map definitions (back) into svc.c - SUNRPC: always treat sv_nrpools==1 as "not pooled" - lockd: use svc_set_num_threads() for thread start and stop - NFS: switch the callback service back to non-pooled. - NFSD: Remove be32_to_cpu() from DRC hash function - NFSD: Fix inconsistent indenting - NFSD: simplify per-net file cache management - NFSD: Combine XDR error tracepoints - nfsd: improve stateid access bitmask documentation - NFSD: De-duplicate nfsd4_decode_bitmap4() - nfs: block notification on fs with its own ->lock - nfsd4: add refcount for nfsd4_blocked_lock - NFSD: Fix zero-length NFSv3 WRITEs - nfsd: map EBADF - nfsd: Add errno mapping for EREMOTEIO - nfsd: Retry once in nfsd_open on an -EOPENSTALE return - NFSD: Clean up nfsd_vfs_write() - NFSD: De-duplicate net_generic(SVC_NET(rqstp), nfsd_net_id) - NFSD: De-duplicate net_generic(nf->nf_net, nfsd_net_id) - nfsd: Add a tracepoint for errors in nfsd4_clone_file_range() - NFSD: Write verifier might go backwards - NFSD: Clean up the nfsd_net::nfssvc_boot field - NFSD: Rename boot verifier functions - NFSD: Trace boot verifier resets - Revert "nfsd: skip some unnecessary stats in the v4 case" - NFSD: Move fill_pre_wcc() and fill_post_wcc() - nfsd: fix crash on COPY_NOTIFY with special stateid - fanotify: remove variable set but not used - lockd: fix server crash on reboot of client holding lock - lockd: fix failure to cleanup client locks - NFSD: Fix the behavior of READ near OFFSET_MAX - NFSD: Fix ia_size underflow - NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes - NFSD: COMMIT operations must not return NFS?ERR_INVAL - NFSD: Deprecate NFS_OFFSET_MAX - nfsd: Add support for the birth time attribute - NFSD: De-duplicate hash bucket indexing - NFSD: Skip extra computation for RC_NOCACHE case - NFSD: Streamline the rare "found" case - SUNRPC: Remove the .svo_enqueue_xprt method - SUNRPC: Merge svc_do_enqueue_xprt() into svc_enqueue_xprt() - SUNRPC: Remove svo_shutdown method - SUNRPC: Rename svc_create_xprt() - SUNRPC: Rename svc_close_xprt() - SUNRPC: Remove svc_shutdown_net() - NFSD: Remove svc_serv_ops::svo_module - NFSD: Move svc_serv_ops::svo_function into struct svc_serv - NFSD: Remove CONFIG_NFSD_V3 - NFSD: Clean up _lm_ operation names - nfsd: fix using the correct variable for sizeof() - fsnotify: fix merge with parent's ignored mask - fsnotify: optimize FS_MODIFY events with no ignored masks - fsnotify: remove redundant parameter judgment - SUNRPC: Return true/false (not 1/0) from bool functions - nfsd: Fix a write performance regression - nfsd: Clean up nfsd_file_put() - fanotify: do not allow setting dirent events in mask of non-dir - fs/lock: documentation cleanup. Replace inode->i_lock with flc_lock. - inotify: move control flags from mask to mark flags - fsnotify: pass flags argument to fsnotify_alloc_group() - fsnotify: make allow_dups a property of the group - fsnotify: create helpers for group mark_mutex lock - inotify: use fsnotify group lock helpers - nfsd: use fsnotify group lock helpers - dnotify: use fsnotify group lock helpers - fsnotify: allow adding an inode mark without pinning inode - fanotify: create helper fanotify_mark_user_flags() - fanotify: factor out helper fanotify_mark_update_flags() - fanotify: implement "evictable" inode marks - fanotify: use fsnotify group lock helpers - fanotify: enable "evictable" inode marks - fsnotify: introduce mark type iterator - fsnotify: consistent behavior for parent not watching children - fanotify: fix incorrect fmode_t casts - NFSD: Clean up nfsd_splice_actor() - NFSD: add courteous server support for thread with only delegation - NFSD: add support for share reservation conflict to courteous server - NFSD: move create/destroy of laundry_wq to init_nfsd and exit_nfsd - fs/lock: add helper locks_owner_has_blockers to check for blockers - fs/lock: add 2 callbacks to lock_manager_operations to resolve conflict - NFSD: add support for lock conflict to courteous server - NFSD: Show state of courtesy client in client info - NFSD: Clean up nfsd3_proc_create() - NFSD: Avoid calling fh_drop_write() twice in do_nfsd_create() - NFSD: Refactor nfsd_create_setattr() - NFSD: Refactor NFSv3 CREATE - NFSD: Refactor NFSv4 OPEN(CREATE) - NFSD: Remove do_nfsd_create() - NFSD: Clean up nfsd_open_verified() - NFSD: Instantiate a struct file when creating a regular NFSv4 file - NFSD: Remove dprintk call sites from tail of nfsd4_open() - NFSD: Fix whitespace - NFSD: Move documenting comment for nfsd4_process_open2() - NFSD: Trace filecache opens - NFSD: Clean up the show_nf_flags() macro - SUNRPC: Use RMW bitops in single-threaded hot paths - nfsd: Unregister the cld notifier when laundry_wq create failed - nfsd: Fix null-ptr-deref in nfsd_fill_super() - nfsd: destroy percpu stats counters after reply cache shutdown - NFSD: Modernize nfsd4_release_lockowner() - NFSD: Add documenting comment for nfsd4_release_lockowner() - NFSD: nfsd_file_put() can sleep - NFSD: Fix potential use-after-free in nfsd_file_put() - SUNRPC: Optimize xdr_reserve_space() - fanotify: refine the validation checks on non-dir inode mask - NFS: restore module put when manager exits. - NFSD: Decode NFSv4 birth time attribute - lockd: set fl_owner when unlocking files - lockd: fix nlm_close_files - fs: inotify: Fix typo in inotify comment - fanotify: prepare for setting event flags in ignore mask - fanotify: cleanups for fanotify_mark() input validations - fanotify: introduce FAN_MARK_IGNORE - fsnotify: Fix comment typo - nfsd: eliminate the NFSD_FILE_BREAK_* flags - SUNRPC: Fix xdr_encode_bool() - NLM: Defend against file_lock changes after vfs_test_lock() - NFSD: Fix space and spelling mistake - nfsd: remove redundant assignment to variable len - NFSD: Demote a WARN to a pr_warn() - NFSD: Report filecache LRU size - NFSD: Report count of calls to nfsd_file_acquire() - NFSD: Report count of freed filecache items - NFSD: Report average age of filecache items - NFSD: Add nfsd_file_lru_dispose_list() helper - NFSD: Refactor nfsd_file_gc() - NFSD: Refactor nfsd_file_lru_scan() - NFSD: Report the number of items evicted by the LRU walk - NFSD: Record number of flush calls - NFSD: Zero counters when the filecache is re-initialized - NFSD: Hook up the filecache stat file - NFSD: WARN when freeing an item still linked via nf_lru - NFSD: Trace filecache LRU activity - NFSD: Leave open files out of the filecache LRU - NFSD: Fix the filecache LRU shrinker - NFSD: Never call nfsd_file_gc() in foreground paths - NFSD: No longer record nf_hashval in the trace log - NFSD: Remove lockdep assertion from unhash_and_release_locked() - NFSD: nfsd_file_unhash can compute hashval from nf->nf_inode - NFSD: Refactor __nfsd_file_close_inode() - NFSD: nfsd_file_hash_remove can compute hashval - NFSD: Remove nfsd_file::nf_hashval - NFSD: Replace the "init once" mechanism - NFSD: Set up an rhashtable for the filecache - NFSD: Convert the filecache to use rhashtable - NFSD: Clean up unused code after rhashtable conversion - NFSD: Separate tracepoints for acquire and create - NFSD: Move nfsd_file_trace_alloc() tracepoint - NFSD: NFSv4 CLOSE should release an nfsd_file immediately - NFSD: Ensure nf_inode is never dereferenced - NFSD: refactoring v4 specific code to a helper in nfs4state.c - NFSD: keep track of the number of v4 clients in the system - NFSD: limit the number of v4 clients to 1024 per 1GB of system memory - nfsd: silence extraneous printk on nfsd.ko insertion - NFSD: Optimize nfsd4_encode_operation() - NFSD: Optimize nfsd4_encode_fattr() - NFSD: Clean up SPLICE_OK in nfsd4_encode_read() - NFSD: Add an nfsd4_read::rd_eof field - NFSD: Optimize nfsd4_encode_readv() - NFSD: Simplify starting_len - NFSD: Use xdr_pad_size() - NFSD: Clean up nfsd4_encode_readlink() - NFSD: Fix strncpy() fortify warning - NFSD: nfserrno(-ENOMEM) is nfserr_jukebox - NFSD: Shrink size of struct nfsd4_copy_notify - NFSD: Shrink size of struct nfsd4_copy - NFSD: Reorder the fields in struct nfsd4_op - NFSD: Make nfs4_put_copy() static - NFSD: Replace boolean fields in struct nfsd4_copy - NFSD: Refactor nfsd4_cleanup_inter_ssc() (1/2) - NFSD: Refactor nfsd4_cleanup_inter_ssc() (2/2) - NFSD: Refactor nfsd4_do_copy() - NFSD: Remove kmalloc from nfsd4_do_async_copy() - NFSD: Add nfsd4_send_cb_offload() - NFSD: Move copy offload callback arguments into a separate structure - NFSD: drop fh argument from alloc_init_deleg - NFSD: verify the opened dentry after setting a delegation - NFSD: introduce struct nfsd_attrs - NFSD: set attributes when creating symlinks - NFSD: add security label to struct nfsd_attrs - NFSD: add posix ACLs to struct nfsd_attrs - NFSD: change nfsd_create()/nfsd_symlink() to unlock directory before returning. - NFSD: always drop directory lock in nfsd_unlink() - NFSD: only call fh_unlock() once in nfsd_link() - NFSD: reduce locking in nfsd_lookup() - NFSD: use explicit lock/unlock for directory ops - NFSD: use (un)lock_inode instead of fh_(un)lock for file operations - NFSD: discard fh_locked flag and fh_lock/fh_unlock - lockd: detect and reject lock arguments that overflow - NFSD: fix regression with setting ACLs. - nfsd_splice_actor(): handle compound pages - NFSD: move from strlcpy with unused retval to strscpy - lockd: move from strlcpy with unused retval to strscpy - NFSD enforce filehandle check for source file in COPY - NFSD: remove redundant variable status - nfsd: Avoid some useless tests - nfsd: Propagate some error code returned by memdup_user() - NFSD: Increase NFSD_MAX_OPS_PER_COMPOUND - NFSD: Protect against send buffer overflow in NFSv2 READDIR (CVE-2022-43945) - NFSD: Protect against send buffer overflow in NFSv3 READDIR (CVE-2022-43945) - NFSD: Protect against send buffer overflow in NFSv2 READ (CVE-2022-43945) - NFSD: Protect against send buffer overflow in NFSv3 READ (CVE-2022-43945) - NFSD: drop fname and flen args from nfsd_create_locked() - NFSD: Fix handling of oversized NFSv4 COMPOUND requests - nfsd: clean up mounted_on_fileid handling - nfsd: remove nfsd4_prepare_cb_recall() declaration - NFSD: Add tracepoints to report NFSv4 callback completions - NFSD: Add a mechanism to wait for a DELEGRETURN - NFSD: Refactor nfsd_setattr() - NFSD: Make nfsd4_setattr() wait before returning NFS4ERR_DELAY - NFSD: Make nfsd4_rename() wait before returning NFS4ERR_DELAY - NFSD: Make nfsd4_remove() wait before returning NFS4ERR_DELAY - NFSD: keep track of the number of courtesy clients in the system - NFSD: add shrinker to reap courtesy clients on low memory condition - SUNRPC: Parametrize how much of argsize should be zeroed - NFSD: Reduce amount of struct nfsd4_compoundargs that needs clearing - NFSD: Refactor common code out of dirlist helpers - NFSD: Use xdr_inline_decode() to decode NFSv3 symlinks - NFSD: Clean up WRITE arg decoders - NFSD: Clean up nfs4svc_encode_compoundres() - NFSD: Remove "inline" directives on op_rsize_bop helpers - NFSD: Remove unused nfsd4_compoundargs::cachetype field - NFSD: Pack struct nfsd4_compoundres - nfsd: use DEFINE_PROC_SHOW_ATTRIBUTE to define nfsd_proc_ops - nfsd: use DEFINE_SHOW_ATTRIBUTE to define export_features_fops and supported_enctypes_fops - nfsd: use DEFINE_SHOW_ATTRIBUTE to define client_info_fops - nfsd: use DEFINE_SHOW_ATTRIBUTE to define nfsd_reply_cache_stats_fops - nfsd: use DEFINE_SHOW_ATTRIBUTE to define nfsd_file_cache_stats_fops - NFSD: Rename the fields in copy_stateid_t - NFSD: Cap rsize_bop result based on send buffer size - nfsd: only fill out return pointer on success in nfsd4_lookup_stateid - nfsd: fix comments about spinlock handling with delegations - nfsd: make nfsd4_run_cb a bool return function - nfsd: extra checks when freeing delegation stateids - fs/notify: constify path - fsnotify: remove unused declaration - fanotify: Remove obsoleted fanotify_event_has_path() - nfsd: fix nfsd_file_unhash_and_dispose - nfsd: rework hashtable handling in nfsd_do_file_acquire - NFSD: unregister shrinker when nfsd_init_net() fails - nfsd: fix net-namespace logic in __nfsd_file_cache_purge - nfsd: fix use-after-free in nfsd_file_do_acquire tracepoint - nfsd: put the export reference in nfsd4_verify_deleg_dentry - NFSD: Fix reads with a non-zero offset that don't end on a page boundary - filelock: add a new locks_inode_context accessor function - lockd: use locks_inode_context helper - nfsd: use locks_inode_context helper - NFSD: Simplify READ_PLUS - NFSD: Remove redundant assignment to variable host_err - NFSD: Finish converting the NFSv2 GETACL result encoder - NFSD: Finish converting the NFSv3 GETACL result encoder - nfsd: ignore requests to disable unsupported versions - nfsd: move nfserrno() to vfs.c - nfsd: allow disabling NFSv2 at compile time - exportfs: use pr_debug for unreachable debug statements - NFSD: Pass the target nfsd_file to nfsd_commit() - NFSD: Revert "NFSD: NFSv4 CLOSE should release an nfsd_file immediately" - NFSD: Add an NFSD_FILE_GC flag to enable nfsd_file garbage collection - NFSD: Flesh out a documenting comment for filecache.c - NFSD: Clean up nfs4_preprocess_stateid_op() call sites - NFSD: Trace stateids returned via DELEGRETURN - NFSD: Trace delegation revocations - NFSD: Use const pointers as parameters to fh_ helpers - NFSD: Update file_hashtbl() helpers - NFSD: Clean up nfsd4_init_file() - NFSD: Add a nfsd4_file_hash_remove() helper - NFSD: Clean up find_or_add_file() - NFSD: Refactor find_file() - NFSD: Use rhashtable for managing nfs4_file objects - NFSD: Fix licensing header in filecache.c - nfsd: remove the pages_flushed statistic from filecache - nfsd: reorganize filecache.c - nfsd: fix up the filecache laundrette scheduling - NFSD: Add an nfsd_file_fsync tracepoint - lockd: set other missing fields when unlocking files - nfsd: return error if nfs4_setacl fails - NFSD: Use struct_size() helper in alloc_session() - lockd: set missing fl_flags field when retrieving args - lockd: ensure we use the correct file descriptor when unlocking - lockd: fix file selection in nlmsvc_cancel_blocked - NFSD: pass range end to vfs_fsync_range() instead of count - NFSD: refactoring courtesy_client_reaper to a generic low memory shrinker - NFSD: add support for sending CB_RECALL_ANY - NFSD: add delegation reaper to react to low memory condition - NFSD: Use only RQ_DROPME to signal the need to drop a reply - NFSD: Avoid clashing function prototypes - nfsd: rework refcounting in filecache - nfsd: fix handling of cached open files in nfsd4_open codepath - Revert "SUNRPC: Use RMW bitops in single-threaded hot paths" - NFSD: Use set_bit(RQ_DROPME) - NFSD: fix use-after-free in nfsd4_ssc_setup_dul() - NFSD: register/unregister of nfsd-client shrinker at nfsd startup/shutdown time - NFSD: replace delayed_work with work_struct for nfsd_client_shrinker - nfsd: don't free files unconditionally in __nfsd_file_cache_purge - nfsd: don't destroy global nfs4_file table in per-net shutdown - NFSD: enhance inter-server copy cleanup - nfsd: allow nfsd_file_get to sanely handle a NULL pointer - nfsd: clean up potential nfsd_file refcount leaks in COPY codepath - NFSD: fix leaked reference count of nfsd4_ssc_umount_item - nfsd: don't hand out delegation on setuid files being opened for write - NFSD: fix problems with cleanup on errors in nfsd4_copy - nfsd: fix courtesy client with deny mode handling in nfs4_upgrade_open - nfsd: don't fsync nfsd_files on last close - NFSD: copy the whole verifier in nfsd_copy_write_verifier - NFSD: Protect against filesystem freezing - lockd: set file_lock start and end when decoding nlm4 testargs - nfsd: don't replace page in rq_pages if it's a continuation of last page - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - nfsd: call op_release, even when op_func returns an error - nfsd: don't open-code clear_and_wake_up_bit - nfsd: NFSD_FILE_KEY_INODE only needs to find GC'ed entries - nfsd: simplify test_bit return in NFSD_FILE_KEY_FULL comparator - nfsd: don't kill nfsd_files because of lease break error - nfsd: add some comments to nfsd_file_do_acquire - nfsd: don't take/put an extra reference when putting a file - nfsd: update comment over __nfsd_file_cache_purge - nfsd: allow reaping files still under writeback - NFSD: Convert filecache to rhltable - nfsd: simplify the delayed disposal list code - NFSD: Fix problem of COMMIT and NFS4ERR_DELAY in infinite loop - nfsd: make a copy of struct iattr before calling notify_change - nfsd: fix double fget() bug in __write_ports_addfd() - lockd: drop inappropriate svc_get() from locked_get() - NFSD: Add an nfsd4_encode_nfstime4() helper - nfsd: Fix creation time serialization order - nfsd: don't allow nfsd threads to be signalled. - nfsd: Simplify code around svc_exit_thread() call in nfsd() - nfsd: separate nfsd_last_thread() from nfsd_put() - Documentation: Add missing documentation for EXPORT_OP flags - NFSD: fix possible oops when nfsd/pool_stats is closed. - nfsd: call nfsd_last_thread() before final nfsd_put() - nfsd: drop the nfsd_put helper - nfsd: fix RELEASE_LOCKOWNER (CVE-2024-26629) - nfsd: don't take fi_lock in nfsd_break_deleg_cb() - nfsd: don't call locks_release_private() twice concurrently - nfsd: Fix a regression in nfsd_setattr() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.221 - null_blk: Print correct max open zones limit in null_init_zoned_dev() - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() - wifi: cfg80211: pmsr: use correct nla_get_uX functions - wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64 - wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids - wifi: iwlwifi: mvm: don't read past the mfuart notifcation - wifi: mac80211: correctly parse Spatial Reuse Parameter Set element - [armhf] net/ncsi: add NCSI Intel OEM command to keep PHY up - [armhf] net/ncsi: Simplify Kconfig/dts control flow - [armhf] net/ncsi: Fix the multi thread manner of NCSI driver - ipv6: sr: block BH in seg6_output_core() and seg6_input_core() - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (CVE-2024-36978) - vxlan: Fix regression when dropping packets due to invalid src addresses - tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB - net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (CVE-2024-36974) - ptp: Fix error message on failed pin verification - af_unix: Annotate data-race of sk->sk_state in unix_inq_len(). - af_unix: Annotate data-races around sk->sk_state in unix_write_space() and poll(). - af_unix: Annotate data-races around sk->sk_state in sendmsg() and recvmsg(). - af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG. - af_unix: Annotate data-race of net->unx.sysctl_max_dgram_qlen. - af_unix: Use unix_recvq_full_lockless() in unix_stream_connect(). - af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen(). - af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill(). - ipv6: fix possible race in __fib6_drop_pcpu_from() - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete - drm/amd/display: Handle Y carry-over in VCP X.Y calculation - serial: sc16is7xx: replace hardcoded divisor value with BIT() macro - serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler - btrfs: fix leak of qgroup extent records after transaction abort - nilfs2: Remove check for PageError - nilfs2: return the mapped address from nilfs_get_page() - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages - mei: me: release irq in mei_me_pci_resume error path - jfs: xattr: fix buffer overflow for invalid xattr - xhci: Set correct transferred length for cancelled bulk transfers - xhci: Apply reset resume quirk to Etron EJ188 xHCI host - xhci: Apply broken streams quirk to Etron EJ188 xHCI host - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory - [powerpc*] uaccess: Fix build errors seen with GCC 13/14 - Input: try trimming too long modalias strings - SUNRPC: return proper error from gss_wrap_req_priv - gpio: tqmx86: fix typo in Kconfig label - HID: core: remove unnecessary WARN_ON() in implement() - gpio: tqmx86: store IRQ trigger type and unmask status separately - [amd64] iommu/amd: Introduce pci segment structure - [amd64] iommu/amd: Fix sysfs leak in iommu init - iommu: Return right value in iommu_sva_bind_device() - HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() - drm/vmwgfx: 3D disabled should not effect STDU memory limits - net: sfp: Always call `sfp_sm_mod_remove()` on remove - [arm64] net: hns3: add cond_resched() to hns3 ring buffer init process - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet - drm/komeda: check for error-valued pointer - drm/bridge/panel: Fix runtime warning on panel bridge release - tcp: fix race in tcp_v6_syn_recv_sock() - net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets - Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type - net: stmmac: replace priv->speed with the portTransmitRate from the tc-cbs parameters - net/ipv6: Fix the RT cache flush via sysctl using a previous delay - ionic: fix use after netif_napi_del() - iio: adc: ad9467: fix scan type sign - iio: dac: ad5592r: fix temperature channel scaling value - iio: imu: inv_icm42600: delete unneeded update watermark call - drivers: core: synchronize really_probe() and dev_uevent() - [armhf] drm/exynos/vidi: fix memory leak in .get_modes() - [armhf] drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found - [x86] vmci: prevent speculation leaks by sanitizing event in event_deliver() - fs/proc: fix softlockup in __read_vmcore - ocfs2: use coarse time for new created files - ocfs2: fix races between hole punching and AIO+DIO - PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id - dmaengine: axi-dmac: fix possible race in remove() - remoteproc: k3-r5: Do not allow core1 to power up before core0 via sysfs - [x86] intel_th: pci: Add Granite Rapids support - [x86] intel_th: pci: Add Granite Rapids SOC support - [x86] intel_th: pci: Add Sapphire Rapids SOC support - [x86] intel_th: pci: Add Meteor Lake-S support - [x86] intel_th: pci: Add Lunar Lake support - nilfs2: fix potential kernel bug due to lack of writeback flag waiting (CVE-2024-37078) - tick/nohz_full: Don't abuse smp_call_function_single() in tick_setup_device() - serial: 8250_pxa: Configure tx_loadsz to match FIFO IRQ level - hugetlb_encode.h: fix undefined behaviour (34 << 26) - mptcp: ensure snd_una is properly initialized on connect - mptcp: pm: inc RmAddr MIB counter once per RM_ADDR ID - mptcp: pm: update add_addr counters after connect - remoteproc: k3-r5: Jump to error handling labels in start/stop errors - greybus: Fix use-after-free bug in gb_interface_release due to race condition. - usb-storage: alauda: Check whether the media is initialized (CVE-2024-38619) - i2c: at91: Fix the functionality flags of the slave-only interface - i2c: designware: Fix the functionality flags of the slave-only interface - zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING - padata: Disable BH when taking works lock on MT path - rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment - rcutorture: Fix invalid context warning when enable srcu barrier testing - block/ioctl: prefer different overflow check - batman-adv: bypass empty buckets in batadv_purge_orig_ref() - wifi: ath9k: work around memset overflow warning - af_packet: avoid a false positive warning in packet_setsockopt() - drop_monitor: replace spin_lock by raw_spin_lock - scsi: qedi: Fix crash while reading debugfs attribute - netpoll: Fix race condition in netpoll_owner_active - HID: Add quirk for Logitech Casa touchpad - ACPI: video: Add backlight=native quirk for Lenovo Slim 7 16ARH7 - Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl - drm/amd/display: Exit idle optimizations before HDCP execution - [x86] ASoC: Intel: sof_sdw: add JD2 quirk for HP Omen 14 - [arm64,armhf] drm/lima: add mask irq callback to gp and pp - [arm64,armhf] drm/lima: mask irqs in timeout path before hard reset - [powerpc*] pseries: Enforce hcall result buffer validity and size - [powerpc*] io: Avoid clang null pointer arithmetic warnings - power: supply: cros_usbpd: provide ID table for avoiding fallback match - f2fs: remove clear SB_INLINECRYPT flag in default_options - usb: misc: uss720: check for incompatible versions of the Belkin F5U002 - udf: udftime: prevent overflow in udf_disk_stamp_to_time() - PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports - [mips*] Octeon: Add PCIe link status check - serial: exar: adding missing CTI and Exar PCI ids - [mips*] Routerboard 532: Fix vendor retry check code - [mips*] bmips: BCM6358: make sure CBR is correctly set - tracing: Build event generation tests only as modules - cipso: fix total option length computation - netrom: Fix a memory leak in nr_heartbeat_expiry() - ipv6: prevent possible NULL deref in fib6_nh_init() - ipv6: prevent possible NULL dereference in rt6_probe() - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() - netns: Make get_net_ns() handle zero refcount net - qca_spi: Make interrupt remembering atomic - net/sched: act_api: rely on rcu in tcf_idr_check_alloc - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() - tipc: force a dst refcount before doing decryption - net/sched: act_ct: set 'net' pointer when creating new nf_flow_table - sched: act_ct: add netns into the key of tcf_ct_flow_table - net: stmmac: No need to calculate speed divider when offload is disabled - virtio_net: checksum offloading handling fix - netfilter: ipset: Fix suspicious rcu_dereference_protected() - net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings - regulator: core: Fix modpost error "regulator_get_regmap" undefined - dmaengine: ioat: switch from 'pci_' to 'dma_' API - dmaengine: ioat: Drop redundant pci_enable_pcie_error_reporting() - dmaengine: ioatdma: Fix leaking on version mismatch - dmaengine: ioat: use PCI core macros for PCIe Capability - dmaengine: ioatdma: Fix error path in ioat3_dma_probe() - dmaengine: ioatdma: Fix kmemleak in ioat_pci_probe() - dmaengine: ioatdma: Fix missing kmem_cache_destroy() - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." - RDMA/mlx5: Add check for srq max_sge attribute - ALSA: hda/realtek: Limit mic boost on N14AP7 - drm/radeon: fix UBSAN warning in kv_dpm.c - gcov: add support for GCC 14 - kcov: don't lose track of remote references during softirqs - i2c: ocores: set IACK bit after core is enabled - dt-bindings: i2c: google,cros-ec-i2c-tunnel: correct path to i2c-controller schema - drm/amd/display: revert Exit idle optimizations before HDCP execution - [armhf] dts: samsung: smdkv310: fix keypad no-autorepeat - [armhf] dts: samsung: exynos4412-origen: fix keypad no-autorepeat - [armhf] dts: samsung: smdk4412: fix keypad no-autorepeat - rtlwifi: rtl8192de: Style clean-ups - wifi: rtlwifi: rtl8192de: Fix 5 GHz TX power - pmdomain: ti-sci: Fix duplicate PD referrals - knfsd: LOOKUP can return an illegal error value - spmi: hisi-spmi-controller: Do not override device identifier - bcache: fix variable length array abuse in btree_iter (CVE-2024-39482) - tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test - [x86] cpu/vfm: Add new macros to work with (vendor/family/model) values - [x86] cpu: Fix x86_match_cpu() to match just X86_VENDOR_INTEL - r8169: remove unneeded memory barrier in rtl_tx - r8169: improve rtl_tx - r8169: improve rtl8169_start_xmit - r8169: remove nr_frags argument from rtl_tx_slots_avail - r8169: remove not needed check in rtl8169_start_xmit - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (CVE-2024-38586) - Revert "kheaders: substituting --sort in archive creation" - kheaders: explicitly define file modes for archived headers - perf/core: Fix missing wakeup when waiting for context reference - PCI: Add PCI_ERROR_RESPONSE and related definitions - [x86] amd_nb: Check for invalid SMN reads - cifs: missed ref-counting smb session in find - smb: client: fix deadlock in smb2_find_smb_tcon() (CVE-2024-39468) - ACPI: Add quirks for AMD Renoir/Lucienne CPUs to force the D3 hint - [x86] ACPI: x86: Add a quirk for Dell Inspiron 14 2-in-1 for StorageD3Enable - [x86] ACPI: x86: Add another system to quirk list for forcing StorageD3Enable - [x86] ACPI: x86: utils: Add Cezanne to the list for forcing StorageD3Enable - [x86] ACPI: x86: utils: Add Picasso to the list for forcing StorageD3Enable - [x86] ACPI: x86: Force StorageD3Enable on more products - Input: ili210x - fix ili251x_read_touch_data() return value - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER - [arm64,armhf] pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins - [arm64,armhf] pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins - [arm64,armhf] pinctrl/rockchip: separate struct rockchip_pin_bank to a head file - [arm64,armhf] pinctrl: rockchip: use dedicated pinctrl type for RK3328 - [arm64,armhf] pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set - drm/amdgpu: fix UBSAN warning in kv_dpm.c - netfilter: nf_tables: validate family when identifying table via handle - SUNRPC: Fix null pointer dereference in svc_rqst_free() - SUNRPC: Fix a NULL pointer deref in trace_svc_stats_latency() - SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation - SUNRPC: Fix svcxdr_init_encode's buflen calculation - nfsd: hold a lighter-weight client reference over CB_RECALL_ANY - net: dsa: microchip: fix initial port flush problem - net: phy: micrel: add Microchip KSZ 9477 to the device table - xdp: Move the rxq_info.mem clearing to unreg_mem_model() - xdp: Allow registering memory model without rxq reference - xdp: Remove WARN() from __xdp_reg_mem_model() - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep - mtd: partitions: redboot: Added conversion of operands to a larger type - bpf: Add a check for struct bpf_fib_lookup size - net/iucv: Avoid explicit cpumask var allocation on stack - net/dpaa2: Avoid explicit cpumask var allocation on stack - ALSA: emux: improve patch ioctl data validation - media: dvbdev: Initialize sbuf - soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message - drm/radeon/radeon_display: Decrease the size of allocated memory - nvme: fixup comment for nvme RDMA Provider Type - drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA - gpio: davinci: Validate the obtained number of IRQs - gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1) - [x86] stop playing stack games in profile_pc() - ocfs2: fix DIO failure due to insufficient transaction credits - mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos - mmc: sdhci: Do not invert write-protect twice - mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro() - counter: ti-eqep: enable clock at probe - iio: adc: ad7266: Fix variable checking bug - net: usb: ax88179_178a: improve link status logs - usb: gadget: printer: SS+ support - usb: gadget: printer: fix races against disable (CVE-2024-25741) - usb: musb: da8xx: fix a resource leak in probe() - usb: atm: cxacru: fix endpoint checking in cxacru_bind() - serial: 8250_omap: Implementation of Errata i2310 - tty: mcf: MCF54418 has 10 UARTS - net: can: j1939: Initialize unused data in j1939_send_one() - net: can: j1939: recover socket queue on CAN bus error during BAM transmission - net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new - kbuild: Install dtb files as 0644 in Makefile.dtbinst - csky, hexagon: fix broken sys_sync_file_range - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes - [x86] drm/i915/gt: Fix potential UAF by revoke of fence registers - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes - batman-adv: Don't accept TT entries for out-of-spec VIDs - ata: ahci: Clean up sysfs file on error - ata: libata-core: Fix double free on error - ftruncate: pass a signed offset - syscalls: fix compat_sys_io_pgetevents_time64 usage - mtd: spinand: macronix: Add support for serial NAND flash - pwm: stm32: Refuse too small period requests - nfs: Leave pages in the pagecache if readpage failed - ipv6: annotate some data-races around sk->sk_prot - ipv6: Fix data races around sk->sk_prot. - tcp: Fix data races around icsk->icsk_af_ops. - drivers: fix typo in firmware/efi/memmap.c - efi: Correct comment on efi_memmap_alloc - efi: memmap: Move manipulation routines into x86 arch tree - efi: xen: Set EFI_PARAVIRT for Xen dom0 boot on all architectures - [x86] efi/x86: Free EFI memory map only when installing a new one. - [arm64] KVM: arm64: vgic-v4: Make the doorbell request robust w.r.t preemption - [arm64] dts: rockchip: Add sound-dai-cells for RK3368 - xdp: xdp_mem_allocator can be NULL in trace_mem_connect(). - serial: 8250_omap: Fix Errata i2310 with RX FIFO level check - tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset() . [ Salvatore Bonaccorso ] * Bump ABI to 31 * Refresh "fanotify: Taint on use of FANOTIFY_ACCESS_PERMISSIONS" * [rt] Refresh "sunrpc: Make svc_xprt_do_enqueue() use" * Refresh "firmware: Remove redundant log messages from drivers" * [rt] Update to 5.10.221-rt113 linux-signed-arm64 (5.10.223+1) bullseye-security; urgency=high . * Sign kernel from linux 5.10.223-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.222 - Compiler Attributes: Add __uninitialized macro - [arm64,armhf] drm/lima: fix shared irq handling on driver remove - media: dvb: as102-fe: Fix as10x_register_addr packing - media: dvb-usb: dib0700_devices: Add missing release_firmware() - IB/core: Implement a limit on UMAD receive List - scsi: qedf: Make qedf_execute_tmf() non-preemptible - crypto: aead,cipher - zeroize key buffer after use - drm/amdgpu: Initialize timestamp for some legacy SOCs - drm/amd/display: Check index msg_id before read or write - drm/amd/display: Check pipe offset before setting vblank - drm/amd/display: Skip finding free audio for unknown engine_id - media: dw2102: Don't translate i2c read into write - sctp: prefer struct_size over open coded arithmetic - firmware: dmi: Stop decoding on broken entry - Input: ff-core - prefer struct_size over open coded arithmetic - [arm64,armhf] net: dsa: mv88e6xxx: Correct check for empty list - media: dvb-frontends: tda18271c2dd: Remove casting during div - media: s2255: Use refcount_t instead of atomic_t for num_channels - media: dvb-frontends: tda10048: Fix integer overflow - i2c: i801: Annotate apanel_addr as __ro_after_init - [powerpc*] 64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n - orangefs: fix out-of-bounds fsid access - kunit: Fix timeout message - [powerpc*] xmon: Check cpu id in commands "c#", "dp#" and "dx#" - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD - jffs2: Fix potential illegal address access in jffs2_free_inode - [s390x] pkey: Wipe sensitive data on failure - UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open() - tcp_metrics: validate source addr length - wifi: wilc1000: fix ies_len type in connect path - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CVE-2024-39487) - inet_diag: Initialize pad field in struct inet_diag_req_v2 - nilfs2: fix inode number range checks - nilfs2: add missing check for inode numbers on directory entries - mm: optimize the redundant loop of mm_update_owner_next() - mm: avoid overflows in dirty throttling logic - Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot - can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct - fsnotify: Do not generate events for O_PATH file descriptors - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes - drm/amdgpu/atomfirmware: silence UBSAN warning - mtd: rawnand: Bypass a couple of sanity checks during NAND identification - bnx2x: Fix multiple UBSAN array-index-out-of-bounds - bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues - ima: Avoid blocking in RCU read-side critical section (CVE-2024-40947) - media: dw2102: fix a potential buffer overflow - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr - ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897 - nvme-multipath: find NUMA path only for online numa-node - nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset - [x86] platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet - [x86] platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro - nvmet: fix a possible leak when destroy a ctrl during qp establishment - kbuild: fix short log for AS in link-vmlinux.sh - nilfs2: fix incorrect inode allocation from reserved inodes - mm: prevent derefencing NULL ptr in pfn_section_valid() - filelock: fix potential use-after-free in posix_lock_inode - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading - vfs: don't mod negative dentry count when on shrinker list - tcp: fix incorrect undo caused by DSACK of TLP retransmit - net: lantiq_etop: add blank line after declaration - net: ethernet: lantiq_etop: fix double free in detach - ppp: reject claimed-as-LCP but actually malformed packets - ethtool: netlink: do not return SQI value if link is down - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). - net/sched: Fix UAF when resolving a clash - [s390x] Mark psw in __load_psw_mask() as __unitialized - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() - tcp: avoid too many retransmit packets (CVE-2024-41007) - net: ks8851: Fix potential TX stall after interface reopen - USB: serial: option: add Telit generic core-dump composition - USB: serial: option: add Telit FN912 rmnet compositions - USB: serial: option: add Fibocom FM350-GL - USB: serial: option: add support for Foxconn T99W651 - USB: serial: option: add Netprisma LCUK54 series modules - USB: serial: option: add Rolling RW350-GL variants - USB: serial: mos7840: fix crash on resume - USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor - hpet: Support 32-bit userspace - nvmem: meson-efuse: Fix return value of nvmem callbacks - ALSA: hda/realtek: Enable Mute LED on HP 250 G7 - ALSA: hda/realtek: Limit mic boost on VAIO PRO PX - libceph: fix race between delayed_work() and ceph_monc_stop() - wireguard: allowedips: avoid unaligned 64-bit memory accesses - wireguard: queueing: annotate intentional data race in cpu round robin - wireguard: send: annotate intentional data race in checking empty queue - x86/retpoline: Move a NOENDBR annotation to the SRSO dummy return thunk - ipv6: annotate data-races around cnf.disable_ipv6 - ipv6: prevent NULL dereference in ip6_output() (CVE-2024-36901) - bpf: Allow reads from uninit stack - nilfs2: fix kernel bug on rename operation of broken directory - i2c: mark HostNotify target address as used https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.223 - gcc-plugins: Rename last_stmt() for GCC 14+ - filelock: Remove locks reliably when fcntl/close race is detected (CVE-2024-41012) - scsi: qedf: Set qed_slowpath_params to zero before use - ACPI: EC: Abort address space access upon error - ACPI: EC: Avoid returning AE_OK on errors in address space handler - wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata - wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() - Input: silead - Always support 10 fingers - net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() - ila: block BH in ila_output() - [arm64] armv8_deprecated: Fix warning in isndep cpuhp starting process - null_blk: fix validation of block size - kconfig: gconf: give a proper initial state to the Save button - kconfig: remove wrong expr_trans_bool() - fs/file: fix the check in find_next_fd() - mei: demote client disconnect warning on suspend to debug - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check - [powerpc*] KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() - ALSA: hda/realtek: Add more codec ID to no shutup pins list - [mips*] fix compat_sys_lseek syscall - Input: elantech - fix touchpad state on resume for Lenovo N24 - Input: i8042 - add Ayaneo Kun to i8042 quirk table - [x86] bytcr_rt5640 : inverse jack detect for Archos 101 cesium - [arm*] ALSA: dmaengine: Synchronize dma channel after drop() - [armhf] ASoC: ti: davinci-mcasp: Set min period size using FIFO config - can: kvaser_usb: fix return value for hif_usb_send_regout - [s390x] sclp: Fix sclp_init() cleanup on failure - btrfs: qgroup: fix quota root leak after quota disable failure - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx - ALSA: dmaengine_pcm: terminate dmaengine before synchronize - net: usb: qmi_wwan: add Telit FN912 compositions - net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() - [powerpc*] pseries: Whitelist dtl slub object for copying to userspace - [powerpc*] eeh: avoid possible crash when edev->pdev changes - scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() - fs: better handle deep ancestor chains in is_subdir() - spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices - hfsplus: fix uninit-value in copy_name - spi: mux: set ctlr->bits_per_word_mask - [arm*] 9324/1: fix get_user() broken with veneer - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency - bpf: Fix overrunning reservations in ringbuf (CVE-2024-41009) - bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue (CVE-2024-36938) - scsi: core: Fix a use-after-free (CVE-2022-48666) - ext4: fix error code saved on super block during file system abort - ext4: Send notifications on error - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() - net: relax socket state check at accept time. (CVE-2024-36484) - ocfs2: add bounds checking to ocfs2_check_dir_entry() - jfs: don't walk off the end of ealist - ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 - [arm64] dts: qcom: msm8996: Disable SS instance in Parkmode for USB - [arm*] ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused - filelock: Fix fcntl/close race recovery compat path - tun: add missing verification for short frame (CVE-2024-41091) - tap: add missing verification for short frame (CVE-2024-41090) . [ Salvatore Bonaccorso ] * Bump ABI to 32 * fs/nfsd: Enable NFSD_V2 and NFSD_V2_ACL. Re-enable lost NFSv2 kernel support due to upstream backporting of 2f3a4b2ac2f2 ("nfsd: allow disabling NFSv2 at compile time") in 5.10.220. (Closes: #1076864) * netfilter: ipset: Add list flush to cancel_gc linux-signed-arm64 (5.10.221+1) bullseye-security; urgency=high . * Sign kernel from linux 5.10.221-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.219 - [x86] tsc: Trust initial offset in architectural TSC-adjust MSRs - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (CVE-2024-36016) - speakup: Fix sizeof() vs ARRAY_SIZE() bug - ring-buffer: Fix a race between readers and resize checks (CVE-2024-38601) - nilfs2: fix unexpected freezing of nilfs_segctor_sync() - nilfs2: fix potential hang in nilfs_detach_log_writer() (CVE-2024-38582) - ALSA: core: Fix NULL module pointer assignment at card init (CVE-2024-38605) - wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class - net: usb: qmi_wwan: add Telit FN920C04 compositions - drm/amd/display: Set color_mgmt_changed to true on unsuspend - ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating - ASoC: dt-bindings: rt5645: add cbj sleeve gpio property - ASoC: rt715: add vendor clear control register - ASoC: da7219-aad: fix usage of device_get_named_child_node() - nvme: find numa distance only if controller has valid numa id - crypto: bcm - Fix pointer arithmetic (CVE-2024-38579) - firmware: raspberrypi: Use correct device for DMA mappings - ecryptfs: Fix buffer size for tag 66 packet (CVE-2024-38578) - nilfs2: fix out-of-range warning - [x86] crypto: ccp - drop platform ifdef checks - [x86] crypto: x86/nh-avx2 - add missing vzeroupper - [x86] crypto: x86/sha256-avx2 - add missing vzeroupper - [s390x] cio: fix tracepoint subchannel type field - jffs2: prevent xattr node from overflowing the eraseblock (CVE-2024-38599) - null_blk: Fix missing mutex_destroy() at module removal - md: fix resync softlockup when bitmap size is less than array size (CVE-2024-38598) - wifi: ath10k: poll service ready message before failing - [x86] boot: Ignore relocations in .notes sections in walk_relocs() too - qed: avoid truncating work queue length - scsi: ufs: qcom: Perform read back after writing reset bit - scsi: ufs-qcom: Fix ufs RST_n spec violation - scsi: ufs: qcom: Perform read back after writing REG_UFS_SYS1CLK_1US - scsi: ufs: ufs-qcom: Fix the Qcom register name for offset 0xD0 - scsi: ufs: ufs-qcom: Clear qunipro_g4_sel for HW version major 5 - scsi: ufs: qcom: Perform read back after writing unipro mode - scsi: ufs: qcom: Perform read back after writing CGC enable - scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV - scsi: ufs: core: Perform read back after disabling interrupts - scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL - irqchip/alpine-msi: Fix off-by-one in allocation error path - ACPI: disable -Wstringop-truncation - gfs2: Fix "ignore unlock failures after withdraw" - cpufreq: Reorganize checks in cpufreq_offline() - cpufreq: Split cpufreq_offline() - cpufreq: Rearrange locking in cpufreq_remove_dev() - cpufreq: exit() callback is optional - net: export inet_lookup_reuseport and inet6_lookup_reuseport - net: remove duplicate reuseport_lookup functions - udp: Avoid call to compute_score on multiple sites - scsi: libsas: Fix the failure of adding phy with zero-address to port - scsi: hpsa: Fix allocation size for Scsi_Host private data - [x86] purgatory: Switch to the position-independent small code model - wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() - wifi: ath10k: populate board data for WCN3990 - tcp: avoid premature drops in tcp_add_backlog() - net: give more chances to rcu in netdev_wait_allrefs_any() - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" (CVE-2024-38607) - wifi: carl9170: add a proper sanity check for endpoints (CVE-2024-38567) - wifi: ar5523: enable proper endpoint verification (CVE-2024-38565) - Revert "sh: Handle calling csum_partial with misaligned data" - [amd64] HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors - scsi: bfa: Ensure the copied buf is NUL terminated (CVE-2024-38560) - scsi: qedf: Ensure the copied buf is NUL terminated (CVE-2024-38559) - wifi: mwl8k: initialize cmd->addr[] properly - usb: aqc111: stop lying about skb->truesize - net: usb: sr9700: stop lying about skb->truesize - net: ipv6: fix wrong start position when receive hop-by-hop fragment - eth: sungem: remove .ndo_poll_controller to avoid deadlocks (CVE-2024-38597) - net: ethernet: cortina: Locking fixes - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (CVE-2024-38596) - net: usb: smsc95xx: stop lying about skb->truesize - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (CVE-2024-38558) - ipv6: sr: add missing seg6_local_exit - ipv6: sr: fix incorrect unregister order - ipv6: sr: fix invalid unregister error path (CVE-2024-38612) - net/mlx5: Discard command completions in internal error (CVE-2024-38555) - drm/amd/display: Fix potential index out of bounds in color transformation function (CVE-2024-38552) - ASoC: soc-acpi: add helper to identify parent driver. - [x86] ASoC: Intel: Disable route checks for Skylake boards - mtd: rawnand: hynix: fixed typo - fbdev: shmobile: fix snprintf truncation - [arm64] drm/meson: vclk: fix calculation of 59.94 fractional rates - [powerpc*] fsl-soc: hide unused const variable - fbdev: sisfb: hide unused variables - media: ngene: Add dvb_ca_en50221_init return value check - media: radio-shark2: Avoid led_names truncations - drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference (CVE-2024-38548) - fbdev: sh7760fb: allow modular build - media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries (CVE-2024-38547) - [arm64] drm/arm/malidp: fix a possible null pointer dereference (CVE-2024-36014) - [arm*] drm: vc4: Fix possible null pointer dereference (CVE-2024-38546) - ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value - drm/bridge: lt9611: Don't log an error when DSI host can't be found - drm/bridge: tc358775: Don't log an error when DSI host can't be found - drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector - drm/mipi-dsi: use correct return type for the DSC functions - [arm64] RDMA/hns: Refactor the hns_roce_buf allocation flow - [arm64] RDMA/hns: Create QP with selected QPN for bank load balance - [arm64] RDMA/hns: Fix incorrect symbol types - [arm64] RDMA/hns: Fix return value in hns_roce_map_mr_sg - [arm64] RDMA/hns: Use complete parentheses in macros - [arm64] RDMA/hns: Modify the print level of CQE error (CVE-2024-38590) - clk: qcom: mmcc-msm8998: fix venus clock issue - [x86] insn: Fix PUSH instruction in x86 instruction decoder opcode map - ext4: avoid excessive credit estimate in ext4_tmpfile() - sunrpc: removed redundant procp check - ext4: simplify calculation of blkoff in ext4_mb_new_blocks_simple - ext4: fix unit mismatch in ext4_mb_new_blocks_simple - ext4: try all groups in ext4_mb_new_blocks_simple - ext4: remove unused parameter from ext4_mb_new_blocks_simple() - ext4: fix potential unnitialized variable - SUNRPC: Fix gss_free_in_token_pages() - RDMA/IPoIB: Fix format truncation compilation errors - net: qrtr: fix null-ptr-deref in qrtr_ns_remove - net: qrtr: ns: Fix module refcnt - netrom: fix possible dead-lock in nr_rt_ioctl() (CVE-2024-38589) - af_packet: do not call packet_read_pending() from tpacket_destruct_skb() - sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level - greybus: lights: check return of get_channel_from_mode (CVE-2024-38637) - f2fs: fix to wait on page writeback in __clone_blkaddrs() - soundwire: cadence: fix invalid PDI offset (CVE-2024-38635) - dmaengine: idma64: Add check for dma_set_max_seg_size - firmware: dmi-id: add a release callback function - serial: max3100: Lock port->lock when calling uart_handle_cts_change() (CVE-2024-38634) - serial: max3100: Update uart_driver_registered on driver removal (CVE-2024-38633) - serial: max3100: Fix bitwise types - greybus: arche-ctrl: move device table to its right location - serial: sc16is7xx: add proper sched.h include for sched_set_fifo() - f2fs: compress: support chksum - f2fs: add compress_mode mount option - f2fs: compress: clean up parameter of __f2fs_cluster_blocks() - f2fs: compress: remove unneeded preallocation - f2fs: introduce FI_COMPRESS_RELEASED instead of using IMMUTABLE bit - f2fs: compress: fix to relocate check condition in f2fs_{release,reserve}_compress_blocks() - f2fs: add cp_error check in f2fs_write_compressed_pages - f2fs: fix to force keeping write barrier for strict fsync mode - f2fs: do not allow partial truncation on pinned file - f2fs: fix typos in comments - f2fs: fix to relocate check condition in f2fs_fallocate() - f2fs: fix to check pinfile flag in f2fs_move_file_range() - iio: pressure: dps310: support negative temperature values - fpga: region: change FPGA indirect article to an - fpga: region: Rename dev to parent for parent device - docs: driver-api: fpga: avoid using UTF-8 chars - fpga: region: Use standard dev_release for class driver - fpga: region: add owner module and take its refcount - usb: gadget: u_audio: Clear uac pointer when freed. - stm class: Fix a double free in stm_register_device() (CVE-2024-38627) - ppdev: Remove usage of the deprecated ida_simple_xx() API - ppdev: Add an error check in register_device (CVE-2024-36015) - extcon: max8997: select IRQ_DOMAIN instead of depending on it - PCI/EDR: Align EDR_PORT_DPC_ENABLE_DSM with PCI Firmware r3.3 - PCI/EDR: Align EDR_PORT_LOCATE_DSM with PCI Firmware r3.3 - f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock - f2fs: fix to release node block count in error path of f2fs_new_node_page() - f2fs: compress: don't allow unaligned truncation on released compress inode - serial: sh-sci: protect invalidating RXDMA on shutdown - libsubcmd: Fix parse-options memory leak - [s390x] ipl: Fix incorrect initialization of len fields in nvme reipl block - [s390x] ipl: Fix incorrect initialization of nvme dump block - Input: ims-pcu - fix printf string overflow - Input: ioc3kbd - convert to platform remove callback returning void - Input: ioc3kbd - add device table - Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation - drm/msm/dpu: Always flush the slave INTF on the CTL - drm/bridge: tc358775: fix support for jeida-18 and jeida-24 - media: stk1160: fix bounds checking in stk1160_copy_video() (CVE-2024-38621) - scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() - media: flexcop-usb: clean up endpoint sanity checks - media: flexcop-usb: fix sanity check of bNumEndpoints - [powerpc*] pseries: Add failure related checks for h_get_mpp and h_get_ppp - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh - media: cec: cec-api: add locking in cec_release() - media: core headers: fix kernel-doc warnings - media: cec: fix a deadlock situation - media: cec: call enable_adap on s_log_addrs - media: cec: abort if the current transmit was canceled - media: cec: correctly pass on reply results - media: cec: use call_op and check for !unregistered - media: cec-adap.c: drop activate_cnt, use state info instead - media: cec: core: avoid recursive cec_claim_log_addrs - media: cec: core: avoid confusing "transmit timed out" message - null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION() - regulator: bd71828: Don't overwrite runtime voltages - [x86] kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y - nfc: nci: Fix uninit-value in nci_rx_work (CVE-2024-38381) - ASoC: tas2552: Add TX path for capturing AUDIO-OUT data - sunrpc: fix NFSACL RPC retry on soft mount - rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL - ipv6: sr: fix memleak in seg6_hmac_init_algo - params: lift param_set_uint_minmax to common code - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CVE-2024-37356)). - openvswitch: Set the skbuff pkt_type for proper pmtud support. - [arm64] asm-bug: Add .align 2 to the end of __BUG_ENTRY - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails - net: fec: avoid lock evasion when reading pps_enable - tls: fix missing memory barrier in tls_init (CVE-2024-36489) - nfc: nci: Fix kcov check in nci_rx_work() - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() - netfilter: nft_payload: restore vlan q-in-q match support - spi: Don't mark message DMA mapped when no transfer in it is - nvmet: fix ns enable/disable possible hang - net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion - dma-buf/sw-sync: don't enable IRQ from sync_print_obj() (CVE-2024-38780) - bpf: Fix potential integer overflow in resolve_btfids - enic: Validate length of nl attributes in enic_set_vf_port (CVE-2024-38659) - net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM - bpf: Allow delete from sockmap/sockhash only if update is allowed (CVE-2024-38662) - net:fec: Add fec_enet_deinit() - netfilter: tproxy: bail out if IP has been disabled on the device (CVE-2024-36270) - kconfig: fix comparison to constant symbols, 'm', 'n' - spi: stm32: Don't warn about spurious interrupts - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound - hwmon: (shtc1) Fix property misspelling - ALSA: timer: Set lower bound of start tick time (CVE-2024-38618) - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (CVE-2024-31076) - media: cec: core: add adap_nb_transmit_canceled() callback - SUNRPC: Fix loop termination condition in gss_free_in_token_pages() (CVE-2024-36288) - [arm*] binder: fix max_thread type inconsistency - mmc: core: Do not force a retune before RPMB switch - io_uring: fail NOP if non-zero op flags is passed in - afs: Don't cross .backup mountpoint from backup volume - nilfs2: fix use-after-free of timer for log writer thread (CVE-2024-38583) - vxlan: Fix regression when dropping packets due to invalid src addresses - [x86] mm: Remove broken vsyscall emulation code from the page fault code - netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (CVE-2024-27019) - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() - media: lgdt3306a: Add a check against null-pointer-def - drm/amdgpu: add error handle to avoid out-of-bounds - ata: pata_legacy: make legacy_exit() work again - ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx - [arm64] tegra: Correct Tegra132 I2C alias - [arm64] dts: qcom: qcs404: fix bluetooth device address - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING - wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU - wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE - wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path - [arm64] dts: hi3798cv200: fix the size of GICR - media: mc: mark the media devnode as registered from the, start - media: mxl5xx: Move xpt structures off stack - media: v4l2-core: hold videodev_lock until dev reg, finishes - mmc: core: Add mmc_gpiod_set_cd_config() function - mmc: sdhci-acpi: Sort DMI quirks alphabetically - mmc: sdhci-acpi: Fix Lenovo Yoga Tablet 2 Pro 1380 sdcard slot not working - mmc: sdhci-acpi: Disable write protect detection on Toshiba WT10-A - fbdev: savage: Handle err return when savagefb_check_var failed - [arm64] KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode - crypto: ecrdsa - Fix module auto-load on add_key - [x86] crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak - net/ipv6: Fix route deleting failure when metric equals 0 - net/9p: fix uninit-value in p9_client_rpc() - [x86] intel_th: pci: Add Meteor Lake-S CPU support - watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin - kdb: Fix buffer overflow during tab-complete - kdb: Use format-strings rather than '\0' injection in kdb_read() - kdb: Fix console handling when editing and tab-completing commands - kdb: Merge identical case statements in kdb_read() - kdb: Use format-specifiers rather than memset() for padding in kdb_read() - net: fix __dst_negative_advice() race - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() - [s390x] ap: Fix crash in AP internal function modify_bitmap() - nfs: fix undefined behavior in nfs_block_bits() - NFS: Fix READ_PLUS when server doesn't support OP_READ_PLUS - scsi: ufs: ufs-qcom: Clear qunipro_g4_sel for HW major version > 5 - f2fs: compress: fix compression chksum - [arm64] RDMA/hns: Use mutex instead of spinlock for ida allocation - [arm64] RDMA/hns: Fix CQ and QP cache affinity https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.220 - SUNRPC: Rename svc_encode_read_payload() - NFSD: Invoke svc_encode_result_payload() in "read" NFSD encoders - NFSD: A semicolon is not needed after a switch statement. - nfsd/nfs3: remove unused macro nfsd3_fhandleres - NFSD: Clean up the show_nf_may macro - NFSD: Remove extra "0x" in tracepoint format specifier - NFSD: Add SPDX header for fs/nfsd/trace.c - nfsd: Fix error return code in nfsd_file_cache_init() - SUNRPC: Add xdr_set_scratch_page() and xdr_reset_scratch_buffer() - SUNRPC: Prepare for xdr_stream-style decoding on the server-side - NFSD: Add common helpers to decode void args and encode void results - NFSD: Add tracepoints in nfsd_dispatch() - NFSD: Add tracepoints in nfsd4_decode/encode_compound() - NFSD: Replace the internals of the READ_BUF() macro - NFSD: Replace READ* macros in nfsd4_decode_access() - NFSD: Replace READ* macros in nfsd4_decode_close() - NFSD: Replace READ* macros in nfsd4_decode_commit() - NFSD: Change the way the expected length of a fattr4 is checked - NFSD: Replace READ* macros that decode the fattr4 size attribute - NFSD: Replace READ* macros that decode the fattr4 acl attribute - NFSD: Replace READ* macros that decode the fattr4 mode attribute - NFSD: Replace READ* macros that decode the fattr4 owner attribute - NFSD: Replace READ* macros that decode the fattr4 owner_group attribute - NFSD: Replace READ* macros that decode the fattr4 time_set attributes - NFSD: Replace READ* macros that decode the fattr4 security label attribute - NFSD: Replace READ* macros that decode the fattr4 umask attribute - NFSD: Replace READ* macros in nfsd4_decode_fattr() - NFSD: Replace READ* macros in nfsd4_decode_create() - NFSD: Replace READ* macros in nfsd4_decode_delegreturn() - NFSD: Replace READ* macros in nfsd4_decode_getattr() - NFSD: Replace READ* macros in nfsd4_decode_link() - NFSD: Relocate nfsd4_decode_opaque() - NFSD: Add helpers to decode a clientid4 and an NFSv4 state owner - NFSD: Add helper for decoding locker4 - NFSD: Replace READ* macros in nfsd4_decode_lock() - NFSD: Replace READ* macros in nfsd4_decode_lockt() - NFSD: Replace READ* macros in nfsd4_decode_locku() - NFSD: Replace READ* macros in nfsd4_decode_lookup() - NFSD: Add helper to decode NFSv4 verifiers - NFSD: Add helper to decode OPEN's createhow4 argument - NFSD: Add helper to decode OPEN's openflag4 argument - NFSD: Replace READ* macros in nfsd4_decode_share_access() - NFSD: Replace READ* macros in nfsd4_decode_share_deny() - NFSD: Add helper to decode OPEN's open_claim4 argument - NFSD: Replace READ* macros in nfsd4_decode_open() - NFSD: Replace READ* macros in nfsd4_decode_open_confirm() - NFSD: Replace READ* macros in nfsd4_decode_open_downgrade() - NFSD: Replace READ* macros in nfsd4_decode_putfh() - NFSD: Replace READ* macros in nfsd4_decode_read() - NFSD: Replace READ* macros in nfsd4_decode_readdir() - NFSD: Replace READ* macros in nfsd4_decode_remove() - NFSD: Replace READ* macros in nfsd4_decode_rename() - NFSD: Replace READ* macros in nfsd4_decode_renew() - NFSD: Replace READ* macros in nfsd4_decode_secinfo() - NFSD: Replace READ* macros in nfsd4_decode_setattr() - NFSD: Replace READ* macros in nfsd4_decode_setclientid() - NFSD: Replace READ* macros in nfsd4_decode_setclientid_confirm() - NFSD: Replace READ* macros in nfsd4_decode_verify() - NFSD: Replace READ* macros in nfsd4_decode_write() - NFSD: Replace READ* macros in nfsd4_decode_release_lockowner() - NFSD: Replace READ* macros in nfsd4_decode_cb_sec() - NFSD: Replace READ* macros in nfsd4_decode_backchannel_ctl() - NFSD: Replace READ* macros in nfsd4_decode_bind_conn_to_session() - NFSD: Add a separate decoder to handle state_protect_ops - NFSD: Add a separate decoder for ssv_sp_parms - NFSD: Add a helper to decode state_protect4_a - NFSD: Add a helper to decode nfs_impl_id4 - NFSD: Add a helper to decode channel_attrs4 - NFSD: Replace READ* macros in nfsd4_decode_create_session() - NFSD: Replace READ* macros in nfsd4_decode_destroy_session() - NFSD: Replace READ* macros in nfsd4_decode_free_stateid() - NFSD: Replace READ* macros in nfsd4_decode_getdeviceinfo() - NFSD: Replace READ* macros in nfsd4_decode_layoutcommit() - NFSD: Replace READ* macros in nfsd4_decode_layoutget() - NFSD: Replace READ* macros in nfsd4_decode_layoutreturn() - NFSD: Replace READ* macros in nfsd4_decode_secinfo_no_name() - NFSD: Replace READ* macros in nfsd4_decode_sequence() - NFSD: Replace READ* macros in nfsd4_decode_test_stateid() - NFSD: Replace READ* macros in nfsd4_decode_destroy_clientid() - NFSD: Replace READ* macros in nfsd4_decode_reclaim_complete() - NFSD: Replace READ* macros in nfsd4_decode_fallocate() - NFSD: Replace READ* macros in nfsd4_decode_nl4_server() - NFSD: Replace READ* macros in nfsd4_decode_copy() - NFSD: Replace READ* macros in nfsd4_decode_copy_notify() - NFSD: Replace READ* macros in nfsd4_decode_offload_status() - NFSD: Replace READ* macros in nfsd4_decode_seek() - NFSD: Replace READ* macros in nfsd4_decode_clone() - NFSD: Replace READ* macros in nfsd4_decode_xattr_name() - NFSD: Replace READ* macros in nfsd4_decode_setxattr() - NFSD: Replace READ* macros in nfsd4_decode_listxattrs() - NFSD: Make nfsd4_ops::opnum a u32 - NFSD: Replace READ* macros in nfsd4_decode_compound() - NFSD: Remove macros that are no longer used - nfsd: only call inode_query_iversion in the I_VERSION case - nfsd: simplify nfsd4_change_info - nfsd: minor nfsd4_change_attribute cleanup - nfsd4: don't query change attribute in v2/v3 case - Revert "nfsd4: support change_attr_type attribute" - nfsd: add a new EXPORT_OP_NOWCC flag to struct export_operations - nfsd: allow filesystems to opt out of subtree checking - nfsd: close cached files prior to a REMOVE or RENAME that would replace target - exportfs: Add a function to return the raw output from fh_to_dentry() - nfsd: Fix up nfsd to ensure that timeout errors don't result in ESTALE - nfsd: Set PF_LOCAL_THROTTLE on local filesystems only - nfsd: Record NFSv4 pre/post-op attributes as non-atomic - exec: Don't open code get_close_on_exec - exec: Move unshare_files to fix posix file locking during exec - exec: Simplify unshare_files - exec: Remove reset_files_struct - kcmp: In kcmp_epoll_target use fget_task - bpf: In bpf_task_fd_query use fget_task - proc/fd: In proc_fd_link use fget_task - Revert "fget: clarify and improve __fget_files() implementation" - file: Rename __fcheck_files to files_lookup_fd_raw - file: Factor files_lookup_fd_locked out of fcheck_files - file: Replace fcheck_files with files_lookup_fd_rcu - file: Rename fcheck lookup_fd_rcu - file: Implement task_lookup_fd_rcu - proc/fd: In tid_fd_mode use task_lookup_fd_rcu - kcmp: In get_file_raw_ptr use task_lookup_fd_rcu - file: Implement task_lookup_next_fd_rcu - proc/fd: In proc_readfd_common use task_lookup_next_fd_rcu - proc/fd: In fdinfo seq_show don't use get_files_struct - file: Merge __fd_install into fd_install - file: In f_dupfd read RLIMIT_NOFILE once. - file: Merge __alloc_fd into alloc_fd - file: Rename __close_fd to close_fd and remove the files parameter - file: Replace ksys_close with close_fd - inotify: Increase default inotify.max_user_watches limit to 1048576 - fs/lockd: convert comma to semicolon - NFSD: Fix sparse warning in nfssvc.c - NFSD: Restore NFSv4 decoding's SAVEMEM functionality - SUNRPC: Make trace_svc_process() display the RPC procedure symbolically - SUNRPC: Display RPC procedure names instead of proc numbers - SUNRPC: Move definition of XDR_UNIT - NFSD: Update GETATTR3args decoder to use struct xdr_stream - NFSD: Update ACCESS3arg decoder to use struct xdr_stream - NFSD: Update READ3arg decoder to use struct xdr_stream - NFSD: Update WRITE3arg decoder to use struct xdr_stream - NFSD: Update READLINK3arg decoder to use struct xdr_stream - NFSD: Fix returned READDIR offset cookie - NFSD: Add helper to set up the pages where the dirlist is encoded - NFSD: Update READDIR3args decoders to use struct xdr_stream - NFSD: Update COMMIT3arg decoder to use struct xdr_stream - NFSD: Update the NFSv3 DIROPargs decoder to use struct xdr_stream - NFSD: Update the RENAME3args decoder to use struct xdr_stream - NFSD: Update the LINK3args decoder to use struct xdr_stream - NFSD: Update the SETATTR3args decoder to use struct xdr_stream - NFSD: Update the CREATE3args decoder to use struct xdr_stream - NFSD: Update the MKDIR3args decoder to use struct xdr_stream - NFSD: Update the SYMLINK3args decoder to use struct xdr_stream - NFSD: Update the MKNOD3args decoder to use struct xdr_stream - NFSD: Update the NFSv2 GETATTR argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 READ argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 WRITE argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 READLINK argument decoder to use struct xdr_stream - NFSD: Add helper to set up the pages where the dirlist is encoded - NFSD: Update the NFSv2 READDIR argument decoder to use struct xdr_stream - NFSD: Update NFSv2 diropargs decoding to use struct xdr_stream - NFSD: Update the NFSv2 RENAME argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 LINK argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 SETATTR argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 CREATE argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 SYMLINK argument decoder to use struct xdr_stream - NFSD: Remove argument length checking in nfsd_dispatch() - NFSD: Update the NFSv2 GETACL argument decoder to use struct xdr_stream - NFSD: Add an xdr_stream-based decoder for NFSv2/3 ACLs - NFSD: Update the NFSv2 SETACL argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 ACL GETATTR argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 ACL ACCESS argument decoder to use struct xdr_stream - NFSD: Clean up after updating NFSv2 ACL decoders - NFSD: Update the NFSv3 GETACL argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 SETACL argument decoder to use struct xdr_stream - NFSD: Clean up after updating NFSv3 ACL decoders - nfsd: remove unused stats counters - nfsd: protect concurrent access to nfsd stats counters - nfsd: report per-export stats - nfsd4: simplify process_lookup1 - nfsd: simplify process_lock - nfsd: simplify nfsd_renew - nfsd: rename lookup_clientid->set_client - nfsd: refactor set_client - nfsd: find_cpntf_state cleanup - nfsd: remove unused set_client argument - nfsd: simplify nfsd4_check_open_reclaim - nfsd: cstate->session->se_client -> cstate->clp - NFSv4_2: SSC helper should use its own config. - nfs: use change attribute for NFS re-exports - nfsd: skip some unnecessary stats in the v4 case - inotify, memcg: account inotify instances to kmemcg - module: unexport find_module and module_mutex - module: use RCU to synchronize find_module - kallsyms: refactor {,module_}kallsyms_on_each_symbol - kallsyms: only build {,module_}kallsyms_on_each_symbol when required - fs: add file and path permissions helpers - namei: introduce struct renamedata - NFSD: Extract the svcxdr_init_encode() helper - NFSD: Update the GETATTR3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 ACCESS3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 LOOKUP3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 wccstat result encoder to use struct xdr_stream - NFSD: Update the NFSv3 READLINK3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 READ3res encode to use struct xdr_stream - NFSD: Update the NFSv3 WRITE3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 CREATE family of encoders to use struct xdr_stream - NFSD: Update the NFSv3 RENAMEv3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 LINK3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 FSSTAT3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 FSINFO3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 PATHCONF3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 COMMIT3res encoder to use struct xdr_stream - NFSD: Add a helper that encodes NFSv3 directory offset cookies - NFSD: Count bytes instead of pages in the NFSv3 READDIR encoder - NFSD: Update the NFSv3 READDIR3res encoder to use struct xdr_stream - NFSD: Update NFSv3 READDIR entry encoders to use struct xdr_stream - NFSD: Remove unused NFSv3 directory entry encoders - NFSD: Reduce svc_rqst::rq_pages churn during READDIR operations - NFSD: Update the NFSv2 stat encoder to use struct xdr_stream - NFSD: Update the NFSv2 attrstat encoder to use struct xdr_stream - NFSD: Update the NFSv2 diropres encoder to use struct xdr_stream - NFSD: Update the NFSv2 READLINK result encoder to use struct xdr_stream - NFSD: Update the NFSv2 READ result encoder to use struct xdr_stream - NFSD: Update the NFSv2 STATFS result encoder to use struct xdr_stream - NFSD: Add a helper that encodes NFSv3 directory offset cookies - NFSD: Count bytes instead of pages in the NFSv2 READDIR encoder - NFSD: Update the NFSv2 READDIR result encoder to use struct xdr_stream - NFSD: Update the NFSv2 READDIR entry encoder to use struct xdr_stream - NFSD: Remove unused NFSv2 directory entry encoders - NFSD: Add an xdr_stream-based encoder for NFSv2/3 ACLs - NFSD: Update the NFSv2 GETACL result encoder to use struct xdr_stream - NFSD: Update the NFSv2 SETACL result encoder to use struct xdr_stream - NFSD: Update the NFSv2 ACL GETATTR result encoder to use struct xdr_stream - NFSD: Update the NFSv2 ACL ACCESS result encoder to use struct xdr_stream - NFSD: Clean up after updating NFSv2 ACL encoders - NFSD: Update the NFSv3 GETACL result encoder to use struct xdr_stream - NFSD: Update the NFSv3 SETACL result encoder to use struct xdr_stream - NFSD: Clean up after updating NFSv3 ACL encoders - NFSD: Add a tracepoint to record directory entry encoding - NFSD: Clean up NFSDDBG_FACILITY macro - nfsd: helper for laundromat expiry calculations - nfsd: Log client tracking type log message as info instead of warning - nfsd: Fix typo "accesible" - nfsd: COPY with length 0 should copy to end of file - nfsd: don't ignore high bits of copy count - nfsd: report client confirmation status in "info" file - SUNRPC: Export svc_xprt_received() - UAPI: nfsfh.h: Replace one-element array with flexible-array member - NFSD: Use DEFINE_SPINLOCK() for spinlock - fsnotify: allow fsnotify_{peek,remove}_first_event with empty queue - Revert "fanotify: limit number of event merge attempts" - fanotify: reduce event objectid to 29-bit hash - fanotify: mix event info and pid into merge key hash - fsnotify: use hash table for faster events merge - fanotify: limit number of event merge attempts - fanotify: configurable limits via sysfs - fanotify: support limited functionality for unprivileged users - fanotify_user: use upper_32_bits() to verify mask - nfsd: remove unused function - nfsd: removed unused argument in nfsd_startup_generic() - nfsd: hash nfs4_files by inode number - nfsd: track filehandle aliasing in nfs4_files - nfsd: reshuffle some code - nfsd: grant read delegations to clients holding writes - nfsd: Fix fall-through warnings for Clang - NFSv4.2: Remove ifdef CONFIG_NFSD from NFSv4.2 client SSC code. - NFS: fix nfs_fetch_iversion() - fanotify: fix permission model of unprivileged group - NFSD: Add an RPC authflavor tracepoint display helper - NFSD: Add nfsd_clid_cred_mismatch tracepoint - NFSD: Add nfsd_clid_verf_mismatch tracepoint - NFSD: Remove trace_nfsd_clid_inuse_err - NFSD: Add nfsd_clid_confirmed tracepoint - NFSD: Add nfsd_clid_reclaim_complete tracepoint - NFSD: Add nfsd_clid_destroyed tracepoint - NFSD: Add a couple more nfsd_clid_expired call sites - NFSD: Add tracepoints for SETCLIENTID edge cases - NFSD: Add tracepoints for EXCHANGEID edge cases - NFSD: Constify @fh argument of knfsd_fh_hash() - NFSD: Capture every CB state transition - NFSD: Drop TRACE_DEFINE_ENUM for NFSD4_CB_ macros - NFSD: Add cb_lost tracepoint - NFSD: Adjust cb_shutdown tracepoint - NFSD: Enhance the nfsd_cb_setup tracepoint - NFSD: Add an nfsd_cb_lm_notify tracepoint - NFSD: Add an nfsd_cb_offload tracepoint - NFSD: Replace the nfsd_deleg_break tracepoint - NFSD: Add an nfsd_cb_probe tracepoint - NFSD: Remove the nfsd_cb_work and nfsd_cb_done tracepoints - NFSD: Update nfsd_cb_args tracepoint - nfsd: Prevent truncation of an unlinked inode from blocking access to its directory - nfsd: move some commit_metadata()s outside the inode lock - NFSD add vfs_fsync after async copy is done - NFSD: delay unmount source's export after inter-server copy completed. - nfsd: move fsnotify on client creation outside spinlock - nfsd4: Expose the callback address and state of each NFS4 client - nfsd: fix kernel test robot warning in SSC code - NFSD: Fix error return code in nfsd4_interssc_connect() - nfsd: rpc_peeraddr2str needs rcu lock - lockd: Remove stale comments - lockd: Create a simplified .vs_dispatch method for NLM requests - lockd: Common NLM XDR helpers - lockd: Update the NLMv1 void argument decoder to use struct xdr_stream - lockd: Update the NLMv1 TEST arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 LOCK arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 CANCEL arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 UNLOCK arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 nlm_res arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 SM_NOTIFY arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 SHARE arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 FREE_ALL arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 void results encoder to use struct xdr_stream - lockd: Update the NLMv1 TEST results encoder to use struct xdr_stream - lockd: Update the NLMv1 nlm_res results encoder to use struct xdr_stream - lockd: Update the NLMv1 SHARE results encoder to use struct xdr_stream - lockd: Update the NLMv4 void arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 TEST arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 LOCK arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 CANCEL arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 UNLOCK arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 nlm_res arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 SM_NOTIFY arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 SHARE arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 FREE_ALL arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 void results encoder to use struct xdr_stream - lockd: Update the NLMv4 TEST results encoder to use struct xdr_stream - lockd: Update the NLMv4 nlm_res results encoder to use struct xdr_stream - lockd: Update the NLMv4 SHARE results encoder to use struct xdr_stream - nfsd: remove redundant assignment to pointer 'this' - NFSD: Prevent a possible oops in the nfs_dirent() tracepoint - nfsd: fix NULL dereference in nfs3svc_encode_getaclres - kernel/pid.c: remove static qualifier from pidfd_create() - kernel/pid.c: implement additional checks upon pidfd_create() parameters - fanotify: minor cosmetic adjustments to fid labels - fanotify: introduce a generic info record copying helper - fanotify: add pidfd support to the fanotify API - fsnotify: replace igrab() with ihold() on attach connector - fsnotify: count s_fsnotify_inode_refs for attached connectors - fsnotify: count all objects with attached connectors - fsnotify: optimize the case of no marks of any type - NFSD: Clean up splice actor - SUNRPC: Add svc_rqst_replace_page() API - NFSD: Batch release pages during splice read - NFSD: remove vanity comments - sysctl: introduce new proc handler proc_dobool - lockd: change the proc_handler for nsm_use_hostnames - nlm: minor nlm_lookup_file argument change - nlm: minor refactoring - lockd: update nlm_lookup_file reexport comment - Keep read and write fds with each nlm_file - nfs: don't atempt blocking locks on nfs reexports - lockd: don't attempt blocking locks on nfs reexports - nfs: don't allow reexport reclaims - SUNRPC: Add svc_rqst::rq_auth_stat - SUNRPC: Set rq_auth_stat in the pg_authenticate() callout - SUNRPC: Eliminate the RQ_AUTHERR flag - NFS: Add a private local dispatcher for NFSv4 callback operations - NFS: Remove unused callback void decoder - fsnotify: fix sb_connectors leak - NLM: Fix svcxdr_encode_owner() - nfsd: Fix a warning for nfsd_file_close_inode - fsnotify: pass data_type to fsnotify_name() - fsnotify: pass dentry instead of inode data - fsnotify: clarify contract for create event hooks - fsnotify: Don't insert unmergeable events in hashtable - fanotify: Fold event size calculation to its own function - fanotify: Split fsid check from other fid mode checks - inotify: Don't force FS_IN_IGNORED - fsnotify: Add helper to detect overflow_event - fsnotify: Add wrapper around fsnotify_add_event - fsnotify: Retrieve super block from the data field - fsnotify: Protect fsnotify_handle_inode_event from no-inode events - fsnotify: Pass group argument to free_event - fanotify: Support null inode event in fanotify_dfid_inode - fanotify: Allow file handle encoding for unhashed events - fanotify: Encode empty file handle when no inode is provided - fanotify: Require fid_mode for any non-fd event - fsnotify: Support FS_ERROR event type - fanotify: Reserve UAPI bits for FAN_FS_ERROR - fanotify: Pre-allocate pool of error events - fanotify: Support enqueueing of error events - fanotify: Support merging of error events - fanotify: Wrap object_fh inline space in a creator macro - fanotify: Add helpers to decide whether to report FID/DFID - fanotify: WARN_ON against too large file handles - fanotify: Report fid info for file related file system errors - fanotify: Emit generic error info for error event - fanotify: Allow users to request FAN_FS_ERROR events - SUNRPC: Trace calls to .rpc_call_done - NFSD: Optimize DRC bucket pruning - NFSD: move filehandle format declarations out of "uapi". - NFSD: drop support for ancient filehandles - NFSD: simplify struct nfsfh - NFSD: Initialize pointer ni with NULL and not plain integer 0 - NFSD: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() - SUNRPC: Replace the "__be32 *p" parameter to .pc_decode - SUNRPC: Change return value type of .pc_decode - NFSD: Save location of NFSv4 COMPOUND status - SUNRPC: Replace the "__be32 *p" parameter to .pc_encode - SUNRPC: Change return value type of .pc_encode - nfsd: update create verifier comment - NFSD:fix boolreturn.cocci warning - nfsd4: remove obselete comment - NFSD: Fix exposure in nfsd4_decode_bitmap() - NFSD: Fix READDIR buffer overflow - fsnotify: clarify object type argument - fsnotify: separate mark iterator type from object type enum - fanotify: introduce group flag FAN_REPORT_TARGET_FID - fsnotify: generate FS_RENAME event with rich information - fanotify: use macros to get the offset to fanotify_info buffer - fanotify: use helpers to parcel fanotify_info buffer - fanotify: support secondary dir fh and name in fanotify_info - fanotify: record old and new parent and name in FAN_RENAME event - fanotify: record either old name new name or both for FAN_RENAME - fanotify: report old and/or new parent+name in FAN_RENAME event - fanotify: wire up FAN_RENAME event - exit: Implement kthread_exit - exit: Rename module_put_and_exit to module_put_and_kthread_exit - NFSD: Fix sparse warning - NFSD: handle errors better in write_ports_addfd() - SUNRPC: change svc_get() to return the svc. - SUNRPC/NFSD: clean up get/put functions. - SUNRPC: stop using ->sv_nrthreads as a refcount - nfsd: make nfsd_stats.th_cnt atomic_t - SUNRPC: use sv_lock to protect updates to sv_nrthreads. - NFSD: narrow nfsd_mutex protection in nfsd thread - NFSD: Make it possible to use svc_set_num_threads_sync - SUNRPC: discard svo_setup and rename svc_set_num_threads_sync() - NFSD: simplify locking for network notifier. - lockd: introduce nlmsvc_serv - lockd: simplify management of network status notifiers - lockd: move lockd_start_svc() call into lockd_create_svc() - lockd: move svc_exit_thread() into the thread - lockd: introduce lockd_put() - lockd: rename lockd_create_svc() to lockd_get() - SUNRPC: move the pool_map definitions (back) into svc.c - SUNRPC: always treat sv_nrpools==1 as "not pooled" - lockd: use svc_set_num_threads() for thread start and stop - NFS: switch the callback service back to non-pooled. - NFSD: Remove be32_to_cpu() from DRC hash function - NFSD: Fix inconsistent indenting - NFSD: simplify per-net file cache management - NFSD: Combine XDR error tracepoints - nfsd: improve stateid access bitmask documentation - NFSD: De-duplicate nfsd4_decode_bitmap4() - nfs: block notification on fs with its own ->lock - nfsd4: add refcount for nfsd4_blocked_lock - NFSD: Fix zero-length NFSv3 WRITEs - nfsd: map EBADF - nfsd: Add errno mapping for EREMOTEIO - nfsd: Retry once in nfsd_open on an -EOPENSTALE return - NFSD: Clean up nfsd_vfs_write() - NFSD: De-duplicate net_generic(SVC_NET(rqstp), nfsd_net_id) - NFSD: De-duplicate net_generic(nf->nf_net, nfsd_net_id) - nfsd: Add a tracepoint for errors in nfsd4_clone_file_range() - NFSD: Write verifier might go backwards - NFSD: Clean up the nfsd_net::nfssvc_boot field - NFSD: Rename boot verifier functions - NFSD: Trace boot verifier resets - Revert "nfsd: skip some unnecessary stats in the v4 case" - NFSD: Move fill_pre_wcc() and fill_post_wcc() - nfsd: fix crash on COPY_NOTIFY with special stateid - fanotify: remove variable set but not used - lockd: fix server crash on reboot of client holding lock - lockd: fix failure to cleanup client locks - NFSD: Fix the behavior of READ near OFFSET_MAX - NFSD: Fix ia_size underflow - NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes - NFSD: COMMIT operations must not return NFS?ERR_INVAL - NFSD: Deprecate NFS_OFFSET_MAX - nfsd: Add support for the birth time attribute - NFSD: De-duplicate hash bucket indexing - NFSD: Skip extra computation for RC_NOCACHE case - NFSD: Streamline the rare "found" case - SUNRPC: Remove the .svo_enqueue_xprt method - SUNRPC: Merge svc_do_enqueue_xprt() into svc_enqueue_xprt() - SUNRPC: Remove svo_shutdown method - SUNRPC: Rename svc_create_xprt() - SUNRPC: Rename svc_close_xprt() - SUNRPC: Remove svc_shutdown_net() - NFSD: Remove svc_serv_ops::svo_module - NFSD: Move svc_serv_ops::svo_function into struct svc_serv - NFSD: Remove CONFIG_NFSD_V3 - NFSD: Clean up _lm_ operation names - nfsd: fix using the correct variable for sizeof() - fsnotify: fix merge with parent's ignored mask - fsnotify: optimize FS_MODIFY events with no ignored masks - fsnotify: remove redundant parameter judgment - SUNRPC: Return true/false (not 1/0) from bool functions - nfsd: Fix a write performance regression - nfsd: Clean up nfsd_file_put() - fanotify: do not allow setting dirent events in mask of non-dir - fs/lock: documentation cleanup. Replace inode->i_lock with flc_lock. - inotify: move control flags from mask to mark flags - fsnotify: pass flags argument to fsnotify_alloc_group() - fsnotify: make allow_dups a property of the group - fsnotify: create helpers for group mark_mutex lock - inotify: use fsnotify group lock helpers - nfsd: use fsnotify group lock helpers - dnotify: use fsnotify group lock helpers - fsnotify: allow adding an inode mark without pinning inode - fanotify: create helper fanotify_mark_user_flags() - fanotify: factor out helper fanotify_mark_update_flags() - fanotify: implement "evictable" inode marks - fanotify: use fsnotify group lock helpers - fanotify: enable "evictable" inode marks - fsnotify: introduce mark type iterator - fsnotify: consistent behavior for parent not watching children - fanotify: fix incorrect fmode_t casts - NFSD: Clean up nfsd_splice_actor() - NFSD: add courteous server support for thread with only delegation - NFSD: add support for share reservation conflict to courteous server - NFSD: move create/destroy of laundry_wq to init_nfsd and exit_nfsd - fs/lock: add helper locks_owner_has_blockers to check for blockers - fs/lock: add 2 callbacks to lock_manager_operations to resolve conflict - NFSD: add support for lock conflict to courteous server - NFSD: Show state of courtesy client in client info - NFSD: Clean up nfsd3_proc_create() - NFSD: Avoid calling fh_drop_write() twice in do_nfsd_create() - NFSD: Refactor nfsd_create_setattr() - NFSD: Refactor NFSv3 CREATE - NFSD: Refactor NFSv4 OPEN(CREATE) - NFSD: Remove do_nfsd_create() - NFSD: Clean up nfsd_open_verified() - NFSD: Instantiate a struct file when creating a regular NFSv4 file - NFSD: Remove dprintk call sites from tail of nfsd4_open() - NFSD: Fix whitespace - NFSD: Move documenting comment for nfsd4_process_open2() - NFSD: Trace filecache opens - NFSD: Clean up the show_nf_flags() macro - SUNRPC: Use RMW bitops in single-threaded hot paths - nfsd: Unregister the cld notifier when laundry_wq create failed - nfsd: Fix null-ptr-deref in nfsd_fill_super() - nfsd: destroy percpu stats counters after reply cache shutdown - NFSD: Modernize nfsd4_release_lockowner() - NFSD: Add documenting comment for nfsd4_release_lockowner() - NFSD: nfsd_file_put() can sleep - NFSD: Fix potential use-after-free in nfsd_file_put() - SUNRPC: Optimize xdr_reserve_space() - fanotify: refine the validation checks on non-dir inode mask - NFS: restore module put when manager exits. - NFSD: Decode NFSv4 birth time attribute - lockd: set fl_owner when unlocking files - lockd: fix nlm_close_files - fs: inotify: Fix typo in inotify comment - fanotify: prepare for setting event flags in ignore mask - fanotify: cleanups for fanotify_mark() input validations - fanotify: introduce FAN_MARK_IGNORE - fsnotify: Fix comment typo - nfsd: eliminate the NFSD_FILE_BREAK_* flags - SUNRPC: Fix xdr_encode_bool() - NLM: Defend against file_lock changes after vfs_test_lock() - NFSD: Fix space and spelling mistake - nfsd: remove redundant assignment to variable len - NFSD: Demote a WARN to a pr_warn() - NFSD: Report filecache LRU size - NFSD: Report count of calls to nfsd_file_acquire() - NFSD: Report count of freed filecache items - NFSD: Report average age of filecache items - NFSD: Add nfsd_file_lru_dispose_list() helper - NFSD: Refactor nfsd_file_gc() - NFSD: Refactor nfsd_file_lru_scan() - NFSD: Report the number of items evicted by the LRU walk - NFSD: Record number of flush calls - NFSD: Zero counters when the filecache is re-initialized - NFSD: Hook up the filecache stat file - NFSD: WARN when freeing an item still linked via nf_lru - NFSD: Trace filecache LRU activity - NFSD: Leave open files out of the filecache LRU - NFSD: Fix the filecache LRU shrinker - NFSD: Never call nfsd_file_gc() in foreground paths - NFSD: No longer record nf_hashval in the trace log - NFSD: Remove lockdep assertion from unhash_and_release_locked() - NFSD: nfsd_file_unhash can compute hashval from nf->nf_inode - NFSD: Refactor __nfsd_file_close_inode() - NFSD: nfsd_file_hash_remove can compute hashval - NFSD: Remove nfsd_file::nf_hashval - NFSD: Replace the "init once" mechanism - NFSD: Set up an rhashtable for the filecache - NFSD: Convert the filecache to use rhashtable - NFSD: Clean up unused code after rhashtable conversion - NFSD: Separate tracepoints for acquire and create - NFSD: Move nfsd_file_trace_alloc() tracepoint - NFSD: NFSv4 CLOSE should release an nfsd_file immediately - NFSD: Ensure nf_inode is never dereferenced - NFSD: refactoring v4 specific code to a helper in nfs4state.c - NFSD: keep track of the number of v4 clients in the system - NFSD: limit the number of v4 clients to 1024 per 1GB of system memory - nfsd: silence extraneous printk on nfsd.ko insertion - NFSD: Optimize nfsd4_encode_operation() - NFSD: Optimize nfsd4_encode_fattr() - NFSD: Clean up SPLICE_OK in nfsd4_encode_read() - NFSD: Add an nfsd4_read::rd_eof field - NFSD: Optimize nfsd4_encode_readv() - NFSD: Simplify starting_len - NFSD: Use xdr_pad_size() - NFSD: Clean up nfsd4_encode_readlink() - NFSD: Fix strncpy() fortify warning - NFSD: nfserrno(-ENOMEM) is nfserr_jukebox - NFSD: Shrink size of struct nfsd4_copy_notify - NFSD: Shrink size of struct nfsd4_copy - NFSD: Reorder the fields in struct nfsd4_op - NFSD: Make nfs4_put_copy() static - NFSD: Replace boolean fields in struct nfsd4_copy - NFSD: Refactor nfsd4_cleanup_inter_ssc() (1/2) - NFSD: Refactor nfsd4_cleanup_inter_ssc() (2/2) - NFSD: Refactor nfsd4_do_copy() - NFSD: Remove kmalloc from nfsd4_do_async_copy() - NFSD: Add nfsd4_send_cb_offload() - NFSD: Move copy offload callback arguments into a separate structure - NFSD: drop fh argument from alloc_init_deleg - NFSD: verify the opened dentry after setting a delegation - NFSD: introduce struct nfsd_attrs - NFSD: set attributes when creating symlinks - NFSD: add security label to struct nfsd_attrs - NFSD: add posix ACLs to struct nfsd_attrs - NFSD: change nfsd_create()/nfsd_symlink() to unlock directory before returning. - NFSD: always drop directory lock in nfsd_unlink() - NFSD: only call fh_unlock() once in nfsd_link() - NFSD: reduce locking in nfsd_lookup() - NFSD: use explicit lock/unlock for directory ops - NFSD: use (un)lock_inode instead of fh_(un)lock for file operations - NFSD: discard fh_locked flag and fh_lock/fh_unlock - lockd: detect and reject lock arguments that overflow - NFSD: fix regression with setting ACLs. - nfsd_splice_actor(): handle compound pages - NFSD: move from strlcpy with unused retval to strscpy - lockd: move from strlcpy with unused retval to strscpy - NFSD enforce filehandle check for source file in COPY - NFSD: remove redundant variable status - nfsd: Avoid some useless tests - nfsd: Propagate some error code returned by memdup_user() - NFSD: Increase NFSD_MAX_OPS_PER_COMPOUND - NFSD: Protect against send buffer overflow in NFSv2 READDIR (CVE-2022-43945) - NFSD: Protect against send buffer overflow in NFSv3 READDIR (CVE-2022-43945) - NFSD: Protect against send buffer overflow in NFSv2 READ (CVE-2022-43945) - NFSD: Protect against send buffer overflow in NFSv3 READ (CVE-2022-43945) - NFSD: drop fname and flen args from nfsd_create_locked() - NFSD: Fix handling of oversized NFSv4 COMPOUND requests - nfsd: clean up mounted_on_fileid handling - nfsd: remove nfsd4_prepare_cb_recall() declaration - NFSD: Add tracepoints to report NFSv4 callback completions - NFSD: Add a mechanism to wait for a DELEGRETURN - NFSD: Refactor nfsd_setattr() - NFSD: Make nfsd4_setattr() wait before returning NFS4ERR_DELAY - NFSD: Make nfsd4_rename() wait before returning NFS4ERR_DELAY - NFSD: Make nfsd4_remove() wait before returning NFS4ERR_DELAY - NFSD: keep track of the number of courtesy clients in the system - NFSD: add shrinker to reap courtesy clients on low memory condition - SUNRPC: Parametrize how much of argsize should be zeroed - NFSD: Reduce amount of struct nfsd4_compoundargs that needs clearing - NFSD: Refactor common code out of dirlist helpers - NFSD: Use xdr_inline_decode() to decode NFSv3 symlinks - NFSD: Clean up WRITE arg decoders - NFSD: Clean up nfs4svc_encode_compoundres() - NFSD: Remove "inline" directives on op_rsize_bop helpers - NFSD: Remove unused nfsd4_compoundargs::cachetype field - NFSD: Pack struct nfsd4_compoundres - nfsd: use DEFINE_PROC_SHOW_ATTRIBUTE to define nfsd_proc_ops - nfsd: use DEFINE_SHOW_ATTRIBUTE to define export_features_fops and supported_enctypes_fops - nfsd: use DEFINE_SHOW_ATTRIBUTE to define client_info_fops - nfsd: use DEFINE_SHOW_ATTRIBUTE to define nfsd_reply_cache_stats_fops - nfsd: use DEFINE_SHOW_ATTRIBUTE to define nfsd_file_cache_stats_fops - NFSD: Rename the fields in copy_stateid_t - NFSD: Cap rsize_bop result based on send buffer size - nfsd: only fill out return pointer on success in nfsd4_lookup_stateid - nfsd: fix comments about spinlock handling with delegations - nfsd: make nfsd4_run_cb a bool return function - nfsd: extra checks when freeing delegation stateids - fs/notify: constify path - fsnotify: remove unused declaration - fanotify: Remove obsoleted fanotify_event_has_path() - nfsd: fix nfsd_file_unhash_and_dispose - nfsd: rework hashtable handling in nfsd_do_file_acquire - NFSD: unregister shrinker when nfsd_init_net() fails - nfsd: fix net-namespace logic in __nfsd_file_cache_purge - nfsd: fix use-after-free in nfsd_file_do_acquire tracepoint - nfsd: put the export reference in nfsd4_verify_deleg_dentry - NFSD: Fix reads with a non-zero offset that don't end on a page boundary - filelock: add a new locks_inode_context accessor function - lockd: use locks_inode_context helper - nfsd: use locks_inode_context helper - NFSD: Simplify READ_PLUS - NFSD: Remove redundant assignment to variable host_err - NFSD: Finish converting the NFSv2 GETACL result encoder - NFSD: Finish converting the NFSv3 GETACL result encoder - nfsd: ignore requests to disable unsupported versions - nfsd: move nfserrno() to vfs.c - nfsd: allow disabling NFSv2 at compile time - exportfs: use pr_debug for unreachable debug statements - NFSD: Pass the target nfsd_file to nfsd_commit() - NFSD: Revert "NFSD: NFSv4 CLOSE should release an nfsd_file immediately" - NFSD: Add an NFSD_FILE_GC flag to enable nfsd_file garbage collection - NFSD: Flesh out a documenting comment for filecache.c - NFSD: Clean up nfs4_preprocess_stateid_op() call sites - NFSD: Trace stateids returned via DELEGRETURN - NFSD: Trace delegation revocations - NFSD: Use const pointers as parameters to fh_ helpers - NFSD: Update file_hashtbl() helpers - NFSD: Clean up nfsd4_init_file() - NFSD: Add a nfsd4_file_hash_remove() helper - NFSD: Clean up find_or_add_file() - NFSD: Refactor find_file() - NFSD: Use rhashtable for managing nfs4_file objects - NFSD: Fix licensing header in filecache.c - nfsd: remove the pages_flushed statistic from filecache - nfsd: reorganize filecache.c - nfsd: fix up the filecache laundrette scheduling - NFSD: Add an nfsd_file_fsync tracepoint - lockd: set other missing fields when unlocking files - nfsd: return error if nfs4_setacl fails - NFSD: Use struct_size() helper in alloc_session() - lockd: set missing fl_flags field when retrieving args - lockd: ensure we use the correct file descriptor when unlocking - lockd: fix file selection in nlmsvc_cancel_blocked - NFSD: pass range end to vfs_fsync_range() instead of count - NFSD: refactoring courtesy_client_reaper to a generic low memory shrinker - NFSD: add support for sending CB_RECALL_ANY - NFSD: add delegation reaper to react to low memory condition - NFSD: Use only RQ_DROPME to signal the need to drop a reply - NFSD: Avoid clashing function prototypes - nfsd: rework refcounting in filecache - nfsd: fix handling of cached open files in nfsd4_open codepath - Revert "SUNRPC: Use RMW bitops in single-threaded hot paths" - NFSD: Use set_bit(RQ_DROPME) - NFSD: fix use-after-free in nfsd4_ssc_setup_dul() - NFSD: register/unregister of nfsd-client shrinker at nfsd startup/shutdown time - NFSD: replace delayed_work with work_struct for nfsd_client_shrinker - nfsd: don't free files unconditionally in __nfsd_file_cache_purge - nfsd: don't destroy global nfs4_file table in per-net shutdown - NFSD: enhance inter-server copy cleanup - nfsd: allow nfsd_file_get to sanely handle a NULL pointer - nfsd: clean up potential nfsd_file refcount leaks in COPY codepath - NFSD: fix leaked reference count of nfsd4_ssc_umount_item - nfsd: don't hand out delegation on setuid files being opened for write - NFSD: fix problems with cleanup on errors in nfsd4_copy - nfsd: fix courtesy client with deny mode handling in nfs4_upgrade_open - nfsd: don't fsync nfsd_files on last close - NFSD: copy the whole verifier in nfsd_copy_write_verifier - NFSD: Protect against filesystem freezing - lockd: set file_lock start and end when decoding nlm4 testargs - nfsd: don't replace page in rq_pages if it's a continuation of last page - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - nfsd: call op_release, even when op_func returns an error - nfsd: don't open-code clear_and_wake_up_bit - nfsd: NFSD_FILE_KEY_INODE only needs to find GC'ed entries - nfsd: simplify test_bit return in NFSD_FILE_KEY_FULL comparator - nfsd: don't kill nfsd_files because of lease break error - nfsd: add some comments to nfsd_file_do_acquire - nfsd: don't take/put an extra reference when putting a file - nfsd: update comment over __nfsd_file_cache_purge - nfsd: allow reaping files still under writeback - NFSD: Convert filecache to rhltable - nfsd: simplify the delayed disposal list code - NFSD: Fix problem of COMMIT and NFS4ERR_DELAY in infinite loop - nfsd: make a copy of struct iattr before calling notify_change - nfsd: fix double fget() bug in __write_ports_addfd() - lockd: drop inappropriate svc_get() from locked_get() - NFSD: Add an nfsd4_encode_nfstime4() helper - nfsd: Fix creation time serialization order - nfsd: don't allow nfsd threads to be signalled. - nfsd: Simplify code around svc_exit_thread() call in nfsd() - nfsd: separate nfsd_last_thread() from nfsd_put() - Documentation: Add missing documentation for EXPORT_OP flags - NFSD: fix possible oops when nfsd/pool_stats is closed. - nfsd: call nfsd_last_thread() before final nfsd_put() - nfsd: drop the nfsd_put helper - nfsd: fix RELEASE_LOCKOWNER (CVE-2024-26629) - nfsd: don't take fi_lock in nfsd_break_deleg_cb() - nfsd: don't call locks_release_private() twice concurrently - nfsd: Fix a regression in nfsd_setattr() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.221 - null_blk: Print correct max open zones limit in null_init_zoned_dev() - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() - wifi: cfg80211: pmsr: use correct nla_get_uX functions - wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64 - wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids - wifi: iwlwifi: mvm: don't read past the mfuart notifcation - wifi: mac80211: correctly parse Spatial Reuse Parameter Set element - [armhf] net/ncsi: add NCSI Intel OEM command to keep PHY up - [armhf] net/ncsi: Simplify Kconfig/dts control flow - [armhf] net/ncsi: Fix the multi thread manner of NCSI driver - ipv6: sr: block BH in seg6_output_core() and seg6_input_core() - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (CVE-2024-36978) - vxlan: Fix regression when dropping packets due to invalid src addresses - tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB - net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (CVE-2024-36974) - ptp: Fix error message on failed pin verification - af_unix: Annotate data-race of sk->sk_state in unix_inq_len(). - af_unix: Annotate data-races around sk->sk_state in unix_write_space() and poll(). - af_unix: Annotate data-races around sk->sk_state in sendmsg() and recvmsg(). - af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG. - af_unix: Annotate data-race of net->unx.sysctl_max_dgram_qlen. - af_unix: Use unix_recvq_full_lockless() in unix_stream_connect(). - af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen(). - af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill(). - ipv6: fix possible race in __fib6_drop_pcpu_from() - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete - drm/amd/display: Handle Y carry-over in VCP X.Y calculation - serial: sc16is7xx: replace hardcoded divisor value with BIT() macro - serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler - btrfs: fix leak of qgroup extent records after transaction abort - nilfs2: Remove check for PageError - nilfs2: return the mapped address from nilfs_get_page() - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages - mei: me: release irq in mei_me_pci_resume error path - jfs: xattr: fix buffer overflow for invalid xattr - xhci: Set correct transferred length for cancelled bulk transfers - xhci: Apply reset resume quirk to Etron EJ188 xHCI host - xhci: Apply broken streams quirk to Etron EJ188 xHCI host - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory - [powerpc*] uaccess: Fix build errors seen with GCC 13/14 - Input: try trimming too long modalias strings - SUNRPC: return proper error from gss_wrap_req_priv - gpio: tqmx86: fix typo in Kconfig label - HID: core: remove unnecessary WARN_ON() in implement() - gpio: tqmx86: store IRQ trigger type and unmask status separately - [amd64] iommu/amd: Introduce pci segment structure - [amd64] iommu/amd: Fix sysfs leak in iommu init - iommu: Return right value in iommu_sva_bind_device() - HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() - drm/vmwgfx: 3D disabled should not effect STDU memory limits - net: sfp: Always call `sfp_sm_mod_remove()` on remove - [arm64] net: hns3: add cond_resched() to hns3 ring buffer init process - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet - drm/komeda: check for error-valued pointer - drm/bridge/panel: Fix runtime warning on panel bridge release - tcp: fix race in tcp_v6_syn_recv_sock() - net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets - Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type - net: stmmac: replace priv->speed with the portTransmitRate from the tc-cbs parameters - net/ipv6: Fix the RT cache flush via sysctl using a previous delay - ionic: fix use after netif_napi_del() - iio: adc: ad9467: fix scan type sign - iio: dac: ad5592r: fix temperature channel scaling value - iio: imu: inv_icm42600: delete unneeded update watermark call - drivers: core: synchronize really_probe() and dev_uevent() - [armhf] drm/exynos/vidi: fix memory leak in .get_modes() - [armhf] drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found - [x86] vmci: prevent speculation leaks by sanitizing event in event_deliver() - fs/proc: fix softlockup in __read_vmcore - ocfs2: use coarse time for new created files - ocfs2: fix races between hole punching and AIO+DIO - PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id - dmaengine: axi-dmac: fix possible race in remove() - remoteproc: k3-r5: Do not allow core1 to power up before core0 via sysfs - [x86] intel_th: pci: Add Granite Rapids support - [x86] intel_th: pci: Add Granite Rapids SOC support - [x86] intel_th: pci: Add Sapphire Rapids SOC support - [x86] intel_th: pci: Add Meteor Lake-S support - [x86] intel_th: pci: Add Lunar Lake support - nilfs2: fix potential kernel bug due to lack of writeback flag waiting (CVE-2024-37078) - tick/nohz_full: Don't abuse smp_call_function_single() in tick_setup_device() - serial: 8250_pxa: Configure tx_loadsz to match FIFO IRQ level - hugetlb_encode.h: fix undefined behaviour (34 << 26) - mptcp: ensure snd_una is properly initialized on connect - mptcp: pm: inc RmAddr MIB counter once per RM_ADDR ID - mptcp: pm: update add_addr counters after connect - remoteproc: k3-r5: Jump to error handling labels in start/stop errors - greybus: Fix use-after-free bug in gb_interface_release due to race condition. - usb-storage: alauda: Check whether the media is initialized (CVE-2024-38619) - i2c: at91: Fix the functionality flags of the slave-only interface - i2c: designware: Fix the functionality flags of the slave-only interface - zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING - padata: Disable BH when taking works lock on MT path - rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment - rcutorture: Fix invalid context warning when enable srcu barrier testing - block/ioctl: prefer different overflow check - batman-adv: bypass empty buckets in batadv_purge_orig_ref() - wifi: ath9k: work around memset overflow warning - af_packet: avoid a false positive warning in packet_setsockopt() - drop_monitor: replace spin_lock by raw_spin_lock - scsi: qedi: Fix crash while reading debugfs attribute - netpoll: Fix race condition in netpoll_owner_active - HID: Add quirk for Logitech Casa touchpad - ACPI: video: Add backlight=native quirk for Lenovo Slim 7 16ARH7 - Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl - drm/amd/display: Exit idle optimizations before HDCP execution - [x86] ASoC: Intel: sof_sdw: add JD2 quirk for HP Omen 14 - [arm64,armhf] drm/lima: add mask irq callback to gp and pp - [arm64,armhf] drm/lima: mask irqs in timeout path before hard reset - [powerpc*] pseries: Enforce hcall result buffer validity and size - [powerpc*] io: Avoid clang null pointer arithmetic warnings - power: supply: cros_usbpd: provide ID table for avoiding fallback match - f2fs: remove clear SB_INLINECRYPT flag in default_options - usb: misc: uss720: check for incompatible versions of the Belkin F5U002 - udf: udftime: prevent overflow in udf_disk_stamp_to_time() - PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports - [mips*] Octeon: Add PCIe link status check - serial: exar: adding missing CTI and Exar PCI ids - [mips*] Routerboard 532: Fix vendor retry check code - [mips*] bmips: BCM6358: make sure CBR is correctly set - tracing: Build event generation tests only as modules - cipso: fix total option length computation - netrom: Fix a memory leak in nr_heartbeat_expiry() - ipv6: prevent possible NULL deref in fib6_nh_init() - ipv6: prevent possible NULL dereference in rt6_probe() - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() - netns: Make get_net_ns() handle zero refcount net - qca_spi: Make interrupt remembering atomic - net/sched: act_api: rely on rcu in tcf_idr_check_alloc - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() - tipc: force a dst refcount before doing decryption - net/sched: act_ct: set 'net' pointer when creating new nf_flow_table - sched: act_ct: add netns into the key of tcf_ct_flow_table - net: stmmac: No need to calculate speed divider when offload is disabled - virtio_net: checksum offloading handling fix - netfilter: ipset: Fix suspicious rcu_dereference_protected() - net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings - regulator: core: Fix modpost error "regulator_get_regmap" undefined - dmaengine: ioat: switch from 'pci_' to 'dma_' API - dmaengine: ioat: Drop redundant pci_enable_pcie_error_reporting() - dmaengine: ioatdma: Fix leaking on version mismatch - dmaengine: ioat: use PCI core macros for PCIe Capability - dmaengine: ioatdma: Fix error path in ioat3_dma_probe() - dmaengine: ioatdma: Fix kmemleak in ioat_pci_probe() - dmaengine: ioatdma: Fix missing kmem_cache_destroy() - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." - RDMA/mlx5: Add check for srq max_sge attribute - ALSA: hda/realtek: Limit mic boost on N14AP7 - drm/radeon: fix UBSAN warning in kv_dpm.c - gcov: add support for GCC 14 - kcov: don't lose track of remote references during softirqs - i2c: ocores: set IACK bit after core is enabled - dt-bindings: i2c: google,cros-ec-i2c-tunnel: correct path to i2c-controller schema - drm/amd/display: revert Exit idle optimizations before HDCP execution - [armhf] dts: samsung: smdkv310: fix keypad no-autorepeat - [armhf] dts: samsung: exynos4412-origen: fix keypad no-autorepeat - [armhf] dts: samsung: smdk4412: fix keypad no-autorepeat - rtlwifi: rtl8192de: Style clean-ups - wifi: rtlwifi: rtl8192de: Fix 5 GHz TX power - pmdomain: ti-sci: Fix duplicate PD referrals - knfsd: LOOKUP can return an illegal error value - spmi: hisi-spmi-controller: Do not override device identifier - bcache: fix variable length array abuse in btree_iter (CVE-2024-39482) - tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test - [x86] cpu/vfm: Add new macros to work with (vendor/family/model) values - [x86] cpu: Fix x86_match_cpu() to match just X86_VENDOR_INTEL - r8169: remove unneeded memory barrier in rtl_tx - r8169: improve rtl_tx - r8169: improve rtl8169_start_xmit - r8169: remove nr_frags argument from rtl_tx_slots_avail - r8169: remove not needed check in rtl8169_start_xmit - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (CVE-2024-38586) - Revert "kheaders: substituting --sort in archive creation" - kheaders: explicitly define file modes for archived headers - perf/core: Fix missing wakeup when waiting for context reference - PCI: Add PCI_ERROR_RESPONSE and related definitions - [x86] amd_nb: Check for invalid SMN reads - cifs: missed ref-counting smb session in find - smb: client: fix deadlock in smb2_find_smb_tcon() (CVE-2024-39468) - ACPI: Add quirks for AMD Renoir/Lucienne CPUs to force the D3 hint - [x86] ACPI: x86: Add a quirk for Dell Inspiron 14 2-in-1 for StorageD3Enable - [x86] ACPI: x86: Add another system to quirk list for forcing StorageD3Enable - [x86] ACPI: x86: utils: Add Cezanne to the list for forcing StorageD3Enable - [x86] ACPI: x86: utils: Add Picasso to the list for forcing StorageD3Enable - [x86] ACPI: x86: Force StorageD3Enable on more products - Input: ili210x - fix ili251x_read_touch_data() return value - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER - [arm64,armhf] pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins - [arm64,armhf] pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins - [arm64,armhf] pinctrl/rockchip: separate struct rockchip_pin_bank to a head file - [arm64,armhf] pinctrl: rockchip: use dedicated pinctrl type for RK3328 - [arm64,armhf] pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set - drm/amdgpu: fix UBSAN warning in kv_dpm.c - netfilter: nf_tables: validate family when identifying table via handle - SUNRPC: Fix null pointer dereference in svc_rqst_free() - SUNRPC: Fix a NULL pointer deref in trace_svc_stats_latency() - SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation - SUNRPC: Fix svcxdr_init_encode's buflen calculation - nfsd: hold a lighter-weight client reference over CB_RECALL_ANY - net: dsa: microchip: fix initial port flush problem - net: phy: micrel: add Microchip KSZ 9477 to the device table - xdp: Move the rxq_info.mem clearing to unreg_mem_model() - xdp: Allow registering memory model without rxq reference - xdp: Remove WARN() from __xdp_reg_mem_model() - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep - mtd: partitions: redboot: Added conversion of operands to a larger type - bpf: Add a check for struct bpf_fib_lookup size - net/iucv: Avoid explicit cpumask var allocation on stack - net/dpaa2: Avoid explicit cpumask var allocation on stack - ALSA: emux: improve patch ioctl data validation - media: dvbdev: Initialize sbuf - soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message - drm/radeon/radeon_display: Decrease the size of allocated memory - nvme: fixup comment for nvme RDMA Provider Type - drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA - gpio: davinci: Validate the obtained number of IRQs - gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1) - [x86] stop playing stack games in profile_pc() - ocfs2: fix DIO failure due to insufficient transaction credits - mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos - mmc: sdhci: Do not invert write-protect twice - mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro() - counter: ti-eqep: enable clock at probe - iio: adc: ad7266: Fix variable checking bug - net: usb: ax88179_178a: improve link status logs - usb: gadget: printer: SS+ support - usb: gadget: printer: fix races against disable (CVE-2024-25741) - usb: musb: da8xx: fix a resource leak in probe() - usb: atm: cxacru: fix endpoint checking in cxacru_bind() - serial: 8250_omap: Implementation of Errata i2310 - tty: mcf: MCF54418 has 10 UARTS - net: can: j1939: Initialize unused data in j1939_send_one() - net: can: j1939: recover socket queue on CAN bus error during BAM transmission - net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new - kbuild: Install dtb files as 0644 in Makefile.dtbinst - csky, hexagon: fix broken sys_sync_file_range - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes - [x86] drm/i915/gt: Fix potential UAF by revoke of fence registers - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes - batman-adv: Don't accept TT entries for out-of-spec VIDs - ata: ahci: Clean up sysfs file on error - ata: libata-core: Fix double free on error - ftruncate: pass a signed offset - syscalls: fix compat_sys_io_pgetevents_time64 usage - mtd: spinand: macronix: Add support for serial NAND flash - pwm: stm32: Refuse too small period requests - nfs: Leave pages in the pagecache if readpage failed - ipv6: annotate some data-races around sk->sk_prot - ipv6: Fix data races around sk->sk_prot. - tcp: Fix data races around icsk->icsk_af_ops. - drivers: fix typo in firmware/efi/memmap.c - efi: Correct comment on efi_memmap_alloc - efi: memmap: Move manipulation routines into x86 arch tree - efi: xen: Set EFI_PARAVIRT for Xen dom0 boot on all architectures - [x86] efi/x86: Free EFI memory map only when installing a new one. - [arm64] KVM: arm64: vgic-v4: Make the doorbell request robust w.r.t preemption - [arm64] dts: rockchip: Add sound-dai-cells for RK3368 - xdp: xdp_mem_allocator can be NULL in trace_mem_connect(). - serial: 8250_omap: Fix Errata i2310 with RX FIFO level check - tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset() . [ Salvatore Bonaccorso ] * Bump ABI to 31 * Refresh "fanotify: Taint on use of FANOTIFY_ACCESS_PERMISSIONS" * [rt] Refresh "sunrpc: Make svc_xprt_do_enqueue() use" * Refresh "firmware: Remove redundant log messages from drivers" * [rt] Update to 5.10.221-rt113 linux-signed-i386 (5.10.223+1) bullseye-security; urgency=high . * Sign kernel from linux 5.10.223-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.222 - Compiler Attributes: Add __uninitialized macro - [arm64,armhf] drm/lima: fix shared irq handling on driver remove - media: dvb: as102-fe: Fix as10x_register_addr packing - media: dvb-usb: dib0700_devices: Add missing release_firmware() - IB/core: Implement a limit on UMAD receive List - scsi: qedf: Make qedf_execute_tmf() non-preemptible - crypto: aead,cipher - zeroize key buffer after use - drm/amdgpu: Initialize timestamp for some legacy SOCs - drm/amd/display: Check index msg_id before read or write - drm/amd/display: Check pipe offset before setting vblank - drm/amd/display: Skip finding free audio for unknown engine_id - media: dw2102: Don't translate i2c read into write - sctp: prefer struct_size over open coded arithmetic - firmware: dmi: Stop decoding on broken entry - Input: ff-core - prefer struct_size over open coded arithmetic - [arm64,armhf] net: dsa: mv88e6xxx: Correct check for empty list - media: dvb-frontends: tda18271c2dd: Remove casting during div - media: s2255: Use refcount_t instead of atomic_t for num_channels - media: dvb-frontends: tda10048: Fix integer overflow - i2c: i801: Annotate apanel_addr as __ro_after_init - [powerpc*] 64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n - orangefs: fix out-of-bounds fsid access - kunit: Fix timeout message - [powerpc*] xmon: Check cpu id in commands "c#", "dp#" and "dx#" - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD - jffs2: Fix potential illegal address access in jffs2_free_inode - [s390x] pkey: Wipe sensitive data on failure - UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open() - tcp_metrics: validate source addr length - wifi: wilc1000: fix ies_len type in connect path - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CVE-2024-39487) - inet_diag: Initialize pad field in struct inet_diag_req_v2 - nilfs2: fix inode number range checks - nilfs2: add missing check for inode numbers on directory entries - mm: optimize the redundant loop of mm_update_owner_next() - mm: avoid overflows in dirty throttling logic - Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot - can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct - fsnotify: Do not generate events for O_PATH file descriptors - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes - drm/amdgpu/atomfirmware: silence UBSAN warning - mtd: rawnand: Bypass a couple of sanity checks during NAND identification - bnx2x: Fix multiple UBSAN array-index-out-of-bounds - bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues - ima: Avoid blocking in RCU read-side critical section (CVE-2024-40947) - media: dw2102: fix a potential buffer overflow - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr - ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897 - nvme-multipath: find NUMA path only for online numa-node - nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset - [x86] platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet - [x86] platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro - nvmet: fix a possible leak when destroy a ctrl during qp establishment - kbuild: fix short log for AS in link-vmlinux.sh - nilfs2: fix incorrect inode allocation from reserved inodes - mm: prevent derefencing NULL ptr in pfn_section_valid() - filelock: fix potential use-after-free in posix_lock_inode - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading - vfs: don't mod negative dentry count when on shrinker list - tcp: fix incorrect undo caused by DSACK of TLP retransmit - net: lantiq_etop: add blank line after declaration - net: ethernet: lantiq_etop: fix double free in detach - ppp: reject claimed-as-LCP but actually malformed packets - ethtool: netlink: do not return SQI value if link is down - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). - net/sched: Fix UAF when resolving a clash - [s390x] Mark psw in __load_psw_mask() as __unitialized - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() - tcp: avoid too many retransmit packets (CVE-2024-41007) - net: ks8851: Fix potential TX stall after interface reopen - USB: serial: option: add Telit generic core-dump composition - USB: serial: option: add Telit FN912 rmnet compositions - USB: serial: option: add Fibocom FM350-GL - USB: serial: option: add support for Foxconn T99W651 - USB: serial: option: add Netprisma LCUK54 series modules - USB: serial: option: add Rolling RW350-GL variants - USB: serial: mos7840: fix crash on resume - USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor - hpet: Support 32-bit userspace - nvmem: meson-efuse: Fix return value of nvmem callbacks - ALSA: hda/realtek: Enable Mute LED on HP 250 G7 - ALSA: hda/realtek: Limit mic boost on VAIO PRO PX - libceph: fix race between delayed_work() and ceph_monc_stop() - wireguard: allowedips: avoid unaligned 64-bit memory accesses - wireguard: queueing: annotate intentional data race in cpu round robin - wireguard: send: annotate intentional data race in checking empty queue - x86/retpoline: Move a NOENDBR annotation to the SRSO dummy return thunk - ipv6: annotate data-races around cnf.disable_ipv6 - ipv6: prevent NULL dereference in ip6_output() (CVE-2024-36901) - bpf: Allow reads from uninit stack - nilfs2: fix kernel bug on rename operation of broken directory - i2c: mark HostNotify target address as used https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.223 - gcc-plugins: Rename last_stmt() for GCC 14+ - filelock: Remove locks reliably when fcntl/close race is detected (CVE-2024-41012) - scsi: qedf: Set qed_slowpath_params to zero before use - ACPI: EC: Abort address space access upon error - ACPI: EC: Avoid returning AE_OK on errors in address space handler - wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata - wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() - Input: silead - Always support 10 fingers - net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() - ila: block BH in ila_output() - [arm64] armv8_deprecated: Fix warning in isndep cpuhp starting process - null_blk: fix validation of block size - kconfig: gconf: give a proper initial state to the Save button - kconfig: remove wrong expr_trans_bool() - fs/file: fix the check in find_next_fd() - mei: demote client disconnect warning on suspend to debug - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check - [powerpc*] KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() - ALSA: hda/realtek: Add more codec ID to no shutup pins list - [mips*] fix compat_sys_lseek syscall - Input: elantech - fix touchpad state on resume for Lenovo N24 - Input: i8042 - add Ayaneo Kun to i8042 quirk table - [x86] bytcr_rt5640 : inverse jack detect for Archos 101 cesium - [arm*] ALSA: dmaengine: Synchronize dma channel after drop() - [armhf] ASoC: ti: davinci-mcasp: Set min period size using FIFO config - can: kvaser_usb: fix return value for hif_usb_send_regout - [s390x] sclp: Fix sclp_init() cleanup on failure - btrfs: qgroup: fix quota root leak after quota disable failure - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx - ALSA: dmaengine_pcm: terminate dmaengine before synchronize - net: usb: qmi_wwan: add Telit FN912 compositions - net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() - [powerpc*] pseries: Whitelist dtl slub object for copying to userspace - [powerpc*] eeh: avoid possible crash when edev->pdev changes - scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() - fs: better handle deep ancestor chains in is_subdir() - spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices - hfsplus: fix uninit-value in copy_name - spi: mux: set ctlr->bits_per_word_mask - [arm*] 9324/1: fix get_user() broken with veneer - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency - bpf: Fix overrunning reservations in ringbuf (CVE-2024-41009) - bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue (CVE-2024-36938) - scsi: core: Fix a use-after-free (CVE-2022-48666) - ext4: fix error code saved on super block during file system abort - ext4: Send notifications on error - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() - net: relax socket state check at accept time. (CVE-2024-36484) - ocfs2: add bounds checking to ocfs2_check_dir_entry() - jfs: don't walk off the end of ealist - ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 - [arm64] dts: qcom: msm8996: Disable SS instance in Parkmode for USB - [arm*] ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused - filelock: Fix fcntl/close race recovery compat path - tun: add missing verification for short frame (CVE-2024-41091) - tap: add missing verification for short frame (CVE-2024-41090) . [ Salvatore Bonaccorso ] * Bump ABI to 32 * fs/nfsd: Enable NFSD_V2 and NFSD_V2_ACL. Re-enable lost NFSv2 kernel support due to upstream backporting of 2f3a4b2ac2f2 ("nfsd: allow disabling NFSv2 at compile time") in 5.10.220. (Closes: #1076864) * netfilter: ipset: Add list flush to cancel_gc linux-signed-i386 (5.10.221+1) bullseye-security; urgency=high . * Sign kernel from linux 5.10.221-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.219 - [x86] tsc: Trust initial offset in architectural TSC-adjust MSRs - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (CVE-2024-36016) - speakup: Fix sizeof() vs ARRAY_SIZE() bug - ring-buffer: Fix a race between readers and resize checks (CVE-2024-38601) - nilfs2: fix unexpected freezing of nilfs_segctor_sync() - nilfs2: fix potential hang in nilfs_detach_log_writer() (CVE-2024-38582) - ALSA: core: Fix NULL module pointer assignment at card init (CVE-2024-38605) - wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class - net: usb: qmi_wwan: add Telit FN920C04 compositions - drm/amd/display: Set color_mgmt_changed to true on unsuspend - ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating - ASoC: dt-bindings: rt5645: add cbj sleeve gpio property - ASoC: rt715: add vendor clear control register - ASoC: da7219-aad: fix usage of device_get_named_child_node() - nvme: find numa distance only if controller has valid numa id - crypto: bcm - Fix pointer arithmetic (CVE-2024-38579) - firmware: raspberrypi: Use correct device for DMA mappings - ecryptfs: Fix buffer size for tag 66 packet (CVE-2024-38578) - nilfs2: fix out-of-range warning - [x86] crypto: ccp - drop platform ifdef checks - [x86] crypto: x86/nh-avx2 - add missing vzeroupper - [x86] crypto: x86/sha256-avx2 - add missing vzeroupper - [s390x] cio: fix tracepoint subchannel type field - jffs2: prevent xattr node from overflowing the eraseblock (CVE-2024-38599) - null_blk: Fix missing mutex_destroy() at module removal - md: fix resync softlockup when bitmap size is less than array size (CVE-2024-38598) - wifi: ath10k: poll service ready message before failing - [x86] boot: Ignore relocations in .notes sections in walk_relocs() too - qed: avoid truncating work queue length - scsi: ufs: qcom: Perform read back after writing reset bit - scsi: ufs-qcom: Fix ufs RST_n spec violation - scsi: ufs: qcom: Perform read back after writing REG_UFS_SYS1CLK_1US - scsi: ufs: ufs-qcom: Fix the Qcom register name for offset 0xD0 - scsi: ufs: ufs-qcom: Clear qunipro_g4_sel for HW version major 5 - scsi: ufs: qcom: Perform read back after writing unipro mode - scsi: ufs: qcom: Perform read back after writing CGC enable - scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV - scsi: ufs: core: Perform read back after disabling interrupts - scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL - irqchip/alpine-msi: Fix off-by-one in allocation error path - ACPI: disable -Wstringop-truncation - gfs2: Fix "ignore unlock failures after withdraw" - cpufreq: Reorganize checks in cpufreq_offline() - cpufreq: Split cpufreq_offline() - cpufreq: Rearrange locking in cpufreq_remove_dev() - cpufreq: exit() callback is optional - net: export inet_lookup_reuseport and inet6_lookup_reuseport - net: remove duplicate reuseport_lookup functions - udp: Avoid call to compute_score on multiple sites - scsi: libsas: Fix the failure of adding phy with zero-address to port - scsi: hpsa: Fix allocation size for Scsi_Host private data - [x86] purgatory: Switch to the position-independent small code model - wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() - wifi: ath10k: populate board data for WCN3990 - tcp: avoid premature drops in tcp_add_backlog() - net: give more chances to rcu in netdev_wait_allrefs_any() - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" (CVE-2024-38607) - wifi: carl9170: add a proper sanity check for endpoints (CVE-2024-38567) - wifi: ar5523: enable proper endpoint verification (CVE-2024-38565) - Revert "sh: Handle calling csum_partial with misaligned data" - [amd64] HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors - scsi: bfa: Ensure the copied buf is NUL terminated (CVE-2024-38560) - scsi: qedf: Ensure the copied buf is NUL terminated (CVE-2024-38559) - wifi: mwl8k: initialize cmd->addr[] properly - usb: aqc111: stop lying about skb->truesize - net: usb: sr9700: stop lying about skb->truesize - net: ipv6: fix wrong start position when receive hop-by-hop fragment - eth: sungem: remove .ndo_poll_controller to avoid deadlocks (CVE-2024-38597) - net: ethernet: cortina: Locking fixes - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (CVE-2024-38596) - net: usb: smsc95xx: stop lying about skb->truesize - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (CVE-2024-38558) - ipv6: sr: add missing seg6_local_exit - ipv6: sr: fix incorrect unregister order - ipv6: sr: fix invalid unregister error path (CVE-2024-38612) - net/mlx5: Discard command completions in internal error (CVE-2024-38555) - drm/amd/display: Fix potential index out of bounds in color transformation function (CVE-2024-38552) - ASoC: soc-acpi: add helper to identify parent driver. - [x86] ASoC: Intel: Disable route checks for Skylake boards - mtd: rawnand: hynix: fixed typo - fbdev: shmobile: fix snprintf truncation - [arm64] drm/meson: vclk: fix calculation of 59.94 fractional rates - [powerpc*] fsl-soc: hide unused const variable - fbdev: sisfb: hide unused variables - media: ngene: Add dvb_ca_en50221_init return value check - media: radio-shark2: Avoid led_names truncations - drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference (CVE-2024-38548) - fbdev: sh7760fb: allow modular build - media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries (CVE-2024-38547) - [arm64] drm/arm/malidp: fix a possible null pointer dereference (CVE-2024-36014) - [arm*] drm: vc4: Fix possible null pointer dereference (CVE-2024-38546) - ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value - drm/bridge: lt9611: Don't log an error when DSI host can't be found - drm/bridge: tc358775: Don't log an error when DSI host can't be found - drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector - drm/mipi-dsi: use correct return type for the DSC functions - [arm64] RDMA/hns: Refactor the hns_roce_buf allocation flow - [arm64] RDMA/hns: Create QP with selected QPN for bank load balance - [arm64] RDMA/hns: Fix incorrect symbol types - [arm64] RDMA/hns: Fix return value in hns_roce_map_mr_sg - [arm64] RDMA/hns: Use complete parentheses in macros - [arm64] RDMA/hns: Modify the print level of CQE error (CVE-2024-38590) - clk: qcom: mmcc-msm8998: fix venus clock issue - [x86] insn: Fix PUSH instruction in x86 instruction decoder opcode map - ext4: avoid excessive credit estimate in ext4_tmpfile() - sunrpc: removed redundant procp check - ext4: simplify calculation of blkoff in ext4_mb_new_blocks_simple - ext4: fix unit mismatch in ext4_mb_new_blocks_simple - ext4: try all groups in ext4_mb_new_blocks_simple - ext4: remove unused parameter from ext4_mb_new_blocks_simple() - ext4: fix potential unnitialized variable - SUNRPC: Fix gss_free_in_token_pages() - RDMA/IPoIB: Fix format truncation compilation errors - net: qrtr: fix null-ptr-deref in qrtr_ns_remove - net: qrtr: ns: Fix module refcnt - netrom: fix possible dead-lock in nr_rt_ioctl() (CVE-2024-38589) - af_packet: do not call packet_read_pending() from tpacket_destruct_skb() - sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level - greybus: lights: check return of get_channel_from_mode (CVE-2024-38637) - f2fs: fix to wait on page writeback in __clone_blkaddrs() - soundwire: cadence: fix invalid PDI offset (CVE-2024-38635) - dmaengine: idma64: Add check for dma_set_max_seg_size - firmware: dmi-id: add a release callback function - serial: max3100: Lock port->lock when calling uart_handle_cts_change() (CVE-2024-38634) - serial: max3100: Update uart_driver_registered on driver removal (CVE-2024-38633) - serial: max3100: Fix bitwise types - greybus: arche-ctrl: move device table to its right location - serial: sc16is7xx: add proper sched.h include for sched_set_fifo() - f2fs: compress: support chksum - f2fs: add compress_mode mount option - f2fs: compress: clean up parameter of __f2fs_cluster_blocks() - f2fs: compress: remove unneeded preallocation - f2fs: introduce FI_COMPRESS_RELEASED instead of using IMMUTABLE bit - f2fs: compress: fix to relocate check condition in f2fs_{release,reserve}_compress_blocks() - f2fs: add cp_error check in f2fs_write_compressed_pages - f2fs: fix to force keeping write barrier for strict fsync mode - f2fs: do not allow partial truncation on pinned file - f2fs: fix typos in comments - f2fs: fix to relocate check condition in f2fs_fallocate() - f2fs: fix to check pinfile flag in f2fs_move_file_range() - iio: pressure: dps310: support negative temperature values - fpga: region: change FPGA indirect article to an - fpga: region: Rename dev to parent for parent device - docs: driver-api: fpga: avoid using UTF-8 chars - fpga: region: Use standard dev_release for class driver - fpga: region: add owner module and take its refcount - usb: gadget: u_audio: Clear uac pointer when freed. - stm class: Fix a double free in stm_register_device() (CVE-2024-38627) - ppdev: Remove usage of the deprecated ida_simple_xx() API - ppdev: Add an error check in register_device (CVE-2024-36015) - extcon: max8997: select IRQ_DOMAIN instead of depending on it - PCI/EDR: Align EDR_PORT_DPC_ENABLE_DSM with PCI Firmware r3.3 - PCI/EDR: Align EDR_PORT_LOCATE_DSM with PCI Firmware r3.3 - f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock - f2fs: fix to release node block count in error path of f2fs_new_node_page() - f2fs: compress: don't allow unaligned truncation on released compress inode - serial: sh-sci: protect invalidating RXDMA on shutdown - libsubcmd: Fix parse-options memory leak - [s390x] ipl: Fix incorrect initialization of len fields in nvme reipl block - [s390x] ipl: Fix incorrect initialization of nvme dump block - Input: ims-pcu - fix printf string overflow - Input: ioc3kbd - convert to platform remove callback returning void - Input: ioc3kbd - add device table - Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation - drm/msm/dpu: Always flush the slave INTF on the CTL - drm/bridge: tc358775: fix support for jeida-18 and jeida-24 - media: stk1160: fix bounds checking in stk1160_copy_video() (CVE-2024-38621) - scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() - media: flexcop-usb: clean up endpoint sanity checks - media: flexcop-usb: fix sanity check of bNumEndpoints - [powerpc*] pseries: Add failure related checks for h_get_mpp and h_get_ppp - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh - media: cec: cec-api: add locking in cec_release() - media: core headers: fix kernel-doc warnings - media: cec: fix a deadlock situation - media: cec: call enable_adap on s_log_addrs - media: cec: abort if the current transmit was canceled - media: cec: correctly pass on reply results - media: cec: use call_op and check for !unregistered - media: cec-adap.c: drop activate_cnt, use state info instead - media: cec: core: avoid recursive cec_claim_log_addrs - media: cec: core: avoid confusing "transmit timed out" message - null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION() - regulator: bd71828: Don't overwrite runtime voltages - [x86] kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y - nfc: nci: Fix uninit-value in nci_rx_work (CVE-2024-38381) - ASoC: tas2552: Add TX path for capturing AUDIO-OUT data - sunrpc: fix NFSACL RPC retry on soft mount - rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL - ipv6: sr: fix memleak in seg6_hmac_init_algo - params: lift param_set_uint_minmax to common code - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CVE-2024-37356)). - openvswitch: Set the skbuff pkt_type for proper pmtud support. - [arm64] asm-bug: Add .align 2 to the end of __BUG_ENTRY - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails - net: fec: avoid lock evasion when reading pps_enable - tls: fix missing memory barrier in tls_init (CVE-2024-36489) - nfc: nci: Fix kcov check in nci_rx_work() - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() - netfilter: nft_payload: restore vlan q-in-q match support - spi: Don't mark message DMA mapped when no transfer in it is - nvmet: fix ns enable/disable possible hang - net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion - dma-buf/sw-sync: don't enable IRQ from sync_print_obj() (CVE-2024-38780) - bpf: Fix potential integer overflow in resolve_btfids - enic: Validate length of nl attributes in enic_set_vf_port (CVE-2024-38659) - net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM - bpf: Allow delete from sockmap/sockhash only if update is allowed (CVE-2024-38662) - net:fec: Add fec_enet_deinit() - netfilter: tproxy: bail out if IP has been disabled on the device (CVE-2024-36270) - kconfig: fix comparison to constant symbols, 'm', 'n' - spi: stm32: Don't warn about spurious interrupts - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound - hwmon: (shtc1) Fix property misspelling - ALSA: timer: Set lower bound of start tick time (CVE-2024-38618) - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (CVE-2024-31076) - media: cec: core: add adap_nb_transmit_canceled() callback - SUNRPC: Fix loop termination condition in gss_free_in_token_pages() (CVE-2024-36288) - [arm*] binder: fix max_thread type inconsistency - mmc: core: Do not force a retune before RPMB switch - io_uring: fail NOP if non-zero op flags is passed in - afs: Don't cross .backup mountpoint from backup volume - nilfs2: fix use-after-free of timer for log writer thread (CVE-2024-38583) - vxlan: Fix regression when dropping packets due to invalid src addresses - [x86] mm: Remove broken vsyscall emulation code from the page fault code - netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (CVE-2024-27019) - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() - media: lgdt3306a: Add a check against null-pointer-def - drm/amdgpu: add error handle to avoid out-of-bounds - ata: pata_legacy: make legacy_exit() work again - ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx - [arm64] tegra: Correct Tegra132 I2C alias - [arm64] dts: qcom: qcs404: fix bluetooth device address - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING - wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU - wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE - wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path - [arm64] dts: hi3798cv200: fix the size of GICR - media: mc: mark the media devnode as registered from the, start - media: mxl5xx: Move xpt structures off stack - media: v4l2-core: hold videodev_lock until dev reg, finishes - mmc: core: Add mmc_gpiod_set_cd_config() function - mmc: sdhci-acpi: Sort DMI quirks alphabetically - mmc: sdhci-acpi: Fix Lenovo Yoga Tablet 2 Pro 1380 sdcard slot not working - mmc: sdhci-acpi: Disable write protect detection on Toshiba WT10-A - fbdev: savage: Handle err return when savagefb_check_var failed - [arm64] KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode - crypto: ecrdsa - Fix module auto-load on add_key - [x86] crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak - net/ipv6: Fix route deleting failure when metric equals 0 - net/9p: fix uninit-value in p9_client_rpc() - [x86] intel_th: pci: Add Meteor Lake-S CPU support - watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin - kdb: Fix buffer overflow during tab-complete - kdb: Use format-strings rather than '\0' injection in kdb_read() - kdb: Fix console handling when editing and tab-completing commands - kdb: Merge identical case statements in kdb_read() - kdb: Use format-specifiers rather than memset() for padding in kdb_read() - net: fix __dst_negative_advice() race - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() - [s390x] ap: Fix crash in AP internal function modify_bitmap() - nfs: fix undefined behavior in nfs_block_bits() - NFS: Fix READ_PLUS when server doesn't support OP_READ_PLUS - scsi: ufs: ufs-qcom: Clear qunipro_g4_sel for HW major version > 5 - f2fs: compress: fix compression chksum - [arm64] RDMA/hns: Use mutex instead of spinlock for ida allocation - [arm64] RDMA/hns: Fix CQ and QP cache affinity https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.220 - SUNRPC: Rename svc_encode_read_payload() - NFSD: Invoke svc_encode_result_payload() in "read" NFSD encoders - NFSD: A semicolon is not needed after a switch statement. - nfsd/nfs3: remove unused macro nfsd3_fhandleres - NFSD: Clean up the show_nf_may macro - NFSD: Remove extra "0x" in tracepoint format specifier - NFSD: Add SPDX header for fs/nfsd/trace.c - nfsd: Fix error return code in nfsd_file_cache_init() - SUNRPC: Add xdr_set_scratch_page() and xdr_reset_scratch_buffer() - SUNRPC: Prepare for xdr_stream-style decoding on the server-side - NFSD: Add common helpers to decode void args and encode void results - NFSD: Add tracepoints in nfsd_dispatch() - NFSD: Add tracepoints in nfsd4_decode/encode_compound() - NFSD: Replace the internals of the READ_BUF() macro - NFSD: Replace READ* macros in nfsd4_decode_access() - NFSD: Replace READ* macros in nfsd4_decode_close() - NFSD: Replace READ* macros in nfsd4_decode_commit() - NFSD: Change the way the expected length of a fattr4 is checked - NFSD: Replace READ* macros that decode the fattr4 size attribute - NFSD: Replace READ* macros that decode the fattr4 acl attribute - NFSD: Replace READ* macros that decode the fattr4 mode attribute - NFSD: Replace READ* macros that decode the fattr4 owner attribute - NFSD: Replace READ* macros that decode the fattr4 owner_group attribute - NFSD: Replace READ* macros that decode the fattr4 time_set attributes - NFSD: Replace READ* macros that decode the fattr4 security label attribute - NFSD: Replace READ* macros that decode the fattr4 umask attribute - NFSD: Replace READ* macros in nfsd4_decode_fattr() - NFSD: Replace READ* macros in nfsd4_decode_create() - NFSD: Replace READ* macros in nfsd4_decode_delegreturn() - NFSD: Replace READ* macros in nfsd4_decode_getattr() - NFSD: Replace READ* macros in nfsd4_decode_link() - NFSD: Relocate nfsd4_decode_opaque() - NFSD: Add helpers to decode a clientid4 and an NFSv4 state owner - NFSD: Add helper for decoding locker4 - NFSD: Replace READ* macros in nfsd4_decode_lock() - NFSD: Replace READ* macros in nfsd4_decode_lockt() - NFSD: Replace READ* macros in nfsd4_decode_locku() - NFSD: Replace READ* macros in nfsd4_decode_lookup() - NFSD: Add helper to decode NFSv4 verifiers - NFSD: Add helper to decode OPEN's createhow4 argument - NFSD: Add helper to decode OPEN's openflag4 argument - NFSD: Replace READ* macros in nfsd4_decode_share_access() - NFSD: Replace READ* macros in nfsd4_decode_share_deny() - NFSD: Add helper to decode OPEN's open_claim4 argument - NFSD: Replace READ* macros in nfsd4_decode_open() - NFSD: Replace READ* macros in nfsd4_decode_open_confirm() - NFSD: Replace READ* macros in nfsd4_decode_open_downgrade() - NFSD: Replace READ* macros in nfsd4_decode_putfh() - NFSD: Replace READ* macros in nfsd4_decode_read() - NFSD: Replace READ* macros in nfsd4_decode_readdir() - NFSD: Replace READ* macros in nfsd4_decode_remove() - NFSD: Replace READ* macros in nfsd4_decode_rename() - NFSD: Replace READ* macros in nfsd4_decode_renew() - NFSD: Replace READ* macros in nfsd4_decode_secinfo() - NFSD: Replace READ* macros in nfsd4_decode_setattr() - NFSD: Replace READ* macros in nfsd4_decode_setclientid() - NFSD: Replace READ* macros in nfsd4_decode_setclientid_confirm() - NFSD: Replace READ* macros in nfsd4_decode_verify() - NFSD: Replace READ* macros in nfsd4_decode_write() - NFSD: Replace READ* macros in nfsd4_decode_release_lockowner() - NFSD: Replace READ* macros in nfsd4_decode_cb_sec() - NFSD: Replace READ* macros in nfsd4_decode_backchannel_ctl() - NFSD: Replace READ* macros in nfsd4_decode_bind_conn_to_session() - NFSD: Add a separate decoder to handle state_protect_ops - NFSD: Add a separate decoder for ssv_sp_parms - NFSD: Add a helper to decode state_protect4_a - NFSD: Add a helper to decode nfs_impl_id4 - NFSD: Add a helper to decode channel_attrs4 - NFSD: Replace READ* macros in nfsd4_decode_create_session() - NFSD: Replace READ* macros in nfsd4_decode_destroy_session() - NFSD: Replace READ* macros in nfsd4_decode_free_stateid() - NFSD: Replace READ* macros in nfsd4_decode_getdeviceinfo() - NFSD: Replace READ* macros in nfsd4_decode_layoutcommit() - NFSD: Replace READ* macros in nfsd4_decode_layoutget() - NFSD: Replace READ* macros in nfsd4_decode_layoutreturn() - NFSD: Replace READ* macros in nfsd4_decode_secinfo_no_name() - NFSD: Replace READ* macros in nfsd4_decode_sequence() - NFSD: Replace READ* macros in nfsd4_decode_test_stateid() - NFSD: Replace READ* macros in nfsd4_decode_destroy_clientid() - NFSD: Replace READ* macros in nfsd4_decode_reclaim_complete() - NFSD: Replace READ* macros in nfsd4_decode_fallocate() - NFSD: Replace READ* macros in nfsd4_decode_nl4_server() - NFSD: Replace READ* macros in nfsd4_decode_copy() - NFSD: Replace READ* macros in nfsd4_decode_copy_notify() - NFSD: Replace READ* macros in nfsd4_decode_offload_status() - NFSD: Replace READ* macros in nfsd4_decode_seek() - NFSD: Replace READ* macros in nfsd4_decode_clone() - NFSD: Replace READ* macros in nfsd4_decode_xattr_name() - NFSD: Replace READ* macros in nfsd4_decode_setxattr() - NFSD: Replace READ* macros in nfsd4_decode_listxattrs() - NFSD: Make nfsd4_ops::opnum a u32 - NFSD: Replace READ* macros in nfsd4_decode_compound() - NFSD: Remove macros that are no longer used - nfsd: only call inode_query_iversion in the I_VERSION case - nfsd: simplify nfsd4_change_info - nfsd: minor nfsd4_change_attribute cleanup - nfsd4: don't query change attribute in v2/v3 case - Revert "nfsd4: support change_attr_type attribute" - nfsd: add a new EXPORT_OP_NOWCC flag to struct export_operations - nfsd: allow filesystems to opt out of subtree checking - nfsd: close cached files prior to a REMOVE or RENAME that would replace target - exportfs: Add a function to return the raw output from fh_to_dentry() - nfsd: Fix up nfsd to ensure that timeout errors don't result in ESTALE - nfsd: Set PF_LOCAL_THROTTLE on local filesystems only - nfsd: Record NFSv4 pre/post-op attributes as non-atomic - exec: Don't open code get_close_on_exec - exec: Move unshare_files to fix posix file locking during exec - exec: Simplify unshare_files - exec: Remove reset_files_struct - kcmp: In kcmp_epoll_target use fget_task - bpf: In bpf_task_fd_query use fget_task - proc/fd: In proc_fd_link use fget_task - Revert "fget: clarify and improve __fget_files() implementation" - file: Rename __fcheck_files to files_lookup_fd_raw - file: Factor files_lookup_fd_locked out of fcheck_files - file: Replace fcheck_files with files_lookup_fd_rcu - file: Rename fcheck lookup_fd_rcu - file: Implement task_lookup_fd_rcu - proc/fd: In tid_fd_mode use task_lookup_fd_rcu - kcmp: In get_file_raw_ptr use task_lookup_fd_rcu - file: Implement task_lookup_next_fd_rcu - proc/fd: In proc_readfd_common use task_lookup_next_fd_rcu - proc/fd: In fdinfo seq_show don't use get_files_struct - file: Merge __fd_install into fd_install - file: In f_dupfd read RLIMIT_NOFILE once. - file: Merge __alloc_fd into alloc_fd - file: Rename __close_fd to close_fd and remove the files parameter - file: Replace ksys_close with close_fd - inotify: Increase default inotify.max_user_watches limit to 1048576 - fs/lockd: convert comma to semicolon - NFSD: Fix sparse warning in nfssvc.c - NFSD: Restore NFSv4 decoding's SAVEMEM functionality - SUNRPC: Make trace_svc_process() display the RPC procedure symbolically - SUNRPC: Display RPC procedure names instead of proc numbers - SUNRPC: Move definition of XDR_UNIT - NFSD: Update GETATTR3args decoder to use struct xdr_stream - NFSD: Update ACCESS3arg decoder to use struct xdr_stream - NFSD: Update READ3arg decoder to use struct xdr_stream - NFSD: Update WRITE3arg decoder to use struct xdr_stream - NFSD: Update READLINK3arg decoder to use struct xdr_stream - NFSD: Fix returned READDIR offset cookie - NFSD: Add helper to set up the pages where the dirlist is encoded - NFSD: Update READDIR3args decoders to use struct xdr_stream - NFSD: Update COMMIT3arg decoder to use struct xdr_stream - NFSD: Update the NFSv3 DIROPargs decoder to use struct xdr_stream - NFSD: Update the RENAME3args decoder to use struct xdr_stream - NFSD: Update the LINK3args decoder to use struct xdr_stream - NFSD: Update the SETATTR3args decoder to use struct xdr_stream - NFSD: Update the CREATE3args decoder to use struct xdr_stream - NFSD: Update the MKDIR3args decoder to use struct xdr_stream - NFSD: Update the SYMLINK3args decoder to use struct xdr_stream - NFSD: Update the MKNOD3args decoder to use struct xdr_stream - NFSD: Update the NFSv2 GETATTR argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 READ argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 WRITE argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 READLINK argument decoder to use struct xdr_stream - NFSD: Add helper to set up the pages where the dirlist is encoded - NFSD: Update the NFSv2 READDIR argument decoder to use struct xdr_stream - NFSD: Update NFSv2 diropargs decoding to use struct xdr_stream - NFSD: Update the NFSv2 RENAME argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 LINK argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 SETATTR argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 CREATE argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 SYMLINK argument decoder to use struct xdr_stream - NFSD: Remove argument length checking in nfsd_dispatch() - NFSD: Update the NFSv2 GETACL argument decoder to use struct xdr_stream - NFSD: Add an xdr_stream-based decoder for NFSv2/3 ACLs - NFSD: Update the NFSv2 SETACL argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 ACL GETATTR argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 ACL ACCESS argument decoder to use struct xdr_stream - NFSD: Clean up after updating NFSv2 ACL decoders - NFSD: Update the NFSv3 GETACL argument decoder to use struct xdr_stream - NFSD: Update the NFSv2 SETACL argument decoder to use struct xdr_stream - NFSD: Clean up after updating NFSv3 ACL decoders - nfsd: remove unused stats counters - nfsd: protect concurrent access to nfsd stats counters - nfsd: report per-export stats - nfsd4: simplify process_lookup1 - nfsd: simplify process_lock - nfsd: simplify nfsd_renew - nfsd: rename lookup_clientid->set_client - nfsd: refactor set_client - nfsd: find_cpntf_state cleanup - nfsd: remove unused set_client argument - nfsd: simplify nfsd4_check_open_reclaim - nfsd: cstate->session->se_client -> cstate->clp - NFSv4_2: SSC helper should use its own config. - nfs: use change attribute for NFS re-exports - nfsd: skip some unnecessary stats in the v4 case - inotify, memcg: account inotify instances to kmemcg - module: unexport find_module and module_mutex - module: use RCU to synchronize find_module - kallsyms: refactor {,module_}kallsyms_on_each_symbol - kallsyms: only build {,module_}kallsyms_on_each_symbol when required - fs: add file and path permissions helpers - namei: introduce struct renamedata - NFSD: Extract the svcxdr_init_encode() helper - NFSD: Update the GETATTR3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 ACCESS3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 LOOKUP3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 wccstat result encoder to use struct xdr_stream - NFSD: Update the NFSv3 READLINK3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 READ3res encode to use struct xdr_stream - NFSD: Update the NFSv3 WRITE3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 CREATE family of encoders to use struct xdr_stream - NFSD: Update the NFSv3 RENAMEv3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 LINK3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 FSSTAT3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 FSINFO3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 PATHCONF3res encoder to use struct xdr_stream - NFSD: Update the NFSv3 COMMIT3res encoder to use struct xdr_stream - NFSD: Add a helper that encodes NFSv3 directory offset cookies - NFSD: Count bytes instead of pages in the NFSv3 READDIR encoder - NFSD: Update the NFSv3 READDIR3res encoder to use struct xdr_stream - NFSD: Update NFSv3 READDIR entry encoders to use struct xdr_stream - NFSD: Remove unused NFSv3 directory entry encoders - NFSD: Reduce svc_rqst::rq_pages churn during READDIR operations - NFSD: Update the NFSv2 stat encoder to use struct xdr_stream - NFSD: Update the NFSv2 attrstat encoder to use struct xdr_stream - NFSD: Update the NFSv2 diropres encoder to use struct xdr_stream - NFSD: Update the NFSv2 READLINK result encoder to use struct xdr_stream - NFSD: Update the NFSv2 READ result encoder to use struct xdr_stream - NFSD: Update the NFSv2 STATFS result encoder to use struct xdr_stream - NFSD: Add a helper that encodes NFSv3 directory offset cookies - NFSD: Count bytes instead of pages in the NFSv2 READDIR encoder - NFSD: Update the NFSv2 READDIR result encoder to use struct xdr_stream - NFSD: Update the NFSv2 READDIR entry encoder to use struct xdr_stream - NFSD: Remove unused NFSv2 directory entry encoders - NFSD: Add an xdr_stream-based encoder for NFSv2/3 ACLs - NFSD: Update the NFSv2 GETACL result encoder to use struct xdr_stream - NFSD: Update the NFSv2 SETACL result encoder to use struct xdr_stream - NFSD: Update the NFSv2 ACL GETATTR result encoder to use struct xdr_stream - NFSD: Update the NFSv2 ACL ACCESS result encoder to use struct xdr_stream - NFSD: Clean up after updating NFSv2 ACL encoders - NFSD: Update the NFSv3 GETACL result encoder to use struct xdr_stream - NFSD: Update the NFSv3 SETACL result encoder to use struct xdr_stream - NFSD: Clean up after updating NFSv3 ACL encoders - NFSD: Add a tracepoint to record directory entry encoding - NFSD: Clean up NFSDDBG_FACILITY macro - nfsd: helper for laundromat expiry calculations - nfsd: Log client tracking type log message as info instead of warning - nfsd: Fix typo "accesible" - nfsd: COPY with length 0 should copy to end of file - nfsd: don't ignore high bits of copy count - nfsd: report client confirmation status in "info" file - SUNRPC: Export svc_xprt_received() - UAPI: nfsfh.h: Replace one-element array with flexible-array member - NFSD: Use DEFINE_SPINLOCK() for spinlock - fsnotify: allow fsnotify_{peek,remove}_first_event with empty queue - Revert "fanotify: limit number of event merge attempts" - fanotify: reduce event objectid to 29-bit hash - fanotify: mix event info and pid into merge key hash - fsnotify: use hash table for faster events merge - fanotify: limit number of event merge attempts - fanotify: configurable limits via sysfs - fanotify: support limited functionality for unprivileged users - fanotify_user: use upper_32_bits() to verify mask - nfsd: remove unused function - nfsd: removed unused argument in nfsd_startup_generic() - nfsd: hash nfs4_files by inode number - nfsd: track filehandle aliasing in nfs4_files - nfsd: reshuffle some code - nfsd: grant read delegations to clients holding writes - nfsd: Fix fall-through warnings for Clang - NFSv4.2: Remove ifdef CONFIG_NFSD from NFSv4.2 client SSC code. - NFS: fix nfs_fetch_iversion() - fanotify: fix permission model of unprivileged group - NFSD: Add an RPC authflavor tracepoint display helper - NFSD: Add nfsd_clid_cred_mismatch tracepoint - NFSD: Add nfsd_clid_verf_mismatch tracepoint - NFSD: Remove trace_nfsd_clid_inuse_err - NFSD: Add nfsd_clid_confirmed tracepoint - NFSD: Add nfsd_clid_reclaim_complete tracepoint - NFSD: Add nfsd_clid_destroyed tracepoint - NFSD: Add a couple more nfsd_clid_expired call sites - NFSD: Add tracepoints for SETCLIENTID edge cases - NFSD: Add tracepoints for EXCHANGEID edge cases - NFSD: Constify @fh argument of knfsd_fh_hash() - NFSD: Capture every CB state transition - NFSD: Drop TRACE_DEFINE_ENUM for NFSD4_CB_ macros - NFSD: Add cb_lost tracepoint - NFSD: Adjust cb_shutdown tracepoint - NFSD: Enhance the nfsd_cb_setup tracepoint - NFSD: Add an nfsd_cb_lm_notify tracepoint - NFSD: Add an nfsd_cb_offload tracepoint - NFSD: Replace the nfsd_deleg_break tracepoint - NFSD: Add an nfsd_cb_probe tracepoint - NFSD: Remove the nfsd_cb_work and nfsd_cb_done tracepoints - NFSD: Update nfsd_cb_args tracepoint - nfsd: Prevent truncation of an unlinked inode from blocking access to its directory - nfsd: move some commit_metadata()s outside the inode lock - NFSD add vfs_fsync after async copy is done - NFSD: delay unmount source's export after inter-server copy completed. - nfsd: move fsnotify on client creation outside spinlock - nfsd4: Expose the callback address and state of each NFS4 client - nfsd: fix kernel test robot warning in SSC code - NFSD: Fix error return code in nfsd4_interssc_connect() - nfsd: rpc_peeraddr2str needs rcu lock - lockd: Remove stale comments - lockd: Create a simplified .vs_dispatch method for NLM requests - lockd: Common NLM XDR helpers - lockd: Update the NLMv1 void argument decoder to use struct xdr_stream - lockd: Update the NLMv1 TEST arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 LOCK arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 CANCEL arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 UNLOCK arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 nlm_res arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 SM_NOTIFY arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 SHARE arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 FREE_ALL arguments decoder to use struct xdr_stream - lockd: Update the NLMv1 void results encoder to use struct xdr_stream - lockd: Update the NLMv1 TEST results encoder to use struct xdr_stream - lockd: Update the NLMv1 nlm_res results encoder to use struct xdr_stream - lockd: Update the NLMv1 SHARE results encoder to use struct xdr_stream - lockd: Update the NLMv4 void arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 TEST arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 LOCK arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 CANCEL arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 UNLOCK arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 nlm_res arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 SM_NOTIFY arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 SHARE arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 FREE_ALL arguments decoder to use struct xdr_stream - lockd: Update the NLMv4 void results encoder to use struct xdr_stream - lockd: Update the NLMv4 TEST results encoder to use struct xdr_stream - lockd: Update the NLMv4 nlm_res results encoder to use struct xdr_stream - lockd: Update the NLMv4 SHARE results encoder to use struct xdr_stream - nfsd: remove redundant assignment to pointer 'this' - NFSD: Prevent a possible oops in the nfs_dirent() tracepoint - nfsd: fix NULL dereference in nfs3svc_encode_getaclres - kernel/pid.c: remove static qualifier from pidfd_create() - kernel/pid.c: implement additional checks upon pidfd_create() parameters - fanotify: minor cosmetic adjustments to fid labels - fanotify: introduce a generic info record copying helper - fanotify: add pidfd support to the fanotify API - fsnotify: replace igrab() with ihold() on attach connector - fsnotify: count s_fsnotify_inode_refs for attached connectors - fsnotify: count all objects with attached connectors - fsnotify: optimize the case of no marks of any type - NFSD: Clean up splice actor - SUNRPC: Add svc_rqst_replace_page() API - NFSD: Batch release pages during splice read - NFSD: remove vanity comments - sysctl: introduce new proc handler proc_dobool - lockd: change the proc_handler for nsm_use_hostnames - nlm: minor nlm_lookup_file argument change - nlm: minor refactoring - lockd: update nlm_lookup_file reexport comment - Keep read and write fds with each nlm_file - nfs: don't atempt blocking locks on nfs reexports - lockd: don't attempt blocking locks on nfs reexports - nfs: don't allow reexport reclaims - SUNRPC: Add svc_rqst::rq_auth_stat - SUNRPC: Set rq_auth_stat in the pg_authenticate() callout - SUNRPC: Eliminate the RQ_AUTHERR flag - NFS: Add a private local dispatcher for NFSv4 callback operations - NFS: Remove unused callback void decoder - fsnotify: fix sb_connectors leak - NLM: Fix svcxdr_encode_owner() - nfsd: Fix a warning for nfsd_file_close_inode - fsnotify: pass data_type to fsnotify_name() - fsnotify: pass dentry instead of inode data - fsnotify: clarify contract for create event hooks - fsnotify: Don't insert unmergeable events in hashtable - fanotify: Fold event size calculation to its own function - fanotify: Split fsid check from other fid mode checks - inotify: Don't force FS_IN_IGNORED - fsnotify: Add helper to detect overflow_event - fsnotify: Add wrapper around fsnotify_add_event - fsnotify: Retrieve super block from the data field - fsnotify: Protect fsnotify_handle_inode_event from no-inode events - fsnotify: Pass group argument to free_event - fanotify: Support null inode event in fanotify_dfid_inode - fanotify: Allow file handle encoding for unhashed events - fanotify: Encode empty file handle when no inode is provided - fanotify: Require fid_mode for any non-fd event - fsnotify: Support FS_ERROR event type - fanotify: Reserve UAPI bits for FAN_FS_ERROR - fanotify: Pre-allocate pool of error events - fanotify: Support enqueueing of error events - fanotify: Support merging of error events - fanotify: Wrap object_fh inline space in a creator macro - fanotify: Add helpers to decide whether to report FID/DFID - fanotify: WARN_ON against too large file handles - fanotify: Report fid info for file related file system errors - fanotify: Emit generic error info for error event - fanotify: Allow users to request FAN_FS_ERROR events - SUNRPC: Trace calls to .rpc_call_done - NFSD: Optimize DRC bucket pruning - NFSD: move filehandle format declarations out of "uapi". - NFSD: drop support for ancient filehandles - NFSD: simplify struct nfsfh - NFSD: Initialize pointer ni with NULL and not plain integer 0 - NFSD: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() - SUNRPC: Replace the "__be32 *p" parameter to .pc_decode - SUNRPC: Change return value type of .pc_decode - NFSD: Save location of NFSv4 COMPOUND status - SUNRPC: Replace the "__be32 *p" parameter to .pc_encode - SUNRPC: Change return value type of .pc_encode - nfsd: update create verifier comment - NFSD:fix boolreturn.cocci warning - nfsd4: remove obselete comment - NFSD: Fix exposure in nfsd4_decode_bitmap() - NFSD: Fix READDIR buffer overflow - fsnotify: clarify object type argument - fsnotify: separate mark iterator type from object type enum - fanotify: introduce group flag FAN_REPORT_TARGET_FID - fsnotify: generate FS_RENAME event with rich information - fanotify: use macros to get the offset to fanotify_info buffer - fanotify: use helpers to parcel fanotify_info buffer - fanotify: support secondary dir fh and name in fanotify_info - fanotify: record old and new parent and name in FAN_RENAME event - fanotify: record either old name new name or both for FAN_RENAME - fanotify: report old and/or new parent+name in FAN_RENAME event - fanotify: wire up FAN_RENAME event - exit: Implement kthread_exit - exit: Rename module_put_and_exit to module_put_and_kthread_exit - NFSD: Fix sparse warning - NFSD: handle errors better in write_ports_addfd() - SUNRPC: change svc_get() to return the svc. - SUNRPC/NFSD: clean up get/put functions. - SUNRPC: stop using ->sv_nrthreads as a refcount - nfsd: make nfsd_stats.th_cnt atomic_t - SUNRPC: use sv_lock to protect updates to sv_nrthreads. - NFSD: narrow nfsd_mutex protection in nfsd thread - NFSD: Make it possible to use svc_set_num_threads_sync - SUNRPC: discard svo_setup and rename svc_set_num_threads_sync() - NFSD: simplify locking for network notifier. - lockd: introduce nlmsvc_serv - lockd: simplify management of network status notifiers - lockd: move lockd_start_svc() call into lockd_create_svc() - lockd: move svc_exit_thread() into the thread - lockd: introduce lockd_put() - lockd: rename lockd_create_svc() to lockd_get() - SUNRPC: move the pool_map definitions (back) into svc.c - SUNRPC: always treat sv_nrpools==1 as "not pooled" - lockd: use svc_set_num_threads() for thread start and stop - NFS: switch the callback service back to non-pooled. - NFSD: Remove be32_to_cpu() from DRC hash function - NFSD: Fix inconsistent indenting - NFSD: simplify per-net file cache management - NFSD: Combine XDR error tracepoints - nfsd: improve stateid access bitmask documentation - NFSD: De-duplicate nfsd4_decode_bitmap4() - nfs: block notification on fs with its own ->lock - nfsd4: add refcount for nfsd4_blocked_lock - NFSD: Fix zero-length NFSv3 WRITEs - nfsd: map EBADF - nfsd: Add errno mapping for EREMOTEIO - nfsd: Retry once in nfsd_open on an -EOPENSTALE return - NFSD: Clean up nfsd_vfs_write() - NFSD: De-duplicate net_generic(SVC_NET(rqstp), nfsd_net_id) - NFSD: De-duplicate net_generic(nf->nf_net, nfsd_net_id) - nfsd: Add a tracepoint for errors in nfsd4_clone_file_range() - NFSD: Write verifier might go backwards - NFSD: Clean up the nfsd_net::nfssvc_boot field - NFSD: Rename boot verifier functions - NFSD: Trace boot verifier resets - Revert "nfsd: skip some unnecessary stats in the v4 case" - NFSD: Move fill_pre_wcc() and fill_post_wcc() - nfsd: fix crash on COPY_NOTIFY with special stateid - fanotify: remove variable set but not used - lockd: fix server crash on reboot of client holding lock - lockd: fix failure to cleanup client locks - NFSD: Fix the behavior of READ near OFFSET_MAX - NFSD: Fix ia_size underflow - NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes - NFSD: COMMIT operations must not return NFS?ERR_INVAL - NFSD: Deprecate NFS_OFFSET_MAX - nfsd: Add support for the birth time attribute - NFSD: De-duplicate hash bucket indexing - NFSD: Skip extra computation for RC_NOCACHE case - NFSD: Streamline the rare "found" case - SUNRPC: Remove the .svo_enqueue_xprt method - SUNRPC: Merge svc_do_enqueue_xprt() into svc_enqueue_xprt() - SUNRPC: Remove svo_shutdown method - SUNRPC: Rename svc_create_xprt() - SUNRPC: Rename svc_close_xprt() - SUNRPC: Remove svc_shutdown_net() - NFSD: Remove svc_serv_ops::svo_module - NFSD: Move svc_serv_ops::svo_function into struct svc_serv - NFSD: Remove CONFIG_NFSD_V3 - NFSD: Clean up _lm_ operation names - nfsd: fix using the correct variable for sizeof() - fsnotify: fix merge with parent's ignored mask - fsnotify: optimize FS_MODIFY events with no ignored masks - fsnotify: remove redundant parameter judgment - SUNRPC: Return true/false (not 1/0) from bool functions - nfsd: Fix a write performance regression - nfsd: Clean up nfsd_file_put() - fanotify: do not allow setting dirent events in mask of non-dir - fs/lock: documentation cleanup. Replace inode->i_lock with flc_lock. - inotify: move control flags from mask to mark flags - fsnotify: pass flags argument to fsnotify_alloc_group() - fsnotify: make allow_dups a property of the group - fsnotify: create helpers for group mark_mutex lock - inotify: use fsnotify group lock helpers - nfsd: use fsnotify group lock helpers - dnotify: use fsnotify group lock helpers - fsnotify: allow adding an inode mark without pinning inode - fanotify: create helper fanotify_mark_user_flags() - fanotify: factor out helper fanotify_mark_update_flags() - fanotify: implement "evictable" inode marks - fanotify: use fsnotify group lock helpers - fanotify: enable "evictable" inode marks - fsnotify: introduce mark type iterator - fsnotify: consistent behavior for parent not watching children - fanotify: fix incorrect fmode_t casts - NFSD: Clean up nfsd_splice_actor() - NFSD: add courteous server support for thread with only delegation - NFSD: add support for share reservation conflict to courteous server - NFSD: move create/destroy of laundry_wq to init_nfsd and exit_nfsd - fs/lock: add helper locks_owner_has_blockers to check for blockers - fs/lock: add 2 callbacks to lock_manager_operations to resolve conflict - NFSD: add support for lock conflict to courteous server - NFSD: Show state of courtesy client in client info - NFSD: Clean up nfsd3_proc_create() - NFSD: Avoid calling fh_drop_write() twice in do_nfsd_create() - NFSD: Refactor nfsd_create_setattr() - NFSD: Refactor NFSv3 CREATE - NFSD: Refactor NFSv4 OPEN(CREATE) - NFSD: Remove do_nfsd_create() - NFSD: Clean up nfsd_open_verified() - NFSD: Instantiate a struct file when creating a regular NFSv4 file - NFSD: Remove dprintk call sites from tail of nfsd4_open() - NFSD: Fix whitespace - NFSD: Move documenting comment for nfsd4_process_open2() - NFSD: Trace filecache opens - NFSD: Clean up the show_nf_flags() macro - SUNRPC: Use RMW bitops in single-threaded hot paths - nfsd: Unregister the cld notifier when laundry_wq create failed - nfsd: Fix null-ptr-deref in nfsd_fill_super() - nfsd: destroy percpu stats counters after reply cache shutdown - NFSD: Modernize nfsd4_release_lockowner() - NFSD: Add documenting comment for nfsd4_release_lockowner() - NFSD: nfsd_file_put() can sleep - NFSD: Fix potential use-after-free in nfsd_file_put() - SUNRPC: Optimize xdr_reserve_space() - fanotify: refine the validation checks on non-dir inode mask - NFS: restore module put when manager exits. - NFSD: Decode NFSv4 birth time attribute - lockd: set fl_owner when unlocking files - lockd: fix nlm_close_files - fs: inotify: Fix typo in inotify comment - fanotify: prepare for setting event flags in ignore mask - fanotify: cleanups for fanotify_mark() input validations - fanotify: introduce FAN_MARK_IGNORE - fsnotify: Fix comment typo - nfsd: eliminate the NFSD_FILE_BREAK_* flags - SUNRPC: Fix xdr_encode_bool() - NLM: Defend against file_lock changes after vfs_test_lock() - NFSD: Fix space and spelling mistake - nfsd: remove redundant assignment to variable len - NFSD: Demote a WARN to a pr_warn() - NFSD: Report filecache LRU size - NFSD: Report count of calls to nfsd_file_acquire() - NFSD: Report count of freed filecache items - NFSD: Report average age of filecache items - NFSD: Add nfsd_file_lru_dispose_list() helper - NFSD: Refactor nfsd_file_gc() - NFSD: Refactor nfsd_file_lru_scan() - NFSD: Report the number of items evicted by the LRU walk - NFSD: Record number of flush calls - NFSD: Zero counters when the filecache is re-initialized - NFSD: Hook up the filecache stat file - NFSD: WARN when freeing an item still linked via nf_lru - NFSD: Trace filecache LRU activity - NFSD: Leave open files out of the filecache LRU - NFSD: Fix the filecache LRU shrinker - NFSD: Never call nfsd_file_gc() in foreground paths - NFSD: No longer record nf_hashval in the trace log - NFSD: Remove lockdep assertion from unhash_and_release_locked() - NFSD: nfsd_file_unhash can compute hashval from nf->nf_inode - NFSD: Refactor __nfsd_file_close_inode() - NFSD: nfsd_file_hash_remove can compute hashval - NFSD: Remove nfsd_file::nf_hashval - NFSD: Replace the "init once" mechanism - NFSD: Set up an rhashtable for the filecache - NFSD: Convert the filecache to use rhashtable - NFSD: Clean up unused code after rhashtable conversion - NFSD: Separate tracepoints for acquire and create - NFSD: Move nfsd_file_trace_alloc() tracepoint - NFSD: NFSv4 CLOSE should release an nfsd_file immediately - NFSD: Ensure nf_inode is never dereferenced - NFSD: refactoring v4 specific code to a helper in nfs4state.c - NFSD: keep track of the number of v4 clients in the system - NFSD: limit the number of v4 clients to 1024 per 1GB of system memory - nfsd: silence extraneous printk on nfsd.ko insertion - NFSD: Optimize nfsd4_encode_operation() - NFSD: Optimize nfsd4_encode_fattr() - NFSD: Clean up SPLICE_OK in nfsd4_encode_read() - NFSD: Add an nfsd4_read::rd_eof field - NFSD: Optimize nfsd4_encode_readv() - NFSD: Simplify starting_len - NFSD: Use xdr_pad_size() - NFSD: Clean up nfsd4_encode_readlink() - NFSD: Fix strncpy() fortify warning - NFSD: nfserrno(-ENOMEM) is nfserr_jukebox - NFSD: Shrink size of struct nfsd4_copy_notify - NFSD: Shrink size of struct nfsd4_copy - NFSD: Reorder the fields in struct nfsd4_op - NFSD: Make nfs4_put_copy() static - NFSD: Replace boolean fields in struct nfsd4_copy - NFSD: Refactor nfsd4_cleanup_inter_ssc() (1/2) - NFSD: Refactor nfsd4_cleanup_inter_ssc() (2/2) - NFSD: Refactor nfsd4_do_copy() - NFSD: Remove kmalloc from nfsd4_do_async_copy() - NFSD: Add nfsd4_send_cb_offload() - NFSD: Move copy offload callback arguments into a separate structure - NFSD: drop fh argument from alloc_init_deleg - NFSD: verify the opened dentry after setting a delegation - NFSD: introduce struct nfsd_attrs - NFSD: set attributes when creating symlinks - NFSD: add security label to struct nfsd_attrs - NFSD: add posix ACLs to struct nfsd_attrs - NFSD: change nfsd_create()/nfsd_symlink() to unlock directory before returning. - NFSD: always drop directory lock in nfsd_unlink() - NFSD: only call fh_unlock() once in nfsd_link() - NFSD: reduce locking in nfsd_lookup() - NFSD: use explicit lock/unlock for directory ops - NFSD: use (un)lock_inode instead of fh_(un)lock for file operations - NFSD: discard fh_locked flag and fh_lock/fh_unlock - lockd: detect and reject lock arguments that overflow - NFSD: fix regression with setting ACLs. - nfsd_splice_actor(): handle compound pages - NFSD: move from strlcpy with unused retval to strscpy - lockd: move from strlcpy with unused retval to strscpy - NFSD enforce filehandle check for source file in COPY - NFSD: remove redundant variable status - nfsd: Avoid some useless tests - nfsd: Propagate some error code returned by memdup_user() - NFSD: Increase NFSD_MAX_OPS_PER_COMPOUND - NFSD: Protect against send buffer overflow in NFSv2 READDIR (CVE-2022-43945) - NFSD: Protect against send buffer overflow in NFSv3 READDIR (CVE-2022-43945) - NFSD: Protect against send buffer overflow in NFSv2 READ (CVE-2022-43945) - NFSD: Protect against send buffer overflow in NFSv3 READ (CVE-2022-43945) - NFSD: drop fname and flen args from nfsd_create_locked() - NFSD: Fix handling of oversized NFSv4 COMPOUND requests - nfsd: clean up mounted_on_fileid handling - nfsd: remove nfsd4_prepare_cb_recall() declaration - NFSD: Add tracepoints to report NFSv4 callback completions - NFSD: Add a mechanism to wait for a DELEGRETURN - NFSD: Refactor nfsd_setattr() - NFSD: Make nfsd4_setattr() wait before returning NFS4ERR_DELAY - NFSD: Make nfsd4_rename() wait before returning NFS4ERR_DELAY - NFSD: Make nfsd4_remove() wait before returning NFS4ERR_DELAY - NFSD: keep track of the number of courtesy clients in the system - NFSD: add shrinker to reap courtesy clients on low memory condition - SUNRPC: Parametrize how much of argsize should be zeroed - NFSD: Reduce amount of struct nfsd4_compoundargs that needs clearing - NFSD: Refactor common code out of dirlist helpers - NFSD: Use xdr_inline_decode() to decode NFSv3 symlinks - NFSD: Clean up WRITE arg decoders - NFSD: Clean up nfs4svc_encode_compoundres() - NFSD: Remove "inline" directives on op_rsize_bop helpers - NFSD: Remove unused nfsd4_compoundargs::cachetype field - NFSD: Pack struct nfsd4_compoundres - nfsd: use DEFINE_PROC_SHOW_ATTRIBUTE to define nfsd_proc_ops - nfsd: use DEFINE_SHOW_ATTRIBUTE to define export_features_fops and supported_enctypes_fops - nfsd: use DEFINE_SHOW_ATTRIBUTE to define client_info_fops - nfsd: use DEFINE_SHOW_ATTRIBUTE to define nfsd_reply_cache_stats_fops - nfsd: use DEFINE_SHOW_ATTRIBUTE to define nfsd_file_cache_stats_fops - NFSD: Rename the fields in copy_stateid_t - NFSD: Cap rsize_bop result based on send buffer size - nfsd: only fill out return pointer on success in nfsd4_lookup_stateid - nfsd: fix comments about spinlock handling with delegations - nfsd: make nfsd4_run_cb a bool return function - nfsd: extra checks when freeing delegation stateids - fs/notify: constify path - fsnotify: remove unused declaration - fanotify: Remove obsoleted fanotify_event_has_path() - nfsd: fix nfsd_file_unhash_and_dispose - nfsd: rework hashtable handling in nfsd_do_file_acquire - NFSD: unregister shrinker when nfsd_init_net() fails - nfsd: fix net-namespace logic in __nfsd_file_cache_purge - nfsd: fix use-after-free in nfsd_file_do_acquire tracepoint - nfsd: put the export reference in nfsd4_verify_deleg_dentry - NFSD: Fix reads with a non-zero offset that don't end on a page boundary - filelock: add a new locks_inode_context accessor function - lockd: use locks_inode_context helper - nfsd: use locks_inode_context helper - NFSD: Simplify READ_PLUS - NFSD: Remove redundant assignment to variable host_err - NFSD: Finish converting the NFSv2 GETACL result encoder - NFSD: Finish converting the NFSv3 GETACL result encoder - nfsd: ignore requests to disable unsupported versions - nfsd: move nfserrno() to vfs.c - nfsd: allow disabling NFSv2 at compile time - exportfs: use pr_debug for unreachable debug statements - NFSD: Pass the target nfsd_file to nfsd_commit() - NFSD: Revert "NFSD: NFSv4 CLOSE should release an nfsd_file immediately" - NFSD: Add an NFSD_FILE_GC flag to enable nfsd_file garbage collection - NFSD: Flesh out a documenting comment for filecache.c - NFSD: Clean up nfs4_preprocess_stateid_op() call sites - NFSD: Trace stateids returned via DELEGRETURN - NFSD: Trace delegation revocations - NFSD: Use const pointers as parameters to fh_ helpers - NFSD: Update file_hashtbl() helpers - NFSD: Clean up nfsd4_init_file() - NFSD: Add a nfsd4_file_hash_remove() helper - NFSD: Clean up find_or_add_file() - NFSD: Refactor find_file() - NFSD: Use rhashtable for managing nfs4_file objects - NFSD: Fix licensing header in filecache.c - nfsd: remove the pages_flushed statistic from filecache - nfsd: reorganize filecache.c - nfsd: fix up the filecache laundrette scheduling - NFSD: Add an nfsd_file_fsync tracepoint - lockd: set other missing fields when unlocking files - nfsd: return error if nfs4_setacl fails - NFSD: Use struct_size() helper in alloc_session() - lockd: set missing fl_flags field when retrieving args - lockd: ensure we use the correct file descriptor when unlocking - lockd: fix file selection in nlmsvc_cancel_blocked - NFSD: pass range end to vfs_fsync_range() instead of count - NFSD: refactoring courtesy_client_reaper to a generic low memory shrinker - NFSD: add support for sending CB_RECALL_ANY - NFSD: add delegation reaper to react to low memory condition - NFSD: Use only RQ_DROPME to signal the need to drop a reply - NFSD: Avoid clashing function prototypes - nfsd: rework refcounting in filecache - nfsd: fix handling of cached open files in nfsd4_open codepath - Revert "SUNRPC: Use RMW bitops in single-threaded hot paths" - NFSD: Use set_bit(RQ_DROPME) - NFSD: fix use-after-free in nfsd4_ssc_setup_dul() - NFSD: register/unregister of nfsd-client shrinker at nfsd startup/shutdown time - NFSD: replace delayed_work with work_struct for nfsd_client_shrinker - nfsd: don't free files unconditionally in __nfsd_file_cache_purge - nfsd: don't destroy global nfs4_file table in per-net shutdown - NFSD: enhance inter-server copy cleanup - nfsd: allow nfsd_file_get to sanely handle a NULL pointer - nfsd: clean up potential nfsd_file refcount leaks in COPY codepath - NFSD: fix leaked reference count of nfsd4_ssc_umount_item - nfsd: don't hand out delegation on setuid files being opened for write - NFSD: fix problems with cleanup on errors in nfsd4_copy - nfsd: fix courtesy client with deny mode handling in nfs4_upgrade_open - nfsd: don't fsync nfsd_files on last close - NFSD: copy the whole verifier in nfsd_copy_write_verifier - NFSD: Protect against filesystem freezing - lockd: set file_lock start and end when decoding nlm4 testargs - nfsd: don't replace page in rq_pages if it's a continuation of last page - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL - nfsd: call op_release, even when op_func returns an error - nfsd: don't open-code clear_and_wake_up_bit - nfsd: NFSD_FILE_KEY_INODE only needs to find GC'ed entries - nfsd: simplify test_bit return in NFSD_FILE_KEY_FULL comparator - nfsd: don't kill nfsd_files because of lease break error - nfsd: add some comments to nfsd_file_do_acquire - nfsd: don't take/put an extra reference when putting a file - nfsd: update comment over __nfsd_file_cache_purge - nfsd: allow reaping files still under writeback - NFSD: Convert filecache to rhltable - nfsd: simplify the delayed disposal list code - NFSD: Fix problem of COMMIT and NFS4ERR_DELAY in infinite loop - nfsd: make a copy of struct iattr before calling notify_change - nfsd: fix double fget() bug in __write_ports_addfd() - lockd: drop inappropriate svc_get() from locked_get() - NFSD: Add an nfsd4_encode_nfstime4() helper - nfsd: Fix creation time serialization order - nfsd: don't allow nfsd threads to be signalled. - nfsd: Simplify code around svc_exit_thread() call in nfsd() - nfsd: separate nfsd_last_thread() from nfsd_put() - Documentation: Add missing documentation for EXPORT_OP flags - NFSD: fix possible oops when nfsd/pool_stats is closed. - nfsd: call nfsd_last_thread() before final nfsd_put() - nfsd: drop the nfsd_put helper - nfsd: fix RELEASE_LOCKOWNER (CVE-2024-26629) - nfsd: don't take fi_lock in nfsd_break_deleg_cb() - nfsd: don't call locks_release_private() twice concurrently - nfsd: Fix a regression in nfsd_setattr() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.221 - null_blk: Print correct max open zones limit in null_init_zoned_dev() - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() - wifi: cfg80211: pmsr: use correct nla_get_uX functions - wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64 - wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids - wifi: iwlwifi: mvm: don't read past the mfuart notifcation - wifi: mac80211: correctly parse Spatial Reuse Parameter Set element - [armhf] net/ncsi: add NCSI Intel OEM command to keep PHY up - [armhf] net/ncsi: Simplify Kconfig/dts control flow - [armhf] net/ncsi: Fix the multi thread manner of NCSI driver - ipv6: sr: block BH in seg6_output_core() and seg6_input_core() - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (CVE-2024-36978) - vxlan: Fix regression when dropping packets due to invalid src addresses - tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB - net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (CVE-2024-36974) - ptp: Fix error message on failed pin verification - af_unix: Annotate data-race of sk->sk_state in unix_inq_len(). - af_unix: Annotate data-races around sk->sk_state in unix_write_space() and poll(). - af_unix: Annotate data-races around sk->sk_state in sendmsg() and recvmsg(). - af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG. - af_unix: Annotate data-race of net->unx.sysctl_max_dgram_qlen. - af_unix: Use unix_recvq_full_lockless() in unix_stream_connect(). - af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen(). - af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill(). - ipv6: fix possible race in __fib6_drop_pcpu_from() - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete - drm/amd/display: Handle Y carry-over in VCP X.Y calculation - serial: sc16is7xx: replace hardcoded divisor value with BIT() macro - serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler - btrfs: fix leak of qgroup extent records after transaction abort - nilfs2: Remove check for PageError - nilfs2: return the mapped address from nilfs_get_page() - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages - mei: me: release irq in mei_me_pci_resume error path - jfs: xattr: fix buffer overflow for invalid xattr - xhci: Set correct transferred length for cancelled bulk transfers - xhci: Apply reset resume quirk to Etron EJ188 xHCI host - xhci: Apply broken streams quirk to Etron EJ188 xHCI host - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory - [powerpc*] uaccess: Fix build errors seen with GCC 13/14 - Input: try trimming too long modalias strings - SUNRPC: return proper error from gss_wrap_req_priv - gpio: tqmx86: fix typo in Kconfig label - HID: core: remove unnecessary WARN_ON() in implement() - gpio: tqmx86: store IRQ trigger type and unmask status separately - [amd64] iommu/amd: Introduce pci segment structure - [amd64] iommu/amd: Fix sysfs leak in iommu init - iommu: Return right value in iommu_sva_bind_device() - HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() - drm/vmwgfx: 3D disabled should not effect STDU memory limits - net: sfp: Always call `sfp_sm_mod_remove()` on remove - [arm64] net: hns3: add cond_resched() to hns3 ring buffer init process - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet - drm/komeda: check for error-valued pointer - drm/bridge/panel: Fix runtime warning on panel bridge release - tcp: fix race in tcp_v6_syn_recv_sock() - net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets - Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type - net: stmmac: replace priv->speed with the portTransmitRate from the tc-cbs parameters - net/ipv6: Fix the RT cache flush via sysctl using a previous delay - ionic: fix use after netif_napi_del() - iio: adc: ad9467: fix scan type sign - iio: dac: ad5592r: fix temperature channel scaling value - iio: imu: inv_icm42600: delete unneeded update watermark call - drivers: core: synchronize really_probe() and dev_uevent() - [armhf] drm/exynos/vidi: fix memory leak in .get_modes() - [armhf] drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found - [x86] vmci: prevent speculation leaks by sanitizing event in event_deliver() - fs/proc: fix softlockup in __read_vmcore - ocfs2: use coarse time for new created files - ocfs2: fix races between hole punching and AIO+DIO - PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id - dmaengine: axi-dmac: fix possible race in remove() - remoteproc: k3-r5: Do not allow core1 to power up before core0 via sysfs - [x86] intel_th: pci: Add Granite Rapids support - [x86] intel_th: pci: Add Granite Rapids SOC support - [x86] intel_th: pci: Add Sapphire Rapids SOC support - [x86] intel_th: pci: Add Meteor Lake-S support - [x86] intel_th: pci: Add Lunar Lake support - nilfs2: fix potential kernel bug due to lack of writeback flag waiting (CVE-2024-37078) - tick/nohz_full: Don't abuse smp_call_function_single() in tick_setup_device() - serial: 8250_pxa: Configure tx_loadsz to match FIFO IRQ level - hugetlb_encode.h: fix undefined behaviour (34 << 26) - mptcp: ensure snd_una is properly initialized on connect - mptcp: pm: inc RmAddr MIB counter once per RM_ADDR ID - mptcp: pm: update add_addr counters after connect - remoteproc: k3-r5: Jump to error handling labels in start/stop errors - greybus: Fix use-after-free bug in gb_interface_release due to race condition. - usb-storage: alauda: Check whether the media is initialized (CVE-2024-38619) - i2c: at91: Fix the functionality flags of the slave-only interface - i2c: designware: Fix the functionality flags of the slave-only interface - zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING - padata: Disable BH when taking works lock on MT path - rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment - rcutorture: Fix invalid context warning when enable srcu barrier testing - block/ioctl: prefer different overflow check - batman-adv: bypass empty buckets in batadv_purge_orig_ref() - wifi: ath9k: work around memset overflow warning - af_packet: avoid a false positive warning in packet_setsockopt() - drop_monitor: replace spin_lock by raw_spin_lock - scsi: qedi: Fix crash while reading debugfs attribute - netpoll: Fix race condition in netpoll_owner_active - HID: Add quirk for Logitech Casa touchpad - ACPI: video: Add backlight=native quirk for Lenovo Slim 7 16ARH7 - Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl - drm/amd/display: Exit idle optimizations before HDCP execution - [x86] ASoC: Intel: sof_sdw: add JD2 quirk for HP Omen 14 - [arm64,armhf] drm/lima: add mask irq callback to gp and pp - [arm64,armhf] drm/lima: mask irqs in timeout path before hard reset - [powerpc*] pseries: Enforce hcall result buffer validity and size - [powerpc*] io: Avoid clang null pointer arithmetic warnings - power: supply: cros_usbpd: provide ID table for avoiding fallback match - f2fs: remove clear SB_INLINECRYPT flag in default_options - usb: misc: uss720: check for incompatible versions of the Belkin F5U002 - udf: udftime: prevent overflow in udf_disk_stamp_to_time() - PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports - [mips*] Octeon: Add PCIe link status check - serial: exar: adding missing CTI and Exar PCI ids - [mips*] Routerboard 532: Fix vendor retry check code - [mips*] bmips: BCM6358: make sure CBR is correctly set - tracing: Build event generation tests only as modules - cipso: fix total option length computation - netrom: Fix a memory leak in nr_heartbeat_expiry() - ipv6: prevent possible NULL deref in fib6_nh_init() - ipv6: prevent possible NULL dereference in rt6_probe() - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() - netns: Make get_net_ns() handle zero refcount net - qca_spi: Make interrupt remembering atomic - net/sched: act_api: rely on rcu in tcf_idr_check_alloc - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() - tipc: force a dst refcount before doing decryption - net/sched: act_ct: set 'net' pointer when creating new nf_flow_table - sched: act_ct: add netns into the key of tcf_ct_flow_table - net: stmmac: No need to calculate speed divider when offload is disabled - virtio_net: checksum offloading handling fix - netfilter: ipset: Fix suspicious rcu_dereference_protected() - net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings - regulator: core: Fix modpost error "regulator_get_regmap" undefined - dmaengine: ioat: switch from 'pci_' to 'dma_' API - dmaengine: ioat: Drop redundant pci_enable_pcie_error_reporting() - dmaengine: ioatdma: Fix leaking on version mismatch - dmaengine: ioat: use PCI core macros for PCIe Capability - dmaengine: ioatdma: Fix error path in ioat3_dma_probe() - dmaengine: ioatdma: Fix kmemleak in ioat_pci_probe() - dmaengine: ioatdma: Fix missing kmem_cache_destroy() - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." - RDMA/mlx5: Add check for srq max_sge attribute - ALSA: hda/realtek: Limit mic boost on N14AP7 - drm/radeon: fix UBSAN warning in kv_dpm.c - gcov: add support for GCC 14 - kcov: don't lose track of remote references during softirqs - i2c: ocores: set IACK bit after core is enabled - dt-bindings: i2c: google,cros-ec-i2c-tunnel: correct path to i2c-controller schema - drm/amd/display: revert Exit idle optimizations before HDCP execution - [armhf] dts: samsung: smdkv310: fix keypad no-autorepeat - [armhf] dts: samsung: exynos4412-origen: fix keypad no-autorepeat - [armhf] dts: samsung: smdk4412: fix keypad no-autorepeat - rtlwifi: rtl8192de: Style clean-ups - wifi: rtlwifi: rtl8192de: Fix 5 GHz TX power - pmdomain: ti-sci: Fix duplicate PD referrals - knfsd: LOOKUP can return an illegal error value - spmi: hisi-spmi-controller: Do not override device identifier - bcache: fix variable length array abuse in btree_iter (CVE-2024-39482) - tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test - [x86] cpu/vfm: Add new macros to work with (vendor/family/model) values - [x86] cpu: Fix x86_match_cpu() to match just X86_VENDOR_INTEL - r8169: remove unneeded memory barrier in rtl_tx - r8169: improve rtl_tx - r8169: improve rtl8169_start_xmit - r8169: remove nr_frags argument from rtl_tx_slots_avail - r8169: remove not needed check in rtl8169_start_xmit - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (CVE-2024-38586) - Revert "kheaders: substituting --sort in archive creation" - kheaders: explicitly define file modes for archived headers - perf/core: Fix missing wakeup when waiting for context reference - PCI: Add PCI_ERROR_RESPONSE and related definitions - [x86] amd_nb: Check for invalid SMN reads - cifs: missed ref-counting smb session in find - smb: client: fix deadlock in smb2_find_smb_tcon() (CVE-2024-39468) - ACPI: Add quirks for AMD Renoir/Lucienne CPUs to force the D3 hint - [x86] ACPI: x86: Add a quirk for Dell Inspiron 14 2-in-1 for StorageD3Enable - [x86] ACPI: x86: Add another system to quirk list for forcing StorageD3Enable - [x86] ACPI: x86: utils: Add Cezanne to the list for forcing StorageD3Enable - [x86] ACPI: x86: utils: Add Picasso to the list for forcing StorageD3Enable - [x86] ACPI: x86: Force StorageD3Enable on more products - Input: ili210x - fix ili251x_read_touch_data() return value - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER - [arm64,armhf] pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins - [arm64,armhf] pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins - [arm64,armhf] pinctrl/rockchip: separate struct rockchip_pin_bank to a head file - [arm64,armhf] pinctrl: rockchip: use dedicated pinctrl type for RK3328 - [arm64,armhf] pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set - drm/amdgpu: fix UBSAN warning in kv_dpm.c - netfilter: nf_tables: validate family when identifying table via handle - SUNRPC: Fix null pointer dereference in svc_rqst_free() - SUNRPC: Fix a NULL pointer deref in trace_svc_stats_latency() - SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation - SUNRPC: Fix svcxdr_init_encode's buflen calculation - nfsd: hold a lighter-weight client reference over CB_RECALL_ANY - net: dsa: microchip: fix initial port flush problem - net: phy: micrel: add Microchip KSZ 9477 to the device table - xdp: Move the rxq_info.mem clearing to unreg_mem_model() - xdp: Allow registering memory model without rxq reference - xdp: Remove WARN() from __xdp_reg_mem_model() - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep - mtd: partitions: redboot: Added conversion of operands to a larger type - bpf: Add a check for struct bpf_fib_lookup size - net/iucv: Avoid explicit cpumask var allocation on stack - net/dpaa2: Avoid explicit cpumask var allocation on stack - ALSA: emux: improve patch ioctl data validation - media: dvbdev: Initialize sbuf - soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message - drm/radeon/radeon_display: Decrease the size of allocated memory - nvme: fixup comment for nvme RDMA Provider Type - drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA - gpio: davinci: Validate the obtained number of IRQs - gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1) - [x86] stop playing stack games in profile_pc() - ocfs2: fix DIO failure due to insufficient transaction credits - mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos - mmc: sdhci: Do not invert write-protect twice - mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro() - counter: ti-eqep: enable clock at probe - iio: adc: ad7266: Fix variable checking bug - net: usb: ax88179_178a: improve link status logs - usb: gadget: printer: SS+ support - usb: gadget: printer: fix races against disable (CVE-2024-25741) - usb: musb: da8xx: fix a resource leak in probe() - usb: atm: cxacru: fix endpoint checking in cxacru_bind() - serial: 8250_omap: Implementation of Errata i2310 - tty: mcf: MCF54418 has 10 UARTS - net: can: j1939: Initialize unused data in j1939_send_one() - net: can: j1939: recover socket queue on CAN bus error during BAM transmission - net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new - kbuild: Install dtb files as 0644 in Makefile.dtbinst - csky, hexagon: fix broken sys_sync_file_range - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes - [x86] drm/i915/gt: Fix potential UAF by revoke of fence registers - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes - batman-adv: Don't accept TT entries for out-of-spec VIDs - ata: ahci: Clean up sysfs file on error - ata: libata-core: Fix double free on error - ftruncate: pass a signed offset - syscalls: fix compat_sys_io_pgetevents_time64 usage - mtd: spinand: macronix: Add support for serial NAND flash - pwm: stm32: Refuse too small period requests - nfs: Leave pages in the pagecache if readpage failed - ipv6: annotate some data-races around sk->sk_prot - ipv6: Fix data races around sk->sk_prot. - tcp: Fix data races around icsk->icsk_af_ops. - drivers: fix typo in firmware/efi/memmap.c - efi: Correct comment on efi_memmap_alloc - efi: memmap: Move manipulation routines into x86 arch tree - efi: xen: Set EFI_PARAVIRT for Xen dom0 boot on all architectures - [x86] efi/x86: Free EFI memory map only when installing a new one. - [arm64] KVM: arm64: vgic-v4: Make the doorbell request robust w.r.t preemption - [arm64] dts: rockchip: Add sound-dai-cells for RK3368 - xdp: xdp_mem_allocator can be NULL in trace_mem_connect(). - serial: 8250_omap: Fix Errata i2310 with RX FIFO level check - tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset() . [ Salvatore Bonaccorso ] * Bump ABI to 31 * Refresh "fanotify: Taint on use of FANOTIFY_ACCESS_PERMISSIONS" * [rt] Refresh "sunrpc: Make svc_xprt_do_enqueue() use" * Refresh "firmware: Remove redundant log messages from drivers" * [rt] Update to 5.10.221-rt113 midge (0.2.41+dfsg-1~deb11u1) bullseye; urgency=medium . * QA upload. * Rebuild for bullseye. . midge (0.2.41+dfsg-1~deb12u1) bookworm; urgency=medium . * QA upload. * Rebuild for bookworm. . midge (0.2.41+dfsg-1) unstable; urgency=medium . * QA upload. * Switch to copyright-format 1.0. * Repack without examples/covers/*. (Closes: #1056147) * Import package history into GIT. . midge (0.2.41-4) unstable; urgency=medium . * QA upload. * Convert to 3.0 (quilt) format (Closes: #1007522). . midge (0.2.41-3) unstable; urgency=medium . * QA upload. * Set maintainer to Debian QA Group. (see #840288) * debian/rules: Add build-{arch,indep}. (Closes: #998976) midge (0.2.41-4) unstable; urgency=medium . * QA upload. * Convert to 3.0 (quilt) format (Closes: #1007522). midge (0.2.41-3) unstable; urgency=medium . * QA upload. * Set maintainer to Debian QA Group. (see #840288) * debian/rules: Add build-{arch,indep}. (Closes: #998976) mlpost (0.8.2-4+deb11u1) bullseye; urgency=medium . * Non-maintainer upload. * Apply patch by Dennis Filder to override ImageMagick policy. Closes: #991060. net-tools (1.60+git20181103.0eebece-1+deb11u1) bullseye; urgency=medium . * Drop build-dependency on libdnet-dev. Closes: #1024730. This is required to be able to remove dnprogs from bullseye, since it's obsolete and it does not build from source. Thanks to Santiago Vila for preparing this. nfs-utils (1:1.3.4-6+deb11u1) bullseye; urgency=medium . * exportfs: Make sure pass all valid export flags to nfsd (Closes: #1076448) ntfs-3g (1:2017.3.23AR.3-4+deb11u4) bullseye; urgency=medium . * Fix use-after-free in 'ntfs_uppercase_mbs' (CVE-2023-52890). nvidia-graphics-drivers-tesla-418 (418.226.00-6~deb11u2) bullseye; urgency=medium . * Cherry-pick ppc64el changes from 418.226.00-16. * Backport pfn_valid changes in nv-mmap.c from 470.239.06. * ppc64el: Use pfn_valid() variant with rcu_read_{,un}lock_sched() for Linux 5.10 from 5.10.210 onwards to avoid using GPL symbols. nvidia-graphics-drivers-tesla-450 (450.248.02-7~deb11u1) bullseye; urgency=medium . * Rebuild for bullseye. . nvidia-graphics-drivers-tesla-450 (450.248.02-7) unstable; urgency=medium . * ppc64el: Use pfn_valid() variant with rcu_read_{,un}lock_sched() for Linux 5.10 from 5.10.210 onwards to avoid using GPL symbols. . nvidia-graphics-drivers-tesla-450 (450.248.02-6) unstable; urgency=medium . * Backport CONFIG_MITIGATION_RETPOLINE changes from 470.256.02. * Backport follow_pfn changes from 550.90.07 to fix kernel module build for Linux 6.10. * bug-script: Report 'apt-cache policy' (535.183.06-1). . nvidia-graphics-drivers-tesla-450 (450.248.02-5) unstable; urgency=medium . * Backport drm_unlocked_ioctl_flag_present changes from 470.239.06 to fix kernel module build for Linux 6.8. * Backport screen_info changes from 470.182.03 and 470.239.06 to fix kernel module build for Linux 6.7 on arm64. * Backport pfn_valid changes in nv-mmap.c from 470.239.06. * New Romanian (ro) debconf translations by Remus-Gabriel Chelu. * xserver-xorg-video-nvidia: Recommend nvidia-vulkan-icd. * Move the libnvidia-glvkspirv dependency to libnvidia-(e)glcore. (Cf. #1064194) * Bump Standards-Version to 4.7.0. No changes needed. nvidia-graphics-drivers-tesla-450 (450.248.02-6) unstable; urgency=medium . * Backport CONFIG_MITIGATION_RETPOLINE changes from 470.256.02. * Backport follow_pfn changes from 550.90.07 to fix kernel module build for Linux 6.10. * bug-script: Report 'apt-cache policy' (535.183.06-1). nvidia-graphics-drivers-tesla-450 (450.248.02-5) unstable; urgency=medium . * Backport drm_unlocked_ioctl_flag_present changes from 470.239.06 to fix kernel module build for Linux 6.8. * Backport screen_info changes from 470.182.03 and 470.239.06 to fix kernel module build for Linux 6.7 on arm64. * New Romanian (ro) debconf translations by Remus-Gabriel Chelu. * xserver-xorg-video-nvidia: Recommend nvidia-vulkan-icd. * Move the libnvidia-glvkspirv dependency to libnvidia-(e)glcore. (Cf. #1064194) * Bump Standards-Version to 4.7.0. No changes needed. nvidia-graphics-drivers-tesla-450 (450.248.02-4) unstable; urgency=medium . * The Tesla 450 driver series has been declared as End-of-Life by NVIDIA. No further updates fixing security issues, critical bugs, or adding support for new Xorg or Linux releases will be issued. https://docs.nvidia.com/datacenter/tesla/drivers/ . * Turn metapackages into transitional packages to aid switching to nvidia-graphics-drivers-tesla-470. (Closes: #1055140) * Provide less virtual packages. * Remove the Tesla 450 driver from the nvidia alternative. nvidia-graphics-drivers-tesla-460 (460.106.00-17~deb11u1) bullseye; urgency=medium . * Rebuild for bullseye. . nvidia-graphics-drivers-tesla-460 (460.106.00-17) unstable; urgency=medium . * ppc64el: Use pfn_valid() variant with rcu_read_{,un}lock_sched() for Linux 5.10 from 5.10.210 onwards to avoid using GPL symbols. . nvidia-graphics-drivers-tesla-460 (460.106.00-16) unstable; urgency=medium . * Backport CONFIG_MITIGATION_RETPOLINE changes from 470.256.02. * Backport follow_pfn changes from 550.90.07 to fix kernel module build for Linux 6.10. * bug-script: Report 'apt-cache policy' (535.183.06-1). . nvidia-graphics-drivers-tesla-460 (460.106.00-15) unstable; urgency=medium . * Backport drm_unlocked_ioctl_flag_present changes from 470.239.06 to fix kernel module build for Linux 6.8. * Backport screen_info changes from 470.182.03 and 470.239.06 to fix kernel module build for Linux 6.7 on arm64. * Backport pfn_valid changes in nv-mmap.c from 470.239.06. * xserver-xorg-video-nvidia: Recommend nvidia-vulkan-icd. * Move the libnvidia-glvkspirv dependency to libnvidia-(e)glcore. (Cf. #1064194) * Bump Standards-Version to 4.7.0. No changes needed. . nvidia-graphics-drivers-tesla-460 (460.106.00-14) unstable; urgency=medium . * Apply pfn_valid patch from gentoo to fix kernel module build for Linux 6.1.76, 6.6.15, 6.7.3, 6.8. * New Romanian (ro) debconf translations by Remus-Gabriel Chelu. . nvidia-graphics-drivers-tesla-460 (460.106.00-13) unstable; urgency=medium . * Revert backport of pin_user_pages changes. * Backport drm_gem_prime_handle_to_fd changes from 470.223.02 to fix kernel module build for Linux 6.6. * Refuse to load module if IBT is enabled. * Switch suggestion from obsolete vulkan-utils to vulkan-tools (525.125.06-3). . nvidia-graphics-drivers-tesla-460 (460.106.00-12) unstable; urgency=medium . * Backport get_user_pages and pin_user_pages changes from 520.56.06, 525.53 and 535.86.05 to fix kernel module build for Linux 6.5. * Backport drm_driver_has_dumb_destroy changes from 525.116.03 to fix kernel module build for Linux 6.4. . nvidia-graphics-drivers-tesla-460 (460.106.00-11) unstable; urgency=medium . * Backport vm_area_struct_has_const_vm_flags changes from 470.199.02 to fix kernel module build for Linux 6.3. . nvidia-graphics-drivers-tesla-460 (460.106.00-10) unstable; urgency=medium . * Backport acpi_op_remove changes from 470.182.03 to fix kernel module build for Linux 6.2. * Backport drm_connector_has_override_edid changes from 525.78.01 to fix kernel module build for Linux 6.2. * nvidia-tesla-460-alternative: Access kmod config files over a versioned symlink (510.108.03-3). * Add versioned Provides: nvidia-kernel-dkms-any (515.65.01-1). * New Brazilian Portuguese (pt_BR) debconf translations by Paulo Henrique de Lima Santana. (Closes: #1028262) * Updated Turkish (tr) debconf translations by Atila KOÇ. (Closes: #1033419) * Bump Standards-Version to 4.6.2. No changes needed. . nvidia-graphics-drivers-tesla-460 (460.106.00-9) unstable; urgency=medium . * Backport find_vma_intersection changes from 470.141.03 to fix kernel module build for Linux 6.1. * Backport acpi changes from 470.161.03, replacing earlier backports. * Add missing #includes to fix kernel module build for ppc64el. * Rename the internally used ARCH variable which might clash on externally set values. * Use substitutions for ${nvidia-kernel} and friends (510.108.03-1). * Try to compile a kernel module at package build time (510.108.03-1). . nvidia-graphics-drivers-tesla-460 (460.106.00-8) unstable; urgency=medium . * Backport get_task_ioprio changes from 510.85.02, acpi changes from 510.85.02 and 515.65.01, drm_frambuffer.h changes from 515.76 to fix kernel module build for Linux 6.0. * Add support for unversioned Tesla packages (tesla 510.85.02-1). . nvidia-graphics-drivers-tesla-460 (460.106.00-7) unstable; urgency=medium . * Replace obsolete pci_*() functions with their dma_*() counterparts in ppc64el specific code paths to fix kernel module build for ppc64el. * Backport nv_install_notifier and dma_resv_add_fence changes from 470.141.03 to fix kernel module build for Linux 5.19. * Refresh patches. * Drop references to kernel-package and make-kpkg, gone since stretch (470.141.03-1). * Overhaul build-module-packages.sh (470.141.03-1). * Add module-assistant based autopkgtest for the *-source package (470.141.03-1). * Simplify changelog management for the *-source package (470.141.03-1). * Copy the Source stanza from d/control to the module control file (470.141.03-1). nvidia-graphics-drivers-tesla-460 (460.106.00-16) unstable; urgency=medium . * Backport CONFIG_MITIGATION_RETPOLINE changes from 470.256.02. * Backport follow_pfn changes from 550.90.07 to fix kernel module build for Linux 6.10. * bug-script: Report 'apt-cache policy' (535.183.06-1). nvidia-graphics-drivers-tesla-460 (460.106.00-15) unstable; urgency=medium . * Backport drm_unlocked_ioctl_flag_present changes from 470.239.06 to fix kernel module build for Linux 6.8. * Backport screen_info changes from 470.182.03 and 470.239.06 to fix kernel module build for Linux 6.7 on arm64. * xserver-xorg-video-nvidia: Recommend nvidia-vulkan-icd. * Move the libnvidia-glvkspirv dependency to libnvidia-(e)glcore. (Cf. #1064194) * Bump Standards-Version to 4.7.0. No changes needed. nvidia-graphics-drivers-tesla-460 (460.106.00-14) unstable; urgency=medium . * Apply pfn_valid patch from gentoo to fix kernel module build for Linux 6.1.76, 6.6.15, 6.7.3, 6.8. nvidia-graphics-drivers-tesla-460 (460.106.00-13) unstable; urgency=medium . * Revert backport of pin_user_pages changes. * Backport drm_gem_prime_handle_to_fd changes from 470.223.02 to fix kernel module build for Linux 6.6. * Refuse to load module if IBT is enabled. * Switch suggestion from obsolete vulkan-utils to vulkan-tools (525.125.06-3). nvidia-graphics-drivers-tesla-460 (460.106.00-12) unstable; urgency=medium . * Backport get_user_pages changes from 520.56.06, 525.53 and 535.86.05 to fix kernel module build for Linux 6.5. * Backport drm_driver_has_dumb_destroy changes from 525.116.03 to fix kernel module build for Linux 6.4. nvidia-graphics-drivers-tesla-460 (460.106.00-11) unstable; urgency=medium . * Backport vm_area_struct_has_const_vm_flags changes from 525.105.17 to fix kernel module build for Linux 6.3. nvidia-graphics-drivers-tesla-460 (460.106.00-10) unstable; urgency=medium . * Backport acpi_op_remove changes from 470.182.03 to fix kernel module build for Linux 6.2. * Backport drm_connector_has_override_edid changes from 525.78.01 to fix kernel module build for Linux 6.2. * nvidia-tesla-460-alternative: Access kmod config files over a versioned symlink (510.108.03-3). * Add versioned Provides: nvidia-kernel-dkms-any (515.65.01-1). * New Brazilian Portuguese (pt_BR) debconf translations by Paulo Henrique de Lima Santana. (Closes: #1028262) * Updated Turkish (tr) debconf translations by Atila KOÇ. (Closes: #1033419) * Bump Standards-Version to 4.6.2. No changes needed. nvidia-graphics-drivers-tesla-460 (460.106.00-9) unstable; urgency=medium . * Backport find_vma_intersection changes from 470.141.03 to fix kernel module build for Linux 6.1. * Backport acpi changes from 470.161.03, replacing earlier backports. * Add missing #includes to fix kernel module build for ppc64el. * Rename the internally used ARCH variable which might clash on externally set values. * Use substitutions for ${nvidia-kernel} and friends (510.108.03-1). * Try to compile a kernel module at package build time (510.108.03-1). nvidia-graphics-drivers-tesla-460 (460.106.00-8) unstable; urgency=medium . * Backport get_task_ioprio changes from 510.85.02, acpi changes from 510.85.02 and 515.65.01, drm_frambuffer.h changes from 515.76 to fix kernel module build for Linux 6.0. * Add support for unversioned Tesla packages (tesla 510.85.02-1). nvidia-graphics-drivers-tesla-460 (460.106.00-7) unstable; urgency=medium . * Replace obsolete pci_*() functions with their dma_*() counterparts in ppc64el specific code paths to fix kernel module build for ppc64el. * Backport nv_install_notifier and dma_resv_add_fence changes from 470.141.03 to fix kernel module build for Linux 5.19. * Refresh patches. * Drop references to kernel-package and make-kpkg, gone since stretch (470.141.03-1). * Overhaul build-module-packages.sh (470.141.03-1). * Add module-assistant based autopkgtest for the *-source package (470.141.03-1). * Simplify changelog management for the *-source package (470.141.03-1). * Copy the Source stanza from d/control to the module control file (470.141.03-1). nvidia-graphics-drivers-tesla-460 (460.106.00-6) unstable; urgency=medium . * Backport pci/dma, iosys_map, dma_set_coherent_mask, acpi_bus_get_device, cc_mkdec and drm_mode_config_has_allow_fb_modifiers changes from 470.129.06 to fix kernel module build for Linux 5.18. * Update lintian overrides. ocsinventory-server (2.8.1+dfsg1-1+deb11u1) bullseye; urgency=medium . * Non-maintainer upload. . [ Tobias Frost ] * Add patch to support php-cas fixed for CVE 2022 39369: The CVE required a API-breaking change in php-cas. . [ Bastien Roucaries ] * Update version constraint on php-cas to require fixed version. * Fix vendored php-cas odoo (14.0.0+dfsg.2-7+deb11u2) oldstable-security; urgency=medium . [ Sébastien Delafond ] * Fix CVE-2024-4367 (Closes: #1074228) onionshare (2.2-3+deb11u2) bullseye; urgency=medium . * Demote obfs4proxy dependency to Recommends, to allow removal of obfs4proxy - See #1008164 openjdk-11 (11.0.24+8-2~deb11u1) bullseye-security; urgency=medium . * Rebuild for bullseye * Skip tests, no jtreg7 for bullseye openjdk-11 (11.0.24+8-1) unstable; urgency=medium . * OpenJDK 11.0.24 release, build 8. openjdk-11 (11.0.24~7ea-1) unstable; urgency=medium . * OpenJDK 11.0.24+7 build (early access). . [ Vladimir Petko ] * d/p/*: Refresh patches. * d/rules, d/control: Use jtreg7, enable jtreg. * d/JB-demo.overrides.in: Add jar-contains-source override for SwingSet demo jar. * d/rules, d/copyright-generator/copyright-gen.py, d/copyright: Exclude test/jdk/sun/management/windows/revokeall.exe from orig tarball, format d/copyright-generator/copyright-gen.py. * d/p/8307977-proposed.diff: Rename to jdk-8307977-proposed.patch. * d/p/jdk-8334502.patch: Fix iso8601_utctime armhf function. * d/p/jtreg-location.diff: Drop patch as it is no longer needed for jtreg7. * d/rules: Include buildflags.mk to avoid errors due to undefined variables. . [ Matthias Klose ] * Remove references to obsolete patches. Closes: #1067613. openjdk-11 (11.0.23+9-1) unstable; urgency=high . * OpenJDK 11.0.23 release, build 9. - CVE-2024-21011, 8319851: Improve exception logging. - CVE-2024-21068, 8322122: Enhance generation of addresses. - 8318340: Improve RSA key implementations. - CVE-2024-21012, 8315708: Enhance HTTP/2 client usage. - CVE-2024-21094, 8317507: Already fixed in November 2023: C2 compilation fails with "Exceeded _node_regs array". - CVE-2024-21085, 8322114: Improve Pack 200 handling. . [ Pushkar Kulkarni ] * Use 64-bit clock_* function on archs like armhf. openjdk-17 (17.0.12+7-2~deb11u1) bullseye-security; urgency=medium . * Build for bullseye openjdk-17 (17.0.12+7-1) unstable; urgency=medium . * OpenJDK 17.0.12 release, build 7. openjdk-17 (17.0.12~6ea-1) unstable; urgency=medium . * OpenJDK 17.0.12 early access, build 6. . [ Vladimir Petko ] * d/p/8295111.patch: Apply upstream patch to resolve jpackage failure to create a deb package. * d/t/problems-i386.txt: Update i386 test exclusions. * d/t/problems-armhf.txt: Update armhf test exclusions. * d/p/jdk-8307977.patch: Rename patch. * d/p/jdk-8334502-proposed.patch: Add proposed fix for iso8601 time format on ARM32. * d/p/jdk-8334895-proposed.patch: Add proposed fix for configuration failure when CDS is disabled on arm64. * d/control: Regenerate control. * d/rules: Enable early access release. * d/rules: Enable jtreg tests. * d/rules: Include /usr/share/dpkg/buildflags.mk to avoid configure failure due to the undefined variables. * d/p/jdk-8325567.patch: jspawnhelper without args fails with segfault. LP: #2055280. * d/p/jdk-8331541.patch: Add fix for the link failure against libjvm.so on i386. Closes: #1057715. . [ Matthias Klose ] * Build using GCC 10 for focal. openjdk-17 (17.0.11+9-1) unstable; urgency=high . * OpenJDK 17.0.11 release, build 9. - CVE-2024-21011, 8319851: Improve exception logging. - CVE-2024-21068, 8322122: Enhance generation of addresses. - 8318340: Improve RSA key implementations. - CVE-2024-21012, 8315708: Enhance HTTP/2 client usage. * CVE-2024-21094, 8317507: Already fixed in November 2023: C2 compilation fails with "Exceeded _node_regs array". openjdk-17 (17.0.11+9-1~deb12u1) bookworm-security; urgency=medium . * Rebuild for bookworm org-mode (9.4.0+dfsg-1+deb11u3) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331) (Closes: #1074136) php-cas (1.3.8-1+deb11u1) bullseye; urgency=medium . * Security upload * Fix CVE-2022-39369: The phpCAS library uses HTTP headers to determine the service URL used to validate tickets. This allows an attacker to control the host header and use a valid ticket granted for any authorized service in the same SSO realm (CAS server) to authenticate to the service protected by phpCAS. Depending on the settings of the CAS server service registry in worst case this may be any other service URL (if the allowed URLs are configured to "^(https)://.*") or may be strictly limited to known and authorized services in the same SSO federation if proper URL service validation is applied. The fix for this vulnerabilty requires an API breaking change in php-cas and will require that software using the library be updated. (Closes: #1023571) plasma-workspace (4:5.20.5-6+deb11u1) bullseye-security; urgency=medium . * Non-maintainer upload. * CVE-2024-36041: ksmserver: Unauthorized users can access session manager poe.app (0.5.1-6+deb11u1) bullseye; urgency=medium . * debian/gbp.conf: New file. * debian/control (Vcs-Git): Set branch to bullseye. * debian/patches/editable-cells.patch: New; make comment cells editable (Closes: #1076829). * debian/patches/preferences-draw.patch: New; fix drawing when an NSActionCell in the preferences is acted on to change state. postgresql-13 (13.16-0+deb11u1) bullseye-security; urgency=medium . * New upstream version. . + Prevent unauthorized code execution during pg_dump (Masahiko Sawada) . An attacker able to create and drop non-temporary objects could inject SQL code that would be executed by a concurrent pg_dump session with the privileges of the role running pg_dump (which is often a superuser). The attack involves replacing a sequence or similar object with a view or foreign table that will execute malicious code. To prevent this, introduce a new server parameter restrict_nonsystem_relation_kind that can disable expansion of non-builtin views as well as access to foreign tables, and teach pg_dump to set it when available. Note that the attack is prevented only if both pg_dump and the server it is dumping from are new enough to have this fix. . The PostgreSQL Project thanks Noah Misch for reporting this problem. (CVE-2024-7348) putty (0.74-1+deb11u2) bullseye; urgency=medium . * Non-maintainer upload. * Cherry-pick from upstream: - Refactor the ssh_hash vtable. - Add an extra HMAC constructor function. - Fix CVE-2024-31497: biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a quick attack in approximately 60 signatures. In other words, an adversary may already have enough signature information to compromise a victim's private key, even if there is no further use of vulnerable PuTTY versions. riemann-c-client (1.10.4-2+deb11u1) bullseye; urgency=medium . * Fix GnuTLS send/recv. roundcube (1.4.15+dfsg.1-1+deb11u4) bullseye-security; urgency=high . * Fix CVE-2024-42008: Cross-site scripting (XSS) vulnerability in serving of attachments other than HTML or SVG. * Fix CVE-2024-42009: Cross-site scripting (XSS) vulnerability in post-processing of sanitized HTML content. (Closes: #1077969) * Fix CVE-2024-42010: Information leak (access to remote content) via insufficient CSS filtering. * Backport upstream fix for infinite loop when parsing malformed Sieve script. runc (1.0.0~rc93+ds1-5+deb11u5) bullseye; urgency=medium . * Non-maintainer upload by the Debian LTS Team. * d/changelog: Cleaned up the last entry for 1.0.0~rc93+ds1-5+deb11u4 removing some superflous entries. * d/patches/CVE-2023-27561-and-CVE-2023-28642: Added to fix CVE-2023-27561 and CVE-2023-27561. - It was found that the fix for CVE-2021-30465 introduced a regression in regards to CVE-2019-19921 which results in an incorrect access control leading to privilege escalation and bypassing apparmor. runc (1.0.0~rc93+ds1-5+deb11u4) bullseye; urgency=medium . * Non-maintainer upload by the Debian LTS Team. * d/patches/0025-Fix-busybox-tarball-url-in-integration-test.patch: Updated. - Fixed download URLs again. * d/patches/CVE-2021-43784.patch: Added to fix CVE-2021-43784. - When writing netlink messages, it is possible to have a byte array larger than UINT16_MAX which would result in the length field overflowing and allowing user-controlled data to be parsed as control characters (such as creating custom mount points, changing which set of namespaces to allow, and so on). * d/patches/0027-Fix-test-for-newer-kernels.patch: Added. - Fix test for newer kernels. * d/patches/CVE-2023-25809.patch: Added to fix CVE-2023-25809. - It was found that rootless runc makes `/sys/fs/cgroup` writable under specific conditions. A container may then gain the write access to user-owned cgroup hierarchy `/sys/fs/cgroup/user.slice/...` on the host. * Update changelog for 1.0.0~rc93+ds1-5+deb11u4~1.gbpce2b39 release * Update patch for download URLs of busybox tarball * Add patch to fix CVE-2021-43784.patch * Add patch to fix tests with newer kernels * Add patch to fix CVE-2023-25809 rustc-web (1.78.0+dfsg1-2~deb11u3) bullseye; urgency=medium . * Depend on cargo-web for the autopkgtest. * Add missing conflicts (closes: #1079744, #1079653, #1076683). rustc-web (1.78.0+dfsg1-2~deb11u2) bullseye; urgency=medium . * Also rename rustfmt to rustfmt-web. rustc-web (1.78.0+dfsg1-2~deb11u1) bullseye; urgency=medium . * Backport to bullseye. * Switch pkgconf build-dependency to pkg-config, pkgconf in bullseye doesn't provide `triplet`-pkgconf binaries. rustc-web (1.70.0+dfsg1-7~deb12u2) bookworm; urgency=medium . * Non-maintainer upload. * Increase allowed test failures on armhf and ppc64el to fix FTBFS. * Provide Conflicts/Replaces for rust*-mozilla*, which could still be installed from oldstable (closes: #1064562). * Add Provides/Conflicts/Replaces for libstd-rust-1.70 (closes: #1064563). rustc-web (1.70.0+dfsg1-7~deb12u1) bookworm; urgency=medium . * Non-maintainer upload. * Rename rustc backport to rustc-web, intended to be used for browsers. * Generate & include bootstrap compilers via an orig-stage0.tar.xz. * Add mipsel bootstrap compiler back, as mipsel is still in bookworm. * Disable profiler on mipsel, as it likely doesn't work either. * Disable wasm. * Drop -all virtual package, which doesn't make sense for us. shim (15.8-1~deb11u1) bullseye; urgency=medium . * New upstream release fixing more bugs * Remove all our previous patches, no longer needed: + Make-sbat_var.S-parse-right-with-buggy-gcc-binutils.patch (now upstream) + Enable-NX.patch (we don't want NX just yet until the whole boot stack is NX-capable) + block-grub-sbat3-debian.patch (not needed now upstream grub SBAT is 4) * Cherry-pick 2 new patches from upstream for grub revocations: + 0001-sbat-Add-grub.peimage-2-to-latest-CVE-2024-2312.patch + 0002-sbat-Also-bump-latest-for-grub-4-and-to-todays-date.patch * Log if the build is nx-compatible or not * Force shim to use the latest revocations by default to block some older grub / peimage issues. This is: "shim,4\ngrub,4\ngrub.peimage,2\n" * Install a copy of the Debian CA certificate into /usr/share/shim. Closes: #1069054 * Clean up better after build. Closes: #1046268 shim (15.7-1) unstable; urgency=medium . * New upstream release fixing more bugs * Add further patches from upstream: + Make sbat_var.S parse right with buggy gcc/binutils + Enable NX support at build time, as required by policy for signing new shim binaries. * Switch to using gcc-12. Closes: #1022180 * Update to Standards-Version 4.6.2 (no changes needed) * Block Debian grub binaries with sbat < 4 (see #1024617) shim-helpers-amd64-signed (1+15.8+1~deb11u1) bullseye; urgency=medium . * Update to shim 15.8-1~deb11u1 shim-helpers-amd64-signed (1+15.7+1) unstable; urgency=medium . * Update to shim 15.7-1 shim-helpers-arm64-signed (1+15.8+1~deb11u1) bullseye; urgency=medium . * Update to shim 15.8-1~deb11u1 shim-helpers-arm64-signed (1+15.7+1) unstable; urgency=medium . * Update to shim 15.7-1 shim-helpers-i386-signed (1+15.8+1~deb11u1) bullseye; urgency=medium . * Update to shim 15.8-1~deb11u1 shim-helpers-i386-signed (1+15.7+1) unstable; urgency=medium . * Update to shim 15.7-1 shim-signed (1.44~1+deb11u1) bullseye; urgency=medium . * Build against new signed binaries corresponding to 15.8-1~deb11u1 * Update build-dep on shim-unsigned to use 15.8-1~deb11u1 * NOTE: this will block use of older grub binaries with sbat < 4 + Update Depends on grub2-common to match. * Multiple packaging updates backported: + Add Romanian translation for debconf templates (thanks to Remus-Gabriel Chelu) + Stop recommending secureboot-db, we don't have that package + Tweak dependencies using substvars (thanks for help from Fabian Grünbichler) shim-signed (1.43) unstable; urgency=medium . * Fix broken usage of dpkg-query shim-signed (1.42) unstable; urgency=medium . * Tweak versioning in runtime dependencies, using substvars to make things more automatic in future. shim-signed (1.41) unstable; urgency=medium . * Build against new signed binaries corresponding to 15.8-1 + Closes: #1071215 * NOTE: Stop building packages for i386. The number of functioning i386 Secure Boot machines is approximately zero at this point. * Tweak packaging: + Switch from debian/compat to build-dep on debhelper-compat (= 13) shim-signed (1.40) unstable; urgency=medium . * Stop recommending secureboot-db, we don't have that package. Closes: #1042964, #1041449, #932358 * Add Romanian translation for debconf templates, thanks to Remus-Gabriel Chelu. Closes: #1039090 shim-signed (1.39) unstable; urgency=medium . * Build against new signed binaries corresponding to 15.7-1 + This syncs up build-deps again. Closes: #1016280 + We now have arm64 signed shims again \o/ Undo the hacky unsigned arm64 build Closes: #1008942, #992073, #991478 Pulls multiple other bugfixes in for the signed version: + Make sbat_var.S parse right with buggy gcc/binutils + Enable NX support at build time, as required by policy for signing new shim binaries. + Fixes argument handling bug with some firmware implementations. Closes: #995940 * Update build-dep on shim-unsigned to use 15.7-1 * Block Debian grub binaries with sbat < 4 (see #1024617) + Update Depends on grub2-common to match. * postinst/postrm: make config_item() more robust * Add pt_BR translation, thanks to Paulo Henrique de Lima Santana. Closes: #1026415 * Tweak dependencies symfony (4.4.19+dfsg-2+deb11u6) bullseye; urgency=medium . * Fix homemade autoload (Closes: #1078843, #1078838, #1078837, #1078836) * Skip failing test with library loaded from system path trinity (1.9+git20200331.4d2343bd18c7b-2+deb11u1) bullseye; urgency=medium . * Non-maintainer upload. * Drop decnet support to fix FTBFS bug. Closes: #1028795. usb.ids (2024.07.04-0+deb11u1) bullseye; urgency=medium . * New upstream version. usb.ids (2024.03.18-1) unstable; urgency=medium . * New upstream version. usb.ids (2024.01.30-1) unstable; urgency=medium . * New upstream version. usb.ids (2024.01.20-1) unstable; urgency=medium . * New upstream version. usb.ids (2024.01.20-0+deb12u1) bookworm; urgency=medium . * New upstream version. wpa (2:2.9.0-21+deb11u2) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * Only load libraries from trusted path (CVE-2024-5290) xmedcon (0.16.3+dfsg-1+deb11u1) bullseye; urgency=medium . * Team upload. * CVE-2024-29421.patch: new: fix CVE-2024-29421. (Closes: #1077369) znc (1.8.2-2+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix RCE vulnerability in modtcl (CVE-2024-39844) ======================================== Sat, 29 Jun 2024 - Debian 11.10 released ======================================== ========================================================================= [Date: Sat, 29 Jun 2024 09:43:28 -0000] [ftpmaster: Archive Administrator] Removed the following packages from oldstable: btrfs-modules-5.10.0-26-s390x-di | 5.10.197-1 | s390x btrfs-modules-5.10.0-29-s390x-di | 5.10.216-1 | s390x cdrom-core-modules-5.10.0-26-s390x-di | 5.10.197-1 | s390x cdrom-core-modules-5.10.0-29-s390x-di | 5.10.216-1 | s390x crc-modules-5.10.0-26-s390x-di | 5.10.197-1 | s390x crc-modules-5.10.0-29-s390x-di | 5.10.216-1 | s390x crypto-dm-modules-5.10.0-26-s390x-di | 5.10.197-1 | s390x crypto-dm-modules-5.10.0-29-s390x-di | 5.10.216-1 | s390x crypto-modules-5.10.0-26-s390x-di | 5.10.197-1 | s390x crypto-modules-5.10.0-29-s390x-di | 5.10.216-1 | s390x dasd-extra-modules-5.10.0-26-s390x-di | 5.10.197-1 | s390x dasd-extra-modules-5.10.0-29-s390x-di | 5.10.216-1 | s390x dasd-modules-5.10.0-26-s390x-di | 5.10.197-1 | s390x dasd-modules-5.10.0-29-s390x-di | 5.10.216-1 | s390x ext4-modules-5.10.0-26-s390x-di | 5.10.197-1 | s390x ext4-modules-5.10.0-29-s390x-di | 5.10.216-1 | s390x f2fs-modules-5.10.0-26-s390x-di | 5.10.197-1 | s390x f2fs-modules-5.10.0-29-s390x-di | 5.10.216-1 | s390x fat-modules-5.10.0-26-s390x-di | 5.10.197-1 | s390x fat-modules-5.10.0-29-s390x-di | 5.10.216-1 | s390x fuse-modules-5.10.0-26-s390x-di | 5.10.197-1 | s390x fuse-modules-5.10.0-29-s390x-di | 5.10.216-1 | s390x isofs-modules-5.10.0-26-s390x-di | 5.10.197-1 | s390x isofs-modules-5.10.0-29-s390x-di | 5.10.216-1 | s390x kernel-image-5.10.0-26-s390x-di | 5.10.197-1 | s390x kernel-image-5.10.0-29-s390x-di | 5.10.216-1 | s390x linux-headers-5.10.0-26-s390x | 5.10.197-1 | s390x linux-headers-5.10.0-29-s390x | 5.10.216-1 | s390x linux-image-5.10.0-26-s390x | 5.10.197-1 | s390x linux-image-5.10.0-26-s390x-dbg | 5.10.197-1 | s390x linux-image-5.10.0-29-s390x | 5.10.216-1 | s390x linux-image-5.10.0-29-s390x-dbg | 5.10.216-1 | s390x loop-modules-5.10.0-26-s390x-di | 5.10.197-1 | s390x loop-modules-5.10.0-29-s390x-di | 5.10.216-1 | s390x md-modules-5.10.0-26-s390x-di | 5.10.197-1 | s390x md-modules-5.10.0-29-s390x-di | 5.10.216-1 | s390x mtd-core-modules-5.10.0-26-s390x-di | 5.10.197-1 | s390x mtd-core-modules-5.10.0-29-s390x-di | 5.10.216-1 | s390x multipath-modules-5.10.0-26-s390x-di | 5.10.197-1 | s390x multipath-modules-5.10.0-29-s390x-di | 5.10.216-1 | s390x nbd-modules-5.10.0-26-s390x-di | 5.10.197-1 | s390x nbd-modules-5.10.0-29-s390x-di | 5.10.216-1 | s390x nic-modules-5.10.0-26-s390x-di | 5.10.197-1 | s390x nic-modules-5.10.0-29-s390x-di | 5.10.216-1 | s390x scsi-core-modules-5.10.0-26-s390x-di | 5.10.197-1 | s390x scsi-core-modules-5.10.0-29-s390x-di | 5.10.216-1 | s390x scsi-modules-5.10.0-26-s390x-di | 5.10.197-1 | s390x scsi-modules-5.10.0-29-s390x-di | 5.10.216-1 | s390x udf-modules-5.10.0-26-s390x-di | 5.10.197-1 | s390x udf-modules-5.10.0-29-s390x-di | 5.10.216-1 | s390x xfs-modules-5.10.0-26-s390x-di | 5.10.197-1 | s390x xfs-modules-5.10.0-29-s390x-di | 5.10.216-1 | s390x ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 29 Jun 2024 09:43:46 -0000] [ftpmaster: Archive Administrator] Removed the following packages from oldstable: affs-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel affs-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel ata-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel ata-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel btrfs-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel btrfs-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel cdrom-core-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel cdrom-core-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel crc-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel crc-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel crypto-dm-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel crypto-dm-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel crypto-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel crypto-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel event-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel event-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel ext4-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel ext4-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel f2fs-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel f2fs-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel fat-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel fat-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel fb-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel fb-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel fuse-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel fuse-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel i2c-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel i2c-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel input-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel input-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel isofs-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel isofs-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel jfs-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel jfs-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel kernel-image-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel kernel-image-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel linux-headers-5.10.0-26-4kc-malta | 5.10.197-1 | mipsel linux-headers-5.10.0-29-4kc-malta | 5.10.216-1 | mipsel linux-image-5.10.0-26-4kc-malta | 5.10.197-1 | mipsel linux-image-5.10.0-26-4kc-malta-dbg | 5.10.197-1 | mipsel linux-image-5.10.0-29-4kc-malta | 5.10.216-1 | mipsel linux-image-5.10.0-29-4kc-malta-dbg | 5.10.216-1 | mipsel loop-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel loop-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel md-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel md-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel minix-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel minix-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel mmc-core-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel mmc-core-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel mmc-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel mmc-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel mouse-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel mouse-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel mtd-core-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel mtd-core-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel multipath-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel multipath-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel nbd-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel nbd-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel nic-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel nic-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel nic-shared-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel nic-shared-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel nic-usb-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel nic-usb-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel nic-wireless-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel nic-wireless-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel pata-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel pata-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel ppp-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel ppp-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel sata-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel sata-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel scsi-core-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel scsi-core-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel scsi-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel scsi-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel scsi-nic-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel scsi-nic-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel sound-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel sound-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel squashfs-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel squashfs-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel udf-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel udf-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel usb-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel usb-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel usb-serial-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel usb-serial-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel usb-storage-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel usb-storage-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel xfs-modules-5.10.0-26-4kc-malta-di | 5.10.197-1 | mipsel xfs-modules-5.10.0-29-4kc-malta-di | 5.10.216-1 | mipsel ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 29 Jun 2024 09:43:59 -0000] [ftpmaster: Archive Administrator] Removed the following packages from oldstable: ata-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el ata-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el btrfs-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el btrfs-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el cdrom-core-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el cdrom-core-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el crc-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el crc-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el crypto-dm-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el crypto-dm-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el crypto-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el crypto-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el event-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el event-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el ext4-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el ext4-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el f2fs-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el f2fs-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el fancontrol-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el fancontrol-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el fat-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el fat-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el fb-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el fb-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el firewire-core-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el firewire-core-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el fuse-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el fuse-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el hypervisor-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el hypervisor-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el i2c-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el i2c-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el input-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el input-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el isofs-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el isofs-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el jfs-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el jfs-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el kernel-image-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el kernel-image-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el linux-headers-5.10.0-26-powerpc64le | 5.10.197-1 | ppc64el linux-headers-5.10.0-29-powerpc64le | 5.10.216-1 | ppc64el linux-image-5.10.0-26-powerpc64le | 5.10.197-1 | ppc64el linux-image-5.10.0-26-powerpc64le-dbg | 5.10.197-1 | ppc64el linux-image-5.10.0-29-powerpc64le | 5.10.216-1 | ppc64el linux-image-5.10.0-29-powerpc64le-dbg | 5.10.216-1 | ppc64el loop-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el loop-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el md-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el md-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el mouse-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el mouse-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el mtd-core-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el mtd-core-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el multipath-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el multipath-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el nbd-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el nbd-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el nic-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el nic-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el nic-shared-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el nic-shared-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el nic-usb-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el nic-usb-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el nic-wireless-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el nic-wireless-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el ppp-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el ppp-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el sata-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el sata-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el scsi-core-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el scsi-core-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el scsi-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el scsi-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el scsi-nic-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el scsi-nic-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el serial-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el serial-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el squashfs-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el squashfs-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el udf-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el udf-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el uinput-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el uinput-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el usb-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el usb-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el usb-serial-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el usb-serial-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el usb-storage-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el usb-storage-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el xfs-modules-5.10.0-26-powerpc64le-di | 5.10.197-1 | ppc64el xfs-modules-5.10.0-29-powerpc64le-di | 5.10.216-1 | ppc64el ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 29 Jun 2024 09:44:20 -0000] [ftpmaster: Archive Administrator] Removed the following packages from oldstable: linux-headers-5.10.0-26-amd64 | 5.10.197-1 | amd64 linux-headers-5.10.0-26-cloud-amd64 | 5.10.197-1 | amd64 linux-headers-5.10.0-26-rt-amd64 | 5.10.197-1 | amd64 linux-headers-5.10.0-29-amd64 | 5.10.216-1 | amd64 linux-headers-5.10.0-29-cloud-amd64 | 5.10.216-1 | amd64 linux-headers-5.10.0-29-rt-amd64 | 5.10.216-1 | amd64 linux-image-5.10.0-26-amd64-dbg | 5.10.197-1 | amd64 linux-image-5.10.0-26-amd64-unsigned | 5.10.197-1 | amd64 linux-image-5.10.0-26-cloud-amd64-dbg | 5.10.197-1 | amd64 linux-image-5.10.0-26-cloud-amd64-unsigned | 5.10.197-1 | amd64 linux-image-5.10.0-26-rt-amd64-dbg | 5.10.197-1 | amd64 linux-image-5.10.0-26-rt-amd64-unsigned | 5.10.197-1 | amd64 linux-image-5.10.0-29-amd64-dbg | 5.10.216-1 | amd64 linux-image-5.10.0-29-amd64-unsigned | 5.10.216-1 | amd64 linux-image-5.10.0-29-cloud-amd64-dbg | 5.10.216-1 | amd64 linux-image-5.10.0-29-cloud-amd64-unsigned | 5.10.216-1 | amd64 linux-image-5.10.0-29-rt-amd64-dbg | 5.10.216-1 | amd64 linux-image-5.10.0-29-rt-amd64-unsigned | 5.10.216-1 | amd64 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 29 Jun 2024 09:44:36 -0000] [ftpmaster: Archive Administrator] Removed the following packages from oldstable: linux-headers-5.10.0-26-arm64 | 5.10.197-1 | arm64 linux-headers-5.10.0-26-cloud-arm64 | 5.10.197-1 | arm64 linux-headers-5.10.0-26-rt-arm64 | 5.10.197-1 | arm64 linux-headers-5.10.0-29-arm64 | 5.10.216-1 | arm64 linux-headers-5.10.0-29-cloud-arm64 | 5.10.216-1 | arm64 linux-headers-5.10.0-29-rt-arm64 | 5.10.216-1 | arm64 linux-image-5.10.0-26-arm64-dbg | 5.10.197-1 | arm64 linux-image-5.10.0-26-arm64-unsigned | 5.10.197-1 | arm64 linux-image-5.10.0-26-cloud-arm64-dbg | 5.10.197-1 | arm64 linux-image-5.10.0-26-cloud-arm64-unsigned | 5.10.197-1 | arm64 linux-image-5.10.0-26-rt-arm64-dbg | 5.10.197-1 | arm64 linux-image-5.10.0-26-rt-arm64-unsigned | 5.10.197-1 | arm64 linux-image-5.10.0-29-arm64-dbg | 5.10.216-1 | arm64 linux-image-5.10.0-29-arm64-unsigned | 5.10.216-1 | arm64 linux-image-5.10.0-29-cloud-arm64-dbg | 5.10.216-1 | arm64 linux-image-5.10.0-29-cloud-arm64-unsigned | 5.10.216-1 | arm64 linux-image-5.10.0-29-rt-arm64-dbg | 5.10.216-1 | arm64 linux-image-5.10.0-29-rt-arm64-unsigned | 5.10.216-1 | arm64 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 29 Jun 2024 09:44:56 -0000] [ftpmaster: Archive Administrator] Removed the following packages from oldstable: btrfs-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel btrfs-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel cdrom-core-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel cdrom-core-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel crc-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel crc-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel crypto-dm-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel crypto-dm-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel crypto-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel crypto-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel event-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel event-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel ext4-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel ext4-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel f2fs-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel f2fs-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel fat-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel fat-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel fb-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel fb-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel fuse-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel fuse-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel input-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel input-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel ipv6-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel ipv6-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel isofs-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel isofs-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel jffs2-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel jffs2-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel jfs-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel jfs-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel kernel-image-5.10.0-26-marvell-di | 5.10.197-1 | armel kernel-image-5.10.0-29-marvell-di | 5.10.216-1 | armel leds-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel leds-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel linux-headers-5.10.0-26-marvell | 5.10.197-1 | armel linux-headers-5.10.0-26-rpi | 5.10.197-1 | armel linux-headers-5.10.0-29-marvell | 5.10.216-1 | armel linux-headers-5.10.0-29-rpi | 5.10.216-1 | armel linux-image-5.10.0-26-marvell | 5.10.197-1 | armel linux-image-5.10.0-26-marvell-dbg | 5.10.197-1 | armel linux-image-5.10.0-26-rpi | 5.10.197-1 | armel linux-image-5.10.0-26-rpi-dbg | 5.10.197-1 | armel linux-image-5.10.0-29-marvell | 5.10.216-1 | armel linux-image-5.10.0-29-marvell-dbg | 5.10.216-1 | armel linux-image-5.10.0-29-rpi | 5.10.216-1 | armel linux-image-5.10.0-29-rpi-dbg | 5.10.216-1 | armel loop-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel loop-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel md-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel md-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel minix-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel minix-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel mmc-core-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel mmc-core-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel mmc-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel mmc-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel mouse-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel mouse-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel mtd-core-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel mtd-core-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel mtd-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel mtd-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel multipath-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel multipath-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel nbd-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel nbd-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel nic-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel nic-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel nic-shared-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel nic-shared-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel nic-usb-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel nic-usb-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel ppp-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel ppp-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel sata-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel sata-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel scsi-core-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel scsi-core-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel squashfs-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel squashfs-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel udf-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel udf-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel uinput-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel uinput-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel usb-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel usb-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel usb-serial-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel usb-serial-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel usb-storage-modules-5.10.0-26-marvell-di | 5.10.197-1 | armel usb-storage-modules-5.10.0-29-marvell-di | 5.10.216-1 | armel ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 29 Jun 2024 09:45:15 -0000] [ftpmaster: Archive Administrator] Removed the following packages from oldstable: ata-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf ata-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf btrfs-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf btrfs-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf cdrom-core-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf cdrom-core-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf crc-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf crc-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf crypto-dm-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf crypto-dm-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf crypto-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf crypto-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf efi-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf efi-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf event-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf event-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf ext4-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf ext4-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf f2fs-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf f2fs-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf fat-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf fat-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf fb-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf fb-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf fuse-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf fuse-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf i2c-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf i2c-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf input-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf input-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf isofs-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf isofs-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf jfs-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf jfs-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf kernel-image-5.10.0-26-armmp-di | 5.10.197-1 | armhf kernel-image-5.10.0-29-armmp-di | 5.10.216-1 | armhf leds-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf leds-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf linux-headers-5.10.0-26-armmp | 5.10.197-1 | armhf linux-headers-5.10.0-26-armmp-lpae | 5.10.197-1 | armhf linux-headers-5.10.0-26-rt-armmp | 5.10.197-1 | armhf linux-headers-5.10.0-29-armmp | 5.10.216-1 | armhf linux-headers-5.10.0-29-armmp-lpae | 5.10.216-1 | armhf linux-headers-5.10.0-29-rt-armmp | 5.10.216-1 | armhf linux-image-5.10.0-26-armmp | 5.10.197-1 | armhf linux-image-5.10.0-26-armmp-dbg | 5.10.197-1 | armhf linux-image-5.10.0-26-armmp-lpae | 5.10.197-1 | armhf linux-image-5.10.0-26-armmp-lpae-dbg | 5.10.197-1 | armhf linux-image-5.10.0-26-rt-armmp | 5.10.197-1 | armhf linux-image-5.10.0-26-rt-armmp-dbg | 5.10.197-1 | armhf linux-image-5.10.0-29-armmp | 5.10.216-1 | armhf linux-image-5.10.0-29-armmp-dbg | 5.10.216-1 | armhf linux-image-5.10.0-29-armmp-lpae | 5.10.216-1 | armhf linux-image-5.10.0-29-armmp-lpae-dbg | 5.10.216-1 | armhf linux-image-5.10.0-29-rt-armmp | 5.10.216-1 | armhf linux-image-5.10.0-29-rt-armmp-dbg | 5.10.216-1 | armhf loop-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf loop-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf md-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf md-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf mmc-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf mmc-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf mtd-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf mtd-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf multipath-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf multipath-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf nbd-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf nbd-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf nic-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf nic-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf nic-shared-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf nic-shared-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf nic-usb-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf nic-usb-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf nic-wireless-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf nic-wireless-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf pata-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf pata-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf ppp-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf ppp-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf sata-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf sata-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf scsi-core-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf scsi-core-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf scsi-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf scsi-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf scsi-nic-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf scsi-nic-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf squashfs-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf squashfs-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf udf-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf udf-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf uinput-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf uinput-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf usb-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf usb-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf usb-serial-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf usb-serial-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf usb-storage-modules-5.10.0-26-armmp-di | 5.10.197-1 | armhf usb-storage-modules-5.10.0-29-armmp-di | 5.10.216-1 | armhf ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 29 Jun 2024 09:45:32 -0000] [ftpmaster: Archive Administrator] Removed the following packages from oldstable: linux-headers-5.10.0-26-686 | 5.10.197-1 | i386 linux-headers-5.10.0-26-686-pae | 5.10.197-1 | i386 linux-headers-5.10.0-26-rt-686-pae | 5.10.197-1 | i386 linux-headers-5.10.0-29-686 | 5.10.216-1 | i386 linux-headers-5.10.0-29-686-pae | 5.10.216-1 | i386 linux-headers-5.10.0-29-rt-686-pae | 5.10.216-1 | i386 linux-image-5.10.0-26-686-dbg | 5.10.197-1 | i386 linux-image-5.10.0-26-686-pae-dbg | 5.10.197-1 | i386 linux-image-5.10.0-26-686-pae-unsigned | 5.10.197-1 | i386 linux-image-5.10.0-26-686-unsigned | 5.10.197-1 | i386 linux-image-5.10.0-26-rt-686-pae-dbg | 5.10.197-1 | i386 linux-image-5.10.0-26-rt-686-pae-unsigned | 5.10.197-1 | i386 linux-image-5.10.0-29-686-dbg | 5.10.216-1 | i386 linux-image-5.10.0-29-686-pae-dbg | 5.10.216-1 | i386 linux-image-5.10.0-29-686-pae-unsigned | 5.10.216-1 | i386 linux-image-5.10.0-29-686-unsigned | 5.10.216-1 | i386 linux-image-5.10.0-29-rt-686-pae-dbg | 5.10.216-1 | i386 linux-image-5.10.0-29-rt-686-pae-unsigned | 5.10.216-1 | i386 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 29 Jun 2024 09:45:47 -0000] [ftpmaster: Archive Administrator] Removed the following packages from oldstable: affs-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el affs-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el ata-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el ata-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el btrfs-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el btrfs-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el cdrom-core-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el cdrom-core-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el crc-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el crc-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el crypto-dm-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el crypto-dm-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el crypto-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el crypto-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el event-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el event-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el ext4-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el ext4-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el f2fs-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el f2fs-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el fat-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el fat-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el fb-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el fb-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el fuse-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el fuse-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el i2c-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el i2c-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el input-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el input-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el isofs-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el isofs-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el jfs-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el jfs-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el kernel-image-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el kernel-image-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el loop-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el loop-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el md-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el md-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el minix-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el minix-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el mmc-core-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el mmc-core-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el mmc-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el mmc-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el mouse-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el mouse-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el mtd-core-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el mtd-core-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el multipath-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el multipath-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el nbd-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el nbd-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el nic-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el nic-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el nic-shared-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el nic-shared-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el nic-usb-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el nic-usb-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el nic-wireless-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el nic-wireless-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el pata-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el pata-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el ppp-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el ppp-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el sata-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el sata-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el scsi-core-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el scsi-core-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el scsi-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el scsi-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el scsi-nic-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el scsi-nic-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el sound-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el sound-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el squashfs-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el squashfs-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el udf-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el udf-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el usb-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el usb-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el usb-serial-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el usb-serial-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el usb-storage-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el usb-storage-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el xfs-modules-5.10.0-26-5kc-malta-di | 5.10.197-1 | mips64el xfs-modules-5.10.0-29-5kc-malta-di | 5.10.216-1 | mips64el ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 29 Jun 2024 09:46:05 -0000] [ftpmaster: Archive Administrator] Removed the following packages from oldstable: affs-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel affs-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel affs-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel affs-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel ata-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel ata-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel btrfs-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel btrfs-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel btrfs-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel btrfs-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel cdrom-core-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel cdrom-core-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel cdrom-core-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel cdrom-core-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel crc-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel crc-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel crc-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel crc-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel crypto-dm-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel crypto-dm-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel crypto-dm-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel crypto-dm-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel crypto-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel crypto-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel crypto-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel crypto-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel event-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel event-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel event-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel event-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel ext4-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel ext4-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel ext4-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel ext4-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel f2fs-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel f2fs-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel f2fs-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel f2fs-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel fat-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel fat-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel fat-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel fat-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel fb-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel fb-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel firewire-core-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel firewire-core-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel fuse-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel fuse-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel fuse-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel fuse-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel input-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel input-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel input-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel input-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel isofs-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel isofs-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel isofs-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel isofs-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel jfs-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel jfs-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel jfs-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel jfs-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel kernel-image-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel kernel-image-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel kernel-image-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel kernel-image-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel linux-headers-5.10.0-26-5kc-malta | 5.10.197-1 | mips64el, mipsel linux-headers-5.10.0-26-loongson-3 | 5.10.197-1 | mips64el, mipsel linux-headers-5.10.0-26-octeon | 5.10.197-1 | mips64el, mipsel linux-headers-5.10.0-29-5kc-malta | 5.10.216-1 | mips64el, mipsel linux-headers-5.10.0-29-loongson-3 | 5.10.216-1 | mips64el, mipsel linux-headers-5.10.0-29-octeon | 5.10.216-1 | mips64el, mipsel linux-image-5.10.0-26-5kc-malta | 5.10.197-1 | mips64el, mipsel linux-image-5.10.0-26-5kc-malta-dbg | 5.10.197-1 | mips64el, mipsel linux-image-5.10.0-26-loongson-3 | 5.10.197-1 | mips64el, mipsel linux-image-5.10.0-26-loongson-3-dbg | 5.10.197-1 | mips64el, mipsel linux-image-5.10.0-26-octeon | 5.10.197-1 | mips64el, mipsel linux-image-5.10.0-26-octeon-dbg | 5.10.197-1 | mips64el, mipsel linux-image-5.10.0-29-5kc-malta | 5.10.216-1 | mips64el, mipsel linux-image-5.10.0-29-5kc-malta-dbg | 5.10.216-1 | mips64el, mipsel linux-image-5.10.0-29-loongson-3 | 5.10.216-1 | mips64el, mipsel linux-image-5.10.0-29-loongson-3-dbg | 5.10.216-1 | mips64el, mipsel linux-image-5.10.0-29-octeon | 5.10.216-1 | mips64el, mipsel linux-image-5.10.0-29-octeon-dbg | 5.10.216-1 | mips64el, mipsel loop-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel loop-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel loop-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel loop-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel md-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel md-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel md-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel md-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel minix-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel minix-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel minix-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel minix-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel mtd-core-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel mtd-core-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel multipath-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel multipath-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel multipath-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel multipath-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel nbd-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel nbd-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel nbd-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel nbd-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel nfs-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel nfs-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel nic-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel nic-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel nic-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel nic-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel nic-shared-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel nic-shared-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel nic-shared-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel nic-shared-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel nic-usb-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel nic-usb-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel nic-usb-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel nic-usb-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel nic-wireless-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel nic-wireless-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel nic-wireless-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel nic-wireless-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel pata-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel pata-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel pata-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel pata-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel ppp-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel ppp-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel ppp-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel ppp-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel rtc-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel rtc-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel sata-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel sata-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel sata-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel sata-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel scsi-core-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel scsi-core-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel scsi-core-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel scsi-core-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel scsi-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel scsi-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel scsi-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel scsi-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel scsi-nic-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel scsi-nic-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel scsi-nic-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel scsi-nic-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel sound-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel sound-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel sound-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel sound-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel speakup-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel speakup-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel squashfs-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel squashfs-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel squashfs-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel squashfs-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel udf-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel udf-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel udf-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel udf-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel usb-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel usb-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel usb-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel usb-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel usb-serial-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel usb-serial-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel usb-serial-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel usb-serial-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel usb-storage-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel usb-storage-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel usb-storage-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel usb-storage-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel xfs-modules-5.10.0-26-loongson-3-di | 5.10.197-1 | mips64el, mipsel xfs-modules-5.10.0-26-octeon-di | 5.10.197-1 | mips64el, mipsel xfs-modules-5.10.0-29-loongson-3-di | 5.10.216-1 | mips64el, mipsel xfs-modules-5.10.0-29-octeon-di | 5.10.216-1 | mips64el, mipsel ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 29 Jun 2024 09:46:31 -0000] [ftpmaster: Archive Administrator] Removed the following packages from oldstable: acpi-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 acpi-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 ata-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 ata-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 btrfs-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 btrfs-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 cdrom-core-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 cdrom-core-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 crc-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 crc-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 crypto-dm-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 crypto-dm-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 crypto-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 crypto-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 efi-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 efi-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 event-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 event-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 ext4-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 ext4-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 f2fs-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 f2fs-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 fat-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 fat-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 fb-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 fb-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 firewire-core-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 firewire-core-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 fuse-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 fuse-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 i2c-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 i2c-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 input-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 input-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 isofs-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 isofs-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 jfs-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 jfs-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 kernel-image-5.10.0-26-amd64-di | 5.10.197-1 | amd64 kernel-image-5.10.0-29-amd64-di | 5.10.216-1 | amd64 linux-image-5.10.0-26-amd64 | 5.10.197-1 | amd64 linux-image-5.10.0-26-cloud-amd64 | 5.10.197-1 | amd64 linux-image-5.10.0-26-rt-amd64 | 5.10.197-1 | amd64 linux-image-5.10.0-29-amd64 | 5.10.216-1 | amd64 linux-image-5.10.0-29-cloud-amd64 | 5.10.216-1 | amd64 linux-image-5.10.0-29-rt-amd64 | 5.10.216-1 | amd64 loop-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 loop-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 md-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 md-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 mmc-core-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 mmc-core-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 mmc-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 mmc-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 mouse-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 mouse-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 mtd-core-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 mtd-core-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 multipath-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 multipath-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 nbd-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 nbd-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 nic-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 nic-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 nic-pcmcia-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 nic-pcmcia-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 nic-shared-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 nic-shared-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 nic-usb-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 nic-usb-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 nic-wireless-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 nic-wireless-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 pata-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 pata-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 pcmcia-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 pcmcia-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 pcmcia-storage-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 pcmcia-storage-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 ppp-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 ppp-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 rfkill-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 rfkill-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 sata-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 sata-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 scsi-core-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 scsi-core-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 scsi-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 scsi-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 scsi-nic-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 scsi-nic-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 serial-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 serial-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 sound-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 sound-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 speakup-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 speakup-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 squashfs-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 squashfs-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 udf-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 udf-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 uinput-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 uinput-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 usb-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 usb-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 usb-serial-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 usb-serial-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 usb-storage-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 usb-storage-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 xfs-modules-5.10.0-26-amd64-di | 5.10.197-1 | amd64 xfs-modules-5.10.0-29-amd64-di | 5.10.216-1 | amd64 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux-signed-amd64) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 29 Jun 2024 09:46:44 -0000] [ftpmaster: Archive Administrator] Removed the following packages from oldstable: ata-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 ata-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 btrfs-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 btrfs-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 cdrom-core-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 cdrom-core-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 crc-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 crc-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 crypto-dm-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 crypto-dm-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 crypto-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 crypto-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 efi-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 efi-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 event-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 event-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 ext4-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 ext4-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 f2fs-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 f2fs-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 fat-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 fat-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 fb-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 fb-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 fuse-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 fuse-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 i2c-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 i2c-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 input-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 input-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 isofs-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 isofs-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 jfs-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 jfs-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 kernel-image-5.10.0-26-arm64-di | 5.10.197-1 | arm64 kernel-image-5.10.0-29-arm64-di | 5.10.216-1 | arm64 leds-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 leds-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 linux-image-5.10.0-26-arm64 | 5.10.197-1 | arm64 linux-image-5.10.0-26-cloud-arm64 | 5.10.197-1 | arm64 linux-image-5.10.0-26-rt-arm64 | 5.10.197-1 | arm64 linux-image-5.10.0-29-arm64 | 5.10.216-1 | arm64 linux-image-5.10.0-29-cloud-arm64 | 5.10.216-1 | arm64 linux-image-5.10.0-29-rt-arm64 | 5.10.216-1 | arm64 loop-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 loop-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 md-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 md-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 mmc-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 mmc-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 mtd-core-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 mtd-core-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 multipath-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 multipath-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 nbd-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 nbd-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 nic-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 nic-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 nic-shared-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 nic-shared-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 nic-usb-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 nic-usb-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 nic-wireless-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 nic-wireless-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 ppp-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 ppp-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 sata-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 sata-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 scsi-core-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 scsi-core-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 scsi-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 scsi-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 scsi-nic-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 scsi-nic-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 squashfs-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 squashfs-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 udf-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 udf-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 uinput-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 uinput-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 usb-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 usb-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 usb-serial-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 usb-serial-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 usb-storage-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 usb-storage-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 xfs-modules-5.10.0-26-arm64-di | 5.10.197-1 | arm64 xfs-modules-5.10.0-29-arm64-di | 5.10.216-1 | arm64 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux-signed-arm64) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 29 Jun 2024 09:47:05 -0000] [ftpmaster: Archive Administrator] Removed the following packages from oldstable: acpi-modules-5.10.0-26-686-di | 5.10.197-1 | i386 acpi-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 acpi-modules-5.10.0-29-686-di | 5.10.216-1 | i386 acpi-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 ata-modules-5.10.0-26-686-di | 5.10.197-1 | i386 ata-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 ata-modules-5.10.0-29-686-di | 5.10.216-1 | i386 ata-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 btrfs-modules-5.10.0-26-686-di | 5.10.197-1 | i386 btrfs-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 btrfs-modules-5.10.0-29-686-di | 5.10.216-1 | i386 btrfs-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 cdrom-core-modules-5.10.0-26-686-di | 5.10.197-1 | i386 cdrom-core-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 cdrom-core-modules-5.10.0-29-686-di | 5.10.216-1 | i386 cdrom-core-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 crc-modules-5.10.0-26-686-di | 5.10.197-1 | i386 crc-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 crc-modules-5.10.0-29-686-di | 5.10.216-1 | i386 crc-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 crypto-dm-modules-5.10.0-26-686-di | 5.10.197-1 | i386 crypto-dm-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 crypto-dm-modules-5.10.0-29-686-di | 5.10.216-1 | i386 crypto-dm-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 crypto-modules-5.10.0-26-686-di | 5.10.197-1 | i386 crypto-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 crypto-modules-5.10.0-29-686-di | 5.10.216-1 | i386 crypto-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 efi-modules-5.10.0-26-686-di | 5.10.197-1 | i386 efi-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 efi-modules-5.10.0-29-686-di | 5.10.216-1 | i386 efi-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 event-modules-5.10.0-26-686-di | 5.10.197-1 | i386 event-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 event-modules-5.10.0-29-686-di | 5.10.216-1 | i386 event-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 ext4-modules-5.10.0-26-686-di | 5.10.197-1 | i386 ext4-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 ext4-modules-5.10.0-29-686-di | 5.10.216-1 | i386 ext4-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 f2fs-modules-5.10.0-26-686-di | 5.10.197-1 | i386 f2fs-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 f2fs-modules-5.10.0-29-686-di | 5.10.216-1 | i386 f2fs-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 fat-modules-5.10.0-26-686-di | 5.10.197-1 | i386 fat-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 fat-modules-5.10.0-29-686-di | 5.10.216-1 | i386 fat-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 fb-modules-5.10.0-26-686-di | 5.10.197-1 | i386 fb-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 fb-modules-5.10.0-29-686-di | 5.10.216-1 | i386 fb-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 firewire-core-modules-5.10.0-26-686-di | 5.10.197-1 | i386 firewire-core-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 firewire-core-modules-5.10.0-29-686-di | 5.10.216-1 | i386 firewire-core-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 fuse-modules-5.10.0-26-686-di | 5.10.197-1 | i386 fuse-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 fuse-modules-5.10.0-29-686-di | 5.10.216-1 | i386 fuse-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 i2c-modules-5.10.0-26-686-di | 5.10.197-1 | i386 i2c-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 i2c-modules-5.10.0-29-686-di | 5.10.216-1 | i386 i2c-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 input-modules-5.10.0-26-686-di | 5.10.197-1 | i386 input-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 input-modules-5.10.0-29-686-di | 5.10.216-1 | i386 input-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 isofs-modules-5.10.0-26-686-di | 5.10.197-1 | i386 isofs-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 isofs-modules-5.10.0-29-686-di | 5.10.216-1 | i386 isofs-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 jfs-modules-5.10.0-26-686-di | 5.10.197-1 | i386 jfs-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 jfs-modules-5.10.0-29-686-di | 5.10.216-1 | i386 jfs-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 kernel-image-5.10.0-26-686-di | 5.10.197-1 | i386 kernel-image-5.10.0-26-686-pae-di | 5.10.197-1 | i386 kernel-image-5.10.0-29-686-di | 5.10.216-1 | i386 kernel-image-5.10.0-29-686-pae-di | 5.10.216-1 | i386 linux-image-5.10.0-26-686 | 5.10.197-1 | i386 linux-image-5.10.0-26-686-pae | 5.10.197-1 | i386 linux-image-5.10.0-26-rt-686-pae | 5.10.197-1 | i386 linux-image-5.10.0-29-686 | 5.10.216-1 | i386 linux-image-5.10.0-29-686-pae | 5.10.216-1 | i386 linux-image-5.10.0-29-rt-686-pae | 5.10.216-1 | i386 loop-modules-5.10.0-26-686-di | 5.10.197-1 | i386 loop-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 loop-modules-5.10.0-29-686-di | 5.10.216-1 | i386 loop-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 md-modules-5.10.0-26-686-di | 5.10.197-1 | i386 md-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 md-modules-5.10.0-29-686-di | 5.10.216-1 | i386 md-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 mmc-core-modules-5.10.0-26-686-di | 5.10.197-1 | i386 mmc-core-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 mmc-core-modules-5.10.0-29-686-di | 5.10.216-1 | i386 mmc-core-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 mmc-modules-5.10.0-26-686-di | 5.10.197-1 | i386 mmc-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 mmc-modules-5.10.0-29-686-di | 5.10.216-1 | i386 mmc-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 mouse-modules-5.10.0-26-686-di | 5.10.197-1 | i386 mouse-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 mouse-modules-5.10.0-29-686-di | 5.10.216-1 | i386 mouse-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 mtd-core-modules-5.10.0-26-686-di | 5.10.197-1 | i386 mtd-core-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 mtd-core-modules-5.10.0-29-686-di | 5.10.216-1 | i386 mtd-core-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 multipath-modules-5.10.0-26-686-di | 5.10.197-1 | i386 multipath-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 multipath-modules-5.10.0-29-686-di | 5.10.216-1 | i386 multipath-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 nbd-modules-5.10.0-26-686-di | 5.10.197-1 | i386 nbd-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 nbd-modules-5.10.0-29-686-di | 5.10.216-1 | i386 nbd-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 nic-modules-5.10.0-26-686-di | 5.10.197-1 | i386 nic-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 nic-modules-5.10.0-29-686-di | 5.10.216-1 | i386 nic-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 nic-pcmcia-modules-5.10.0-26-686-di | 5.10.197-1 | i386 nic-pcmcia-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 nic-pcmcia-modules-5.10.0-29-686-di | 5.10.216-1 | i386 nic-pcmcia-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 nic-shared-modules-5.10.0-26-686-di | 5.10.197-1 | i386 nic-shared-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 nic-shared-modules-5.10.0-29-686-di | 5.10.216-1 | i386 nic-shared-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 nic-usb-modules-5.10.0-26-686-di | 5.10.197-1 | i386 nic-usb-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 nic-usb-modules-5.10.0-29-686-di | 5.10.216-1 | i386 nic-usb-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 nic-wireless-modules-5.10.0-26-686-di | 5.10.197-1 | i386 nic-wireless-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 nic-wireless-modules-5.10.0-29-686-di | 5.10.216-1 | i386 nic-wireless-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 pata-modules-5.10.0-26-686-di | 5.10.197-1 | i386 pata-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 pata-modules-5.10.0-29-686-di | 5.10.216-1 | i386 pata-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 pcmcia-modules-5.10.0-26-686-di | 5.10.197-1 | i386 pcmcia-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 pcmcia-modules-5.10.0-29-686-di | 5.10.216-1 | i386 pcmcia-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 pcmcia-storage-modules-5.10.0-26-686-di | 5.10.197-1 | i386 pcmcia-storage-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 pcmcia-storage-modules-5.10.0-29-686-di | 5.10.216-1 | i386 pcmcia-storage-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 ppp-modules-5.10.0-26-686-di | 5.10.197-1 | i386 ppp-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 ppp-modules-5.10.0-29-686-di | 5.10.216-1 | i386 ppp-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 rfkill-modules-5.10.0-26-686-di | 5.10.197-1 | i386 rfkill-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 rfkill-modules-5.10.0-29-686-di | 5.10.216-1 | i386 rfkill-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 sata-modules-5.10.0-26-686-di | 5.10.197-1 | i386 sata-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 sata-modules-5.10.0-29-686-di | 5.10.216-1 | i386 sata-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 scsi-core-modules-5.10.0-26-686-di | 5.10.197-1 | i386 scsi-core-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 scsi-core-modules-5.10.0-29-686-di | 5.10.216-1 | i386 scsi-core-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 scsi-modules-5.10.0-26-686-di | 5.10.197-1 | i386 scsi-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 scsi-modules-5.10.0-29-686-di | 5.10.216-1 | i386 scsi-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 scsi-nic-modules-5.10.0-26-686-di | 5.10.197-1 | i386 scsi-nic-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 scsi-nic-modules-5.10.0-29-686-di | 5.10.216-1 | i386 scsi-nic-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 serial-modules-5.10.0-26-686-di | 5.10.197-1 | i386 serial-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 serial-modules-5.10.0-29-686-di | 5.10.216-1 | i386 serial-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 sound-modules-5.10.0-26-686-di | 5.10.197-1 | i386 sound-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 sound-modules-5.10.0-29-686-di | 5.10.216-1 | i386 sound-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 speakup-modules-5.10.0-26-686-di | 5.10.197-1 | i386 speakup-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 speakup-modules-5.10.0-29-686-di | 5.10.216-1 | i386 speakup-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 squashfs-modules-5.10.0-26-686-di | 5.10.197-1 | i386 squashfs-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 squashfs-modules-5.10.0-29-686-di | 5.10.216-1 | i386 squashfs-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 udf-modules-5.10.0-26-686-di | 5.10.197-1 | i386 udf-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 udf-modules-5.10.0-29-686-di | 5.10.216-1 | i386 udf-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 uinput-modules-5.10.0-26-686-di | 5.10.197-1 | i386 uinput-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 uinput-modules-5.10.0-29-686-di | 5.10.216-1 | i386 uinput-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 usb-modules-5.10.0-26-686-di | 5.10.197-1 | i386 usb-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 usb-modules-5.10.0-29-686-di | 5.10.216-1 | i386 usb-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 usb-serial-modules-5.10.0-26-686-di | 5.10.197-1 | i386 usb-serial-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 usb-serial-modules-5.10.0-29-686-di | 5.10.216-1 | i386 usb-serial-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 usb-storage-modules-5.10.0-26-686-di | 5.10.197-1 | i386 usb-storage-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 usb-storage-modules-5.10.0-29-686-di | 5.10.216-1 | i386 usb-storage-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 xfs-modules-5.10.0-26-686-di | 5.10.197-1 | i386 xfs-modules-5.10.0-26-686-pae-di | 5.10.197-1 | i386 xfs-modules-5.10.0-29-686-di | 5.10.216-1 | i386 xfs-modules-5.10.0-29-686-pae-di | 5.10.216-1 | i386 ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux-signed-i386) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 29 Jun 2024 09:47:33 -0000] [ftpmaster: Archive Administrator] Removed the following packages from oldstable: linux-headers-5.10.0-26-common | 5.10.197-1 | all linux-headers-5.10.0-26-common-rt | 5.10.197-1 | all linux-headers-5.10.0-29-common | 5.10.216-1 | all linux-headers-5.10.0-29-common-rt | 5.10.216-1 | all linux-support-5.10.0-26 | 5.10.197-1 | all linux-support-5.10.0-29 | 5.10.216-1 | all ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux - based on source metadata) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 29 Jun 2024 09:34:48 -0000] [ftpmaster: Archive Administrator] Removed the following packages from bullseye: snort | 2.9.15.1-5 | source, amd64, arm64, armel, armhf, i386, mips64el, mipsel, ppc64el snort-common | 2.9.15.1-5 | all snort-common-libraries | 2.9.15.1-5 | amd64, arm64, armel, armhf, i386, mips64el, mipsel, ppc64el snort-doc | 2.9.15.1-5 | all snort-rules-default | 2.9.15.1-5 | all Closed bugs: 1063736 ------------------- Reason ------------------- RoQA; security issues, unmaintained ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 29 Jun 2024 09:35:32 -0000] [ftpmaster: Archive Administrator] Removed the following packages from bullseye: salt | 3002.6+dfsg1-4+deb11u1 | source salt-api | 3002.6+dfsg1-4+deb11u1 | all salt-cloud | 3002.6+dfsg1-4+deb11u1 | all salt-common | 3002.6+dfsg1-4+deb11u1 | all salt-doc | 3002.6+dfsg1-4+deb11u1 | all salt-master | 3002.6+dfsg1-4+deb11u1 | all salt-minion | 3002.6+dfsg1-4+deb11u1 | all salt-proxy | 3002.6+dfsg1-4+deb11u1 | all salt-ssh | 3002.6+dfsg1-4+deb11u1 | all salt-syndic | 3002.6+dfsg1-4+deb11u1 | all Closed bugs: 1070175 ------------------- Reason ------------------- RoST; unsupportable; unmaintained ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 29 Jun 2024 09:35:54 -0000] [ftpmaster: Archive Administrator] Removed the following packages from bullseye: pytest-salt-factories | 0.93.0-1 | source python3-saltfactories | 0.93.0-1 | all Closed bugs: 1070198 ------------------- Reason ------------------- RoST; only needed for to-be-removed salt ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 29 Jun 2024 09:36:16 -0000] [ftpmaster: Archive Administrator] Removed the following packages from bullseye: pytest-testinfra | 6.1.0-1 | source python3-testinfra | 6.1.0-1 | all Closed bugs: 1070199 ------------------- Reason ------------------- RoST; only needed for to-be-removed salt ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 29 Jun 2024 09:36:41 -0000] [ftpmaster: Archive Administrator] Removed the following packages from bullseye: phppgadmin | 7.13.0+dfsg-2 | source, all Closed bugs: 1072589 ------------------- Reason ------------------- RoM; security issues in bullseye ---------------------------------------------- ========================================================================= allegro5 (2:5.2.6.0-3+deb11u1) bullseye; urgency=medium . * CVE-2021-36489 - Buffer Overflow vulnerability in Allegro through 5.2.6 allows attackers to cause a denial of service via crafted PCX/TGA/BMP files to allegro_image addon. amavisd-new (1:2.11.1-5+deb11u1) oldstable; urgency=medium . * CVE-2024-28054: Handle multiple boundary parameters that contain conflicting values. apache2 (2.4.59-1~deb11u1) bullseye-security; urgency=medium . * New upstream version 2.4.58 (Closes: CVE-2023-31122, CVE-2023-43622, CVE-2023-45802) * Drop 2.4.56-regression patches * New upstream version 2.4.59 (Closes: #1068412 CVE-2024-27316 CVE-2024-24795 CVE-2023-38709) * Install NOTICE files * Update test framework * Refresh patches apache2 (2.4.58-1) unstable; urgency=medium . [ Bas Couwenberg ] * Provide dh-sequence-apache2 (Closes: #1050870) . [ Yadd ] * Drop dependency to obsolete lsb-base * New upstream version 2.4.58 (Closes: CVE-2023-31122, CVE-2023-43622, CVE-2023-45802) * Refresh patches apache2 (2.4.57-3) unstable; urgency=medium . * Update a2enmod to drop given/when (Closes: #1050458) * Restore changes not included in Bookworm (set -e in apache2ctl) apache2 (2.4.57-2) unstable; urgency=medium . * Revert debian/* changes (Bookworm freeze) apache2 (2.4.57-1) unstable; urgency=medium . * New upstream version 2.4.57 * Drop 2.4.56-regression patches apache2 (2.4.56-2) unstable; urgency=medium . * Fix regression in mod_rewrite introduced in version 2.4.56 (Closes: #1033284) * Fix regression in http2 introduced by 2.4.56 (Closes: #1033408) apache2 (2.4.56-1) unstable; urgency=medium . * New upstream version (Closes: #1032476, CVE-2023-27522, CVE-2023-25690) asterisk (1:16.28.0~dfsg-0+deb11u4) bullseye-security; urgency=high . * Non-maintainer upload. * Fix CVE-2023-37457: The 'update' functionality of the PJSIP_HEADER dialplan function can exceed the available buffer space for storing the new value of a header. By doing so this can overwrite memory or cause a crash. This is not externally exploitable, unless dialplan is explicitly written to update a header based on data from an outside source. If the 'update' functionality is not used the vulnerability does not occur. * Fix CVE-2023-38703: PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C#, and Python languages. SRTP is a higher level media transport which is stacked upon a lower level media transport such as UDP and ICE. Currently a higher level transport is not synchronized with its lower level transport that may introduce a use-after-free issue. This vulnerability affects applications that have SRTP capability (`PJMEDIA_HAS_SRTP` is set) and use underlying media transport other than UDP. This vulnerability’s impact may range from unexpected application termination to control flow hijack/memory corruption. * Fix CVE-2023-49294: It is possible to read any arbitrary file even when the `live_dangerously` option is not enabled. * Fix CVE-2023-49786: Asterisk is susceptible to a DoS due to a race condition in the hello handshake phase of the DTLS protocol when handling DTLS-SRTP for media setup. This attack can be done continuously, thus denying new DTLS-SRTP encrypted calls during the attack. Abuse of this vulnerability may lead to a massive Denial of Service on vulnerable Asterisk servers for calls that rely on DTLS-SRTP. atril (1.24.0-1+deb11u1) bullseye-security; urgency=medium . * CVE-2023-52076 (Closes: #1061522) * Disable support for comics, vulnerable to CVE-2023-51698 (Closes: #1060751) bart (0.6.00-3+deb11u1) bullseye; urgency=medium . * Team upload. * Cherry-pick 0004-relax-failing-unit-test.patch from release 0.7.00-1. Fixes FTBFS bug. Closes: #1026061. bart-cuda (0.6.00-1+deb11u1) bullseye; urgency=medium . * Team upload. * Cherry-pick relax-failing-unit-test.patch from release 0.7.00-1. Fixes FTBFS bug. Closes: #1070757. base-files (11.1+deb11u10) bullseye; urgency=medium . * Change /etc/debian_version to 11.10, for Debian 11.10 point release. bind9 (1:9.16.48-1) bullseye-security; urgency=high . * New upstream version 9.16.48 - CVE-2023-4408: Parsing large DNS messages may cause excessive CPU load - CVE-2023-5517: Querying RFC 1918 reverse zones may cause an assertion failure when "nxdomain-redirect" is enabled - CVE-2023-5679: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution - CVE-2023-6516: Specific recursive query patterns may lead to an out-of-memory condition - CVE-2023-50387: KeyTrap - Extreme CPU consumption in DNSSEC validator - CVE-2023-50868: Preparing an NSEC3 closest encloser proof can exhaust CPU resources * Update patches from debian/9.16 branch - Disable treat-warnings-as-errors in sphinx-build - Remove the reference to OPTIONS.md - it breaks build on Debian stretch cacti (1.2.16+ds1-2+deb11u3) bullseye-security; urgency=high . * Non-maintainer upload by the LTS Security Team. * Fix patch for CVE-2023-39513. * Backport security patches: CVE-2023-39360, CVE-2023-49084, CVE-2023-49085, CVE-2023-49086, CVE-2023-49088 (Closes: #1059254) cloud-init-22.4.2 (22.4.2-2~deb11u1) bullseye; urgency=medium . * Rename package to cloud-init-22.4.2 for bullseye-lts composer (2.0.9-2+deb11u4) bullseye-security; urgency=medium . * Adapt test before calling fromShellCommandline (Closes: #1073931) composer (2.0.9-2+deb11u3) bullseye-security; urgency=medium . * Include security fixes from 2.7.7 - Multiple command injections via malicious git/hg branch names (GHSA-v9qv-c7wm-wgmf) [CVE-2024-35242] (Closes: #1073126) - Command injection via malicious git branch name (GHSA-47f6-5gq3-vx9c) [CVE-2024-35241] (Closes: #1073125) composer (2.0.9-2+deb11u2) bullseye; urgency=medium . [ David Prévot ] * Force system dependencies loading * Import Pcre . [ Bastien Roucariès ] * Merge pull request from GHSA-7c6p-848j-wh5h [CVE-2024-24821] (Closes: #1063603) cpu (1.4.3-14~deb11u1) bullseye; urgency=medium . * QA upload. * Rebuild for bullseye. . cpu (1.4.3-14~deb12u1) bookworm; urgency=medium . * QA upload. * Rebuild for bookworm. . cpu (1.4.3-14) unstable; urgency=medium . * QA upload. * Actually provide a definition of globalLdap. (Closes: #1067439) * Add smoke test. curl (7.74.0-1.3+deb11u12) bullseye; urgency=medium . * Team upload. * Import patch to fix CVE-2024-2398: Memory leak when HTTP/2 server push is aborted. * d/p/CVE-2024-2398.patch: Backport patch. dav1d (0.7.1-3+deb11u1) bullseye-security; urgency=medium . * CVE-2024-1580 (Closes: #1064310) debian-installer (20210731+deb11u11) bullseye; urgency=medium . * Bump Linux kernel ABI to 5.10.0-30. debian-installer-netboot-images (20210731+deb11u11) bullseye; urgency=medium . * Update to 20210731+deb11u11, from bullseye-proposed-updates. distro-info-data (0.51+deb11u6) bullseye; urgency=medium . * Update data to 0.61: - Declare LTS and ELTS intentions for bullseye and bookworm - debian: Fix LTS EOL date for bullseye - debian.csv: Fix EOL date for 2.2 - Add Ubuntu 24.10 "Oracular Oriole" (LP: #2064136) django-mailman3 (1.3.5-2+deb11u1) bullseye; urgency=medium . * d/p/0001: Fix archiving issues due to nullbytes in message body (Closes: #1033256) dns-root-data (2024041801~deb11u1) bullseye; urgency=medium . * Rebuild for bullseye. (See #1072035.) dns-root-data (2023010101) unstable; urgency=medium . * merge current root hints and signatures (same contents as before) * d/copyright: bump to 2023 dns-root-data (2022120101) unstable; urgency=medium . * Updated upstream root data (same contents as before) * d/copyright: update for 2022 * Standards-Version: bump to 4.6.1 (no changes needed) edk2 (2020.11-2+deb11u2) bullseye-security; urgency=medium . * Disable the built-in Shell when SecureBoot is enabled, CVE-2023-48733. Thanks to Mate Kukri. LP: #2040137. - Backport support for GetSetupMode() and IsSecureBootEnabled(): + 0001-SecurityPkg-Create-SecureBootVariableLib.patch + 0002-ArmVirtPkg-add-SecureBootVariableLib-class-resolutio.patch + 0003-OvmfPkg-add-SecureBootVariableLib-class-resolution.patch + 0004-SecurityPkg-SecureBootVariableLib-Added-newly-suppor.patch + 0005-EmulatorPkg-add-SecureBootVariableLib-class-resoluti.patch - Disable the built-in Shell when SecureBoot is enabled: + Disable-the-Shell-when-SecureBoot-is-enabled.patch - d/tests: Drop the boot-to-shell tests for images w/ Secure Boot active. emacs (1:27.1+1-3.1+deb11u4) bullseye; urgency=high . * Fix memory leak in patch for CVE-2022-48337 (Closes: #1031888). . emacs (1:27.1+1-3.1+deb11u3) bullseye; urgency=high . * Fix CVE-2024-30203, CVE-2024-30204 & CVE-2024-30205 (Closes: #1067630). . emacs (1:27.1+1-3.1+deb11u2) bullseye-security; urgency=medium . * CVE-2022-48337 CVE-2022-48338 CVE-2022-48339 (Closes: #1031730) emacs (1:27.1+1-3.1+deb11u3) bullseye; urgency=high . * Fix CVE-2024-30203, CVE-2024-30204 & CVE-2024-30205 (Closes: #1067630). . emacs (1:27.1+1-3.1+deb11u2) bullseye-security; urgency=medium . * CVE-2022-48337 CVE-2022-48338 CVE-2022-48339 (Closes: #1031730) emacs (1:27.1+1-3.1+deb11u2) bullseye-security; urgency=medium . * CVE-2022-48337 CVE-2022-48338 CVE-2022-48339 (Closes: #1031730) engrampa (1.24.1-1+deb11u1) bullseye-security; urgency=medium . * debian/patches: + CVE-2023-52138: Add 0006_use-unar-instead-of-cpio-for-CPIO-archives.patch. Use unar instead of cpio for CPIO archives. (Closes: #1063494). firefox-esr (115.12.0esr-1~deb11u1) bullseye-security; urgency=medium . * New upstream release. * Fixes for mfsa2024-26, also known as: CVE-2024-5702, CVE-2024-5688, CVE-2024-5690, CVE-2024-5691, CVE-2024-5693, CVE-2024-5696, CVE-2024-5700. firefox-esr (115.11.0esr-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2024-22, also known as: CVE-2024-4367, CVE-2024-4767, CVE-2024-4768, CVE-2024-4769, CVE-2024-4770, CVE-2024-4777. firefox-esr (115.11.0esr-1~deb12u1) bookworm-security; urgency=medium . * New upstream release. * Fixes for mfsa2024-22, also known as: CVE-2024-4367, CVE-2024-4767, CVE-2024-4768, CVE-2024-4769, CVE-2024-4770, CVE-2024-4777. firefox-esr (115.11.0esr-1~deb11u1) bullseye-security; urgency=medium . * New upstream release. * Fixes for mfsa2024-22, also known as: CVE-2024-4367, CVE-2024-4767, CVE-2024-4768, CVE-2024-4769, CVE-2024-4770, CVE-2024-4777. firefox-esr (115.10.0esr-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2024-19, also known as: CVE-2024-3852, CVE-2024-3854, CVE-2024-3857, CVE-2024-2609, CVE-2024-3859, CVE-2024-3861, CVE-2024-3302, CVE-2024-3864. firefox-esr (115.10.0esr-1~deb12u1) bookworm-security; urgency=medium . * New upstream release. * Fixes for mfsa2024-19, also known as: CVE-2024-3852, CVE-2024-3854, CVE-2024-3857, CVE-2024-2609, CVE-2024-3859, CVE-2024-3861, CVE-2024-3302, CVE-2024-3864. firefox-esr (115.10.0esr-1~deb11u1) bullseye-security; urgency=medium . * New upstream release. * Fixes for mfsa2024-19, also known as: CVE-2024-3852, CVE-2024-3854, CVE-2024-3857, CVE-2024-2609, CVE-2024-3859, CVE-2024-3861, CVE-2024-3302, CVE-2024-3864. firefox-esr (115.9.1esr-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2024-16, also known as CVE-2024-29944. firefox-esr (115.9.1esr-1~deb12u1) bookworm-security; urgency=medium . * New upstream release. * Fixes for mfsa2024-16, also known as CVE-2024-29944. . * debian/control*, debian/rules: Undo workaround for bug 1052002. firefox-esr (115.9.1esr-1~deb11u1) bullseye-security; urgency=medium . * New upstream release. * Fixes for mfsa2024-16, also known as CVE-2024-29944. . * debian/control*, debian/rules: Undo workaround for bug 1052002. firefox-esr (115.9.0esr-2) unstable; urgency=medium . * debian/control*, debian/rules: Undo workaround for bug 1052002. firefox-esr (115.9.0esr-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2024-13, also known as: CVE-2024-0743, CVE-2024-2607, CVE-2024-2608, CVE-2024-2616, CVE-2023-5388, CVE-2024-2610, CVE-2024-2611, CVE-2024-2612, CVE-2024-2614. firefox-esr (115.9.0esr-1~deb12u1) bookworm-security; urgency=medium . * New upstream release. * Fixes for mfsa2024-13, also known as: CVE-2024-0743, CVE-2024-2607, CVE-2024-2608, CVE-2024-2616, CVE-2023-5388, CVE-2024-2610, CVE-2024-2611, CVE-2024-2612, CVE-2024-2614. firefox-esr (115.9.0esr-1~deb11u1) bullseye-security; urgency=medium . * New upstream release. * Fixes for mfsa2024-13, also known as: CVE-2024-0743, CVE-2024-2607, CVE-2024-2608, CVE-2024-2616, CVE-2023-5388, CVE-2024-2610, CVE-2024-2611, CVE-2024-2612, CVE-2024-2614. firefox-esr (115.8.0esr-1) unstable; urgency=medium . * New upstream release. - Fixed FTBFS with python 3.12. Closes: #1061437. * Fixes for mfsa2024-06, also known as: CVE-2024-1546, CVE-2024-1547, CVE-2024-1548, CVE-2024-1549, CVE-2024-1550, CVE-2024-1551, CVE-2024-1552, CVE-2024-1553. firefox-esr (115.8.0esr-1~deb12u1) bookworm-security; urgency=medium . * New upstream release. * Fixes for mfsa2024-06, also known as: CVE-2024-1546, CVE-2024-1547, CVE-2024-1548, CVE-2024-1549, CVE-2024-1550, CVE-2024-1551, CVE-2024-1552, CVE-2024-1553. firefox-esr (115.8.0esr-1~deb11u1) bullseye-security; urgency=medium . * New upstream release. * Fixes for mfsa2024-06, also known as: CVE-2024-1546, CVE-2024-1547, CVE-2024-1548, CVE-2024-1549, CVE-2024-1550, CVE-2024-1551, CVE-2024-1552, CVE-2024-1553. firefox-esr (115.7.0esr-1) unstable; urgency=medium . * New upstream release. * Fixes for mfsa2024-02, also known as: CVE-2024-0741, CVE-2024-0742, CVE-2024-0746, CVE-2024-0747, CVE-2024-0749, CVE-2024-0750, CVE-2024-0751, CVE-2024-0753, CVE-2024-0755. firefox-esr (115.7.0esr-1~deb12u1) bookworm-security; urgency=medium . * New upstream release. * Fixes for mfsa2024-02, also known as: CVE-2024-0741, CVE-2024-0742, CVE-2024-0746, CVE-2024-0747, CVE-2024-0749, CVE-2024-0750, CVE-2024-0751, CVE-2024-0753, CVE-2024-0755. flatpak (1.10.8-0+deb11u2) bullseye-security; urgency=high . * d/p/When-starting-non-static-command-using-bwrap-use.patch, d/p/test-run-Add-a-reproducer-for-CVE-2024-32462.patch: Don't allow an executable name to be misinterpreted as a command-line option for bwrap(1). This prevents a sandbox escape where a malicious or compromised app could ask xdg-desktop-portal to generate a .desktop file with access to files outside the sandbox. (CVE-2024-32462) fontforge (1:20201107~dfsg-4+deb11u1) bullseye-security; urgency=medium . * Non-maintainer upload. * CVE-2024-25081: Spline Font command injection via crafted filenames * CVE-2024-25082: Spline Font command injection via crafted archives or compressed files * Closes: #1064967 galera-4 (26.4.18-0+deb11u1) bullseye; urgency=medium . * Switch to upstream aware DEP-14 branch structure in gbp.conf * New upstream release 26.4.18. Includes multiple bug fixes, see https://github.com/codership/documentation/blob/master/release-notes/release-notes-galera-26.4.18.txt * For previous release details see https://github.com/codership/documentation/blob/master/release-notes/release-notes-galera-26.4.17.txt https://github.com/codership/documentation/blob/master/release-notes/release-notes-galera-26.4.16.txt https://github.com/codership/documentation/blob/master/release-notes/release-notes-galera-26.4.15.txt https://github.com/codership/documentation/blob/master/release-notes/release-notes-galera-26.4.14.txt * New upstream signing key 3D53839A70BC938B08CDD47F45460A518DA84635, verified from 26.4.17 release notes * New upstream release includes multiple Debian build and post-build test failure fixes: - Generate keys and certificates for SSL tests (Closes: #1053334) - Attempt to bind to UDP and skips tests if not available (Related: #1007954) - Fix 'uuid == WSREP_UUID_UNDEFINED' (Related: #970044) - Fix issues reported -Werror when compiling (Related: #970043) - Fix UBSAN issues (Closes: #1053183, Related: #970042) galera-4 (26.4.16-2) unstable; urgency=medium . * Format patches from Daniel Black to use DEP-3 patch tagging guidelines * Apply upstream patches from codership/galera#558, which includes multiple Debian build and post-build test failure fixes: - Attempt to bind to UDP and skips tests if not available (Related: #1007954) - Show libgalera_smm.so build output instead of sending it to /dev/null - (Related: #970043) - Generate keys and certificates for SSL tests (Closes: #1053334) - Fix 'uuid == WSREP_UUID_UNDEFINED' (Related: #970044) - Fix issues reported -Werror when compiling (Related: #970043) - Fix UBSAN issues (Closes: #1053183, Related: #970042) galera-4 (26.4.16-1) unstable; urgency=medium . [ Otto Kekäläinen ] * New upstream release 26.4.14. Includes multiple bug fixes, see https://github.com/codership/documentation/blob/master/release-notes/release-notes-galera-26.4.16.txt * For previous release details see https://github.com/codership/documentation/blob/master/release-notes/release-notes-galera-26.4.15.txt https://github.com/codership/documentation/blob/master/release-notes/release-notes-galera-26.4.14.txt * Note that 26.4.14-1~exp1 was in Debian experimental but never in unstable . [ Faustin Lammler ] * Running daemon under nobody user is not recommended (Closes: #970045) . [ Daniel Black ] * Salsa-CI: use stretch archive * Reduce galera.cache size test for Salsa galera-4 (26.4.14-1~exp1) experimental; urgency=medium . [ Otto Kekäläinen ] * New upstream release 26.4.14. Includes multiple bug fixes, see https://github.com/codership/documentation/blob/master/release-notes/release-notes-galera-26.4.14.txt . [ Faustin Lammler ] * Running daemon under nobody user is not recommended (Closes: #970045) galera-4 (26.4.13-1) unstable; urgency=medium . * New upstream release 26.4.13. Includes multiple bug fixes, see https://github.com/codership/documentation/blob/master/release-notes/release-notes-galera-26.4.13.txt * For previous release details see https://github.com/codership/documentation/blob/master/release-notes/release-notes-galera-26.4.12.txt - Arbitrator daemon garbd now has parameters -w, --workdir and WORK_DIR in garb.conf which can be used to set the working directory for garbd process, which helps to fix long standing issue from 2015 (https://github.com/codership/galera/issues/313). * Drop obsolete dependency on package lsb-release * Fix minor Lintian nags galera-4 (26.4.11-1) unstable; urgency=medium . * New upstream release 26.4.11. Includes multiple bug fixes, see https://github.com/codership/documentation/blob/master/release-notes/release-notes-galera-26.4.11.txt gdk-pixbuf (2.42.2+dfsg-1+deb11u2) bullseye; urgency=high . [ Ian Constantin ] * SECURITY UPDATE: heap memory corruption (Closes: #1071265) - debian/patches/CVE-2022-48622-*.patch: adds checks for invalid ani files to gdk-pixbuf/io-ani.c. - tests/tests-images/fail/CVE-2022-48622.ani: test file. - debian/source/include-binaries: including binary test file. - CVE-2022-48622 ghostscript (9.53.3~dfsg-7+deb11u7) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * In SAFER (default) don't allow eexec seeds other than the Type 1 standard (CVE-2023-52722) * Uniprint device - prevent string configuration changes when SAFER (CVE-2024-29510) * Bug #707691 (CVE-2024-33869) * Bug 707691 part 2 (CVE-2024-33869) * Bug #707686 (CVE-2024-33870) * OPVP device - prevent unsafe parameter change with SAFER (CVE-2024-33871) glib2.0 (2.66.8-1+deb11u4) bullseye; urgency=medium . * d/p/gdbusmessage-Clean-the-cached-arg0-when-setting-the-messa.patch: Add patch from upstream fixing a memory leak that can occur in rare situations since 2.66.8-1+deb11u2 (Closes: #1070851) glib2.0 (2.66.8-1+deb11u3) bullseye-security; urgency=high . * d/p/CVE-2024-34397/gdbusconnection-Allow-name-owners-to-have-the-syntax-of-a.patch: Relax name owner checks to avoid a regression in ibus. Fixing CVE-2024-34397 caused a regression in ibus affecting text entry with non-trivial input methods. (Closes: #1070730, #1070736, #1070743, #1070745, #1070749, #1070752) glib2.0 (2.66.8-1+deb11u2) bullseye-security; urgency=high . * d/patches: Backport GDBus fixes from 2.80.1 - If local users send signals on the D-Bus system bus that spoof a trusted sender, do not deliver them to signal subscriptions for the trusted sender's well-known bus name (CVE-2024-34397) - Fix a use-after-free when subscribing to signals with an arg0 match rule, originally from 2.79.0 and necessary to make the test for CVE-2024-34397 pass reliably - Add a local backport of g_set_str(), required by the above glibc (2.31-13+deb11u10) bullseye-security; urgency=medium . * debian/patches/local-CVE-2024-33599-nscd.patch: Fix a stack-based buffer overflow in nscd netgroup cache (CVE-2024-33599). * debian/patches/local-CVE-2024-33600-nscd.patch: Fix a null pointer dereferences in nscd after failed netgroup cache insertion (CVE-2024-33600). * debian/patches/any/local-CVE-2024-33601-33602-nscd.patch: Fix a DoS in nscd in case of memory allocation failure (CVE-2024-33601) and a memory corruption in nscd when the underlying NSS callback function does not use the buffer space to store all strings (CVE-2024-33602). glibc (2.31-13+deb11u9) bullseye-security; urgency=medium . * debian/patches/any/local-CVE-2024-2961-iso-2022-cn-ext.patch: Fix out-of-bound writes when writing escape sequence in iconv ISO-2022-CN-EXT module (CVE-2024-2961). Closes: #1069191. gnome-shell (3.38.6-1~deb11u2) bullseye-security; urgency=high . * d/p/screencast-Correct-expected-bus-name-for-streams.patch: Avoid screencast regression after fixing CVE-2024-34397. Previously, screencasting expected signals to come from the wrong D-Bus name, which only worked because there was a vulnerability in GLib that resulted in the sender being ignored. * Set urgency=high because this fixes a regression triggered by a security fix. gnutls28 (3.7.1-5+deb11u5) bullseye; urgency=medium . * Cherrypick two CVE fixes from 3.8.3: Fix assertion failure when verifying a certificate chain with a cycle of cross signatures. CVE-2024-0567 GNUTLS-SA-2024-01-09 Closes: #1061045 Fix more timing side-channel inside RSA-PSK key exchange. CVE-2024-0553 GNUTLS-SA-2024-01-14 Closes: #1061046 gross (1.0.2-4.1~deb11u1) bullseye; urgency=medium . * Non-maintainer upload. * Rebuild for bullseye. . gross (1.0.2-4.1) unstable; urgency=high . * Non-maintainer upload. * CVE-2023-52159: Stack-based buffer overflow (Closes: #1067115) gst-plugins-base1.0 (1.18.4-2+deb11u2) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * exiftag: Prevent integer overflows and out of bounds reads when handling undefined tags (CVE-2024-4453) gtkwave (3.3.104+really3.3.118-0+deb11u1) bullseye-security; urgency=medium . * Non-maintainer upload. * New upstream release. - Fixes multiple vulnerabilities: CVE-2023-32650, CVE-2023-34087, CVE-2023-34436, CVE-2023-35004, CVE-2023-35057, CVE-2023-35128, CVE-2023-35702, CVE-2023-35703, CVE-2023-35704, CVE-2023-35955, CVE-2023-35956, CVE-2023-35957, CVE-2023-35958, CVE-2023-35959, CVE-2023-35960, CVE-2023-35961, CVE-2023-35962, CVE-2023-35963, CVE-2023-35964, CVE-2023-35969, CVE-2023-35970, CVE-2023-35989, CVE-2023-35992, CVE-2023-35994, CVE-2023-35995, CVE-2023-35996, CVE-2023-35997, CVE-2023-36746, CVE-2023-36747, CVE-2023-36861, CVE-2023-36864, CVE-2023-36915, CVE-2023-36916, CVE-2023-37282, CVE-2023-37416, CVE-2023-37417, CVE-2023-37418, CVE-2023-37419, CVE-2023-37420, CVE-2023-37442, CVE-2023-37443, CVE-2023-37444, CVE-2023-37445, CVE-2023-37446, CVE-2023-37447, CVE-2023-37573, CVE-2023-37574, CVE-2023-37575, CVE-2023-37576, CVE-2023-37577, CVE-2023-37578, CVE-2023-37921, CVE-2023-37922, CVE-2023-37923, CVE-2023-38583, CVE-2023-38618, CVE-2023-38619, CVE-2023-38620, CVE-2023-38621, CVE-2023-38622, CVE-2023-38623, CVE-2023-38648, CVE-2023-38649, CVE-2023-38650, CVE-2023-38651, CVE-2023-38652, CVE-2023-38653, CVE-2023-38657, CVE-2023-39234, CVE-2023-39235, CVE-2023-39270, CVE-2023-39271, CVE-2023-39272, CVE-2023-39273, CVE-2023-39274, CVE-2023-39275, CVE-2023-39316, CVE-2023-39317, CVE-2023-39413, CVE-2023-39414, CVE-2023-39443, CVE-2023-39444 (Closes: #1060407) * Readd ghwdump for bullseye. guix (1.2.0-4+deb11u2) bullseye-security; urgency=medium . * debian/patches: guix-daemon: Protect against file descriptor escape when building fixed-output derivations (CVE-2024-27297). (Closes: #1066113) hovercraft (2.7-2+deb11u1) bullseye; urgency=medium . * QA upload. * Add smoke test. * Add Depends: python3-setuptools. (Closes: #1025655) imagemagick (8:6.9.11.60+dfsg-1.3+deb11u3) bullseye-security; urgency=medium . * Fix CVE-2021-3610 heap buffer overflow vulnerability in TIFF coder * Fix an heap buffer overflow in TIFF coder * Fix uninitialised value passing in TIFFGetField * Fix stack overflow in TIFF coder * Early exit in case of malformed TIFF file * Fix buffer overrun in TIFF coder * Fix unitialised value in TIFF coder * Fix CVE-2022-1115: Heap based overflow in TIFF coder (Closes: #1013282) * Fix uninitialised value in TIFF coders * Use salsa-ci * Fix CVE-2023-1289: A specially created SVG file loaded itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many trash files in "/tmp," resulting in a denial of service. When ImageMagick crashes, it generates a lot of trash files. These trash files can be large if the SVG file contains many render actions. In a denial of service attack, if a remote attacker uploads an SVG file of size t, ImageMagick generates files of size 103*t. If an attacker uploads a 100M SVG, the server will generate about 10G. * Fix CVE-2023-1906: A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service. * Fix CVE-2023-34151: Imagemagick was vulnerable due to an undefined behaviors of casting double to size_t in svg, mvg and other coders. (Closes: #1036999) * Fix CVE-2023-3428: A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service. * Fix CVE-2023-5341: A heap use-after-free flaw was found in coders/bmp.c imlib2 (1.7.1-2+deb11u1) bullseye; urgency=medium . * Fix CVE-2024-25447 and CVE-2024-25448 and CVE-2024-25450. A heap-buffer overflow vulnerability was discovered in imlib2 when using the tgaflip function in loader_tga.c intel-microcode (3.20240514.1~deb11u1) bullseye; urgency=medium . * Backport to Debian Bullseye * debian/control: revert non-free-firmware change . intel-microcode (3.20240514.1) unstable; urgency=medium . * New upstream microcode datafile 20240514 * Mitigations for INTEL-SA-01051 (CVE-2023-45733) Hardware logic contains race conditions in some Intel Processors may allow an authenticated user to potentially enable partial information disclosure via local access. * Mitigations for INTEL-SA-01052 (CVE-2023-46103) Sequence of processor instructions leads to unexpected behavior in Intel Core Ultra Processors may allow an authenticated user to potentially enable denial of service via local access. * Mitigations for INTEL-SA-01036 (CVE-2023-45745, CVE-2023-47855) Improper input validation in some Intel TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access. * Fix for unspecified functional issues on 4th gen and 5th gen Xeon Scalable, 12th, 13th and 14th gen Intel Core processors, as well as for Core i3 N-series processors. * Updated microcodes: sig 0x000806f8, pf_mask 0x87, 2024-02-05, rev 0x2b0005c0, size 581632 sig 0x000806f7, pf_mask 0x87, 2024-02-05, rev 0x2b0005c0 sig 0x000806f6, pf_mask 0x87, 2024-02-05, rev 0x2b0005c0 sig 0x000806f5, pf_mask 0x87, 2024-02-05, rev 0x2b0005c0 sig 0x000806f4, pf_mask 0x87, 2024-02-05, rev 0x2b0005c0 sig 0x000806f8, pf_mask 0x10, 2024-02-05, rev 0x2c000390, size 614400 sig 0x000806f6, pf_mask 0x10, 2024-02-05, rev 0x2c000390 sig 0x000806f5, pf_mask 0x10, 2024-02-05, rev 0x2c000390 sig 0x000806f4, pf_mask 0x10, 2024-02-05, rev 0x2c000390 sig 0x00090672, pf_mask 0x07, 2023-12-05, rev 0x0035, size 224256 sig 0x00090675, pf_mask 0x07, 2023-12-05, rev 0x0035 sig 0x000b06f2, pf_mask 0x07, 2023-12-05, rev 0x0035 sig 0x000b06f5, pf_mask 0x07, 2023-12-05, rev 0x0035 sig 0x000906a3, pf_mask 0x80, 2023-12-05, rev 0x0433, size 222208 sig 0x000906a4, pf_mask 0x80, 2023-12-05, rev 0x0433 sig 0x000906a4, pf_mask 0x40, 2023-12-07, rev 0x0007, size 119808 sig 0x000b0671, pf_mask 0x32, 2024-01-25, rev 0x0123, size 215040 sig 0x000b06e0, pf_mask 0x11, 2023-12-07, rev 0x0017, size 138240 sig 0x000c06f2, pf_mask 0x87, 2024-02-05, rev 0x21000230, size 552960 sig 0x000c06f1, pf_mask 0x87, 2024-02-05, rev 0x21000230 * source: update symlinks to reflect id of the latest release, 20240514 intel-microcode (3.20240312.1) unstable; urgency=medium . * New upstream microcode datafile 20240312 (closes: #1066108) - Mitigations for INTEL-SA-INTEL-SA-00972 (CVE-2023-39368): Protection mechanism failure of bus lock regulator for some Intel Processors may allow an unauthenticated user to potentially enable denial of service via network access. - Mitigations for INTEL-SA-INTEL-SA-00982 (CVE-2023-38575): Non-transparent sharing of return predictor targets between contexts in some Intel Processors may allow an authorized user to potentially enable information disclosure via local access. Affects SGX as well. - Mitigations for INTEL-SA-INTEL-SA-00898 (CVE-2023-28746), aka RFDS: Information exposure through microarchitectural state after transient execution from some register files for some Intel Atom Processors and E-cores of Intel Core Processors may allow an authenticated user to potentially enable information disclosure via local access. Enhances VERW instruction to clear stale register buffers. Affects SGX as well. Requires kernel update to be effective. - Mitigations for INTEL-SA-INTEL-SA-00960 (CVE-2023-22655), aka TECRA: Protection mechanism failure in some 3rd and 4th Generation Intel Xeon Processors when using Intel SGX or Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access. NOTE: effective only when loaded by firmware. Allows SMM firmware to attack SGX/TDX. - Mitigations for INTEL-SA-INTEL-SA-01045 (CVE-2023-43490): Incorrect calculation in microcode keying mechanism for some Intel Xeon D Processors with Intel SGX may allow a privileged user to potentially enable information disclosure via local access. * Fixes for other unspecified functional issues on many processors * Updated microcodes: sig 0x00050653, pf_mask 0x97, 2023-07-28, rev 0x1000191, size 36864 sig 0x00050656, pf_mask 0xbf, 2023-07-28, rev 0x4003605, size 38912 sig 0x00050657, pf_mask 0xbf, 2023-07-28, rev 0x5003605, size 37888 sig 0x0005065b, pf_mask 0xbf, 2023-08-03, rev 0x7002802, size 30720 sig 0x00050665, pf_mask 0x10, 2023-08-03, rev 0xe000015, size 23552 sig 0x000506f1, pf_mask 0x01, 2023-10-05, rev 0x003e, size 11264 sig 0x000606a6, pf_mask 0x87, 2023-09-14, rev 0xd0003d1, size 307200 sig 0x000606c1, pf_mask 0x10, 2023-12-05, rev 0x1000290, size 299008 sig 0x000706a1, pf_mask 0x01, 2023-08-25, rev 0x0040, size 76800 sig 0x000706a8, pf_mask 0x01, 2023-08-25, rev 0x0024, size 76800 sig 0x000706e5, pf_mask 0x80, 2023-09-14, rev 0x00c4, size 114688 sig 0x000806c1, pf_mask 0x80, 2023-09-13, rev 0x00b6, size 111616 sig 0x000806c2, pf_mask 0xc2, 2023-09-13, rev 0x0036, size 98304 sig 0x000806d1, pf_mask 0xc2, 2023-09-13, rev 0x0050, size 104448 sig 0x000806ec, pf_mask 0x94, 2023-07-16, rev 0x00fa, size 106496 sig 0x000806f8, pf_mask 0x87, 2024-01-03, rev 0x2b000590, size 579584 sig 0x000806f7, pf_mask 0x87, 2024-01-03, rev 0x2b000590 sig 0x000806f6, pf_mask 0x87, 2024-01-03, rev 0x2b000590 sig 0x000806f5, pf_mask 0x87, 2024-01-03, rev 0x2b000590 sig 0x000806f4, pf_mask 0x87, 2024-01-03, rev 0x2b000590 sig 0x00090661, pf_mask 0x01, 2023-09-26, rev 0x0019, size 20480 sig 0x00090672, pf_mask 0x07, 2023-09-19, rev 0x0034, size 224256 sig 0x00090675, pf_mask 0x07, 2023-09-19, rev 0x0034 sig 0x000b06f2, pf_mask 0x07, 2023-09-19, rev 0x0034 sig 0x000b06f5, pf_mask 0x07, 2023-09-19, rev 0x0034 sig 0x000906a3, pf_mask 0x80, 2023-09-19, rev 0x0432, size 222208 sig 0x000906a4, pf_mask 0x80, 2023-09-19, rev 0x0432 sig 0x000906c0, pf_mask 0x01, 2023-09-26, rev 0x24000026, size 20480 sig 0x000906e9, pf_mask 0x2a, 2023-09-28, rev 0x00f8, size 108544 sig 0x000906ea, pf_mask 0x22, 2023-07-26, rev 0x00f6, size 105472 sig 0x000906ec, pf_mask 0x22, 2023-07-26, rev 0x00f6, size 106496 sig 0x000906ed, pf_mask 0x22, 2023-07-27, rev 0x00fc, size 106496 sig 0x000a0652, pf_mask 0x20, 2023-07-16, rev 0x00fa, size 97280 sig 0x000a0653, pf_mask 0x22, 2023-07-16, rev 0x00fa, size 97280 sig 0x000a0655, pf_mask 0x22, 2023-07-16, rev 0x00fa, size 97280 sig 0x000a0660, pf_mask 0x80, 2023-07-16, rev 0x00fa, size 97280 sig 0x000a0661, pf_mask 0x80, 2023-07-16, rev 0x00fa, size 96256 sig 0x000a0671, pf_mask 0x02, 2023-09-14, rev 0x005e, size 108544 sig 0x000b0671, pf_mask 0x32, 2023-12-14, rev 0x0122, size 215040 sig 0x000b06a2, pf_mask 0xe0, 2023-12-07, rev 0x4121, size 220160 sig 0x000b06a3, pf_mask 0xe0, 2023-12-07, rev 0x4121 sig 0x000b06e0, pf_mask 0x11, 2023-09-25, rev 0x0015, size 138240 * New microcodes: sig 0x000a06a4, pf_mask 0xe6, 2024-01-03, rev 0x001c, size 136192 sig 0x000b06a8, pf_mask 0xe0, 2023-12-07, rev 0x4121, size 220160 sig 0x000c06f2, pf_mask 0x87, 2023-11-20, rev 0x21000200, size 549888 sig 0x000c06f1, pf_mask 0x87, 2023-11-20, rev 0x21000200 * source: update symlinks to reflect id of the latest release, 20240312 * changelog, debian/changelog: fix typos intel-microcode (3.20240312.1~deb12u1) bookworm; urgency=medium . * Build for bookworm (no changes) . intel-microcode (3.20240312.1) unstable; urgency=medium . * New upstream microcode datafile 20240312 (closes: #1066108) - Mitigations for INTEL-SA-INTEL-SA-00972 (CVE-2023-39368): Protection mechanism failure of bus lock regulator for some Intel Processors may allow an unauthenticated user to potentially enable denial of service via network access. - Mitigations for INTEL-SA-INTEL-SA-00982 (CVE-2023-38575): Non-transparent sharing of return predictor targets between contexts in some Intel Processors may allow an authorized user to potentially enable information disclosure via local access. Affects SGX as well. - Mitigations for INTEL-SA-INTEL-SA-00898 (CVE-2023-28746), aka RFDS: Information exposure through microarchitectural state after transient execution from some register files for some Intel Atom Processors and E-cores of Intel Core Processors may allow an authenticated user to potentially enable information disclosure via local access. Enhances VERW instruction to clear stale register buffers. Affects SGX as well. Requires kernel update to be effective. - Mitigations for INTEL-SA-INTEL-SA-00960 (CVE-2023-22655), aka TECRA: Protection mechanism failure in some 3rd and 4th Generation Intel Xeon Processors when using Intel SGX or Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access. NOTE: effective only when loaded by firmware. Allows SMM firmware to attack SGX/TDX. - Mitigations for INTEL-SA-INTEL-SA-01045 (CVE-2023-43490): Incorrect calculation in microcode keying mechanism for some Intel Xeon D Processors with Intel SGX may allow a privileged user to potentially enable information disclosure via local access. * Fixes for other unspecified functional issues on many processors * Updated microcodes: sig 0x00050653, pf_mask 0x97, 2023-07-28, rev 0x1000191, size 36864 sig 0x00050656, pf_mask 0xbf, 2023-07-28, rev 0x4003605, size 38912 sig 0x00050657, pf_mask 0xbf, 2023-07-28, rev 0x5003605, size 37888 sig 0x0005065b, pf_mask 0xbf, 2023-08-03, rev 0x7002802, size 30720 sig 0x00050665, pf_mask 0x10, 2023-08-03, rev 0xe000015, size 23552 sig 0x000506f1, pf_mask 0x01, 2023-10-05, rev 0x003e, size 11264 sig 0x000606a6, pf_mask 0x87, 2023-09-14, rev 0xd0003d1, size 307200 sig 0x000606c1, pf_mask 0x10, 2023-12-05, rev 0x1000290, size 299008 sig 0x000706a1, pf_mask 0x01, 2023-08-25, rev 0x0040, size 76800 sig 0x000706a8, pf_mask 0x01, 2023-08-25, rev 0x0024, size 76800 sig 0x000706e5, pf_mask 0x80, 2023-09-14, rev 0x00c4, size 114688 sig 0x000806c1, pf_mask 0x80, 2023-09-13, rev 0x00b6, size 111616 sig 0x000806c2, pf_mask 0xc2, 2023-09-13, rev 0x0036, size 98304 sig 0x000806d1, pf_mask 0xc2, 2023-09-13, rev 0x0050, size 104448 sig 0x000806ec, pf_mask 0x94, 2023-07-16, rev 0x00fa, size 106496 sig 0x000806f8, pf_mask 0x87, 2024-01-03, rev 0x2b000590, size 579584 sig 0x000806f7, pf_mask 0x87, 2024-01-03, rev 0x2b000590 sig 0x000806f6, pf_mask 0x87, 2024-01-03, rev 0x2b000590 sig 0x000806f5, pf_mask 0x87, 2024-01-03, rev 0x2b000590 sig 0x000806f4, pf_mask 0x87, 2024-01-03, rev 0x2b000590 sig 0x00090661, pf_mask 0x01, 2023-09-26, rev 0x0019, size 20480 sig 0x00090672, pf_mask 0x07, 2023-09-19, rev 0x0034, size 224256 sig 0x00090675, pf_mask 0x07, 2023-09-19, rev 0x0034 sig 0x000b06f2, pf_mask 0x07, 2023-09-19, rev 0x0034 sig 0x000b06f5, pf_mask 0x07, 2023-09-19, rev 0x0034 sig 0x000906a3, pf_mask 0x80, 2023-09-19, rev 0x0432, size 222208 sig 0x000906a4, pf_mask 0x80, 2023-09-19, rev 0x0432 sig 0x000906c0, pf_mask 0x01, 2023-09-26, rev 0x24000026, size 20480 sig 0x000906e9, pf_mask 0x2a, 2023-09-28, rev 0x00f8, size 108544 sig 0x000906ea, pf_mask 0x22, 2023-07-26, rev 0x00f6, size 105472 sig 0x000906ec, pf_mask 0x22, 2023-07-26, rev 0x00f6, size 106496 sig 0x000906ed, pf_mask 0x22, 2023-07-27, rev 0x00fc, size 106496 sig 0x000a0652, pf_mask 0x20, 2023-07-16, rev 0x00fa, size 97280 sig 0x000a0653, pf_mask 0x22, 2023-07-16, rev 0x00fa, size 97280 sig 0x000a0655, pf_mask 0x22, 2023-07-16, rev 0x00fa, size 97280 sig 0x000a0660, pf_mask 0x80, 2023-07-16, rev 0x00fa, size 97280 sig 0x000a0661, pf_mask 0x80, 2023-07-16, rev 0x00fa, size 96256 sig 0x000a0671, pf_mask 0x02, 2023-09-14, rev 0x005e, size 108544 sig 0x000b0671, pf_mask 0x32, 2023-12-14, rev 0x0122, size 215040 sig 0x000b06a2, pf_mask 0xe0, 2023-12-07, rev 0x4121, size 220160 sig 0x000b06a3, pf_mask 0xe0, 2023-12-07, rev 0x4121 sig 0x000b06e0, pf_mask 0x11, 2023-09-25, rev 0x0015, size 138240 * New microcodes: sig 0x000a06a4, pf_mask 0xe6, 2024-01-03, rev 0x001c, size 136192 sig 0x000b06a8, pf_mask 0xe0, 2023-12-07, rev 0x4121, size 220160 sig 0x000c06f2, pf_mask 0x87, 2023-11-20, rev 0x21000200, size 549888 sig 0x000c06f1, pf_mask 0x87, 2023-11-20, rev 0x21000200 * source: update symlinks to reflect id of the latest release, 20240312 * changelog, debian/changelog: fix typos intel-microcode (3.20240312.1~deb11u1) bullseye; urgency=medium . * Backport to Debian Bullseye * debian/control: revert non-free-firmware change . intel-microcode (3.20240312.1) unstable; urgency=medium . * New upstream microcode datafile 20240312 (closes: #1066108) - Mitigations for INTEL-SA-INTEL-SA-00972 (CVE-2023-39368): Protection mechanism failure of bus lock regulator for some Intel Processors may allow an unauthenticated user to potentially enable denial of service via network access. - Mitigations for INTEL-SA-INTEL-SA-00982 (CVE-2023-38575): Non-transparent sharing of return predictor targets between contexts in some Intel Processors may allow an authorized user to potentially enable information disclosure via local access. Affects SGX as well. - Mitigations for INTEL-SA-INTEL-SA-00898 (CVE-2023-28746), aka RFDS: Information exposure through microarchitectural state after transient execution from some register files for some Intel Atom Processors and E-cores of Intel Core Processors may allow an authenticated user to potentially enable information disclosure via local access. Enhances VERW instruction to clear stale register buffers. Affects SGX as well. Requires kernel update to be effective. - Mitigations for INTEL-SA-INTEL-SA-00960 (CVE-2023-22655), aka TECRA: Protection mechanism failure in some 3rd and 4th Generation Intel Xeon Processors when using Intel SGX or Intel TDX may allow a privileged user to potentially enable escalation of privilege via local access. NOTE: effective only when loaded by firmware. Allows SMM firmware to attack SGX/TDX. - Mitigations for INTEL-SA-INTEL-SA-01045 (CVE-2023-43490): Incorrect calculation in microcode keying mechanism for some Intel Xeon D Processors with Intel SGX may allow a privileged user to potentially enable information disclosure via local access. * Fixes for other unspecified functional issues on many processors * Updated microcodes: sig 0x00050653, pf_mask 0x97, 2023-07-28, rev 0x1000191, size 36864 sig 0x00050656, pf_mask 0xbf, 2023-07-28, rev 0x4003605, size 38912 sig 0x00050657, pf_mask 0xbf, 2023-07-28, rev 0x5003605, size 37888 sig 0x0005065b, pf_mask 0xbf, 2023-08-03, rev 0x7002802, size 30720 sig 0x00050665, pf_mask 0x10, 2023-08-03, rev 0xe000015, size 23552 sig 0x000506f1, pf_mask 0x01, 2023-10-05, rev 0x003e, size 11264 sig 0x000606a6, pf_mask 0x87, 2023-09-14, rev 0xd0003d1, size 307200 sig 0x000606c1, pf_mask 0x10, 2023-12-05, rev 0x1000290, size 299008 sig 0x000706a1, pf_mask 0x01, 2023-08-25, rev 0x0040, size 76800 sig 0x000706a8, pf_mask 0x01, 2023-08-25, rev 0x0024, size 76800 sig 0x000706e5, pf_mask 0x80, 2023-09-14, rev 0x00c4, size 114688 sig 0x000806c1, pf_mask 0x80, 2023-09-13, rev 0x00b6, size 111616 sig 0x000806c2, pf_mask 0xc2, 2023-09-13, rev 0x0036, size 98304 sig 0x000806d1, pf_mask 0xc2, 2023-09-13, rev 0x0050, size 104448 sig 0x000806ec, pf_mask 0x94, 2023-07-16, rev 0x00fa, size 106496 sig 0x000806f8, pf_mask 0x87, 2024-01-03, rev 0x2b000590, size 579584 sig 0x000806f7, pf_mask 0x87, 2024-01-03, rev 0x2b000590 sig 0x000806f6, pf_mask 0x87, 2024-01-03, rev 0x2b000590 sig 0x000806f5, pf_mask 0x87, 2024-01-03, rev 0x2b000590 sig 0x000806f4, pf_mask 0x87, 2024-01-03, rev 0x2b000590 sig 0x00090661, pf_mask 0x01, 2023-09-26, rev 0x0019, size 20480 sig 0x00090672, pf_mask 0x07, 2023-09-19, rev 0x0034, size 224256 sig 0x00090675, pf_mask 0x07, 2023-09-19, rev 0x0034 sig 0x000b06f2, pf_mask 0x07, 2023-09-19, rev 0x0034 sig 0x000b06f5, pf_mask 0x07, 2023-09-19, rev 0x0034 sig 0x000906a3, pf_mask 0x80, 2023-09-19, rev 0x0432, size 222208 sig 0x000906a4, pf_mask 0x80, 2023-09-19, rev 0x0432 sig 0x000906c0, pf_mask 0x01, 2023-09-26, rev 0x24000026, size 20480 sig 0x000906e9, pf_mask 0x2a, 2023-09-28, rev 0x00f8, size 108544 sig 0x000906ea, pf_mask 0x22, 2023-07-26, rev 0x00f6, size 105472 sig 0x000906ec, pf_mask 0x22, 2023-07-26, rev 0x00f6, size 106496 sig 0x000906ed, pf_mask 0x22, 2023-07-27, rev 0x00fc, size 106496 sig 0x000a0652, pf_mask 0x20, 2023-07-16, rev 0x00fa, size 97280 sig 0x000a0653, pf_mask 0x22, 2023-07-16, rev 0x00fa, size 97280 sig 0x000a0655, pf_mask 0x22, 2023-07-16, rev 0x00fa, size 97280 sig 0x000a0660, pf_mask 0x80, 2023-07-16, rev 0x00fa, size 97280 sig 0x000a0661, pf_mask 0x80, 2023-07-16, rev 0x00fa, size 96256 sig 0x000a0671, pf_mask 0x02, 2023-09-14, rev 0x005e, size 108544 sig 0x000b0671, pf_mask 0x32, 2023-12-14, rev 0x0122, size 215040 sig 0x000b06a2, pf_mask 0xe0, 2023-12-07, rev 0x4121, size 220160 sig 0x000b06a3, pf_mask 0xe0, 2023-12-07, rev 0x4121 sig 0x000b06e0, pf_mask 0x11, 2023-09-25, rev 0x0015, size 138240 * New microcodes: sig 0x000a06a4, pf_mask 0xe6, 2024-01-03, rev 0x001c, size 136192 sig 0x000b06a8, pf_mask 0xe0, 2023-12-07, rev 0x4121, size 220160 sig 0x000c06f2, pf_mask 0x87, 2023-11-20, rev 0x21000200, size 549888 sig 0x000c06f1, pf_mask 0x87, 2023-11-20, rev 0x21000200 * source: update symlinks to reflect id of the latest release, 20240312 * changelog, debian/changelog: fix typos intel-microcode (3.20231114.1) unstable; urgency=medium . * New upstream microcode datafile 20231114 (closes: #1055962) Mitigations for "reptar", INTEL-SA-00950 (CVE-2023-23583) Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors, may allow an authenticated user to potentially enable escalation of privilege and/or information disclosure and/or denial of service via local access. Note: "retvar" on 4th gen Xeon Scalable (sig 0x806f8 pfm 0x87), 12th gen Core mobile (sig 0x906a4 pfm 0x80), 13th gen Core desktop (sig 0xb0671 pfm 0x01) were already mitigated by a previous microcode update. * Fixes for unspecified functional issues * Updated microcodes: sig 0x000606a6, pf_mask 0x87, 2023-09-01, rev 0xd0003b9, size 299008 sig 0x000606c1, pf_mask 0x10, 2023-09-08, rev 0x1000268, size 290816 sig 0x000706e5, pf_mask 0x80, 2023-09-03, rev 0x00c2, size 113664 sig 0x000806c1, pf_mask 0x80, 2023-09-07, rev 0x00b4, size 111616 sig 0x000806c2, pf_mask 0xc2, 2023-09-07, rev 0x0034, size 98304 sig 0x000806d1, pf_mask 0xc2, 2023-09-07, rev 0x004e, size 104448 sig 0x000806f8, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416 sig 0x000806f8, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0 sig 0x000806f7, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0 sig 0x000806f6, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0 sig 0x000806f5, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0 sig 0x000806f4, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0 sig 0x000806f8, pf_mask 0x10, 2023-06-26, rev 0x2c000290, size 605184 sig 0x000806f8, pf_mask 0x10, 2023-06-26, rev 0x2c000290 sig 0x000806f6, pf_mask 0x10, 2023-06-26, rev 0x2c000290 sig 0x000806f5, pf_mask 0x10, 2023-06-26, rev 0x2c000290 sig 0x000806f4, pf_mask 0x10, 2023-06-26, rev 0x2c000290 sig 0x00090672, pf_mask 0x07, 2023-06-07, rev 0x0032, size 222208 sig 0x00090672, pf_mask 0x07, 2023-06-07, rev 0x0032 sig 0x00090675, pf_mask 0x07, 2023-06-07, rev 0x0032 sig 0x000b06f2, pf_mask 0x07, 2023-06-07, rev 0x0032 sig 0x000b06f5, pf_mask 0x07, 2023-06-07, rev 0x0032 sig 0x000906a3, pf_mask 0x80, 2023-06-07, rev 0x0430, size 220160 sig 0x000906a3, pf_mask 0x80, 2023-06-07, rev 0x0430 sig 0x000906a4, pf_mask 0x80, 2023-06-07, rev 0x0430 sig 0x000906a4, pf_mask 0x40, 2023-05-05, rev 0x0005, size 117760 sig 0x000a0671, pf_mask 0x02, 2023-09-03, rev 0x005d, size 104448 sig 0x000b0671, pf_mask 0x32, 2023-08-29, rev 0x011d, size 210944 sig 0x000b06a2, pf_mask 0xe0, 2023-08-30, rev 0x411c, size 216064 sig 0x000b06a2, pf_mask 0xe0, 2023-08-30, rev 0x411c sig 0x000b06a3, pf_mask 0xe0, 2023-08-30, rev 0x411c sig 0x000b06e0, pf_mask 0x11, 2023-06-26, rev 0x0012, size 136192 * Updated 2023-08-08 changelog entry: Mitigations for "retvar" on a few processors, refer to the 2023-11-14 entry for details. This information was disclosed in 2023-11-14. * source: update symlinks to reflect id of the latest release, 20231114 intel-microcode (3.20231114.1~deb12u1) bookworm-security; urgency=high . * Build for bookworm (no changes) . intel-microcode (3.20231114.1) unstable; urgency=medium . * New upstream microcode datafile 20231114 (closes: #1055962) Mitigations for "reptar", INTEL-SA-00950 (CVE-2023-23583) Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors, may allow an authenticated user to potentially enable escalation of privilege and/or information disclosure and/or denial of service via local access. Note: "reptar" on 4th gen Xeon Scalable (sig 0x806f8 pfm 0x87), 12th gen Core mobile (sig 0x906a4 pfm 0x80), 13th gen Core desktop (sig 0xb0671 pfm 0x01) were already mitigated by a previous microcode update. * Fixes for unspecified functional issues * Updated microcodes: sig 0x000606a6, pf_mask 0x87, 2023-09-01, rev 0xd0003b9, size 299008 sig 0x000606c1, pf_mask 0x10, 2023-09-08, rev 0x1000268, size 290816 sig 0x000706e5, pf_mask 0x80, 2023-09-03, rev 0x00c2, size 113664 sig 0x000806c1, pf_mask 0x80, 2023-09-07, rev 0x00b4, size 111616 sig 0x000806c2, pf_mask 0xc2, 2023-09-07, rev 0x0034, size 98304 sig 0x000806d1, pf_mask 0xc2, 2023-09-07, rev 0x004e, size 104448 sig 0x000806f8, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416 sig 0x000806f8, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0 sig 0x000806f7, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0 sig 0x000806f6, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0 sig 0x000806f5, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0 sig 0x000806f4, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0 sig 0x000806f8, pf_mask 0x10, 2023-06-26, rev 0x2c000290, size 605184 sig 0x000806f8, pf_mask 0x10, 2023-06-26, rev 0x2c000290 sig 0x000806f6, pf_mask 0x10, 2023-06-26, rev 0x2c000290 sig 0x000806f5, pf_mask 0x10, 2023-06-26, rev 0x2c000290 sig 0x000806f4, pf_mask 0x10, 2023-06-26, rev 0x2c000290 sig 0x00090672, pf_mask 0x07, 2023-06-07, rev 0x0032, size 222208 sig 0x00090672, pf_mask 0x07, 2023-06-07, rev 0x0032 sig 0x00090675, pf_mask 0x07, 2023-06-07, rev 0x0032 sig 0x000b06f2, pf_mask 0x07, 2023-06-07, rev 0x0032 sig 0x000b06f5, pf_mask 0x07, 2023-06-07, rev 0x0032 sig 0x000906a3, pf_mask 0x80, 2023-06-07, rev 0x0430, size 220160 sig 0x000906a3, pf_mask 0x80, 2023-06-07, rev 0x0430 sig 0x000906a4, pf_mask 0x80, 2023-06-07, rev 0x0430 sig 0x000906a4, pf_mask 0x40, 2023-05-05, rev 0x0005, size 117760 sig 0x000a0671, pf_mask 0x02, 2023-09-03, rev 0x005d, size 104448 sig 0x000b0671, pf_mask 0x32, 2023-08-29, rev 0x011d, size 210944 sig 0x000b06a2, pf_mask 0xe0, 2023-08-30, rev 0x411c, size 216064 sig 0x000b06a2, pf_mask 0xe0, 2023-08-30, rev 0x411c sig 0x000b06a3, pf_mask 0xe0, 2023-08-30, rev 0x411c sig 0x000b06e0, pf_mask 0x11, 2023-06-26, rev 0x0012, size 136192 * Updated 2023-08-08 changelog entry with reptar information * source: update symlinks to reflect id of the latest release, 20231114 iwd (1.14-3+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * ap: only accept ptk 4/4 after receiving ptk 2/4 (CVE-2023-52161) (Closes: #1064062) jetty9 (9.4.50-4+deb11u2) bullseye-security; urgency=high . * Team upload. * Fix CVE-2024-22201: It was discovered that remote attackers may leave many HTTP/2 connections in ESTABLISHED state (not closed), TCP congested and idle. Eventually the server will stop accepting new connections from valid clients which can cause a denial of service. jose (10-3+deb11u1) bullseye; urgency=high . * Cherry-pick "Fix potential DoS issue with p2c header". Closes: #1067457 [CVE-2023-50967] json-smart (2.2-2+deb11u1) bullseye; urgency=medium . * Non-maintainer upload. * Rebuild for bullseye. (Closes: #1039985) . json-smart (2.2-2+deb10u1) buster-security; urgency=high . * Non-maintainer upload by the LTS team. * CVE-2023-1370: stack overflow due to excessive recursion When reaching a ‘[‘ or ‘{‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any limit to the nesting of such arrays or objects. Since the parsing of nested arrays and objects is done recursively, nesting too many of them can cause a stack exhaustion (stack overflow) and crash the software. (Closes: #1033474) * CVE-2021-31684: Fix indexOf A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request. lacme (0.8.0-2+deb11u2) bullseye; urgency=medium . * Backport upstream patches to fix post-issuance validation logic. We avoid pinning the intermediate certificates in the bundle and instead validate the leaf certificate with intermediates supplied during issuance as untrusted (used for chain building only). Only the root certificates are used as trust anchor. Not pinning intermediate certificates is in line with Let's Encrypt's latest recommendations. Closes: #1072847 * Adjust test suite against current Let's Encrypt staging environment. less (551-2+deb11u2) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. . [ Milan Kupcevic ] * Fix incorrect display when filename contains control chars (Closes: #1069681) . less (551-2+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * Shell-quote filenames when invoking LESSCLOSE (CVE-2022-48624) (Closes: #1064293) * Fix bug when viewing a file whose name contains a newline (CVE-2024-32487) (Closes: #1068938) less (551-2+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * Shell-quote filenames when invoking LESSCLOSE (CVE-2022-48624) (Closes: #1064293) * Fix bug when viewing a file whose name contains a newline (CVE-2024-32487) (Closes: #1068938) libapache2-mod-auth-openidc (2.4.9.4-0+deb11u4) bullseye; urgency=high . * CVE-2024-24814: Missing input validation on mod_auth_openidc_session_chunks cookie value made the server vulnerable to a Denial of Service (DoS) attack. If an attacker manipulated the value of the OpenIDC cookie to a very large integer like 99999999, the server struggled with the request for a long time and finally returned a 500 error. Making a few requests of this kind caused servers to become unresponsive, and so attackers could thereby craft requests that would make the server work very hard and/or crash with minimal effort. (Closes: #1064183) libgit2 (1.1.0+dfsg.1-4+deb11u2) bullseye-security; urgency=medium . * Team upload. * Fix CVE-2024-24577: Use-after-free in git_index_add (Closes: #1063416) libjwt (1.10.2-1+deb11u1) bullseye; urgency=medium . * CVE-2024-25189 (Closes: #1063534) fix a timing side channel via strcmp() libkf5ksieve (4:20.08.3-1+deb11u1) bullseye; urgency=medium . * Team upload. * Add patch to prevent leaking passwords into server-side logs (Closes: #1069163). libmicrohttpd (0.9.72-2+deb11u1) bullseye; urgency=medium . * Non-maintainer upload by the LTS Team. * CVE-2023-27371 parsing crafted POST requests result in an out of bounds read, which might cause a DoS (Denial of Service) libndp (1.6-1+deb11u1) bullseye-security; urgency=medium . * add debian/patches/CVE-2024-5564.patch from upstream fixing CVE-2024-5564 (Closes: #1072366) * d/gbp.conf: update for bullseye release libreoffice (1:7.0.4-4+deb11u9) bullseye-security; urgency=high . * debian/patches/add-notify-for-script-use.diff: add fix for CVE-2024-3044 ("Graphic on-click binding allows unchecked script execution") libssh2 (1.9.0-2+deb11u1) bullseye; urgency=medium . * Fix CVE-2020-22218: missing check in _libssh2_packet_add() allows attackers to access out of bounds memory. libuv1 (1.40.0-2+deb11u1) bullseye-security; urgency=medium . * add patch to fix CVE-2024-24806 (Closes: 1063484) linux (5.10.218-1) bullseye-security; urgency=high . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.217 - [arm64,armhf] dmaengine: pl330: issue_pending waits until WFP state - dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state" - wifi: nl80211: don't free NULL coalescing rule - eeprom: at24: Use dev_err_probe for nvmem register failure - eeprom: at24: Probe for DDR3 thermal sensor in the SPD case - eeprom: at24: fix memory corruption race condition (CVE-2024-35848) - [armhf] pinctrl: pinctrl-aspeed-g6: Fix register offset for pinconf of GPIOR-T - [arm64] pinctrl/meson: fix typo in PDM's pin name - pinctrl: core: delete incorrect free in pinctrl_enable() - sunrpc: add a struct rpc_stats arg to rpc_create_args - nfs: expose /proc/net/sunrpc/nfs in net namespaces - nfs: make the rpc_stat per net namespace - nfs: Handle error of rpc_proc_register() in nfs_net_init(). - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() - [s390x] mm: Fix storage key clearing for guest huge pages - [s390x] mm: Fix clearing storage keys for huge pages - bna: ensure the copied buf is NUL terminated - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). - net l2tp: drop flow hash on forward - [s390x] vdso: Add CFI for RA register to asm macro vdso_func - net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() - net: qede: use return from qede_parse_flow_attr() for flower - net: qede: use return from qede_parse_flow_attr() for flow_spec - net: qede: use return from qede_parse_actions() - cxgb4: Properly lock TX queue for the selftest. - [arm64,armhf] net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 - net: bridge: fix multicast-to-unicast with fraglist GSO - net: core: reject skb_copy(_expand) for fraglist GSO skbs - net: gro: add flush check in udp_gro_receive_segment - [arm64] clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change - [arm64] KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id - [arm64] KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() - scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic - gfs2: Fix invalid metadata access in punch_hole - wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc - wifi: cfg80211: fix rdev_dump_mpp() arguments order - net: mark racy access on sk->sk_rcvbuf - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload - btrfs: return accurate error code on open failure in open_fs_devices() - ALSA: line6: Zero-initialize message buffers - net: bcmgenet: Reset RBUF on first open - ata: sata_gemini: Check clk_enable() result - firewire: ohci: mask bus reset interrupts between ISR and bottom half - btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve - btrfs: always clear PERTRANS metadata during commit - scsi: target: Fix SELinux error when systemd-modules loads the target module - blk-iocost: avoid out of bounds shift - [arm64,armhf] gpu: host1x: Do not setup DMA for virtual devices - [mips64el,mipsel]: scall: Save thread_info.syscall unconditionally on entry (Closes: #1068365) - fs/9p: only translate RWX permissions for plain 9P2000 - fs/9p: translate O_TRUNC into OTRUNC - 9p: explicitly deny setlease attempts - gpio: wcove: Use -ENOTSUPP consistently - gpio: crystalcove: Use -ENOTSUPP consistently - clk: Don't hold prepare_lock when calling kref_put() - fs/9p: drop inodes immediately on non-.L too - drm/nouveau/dp: Don't probe eDP ports twice harder - net:usb:qmi_wwan: support Rolling modules - xfrm: Preserve vlan tags for transport mode software GRO - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (CVE-2024-27398) - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CVE-2024-27399) - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation - [x86] hwmon: (corsair-cpro) Use a separate buffer for sending commands - [x86] hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event() - [x86] hwmon: (corsair-cpro) Protect ccp->wait_input_report with a spinlock - phonet: fix rtm_phonet_notify() skb allocation - kcov: Remove kcov include from sched.h and move it to its users. - net: bridge: fix corrupted ethernet header on multicast-to-unicast - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() - [arm64] net: hns3: use appropriate barrier function after setting a bit value - btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send() - firewire: nosy: ensure user_length is taken into account when fetching packet contents (CVE-2024-27401) - [arm64] dts: qcom: Fix 'interrupt-map' parent address cells - usb: typec: ucsi: Check for notifications after init - usb: typec: ucsi: Fix connector check on init - usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device - usb: ohci: Prevent missed ohci interrupts - usb: gadget: composite: fix OS descriptors w_value logic - usb: gadget: f_fs: Fix a race condition when processing setup packets. - usb: xhci-plat: Don't include xhci.h - usb: dwc3: core: Prevent phy suspend during init - ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU - iio:imu: adis16475: Fix sync mode setting - iio: accel: mxc4005: Interrupt handling fixes - net: bcmgenet: synchronize use of bcmgenet_set_rx_mode() - dyndbg: fix old BUG_ON in >control parser - mei: me: add lunar lake point M DID - drm/vmwgfx: Fix invalid reads in fence signaled events - net: fix out-of-bounds access in ops_init - regulator: core: fix debugfs creation regression - keys: Fix overwrite of key expiration on instantiation - md: fix kmemleak of rdev->serial (CVE-2024-26900) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.218 - pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin() - [x86] xen: Drop USERGS_SYSRET64 paravirt call - [arm64] net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access - [arm64] net: bcmgenet: synchronize UMAC_CMD access - ima: fix deadlock when traversing "ima_default_rules". - netlink: annotate lockless accesses to nlk->max_recvmsg_len - [x86] KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection - firmware: arm_scmi: Harden accesses to the reset domains (CVE-2022-48655) - mptcp: ensure snd_nxt is properly initialized on connect - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() - drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() (CVE-2023-52585) - usb: typec: ucsi: displayport: Fix potential deadlock - serial: kgdboc: Fix NMI-safety problems from keyboard reset code - docs: kernel_include.py: Cope with docutils 0.21 . [ Salvatore Bonaccorso ] * Bump ABI to 30 linux (5.10.216-1) bullseye-security; urgency=high . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.210 - units: change from 'L' to 'UL' - units: add the HZ macros - spi: introduce SPI_MODE_X_MASK macro - iio: adc: ad7091r: Set alert bit in config register - iio: adc: ad7091r: Allow users to configure device events - iio: adc: ad7091r: Enable internal vref if external vref is not supplied - dmaengine: fix NULL pointer in channel unregistration function - iio:adc:ad7091r: Move exports into IIO_AD7091R namespace. - ext4: allow for the last group to be marked as trimmed - crypto: api - Disallow identical driver names - PM: hibernate: Enforce ordering during image compression/decompression - hwrng: core - Fix page fault dead lock on mmap-ed hwrng - [s390x] crypto: s390/aes - Fix buffer overread in CTR mode - bus: mhi: host: Drop chan lock before queuing buffers - async: Split async_schedule_node_domain() - async: Introduce async_schedule_dev_nocall() - [arm64] dts: qcom: sdm845: fix USB wakeup interrupt types - [arm64] dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts - lsm: new security_file_ioctl_compat() hook - scripts/get_abi: fix source path leak - mmc: core: Use mrq.sbc in close-ended ffu - mmc: mmc_spi: remove custom DMA mapped buffers - rtc: Adjust failure return code for cmos_set_alarm() - nouveau/vmm: don't set addr on the fail path to avoid warning - ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path - rename(): fix the locking of subdirectories - block: Remove special-casing of compound pages - mm: vmalloc: introduce array allocation functions - KVM: use __vcalloc for very large allocations - net/smc: fix illegal rmb_desc access in SMC-D connection dump - tcp: make sure init the accept_queue's spinlocks once - bnxt_en: Wait for FLR to complete during probe - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING - llc: make llc_ui_sendmsg() more robust against bonding changes - llc: Drop support for ETH_P_TR_802_2. - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv (CVE-2024-23849) - tracing: Ensure visibility when inserting an element into tracing_map - afs: Hide silly-rename files from userspace - tcp: Add memory barrier to tcp_push() - netlink: fix potential sleeping issue in mqueue_flush_file - ipv6: init the accept_queue's spinlocks in inet6_create - net/mlx5: DR, Use the right GVMI number for drop action - net/mlx5e: fix a double-free in arfs_create_groups - netfilter: nf_tables: restrict anonymous set and map names to 16 bytes - netfilter: nf_tables: validate NFPROTO_* family - net: mvpp2: clear BM pool before initialization - fjes: fix memleaks in fjes_hw_setup - net: fec: fix the unhandled context fault from smmu - btrfs: ref-verify: free ref cache before clearing mount opt - btrfs: tree-checker: fix inline ref size in error messages - btrfs: don't warn if discard range is not aligned to sector - btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume - rbd: don't move requests to the running list on errors - exec: Fix error handling in begin_new_exec() - wifi: iwlwifi: fix a memory corruption - netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain - gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 - drm: Don't unref the same fb many times by mistake due to deadlock handling - drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking - drm/tidss: Fix atomic_flush check - drm/bridge: nxp-ptn3460: simplify some error checking - PM: sleep: Use dev_printk() when possible - PM: sleep: Avoid calling put_device() under dpm_list_mtx - PM: core: Remove unnecessary (void *) conversions - PM: sleep: Fix possible deadlocks in core system-wide PM code - fs/pipe: move check to pipe_has_watch_queue() - pipe: wakeup wr_wait after setting max_usage - [arm64] dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts - [arm64] dts: qcom: sc7180: fix USB wakeup interrupt types - mm: use __pfn_to_section() instead of open coding it - mm/sparsemem: fix race in accessing memory_section->usage - btrfs: remove err variable from btrfs_delete_subvolume - btrfs: avoid copying BTRFS_ROOT_SUBVOL_DEAD flag to snapshot of subvolume being deleted - drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33] - [armhf] drm/exynos: fix accidental on-stack copy of exynos_drm_plane - [armhf] drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume - gpio: eic-sprd: Clear interrupt after set the interrupt type - spi: bcm-qspi: fix SFDP BFPT read by usig mspi read - [mips*] Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan - tick/sched: Preserve number of idle sleeps across CPU hotplug events - [x86] entry/ia32: Ensure s32 is sign extended to s64 - [powerpc*] mm: Fix null-pointer dereference in pgtable_cache_add - drivers/perf: pmuv3: don't expose SW_INCR event in sysfs - [powerpc*] Fix build error due to is_valid_bugaddr() - [powerpc*] mm: Fix build failures due to arch_reserved_kernel_pages() - [x86] boot: Ignore NMIs during very early boot - [powerpc*] pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE - [powerpc*] lib: Validate size for vector operations - [x86] mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel - perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file - debugobjects: Stop accessing objects after releasing hash bucket lock - regulator: core: Only increment use_count when enable_count changes - audit: Send netlink ACK before setting connection in auditd_set - ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop - PNP: ACPI: fix fortify warning - ACPI: extlog: fix NULL pointer dereference check - PM / devfreq: Synchronize devfreq_monitor_[start/stop] - ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree - jfs: fix slab-out-of-bounds Read in dtSearch - jfs: fix array-index-out-of-bounds in dbAdjTree - jfs: fix uaf in jfs_evict_inode - pstore/ram: Fix crash when setting number of cpus to an odd number - crypto: stm32/crc32 - fix parsing list of devices - afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu() - afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() - rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() - jfs: fix array-index-out-of-bounds in diNewExt - [s390x] ptrace: handle setting of fpc register correctly - [s390x] KVM: s390: fix setting of fpc register - SUNRPC: Fix a suspicious RCU usage warning - ecryptfs: Reject casefold directory inodes - ext4: fix inconsistent between segment fstrim and full fstrim - ext4: unify the type of flexbg_size to unsigned int - ext4: remove unnecessary check from alloc_flex_gd() - ext4: avoid online resizing failures due to oversized flex bg - wifi: rt2x00: restart beacon queue when hardware reset - scsi: lpfc: Fix possible file string name overflow when updating firmware - PCI: Add no PM reset quirk for NVIDIA Spectrum devices - bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk - scsi: arcmsr: Support new PCI device IDs 1883 and 1886 - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() - bpf: Add map and need_defer parameters to .map_fd_put_ptr() - scsi: libfc: Don't schedule abort twice - scsi: libfc: Fix up timeout error in fc_fcp_rec_error() - bpf: Set uattr->batch.count as zero before batched update or deletion - ionic: pass opcode to devcmd_wait - block/rnbd-srv: Check for unlikely string overflow - [arm64,armhf] net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path - block: prevent an integer overflow in bvec_try_merge_hw_page - md: Whenassemble the array, consult the superblock of the freshest device - wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices - wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() - wifi: cfg80211: free beacon_ies when overridden from hidden BSS - Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066 - Bluetooth: L2CAP: Fix possible multiple reject send - i40e: Fix VF disable behavior to block all traffic - f2fs: fix to check return value of f2fs_reserve_new_block() - ALSA: hda: Refer to correct stream index at loops - ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument - fast_dput(): handle underflows gracefully - RDMA/IPoIB: Fix error code return in ipoib_mcast_join - drm/amd/display: Fix tiled display misalignment - f2fs: fix write pointers on zoned device after roll forward - drm/drm_file: fix use of uninitialized variable - drm/framebuffer: Fix use of uninitialized variable - drm/mipi-dsi: Fix detach call without attach - media: stk1160: Fixed high volume of stk1160_dbg messages - [x86] PCI: add INTEL_HDA_ARL to pci_ids.h - [x86] ALSA: hda: Intel: add HDA_ARL PCI ID support - [x86] ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL - [armhf] drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time - IB/ipoib: Fix mcast list locking - media: ddbridge: fix an error code problem in ddb_probe - [arm64] drm/msm/dpu: Ratelimit framedone timeout msgs - clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() - clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() - watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786 - drm/amdgpu: Let KFD sync with VM fences - drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' - leds: trigger: panic: Don't register panic notifier if creating the trigger failed - i3c: master: cdns: Update maximum prescaler value for i2c clock - xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import - mfd: ti_am335x_tscadc: Fix TI SoC dependencies - PCI: Only override AMD USB controller if required - PCI: switchtec: Fix stdev_release() crash after surprise hot remove - usb: hub: Replace hardcoded quirk value with BIT() macro - tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE - fs/kernfs/dir: obey S_ISGID - PCI/AER: Decode Requester ID when no error info found - libsubcmd: Fix memory leak in uniq() - virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings - blk-mq: fix IO hang from sbitmap wakeup race - ceph: fix deadlock or deadcode of misusing dget() - drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()' - drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()' - perf: Fix the nr_addr_filters fix - wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update - drm: using mul_u32_u32() requires linux/math64.h - scsi: isci: Fix an error code problem in isci_io_request_build() - scsi: core: Introduce enum scsi_disposition - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler - ip6_tunnel: use dev_sw_netstats_rx_add() - ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() - net-zerocopy: Refactor frag-is-remappable test. - tcp: add sanity checks to rx zerocopy - ixgbe: Remove non-inclusive language - ixgbe: Refactor returning internal error codes - ixgbe: Refactor overtemp event handling - ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() - ipv6: Ensure natural alignment of const ipv6 loopback and router addresses - llc: call sock_orphan() at release time - netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger - netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations - net: ipv4: fix a memleak in ip_setup_cork - af_unix: fix lockdep positive in sk_diag_dump_icons() - net: sysfs: Fix /sys/class/net/ path - HID: apple: Add support for the 2021 Magic Keyboard - HID: apple: Add 2021 magic keyboard FN key mapping - bonding: remove print in bond_verify_device_path - uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ - PM: sleep: Fix error handling in dpm_prepare() - dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools - dmaengine: ti: k3-udma: Report short packet errors - dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA - dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (CVE-2024-26600) - [arm64] drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case - net: stmmac: xgmac: fix handling of DPP safety error for DMA channels - tunnels: fix out of bounds access when building IPv6 PMTU error - atm: idt77252: fix a memleak in open_card_ubr0 - hwmon: (aspeed-pwm-tacho) mutex for tach reading - [x86] hwmon: (coretemp) Fix out-of-bounds memory access - [x86] hwmon: (coretemp) Fix bogus core_id to attr name mapping - inet: read sk->sk_family once in inet_recv_error() - rxrpc: Fix response to PING RESPONSE ACKs to a dead call - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() - ppp_async: limit MRU to 64K - netfilter: nft_compat: reject unused compat flag - netfilter: nft_compat: restrict match/target protocol to u16 - netfilter: nft_ct: reject direction for ct id - netfilter: nft_set_pipapo: store index in scratch maps - netfilter: nft_set_pipapo: add helper to release pcpu scratch area - netfilter: nft_set_pipapo: remove scratch_aligned pointer - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command - blk-iocost: Fix an UBSAN shift-out-of-bounds warning - net/af_iucv: clean up a try_then_request_module() - USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e - USB: serial: option: add Fibocom FM101-GL variant - USB: serial: cp210x: add ID for IMST iM871A-USB - usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK - hrtimer: Report offline hrtimer enqueue - Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU - Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID - vhost: use kzalloc() instead of kmalloc() followed by memset() - clocksource: Skip watchdog check for large watchdog intervals - net: stmmac: xgmac: use #define for string constants - net: stmmac: xgmac: fix a typo of register name in DPP safety handling - netfilter: nft_set_rbtree: skip end interval element from gc (CVE-2024-26581) - btrfs: forbid creating subvol qgroups - btrfs: do not ASSERT() if the newly created subvolume already got read (CVE-2024-23850) - btrfs: forbid deleting live subvol qgroup - btrfs: send: return EOPNOTSUPP on unknown flags - of: unittest: Fix compile in the non-dynamic case - net: openvswitch: limit the number of recursions from action sets (CVE-2024-1151) - spi: ppc4xx: Drop write-only variable - ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() - net: sysfs: Fix /sys/class/net/ path for statistics - [mips*] Add 'memory' clobber to csum_ipv6_magic() inline assembler - i40e: Fix waiting for queues of all VSIs to be disabled - tracing/trigger: Fix to return error if failed to alloc snapshot - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again - ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32 - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx - HID: wacom: generic: Avoid reporting a serial of '0' to userspace - HID: wacom: Do not register input devices until after hid_hw_start - usb: ucsi_acpi: Fix command completion handling - USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT - usb: f_mass_storage: forbid async queue when shutdown happen - media: ir_toy: fix a memleak in irtoy_tx - i2c: i801: Remove i801_set_block_buffer_mode - i2c: i801: Fix block process call transactions (CVE-2024-26593) - modpost: trim leading spaces when processing source files list - scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock" - lsm: fix the logic in security_inode_getsecctx() - firewire: core: correct documentation of fw_csr_string() kernel API - kbuild: Fix changing ELF file type for output of gen_btf for big endian - nfc: nci: free rx_data_reassembly skb on NCI device cleanup - net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() - xen-netback: properly sync TX responses - ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL - [arm*] binder: signal epoll threads of self-work (CVE-2024-26606) - misc: fastrpc: Mark all sessions as invalid in cb_remove - ext4: fix double-free of blocks due to wrong extents moved_len - tracing: Fix wasted memory in saved_cmdlines logic - staging: iio: ad5933: fix type mismatch regression - iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC - iio: accel: bma400: Fix a compilation problem - media: rc: bpf attach/detach requires write permission - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove - ring-buffer: Clean ring_buffer_poll_wait() error return - serial: max310x: set default value when reading clock ready bit - serial: max310x: improve crystal stable clock detection - [x86] mm/ident_map: Use gbpages only where full GB page should be mapped. - mmc: slot-gpio: Allow non-sleeping GPIO ro - ALSA: hda/conexant: Add quirk for SWS JS201D - nilfs2: fix data corruption in dsync block recovery for small block sizes - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() - crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked - nfp: use correct macro for LengthSelect in BAR config - nfp: flower: prevent re-adding mac index for bonded port - wifi: mac80211: reload info pointer in ieee80211_tx_dequeue() - irqchip/irq-brcmstb-l2: Add write memory barrier before exit - irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update - [s390x] qeth: Fix potential loss of L3-IP@ in case of network issues - ceph: prevent use-after-free in encode_cap_msg() - of: property: fix typo in io-channels - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) - pmdomain: core: Move the unused cleanup to a _sync initcall - tracing: Inform kmemleak of saved_cmdlines allocation - Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" - bus: moxtet: Add spi device table - PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support - mips: Fix max_mapnr being uninitialized on early stages - crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init - serial: Add rs485_supported to uart_port - serial: 8250_exar: Fill in rs485_supported - serial: 8250_exar: Set missing rs485_supported flag - scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm - scripts/decode_stacktrace.sh: support old bash version - scripts: decode_stacktrace: demangle Rust symbols - scripts/decode_stacktrace.sh: optionally use LLVM utilities - netfilter: ipset: fix performance regression in swap operation - netfilter: ipset: Missing gc cancellations fixed - hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range() - Revert "arm64: Stash shadow stack pointer in the task struct on interrupt" - net: prevent mss overflow in skb_segment() (CVE-2023-52435) - sched/membarrier: reduce the ability to hammer on sys_membarrier (CVE-2024-26602) - nilfs2: fix potential bug in end_buffer_async_write - nilfs2: replace WARN_ONs for invalid DAT metadata block requests - dm: limit the number of targets and parameter size area (CVE-2024-23851, CVE-2023-52429) - PM: runtime: add devm_pm_runtime_enable helper - PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() - [arm64] drm/msm/dsi: Enable runtime PM - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() (CVE-2024-0607) - net: bcmgenet: Fix EEE implementation - PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.211 - net/sched: Retire CBQ qdisc - net/sched: Retire ATM qdisc - net/sched: Retire dsmark qdisc - smb: client: fix OOB in receive_encrypted_standard() (CVE-2024-0565) - smb: client: fix potential OOBs in smb2_parse_contexts() (CVE-2023-52434) - smb: client: fix parsing of SMB3.1.1 POSIX create context - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset - userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb - zonefs: Improve error handling - sched/rt: Fix sysctl_sched_rr_timeslice intial value - sched/rt: Disallow writing invalid values to sched_rt_period_us - scsi: target: core: Add TMF to tmr_list handling - [arm64] dmaengine: fsl-qdma: increase size of 'irq_name' - wifi: cfg80211: fix missing interfaces when dumping - wifi: mac80211: fix race condition on enabling fast-xmit - fbdev: savage: Error out if pixclock equals zero - fbdev: sis: Error out if pixclock equals zero - spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected - ahci: asm1166: correct count of reported ports - ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() - [armhf] dmaengine: ti: edma: Add some null pointer checks to the edma_probe - [arm64] regulator: pwm-regulator: Add validity checks in continuous .get_voltage - nvmet-tcp: fix nvme tcp ida memory leak - [armhf] ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616 - netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new - nvme-fc: do not wait in vain when unloading module - nvmet-fcloop: swap the list_add_tail arguments - nvmet-fc: release reference on target port - nvmet-fc: abort command when there is no binding - ext4: correct the hole length returned by ext4_map_blocks() - Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table - efi: runtime: Fix potential overflow of soft-reserved region size - efi: Don't add memblocks for soft-reserved memory - [x86] hwmon: (coretemp) Enlarge per package core count limit - scsi: lpfc: Use unsigned type for num_sge - firewire: core: send bus reset promptly on gap count error - virtio-blk: Ensure no requests in virtqueues before deleting vqs. - [mips*] irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable - media: av7110: prevent underflow in write_ts_to_decoder() - hvc/xen: prevent concurrent accesses to the shared ring - [x86] uaccess: Implement macros for CMPXCHG on user addresses - seccomp: Invalidate seccomp mode to catch death failures - block: ataflop: fix breakage introduced at blk-mq refactoring - [powerpc*] watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions - [powerpc*] watchpoints: Annotate atomic context in more places - cifs: add a warning when the in-flight count goes negative - mtd: spinand: macronix: Add support for MX35LFxGE4AD - [x86] ASoC: Intel: boards: harden codec property handling - [x86] ASoC: Intel: boards: get codec device with ACPI instead of bus search - [x86] ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use - task_stack, x86/cea: Force-inline stack helpers - btrfs: tree-checker: check for overlapping extent items - btrfs: introduce btrfs_lookup_match_dir - btrfs: unify lookup return value when dir entry is missing - btrfs: do not pin logs too early during renames - lan743x: fix for potential NULL pointer dereference with bare card - [x86] platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC - iwlwifi: mvm: do more useful queue sync accounting - iwlwifi: mvm: write queue_sync_state only for sync - jbd2: remove redundant buffer io error checks - jbd2: recheck chechpointing non-dirty buffer - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint - [x86] drop bogus "cc" clobber from __try_cmpxchg_user_asm() - erofs: fix lz4 inplace decompression (CVE-2023-52497) - [amd64] IB/hfi1: Fix sdma.h tx->num_descs off-by-one error - [s390x] cio: fix invalid -EBUSY on ccw_device_start - dm-crypt: don't modify the data when using authenticated encryption - [arm64] KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler - [arm64] KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() - PCI/MSI: Prevent MSI hardware interrupt number truncation - l2tp: pass correct message length to ip6_append_data - [x86] Revert "x86/ftrace: Use alternative RET encoding" - [x86] text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR - [x86] ibt,paravirt: Use text_gen_insn() for paravirt_patch() - [x86] ftrace: Use alternative RET encoding - [x86] returnthunk: Allow different return thunks - [x86] Revert "x86/alternative: Make custom return thunk unconditional" - [x86] alternative: Make custom return thunk unconditional - usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs - mptcp: fix lockless access in subflow ULP diag - [amd64] IB/hfi1: Fix a memleak in init_credit_return - RDMA/bnxt_re: Return error for SRQ resize - RDMA/srpt: Support specifying the srpt_service_guid parameter - RDMA/qedr: Fix qedr_create_user_qp error flow - [arm64] dts: rockchip: set num-cs property for spi on px30 - RDMA/srpt: fix function pointer cast warnings - bpf, scripts: Correct GPL license name - scsi: jazz_esp: Only build if SCSI core is builtin - nouveau: fix function cast warnings - ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid - ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid - afs: Increase buffer size in afs_update_volume_status() - ipv6: sr: fix possible use-after-free and null-ptr-deref - packet: move from strlcpy with unused retval to strscpy - net: dev: Convert sa_data to flexible array in struct sockaddr - [s390x] use the correct count for __iowrite64_copy() - netfilter: nf_tables: set dormant flag on hook register failure - drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3 - drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set - drm/amd/display: Fix memory leak in dm_sw_fini() - block: ataflop: more blk-mq refactoring fixes - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio - arp: Prevent overflow in arp_req_get(). - ext4: regenerate buddy after block freeing failed if under fc replay (CVE-2024-26601) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.212 - [x86] platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names - crypto: virtio/akcipher - Fix stack overflow on memcpy - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter - net: ip_tunnel: prevent perpetual headroom growth - tun: Fix xdp_rxq_info's queue_index when detaching - ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() - lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected - net: usb: dm9601: fix wrong return value in dm9601_mdio_read - Bluetooth: Avoid potential use-after-free in hci_error_reset - Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR - Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST - Bluetooth: Enforce validation on max value of connection interval - netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() - rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back - efi/capsule-loader: fix incorrect allocation size - ALSA: Drop leftover snd-rtctimer stuff from Makefile - afs: Fix endless loop in directory parsing - tomoyo: fix UAF write bug in tomoyo_write_control() (CVE-2024-26622) - gtp: fix use-after-free and null-ptr-deref in gtp_newlink() - wifi: nl80211: reject iftype change with mesh ID change - btrfs: dev-replace: properly validate device names - [arm64] dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read - [arm64] dmaengine: fsl-qdma: init irq after reg initialization - mmc: core: Fix eMMC initialization with 1-bit bus connection - [arm64] mmc: sdhci-xenon: add timeout for PHY init complete - [arm64] mmc: sdhci-xenon: fix PHY init clock stability - [arm64] pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation - [x86] cpu/intel: Detect TME keyid bits before setting MTRR mask registers - mptcp: fix possible deadlock in subflow diag - ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks() - cachefiles: fix memory leak in cachefiles_add_cache() - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (CVE-2024-0841) - gpiolib: Fix the error path order in gpiochip_add_data_with_key() - gpio: fix resource unwinding order in error path - mptcp: fix double-free on socket dismantle https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.213 - [arm64,armhf] mmc: mmci: stm32: use a buffer for unaligned DMA requests - [arm64,armhf] mmc: mmci: stm32: fix DMA API overlapping mappings warning - lan78xx: Fix white space and style issues - lan78xx: Add missing return code checks - lan78xx: Fix partial packet errors on suspend/resume - lan78xx: Fix race conditions in suspend/resume handling - net: lan78xx: fix runtime PM count underflow on link stop - ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able - i40e: disable NAPI right after disabling irqs when handling xsk_pool - tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string - geneve: make sure to pull inner header in geneve_rx() - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() - cpumap: Zero-initialise xdp_rxq_info struct before running XDP program - net/rds: fix WARNING in rds_conn_connect_if_down - netfilter: nft_ct: fix l3num expectations with inet pseudo family - netfilter: nf_conntrack_h323: Add protection for bmp length out of range - netrom: Fix a data-race around sysctl_netrom_default_path_quality - netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser - netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser - netrom: Fix a data-race around sysctl_netrom_transport_timeout - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries - netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay - netrom: Fix a data-race around sysctl_netrom_transport_busy_delay - netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size - netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout - netrom: Fix a data-race around sysctl_netrom_routing_control - netrom: Fix a data-race around sysctl_netrom_link_fails_count - netrom: Fix data-races around sysctl_net_busy_read - xhci: remove extra loop in interrupt context - xhci: prevent double-fetch of transfer and transfer event TRBs - xhci: process isoc TD properly when there was a transaction error mid TD. - xhci: handle isoc Babble and Buffer Overrun events properly - net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr - bpf: net: Change sk_getsockopt() to take the sockptr_t argument - lsm: make security_socket_getpeersec_stream() sockptr_t safe - lsm: fix default return value of the socket_getpeersec_*() hooks - ext4: make ext4_es_insert_extent() return void - ext4: refactor ext4_da_map_blocks() - ext4: convert to exclusive lock while inserting delalloc extents - [x86] Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening - [x86] hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening - [x86] hv_netvsc: Wait for completion on request SWITCH_DATA_PATH - [x86] hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove - [x86] hv_netvsc: Make netvsc/VF binding check both MAC and serial number - [x86] hv_netvsc: use netif_is_bond_master() instead of open code - [x86] hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed - mm/hugetlb: change hugetlb_reserve_pages() to type bool - mm: hugetlb pages should not be reserved by shmat() if SHM_NORESERVE - getrusage: add the "signal_struct *sig" local variable - getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand() - getrusage: use __for_each_thread() - getrusage: use sig->stats_lock rather than lock_task_sighand() - [x86] Drivers: hv: vmbus: Drop error message when 'No request id available' - regmap: allow to define reg_update_bits for no bus configuration - regmap: Add bulk read/write callbacks into regmap_config https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.214 - io_uring/unix: drop usage of io_uring socket - io_uring: drop any code related to SCM_RIGHTS - rcu-tasks: Provide rcu_trace_implies_rcu_gp() - bpf: Defer the free of inner map when necessary (CVE-2023-52447) - ASoC: rt5645: Make LattePanda board DMI match more precise - [x86] xen: Add some null pointer checking to smp.c - [mips*] Clear Cause.BD in instruction_pointer_set - HID: multitouch: Add required quirk for Synaptics 0xcddc device - gen_compile_commands: fix invalid escape sequence warning - RDMA/mlx5: Fix fortify source warning while accessing Eth segment - RDMA/mlx5: Relax DEVX access upon modify commands - [x86] mm: Move is_vsyscall_vaddr() into asm/vsyscall.h - [x86] mm: Disallow vsyscall page read for copy_from_kernel_nofault() - net/iucv: fix the allocation size of iucv_path_table array - block: sed-opal: handle empty atoms when parsing response - dm-verity, dm-crypt: align "struct bvec_iter" correctly - scsi: mpt3sas: Prevent sending diag_reset when the controller is ready - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (CVE-2024-22099) - firewire: core: use long bus reset on gap count error - [x86] ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet - Input: gpio_keys_polled - suppress deferred probe error for gpio - [x86] paravirt: Fix build due to __text_gen_insn() backport - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak - nbd: null check for nla_nest_start - fs/select: rework stack allocation hack for clang - block: add a new set_read_only method - md: implement ->set_read_only to hook into BLKROSET processing - md: Don't clear MD_CLOSING when the raid is about to stop - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (CVE-2023-6270) - timekeeping: Fix cross-timestamp interpolation on counter wrap - timekeeping: Fix cross-timestamp interpolation corner case decision - timekeeping: Fix cross-timestamp interpolation for non-x86 - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (CVE-2023-7042) - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled - wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled - wifi: b43: Stop correct queue in DMA worker when QoS is disabled - wifi: b43: Disable QoS for bcm4331 - wifi: wilc1000: fix declarations ordering - wifi: wilc1000: fix RCU usage in connect path - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work - wifi: wilc1000: fix multi-vif management when deleting a vif - wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value - sock_diag: annotate data-races around sock_diag_handlers[family] - inet_diag: annotate data-races around inet_diag_table[] - bpftool: Silence build warning about calloc() - af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc(). - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete - wifi: iwlwifi: dbg-tlv: ensure NUL termination - wifi: iwlwifi: fix EWRD table validity check - net: blackhole_dev: fix build warning for ethh set but not used - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() - bpf: Factor out bpf_spin_lock into helpers. - bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly - wireless: Remove redundant 'flush_workqueue()' calls - wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() - [amd64] iommu/amd: Mark interrupt as managed - wifi: brcmsmac: avoid function pointer casts - net: ena: Remove ena_select_queue - ACPI: scan: Fix device check notification handling - [x86] relocs: Ignore relocations in .notes section (CVE-2024-26816) - SUNRPC: fix some memleaks in gssx_dec_option_array - mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function - wifi: rtw88: 8821c: Fix false alarm count - PCI: Make pci_dev_is_disconnected() helper public for other drivers - [amd64] iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected - igb: move PEROUT and EXTTS isr logic to separate functions - igb: Fix missing time sync events - Bluetooth: Remove superfluous call to hci_conn_check_pending() - Bluetooth: hci_core: Fix possible buffer overflow - sr9800: Add check for usbnet_get_endpoints (CVE-2024-26651) - bpf: Eliminate rlimit-based memory accounting for devmap maps - bpf: Fix DEVMAP_HASH overflow check on 32-bit arches - bpf: Fix hashtab overflow check on 32-bit arches - bpf: Fix stackmap overflow check on 32-bit arches - ipv6: fib6_rules: flush route cache when rule is changed - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() - net: phy: fix phy_get_internal_delay accessing an empty array - net: hns3: fix port duplex configure error in IMP reset - net: phy: DP83822: enable rgmii mode if phy_interface_is_rgmii - net: phy: dp83822: Fix RGMII TX delay configuration - OPP: debugfs: Fix warning around icc_get_name() - tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function - net/ipv4: Replace one-element array with flexible-array member - net/ipv4: Revert use of struct_size() helper - net/ipv4/ipv6: Replace one-element arraya with flexible-array members - bpf: net: Change do_ip_getsockopt() to take the sockptr_t argument - ipmr: fix incorrect parameter validation in the ip_mroute_getsockopt() function - l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function - udp: fix incorrect parameter validation in the udp_lib_getsockopt() function - net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function - nfp: flower: handle acti_netdevs allocation failure - dm raid: fix false positive for requeue needed during reshape - dm: call the resume method on internal suspend - [arm64,armhf] drm/tegra: dsi: Add missing check for of_find_device_by_node - [arm64,armhf] drm/tegra: dsi: Make use of the helper function dev_err_probe() - [arm64,armhf] drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe() - [arm64,armhf] drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe() - [arm64,armhf] drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe() - drm/rockchip: inno_hdmi: Fix video timing - drm: Don't treat 0 as -1 in drm_fixp2int_ceil - drm/rockchip: lvds: do not overwrite error code - drm/rockchip: lvds: do not print scary message when probing defer - drm/lima: fix a memleak in lima_heap_alloc - dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA - media: tc358743: register v4l2 async device only after successful setup - PCI/DPC: Print all TLP Prefixes, not just the first - perf record: Fix possible incorrect free in record__switch_output() - HID: lenovo: Add middleclick_workaround sysfs knob for cptkbd - drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' - drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' - perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample() - media: em28xx: annotate unchecked call to media_device_register() - media: v4l2-tpg: fix some memleaks in tpg_alloc - media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity - media: edia: dvbdev: fix a use-after-free - pinctrl: mediatek: Drop bogus slew rate register range for MT8192 - [arm64] clk: qcom: reset: Commonize the de/assert functions - [arm64] clk: qcom: reset: Ensure write completion on reset de/assertion - quota: simplify drop_dquot_ref() - quota: Fix potential NULL pointer dereference - quota: Fix rcu annotations of inode dquot pointers - PCI: switchtec: Fix an error handling path in switchtec_pci_probe() - crypto: xilinx - call finalize with bh disabled - perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() - drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode() - ALSA: seq: fix function cast warnings - perf stat: Avoid metric-only segv - media: sun8i-di: Fix coefficient writes - media: sun8i-di: Fix power on/off sequences - media: sun8i-di: Fix chroma difference threshold - media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak - media: go7007: add check of return value of go7007_read_addr() - media: pvrusb2: remove redundant NULL check - media: pvrusb2: fix pvr2_stream_callback casts - PCI: Mark 3ware-9650SE Root Port Extended Tags as broken - [arm64] clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister() - [arm64,armhf] drm/tegra: put drm_gem_object ref on error in tegra_fb_create - mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref - mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref - crypto: arm/sha - fix function cast warnings - drm/tidss: Fix initial plane zpos values - mtd: maps: physmap-core: fix flash size larger than 32-bit - mtd: rawnand: lpc32xx_mlc: fix irq handler prototype - drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int() - media: pvrusb2: fix uaf in pvr2_context_set_notify - media: dvb-frontends: avoid stack overflow warnings with clang - media: go7007: fix a memleak in go7007_load_encoder - media: ttpci: fix two memleaks in budget_av_attach - media: mediatek: vcodec: avoid -Wcast-function-type-strict warning - powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks - [arm64] drm/msm/dpu: add division of drm_display_mode's hskew parameter - [powerpc*] embedded6xx: Fix no previous prototype for avr_uart_send() etc. - leds: aw2013: Unlock mutex before destroying it - leds: sgm3140: Add missing timer cleanup and flash gpio control - backlight: lm3630a: Initialize backlight_properties on init - backlight: lm3630a: Don't set bl->props.brightness in get_brightness - backlight: da9052: Fully initialize backlight_properties during probe - backlight: lm3639: Fully initialize backlight_properties during probe - backlight: lp8788: Fully initialize backlight_properties during probe - clk: Fix clk_core_get NULL dereference - ALSA: hda/realtek: fix ALC285 issues on HP Envy x360 laptops - ALSA: usb-audio: Stop parsing channels bits when all channels are found. - RDMA/srpt: Do not register event handler until srpt device is fully setup - f2fs: compress: fix to check unreleased compressed cluster - scsi: csiostor: Avoid function pointer casts - RDMA/device: Fix a race between mad_client and cm_client init - scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn - net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 - NFSv4.2: fix listxattr maximum XDR buffer size - watchdog: stm32_iwdg: initialize default timeout - NFS: Fix an off by one in root_nfs_cat() - afs: Revert "afs: Hide silly-rename files from userspace" - [armhf] remoteproc: stm32: Constify st_rproc_ops - [armhf] remoteproc: Add new get_loaded_rsc_table() to rproc_ops - [armhf] remoteproc: stm32: Move resource table setup to rproc_ops - [armhf] remoteproc: stm32: use correct format strings on 64-bit - [armhf] remoteproc: stm32: Fix incorrect type in assignment for va - [armhf] remoteproc: stm32: Fix incorrect type assignment returned by stm32_rproc_get_loaded_rsc_tablef - tty: vt: fix 20 vs 0x20 typo in EScsiignore - serial: max310x: fix syntax error in IRQ error message - tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT - kconfig: fix infinite loop when expanding a macro at the end of file - rtc: mt6397: select IRQ_DOMAIN instead of depending on it - serial: 8250_exar: Don't remove GPIO device on suspend - staging: greybus: fix get_channel_from_mode() failure path - usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin - io_uring: don't save/restore iowait state - [s390x] vtime: fix average steal time calculation - soc: fsl: dpio: fix kcalloc() argument order - hsr: Fix uninit-value access in hsr_get_node() - packet: annotate data-races around ignore_outgoing - net: dsa: mt7530: prevent possible incorrect XTAL frequency selection - wireguard: receive: annotate data-race around receiving_counter.counter - rds: introduce acquire/release ordering in acquire/release_in_xmit() - hsr: Handle failures in module init - net/bnx2x: Prevent access to a freed page in page_pool - netfilter: nft_set_pipapo: release elements in clone only from destroy path (CVE-2024-26809) - scsi: fc: Update formal FPIN descriptor definitions - netfilter: nf_tables: do not compare internal table flags on updates - rcu: add a helper to report consolidated flavor QS - bpf: report RCU QS in cpumap kthread - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler - regmap: Add missing map->bus check - [armhf] remoteproc: stm32: fix phys_addr_t format string https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.215 - amdkfd: use calloc instead of kzalloc to avoid integer overflow (CVE-2024-26817) - Documentation/hw-vuln: Update spectre doc - [x86] cpu: Support AMD Automatic IBRS - [x86] bugs: Use sysfs_emit() - timers: Update kernel-doc for various functions - timers: Use del_timer_sync() even on UP - timers: Rename del_timer_sync() to timer_delete_sync() - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach (CVE-2023-47233) - [armhf] dts: marvell: Fix maxium->maxim typo in brownstone dts - [x86] drm/vmwgfx: stop using ttm_bo_create v2 - [x86] drm/vmwgfx: switch over to the new pin interface v2 - [x86] drm/vmwgfx/vmwgfx_cmdbuf_res: Remove unused variable 'ret' - [x86] drm/vmwgfx: Fix some static checker warnings - [x86] drm/vmwgfx: Fix possible null pointer derefence with invalid contexts - media: xc4000: Fix atomicity violation in xc4000_get_frequency (CVE-2024-24861) - KVM: Always flush async #PF workqueue when vCPU is being destroyed - [x86] crypto: qat - fix double free during reset - [x86] crypto: qat - resolve race condition during AER recovery - ext4: correct best extent lstart adjustment logic - block: introduce zone_write_granularity limit - block: Clear zone limits for a non-zoned stacked queue - bounds: support non-power-of-two CONFIG_NR_CPUS - fat: fix uninitialized field in nostale filehandles - ubifs: Set page uptodate in the correct place - ubi: Check for too small LEB size in VTBL code - ubi: correct the calculation of fastmap size - mtd: rawnand: meson: fix scrambling mode value in command macro - PM: suspend: Set mem_sleep_current during kernel command line setup - [powerpc*] fsl: Fix mfpmr build errors with newer binutils - USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB - USB: serial: add device ID for VeriFone adapter - USB: serial: cp210x: add ID for MGP Instruments PDS100 - USB: serial: option: add MeiG Smart SLM320 product - USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M - PM: sleep: wakeirq: fix wake irq warning in system suspend - mmc: tmio: avoid concurrent runs of mmc_request_done() - fuse: fix root lookup with nonzero generation - fuse: don't unhash root - usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros - printk/console: Split out code that enables default console - serial: Lock console when calling into driver before registration - btrfs: fix off-by-one chunk length calculation at contains_pending_extent() - PCI: Drop pci_device_remove() test of pci_dev->driver - PCI/PM: Drain runtime-idle callbacks before driver removal - PCI/ERR: Cache RCEC EA Capability offset in pci_init_capabilities() - PCI: Cache PCIe Device Capabilities register - PCI: Work around Intel I210 ROM BAR overlap defect - PCI/ASPM: Make Intel DG2 L1 acceptable latency unlimited - PCI/DPC: Quirk PIO log size for certain Intel Root Ports - PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports - Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" - dm-raid: fix lockdep waring in "pers->hot_add_disk" - mac802154: fix llsec key resources release in mac802154_llsec_key_del - mm: swap: fix race between free_swap_and_cache() and swapoff() - mmc: core: Fix switch on gp3 partition - [armhf] drm/etnaviv: Restore some id values - hwmon: (amc6821) add of_match table - ext4: fix corruption during on-line resize - nvmem: meson-efuse: fix function pointer type mismatch - slimbus: core: Remove usage of the deprecated ida_simple_xx() API - [arm64,armhf] phy: tegra: xusb: Add API to retrieve the port number of phy - usb: gadget: tegra-xudc: Use dev_err_probe() - usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic - speakup: Fix 8bit characters from direct synth - PCI/ERR: Clear AER status only when we control AER - PCI/AER: Block runtime suspend when handling errors - nfs: fix UAF in direct writes - kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1 - PCI: dwc: endpoint: Fix advertised resizable BAR size - vfio/platform: Disable virqfds on cleanup - ring-buffer: Fix waking up ring buffer readers - ring-buffer: Do not set shortest_full when full target is hit - ring-buffer: Fix resetting of shortest_full - ring-buffer: Fix full_waiters_pending in poll - [s390x] zcrypt: fix reference counting on zcrypt card objects - drm/panel: do not return negative error codes from drm_panel_get_modes() - [armhf] drm/exynos: do not return negative values from .get_modes() - drm/imx/ipuv3: do not return negative values from .get_modes() - drm/vc4: hdmi: do not return negative values from .get_modes() - nilfs2: fix failure to detect DAT corruption in btree and direct mappings - nilfs2: prevent kernel bug at submit_bh_wbc() - cpufreq: dt: always allocate zeroed cpumask - [x86] CPU/AMD: Update the Zenbleed microcode revisions - net: hns3: tracing: fix hclgevf trace event strings - wireguard: netlink: check for dangling peer via is_dead instead of empty list - wireguard: netlink: access device through ctx instead of peer - ahci: asm1064: correct count of reported ports - ahci: asm1064: asm1166: don't limit reported ports - drm/amd/display: Return the correct HDCP error code - drm/amd/display: Fix noise issue on HDMI AV mute - dm snapshot: fix lockup in dm_exception_table_exit - vxge: remove unnecessary cast in kfree() - [x86] stackprotector/32: Make the canary into a regular percpu variable - [x86] pm: Work around false positive kmemleak report in msr_build_context() - scripts: kernel-doc: Fix syntax error due to undeclared args variable (Closes: #1064035) - comedi: comedi_test: Prevent timers rescheduling during deletion - cpufreq: brcmstb-avs-cpufreq: fix up "add check for cpufreq_cpu_get's return value" - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643) - netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642) - netfilter: nf_tables: reject constant set with timeout - Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory - xfrm: Avoid clang fortify warning in copy_to_user_tmpl() - [x86] KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() - ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command - usb: gadget: ncm: Fix handling of zero block length packets - usb: port: Don't try to peer unused USB ports based on location - tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled - mei: me: add arrow lake point S DID - mei: me: add arrow lake point H DID - vt: fix unicode buffer corruption when deleting characters - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion - tee: optee: Fix kernel panic caused by incorrect error handling - xen/events: close evtchn after mapping cleanup (CVE-2024-26687) - printk: Update @console_may_schedule in console_trylock_spinning() - btrfs: allocate btrfs_ioctl_defrag_range_args on stack - [x86] asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix - [x86] bugs: Add asm helpers for executing VERW - [x86] entry_64: Add VERW just before userspace transition - [x86] entry_32: Add VERW just before userspace transition - [x86] bugs: Use ALTERNATIVE() instead of mds_user_clear static key - [x86] KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH - [x86] KVM/VMX: Move VERW closer to VMentry for MDS mitigation - [x86] Mitigate Register File Data Sampling (RFDS) vulnerability (CVE-2023-28746): + [x86] mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set + Documentation/hw-vuln: Add documentation for RFDS + [x86] rfds: Mitigate Register File Data Sampling (RFDS) + [x86] KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests - perf/core: Fix reentry problem in perf_output_read_group() - efivarfs: Request at most 512 bytes for variable names - [powerpc*] xor_vmx: Add '-mhard-float' to CFLAGS - serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO (CVE-2023-52488) - mm/memory-failure: fix an incorrect use of tail pages - mm/migrate: set swap entry values of THP tail pages properly. - init: open /initrd.image with O_LARGEFILE - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes - exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack() - mmc: core: Initialize mmc_blk_ioc_data - mmc: core: Avoid negative index with array access - net: ll_temac: platform_get_resource replaced by wrong function - usb: cdc-wdm: close race between read and workqueue - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (CVE-2024-26654) - scsi: core: Fix unremoved procfs host directory regression - [arm*] staging: vc04_services: changen strncpy() to strscpy_pad() - [arm*] staging: vc04_services: fix information leak in create_component() - USB: core: Add hub_get() and hub_put() routines - [arm*] usb: dwc2: host: Fix remote wakeup from hibernation - [arm*] usb: dwc2: host: Fix hibernation flow - [arm*] usb: dwc2: host: Fix ISOC flow in DDMA mode - [arm*] usb: dwc2: gadget: LPM flow fix - usb: udc: remove warning when queue disabled ep - usb: typec: ucsi: Ack unsupported commands - usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset - scsi: qla2xxx: Split FCE|EFT trace control - scsi: qla2xxx: Fix command flush on cable pull - scsi: qla2xxx: Delay I/O Abort on PCI error - [x86] cpu: Enable STIBP on AMD if Automatic IBRS is enabled - PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports - scsi: lpfc: Correct size for wqe for memset() - USB: core: Fix deadlock in usb_deauthorize_interface() - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet - ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa() - tcp: properly terminate timers for kernel sockets - ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields() - bpf: Protect against int overflow for stack access size - dm integrity: fix out-of-range warning - r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d - [x86] cpufeatures: Add new word for scattered features - Bluetooth: hci_event: set the conn encrypted before conn establishes - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CVE-2024-24857, CVE-2024-24858) - netfilter: nf_tables: disallow timeout for anonymous sets (CVE-2023-52620) - net/rds: fix possible cp null dereference - vfio/pci: Disable auto-enable of exclusive INTx IRQ (CVE-2024-27437) - vfio/pci: Lock external INTx masking ops (CVE-2024-26810) - vfio: Introduce interface to flush virqfd inject workqueue - vfio/pci: Create persistent INTx handler (CVE-2024-26812) - vfio/platform: Create persistent IRQ handlers (CVE-2024-26813) - vfio/fsl-mc: Block calling interrupt handler without trigger (CVE-2024-26814) - io_uring: ensure '0' is returned on file registration success - Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped." - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations - [x86] srso: Add SRSO mitigation for Hygon processors (CVE-2023-52482) - block: add check that partition length needs to be aligned with block size (CVE-2023-52458) - netfilter: nf_tables: reject new basechain after table flag update - netfilter: nf_tables: flush pending destroy work before exit_net release - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() - netfilter: validate user input for expected length - vboxsf: Avoid an spurious warning if load_nls_xxx() fails - bpf, sockmap: Prevent lock inversion deadlock in map delete elem - net/sched: act_skbmod: prevent kernel-infoleak - net: stmmac: fix rx queue priority assignment - erspan: make sure erspan_base_hdr is present in skb->head - ipv6: Fix infinite recursion in fib6_dump_done(). - udp: do not transition UDP GRO fraglist partial checksums to unnecessary - i40e: fix i40e_count_filters() to count only active/new filters - i40e: fix vf may be used uninitialized in this function warning - scsi: qla2xxx: Update manufacturer details - scsi: qla2xxx: Update manufacturer detail - Revert "usb: phy: generic: Get the vbus supply" - udp: do not accept non-tunnel GSO skbs landing in a tunnel - net: ravb: Always process TX descriptor ring - [arm64] dts: qcom: sc7180: Remove clock for bluetooth on Trogdor - [arm64] dts: qcom: sc7180-trogdor: mark bluetooth address as broken - ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw - ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit - scsi: mylex: Fix sysfs buffer lengths - ata: sata_mv: Fix PCI device ID table declaration compilation warning - ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone - driver core: Introduce device_link_wait_removal() - of: dynamic: Synchronize of_changeset_destroy() with the devlink removals - [x86] mce: Make sure to grab mce_sysfs_mutex in set_bank() - [s390x] entry: align system call table on 8 bytes - [x86] bugs: Fix the SRSO mitigation on Zen3/4 - [x86] retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO - mptcp: don't account accept() of non-MPC client as fallback to TCP - [x86] cpufeatures: Add CPUID_LNX_5 to track recently added Linux-defined word - objtool: Add asm version of STACK_FRAME_NON_STANDARD - wifi: ath9k: fix LNA selection in ath_ant_try_scan() - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() - panic: Flush kernel log buffer at the end - [arm64] dts: rockchip: fix rk3328 hdmi ports node - [arm64] dts: rockchip: fix rk3399 hdmi ports node - ionic: set adminq irq affinity - pstore/zone: Add a null pointer check to the psz_kmsg_read - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() - btrfs: export: handle invalid inode or root reference in btrfs_get_parent() - btrfs: send: handle path ref underflow in header iterate_inode_ref() - net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() - Bluetooth: btintel: Fix null ptr deref in btintel_read_version - Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails - pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs - sysv: don't call sb_bread() with pointers_lock held - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() - isofs: handle CDs with bad root inode but good Joliet root directory - media: sta2x11: fix irq handler cast - ext4: add a hint for block bitmap corrupt state in mb_groups - ext4: forbid commit inconsistent quota data when errors=remount-ro - drm/amd/display: Fix nanosec stat overflow - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int - Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default" - libperf evlist: Avoid out-of-bounds access - block: prevent division by zero in blk_rq_stat_sum() - RDMA/cm: add timeout to cm_destroy_id wait - Input: allocate keycode for Display refresh rate toggle - [x86] platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet - ring-buffer: use READ_ONCE() to read cpu_buffer->commit_page in concurrent environment - tools: iio: replace seekdir() in iio_generic_buffer - usb: typec: tcpci: add generic tcpci fallback compatible - usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined - fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 - drivers/nvme: Add quirks for device 126f:2262 - fbmon: prevent division by zero in fb_videomode_from_videomode() - netfilter: nf_tables: release batch on table validation from abort path - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (CVE-2024-26925) - netfilter: nf_tables: discard table flag update with pending basechain deletion - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc - virtio: reenable config if freezing device failed - [x86] mm/pat: fix VM_PAT handling in COW mappings - [x86] drm/i915/gt: Reset queue_priority_hint on parking - Bluetooth: btintel: Fixe build regression - [x86] VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() - kbuild: dummy-tools: adjust to stricter stackprotector check - scsi: sd: Fix wrong zone_write_granularity value during revalidate - [x86] retpoline: Add NOENDBR annotation to the SRSO dummy return thunk - [x86] head/64: Re-enable stack protection https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.216 - batman-adv: Avoid infinite loop trying to resize local TT - Bluetooth: Fix memory leak in hci_req_sync_complete() - media: cec: core: remove length check of Timer Status - nouveau: fix function cast warning - net: openvswitch: fix unwanted error log on timeout policy probing - u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING - geneve: fix header validation in geneve[6]_xmit_skb - ipv6: fib: hide unused 'pn' variable - ipv4/route: avoid unused-but-set-variable warning - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr - Bluetooth: SCO: Fix not validating setsockopt user input - netfilter: complete validation of user input - net/mlx5: Properly link new fs rules into the tree - af_unix: Do not use atomic ops for unix_sk(sk)->inflight. - af_unix: Fix garbage collector racing against connect() (CVE-2024-26923) - net: ena: Fix potential sign extension issue - net: ena: Wrong missing IO completions check order - net: ena: Fix incorrect descriptor free behavior - [amd64] iommu/vt-d: Allocate local memory for page request queue - [arm64] mailbox: imx: fix suspend failue - btrfs: qgroup: correctly model root qgroup rsv in convert - drm/client: Fully protect modes[] with dev->mode_config.mutex - vhost: Add smp_rmb() in vhost_vq_avail_empty() - [x86] cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n - [x86] apic: Force native_apic_mem_read() to use the MOV instruction - irqflags: Explicitly ignore lockdep_hrtimer_exit() argument - btrfs: record delayed inode root in transaction - kprobes: Fix possible use-after-free issue on kprobe registration - Revert "tracing/trigger: Fix to return error if failed to alloc snapshot" - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (CVE-2024-27020) - netfilter: nft_set_pipapo: do not free live element (CVE-2024-26924) - tun: limit printing rate when illegal packet received by tun dev (CVE-2024-27013) - RDMA/rxe: Fix the problem "mutex_destroy missing" - RDMA/cm: Print the old state when cm_destroy_id gets timeout - RDMA/mlx5: Fix port number for counter query in multi-port configuration - drm: nv04: Fix out of bounds access (CVE-2024-27008) - drm/panel: visionox-rm69299: don't unregister DSI device - clk: Remove prepare_lock hold assertion in __clk_release() - clk: Mark 'all_lists' as const - clk: remove extra empty line - clk: Print an info line before disabling unused clocks - clk: Initialize struct clk_core kref earlier - clk: Get runtime PM before walking tree during disable_unused (CVE-2024-27004) - [x86] cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ - [arm*] binder: check offset alignment in binder_get_object() (CVE-2024-26926) - [x86] thunderbolt: Avoid notify PM core about runtime PM resume - [x86] thunderbolt: Fix wake configurations after device unplug - [x86] comedi: vmk80xx: fix incomplete endpoint checking (CVE-2024-27001) - USB: serial: option: add Fibocom FM135-GL variants - USB: serial: option: add support for Fibocom FM650/FG650 - USB: serial: option: add Lonsung U8300/U9300 product - USB: serial: option: support Quectel EM060K sub-models - USB: serial: option: add Rolling RW101-GL and RW135-GL support - USB: serial: option: add Telit FN920C04 rmnet compositions - Revert "usb: cdc-wdm: close race between read and workqueue" - usb: dwc2: host: Fix dereference issue in DDMA completion flow. (CVE-2024-26997) - usb: Disable USB3 LPM at shutdown - mei: me: disable RPL-S on SPS and IGN firmwares - speakup: Avoid crash on very long word (CVE-2024-26994) - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993) - init/main.c: Fix potential static_command_line memory overflow (CVE-2024-26988) - drm/amdgpu: validate the parameters of bo mapping operations more clearly (CVE-2024-26922) - nouveau: fix instmem race condition around ptr stores (CVE-2024-26984) - nilfs2: fix OOB in nilfs_set_de_type (CVE-2024-26981) - wifi: iwlwifi: mvm: remove old PASN station when adding a new one - vxlan: drop packets from invalid src-address - ipv4: check for NULL idev in ip_route_use_hint() - net: usb: ax88179_178a: stop lying about skb->truesize - net: gtp: Fix Use-After-Free in gtp_dellink - ipvs: Fix checksumming on GSO of SCTP packets - net: openvswitch: Fix Use-After-Free in ovs_ct_exit - netfilter: nf_tables: honor table dormant flag from netdev release event path - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue - i40e: Report MFS in decimal base instead of hex - iavf: Fix TC config comparison with existing adapter TC config - net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). - serial: core: Provide port lock wrappers - Revert "crypto: api - Disallow identical driver names" - net/mlx5e: Fix a race in command alloc flow - tracing: Show size of requested perf buffer - tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together - PM / devfreq: Fix buffer overflow in trans_stat_show (CVE-2023-52614) - Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() - cpu: Re-enable CPU mitigations by default for !X86 architectures - drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3 - drm/amdgpu: Fix leak when GPU memory allocation fails - irqchip/gic-v3-its: Prevent double free on error - ethernet: Add helper for assigning packet type when dest address does not match device address - net: b44: set pause params only when interface is up - stackdepot: respect __GFP_NOLOCKDEP allocation flag - mtd: diskonchip: work around ubsan link failure - tcp: Clean up kernel listener's reqsk in inet_twsk_purge() - tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge() - [x86] idma64: Don't try to serve interrupts when device is powered off - i2c: smbus: fix NULL function pointer dereference - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up - bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS - udp: preserve the connected status if only UDP cmsg - serial: core: fix kernel-doc for uart_port_unlock_irqrestore() . [ Salvatore Bonaccorso ] * Bump ABI to 29 * [rt] Refresh "sched/vtime: Consolidate IRQ time accounting" * [rt] Update to 5.10.215-rt107 * [rt] Refresh "u64_stats: Disable preemption on 32bit-UP/SMP with RT during updates" * drivers/tty: Disable N_GSM * tipc: fix UAF in error path * tipc: fix a possible memleak in tipc_buf_append linux-signed-amd64 (5.10.218+1) bullseye-security; urgency=high . * Sign kernel from linux 5.10.218-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.217 - [arm64,armhf] dmaengine: pl330: issue_pending waits until WFP state - dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state" - wifi: nl80211: don't free NULL coalescing rule - eeprom: at24: Use dev_err_probe for nvmem register failure - eeprom: at24: Probe for DDR3 thermal sensor in the SPD case - eeprom: at24: fix memory corruption race condition (CVE-2024-35848) - [armhf] pinctrl: pinctrl-aspeed-g6: Fix register offset for pinconf of GPIOR-T - [arm64] pinctrl/meson: fix typo in PDM's pin name - pinctrl: core: delete incorrect free in pinctrl_enable() - sunrpc: add a struct rpc_stats arg to rpc_create_args - nfs: expose /proc/net/sunrpc/nfs in net namespaces - nfs: make the rpc_stat per net namespace - nfs: Handle error of rpc_proc_register() in nfs_net_init(). - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() - [s390x] mm: Fix storage key clearing for guest huge pages - [s390x] mm: Fix clearing storage keys for huge pages - bna: ensure the copied buf is NUL terminated - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). - net l2tp: drop flow hash on forward - [s390x] vdso: Add CFI for RA register to asm macro vdso_func - net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() - net: qede: use return from qede_parse_flow_attr() for flower - net: qede: use return from qede_parse_flow_attr() for flow_spec - net: qede: use return from qede_parse_actions() - cxgb4: Properly lock TX queue for the selftest. - [arm64,armhf] net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 - net: bridge: fix multicast-to-unicast with fraglist GSO - net: core: reject skb_copy(_expand) for fraglist GSO skbs - net: gro: add flush check in udp_gro_receive_segment - [arm64] clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change - [arm64] KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id - [arm64] KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() - scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic - gfs2: Fix invalid metadata access in punch_hole - wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc - wifi: cfg80211: fix rdev_dump_mpp() arguments order - net: mark racy access on sk->sk_rcvbuf - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload - btrfs: return accurate error code on open failure in open_fs_devices() - ALSA: line6: Zero-initialize message buffers - net: bcmgenet: Reset RBUF on first open - ata: sata_gemini: Check clk_enable() result - firewire: ohci: mask bus reset interrupts between ISR and bottom half - btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve - btrfs: always clear PERTRANS metadata during commit - scsi: target: Fix SELinux error when systemd-modules loads the target module - blk-iocost: avoid out of bounds shift - [arm64,armhf] gpu: host1x: Do not setup DMA for virtual devices - [mips64el,mipsel]: scall: Save thread_info.syscall unconditionally on entry (Closes: #1068365) - fs/9p: only translate RWX permissions for plain 9P2000 - fs/9p: translate O_TRUNC into OTRUNC - 9p: explicitly deny setlease attempts - gpio: wcove: Use -ENOTSUPP consistently - gpio: crystalcove: Use -ENOTSUPP consistently - clk: Don't hold prepare_lock when calling kref_put() - fs/9p: drop inodes immediately on non-.L too - drm/nouveau/dp: Don't probe eDP ports twice harder - net:usb:qmi_wwan: support Rolling modules - xfrm: Preserve vlan tags for transport mode software GRO - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (CVE-2024-27398) - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CVE-2024-27399) - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation - [x86] hwmon: (corsair-cpro) Use a separate buffer for sending commands - [x86] hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event() - [x86] hwmon: (corsair-cpro) Protect ccp->wait_input_report with a spinlock - phonet: fix rtm_phonet_notify() skb allocation - kcov: Remove kcov include from sched.h and move it to its users. - net: bridge: fix corrupted ethernet header on multicast-to-unicast - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() - [arm64] net: hns3: use appropriate barrier function after setting a bit value - btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send() - firewire: nosy: ensure user_length is taken into account when fetching packet contents (CVE-2024-27401) - [arm64] dts: qcom: Fix 'interrupt-map' parent address cells - usb: typec: ucsi: Check for notifications after init - usb: typec: ucsi: Fix connector check on init - usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device - usb: ohci: Prevent missed ohci interrupts - usb: gadget: composite: fix OS descriptors w_value logic - usb: gadget: f_fs: Fix a race condition when processing setup packets. - usb: xhci-plat: Don't include xhci.h - usb: dwc3: core: Prevent phy suspend during init - ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU - iio:imu: adis16475: Fix sync mode setting - iio: accel: mxc4005: Interrupt handling fixes - net: bcmgenet: synchronize use of bcmgenet_set_rx_mode() - dyndbg: fix old BUG_ON in >control parser - mei: me: add lunar lake point M DID - drm/vmwgfx: Fix invalid reads in fence signaled events - net: fix out-of-bounds access in ops_init - regulator: core: fix debugfs creation regression - keys: Fix overwrite of key expiration on instantiation - md: fix kmemleak of rdev->serial (CVE-2024-26900) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.218 - pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin() - [x86] xen: Drop USERGS_SYSRET64 paravirt call - [arm64] net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access - [arm64] net: bcmgenet: synchronize UMAC_CMD access - ima: fix deadlock when traversing "ima_default_rules". - netlink: annotate lockless accesses to nlk->max_recvmsg_len - [x86] KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection - firmware: arm_scmi: Harden accesses to the reset domains (CVE-2022-48655) - mptcp: ensure snd_nxt is properly initialized on connect - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() - drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() (CVE-2023-52585) - usb: typec: ucsi: displayport: Fix potential deadlock - serial: kgdboc: Fix NMI-safety problems from keyboard reset code - docs: kernel_include.py: Cope with docutils 0.21 . [ Salvatore Bonaccorso ] * Bump ABI to 30 linux-signed-amd64 (5.10.216+1) bullseye-security; urgency=high . * Sign kernel from linux 5.10.216-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.210 - units: change from 'L' to 'UL' - units: add the HZ macros - spi: introduce SPI_MODE_X_MASK macro - iio: adc: ad7091r: Set alert bit in config register - iio: adc: ad7091r: Allow users to configure device events - iio: adc: ad7091r: Enable internal vref if external vref is not supplied - dmaengine: fix NULL pointer in channel unregistration function - iio:adc:ad7091r: Move exports into IIO_AD7091R namespace. - ext4: allow for the last group to be marked as trimmed - crypto: api - Disallow identical driver names - PM: hibernate: Enforce ordering during image compression/decompression - hwrng: core - Fix page fault dead lock on mmap-ed hwrng - [s390x] crypto: s390/aes - Fix buffer overread in CTR mode - bus: mhi: host: Drop chan lock before queuing buffers - async: Split async_schedule_node_domain() - async: Introduce async_schedule_dev_nocall() - [arm64] dts: qcom: sdm845: fix USB wakeup interrupt types - [arm64] dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts - lsm: new security_file_ioctl_compat() hook - scripts/get_abi: fix source path leak - mmc: core: Use mrq.sbc in close-ended ffu - mmc: mmc_spi: remove custom DMA mapped buffers - rtc: Adjust failure return code for cmos_set_alarm() - nouveau/vmm: don't set addr on the fail path to avoid warning - ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path - rename(): fix the locking of subdirectories - block: Remove special-casing of compound pages - mm: vmalloc: introduce array allocation functions - KVM: use __vcalloc for very large allocations - net/smc: fix illegal rmb_desc access in SMC-D connection dump - tcp: make sure init the accept_queue's spinlocks once - bnxt_en: Wait for FLR to complete during probe - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING - llc: make llc_ui_sendmsg() more robust against bonding changes - llc: Drop support for ETH_P_TR_802_2. - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv (CVE-2024-23849) - tracing: Ensure visibility when inserting an element into tracing_map - afs: Hide silly-rename files from userspace - tcp: Add memory barrier to tcp_push() - netlink: fix potential sleeping issue in mqueue_flush_file - ipv6: init the accept_queue's spinlocks in inet6_create - net/mlx5: DR, Use the right GVMI number for drop action - net/mlx5e: fix a double-free in arfs_create_groups - netfilter: nf_tables: restrict anonymous set and map names to 16 bytes - netfilter: nf_tables: validate NFPROTO_* family - net: mvpp2: clear BM pool before initialization - fjes: fix memleaks in fjes_hw_setup - net: fec: fix the unhandled context fault from smmu - btrfs: ref-verify: free ref cache before clearing mount opt - btrfs: tree-checker: fix inline ref size in error messages - btrfs: don't warn if discard range is not aligned to sector - btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume - rbd: don't move requests to the running list on errors - exec: Fix error handling in begin_new_exec() - wifi: iwlwifi: fix a memory corruption - netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain - gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 - drm: Don't unref the same fb many times by mistake due to deadlock handling - drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking - drm/tidss: Fix atomic_flush check - drm/bridge: nxp-ptn3460: simplify some error checking - PM: sleep: Use dev_printk() when possible - PM: sleep: Avoid calling put_device() under dpm_list_mtx - PM: core: Remove unnecessary (void *) conversions - PM: sleep: Fix possible deadlocks in core system-wide PM code - fs/pipe: move check to pipe_has_watch_queue() - pipe: wakeup wr_wait after setting max_usage - [arm64] dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts - [arm64] dts: qcom: sc7180: fix USB wakeup interrupt types - mm: use __pfn_to_section() instead of open coding it - mm/sparsemem: fix race in accessing memory_section->usage - btrfs: remove err variable from btrfs_delete_subvolume - btrfs: avoid copying BTRFS_ROOT_SUBVOL_DEAD flag to snapshot of subvolume being deleted - drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33] - [armhf] drm/exynos: fix accidental on-stack copy of exynos_drm_plane - [armhf] drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume - gpio: eic-sprd: Clear interrupt after set the interrupt type - spi: bcm-qspi: fix SFDP BFPT read by usig mspi read - [mips*] Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan - tick/sched: Preserve number of idle sleeps across CPU hotplug events - [x86] entry/ia32: Ensure s32 is sign extended to s64 - [powerpc*] mm: Fix null-pointer dereference in pgtable_cache_add - drivers/perf: pmuv3: don't expose SW_INCR event in sysfs - [powerpc*] Fix build error due to is_valid_bugaddr() - [powerpc*] mm: Fix build failures due to arch_reserved_kernel_pages() - [x86] boot: Ignore NMIs during very early boot - [powerpc*] pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE - [powerpc*] lib: Validate size for vector operations - [x86] mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel - perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file - debugobjects: Stop accessing objects after releasing hash bucket lock - regulator: core: Only increment use_count when enable_count changes - audit: Send netlink ACK before setting connection in auditd_set - ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop - PNP: ACPI: fix fortify warning - ACPI: extlog: fix NULL pointer dereference check - PM / devfreq: Synchronize devfreq_monitor_[start/stop] - ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree - jfs: fix slab-out-of-bounds Read in dtSearch - jfs: fix array-index-out-of-bounds in dbAdjTree - jfs: fix uaf in jfs_evict_inode - pstore/ram: Fix crash when setting number of cpus to an odd number - crypto: stm32/crc32 - fix parsing list of devices - afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu() - afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() - rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() - jfs: fix array-index-out-of-bounds in diNewExt - [s390x] ptrace: handle setting of fpc register correctly - [s390x] KVM: s390: fix setting of fpc register - SUNRPC: Fix a suspicious RCU usage warning - ecryptfs: Reject casefold directory inodes - ext4: fix inconsistent between segment fstrim and full fstrim - ext4: unify the type of flexbg_size to unsigned int - ext4: remove unnecessary check from alloc_flex_gd() - ext4: avoid online resizing failures due to oversized flex bg - wifi: rt2x00: restart beacon queue when hardware reset - scsi: lpfc: Fix possible file string name overflow when updating firmware - PCI: Add no PM reset quirk for NVIDIA Spectrum devices - bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk - scsi: arcmsr: Support new PCI device IDs 1883 and 1886 - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() - bpf: Add map and need_defer parameters to .map_fd_put_ptr() - scsi: libfc: Don't schedule abort twice - scsi: libfc: Fix up timeout error in fc_fcp_rec_error() - bpf: Set uattr->batch.count as zero before batched update or deletion - ionic: pass opcode to devcmd_wait - block/rnbd-srv: Check for unlikely string overflow - [arm64,armhf] net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path - block: prevent an integer overflow in bvec_try_merge_hw_page - md: Whenassemble the array, consult the superblock of the freshest device - wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices - wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() - wifi: cfg80211: free beacon_ies when overridden from hidden BSS - Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066 - Bluetooth: L2CAP: Fix possible multiple reject send - i40e: Fix VF disable behavior to block all traffic - f2fs: fix to check return value of f2fs_reserve_new_block() - ALSA: hda: Refer to correct stream index at loops - ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument - fast_dput(): handle underflows gracefully - RDMA/IPoIB: Fix error code return in ipoib_mcast_join - drm/amd/display: Fix tiled display misalignment - f2fs: fix write pointers on zoned device after roll forward - drm/drm_file: fix use of uninitialized variable - drm/framebuffer: Fix use of uninitialized variable - drm/mipi-dsi: Fix detach call without attach - media: stk1160: Fixed high volume of stk1160_dbg messages - [x86] PCI: add INTEL_HDA_ARL to pci_ids.h - [x86] ALSA: hda: Intel: add HDA_ARL PCI ID support - [x86] ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL - [armhf] drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time - IB/ipoib: Fix mcast list locking - media: ddbridge: fix an error code problem in ddb_probe - [arm64] drm/msm/dpu: Ratelimit framedone timeout msgs - clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() - clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() - watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786 - drm/amdgpu: Let KFD sync with VM fences - drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' - leds: trigger: panic: Don't register panic notifier if creating the trigger failed - i3c: master: cdns: Update maximum prescaler value for i2c clock - xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import - mfd: ti_am335x_tscadc: Fix TI SoC dependencies - PCI: Only override AMD USB controller if required - PCI: switchtec: Fix stdev_release() crash after surprise hot remove - usb: hub: Replace hardcoded quirk value with BIT() macro - tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE - fs/kernfs/dir: obey S_ISGID - PCI/AER: Decode Requester ID when no error info found - libsubcmd: Fix memory leak in uniq() - virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings - blk-mq: fix IO hang from sbitmap wakeup race - ceph: fix deadlock or deadcode of misusing dget() - drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()' - drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()' - perf: Fix the nr_addr_filters fix - wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update - drm: using mul_u32_u32() requires linux/math64.h - scsi: isci: Fix an error code problem in isci_io_request_build() - scsi: core: Introduce enum scsi_disposition - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler - ip6_tunnel: use dev_sw_netstats_rx_add() - ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() - net-zerocopy: Refactor frag-is-remappable test. - tcp: add sanity checks to rx zerocopy - ixgbe: Remove non-inclusive language - ixgbe: Refactor returning internal error codes - ixgbe: Refactor overtemp event handling - ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() - ipv6: Ensure natural alignment of const ipv6 loopback and router addresses - llc: call sock_orphan() at release time - netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger - netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations - net: ipv4: fix a memleak in ip_setup_cork - af_unix: fix lockdep positive in sk_diag_dump_icons() - net: sysfs: Fix /sys/class/net/ path - HID: apple: Add support for the 2021 Magic Keyboard - HID: apple: Add 2021 magic keyboard FN key mapping - bonding: remove print in bond_verify_device_path - uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ - PM: sleep: Fix error handling in dpm_prepare() - dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools - dmaengine: ti: k3-udma: Report short packet errors - dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA - dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (CVE-2024-26600) - [arm64] drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case - net: stmmac: xgmac: fix handling of DPP safety error for DMA channels - tunnels: fix out of bounds access when building IPv6 PMTU error - atm: idt77252: fix a memleak in open_card_ubr0 - hwmon: (aspeed-pwm-tacho) mutex for tach reading - [x86] hwmon: (coretemp) Fix out-of-bounds memory access - [x86] hwmon: (coretemp) Fix bogus core_id to attr name mapping - inet: read sk->sk_family once in inet_recv_error() - rxrpc: Fix response to PING RESPONSE ACKs to a dead call - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() - ppp_async: limit MRU to 64K - netfilter: nft_compat: reject unused compat flag - netfilter: nft_compat: restrict match/target protocol to u16 - netfilter: nft_ct: reject direction for ct id - netfilter: nft_set_pipapo: store index in scratch maps - netfilter: nft_set_pipapo: add helper to release pcpu scratch area - netfilter: nft_set_pipapo: remove scratch_aligned pointer - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command - blk-iocost: Fix an UBSAN shift-out-of-bounds warning - net/af_iucv: clean up a try_then_request_module() - USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e - USB: serial: option: add Fibocom FM101-GL variant - USB: serial: cp210x: add ID for IMST iM871A-USB - usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK - hrtimer: Report offline hrtimer enqueue - Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU - Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID - vhost: use kzalloc() instead of kmalloc() followed by memset() - clocksource: Skip watchdog check for large watchdog intervals - net: stmmac: xgmac: use #define for string constants - net: stmmac: xgmac: fix a typo of register name in DPP safety handling - netfilter: nft_set_rbtree: skip end interval element from gc (CVE-2024-26581) - btrfs: forbid creating subvol qgroups - btrfs: do not ASSERT() if the newly created subvolume already got read (CVE-2024-23850) - btrfs: forbid deleting live subvol qgroup - btrfs: send: return EOPNOTSUPP on unknown flags - of: unittest: Fix compile in the non-dynamic case - net: openvswitch: limit the number of recursions from action sets (CVE-2024-1151) - spi: ppc4xx: Drop write-only variable - ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() - net: sysfs: Fix /sys/class/net/ path for statistics - [mips*] Add 'memory' clobber to csum_ipv6_magic() inline assembler - i40e: Fix waiting for queues of all VSIs to be disabled - tracing/trigger: Fix to return error if failed to alloc snapshot - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again - ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32 - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx - HID: wacom: generic: Avoid reporting a serial of '0' to userspace - HID: wacom: Do not register input devices until after hid_hw_start - usb: ucsi_acpi: Fix command completion handling - USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT - usb: f_mass_storage: forbid async queue when shutdown happen - media: ir_toy: fix a memleak in irtoy_tx - i2c: i801: Remove i801_set_block_buffer_mode - i2c: i801: Fix block process call transactions (CVE-2024-26593) - modpost: trim leading spaces when processing source files list - scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock" - lsm: fix the logic in security_inode_getsecctx() - firewire: core: correct documentation of fw_csr_string() kernel API - kbuild: Fix changing ELF file type for output of gen_btf for big endian - nfc: nci: free rx_data_reassembly skb on NCI device cleanup - net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() - xen-netback: properly sync TX responses - ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL - [arm*] binder: signal epoll threads of self-work (CVE-2024-26606) - misc: fastrpc: Mark all sessions as invalid in cb_remove - ext4: fix double-free of blocks due to wrong extents moved_len - tracing: Fix wasted memory in saved_cmdlines logic - staging: iio: ad5933: fix type mismatch regression - iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC - iio: accel: bma400: Fix a compilation problem - media: rc: bpf attach/detach requires write permission - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove - ring-buffer: Clean ring_buffer_poll_wait() error return - serial: max310x: set default value when reading clock ready bit - serial: max310x: improve crystal stable clock detection - [x86] mm/ident_map: Use gbpages only where full GB page should be mapped. - mmc: slot-gpio: Allow non-sleeping GPIO ro - ALSA: hda/conexant: Add quirk for SWS JS201D - nilfs2: fix data corruption in dsync block recovery for small block sizes - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() - crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked - nfp: use correct macro for LengthSelect in BAR config - nfp: flower: prevent re-adding mac index for bonded port - wifi: mac80211: reload info pointer in ieee80211_tx_dequeue() - irqchip/irq-brcmstb-l2: Add write memory barrier before exit - irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update - [s390x] qeth: Fix potential loss of L3-IP@ in case of network issues - ceph: prevent use-after-free in encode_cap_msg() - of: property: fix typo in io-channels - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) - pmdomain: core: Move the unused cleanup to a _sync initcall - tracing: Inform kmemleak of saved_cmdlines allocation - Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" - bus: moxtet: Add spi device table - PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support - mips: Fix max_mapnr being uninitialized on early stages - crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init - serial: Add rs485_supported to uart_port - serial: 8250_exar: Fill in rs485_supported - serial: 8250_exar: Set missing rs485_supported flag - scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm - scripts/decode_stacktrace.sh: support old bash version - scripts: decode_stacktrace: demangle Rust symbols - scripts/decode_stacktrace.sh: optionally use LLVM utilities - netfilter: ipset: fix performance regression in swap operation - netfilter: ipset: Missing gc cancellations fixed - hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range() - Revert "arm64: Stash shadow stack pointer in the task struct on interrupt" - net: prevent mss overflow in skb_segment() (CVE-2023-52435) - sched/membarrier: reduce the ability to hammer on sys_membarrier (CVE-2024-26602) - nilfs2: fix potential bug in end_buffer_async_write - nilfs2: replace WARN_ONs for invalid DAT metadata block requests - dm: limit the number of targets and parameter size area (CVE-2024-23851, CVE-2023-52429) - PM: runtime: add devm_pm_runtime_enable helper - PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() - [arm64] drm/msm/dsi: Enable runtime PM - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() (CVE-2024-0607) - net: bcmgenet: Fix EEE implementation - PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.211 - net/sched: Retire CBQ qdisc - net/sched: Retire ATM qdisc - net/sched: Retire dsmark qdisc - smb: client: fix OOB in receive_encrypted_standard() (CVE-2024-0565) - smb: client: fix potential OOBs in smb2_parse_contexts() (CVE-2023-52434) - smb: client: fix parsing of SMB3.1.1 POSIX create context - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset - userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb - zonefs: Improve error handling - sched/rt: Fix sysctl_sched_rr_timeslice intial value - sched/rt: Disallow writing invalid values to sched_rt_period_us - scsi: target: core: Add TMF to tmr_list handling - [arm64] dmaengine: fsl-qdma: increase size of 'irq_name' - wifi: cfg80211: fix missing interfaces when dumping - wifi: mac80211: fix race condition on enabling fast-xmit - fbdev: savage: Error out if pixclock equals zero - fbdev: sis: Error out if pixclock equals zero - spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected - ahci: asm1166: correct count of reported ports - ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() - [armhf] dmaengine: ti: edma: Add some null pointer checks to the edma_probe - [arm64] regulator: pwm-regulator: Add validity checks in continuous .get_voltage - nvmet-tcp: fix nvme tcp ida memory leak - [armhf] ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616 - netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new - nvme-fc: do not wait in vain when unloading module - nvmet-fcloop: swap the list_add_tail arguments - nvmet-fc: release reference on target port - nvmet-fc: abort command when there is no binding - ext4: correct the hole length returned by ext4_map_blocks() - Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table - efi: runtime: Fix potential overflow of soft-reserved region size - efi: Don't add memblocks for soft-reserved memory - [x86] hwmon: (coretemp) Enlarge per package core count limit - scsi: lpfc: Use unsigned type for num_sge - firewire: core: send bus reset promptly on gap count error - virtio-blk: Ensure no requests in virtqueues before deleting vqs. - [mips*] irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable - media: av7110: prevent underflow in write_ts_to_decoder() - hvc/xen: prevent concurrent accesses to the shared ring - [x86] uaccess: Implement macros for CMPXCHG on user addresses - seccomp: Invalidate seccomp mode to catch death failures - block: ataflop: fix breakage introduced at blk-mq refactoring - [powerpc*] watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions - [powerpc*] watchpoints: Annotate atomic context in more places - cifs: add a warning when the in-flight count goes negative - mtd: spinand: macronix: Add support for MX35LFxGE4AD - [x86] ASoC: Intel: boards: harden codec property handling - [x86] ASoC: Intel: boards: get codec device with ACPI instead of bus search - [x86] ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use - task_stack, x86/cea: Force-inline stack helpers - btrfs: tree-checker: check for overlapping extent items - btrfs: introduce btrfs_lookup_match_dir - btrfs: unify lookup return value when dir entry is missing - btrfs: do not pin logs too early during renames - lan743x: fix for potential NULL pointer dereference with bare card - [x86] platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC - iwlwifi: mvm: do more useful queue sync accounting - iwlwifi: mvm: write queue_sync_state only for sync - jbd2: remove redundant buffer io error checks - jbd2: recheck chechpointing non-dirty buffer - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint - [x86] drop bogus "cc" clobber from __try_cmpxchg_user_asm() - erofs: fix lz4 inplace decompression (CVE-2023-52497) - [amd64] IB/hfi1: Fix sdma.h tx->num_descs off-by-one error - [s390x] cio: fix invalid -EBUSY on ccw_device_start - dm-crypt: don't modify the data when using authenticated encryption - [arm64] KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler - [arm64] KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() - PCI/MSI: Prevent MSI hardware interrupt number truncation - l2tp: pass correct message length to ip6_append_data - [x86] Revert "x86/ftrace: Use alternative RET encoding" - [x86] text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR - [x86] ibt,paravirt: Use text_gen_insn() for paravirt_patch() - [x86] ftrace: Use alternative RET encoding - [x86] returnthunk: Allow different return thunks - [x86] Revert "x86/alternative: Make custom return thunk unconditional" - [x86] alternative: Make custom return thunk unconditional - usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs - mptcp: fix lockless access in subflow ULP diag - [amd64] IB/hfi1: Fix a memleak in init_credit_return - RDMA/bnxt_re: Return error for SRQ resize - RDMA/srpt: Support specifying the srpt_service_guid parameter - RDMA/qedr: Fix qedr_create_user_qp error flow - [arm64] dts: rockchip: set num-cs property for spi on px30 - RDMA/srpt: fix function pointer cast warnings - bpf, scripts: Correct GPL license name - scsi: jazz_esp: Only build if SCSI core is builtin - nouveau: fix function cast warnings - ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid - ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid - afs: Increase buffer size in afs_update_volume_status() - ipv6: sr: fix possible use-after-free and null-ptr-deref - packet: move from strlcpy with unused retval to strscpy - net: dev: Convert sa_data to flexible array in struct sockaddr - [s390x] use the correct count for __iowrite64_copy() - netfilter: nf_tables: set dormant flag on hook register failure - drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3 - drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set - drm/amd/display: Fix memory leak in dm_sw_fini() - block: ataflop: more blk-mq refactoring fixes - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio - arp: Prevent overflow in arp_req_get(). - ext4: regenerate buddy after block freeing failed if under fc replay (CVE-2024-26601) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.212 - [x86] platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names - crypto: virtio/akcipher - Fix stack overflow on memcpy - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter - net: ip_tunnel: prevent perpetual headroom growth - tun: Fix xdp_rxq_info's queue_index when detaching - ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() - lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected - net: usb: dm9601: fix wrong return value in dm9601_mdio_read - Bluetooth: Avoid potential use-after-free in hci_error_reset - Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR - Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST - Bluetooth: Enforce validation on max value of connection interval - netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() - rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back - efi/capsule-loader: fix incorrect allocation size - ALSA: Drop leftover snd-rtctimer stuff from Makefile - afs: Fix endless loop in directory parsing - tomoyo: fix UAF write bug in tomoyo_write_control() (CVE-2024-26622) - gtp: fix use-after-free and null-ptr-deref in gtp_newlink() - wifi: nl80211: reject iftype change with mesh ID change - btrfs: dev-replace: properly validate device names - [arm64] dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read - [arm64] dmaengine: fsl-qdma: init irq after reg initialization - mmc: core: Fix eMMC initialization with 1-bit bus connection - [arm64] mmc: sdhci-xenon: add timeout for PHY init complete - [arm64] mmc: sdhci-xenon: fix PHY init clock stability - [arm64] pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation - [x86] cpu/intel: Detect TME keyid bits before setting MTRR mask registers - mptcp: fix possible deadlock in subflow diag - ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks() - cachefiles: fix memory leak in cachefiles_add_cache() - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (CVE-2024-0841) - gpiolib: Fix the error path order in gpiochip_add_data_with_key() - gpio: fix resource unwinding order in error path - mptcp: fix double-free on socket dismantle https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.213 - [arm64,armhf] mmc: mmci: stm32: use a buffer for unaligned DMA requests - [arm64,armhf] mmc: mmci: stm32: fix DMA API overlapping mappings warning - lan78xx: Fix white space and style issues - lan78xx: Add missing return code checks - lan78xx: Fix partial packet errors on suspend/resume - lan78xx: Fix race conditions in suspend/resume handling - net: lan78xx: fix runtime PM count underflow on link stop - ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able - i40e: disable NAPI right after disabling irqs when handling xsk_pool - tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string - geneve: make sure to pull inner header in geneve_rx() - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() - cpumap: Zero-initialise xdp_rxq_info struct before running XDP program - net/rds: fix WARNING in rds_conn_connect_if_down - netfilter: nft_ct: fix l3num expectations with inet pseudo family - netfilter: nf_conntrack_h323: Add protection for bmp length out of range - netrom: Fix a data-race around sysctl_netrom_default_path_quality - netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser - netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser - netrom: Fix a data-race around sysctl_netrom_transport_timeout - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries - netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay - netrom: Fix a data-race around sysctl_netrom_transport_busy_delay - netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size - netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout - netrom: Fix a data-race around sysctl_netrom_routing_control - netrom: Fix a data-race around sysctl_netrom_link_fails_count - netrom: Fix data-races around sysctl_net_busy_read - xhci: remove extra loop in interrupt context - xhci: prevent double-fetch of transfer and transfer event TRBs - xhci: process isoc TD properly when there was a transaction error mid TD. - xhci: handle isoc Babble and Buffer Overrun events properly - net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr - bpf: net: Change sk_getsockopt() to take the sockptr_t argument - lsm: make security_socket_getpeersec_stream() sockptr_t safe - lsm: fix default return value of the socket_getpeersec_*() hooks - ext4: make ext4_es_insert_extent() return void - ext4: refactor ext4_da_map_blocks() - ext4: convert to exclusive lock while inserting delalloc extents - [x86] Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening - [x86] hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening - [x86] hv_netvsc: Wait for completion on request SWITCH_DATA_PATH - [x86] hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove - [x86] hv_netvsc: Make netvsc/VF binding check both MAC and serial number - [x86] hv_netvsc: use netif_is_bond_master() instead of open code - [x86] hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed - mm/hugetlb: change hugetlb_reserve_pages() to type bool - mm: hugetlb pages should not be reserved by shmat() if SHM_NORESERVE - getrusage: add the "signal_struct *sig" local variable - getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand() - getrusage: use __for_each_thread() - getrusage: use sig->stats_lock rather than lock_task_sighand() - [x86] Drivers: hv: vmbus: Drop error message when 'No request id available' - regmap: allow to define reg_update_bits for no bus configuration - regmap: Add bulk read/write callbacks into regmap_config https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.214 - io_uring/unix: drop usage of io_uring socket - io_uring: drop any code related to SCM_RIGHTS - rcu-tasks: Provide rcu_trace_implies_rcu_gp() - bpf: Defer the free of inner map when necessary (CVE-2023-52447) - ASoC: rt5645: Make LattePanda board DMI match more precise - [x86] xen: Add some null pointer checking to smp.c - [mips*] Clear Cause.BD in instruction_pointer_set - HID: multitouch: Add required quirk for Synaptics 0xcddc device - gen_compile_commands: fix invalid escape sequence warning - RDMA/mlx5: Fix fortify source warning while accessing Eth segment - RDMA/mlx5: Relax DEVX access upon modify commands - [x86] mm: Move is_vsyscall_vaddr() into asm/vsyscall.h - [x86] mm: Disallow vsyscall page read for copy_from_kernel_nofault() - net/iucv: fix the allocation size of iucv_path_table array - block: sed-opal: handle empty atoms when parsing response - dm-verity, dm-crypt: align "struct bvec_iter" correctly - scsi: mpt3sas: Prevent sending diag_reset when the controller is ready - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (CVE-2024-22099) - firewire: core: use long bus reset on gap count error - [x86] ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet - Input: gpio_keys_polled - suppress deferred probe error for gpio - [x86] paravirt: Fix build due to __text_gen_insn() backport - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak - nbd: null check for nla_nest_start - fs/select: rework stack allocation hack for clang - block: add a new set_read_only method - md: implement ->set_read_only to hook into BLKROSET processing - md: Don't clear MD_CLOSING when the raid is about to stop - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (CVE-2023-6270) - timekeeping: Fix cross-timestamp interpolation on counter wrap - timekeeping: Fix cross-timestamp interpolation corner case decision - timekeeping: Fix cross-timestamp interpolation for non-x86 - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (CVE-2023-7042) - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled - wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled - wifi: b43: Stop correct queue in DMA worker when QoS is disabled - wifi: b43: Disable QoS for bcm4331 - wifi: wilc1000: fix declarations ordering - wifi: wilc1000: fix RCU usage in connect path - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work - wifi: wilc1000: fix multi-vif management when deleting a vif - wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value - sock_diag: annotate data-races around sock_diag_handlers[family] - inet_diag: annotate data-races around inet_diag_table[] - bpftool: Silence build warning about calloc() - af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc(). - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete - wifi: iwlwifi: dbg-tlv: ensure NUL termination - wifi: iwlwifi: fix EWRD table validity check - net: blackhole_dev: fix build warning for ethh set but not used - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() - bpf: Factor out bpf_spin_lock into helpers. - bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly - wireless: Remove redundant 'flush_workqueue()' calls - wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() - [amd64] iommu/amd: Mark interrupt as managed - wifi: brcmsmac: avoid function pointer casts - net: ena: Remove ena_select_queue - ACPI: scan: Fix device check notification handling - [x86] relocs: Ignore relocations in .notes section (CVE-2024-26816) - SUNRPC: fix some memleaks in gssx_dec_option_array - mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function - wifi: rtw88: 8821c: Fix false alarm count - PCI: Make pci_dev_is_disconnected() helper public for other drivers - [amd64] iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected - igb: move PEROUT and EXTTS isr logic to separate functions - igb: Fix missing time sync events - Bluetooth: Remove superfluous call to hci_conn_check_pending() - Bluetooth: hci_core: Fix possible buffer overflow - sr9800: Add check for usbnet_get_endpoints (CVE-2024-26651) - bpf: Eliminate rlimit-based memory accounting for devmap maps - bpf: Fix DEVMAP_HASH overflow check on 32-bit arches - bpf: Fix hashtab overflow check on 32-bit arches - bpf: Fix stackmap overflow check on 32-bit arches - ipv6: fib6_rules: flush route cache when rule is changed - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() - net: phy: fix phy_get_internal_delay accessing an empty array - net: hns3: fix port duplex configure error in IMP reset - net: phy: DP83822: enable rgmii mode if phy_interface_is_rgmii - net: phy: dp83822: Fix RGMII TX delay configuration - OPP: debugfs: Fix warning around icc_get_name() - tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function - net/ipv4: Replace one-element array with flexible-array member - net/ipv4: Revert use of struct_size() helper - net/ipv4/ipv6: Replace one-element arraya with flexible-array members - bpf: net: Change do_ip_getsockopt() to take the sockptr_t argument - ipmr: fix incorrect parameter validation in the ip_mroute_getsockopt() function - l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function - udp: fix incorrect parameter validation in the udp_lib_getsockopt() function - net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function - nfp: flower: handle acti_netdevs allocation failure - dm raid: fix false positive for requeue needed during reshape - dm: call the resume method on internal suspend - [arm64,armhf] drm/tegra: dsi: Add missing check for of_find_device_by_node - [arm64,armhf] drm/tegra: dsi: Make use of the helper function dev_err_probe() - [arm64,armhf] drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe() - [arm64,armhf] drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe() - [arm64,armhf] drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe() - drm/rockchip: inno_hdmi: Fix video timing - drm: Don't treat 0 as -1 in drm_fixp2int_ceil - drm/rockchip: lvds: do not overwrite error code - drm/rockchip: lvds: do not print scary message when probing defer - drm/lima: fix a memleak in lima_heap_alloc - dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA - media: tc358743: register v4l2 async device only after successful setup - PCI/DPC: Print all TLP Prefixes, not just the first - perf record: Fix possible incorrect free in record__switch_output() - HID: lenovo: Add middleclick_workaround sysfs knob for cptkbd - drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' - drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' - perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample() - media: em28xx: annotate unchecked call to media_device_register() - media: v4l2-tpg: fix some memleaks in tpg_alloc - media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity - media: edia: dvbdev: fix a use-after-free - pinctrl: mediatek: Drop bogus slew rate register range for MT8192 - [arm64] clk: qcom: reset: Commonize the de/assert functions - [arm64] clk: qcom: reset: Ensure write completion on reset de/assertion - quota: simplify drop_dquot_ref() - quota: Fix potential NULL pointer dereference - quota: Fix rcu annotations of inode dquot pointers - PCI: switchtec: Fix an error handling path in switchtec_pci_probe() - crypto: xilinx - call finalize with bh disabled - perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() - drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode() - ALSA: seq: fix function cast warnings - perf stat: Avoid metric-only segv - media: sun8i-di: Fix coefficient writes - media: sun8i-di: Fix power on/off sequences - media: sun8i-di: Fix chroma difference threshold - media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak - media: go7007: add check of return value of go7007_read_addr() - media: pvrusb2: remove redundant NULL check - media: pvrusb2: fix pvr2_stream_callback casts - PCI: Mark 3ware-9650SE Root Port Extended Tags as broken - [arm64] clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister() - [arm64,armhf] drm/tegra: put drm_gem_object ref on error in tegra_fb_create - mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref - mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref - crypto: arm/sha - fix function cast warnings - drm/tidss: Fix initial plane zpos values - mtd: maps: physmap-core: fix flash size larger than 32-bit - mtd: rawnand: lpc32xx_mlc: fix irq handler prototype - drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int() - media: pvrusb2: fix uaf in pvr2_context_set_notify - media: dvb-frontends: avoid stack overflow warnings with clang - media: go7007: fix a memleak in go7007_load_encoder - media: ttpci: fix two memleaks in budget_av_attach - media: mediatek: vcodec: avoid -Wcast-function-type-strict warning - powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks - [arm64] drm/msm/dpu: add division of drm_display_mode's hskew parameter - [powerpc*] embedded6xx: Fix no previous prototype for avr_uart_send() etc. - leds: aw2013: Unlock mutex before destroying it - leds: sgm3140: Add missing timer cleanup and flash gpio control - backlight: lm3630a: Initialize backlight_properties on init - backlight: lm3630a: Don't set bl->props.brightness in get_brightness - backlight: da9052: Fully initialize backlight_properties during probe - backlight: lm3639: Fully initialize backlight_properties during probe - backlight: lp8788: Fully initialize backlight_properties during probe - clk: Fix clk_core_get NULL dereference - ALSA: hda/realtek: fix ALC285 issues on HP Envy x360 laptops - ALSA: usb-audio: Stop parsing channels bits when all channels are found. - RDMA/srpt: Do not register event handler until srpt device is fully setup - f2fs: compress: fix to check unreleased compressed cluster - scsi: csiostor: Avoid function pointer casts - RDMA/device: Fix a race between mad_client and cm_client init - scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn - net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 - NFSv4.2: fix listxattr maximum XDR buffer size - watchdog: stm32_iwdg: initialize default timeout - NFS: Fix an off by one in root_nfs_cat() - afs: Revert "afs: Hide silly-rename files from userspace" - [armhf] remoteproc: stm32: Constify st_rproc_ops - [armhf] remoteproc: Add new get_loaded_rsc_table() to rproc_ops - [armhf] remoteproc: stm32: Move resource table setup to rproc_ops - [armhf] remoteproc: stm32: use correct format strings on 64-bit - [armhf] remoteproc: stm32: Fix incorrect type in assignment for va - [armhf] remoteproc: stm32: Fix incorrect type assignment returned by stm32_rproc_get_loaded_rsc_tablef - tty: vt: fix 20 vs 0x20 typo in EScsiignore - serial: max310x: fix syntax error in IRQ error message - tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT - kconfig: fix infinite loop when expanding a macro at the end of file - rtc: mt6397: select IRQ_DOMAIN instead of depending on it - serial: 8250_exar: Don't remove GPIO device on suspend - staging: greybus: fix get_channel_from_mode() failure path - usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin - io_uring: don't save/restore iowait state - [s390x] vtime: fix average steal time calculation - soc: fsl: dpio: fix kcalloc() argument order - hsr: Fix uninit-value access in hsr_get_node() - packet: annotate data-races around ignore_outgoing - net: dsa: mt7530: prevent possible incorrect XTAL frequency selection - wireguard: receive: annotate data-race around receiving_counter.counter - rds: introduce acquire/release ordering in acquire/release_in_xmit() - hsr: Handle failures in module init - net/bnx2x: Prevent access to a freed page in page_pool - netfilter: nft_set_pipapo: release elements in clone only from destroy path (CVE-2024-26809) - scsi: fc: Update formal FPIN descriptor definitions - netfilter: nf_tables: do not compare internal table flags on updates - rcu: add a helper to report consolidated flavor QS - bpf: report RCU QS in cpumap kthread - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler - regmap: Add missing map->bus check - [armhf] remoteproc: stm32: fix phys_addr_t format string https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.215 - amdkfd: use calloc instead of kzalloc to avoid integer overflow (CVE-2024-26817) - Documentation/hw-vuln: Update spectre doc - [x86] cpu: Support AMD Automatic IBRS - [x86] bugs: Use sysfs_emit() - timers: Update kernel-doc for various functions - timers: Use del_timer_sync() even on UP - timers: Rename del_timer_sync() to timer_delete_sync() - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach (CVE-2023-47233) - [armhf] dts: marvell: Fix maxium->maxim typo in brownstone dts - [x86] drm/vmwgfx: stop using ttm_bo_create v2 - [x86] drm/vmwgfx: switch over to the new pin interface v2 - [x86] drm/vmwgfx/vmwgfx_cmdbuf_res: Remove unused variable 'ret' - [x86] drm/vmwgfx: Fix some static checker warnings - [x86] drm/vmwgfx: Fix possible null pointer derefence with invalid contexts - media: xc4000: Fix atomicity violation in xc4000_get_frequency (CVE-2024-24861) - KVM: Always flush async #PF workqueue when vCPU is being destroyed - [x86] crypto: qat - fix double free during reset - [x86] crypto: qat - resolve race condition during AER recovery - ext4: correct best extent lstart adjustment logic - block: introduce zone_write_granularity limit - block: Clear zone limits for a non-zoned stacked queue - bounds: support non-power-of-two CONFIG_NR_CPUS - fat: fix uninitialized field in nostale filehandles - ubifs: Set page uptodate in the correct place - ubi: Check for too small LEB size in VTBL code - ubi: correct the calculation of fastmap size - mtd: rawnand: meson: fix scrambling mode value in command macro - PM: suspend: Set mem_sleep_current during kernel command line setup - [powerpc*] fsl: Fix mfpmr build errors with newer binutils - USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB - USB: serial: add device ID for VeriFone adapter - USB: serial: cp210x: add ID for MGP Instruments PDS100 - USB: serial: option: add MeiG Smart SLM320 product - USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M - PM: sleep: wakeirq: fix wake irq warning in system suspend - mmc: tmio: avoid concurrent runs of mmc_request_done() - fuse: fix root lookup with nonzero generation - fuse: don't unhash root - usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros - printk/console: Split out code that enables default console - serial: Lock console when calling into driver before registration - btrfs: fix off-by-one chunk length calculation at contains_pending_extent() - PCI: Drop pci_device_remove() test of pci_dev->driver - PCI/PM: Drain runtime-idle callbacks before driver removal - PCI/ERR: Cache RCEC EA Capability offset in pci_init_capabilities() - PCI: Cache PCIe Device Capabilities register - PCI: Work around Intel I210 ROM BAR overlap defect - PCI/ASPM: Make Intel DG2 L1 acceptable latency unlimited - PCI/DPC: Quirk PIO log size for certain Intel Root Ports - PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports - Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" - dm-raid: fix lockdep waring in "pers->hot_add_disk" - mac802154: fix llsec key resources release in mac802154_llsec_key_del - mm: swap: fix race between free_swap_and_cache() and swapoff() - mmc: core: Fix switch on gp3 partition - [armhf] drm/etnaviv: Restore some id values - hwmon: (amc6821) add of_match table - ext4: fix corruption during on-line resize - nvmem: meson-efuse: fix function pointer type mismatch - slimbus: core: Remove usage of the deprecated ida_simple_xx() API - [arm64,armhf] phy: tegra: xusb: Add API to retrieve the port number of phy - usb: gadget: tegra-xudc: Use dev_err_probe() - usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic - speakup: Fix 8bit characters from direct synth - PCI/ERR: Clear AER status only when we control AER - PCI/AER: Block runtime suspend when handling errors - nfs: fix UAF in direct writes - kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1 - PCI: dwc: endpoint: Fix advertised resizable BAR size - vfio/platform: Disable virqfds on cleanup - ring-buffer: Fix waking up ring buffer readers - ring-buffer: Do not set shortest_full when full target is hit - ring-buffer: Fix resetting of shortest_full - ring-buffer: Fix full_waiters_pending in poll - [s390x] zcrypt: fix reference counting on zcrypt card objects - drm/panel: do not return negative error codes from drm_panel_get_modes() - [armhf] drm/exynos: do not return negative values from .get_modes() - drm/imx/ipuv3: do not return negative values from .get_modes() - drm/vc4: hdmi: do not return negative values from .get_modes() - nilfs2: fix failure to detect DAT corruption in btree and direct mappings - nilfs2: prevent kernel bug at submit_bh_wbc() - cpufreq: dt: always allocate zeroed cpumask - [x86] CPU/AMD: Update the Zenbleed microcode revisions - net: hns3: tracing: fix hclgevf trace event strings - wireguard: netlink: check for dangling peer via is_dead instead of empty list - wireguard: netlink: access device through ctx instead of peer - ahci: asm1064: correct count of reported ports - ahci: asm1064: asm1166: don't limit reported ports - drm/amd/display: Return the correct HDCP error code - drm/amd/display: Fix noise issue on HDMI AV mute - dm snapshot: fix lockup in dm_exception_table_exit - vxge: remove unnecessary cast in kfree() - [x86] stackprotector/32: Make the canary into a regular percpu variable - [x86] pm: Work around false positive kmemleak report in msr_build_context() - scripts: kernel-doc: Fix syntax error due to undeclared args variable (Closes: #1064035) - comedi: comedi_test: Prevent timers rescheduling during deletion - cpufreq: brcmstb-avs-cpufreq: fix up "add check for cpufreq_cpu_get's return value" - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643) - netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642) - netfilter: nf_tables: reject constant set with timeout - Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory - xfrm: Avoid clang fortify warning in copy_to_user_tmpl() - [x86] KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() - ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command - usb: gadget: ncm: Fix handling of zero block length packets - usb: port: Don't try to peer unused USB ports based on location - tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled - mei: me: add arrow lake point S DID - mei: me: add arrow lake point H DID - vt: fix unicode buffer corruption when deleting characters - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion - tee: optee: Fix kernel panic caused by incorrect error handling - xen/events: close evtchn after mapping cleanup (CVE-2024-26687) - printk: Update @console_may_schedule in console_trylock_spinning() - btrfs: allocate btrfs_ioctl_defrag_range_args on stack - [x86] asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix - [x86] bugs: Add asm helpers for executing VERW - [x86] entry_64: Add VERW just before userspace transition - [x86] entry_32: Add VERW just before userspace transition - [x86] bugs: Use ALTERNATIVE() instead of mds_user_clear static key - [x86] KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH - [x86] KVM/VMX: Move VERW closer to VMentry for MDS mitigation - [x86] Mitigate Register File Data Sampling (RFDS) vulnerability (CVE-2023-28746): + [x86] mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set + Documentation/hw-vuln: Add documentation for RFDS + [x86] rfds: Mitigate Register File Data Sampling (RFDS) + [x86] KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests - perf/core: Fix reentry problem in perf_output_read_group() - efivarfs: Request at most 512 bytes for variable names - [powerpc*] xor_vmx: Add '-mhard-float' to CFLAGS - serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO (CVE-2023-52488) - mm/memory-failure: fix an incorrect use of tail pages - mm/migrate: set swap entry values of THP tail pages properly. - init: open /initrd.image with O_LARGEFILE - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes - exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack() - mmc: core: Initialize mmc_blk_ioc_data - mmc: core: Avoid negative index with array access - net: ll_temac: platform_get_resource replaced by wrong function - usb: cdc-wdm: close race between read and workqueue - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (CVE-2024-26654) - scsi: core: Fix unremoved procfs host directory regression - [arm*] staging: vc04_services: changen strncpy() to strscpy_pad() - [arm*] staging: vc04_services: fix information leak in create_component() - USB: core: Add hub_get() and hub_put() routines - [arm*] usb: dwc2: host: Fix remote wakeup from hibernation - [arm*] usb: dwc2: host: Fix hibernation flow - [arm*] usb: dwc2: host: Fix ISOC flow in DDMA mode - [arm*] usb: dwc2: gadget: LPM flow fix - usb: udc: remove warning when queue disabled ep - usb: typec: ucsi: Ack unsupported commands - usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset - scsi: qla2xxx: Split FCE|EFT trace control - scsi: qla2xxx: Fix command flush on cable pull - scsi: qla2xxx: Delay I/O Abort on PCI error - [x86] cpu: Enable STIBP on AMD if Automatic IBRS is enabled - PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports - scsi: lpfc: Correct size for wqe for memset() - USB: core: Fix deadlock in usb_deauthorize_interface() - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet - ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa() - tcp: properly terminate timers for kernel sockets - ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields() - bpf: Protect against int overflow for stack access size - dm integrity: fix out-of-range warning - r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d - [x86] cpufeatures: Add new word for scattered features - Bluetooth: hci_event: set the conn encrypted before conn establishes - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CVE-2024-24857, CVE-2024-24858) - netfilter: nf_tables: disallow timeout for anonymous sets (CVE-2023-52620) - net/rds: fix possible cp null dereference - vfio/pci: Disable auto-enable of exclusive INTx IRQ (CVE-2024-27437) - vfio/pci: Lock external INTx masking ops (CVE-2024-26810) - vfio: Introduce interface to flush virqfd inject workqueue - vfio/pci: Create persistent INTx handler (CVE-2024-26812) - vfio/platform: Create persistent IRQ handlers (CVE-2024-26813) - vfio/fsl-mc: Block calling interrupt handler without trigger (CVE-2024-26814) - io_uring: ensure '0' is returned on file registration success - Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped." - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations - [x86] srso: Add SRSO mitigation for Hygon processors (CVE-2023-52482) - block: add check that partition length needs to be aligned with block size (CVE-2023-52458) - netfilter: nf_tables: reject new basechain after table flag update - netfilter: nf_tables: flush pending destroy work before exit_net release - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() - netfilter: validate user input for expected length - vboxsf: Avoid an spurious warning if load_nls_xxx() fails - bpf, sockmap: Prevent lock inversion deadlock in map delete elem - net/sched: act_skbmod: prevent kernel-infoleak - net: stmmac: fix rx queue priority assignment - erspan: make sure erspan_base_hdr is present in skb->head - ipv6: Fix infinite recursion in fib6_dump_done(). - udp: do not transition UDP GRO fraglist partial checksums to unnecessary - i40e: fix i40e_count_filters() to count only active/new filters - i40e: fix vf may be used uninitialized in this function warning - scsi: qla2xxx: Update manufacturer details - scsi: qla2xxx: Update manufacturer detail - Revert "usb: phy: generic: Get the vbus supply" - udp: do not accept non-tunnel GSO skbs landing in a tunnel - net: ravb: Always process TX descriptor ring - [arm64] dts: qcom: sc7180: Remove clock for bluetooth on Trogdor - [arm64] dts: qcom: sc7180-trogdor: mark bluetooth address as broken - ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw - ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit - scsi: mylex: Fix sysfs buffer lengths - ata: sata_mv: Fix PCI device ID table declaration compilation warning - ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone - driver core: Introduce device_link_wait_removal() - of: dynamic: Synchronize of_changeset_destroy() with the devlink removals - [x86] mce: Make sure to grab mce_sysfs_mutex in set_bank() - [s390x] entry: align system call table on 8 bytes - [x86] bugs: Fix the SRSO mitigation on Zen3/4 - [x86] retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO - mptcp: don't account accept() of non-MPC client as fallback to TCP - [x86] cpufeatures: Add CPUID_LNX_5 to track recently added Linux-defined word - objtool: Add asm version of STACK_FRAME_NON_STANDARD - wifi: ath9k: fix LNA selection in ath_ant_try_scan() - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() - panic: Flush kernel log buffer at the end - [arm64] dts: rockchip: fix rk3328 hdmi ports node - [arm64] dts: rockchip: fix rk3399 hdmi ports node - ionic: set adminq irq affinity - pstore/zone: Add a null pointer check to the psz_kmsg_read - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() - btrfs: export: handle invalid inode or root reference in btrfs_get_parent() - btrfs: send: handle path ref underflow in header iterate_inode_ref() - net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() - Bluetooth: btintel: Fix null ptr deref in btintel_read_version - Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails - pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs - sysv: don't call sb_bread() with pointers_lock held - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() - isofs: handle CDs with bad root inode but good Joliet root directory - media: sta2x11: fix irq handler cast - ext4: add a hint for block bitmap corrupt state in mb_groups - ext4: forbid commit inconsistent quota data when errors=remount-ro - drm/amd/display: Fix nanosec stat overflow - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int - Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default" - libperf evlist: Avoid out-of-bounds access - block: prevent division by zero in blk_rq_stat_sum() - RDMA/cm: add timeout to cm_destroy_id wait - Input: allocate keycode for Display refresh rate toggle - [x86] platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet - ring-buffer: use READ_ONCE() to read cpu_buffer->commit_page in concurrent environment - tools: iio: replace seekdir() in iio_generic_buffer - usb: typec: tcpci: add generic tcpci fallback compatible - usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined - fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 - drivers/nvme: Add quirks for device 126f:2262 - fbmon: prevent division by zero in fb_videomode_from_videomode() - netfilter: nf_tables: release batch on table validation from abort path - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (CVE-2024-26925) - netfilter: nf_tables: discard table flag update with pending basechain deletion - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc - virtio: reenable config if freezing device failed - [x86] mm/pat: fix VM_PAT handling in COW mappings - [x86] drm/i915/gt: Reset queue_priority_hint on parking - Bluetooth: btintel: Fixe build regression - [x86] VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() - kbuild: dummy-tools: adjust to stricter stackprotector check - scsi: sd: Fix wrong zone_write_granularity value during revalidate - [x86] retpoline: Add NOENDBR annotation to the SRSO dummy return thunk - [x86] head/64: Re-enable stack protection https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.216 - batman-adv: Avoid infinite loop trying to resize local TT - Bluetooth: Fix memory leak in hci_req_sync_complete() - media: cec: core: remove length check of Timer Status - nouveau: fix function cast warning - net: openvswitch: fix unwanted error log on timeout policy probing - u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING - geneve: fix header validation in geneve[6]_xmit_skb - ipv6: fib: hide unused 'pn' variable - ipv4/route: avoid unused-but-set-variable warning - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr - Bluetooth: SCO: Fix not validating setsockopt user input - netfilter: complete validation of user input - net/mlx5: Properly link new fs rules into the tree - af_unix: Do not use atomic ops for unix_sk(sk)->inflight. - af_unix: Fix garbage collector racing against connect() (CVE-2024-26923) - net: ena: Fix potential sign extension issue - net: ena: Wrong missing IO completions check order - net: ena: Fix incorrect descriptor free behavior - [amd64] iommu/vt-d: Allocate local memory for page request queue - [arm64] mailbox: imx: fix suspend failue - btrfs: qgroup: correctly model root qgroup rsv in convert - drm/client: Fully protect modes[] with dev->mode_config.mutex - vhost: Add smp_rmb() in vhost_vq_avail_empty() - [x86] cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n - [x86] apic: Force native_apic_mem_read() to use the MOV instruction - irqflags: Explicitly ignore lockdep_hrtimer_exit() argument - btrfs: record delayed inode root in transaction - kprobes: Fix possible use-after-free issue on kprobe registration - Revert "tracing/trigger: Fix to return error if failed to alloc snapshot" - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (CVE-2024-27020) - netfilter: nft_set_pipapo: do not free live element (CVE-2024-26924) - tun: limit printing rate when illegal packet received by tun dev (CVE-2024-27013) - RDMA/rxe: Fix the problem "mutex_destroy missing" - RDMA/cm: Print the old state when cm_destroy_id gets timeout - RDMA/mlx5: Fix port number for counter query in multi-port configuration - drm: nv04: Fix out of bounds access (CVE-2024-27008) - drm/panel: visionox-rm69299: don't unregister DSI device - clk: Remove prepare_lock hold assertion in __clk_release() - clk: Mark 'all_lists' as const - clk: remove extra empty line - clk: Print an info line before disabling unused clocks - clk: Initialize struct clk_core kref earlier - clk: Get runtime PM before walking tree during disable_unused (CVE-2024-27004) - [x86] cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ - [arm*] binder: check offset alignment in binder_get_object() (CVE-2024-26926) - [x86] thunderbolt: Avoid notify PM core about runtime PM resume - [x86] thunderbolt: Fix wake configurations after device unplug - [x86] comedi: vmk80xx: fix incomplete endpoint checking (CVE-2024-27001) - USB: serial: option: add Fibocom FM135-GL variants - USB: serial: option: add support for Fibocom FM650/FG650 - USB: serial: option: add Lonsung U8300/U9300 product - USB: serial: option: support Quectel EM060K sub-models - USB: serial: option: add Rolling RW101-GL and RW135-GL support - USB: serial: option: add Telit FN920C04 rmnet compositions - Revert "usb: cdc-wdm: close race between read and workqueue" - usb: dwc2: host: Fix dereference issue in DDMA completion flow. (CVE-2024-26997) - usb: Disable USB3 LPM at shutdown - mei: me: disable RPL-S on SPS and IGN firmwares - speakup: Avoid crash on very long word (CVE-2024-26994) - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993) - init/main.c: Fix potential static_command_line memory overflow (CVE-2024-26988) - drm/amdgpu: validate the parameters of bo mapping operations more clearly (CVE-2024-26922) - nouveau: fix instmem race condition around ptr stores (CVE-2024-26984) - nilfs2: fix OOB in nilfs_set_de_type (CVE-2024-26981) - wifi: iwlwifi: mvm: remove old PASN station when adding a new one - vxlan: drop packets from invalid src-address - ipv4: check for NULL idev in ip_route_use_hint() - net: usb: ax88179_178a: stop lying about skb->truesize - net: gtp: Fix Use-After-Free in gtp_dellink - ipvs: Fix checksumming on GSO of SCTP packets - net: openvswitch: Fix Use-After-Free in ovs_ct_exit - netfilter: nf_tables: honor table dormant flag from netdev release event path - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue - i40e: Report MFS in decimal base instead of hex - iavf: Fix TC config comparison with existing adapter TC config - net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). - serial: core: Provide port lock wrappers - Revert "crypto: api - Disallow identical driver names" - net/mlx5e: Fix a race in command alloc flow - tracing: Show size of requested perf buffer - tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together - PM / devfreq: Fix buffer overflow in trans_stat_show (CVE-2023-52614) - Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() - cpu: Re-enable CPU mitigations by default for !X86 architectures - drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3 - drm/amdgpu: Fix leak when GPU memory allocation fails - irqchip/gic-v3-its: Prevent double free on error - ethernet: Add helper for assigning packet type when dest address does not match device address - net: b44: set pause params only when interface is up - stackdepot: respect __GFP_NOLOCKDEP allocation flag - mtd: diskonchip: work around ubsan link failure - tcp: Clean up kernel listener's reqsk in inet_twsk_purge() - tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge() - [x86] idma64: Don't try to serve interrupts when device is powered off - i2c: smbus: fix NULL function pointer dereference - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up - bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS - udp: preserve the connected status if only UDP cmsg - serial: core: fix kernel-doc for uart_port_unlock_irqrestore() . [ Salvatore Bonaccorso ] * Bump ABI to 29 * [rt] Refresh "sched/vtime: Consolidate IRQ time accounting" * [rt] Update to 5.10.215-rt107 * [rt] Refresh "u64_stats: Disable preemption on 32bit-UP/SMP with RT during updates" * drivers/tty: Disable N_GSM * tipc: fix UAF in error path * tipc: fix a possible memleak in tipc_buf_append linux-signed-arm64 (5.10.218+1) bullseye-security; urgency=high . * Sign kernel from linux 5.10.218-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.217 - [arm64,armhf] dmaengine: pl330: issue_pending waits until WFP state - dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state" - wifi: nl80211: don't free NULL coalescing rule - eeprom: at24: Use dev_err_probe for nvmem register failure - eeprom: at24: Probe for DDR3 thermal sensor in the SPD case - eeprom: at24: fix memory corruption race condition (CVE-2024-35848) - [armhf] pinctrl: pinctrl-aspeed-g6: Fix register offset for pinconf of GPIOR-T - [arm64] pinctrl/meson: fix typo in PDM's pin name - pinctrl: core: delete incorrect free in pinctrl_enable() - sunrpc: add a struct rpc_stats arg to rpc_create_args - nfs: expose /proc/net/sunrpc/nfs in net namespaces - nfs: make the rpc_stat per net namespace - nfs: Handle error of rpc_proc_register() in nfs_net_init(). - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() - [s390x] mm: Fix storage key clearing for guest huge pages - [s390x] mm: Fix clearing storage keys for huge pages - bna: ensure the copied buf is NUL terminated - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). - net l2tp: drop flow hash on forward - [s390x] vdso: Add CFI for RA register to asm macro vdso_func - net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() - net: qede: use return from qede_parse_flow_attr() for flower - net: qede: use return from qede_parse_flow_attr() for flow_spec - net: qede: use return from qede_parse_actions() - cxgb4: Properly lock TX queue for the selftest. - [arm64,armhf] net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 - net: bridge: fix multicast-to-unicast with fraglist GSO - net: core: reject skb_copy(_expand) for fraglist GSO skbs - net: gro: add flush check in udp_gro_receive_segment - [arm64] clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change - [arm64] KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id - [arm64] KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() - scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic - gfs2: Fix invalid metadata access in punch_hole - wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc - wifi: cfg80211: fix rdev_dump_mpp() arguments order - net: mark racy access on sk->sk_rcvbuf - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload - btrfs: return accurate error code on open failure in open_fs_devices() - ALSA: line6: Zero-initialize message buffers - net: bcmgenet: Reset RBUF on first open - ata: sata_gemini: Check clk_enable() result - firewire: ohci: mask bus reset interrupts between ISR and bottom half - btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve - btrfs: always clear PERTRANS metadata during commit - scsi: target: Fix SELinux error when systemd-modules loads the target module - blk-iocost: avoid out of bounds shift - [arm64,armhf] gpu: host1x: Do not setup DMA for virtual devices - [mips64el,mipsel]: scall: Save thread_info.syscall unconditionally on entry (Closes: #1068365) - fs/9p: only translate RWX permissions for plain 9P2000 - fs/9p: translate O_TRUNC into OTRUNC - 9p: explicitly deny setlease attempts - gpio: wcove: Use -ENOTSUPP consistently - gpio: crystalcove: Use -ENOTSUPP consistently - clk: Don't hold prepare_lock when calling kref_put() - fs/9p: drop inodes immediately on non-.L too - drm/nouveau/dp: Don't probe eDP ports twice harder - net:usb:qmi_wwan: support Rolling modules - xfrm: Preserve vlan tags for transport mode software GRO - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (CVE-2024-27398) - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CVE-2024-27399) - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation - [x86] hwmon: (corsair-cpro) Use a separate buffer for sending commands - [x86] hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event() - [x86] hwmon: (corsair-cpro) Protect ccp->wait_input_report with a spinlock - phonet: fix rtm_phonet_notify() skb allocation - kcov: Remove kcov include from sched.h and move it to its users. - net: bridge: fix corrupted ethernet header on multicast-to-unicast - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() - [arm64] net: hns3: use appropriate barrier function after setting a bit value - btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send() - firewire: nosy: ensure user_length is taken into account when fetching packet contents (CVE-2024-27401) - [arm64] dts: qcom: Fix 'interrupt-map' parent address cells - usb: typec: ucsi: Check for notifications after init - usb: typec: ucsi: Fix connector check on init - usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device - usb: ohci: Prevent missed ohci interrupts - usb: gadget: composite: fix OS descriptors w_value logic - usb: gadget: f_fs: Fix a race condition when processing setup packets. - usb: xhci-plat: Don't include xhci.h - usb: dwc3: core: Prevent phy suspend during init - ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU - iio:imu: adis16475: Fix sync mode setting - iio: accel: mxc4005: Interrupt handling fixes - net: bcmgenet: synchronize use of bcmgenet_set_rx_mode() - dyndbg: fix old BUG_ON in >control parser - mei: me: add lunar lake point M DID - drm/vmwgfx: Fix invalid reads in fence signaled events - net: fix out-of-bounds access in ops_init - regulator: core: fix debugfs creation regression - keys: Fix overwrite of key expiration on instantiation - md: fix kmemleak of rdev->serial (CVE-2024-26900) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.218 - pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin() - [x86] xen: Drop USERGS_SYSRET64 paravirt call - [arm64] net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access - [arm64] net: bcmgenet: synchronize UMAC_CMD access - ima: fix deadlock when traversing "ima_default_rules". - netlink: annotate lockless accesses to nlk->max_recvmsg_len - [x86] KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection - firmware: arm_scmi: Harden accesses to the reset domains (CVE-2022-48655) - mptcp: ensure snd_nxt is properly initialized on connect - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() - drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() (CVE-2023-52585) - usb: typec: ucsi: displayport: Fix potential deadlock - serial: kgdboc: Fix NMI-safety problems from keyboard reset code - docs: kernel_include.py: Cope with docutils 0.21 . [ Salvatore Bonaccorso ] * Bump ABI to 30 linux-signed-arm64 (5.10.216+1) bullseye-security; urgency=high . * Sign kernel from linux 5.10.216-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.210 - units: change from 'L' to 'UL' - units: add the HZ macros - spi: introduce SPI_MODE_X_MASK macro - iio: adc: ad7091r: Set alert bit in config register - iio: adc: ad7091r: Allow users to configure device events - iio: adc: ad7091r: Enable internal vref if external vref is not supplied - dmaengine: fix NULL pointer in channel unregistration function - iio:adc:ad7091r: Move exports into IIO_AD7091R namespace. - ext4: allow for the last group to be marked as trimmed - crypto: api - Disallow identical driver names - PM: hibernate: Enforce ordering during image compression/decompression - hwrng: core - Fix page fault dead lock on mmap-ed hwrng - [s390x] crypto: s390/aes - Fix buffer overread in CTR mode - bus: mhi: host: Drop chan lock before queuing buffers - async: Split async_schedule_node_domain() - async: Introduce async_schedule_dev_nocall() - [arm64] dts: qcom: sdm845: fix USB wakeup interrupt types - [arm64] dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts - lsm: new security_file_ioctl_compat() hook - scripts/get_abi: fix source path leak - mmc: core: Use mrq.sbc in close-ended ffu - mmc: mmc_spi: remove custom DMA mapped buffers - rtc: Adjust failure return code for cmos_set_alarm() - nouveau/vmm: don't set addr on the fail path to avoid warning - ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path - rename(): fix the locking of subdirectories - block: Remove special-casing of compound pages - mm: vmalloc: introduce array allocation functions - KVM: use __vcalloc for very large allocations - net/smc: fix illegal rmb_desc access in SMC-D connection dump - tcp: make sure init the accept_queue's spinlocks once - bnxt_en: Wait for FLR to complete during probe - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING - llc: make llc_ui_sendmsg() more robust against bonding changes - llc: Drop support for ETH_P_TR_802_2. - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv (CVE-2024-23849) - tracing: Ensure visibility when inserting an element into tracing_map - afs: Hide silly-rename files from userspace - tcp: Add memory barrier to tcp_push() - netlink: fix potential sleeping issue in mqueue_flush_file - ipv6: init the accept_queue's spinlocks in inet6_create - net/mlx5: DR, Use the right GVMI number for drop action - net/mlx5e: fix a double-free in arfs_create_groups - netfilter: nf_tables: restrict anonymous set and map names to 16 bytes - netfilter: nf_tables: validate NFPROTO_* family - net: mvpp2: clear BM pool before initialization - fjes: fix memleaks in fjes_hw_setup - net: fec: fix the unhandled context fault from smmu - btrfs: ref-verify: free ref cache before clearing mount opt - btrfs: tree-checker: fix inline ref size in error messages - btrfs: don't warn if discard range is not aligned to sector - btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume - rbd: don't move requests to the running list on errors - exec: Fix error handling in begin_new_exec() - wifi: iwlwifi: fix a memory corruption - netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain - gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 - drm: Don't unref the same fb many times by mistake due to deadlock handling - drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking - drm/tidss: Fix atomic_flush check - drm/bridge: nxp-ptn3460: simplify some error checking - PM: sleep: Use dev_printk() when possible - PM: sleep: Avoid calling put_device() under dpm_list_mtx - PM: core: Remove unnecessary (void *) conversions - PM: sleep: Fix possible deadlocks in core system-wide PM code - fs/pipe: move check to pipe_has_watch_queue() - pipe: wakeup wr_wait after setting max_usage - [arm64] dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts - [arm64] dts: qcom: sc7180: fix USB wakeup interrupt types - mm: use __pfn_to_section() instead of open coding it - mm/sparsemem: fix race in accessing memory_section->usage - btrfs: remove err variable from btrfs_delete_subvolume - btrfs: avoid copying BTRFS_ROOT_SUBVOL_DEAD flag to snapshot of subvolume being deleted - drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33] - [armhf] drm/exynos: fix accidental on-stack copy of exynos_drm_plane - [armhf] drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume - gpio: eic-sprd: Clear interrupt after set the interrupt type - spi: bcm-qspi: fix SFDP BFPT read by usig mspi read - [mips*] Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan - tick/sched: Preserve number of idle sleeps across CPU hotplug events - [x86] entry/ia32: Ensure s32 is sign extended to s64 - [powerpc*] mm: Fix null-pointer dereference in pgtable_cache_add - drivers/perf: pmuv3: don't expose SW_INCR event in sysfs - [powerpc*] Fix build error due to is_valid_bugaddr() - [powerpc*] mm: Fix build failures due to arch_reserved_kernel_pages() - [x86] boot: Ignore NMIs during very early boot - [powerpc*] pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE - [powerpc*] lib: Validate size for vector operations - [x86] mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel - perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file - debugobjects: Stop accessing objects after releasing hash bucket lock - regulator: core: Only increment use_count when enable_count changes - audit: Send netlink ACK before setting connection in auditd_set - ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop - PNP: ACPI: fix fortify warning - ACPI: extlog: fix NULL pointer dereference check - PM / devfreq: Synchronize devfreq_monitor_[start/stop] - ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree - jfs: fix slab-out-of-bounds Read in dtSearch - jfs: fix array-index-out-of-bounds in dbAdjTree - jfs: fix uaf in jfs_evict_inode - pstore/ram: Fix crash when setting number of cpus to an odd number - crypto: stm32/crc32 - fix parsing list of devices - afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu() - afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() - rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() - jfs: fix array-index-out-of-bounds in diNewExt - [s390x] ptrace: handle setting of fpc register correctly - [s390x] KVM: s390: fix setting of fpc register - SUNRPC: Fix a suspicious RCU usage warning - ecryptfs: Reject casefold directory inodes - ext4: fix inconsistent between segment fstrim and full fstrim - ext4: unify the type of flexbg_size to unsigned int - ext4: remove unnecessary check from alloc_flex_gd() - ext4: avoid online resizing failures due to oversized flex bg - wifi: rt2x00: restart beacon queue when hardware reset - scsi: lpfc: Fix possible file string name overflow when updating firmware - PCI: Add no PM reset quirk for NVIDIA Spectrum devices - bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk - scsi: arcmsr: Support new PCI device IDs 1883 and 1886 - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() - bpf: Add map and need_defer parameters to .map_fd_put_ptr() - scsi: libfc: Don't schedule abort twice - scsi: libfc: Fix up timeout error in fc_fcp_rec_error() - bpf: Set uattr->batch.count as zero before batched update or deletion - ionic: pass opcode to devcmd_wait - block/rnbd-srv: Check for unlikely string overflow - [arm64,armhf] net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path - block: prevent an integer overflow in bvec_try_merge_hw_page - md: Whenassemble the array, consult the superblock of the freshest device - wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices - wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() - wifi: cfg80211: free beacon_ies when overridden from hidden BSS - Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066 - Bluetooth: L2CAP: Fix possible multiple reject send - i40e: Fix VF disable behavior to block all traffic - f2fs: fix to check return value of f2fs_reserve_new_block() - ALSA: hda: Refer to correct stream index at loops - ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument - fast_dput(): handle underflows gracefully - RDMA/IPoIB: Fix error code return in ipoib_mcast_join - drm/amd/display: Fix tiled display misalignment - f2fs: fix write pointers on zoned device after roll forward - drm/drm_file: fix use of uninitialized variable - drm/framebuffer: Fix use of uninitialized variable - drm/mipi-dsi: Fix detach call without attach - media: stk1160: Fixed high volume of stk1160_dbg messages - [x86] PCI: add INTEL_HDA_ARL to pci_ids.h - [x86] ALSA: hda: Intel: add HDA_ARL PCI ID support - [x86] ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL - [armhf] drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time - IB/ipoib: Fix mcast list locking - media: ddbridge: fix an error code problem in ddb_probe - [arm64] drm/msm/dpu: Ratelimit framedone timeout msgs - clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() - clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() - watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786 - drm/amdgpu: Let KFD sync with VM fences - drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' - leds: trigger: panic: Don't register panic notifier if creating the trigger failed - i3c: master: cdns: Update maximum prescaler value for i2c clock - xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import - mfd: ti_am335x_tscadc: Fix TI SoC dependencies - PCI: Only override AMD USB controller if required - PCI: switchtec: Fix stdev_release() crash after surprise hot remove - usb: hub: Replace hardcoded quirk value with BIT() macro - tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE - fs/kernfs/dir: obey S_ISGID - PCI/AER: Decode Requester ID when no error info found - libsubcmd: Fix memory leak in uniq() - virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings - blk-mq: fix IO hang from sbitmap wakeup race - ceph: fix deadlock or deadcode of misusing dget() - drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()' - drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()' - perf: Fix the nr_addr_filters fix - wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update - drm: using mul_u32_u32() requires linux/math64.h - scsi: isci: Fix an error code problem in isci_io_request_build() - scsi: core: Introduce enum scsi_disposition - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler - ip6_tunnel: use dev_sw_netstats_rx_add() - ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() - net-zerocopy: Refactor frag-is-remappable test. - tcp: add sanity checks to rx zerocopy - ixgbe: Remove non-inclusive language - ixgbe: Refactor returning internal error codes - ixgbe: Refactor overtemp event handling - ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() - ipv6: Ensure natural alignment of const ipv6 loopback and router addresses - llc: call sock_orphan() at release time - netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger - netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations - net: ipv4: fix a memleak in ip_setup_cork - af_unix: fix lockdep positive in sk_diag_dump_icons() - net: sysfs: Fix /sys/class/net/ path - HID: apple: Add support for the 2021 Magic Keyboard - HID: apple: Add 2021 magic keyboard FN key mapping - bonding: remove print in bond_verify_device_path - uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ - PM: sleep: Fix error handling in dpm_prepare() - dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools - dmaengine: ti: k3-udma: Report short packet errors - dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA - dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (CVE-2024-26600) - [arm64] drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case - net: stmmac: xgmac: fix handling of DPP safety error for DMA channels - tunnels: fix out of bounds access when building IPv6 PMTU error - atm: idt77252: fix a memleak in open_card_ubr0 - hwmon: (aspeed-pwm-tacho) mutex for tach reading - [x86] hwmon: (coretemp) Fix out-of-bounds memory access - [x86] hwmon: (coretemp) Fix bogus core_id to attr name mapping - inet: read sk->sk_family once in inet_recv_error() - rxrpc: Fix response to PING RESPONSE ACKs to a dead call - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() - ppp_async: limit MRU to 64K - netfilter: nft_compat: reject unused compat flag - netfilter: nft_compat: restrict match/target protocol to u16 - netfilter: nft_ct: reject direction for ct id - netfilter: nft_set_pipapo: store index in scratch maps - netfilter: nft_set_pipapo: add helper to release pcpu scratch area - netfilter: nft_set_pipapo: remove scratch_aligned pointer - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command - blk-iocost: Fix an UBSAN shift-out-of-bounds warning - net/af_iucv: clean up a try_then_request_module() - USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e - USB: serial: option: add Fibocom FM101-GL variant - USB: serial: cp210x: add ID for IMST iM871A-USB - usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK - hrtimer: Report offline hrtimer enqueue - Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU - Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID - vhost: use kzalloc() instead of kmalloc() followed by memset() - clocksource: Skip watchdog check for large watchdog intervals - net: stmmac: xgmac: use #define for string constants - net: stmmac: xgmac: fix a typo of register name in DPP safety handling - netfilter: nft_set_rbtree: skip end interval element from gc (CVE-2024-26581) - btrfs: forbid creating subvol qgroups - btrfs: do not ASSERT() if the newly created subvolume already got read (CVE-2024-23850) - btrfs: forbid deleting live subvol qgroup - btrfs: send: return EOPNOTSUPP on unknown flags - of: unittest: Fix compile in the non-dynamic case - net: openvswitch: limit the number of recursions from action sets (CVE-2024-1151) - spi: ppc4xx: Drop write-only variable - ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() - net: sysfs: Fix /sys/class/net/ path for statistics - [mips*] Add 'memory' clobber to csum_ipv6_magic() inline assembler - i40e: Fix waiting for queues of all VSIs to be disabled - tracing/trigger: Fix to return error if failed to alloc snapshot - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again - ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32 - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx - HID: wacom: generic: Avoid reporting a serial of '0' to userspace - HID: wacom: Do not register input devices until after hid_hw_start - usb: ucsi_acpi: Fix command completion handling - USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT - usb: f_mass_storage: forbid async queue when shutdown happen - media: ir_toy: fix a memleak in irtoy_tx - i2c: i801: Remove i801_set_block_buffer_mode - i2c: i801: Fix block process call transactions (CVE-2024-26593) - modpost: trim leading spaces when processing source files list - scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock" - lsm: fix the logic in security_inode_getsecctx() - firewire: core: correct documentation of fw_csr_string() kernel API - kbuild: Fix changing ELF file type for output of gen_btf for big endian - nfc: nci: free rx_data_reassembly skb on NCI device cleanup - net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() - xen-netback: properly sync TX responses - ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL - [arm*] binder: signal epoll threads of self-work (CVE-2024-26606) - misc: fastrpc: Mark all sessions as invalid in cb_remove - ext4: fix double-free of blocks due to wrong extents moved_len - tracing: Fix wasted memory in saved_cmdlines logic - staging: iio: ad5933: fix type mismatch regression - iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC - iio: accel: bma400: Fix a compilation problem - media: rc: bpf attach/detach requires write permission - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove - ring-buffer: Clean ring_buffer_poll_wait() error return - serial: max310x: set default value when reading clock ready bit - serial: max310x: improve crystal stable clock detection - [x86] mm/ident_map: Use gbpages only where full GB page should be mapped. - mmc: slot-gpio: Allow non-sleeping GPIO ro - ALSA: hda/conexant: Add quirk for SWS JS201D - nilfs2: fix data corruption in dsync block recovery for small block sizes - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() - crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked - nfp: use correct macro for LengthSelect in BAR config - nfp: flower: prevent re-adding mac index for bonded port - wifi: mac80211: reload info pointer in ieee80211_tx_dequeue() - irqchip/irq-brcmstb-l2: Add write memory barrier before exit - irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update - [s390x] qeth: Fix potential loss of L3-IP@ in case of network issues - ceph: prevent use-after-free in encode_cap_msg() - of: property: fix typo in io-channels - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) - pmdomain: core: Move the unused cleanup to a _sync initcall - tracing: Inform kmemleak of saved_cmdlines allocation - Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" - bus: moxtet: Add spi device table - PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support - mips: Fix max_mapnr being uninitialized on early stages - crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init - serial: Add rs485_supported to uart_port - serial: 8250_exar: Fill in rs485_supported - serial: 8250_exar: Set missing rs485_supported flag - scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm - scripts/decode_stacktrace.sh: support old bash version - scripts: decode_stacktrace: demangle Rust symbols - scripts/decode_stacktrace.sh: optionally use LLVM utilities - netfilter: ipset: fix performance regression in swap operation - netfilter: ipset: Missing gc cancellations fixed - hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range() - Revert "arm64: Stash shadow stack pointer in the task struct on interrupt" - net: prevent mss overflow in skb_segment() (CVE-2023-52435) - sched/membarrier: reduce the ability to hammer on sys_membarrier (CVE-2024-26602) - nilfs2: fix potential bug in end_buffer_async_write - nilfs2: replace WARN_ONs for invalid DAT metadata block requests - dm: limit the number of targets and parameter size area (CVE-2024-23851, CVE-2023-52429) - PM: runtime: add devm_pm_runtime_enable helper - PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() - [arm64] drm/msm/dsi: Enable runtime PM - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() (CVE-2024-0607) - net: bcmgenet: Fix EEE implementation - PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.211 - net/sched: Retire CBQ qdisc - net/sched: Retire ATM qdisc - net/sched: Retire dsmark qdisc - smb: client: fix OOB in receive_encrypted_standard() (CVE-2024-0565) - smb: client: fix potential OOBs in smb2_parse_contexts() (CVE-2023-52434) - smb: client: fix parsing of SMB3.1.1 POSIX create context - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset - userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb - zonefs: Improve error handling - sched/rt: Fix sysctl_sched_rr_timeslice intial value - sched/rt: Disallow writing invalid values to sched_rt_period_us - scsi: target: core: Add TMF to tmr_list handling - [arm64] dmaengine: fsl-qdma: increase size of 'irq_name' - wifi: cfg80211: fix missing interfaces when dumping - wifi: mac80211: fix race condition on enabling fast-xmit - fbdev: savage: Error out if pixclock equals zero - fbdev: sis: Error out if pixclock equals zero - spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected - ahci: asm1166: correct count of reported ports - ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() - [armhf] dmaengine: ti: edma: Add some null pointer checks to the edma_probe - [arm64] regulator: pwm-regulator: Add validity checks in continuous .get_voltage - nvmet-tcp: fix nvme tcp ida memory leak - [armhf] ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616 - netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new - nvme-fc: do not wait in vain when unloading module - nvmet-fcloop: swap the list_add_tail arguments - nvmet-fc: release reference on target port - nvmet-fc: abort command when there is no binding - ext4: correct the hole length returned by ext4_map_blocks() - Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table - efi: runtime: Fix potential overflow of soft-reserved region size - efi: Don't add memblocks for soft-reserved memory - [x86] hwmon: (coretemp) Enlarge per package core count limit - scsi: lpfc: Use unsigned type for num_sge - firewire: core: send bus reset promptly on gap count error - virtio-blk: Ensure no requests in virtqueues before deleting vqs. - [mips*] irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable - media: av7110: prevent underflow in write_ts_to_decoder() - hvc/xen: prevent concurrent accesses to the shared ring - [x86] uaccess: Implement macros for CMPXCHG on user addresses - seccomp: Invalidate seccomp mode to catch death failures - block: ataflop: fix breakage introduced at blk-mq refactoring - [powerpc*] watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions - [powerpc*] watchpoints: Annotate atomic context in more places - cifs: add a warning when the in-flight count goes negative - mtd: spinand: macronix: Add support for MX35LFxGE4AD - [x86] ASoC: Intel: boards: harden codec property handling - [x86] ASoC: Intel: boards: get codec device with ACPI instead of bus search - [x86] ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use - task_stack, x86/cea: Force-inline stack helpers - btrfs: tree-checker: check for overlapping extent items - btrfs: introduce btrfs_lookup_match_dir - btrfs: unify lookup return value when dir entry is missing - btrfs: do not pin logs too early during renames - lan743x: fix for potential NULL pointer dereference with bare card - [x86] platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC - iwlwifi: mvm: do more useful queue sync accounting - iwlwifi: mvm: write queue_sync_state only for sync - jbd2: remove redundant buffer io error checks - jbd2: recheck chechpointing non-dirty buffer - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint - [x86] drop bogus "cc" clobber from __try_cmpxchg_user_asm() - erofs: fix lz4 inplace decompression (CVE-2023-52497) - [amd64] IB/hfi1: Fix sdma.h tx->num_descs off-by-one error - [s390x] cio: fix invalid -EBUSY on ccw_device_start - dm-crypt: don't modify the data when using authenticated encryption - [arm64] KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler - [arm64] KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() - PCI/MSI: Prevent MSI hardware interrupt number truncation - l2tp: pass correct message length to ip6_append_data - [x86] Revert "x86/ftrace: Use alternative RET encoding" - [x86] text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR - [x86] ibt,paravirt: Use text_gen_insn() for paravirt_patch() - [x86] ftrace: Use alternative RET encoding - [x86] returnthunk: Allow different return thunks - [x86] Revert "x86/alternative: Make custom return thunk unconditional" - [x86] alternative: Make custom return thunk unconditional - usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs - mptcp: fix lockless access in subflow ULP diag - [amd64] IB/hfi1: Fix a memleak in init_credit_return - RDMA/bnxt_re: Return error for SRQ resize - RDMA/srpt: Support specifying the srpt_service_guid parameter - RDMA/qedr: Fix qedr_create_user_qp error flow - [arm64] dts: rockchip: set num-cs property for spi on px30 - RDMA/srpt: fix function pointer cast warnings - bpf, scripts: Correct GPL license name - scsi: jazz_esp: Only build if SCSI core is builtin - nouveau: fix function cast warnings - ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid - ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid - afs: Increase buffer size in afs_update_volume_status() - ipv6: sr: fix possible use-after-free and null-ptr-deref - packet: move from strlcpy with unused retval to strscpy - net: dev: Convert sa_data to flexible array in struct sockaddr - [s390x] use the correct count for __iowrite64_copy() - netfilter: nf_tables: set dormant flag on hook register failure - drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3 - drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set - drm/amd/display: Fix memory leak in dm_sw_fini() - block: ataflop: more blk-mq refactoring fixes - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio - arp: Prevent overflow in arp_req_get(). - ext4: regenerate buddy after block freeing failed if under fc replay (CVE-2024-26601) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.212 - [x86] platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names - crypto: virtio/akcipher - Fix stack overflow on memcpy - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter - net: ip_tunnel: prevent perpetual headroom growth - tun: Fix xdp_rxq_info's queue_index when detaching - ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() - lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected - net: usb: dm9601: fix wrong return value in dm9601_mdio_read - Bluetooth: Avoid potential use-after-free in hci_error_reset - Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR - Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST - Bluetooth: Enforce validation on max value of connection interval - netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() - rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back - efi/capsule-loader: fix incorrect allocation size - ALSA: Drop leftover snd-rtctimer stuff from Makefile - afs: Fix endless loop in directory parsing - tomoyo: fix UAF write bug in tomoyo_write_control() (CVE-2024-26622) - gtp: fix use-after-free and null-ptr-deref in gtp_newlink() - wifi: nl80211: reject iftype change with mesh ID change - btrfs: dev-replace: properly validate device names - [arm64] dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read - [arm64] dmaengine: fsl-qdma: init irq after reg initialization - mmc: core: Fix eMMC initialization with 1-bit bus connection - [arm64] mmc: sdhci-xenon: add timeout for PHY init complete - [arm64] mmc: sdhci-xenon: fix PHY init clock stability - [arm64] pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation - [x86] cpu/intel: Detect TME keyid bits before setting MTRR mask registers - mptcp: fix possible deadlock in subflow diag - ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks() - cachefiles: fix memory leak in cachefiles_add_cache() - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (CVE-2024-0841) - gpiolib: Fix the error path order in gpiochip_add_data_with_key() - gpio: fix resource unwinding order in error path - mptcp: fix double-free on socket dismantle https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.213 - [arm64,armhf] mmc: mmci: stm32: use a buffer for unaligned DMA requests - [arm64,armhf] mmc: mmci: stm32: fix DMA API overlapping mappings warning - lan78xx: Fix white space and style issues - lan78xx: Add missing return code checks - lan78xx: Fix partial packet errors on suspend/resume - lan78xx: Fix race conditions in suspend/resume handling - net: lan78xx: fix runtime PM count underflow on link stop - ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able - i40e: disable NAPI right after disabling irqs when handling xsk_pool - tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string - geneve: make sure to pull inner header in geneve_rx() - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() - cpumap: Zero-initialise xdp_rxq_info struct before running XDP program - net/rds: fix WARNING in rds_conn_connect_if_down - netfilter: nft_ct: fix l3num expectations with inet pseudo family - netfilter: nf_conntrack_h323: Add protection for bmp length out of range - netrom: Fix a data-race around sysctl_netrom_default_path_quality - netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser - netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser - netrom: Fix a data-race around sysctl_netrom_transport_timeout - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries - netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay - netrom: Fix a data-race around sysctl_netrom_transport_busy_delay - netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size - netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout - netrom: Fix a data-race around sysctl_netrom_routing_control - netrom: Fix a data-race around sysctl_netrom_link_fails_count - netrom: Fix data-races around sysctl_net_busy_read - xhci: remove extra loop in interrupt context - xhci: prevent double-fetch of transfer and transfer event TRBs - xhci: process isoc TD properly when there was a transaction error mid TD. - xhci: handle isoc Babble and Buffer Overrun events properly - net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr - bpf: net: Change sk_getsockopt() to take the sockptr_t argument - lsm: make security_socket_getpeersec_stream() sockptr_t safe - lsm: fix default return value of the socket_getpeersec_*() hooks - ext4: make ext4_es_insert_extent() return void - ext4: refactor ext4_da_map_blocks() - ext4: convert to exclusive lock while inserting delalloc extents - [x86] Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening - [x86] hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening - [x86] hv_netvsc: Wait for completion on request SWITCH_DATA_PATH - [x86] hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove - [x86] hv_netvsc: Make netvsc/VF binding check both MAC and serial number - [x86] hv_netvsc: use netif_is_bond_master() instead of open code - [x86] hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed - mm/hugetlb: change hugetlb_reserve_pages() to type bool - mm: hugetlb pages should not be reserved by shmat() if SHM_NORESERVE - getrusage: add the "signal_struct *sig" local variable - getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand() - getrusage: use __for_each_thread() - getrusage: use sig->stats_lock rather than lock_task_sighand() - [x86] Drivers: hv: vmbus: Drop error message when 'No request id available' - regmap: allow to define reg_update_bits for no bus configuration - regmap: Add bulk read/write callbacks into regmap_config https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.214 - io_uring/unix: drop usage of io_uring socket - io_uring: drop any code related to SCM_RIGHTS - rcu-tasks: Provide rcu_trace_implies_rcu_gp() - bpf: Defer the free of inner map when necessary (CVE-2023-52447) - ASoC: rt5645: Make LattePanda board DMI match more precise - [x86] xen: Add some null pointer checking to smp.c - [mips*] Clear Cause.BD in instruction_pointer_set - HID: multitouch: Add required quirk for Synaptics 0xcddc device - gen_compile_commands: fix invalid escape sequence warning - RDMA/mlx5: Fix fortify source warning while accessing Eth segment - RDMA/mlx5: Relax DEVX access upon modify commands - [x86] mm: Move is_vsyscall_vaddr() into asm/vsyscall.h - [x86] mm: Disallow vsyscall page read for copy_from_kernel_nofault() - net/iucv: fix the allocation size of iucv_path_table array - block: sed-opal: handle empty atoms when parsing response - dm-verity, dm-crypt: align "struct bvec_iter" correctly - scsi: mpt3sas: Prevent sending diag_reset when the controller is ready - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (CVE-2024-22099) - firewire: core: use long bus reset on gap count error - [x86] ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet - Input: gpio_keys_polled - suppress deferred probe error for gpio - [x86] paravirt: Fix build due to __text_gen_insn() backport - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak - nbd: null check for nla_nest_start - fs/select: rework stack allocation hack for clang - block: add a new set_read_only method - md: implement ->set_read_only to hook into BLKROSET processing - md: Don't clear MD_CLOSING when the raid is about to stop - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (CVE-2023-6270) - timekeeping: Fix cross-timestamp interpolation on counter wrap - timekeeping: Fix cross-timestamp interpolation corner case decision - timekeeping: Fix cross-timestamp interpolation for non-x86 - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (CVE-2023-7042) - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled - wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled - wifi: b43: Stop correct queue in DMA worker when QoS is disabled - wifi: b43: Disable QoS for bcm4331 - wifi: wilc1000: fix declarations ordering - wifi: wilc1000: fix RCU usage in connect path - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work - wifi: wilc1000: fix multi-vif management when deleting a vif - wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value - sock_diag: annotate data-races around sock_diag_handlers[family] - inet_diag: annotate data-races around inet_diag_table[] - bpftool: Silence build warning about calloc() - af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc(). - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete - wifi: iwlwifi: dbg-tlv: ensure NUL termination - wifi: iwlwifi: fix EWRD table validity check - net: blackhole_dev: fix build warning for ethh set but not used - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() - bpf: Factor out bpf_spin_lock into helpers. - bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly - wireless: Remove redundant 'flush_workqueue()' calls - wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() - [amd64] iommu/amd: Mark interrupt as managed - wifi: brcmsmac: avoid function pointer casts - net: ena: Remove ena_select_queue - ACPI: scan: Fix device check notification handling - [x86] relocs: Ignore relocations in .notes section (CVE-2024-26816) - SUNRPC: fix some memleaks in gssx_dec_option_array - mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function - wifi: rtw88: 8821c: Fix false alarm count - PCI: Make pci_dev_is_disconnected() helper public for other drivers - [amd64] iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected - igb: move PEROUT and EXTTS isr logic to separate functions - igb: Fix missing time sync events - Bluetooth: Remove superfluous call to hci_conn_check_pending() - Bluetooth: hci_core: Fix possible buffer overflow - sr9800: Add check for usbnet_get_endpoints (CVE-2024-26651) - bpf: Eliminate rlimit-based memory accounting for devmap maps - bpf: Fix DEVMAP_HASH overflow check on 32-bit arches - bpf: Fix hashtab overflow check on 32-bit arches - bpf: Fix stackmap overflow check on 32-bit arches - ipv6: fib6_rules: flush route cache when rule is changed - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() - net: phy: fix phy_get_internal_delay accessing an empty array - net: hns3: fix port duplex configure error in IMP reset - net: phy: DP83822: enable rgmii mode if phy_interface_is_rgmii - net: phy: dp83822: Fix RGMII TX delay configuration - OPP: debugfs: Fix warning around icc_get_name() - tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function - net/ipv4: Replace one-element array with flexible-array member - net/ipv4: Revert use of struct_size() helper - net/ipv4/ipv6: Replace one-element arraya with flexible-array members - bpf: net: Change do_ip_getsockopt() to take the sockptr_t argument - ipmr: fix incorrect parameter validation in the ip_mroute_getsockopt() function - l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function - udp: fix incorrect parameter validation in the udp_lib_getsockopt() function - net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function - nfp: flower: handle acti_netdevs allocation failure - dm raid: fix false positive for requeue needed during reshape - dm: call the resume method on internal suspend - [arm64,armhf] drm/tegra: dsi: Add missing check for of_find_device_by_node - [arm64,armhf] drm/tegra: dsi: Make use of the helper function dev_err_probe() - [arm64,armhf] drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe() - [arm64,armhf] drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe() - [arm64,armhf] drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe() - drm/rockchip: inno_hdmi: Fix video timing - drm: Don't treat 0 as -1 in drm_fixp2int_ceil - drm/rockchip: lvds: do not overwrite error code - drm/rockchip: lvds: do not print scary message when probing defer - drm/lima: fix a memleak in lima_heap_alloc - dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA - media: tc358743: register v4l2 async device only after successful setup - PCI/DPC: Print all TLP Prefixes, not just the first - perf record: Fix possible incorrect free in record__switch_output() - HID: lenovo: Add middleclick_workaround sysfs knob for cptkbd - drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' - drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' - perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample() - media: em28xx: annotate unchecked call to media_device_register() - media: v4l2-tpg: fix some memleaks in tpg_alloc - media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity - media: edia: dvbdev: fix a use-after-free - pinctrl: mediatek: Drop bogus slew rate register range for MT8192 - [arm64] clk: qcom: reset: Commonize the de/assert functions - [arm64] clk: qcom: reset: Ensure write completion on reset de/assertion - quota: simplify drop_dquot_ref() - quota: Fix potential NULL pointer dereference - quota: Fix rcu annotations of inode dquot pointers - PCI: switchtec: Fix an error handling path in switchtec_pci_probe() - crypto: xilinx - call finalize with bh disabled - perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() - drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode() - ALSA: seq: fix function cast warnings - perf stat: Avoid metric-only segv - media: sun8i-di: Fix coefficient writes - media: sun8i-di: Fix power on/off sequences - media: sun8i-di: Fix chroma difference threshold - media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak - media: go7007: add check of return value of go7007_read_addr() - media: pvrusb2: remove redundant NULL check - media: pvrusb2: fix pvr2_stream_callback casts - PCI: Mark 3ware-9650SE Root Port Extended Tags as broken - [arm64] clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister() - [arm64,armhf] drm/tegra: put drm_gem_object ref on error in tegra_fb_create - mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref - mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref - crypto: arm/sha - fix function cast warnings - drm/tidss: Fix initial plane zpos values - mtd: maps: physmap-core: fix flash size larger than 32-bit - mtd: rawnand: lpc32xx_mlc: fix irq handler prototype - drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int() - media: pvrusb2: fix uaf in pvr2_context_set_notify - media: dvb-frontends: avoid stack overflow warnings with clang - media: go7007: fix a memleak in go7007_load_encoder - media: ttpci: fix two memleaks in budget_av_attach - media: mediatek: vcodec: avoid -Wcast-function-type-strict warning - powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks - [arm64] drm/msm/dpu: add division of drm_display_mode's hskew parameter - [powerpc*] embedded6xx: Fix no previous prototype for avr_uart_send() etc. - leds: aw2013: Unlock mutex before destroying it - leds: sgm3140: Add missing timer cleanup and flash gpio control - backlight: lm3630a: Initialize backlight_properties on init - backlight: lm3630a: Don't set bl->props.brightness in get_brightness - backlight: da9052: Fully initialize backlight_properties during probe - backlight: lm3639: Fully initialize backlight_properties during probe - backlight: lp8788: Fully initialize backlight_properties during probe - clk: Fix clk_core_get NULL dereference - ALSA: hda/realtek: fix ALC285 issues on HP Envy x360 laptops - ALSA: usb-audio: Stop parsing channels bits when all channels are found. - RDMA/srpt: Do not register event handler until srpt device is fully setup - f2fs: compress: fix to check unreleased compressed cluster - scsi: csiostor: Avoid function pointer casts - RDMA/device: Fix a race between mad_client and cm_client init - scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn - net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 - NFSv4.2: fix listxattr maximum XDR buffer size - watchdog: stm32_iwdg: initialize default timeout - NFS: Fix an off by one in root_nfs_cat() - afs: Revert "afs: Hide silly-rename files from userspace" - [armhf] remoteproc: stm32: Constify st_rproc_ops - [armhf] remoteproc: Add new get_loaded_rsc_table() to rproc_ops - [armhf] remoteproc: stm32: Move resource table setup to rproc_ops - [armhf] remoteproc: stm32: use correct format strings on 64-bit - [armhf] remoteproc: stm32: Fix incorrect type in assignment for va - [armhf] remoteproc: stm32: Fix incorrect type assignment returned by stm32_rproc_get_loaded_rsc_tablef - tty: vt: fix 20 vs 0x20 typo in EScsiignore - serial: max310x: fix syntax error in IRQ error message - tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT - kconfig: fix infinite loop when expanding a macro at the end of file - rtc: mt6397: select IRQ_DOMAIN instead of depending on it - serial: 8250_exar: Don't remove GPIO device on suspend - staging: greybus: fix get_channel_from_mode() failure path - usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin - io_uring: don't save/restore iowait state - [s390x] vtime: fix average steal time calculation - soc: fsl: dpio: fix kcalloc() argument order - hsr: Fix uninit-value access in hsr_get_node() - packet: annotate data-races around ignore_outgoing - net: dsa: mt7530: prevent possible incorrect XTAL frequency selection - wireguard: receive: annotate data-race around receiving_counter.counter - rds: introduce acquire/release ordering in acquire/release_in_xmit() - hsr: Handle failures in module init - net/bnx2x: Prevent access to a freed page in page_pool - netfilter: nft_set_pipapo: release elements in clone only from destroy path (CVE-2024-26809) - scsi: fc: Update formal FPIN descriptor definitions - netfilter: nf_tables: do not compare internal table flags on updates - rcu: add a helper to report consolidated flavor QS - bpf: report RCU QS in cpumap kthread - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler - regmap: Add missing map->bus check - [armhf] remoteproc: stm32: fix phys_addr_t format string https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.215 - amdkfd: use calloc instead of kzalloc to avoid integer overflow (CVE-2024-26817) - Documentation/hw-vuln: Update spectre doc - [x86] cpu: Support AMD Automatic IBRS - [x86] bugs: Use sysfs_emit() - timers: Update kernel-doc for various functions - timers: Use del_timer_sync() even on UP - timers: Rename del_timer_sync() to timer_delete_sync() - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach (CVE-2023-47233) - [armhf] dts: marvell: Fix maxium->maxim typo in brownstone dts - [x86] drm/vmwgfx: stop using ttm_bo_create v2 - [x86] drm/vmwgfx: switch over to the new pin interface v2 - [x86] drm/vmwgfx/vmwgfx_cmdbuf_res: Remove unused variable 'ret' - [x86] drm/vmwgfx: Fix some static checker warnings - [x86] drm/vmwgfx: Fix possible null pointer derefence with invalid contexts - media: xc4000: Fix atomicity violation in xc4000_get_frequency (CVE-2024-24861) - KVM: Always flush async #PF workqueue when vCPU is being destroyed - [x86] crypto: qat - fix double free during reset - [x86] crypto: qat - resolve race condition during AER recovery - ext4: correct best extent lstart adjustment logic - block: introduce zone_write_granularity limit - block: Clear zone limits for a non-zoned stacked queue - bounds: support non-power-of-two CONFIG_NR_CPUS - fat: fix uninitialized field in nostale filehandles - ubifs: Set page uptodate in the correct place - ubi: Check for too small LEB size in VTBL code - ubi: correct the calculation of fastmap size - mtd: rawnand: meson: fix scrambling mode value in command macro - PM: suspend: Set mem_sleep_current during kernel command line setup - [powerpc*] fsl: Fix mfpmr build errors with newer binutils - USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB - USB: serial: add device ID for VeriFone adapter - USB: serial: cp210x: add ID for MGP Instruments PDS100 - USB: serial: option: add MeiG Smart SLM320 product - USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M - PM: sleep: wakeirq: fix wake irq warning in system suspend - mmc: tmio: avoid concurrent runs of mmc_request_done() - fuse: fix root lookup with nonzero generation - fuse: don't unhash root - usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros - printk/console: Split out code that enables default console - serial: Lock console when calling into driver before registration - btrfs: fix off-by-one chunk length calculation at contains_pending_extent() - PCI: Drop pci_device_remove() test of pci_dev->driver - PCI/PM: Drain runtime-idle callbacks before driver removal - PCI/ERR: Cache RCEC EA Capability offset in pci_init_capabilities() - PCI: Cache PCIe Device Capabilities register - PCI: Work around Intel I210 ROM BAR overlap defect - PCI/ASPM: Make Intel DG2 L1 acceptable latency unlimited - PCI/DPC: Quirk PIO log size for certain Intel Root Ports - PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports - Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" - dm-raid: fix lockdep waring in "pers->hot_add_disk" - mac802154: fix llsec key resources release in mac802154_llsec_key_del - mm: swap: fix race between free_swap_and_cache() and swapoff() - mmc: core: Fix switch on gp3 partition - [armhf] drm/etnaviv: Restore some id values - hwmon: (amc6821) add of_match table - ext4: fix corruption during on-line resize - nvmem: meson-efuse: fix function pointer type mismatch - slimbus: core: Remove usage of the deprecated ida_simple_xx() API - [arm64,armhf] phy: tegra: xusb: Add API to retrieve the port number of phy - usb: gadget: tegra-xudc: Use dev_err_probe() - usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic - speakup: Fix 8bit characters from direct synth - PCI/ERR: Clear AER status only when we control AER - PCI/AER: Block runtime suspend when handling errors - nfs: fix UAF in direct writes - kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1 - PCI: dwc: endpoint: Fix advertised resizable BAR size - vfio/platform: Disable virqfds on cleanup - ring-buffer: Fix waking up ring buffer readers - ring-buffer: Do not set shortest_full when full target is hit - ring-buffer: Fix resetting of shortest_full - ring-buffer: Fix full_waiters_pending in poll - [s390x] zcrypt: fix reference counting on zcrypt card objects - drm/panel: do not return negative error codes from drm_panel_get_modes() - [armhf] drm/exynos: do not return negative values from .get_modes() - drm/imx/ipuv3: do not return negative values from .get_modes() - drm/vc4: hdmi: do not return negative values from .get_modes() - nilfs2: fix failure to detect DAT corruption in btree and direct mappings - nilfs2: prevent kernel bug at submit_bh_wbc() - cpufreq: dt: always allocate zeroed cpumask - [x86] CPU/AMD: Update the Zenbleed microcode revisions - net: hns3: tracing: fix hclgevf trace event strings - wireguard: netlink: check for dangling peer via is_dead instead of empty list - wireguard: netlink: access device through ctx instead of peer - ahci: asm1064: correct count of reported ports - ahci: asm1064: asm1166: don't limit reported ports - drm/amd/display: Return the correct HDCP error code - drm/amd/display: Fix noise issue on HDMI AV mute - dm snapshot: fix lockup in dm_exception_table_exit - vxge: remove unnecessary cast in kfree() - [x86] stackprotector/32: Make the canary into a regular percpu variable - [x86] pm: Work around false positive kmemleak report in msr_build_context() - scripts: kernel-doc: Fix syntax error due to undeclared args variable (Closes: #1064035) - comedi: comedi_test: Prevent timers rescheduling during deletion - cpufreq: brcmstb-avs-cpufreq: fix up "add check for cpufreq_cpu_get's return value" - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643) - netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642) - netfilter: nf_tables: reject constant set with timeout - Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory - xfrm: Avoid clang fortify warning in copy_to_user_tmpl() - [x86] KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() - ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command - usb: gadget: ncm: Fix handling of zero block length packets - usb: port: Don't try to peer unused USB ports based on location - tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled - mei: me: add arrow lake point S DID - mei: me: add arrow lake point H DID - vt: fix unicode buffer corruption when deleting characters - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion - tee: optee: Fix kernel panic caused by incorrect error handling - xen/events: close evtchn after mapping cleanup (CVE-2024-26687) - printk: Update @console_may_schedule in console_trylock_spinning() - btrfs: allocate btrfs_ioctl_defrag_range_args on stack - [x86] asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix - [x86] bugs: Add asm helpers for executing VERW - [x86] entry_64: Add VERW just before userspace transition - [x86] entry_32: Add VERW just before userspace transition - [x86] bugs: Use ALTERNATIVE() instead of mds_user_clear static key - [x86] KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH - [x86] KVM/VMX: Move VERW closer to VMentry for MDS mitigation - [x86] Mitigate Register File Data Sampling (RFDS) vulnerability (CVE-2023-28746): + [x86] mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set + Documentation/hw-vuln: Add documentation for RFDS + [x86] rfds: Mitigate Register File Data Sampling (RFDS) + [x86] KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests - perf/core: Fix reentry problem in perf_output_read_group() - efivarfs: Request at most 512 bytes for variable names - [powerpc*] xor_vmx: Add '-mhard-float' to CFLAGS - serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO (CVE-2023-52488) - mm/memory-failure: fix an incorrect use of tail pages - mm/migrate: set swap entry values of THP tail pages properly. - init: open /initrd.image with O_LARGEFILE - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes - exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack() - mmc: core: Initialize mmc_blk_ioc_data - mmc: core: Avoid negative index with array access - net: ll_temac: platform_get_resource replaced by wrong function - usb: cdc-wdm: close race between read and workqueue - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (CVE-2024-26654) - scsi: core: Fix unremoved procfs host directory regression - [arm*] staging: vc04_services: changen strncpy() to strscpy_pad() - [arm*] staging: vc04_services: fix information leak in create_component() - USB: core: Add hub_get() and hub_put() routines - [arm*] usb: dwc2: host: Fix remote wakeup from hibernation - [arm*] usb: dwc2: host: Fix hibernation flow - [arm*] usb: dwc2: host: Fix ISOC flow in DDMA mode - [arm*] usb: dwc2: gadget: LPM flow fix - usb: udc: remove warning when queue disabled ep - usb: typec: ucsi: Ack unsupported commands - usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset - scsi: qla2xxx: Split FCE|EFT trace control - scsi: qla2xxx: Fix command flush on cable pull - scsi: qla2xxx: Delay I/O Abort on PCI error - [x86] cpu: Enable STIBP on AMD if Automatic IBRS is enabled - PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports - scsi: lpfc: Correct size for wqe for memset() - USB: core: Fix deadlock in usb_deauthorize_interface() - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet - ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa() - tcp: properly terminate timers for kernel sockets - ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields() - bpf: Protect against int overflow for stack access size - dm integrity: fix out-of-range warning - r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d - [x86] cpufeatures: Add new word for scattered features - Bluetooth: hci_event: set the conn encrypted before conn establishes - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CVE-2024-24857, CVE-2024-24858) - netfilter: nf_tables: disallow timeout for anonymous sets (CVE-2023-52620) - net/rds: fix possible cp null dereference - vfio/pci: Disable auto-enable of exclusive INTx IRQ (CVE-2024-27437) - vfio/pci: Lock external INTx masking ops (CVE-2024-26810) - vfio: Introduce interface to flush virqfd inject workqueue - vfio/pci: Create persistent INTx handler (CVE-2024-26812) - vfio/platform: Create persistent IRQ handlers (CVE-2024-26813) - vfio/fsl-mc: Block calling interrupt handler without trigger (CVE-2024-26814) - io_uring: ensure '0' is returned on file registration success - Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped." - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations - [x86] srso: Add SRSO mitigation for Hygon processors (CVE-2023-52482) - block: add check that partition length needs to be aligned with block size (CVE-2023-52458) - netfilter: nf_tables: reject new basechain after table flag update - netfilter: nf_tables: flush pending destroy work before exit_net release - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() - netfilter: validate user input for expected length - vboxsf: Avoid an spurious warning if load_nls_xxx() fails - bpf, sockmap: Prevent lock inversion deadlock in map delete elem - net/sched: act_skbmod: prevent kernel-infoleak - net: stmmac: fix rx queue priority assignment - erspan: make sure erspan_base_hdr is present in skb->head - ipv6: Fix infinite recursion in fib6_dump_done(). - udp: do not transition UDP GRO fraglist partial checksums to unnecessary - i40e: fix i40e_count_filters() to count only active/new filters - i40e: fix vf may be used uninitialized in this function warning - scsi: qla2xxx: Update manufacturer details - scsi: qla2xxx: Update manufacturer detail - Revert "usb: phy: generic: Get the vbus supply" - udp: do not accept non-tunnel GSO skbs landing in a tunnel - net: ravb: Always process TX descriptor ring - [arm64] dts: qcom: sc7180: Remove clock for bluetooth on Trogdor - [arm64] dts: qcom: sc7180-trogdor: mark bluetooth address as broken - ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw - ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit - scsi: mylex: Fix sysfs buffer lengths - ata: sata_mv: Fix PCI device ID table declaration compilation warning - ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone - driver core: Introduce device_link_wait_removal() - of: dynamic: Synchronize of_changeset_destroy() with the devlink removals - [x86] mce: Make sure to grab mce_sysfs_mutex in set_bank() - [s390x] entry: align system call table on 8 bytes - [x86] bugs: Fix the SRSO mitigation on Zen3/4 - [x86] retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO - mptcp: don't account accept() of non-MPC client as fallback to TCP - [x86] cpufeatures: Add CPUID_LNX_5 to track recently added Linux-defined word - objtool: Add asm version of STACK_FRAME_NON_STANDARD - wifi: ath9k: fix LNA selection in ath_ant_try_scan() - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() - panic: Flush kernel log buffer at the end - [arm64] dts: rockchip: fix rk3328 hdmi ports node - [arm64] dts: rockchip: fix rk3399 hdmi ports node - ionic: set adminq irq affinity - pstore/zone: Add a null pointer check to the psz_kmsg_read - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() - btrfs: export: handle invalid inode or root reference in btrfs_get_parent() - btrfs: send: handle path ref underflow in header iterate_inode_ref() - net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() - Bluetooth: btintel: Fix null ptr deref in btintel_read_version - Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails - pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs - sysv: don't call sb_bread() with pointers_lock held - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() - isofs: handle CDs with bad root inode but good Joliet root directory - media: sta2x11: fix irq handler cast - ext4: add a hint for block bitmap corrupt state in mb_groups - ext4: forbid commit inconsistent quota data when errors=remount-ro - drm/amd/display: Fix nanosec stat overflow - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int - Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default" - libperf evlist: Avoid out-of-bounds access - block: prevent division by zero in blk_rq_stat_sum() - RDMA/cm: add timeout to cm_destroy_id wait - Input: allocate keycode for Display refresh rate toggle - [x86] platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet - ring-buffer: use READ_ONCE() to read cpu_buffer->commit_page in concurrent environment - tools: iio: replace seekdir() in iio_generic_buffer - usb: typec: tcpci: add generic tcpci fallback compatible - usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined - fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 - drivers/nvme: Add quirks for device 126f:2262 - fbmon: prevent division by zero in fb_videomode_from_videomode() - netfilter: nf_tables: release batch on table validation from abort path - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (CVE-2024-26925) - netfilter: nf_tables: discard table flag update with pending basechain deletion - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc - virtio: reenable config if freezing device failed - [x86] mm/pat: fix VM_PAT handling in COW mappings - [x86] drm/i915/gt: Reset queue_priority_hint on parking - Bluetooth: btintel: Fixe build regression - [x86] VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() - kbuild: dummy-tools: adjust to stricter stackprotector check - scsi: sd: Fix wrong zone_write_granularity value during revalidate - [x86] retpoline: Add NOENDBR annotation to the SRSO dummy return thunk - [x86] head/64: Re-enable stack protection https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.216 - batman-adv: Avoid infinite loop trying to resize local TT - Bluetooth: Fix memory leak in hci_req_sync_complete() - media: cec: core: remove length check of Timer Status - nouveau: fix function cast warning - net: openvswitch: fix unwanted error log on timeout policy probing - u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING - geneve: fix header validation in geneve[6]_xmit_skb - ipv6: fib: hide unused 'pn' variable - ipv4/route: avoid unused-but-set-variable warning - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr - Bluetooth: SCO: Fix not validating setsockopt user input - netfilter: complete validation of user input - net/mlx5: Properly link new fs rules into the tree - af_unix: Do not use atomic ops for unix_sk(sk)->inflight. - af_unix: Fix garbage collector racing against connect() (CVE-2024-26923) - net: ena: Fix potential sign extension issue - net: ena: Wrong missing IO completions check order - net: ena: Fix incorrect descriptor free behavior - [amd64] iommu/vt-d: Allocate local memory for page request queue - [arm64] mailbox: imx: fix suspend failue - btrfs: qgroup: correctly model root qgroup rsv in convert - drm/client: Fully protect modes[] with dev->mode_config.mutex - vhost: Add smp_rmb() in vhost_vq_avail_empty() - [x86] cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n - [x86] apic: Force native_apic_mem_read() to use the MOV instruction - irqflags: Explicitly ignore lockdep_hrtimer_exit() argument - btrfs: record delayed inode root in transaction - kprobes: Fix possible use-after-free issue on kprobe registration - Revert "tracing/trigger: Fix to return error if failed to alloc snapshot" - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (CVE-2024-27020) - netfilter: nft_set_pipapo: do not free live element (CVE-2024-26924) - tun: limit printing rate when illegal packet received by tun dev (CVE-2024-27013) - RDMA/rxe: Fix the problem "mutex_destroy missing" - RDMA/cm: Print the old state when cm_destroy_id gets timeout - RDMA/mlx5: Fix port number for counter query in multi-port configuration - drm: nv04: Fix out of bounds access (CVE-2024-27008) - drm/panel: visionox-rm69299: don't unregister DSI device - clk: Remove prepare_lock hold assertion in __clk_release() - clk: Mark 'all_lists' as const - clk: remove extra empty line - clk: Print an info line before disabling unused clocks - clk: Initialize struct clk_core kref earlier - clk: Get runtime PM before walking tree during disable_unused (CVE-2024-27004) - [x86] cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ - [arm*] binder: check offset alignment in binder_get_object() (CVE-2024-26926) - [x86] thunderbolt: Avoid notify PM core about runtime PM resume - [x86] thunderbolt: Fix wake configurations after device unplug - [x86] comedi: vmk80xx: fix incomplete endpoint checking (CVE-2024-27001) - USB: serial: option: add Fibocom FM135-GL variants - USB: serial: option: add support for Fibocom FM650/FG650 - USB: serial: option: add Lonsung U8300/U9300 product - USB: serial: option: support Quectel EM060K sub-models - USB: serial: option: add Rolling RW101-GL and RW135-GL support - USB: serial: option: add Telit FN920C04 rmnet compositions - Revert "usb: cdc-wdm: close race between read and workqueue" - usb: dwc2: host: Fix dereference issue in DDMA completion flow. (CVE-2024-26997) - usb: Disable USB3 LPM at shutdown - mei: me: disable RPL-S on SPS and IGN firmwares - speakup: Avoid crash on very long word (CVE-2024-26994) - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993) - init/main.c: Fix potential static_command_line memory overflow (CVE-2024-26988) - drm/amdgpu: validate the parameters of bo mapping operations more clearly (CVE-2024-26922) - nouveau: fix instmem race condition around ptr stores (CVE-2024-26984) - nilfs2: fix OOB in nilfs_set_de_type (CVE-2024-26981) - wifi: iwlwifi: mvm: remove old PASN station when adding a new one - vxlan: drop packets from invalid src-address - ipv4: check for NULL idev in ip_route_use_hint() - net: usb: ax88179_178a: stop lying about skb->truesize - net: gtp: Fix Use-After-Free in gtp_dellink - ipvs: Fix checksumming on GSO of SCTP packets - net: openvswitch: Fix Use-After-Free in ovs_ct_exit - netfilter: nf_tables: honor table dormant flag from netdev release event path - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue - i40e: Report MFS in decimal base instead of hex - iavf: Fix TC config comparison with existing adapter TC config - net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). - serial: core: Provide port lock wrappers - Revert "crypto: api - Disallow identical driver names" - net/mlx5e: Fix a race in command alloc flow - tracing: Show size of requested perf buffer - tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together - PM / devfreq: Fix buffer overflow in trans_stat_show (CVE-2023-52614) - Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() - cpu: Re-enable CPU mitigations by default for !X86 architectures - drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3 - drm/amdgpu: Fix leak when GPU memory allocation fails - irqchip/gic-v3-its: Prevent double free on error - ethernet: Add helper for assigning packet type when dest address does not match device address - net: b44: set pause params only when interface is up - stackdepot: respect __GFP_NOLOCKDEP allocation flag - mtd: diskonchip: work around ubsan link failure - tcp: Clean up kernel listener's reqsk in inet_twsk_purge() - tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge() - [x86] idma64: Don't try to serve interrupts when device is powered off - i2c: smbus: fix NULL function pointer dereference - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up - bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS - udp: preserve the connected status if only UDP cmsg - serial: core: fix kernel-doc for uart_port_unlock_irqrestore() . [ Salvatore Bonaccorso ] * Bump ABI to 29 * [rt] Refresh "sched/vtime: Consolidate IRQ time accounting" * [rt] Update to 5.10.215-rt107 * [rt] Refresh "u64_stats: Disable preemption on 32bit-UP/SMP with RT during updates" * drivers/tty: Disable N_GSM * tipc: fix UAF in error path * tipc: fix a possible memleak in tipc_buf_append linux-signed-i386 (5.10.218+1) bullseye-security; urgency=high . * Sign kernel from linux 5.10.218-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.217 - [arm64,armhf] dmaengine: pl330: issue_pending waits until WFP state - dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state" - wifi: nl80211: don't free NULL coalescing rule - eeprom: at24: Use dev_err_probe for nvmem register failure - eeprom: at24: Probe for DDR3 thermal sensor in the SPD case - eeprom: at24: fix memory corruption race condition (CVE-2024-35848) - [armhf] pinctrl: pinctrl-aspeed-g6: Fix register offset for pinconf of GPIOR-T - [arm64] pinctrl/meson: fix typo in PDM's pin name - pinctrl: core: delete incorrect free in pinctrl_enable() - sunrpc: add a struct rpc_stats arg to rpc_create_args - nfs: expose /proc/net/sunrpc/nfs in net namespaces - nfs: make the rpc_stat per net namespace - nfs: Handle error of rpc_proc_register() in nfs_net_init(). - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() - [s390x] mm: Fix storage key clearing for guest huge pages - [s390x] mm: Fix clearing storage keys for huge pages - bna: ensure the copied buf is NUL terminated - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). - net l2tp: drop flow hash on forward - [s390x] vdso: Add CFI for RA register to asm macro vdso_func - net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() - net: qede: use return from qede_parse_flow_attr() for flower - net: qede: use return from qede_parse_flow_attr() for flow_spec - net: qede: use return from qede_parse_actions() - cxgb4: Properly lock TX queue for the selftest. - [arm64,armhf] net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 - net: bridge: fix multicast-to-unicast with fraglist GSO - net: core: reject skb_copy(_expand) for fraglist GSO skbs - net: gro: add flush check in udp_gro_receive_segment - [arm64] clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change - [arm64] KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id - [arm64] KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() - scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic - gfs2: Fix invalid metadata access in punch_hole - wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc - wifi: cfg80211: fix rdev_dump_mpp() arguments order - net: mark racy access on sk->sk_rcvbuf - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload - btrfs: return accurate error code on open failure in open_fs_devices() - ALSA: line6: Zero-initialize message buffers - net: bcmgenet: Reset RBUF on first open - ata: sata_gemini: Check clk_enable() result - firewire: ohci: mask bus reset interrupts between ISR and bottom half - btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve - btrfs: always clear PERTRANS metadata during commit - scsi: target: Fix SELinux error when systemd-modules loads the target module - blk-iocost: avoid out of bounds shift - [arm64,armhf] gpu: host1x: Do not setup DMA for virtual devices - [mips64el,mipsel]: scall: Save thread_info.syscall unconditionally on entry (Closes: #1068365) - fs/9p: only translate RWX permissions for plain 9P2000 - fs/9p: translate O_TRUNC into OTRUNC - 9p: explicitly deny setlease attempts - gpio: wcove: Use -ENOTSUPP consistently - gpio: crystalcove: Use -ENOTSUPP consistently - clk: Don't hold prepare_lock when calling kref_put() - fs/9p: drop inodes immediately on non-.L too - drm/nouveau/dp: Don't probe eDP ports twice harder - net:usb:qmi_wwan: support Rolling modules - xfrm: Preserve vlan tags for transport mode software GRO - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (CVE-2024-27398) - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CVE-2024-27399) - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation - [x86] hwmon: (corsair-cpro) Use a separate buffer for sending commands - [x86] hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event() - [x86] hwmon: (corsair-cpro) Protect ccp->wait_input_report with a spinlock - phonet: fix rtm_phonet_notify() skb allocation - kcov: Remove kcov include from sched.h and move it to its users. - net: bridge: fix corrupted ethernet header on multicast-to-unicast - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() - [arm64] net: hns3: use appropriate barrier function after setting a bit value - btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send() - firewire: nosy: ensure user_length is taken into account when fetching packet contents (CVE-2024-27401) - [arm64] dts: qcom: Fix 'interrupt-map' parent address cells - usb: typec: ucsi: Check for notifications after init - usb: typec: ucsi: Fix connector check on init - usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device - usb: ohci: Prevent missed ohci interrupts - usb: gadget: composite: fix OS descriptors w_value logic - usb: gadget: f_fs: Fix a race condition when processing setup packets. - usb: xhci-plat: Don't include xhci.h - usb: dwc3: core: Prevent phy suspend during init - ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU - iio:imu: adis16475: Fix sync mode setting - iio: accel: mxc4005: Interrupt handling fixes - net: bcmgenet: synchronize use of bcmgenet_set_rx_mode() - dyndbg: fix old BUG_ON in >control parser - mei: me: add lunar lake point M DID - drm/vmwgfx: Fix invalid reads in fence signaled events - net: fix out-of-bounds access in ops_init - regulator: core: fix debugfs creation regression - keys: Fix overwrite of key expiration on instantiation - md: fix kmemleak of rdev->serial (CVE-2024-26900) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.218 - pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin() - [x86] xen: Drop USERGS_SYSRET64 paravirt call - [arm64] net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access - [arm64] net: bcmgenet: synchronize UMAC_CMD access - ima: fix deadlock when traversing "ima_default_rules". - netlink: annotate lockless accesses to nlk->max_recvmsg_len - [x86] KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection - firmware: arm_scmi: Harden accesses to the reset domains (CVE-2022-48655) - mptcp: ensure snd_nxt is properly initialized on connect - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() - drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() (CVE-2023-52585) - usb: typec: ucsi: displayport: Fix potential deadlock - serial: kgdboc: Fix NMI-safety problems from keyboard reset code - docs: kernel_include.py: Cope with docutils 0.21 . [ Salvatore Bonaccorso ] * Bump ABI to 30 linux-signed-i386 (5.10.216+1) bullseye-security; urgency=high . * Sign kernel from linux 5.10.216-1 . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.210 - units: change from 'L' to 'UL' - units: add the HZ macros - spi: introduce SPI_MODE_X_MASK macro - iio: adc: ad7091r: Set alert bit in config register - iio: adc: ad7091r: Allow users to configure device events - iio: adc: ad7091r: Enable internal vref if external vref is not supplied - dmaengine: fix NULL pointer in channel unregistration function - iio:adc:ad7091r: Move exports into IIO_AD7091R namespace. - ext4: allow for the last group to be marked as trimmed - crypto: api - Disallow identical driver names - PM: hibernate: Enforce ordering during image compression/decompression - hwrng: core - Fix page fault dead lock on mmap-ed hwrng - [s390x] crypto: s390/aes - Fix buffer overread in CTR mode - bus: mhi: host: Drop chan lock before queuing buffers - async: Split async_schedule_node_domain() - async: Introduce async_schedule_dev_nocall() - [arm64] dts: qcom: sdm845: fix USB wakeup interrupt types - [arm64] dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts - lsm: new security_file_ioctl_compat() hook - scripts/get_abi: fix source path leak - mmc: core: Use mrq.sbc in close-ended ffu - mmc: mmc_spi: remove custom DMA mapped buffers - rtc: Adjust failure return code for cmos_set_alarm() - nouveau/vmm: don't set addr on the fail path to avoid warning - ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path - rename(): fix the locking of subdirectories - block: Remove special-casing of compound pages - mm: vmalloc: introduce array allocation functions - KVM: use __vcalloc for very large allocations - net/smc: fix illegal rmb_desc access in SMC-D connection dump - tcp: make sure init the accept_queue's spinlocks once - bnxt_en: Wait for FLR to complete during probe - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING - llc: make llc_ui_sendmsg() more robust against bonding changes - llc: Drop support for ETH_P_TR_802_2. - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv (CVE-2024-23849) - tracing: Ensure visibility when inserting an element into tracing_map - afs: Hide silly-rename files from userspace - tcp: Add memory barrier to tcp_push() - netlink: fix potential sleeping issue in mqueue_flush_file - ipv6: init the accept_queue's spinlocks in inet6_create - net/mlx5: DR, Use the right GVMI number for drop action - net/mlx5e: fix a double-free in arfs_create_groups - netfilter: nf_tables: restrict anonymous set and map names to 16 bytes - netfilter: nf_tables: validate NFPROTO_* family - net: mvpp2: clear BM pool before initialization - fjes: fix memleaks in fjes_hw_setup - net: fec: fix the unhandled context fault from smmu - btrfs: ref-verify: free ref cache before clearing mount opt - btrfs: tree-checker: fix inline ref size in error messages - btrfs: don't warn if discard range is not aligned to sector - btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args - btrfs: don't abort filesystem when attempting to snapshot deleted subvolume - rbd: don't move requests to the running list on errors - exec: Fix error handling in begin_new_exec() - wifi: iwlwifi: fix a memory corruption - netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain - gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 - drm: Don't unref the same fb many times by mistake due to deadlock handling - drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking - drm/tidss: Fix atomic_flush check - drm/bridge: nxp-ptn3460: simplify some error checking - PM: sleep: Use dev_printk() when possible - PM: sleep: Avoid calling put_device() under dpm_list_mtx - PM: core: Remove unnecessary (void *) conversions - PM: sleep: Fix possible deadlocks in core system-wide PM code - fs/pipe: move check to pipe_has_watch_queue() - pipe: wakeup wr_wait after setting max_usage - [arm64] dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts - [arm64] dts: qcom: sc7180: fix USB wakeup interrupt types - mm: use __pfn_to_section() instead of open coding it - mm/sparsemem: fix race in accessing memory_section->usage - btrfs: remove err variable from btrfs_delete_subvolume - btrfs: avoid copying BTRFS_ROOT_SUBVOL_DEAD flag to snapshot of subvolume being deleted - drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33] - [armhf] drm/exynos: fix accidental on-stack copy of exynos_drm_plane - [armhf] drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume - gpio: eic-sprd: Clear interrupt after set the interrupt type - spi: bcm-qspi: fix SFDP BFPT read by usig mspi read - [mips*] Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan - tick/sched: Preserve number of idle sleeps across CPU hotplug events - [x86] entry/ia32: Ensure s32 is sign extended to s64 - [powerpc*] mm: Fix null-pointer dereference in pgtable_cache_add - drivers/perf: pmuv3: don't expose SW_INCR event in sysfs - [powerpc*] Fix build error due to is_valid_bugaddr() - [powerpc*] mm: Fix build failures due to arch_reserved_kernel_pages() - [x86] boot: Ignore NMIs during very early boot - [powerpc*] pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE - [powerpc*] lib: Validate size for vector operations - [x86] mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel - perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file - debugobjects: Stop accessing objects after releasing hash bucket lock - regulator: core: Only increment use_count when enable_count changes - audit: Send netlink ACK before setting connection in auditd_set - ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop - PNP: ACPI: fix fortify warning - ACPI: extlog: fix NULL pointer dereference check - PM / devfreq: Synchronize devfreq_monitor_[start/stop] - ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree - jfs: fix slab-out-of-bounds Read in dtSearch - jfs: fix array-index-out-of-bounds in dbAdjTree - jfs: fix uaf in jfs_evict_inode - pstore/ram: Fix crash when setting number of cpus to an odd number - crypto: stm32/crc32 - fix parsing list of devices - afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu() - afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() - rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() - jfs: fix array-index-out-of-bounds in diNewExt - [s390x] ptrace: handle setting of fpc register correctly - [s390x] KVM: s390: fix setting of fpc register - SUNRPC: Fix a suspicious RCU usage warning - ecryptfs: Reject casefold directory inodes - ext4: fix inconsistent between segment fstrim and full fstrim - ext4: unify the type of flexbg_size to unsigned int - ext4: remove unnecessary check from alloc_flex_gd() - ext4: avoid online resizing failures due to oversized flex bg - wifi: rt2x00: restart beacon queue when hardware reset - scsi: lpfc: Fix possible file string name overflow when updating firmware - PCI: Add no PM reset quirk for NVIDIA Spectrum devices - bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk - scsi: arcmsr: Support new PCI device IDs 1883 and 1886 - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() - bpf: Add map and need_defer parameters to .map_fd_put_ptr() - scsi: libfc: Don't schedule abort twice - scsi: libfc: Fix up timeout error in fc_fcp_rec_error() - bpf: Set uattr->batch.count as zero before batched update or deletion - ionic: pass opcode to devcmd_wait - block/rnbd-srv: Check for unlikely string overflow - [arm64,armhf] net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path - block: prevent an integer overflow in bvec_try_merge_hw_page - md: Whenassemble the array, consult the superblock of the freshest device - wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices - wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() - wifi: cfg80211: free beacon_ies when overridden from hidden BSS - Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066 - Bluetooth: L2CAP: Fix possible multiple reject send - i40e: Fix VF disable behavior to block all traffic - f2fs: fix to check return value of f2fs_reserve_new_block() - ALSA: hda: Refer to correct stream index at loops - ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument - fast_dput(): handle underflows gracefully - RDMA/IPoIB: Fix error code return in ipoib_mcast_join - drm/amd/display: Fix tiled display misalignment - f2fs: fix write pointers on zoned device after roll forward - drm/drm_file: fix use of uninitialized variable - drm/framebuffer: Fix use of uninitialized variable - drm/mipi-dsi: Fix detach call without attach - media: stk1160: Fixed high volume of stk1160_dbg messages - [x86] PCI: add INTEL_HDA_ARL to pci_ids.h - [x86] ALSA: hda: Intel: add HDA_ARL PCI ID support - [x86] ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL - [armhf] drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time - IB/ipoib: Fix mcast list locking - media: ddbridge: fix an error code problem in ddb_probe - [arm64] drm/msm/dpu: Ratelimit framedone timeout msgs - clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() - clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() - watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786 - drm/amdgpu: Let KFD sync with VM fences - drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' - leds: trigger: panic: Don't register panic notifier if creating the trigger failed - i3c: master: cdns: Update maximum prescaler value for i2c clock - xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import - mfd: ti_am335x_tscadc: Fix TI SoC dependencies - PCI: Only override AMD USB controller if required - PCI: switchtec: Fix stdev_release() crash after surprise hot remove - usb: hub: Replace hardcoded quirk value with BIT() macro - tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE - fs/kernfs/dir: obey S_ISGID - PCI/AER: Decode Requester ID when no error info found - libsubcmd: Fix memory leak in uniq() - virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings - blk-mq: fix IO hang from sbitmap wakeup race - ceph: fix deadlock or deadcode of misusing dget() - drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()' - drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()' - perf: Fix the nr_addr_filters fix - wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update - drm: using mul_u32_u32() requires linux/math64.h - scsi: isci: Fix an error code problem in isci_io_request_build() - scsi: core: Introduce enum scsi_disposition - scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler - ip6_tunnel: use dev_sw_netstats_rx_add() - ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() - net-zerocopy: Refactor frag-is-remappable test. - tcp: add sanity checks to rx zerocopy - ixgbe: Remove non-inclusive language - ixgbe: Refactor returning internal error codes - ixgbe: Refactor overtemp event handling - ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() - ipv6: Ensure natural alignment of const ipv6 loopback and router addresses - llc: call sock_orphan() at release time - netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger - netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations - net: ipv4: fix a memleak in ip_setup_cork - af_unix: fix lockdep positive in sk_diag_dump_icons() - net: sysfs: Fix /sys/class/net/ path - HID: apple: Add support for the 2021 Magic Keyboard - HID: apple: Add 2021 magic keyboard FN key mapping - bonding: remove print in bond_verify_device_path - uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ - PM: sleep: Fix error handling in dpm_prepare() - dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools - dmaengine: ti: k3-udma: Report short packet errors - dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA - dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (CVE-2024-26600) - [arm64] drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case - net: stmmac: xgmac: fix handling of DPP safety error for DMA channels - tunnels: fix out of bounds access when building IPv6 PMTU error - atm: idt77252: fix a memleak in open_card_ubr0 - hwmon: (aspeed-pwm-tacho) mutex for tach reading - [x86] hwmon: (coretemp) Fix out-of-bounds memory access - [x86] hwmon: (coretemp) Fix bogus core_id to attr name mapping - inet: read sk->sk_family once in inet_recv_error() - rxrpc: Fix response to PING RESPONSE ACKs to a dead call - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() - ppp_async: limit MRU to 64K - netfilter: nft_compat: reject unused compat flag - netfilter: nft_compat: restrict match/target protocol to u16 - netfilter: nft_ct: reject direction for ct id - netfilter: nft_set_pipapo: store index in scratch maps - netfilter: nft_set_pipapo: add helper to release pcpu scratch area - netfilter: nft_set_pipapo: remove scratch_aligned pointer - scsi: core: Move scsi_host_busy() out of host lock if it is for per-command - blk-iocost: Fix an UBSAN shift-out-of-bounds warning - net/af_iucv: clean up a try_then_request_module() - USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e - USB: serial: option: add Fibocom FM101-GL variant - USB: serial: cp210x: add ID for IMST iM871A-USB - usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK - hrtimer: Report offline hrtimer enqueue - Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU - Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID - vhost: use kzalloc() instead of kmalloc() followed by memset() - clocksource: Skip watchdog check for large watchdog intervals - net: stmmac: xgmac: use #define for string constants - net: stmmac: xgmac: fix a typo of register name in DPP safety handling - netfilter: nft_set_rbtree: skip end interval element from gc (CVE-2024-26581) - btrfs: forbid creating subvol qgroups - btrfs: do not ASSERT() if the newly created subvolume already got read (CVE-2024-23850) - btrfs: forbid deleting live subvol qgroup - btrfs: send: return EOPNOTSUPP on unknown flags - of: unittest: Fix compile in the non-dynamic case - net: openvswitch: limit the number of recursions from action sets (CVE-2024-1151) - spi: ppc4xx: Drop write-only variable - ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() - net: sysfs: Fix /sys/class/net/ path for statistics - [mips*] Add 'memory' clobber to csum_ipv6_magic() inline assembler - i40e: Fix waiting for queues of all VSIs to be disabled - tracing/trigger: Fix to return error if failed to alloc snapshot - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again - ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32 - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx - HID: wacom: generic: Avoid reporting a serial of '0' to userspace - HID: wacom: Do not register input devices until after hid_hw_start - usb: ucsi_acpi: Fix command completion handling - USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT - usb: f_mass_storage: forbid async queue when shutdown happen - media: ir_toy: fix a memleak in irtoy_tx - i2c: i801: Remove i801_set_block_buffer_mode - i2c: i801: Fix block process call transactions (CVE-2024-26593) - modpost: trim leading spaces when processing source files list - scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock" - lsm: fix the logic in security_inode_getsecctx() - firewire: core: correct documentation of fw_csr_string() kernel API - kbuild: Fix changing ELF file type for output of gen_btf for big endian - nfc: nci: free rx_data_reassembly skb on NCI device cleanup - net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() - xen-netback: properly sync TX responses - ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL - [arm*] binder: signal epoll threads of self-work (CVE-2024-26606) - misc: fastrpc: Mark all sessions as invalid in cb_remove - ext4: fix double-free of blocks due to wrong extents moved_len - tracing: Fix wasted memory in saved_cmdlines logic - staging: iio: ad5933: fix type mismatch regression - iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC - iio: accel: bma400: Fix a compilation problem - media: rc: bpf attach/detach requires write permission - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove - ring-buffer: Clean ring_buffer_poll_wait() error return - serial: max310x: set default value when reading clock ready bit - serial: max310x: improve crystal stable clock detection - [x86] mm/ident_map: Use gbpages only where full GB page should be mapped. - mmc: slot-gpio: Allow non-sleeping GPIO ro - ALSA: hda/conexant: Add quirk for SWS JS201D - nilfs2: fix data corruption in dsync block recovery for small block sizes - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() - crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked - nfp: use correct macro for LengthSelect in BAR config - nfp: flower: prevent re-adding mac index for bonded port - wifi: mac80211: reload info pointer in ieee80211_tx_dequeue() - irqchip/irq-brcmstb-l2: Add write memory barrier before exit - irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update - [s390x] qeth: Fix potential loss of L3-IP@ in case of network issues - ceph: prevent use-after-free in encode_cap_msg() - of: property: fix typo in io-channels - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) - pmdomain: core: Move the unused cleanup to a _sync initcall - tracing: Inform kmemleak of saved_cmdlines allocation - Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" - bus: moxtet: Add spi device table - PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support - mips: Fix max_mapnr being uninitialized on early stages - crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init - serial: Add rs485_supported to uart_port - serial: 8250_exar: Fill in rs485_supported - serial: 8250_exar: Set missing rs485_supported flag - scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm - scripts/decode_stacktrace.sh: support old bash version - scripts: decode_stacktrace: demangle Rust symbols - scripts/decode_stacktrace.sh: optionally use LLVM utilities - netfilter: ipset: fix performance regression in swap operation - netfilter: ipset: Missing gc cancellations fixed - hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range() - Revert "arm64: Stash shadow stack pointer in the task struct on interrupt" - net: prevent mss overflow in skb_segment() (CVE-2023-52435) - sched/membarrier: reduce the ability to hammer on sys_membarrier (CVE-2024-26602) - nilfs2: fix potential bug in end_buffer_async_write - nilfs2: replace WARN_ONs for invalid DAT metadata block requests - dm: limit the number of targets and parameter size area (CVE-2024-23851, CVE-2023-52429) - PM: runtime: add devm_pm_runtime_enable helper - PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() - [arm64] drm/msm/dsi: Enable runtime PM - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() (CVE-2024-0607) - net: bcmgenet: Fix EEE implementation - PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq() https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.211 - net/sched: Retire CBQ qdisc - net/sched: Retire ATM qdisc - net/sched: Retire dsmark qdisc - smb: client: fix OOB in receive_encrypted_standard() (CVE-2024-0565) - smb: client: fix potential OOBs in smb2_parse_contexts() (CVE-2023-52434) - smb: client: fix parsing of SMB3.1.1 POSIX create context - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset - userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb - zonefs: Improve error handling - sched/rt: Fix sysctl_sched_rr_timeslice intial value - sched/rt: Disallow writing invalid values to sched_rt_period_us - scsi: target: core: Add TMF to tmr_list handling - [arm64] dmaengine: fsl-qdma: increase size of 'irq_name' - wifi: cfg80211: fix missing interfaces when dumping - wifi: mac80211: fix race condition on enabling fast-xmit - fbdev: savage: Error out if pixclock equals zero - fbdev: sis: Error out if pixclock equals zero - spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected - ahci: asm1166: correct count of reported ports - ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() - [armhf] dmaengine: ti: edma: Add some null pointer checks to the edma_probe - [arm64] regulator: pwm-regulator: Add validity checks in continuous .get_voltage - nvmet-tcp: fix nvme tcp ida memory leak - [armhf] ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616 - netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new - nvme-fc: do not wait in vain when unloading module - nvmet-fcloop: swap the list_add_tail arguments - nvmet-fc: release reference on target port - nvmet-fc: abort command when there is no binding - ext4: correct the hole length returned by ext4_map_blocks() - Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table - efi: runtime: Fix potential overflow of soft-reserved region size - efi: Don't add memblocks for soft-reserved memory - [x86] hwmon: (coretemp) Enlarge per package core count limit - scsi: lpfc: Use unsigned type for num_sge - firewire: core: send bus reset promptly on gap count error - virtio-blk: Ensure no requests in virtqueues before deleting vqs. - [mips*] irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable - media: av7110: prevent underflow in write_ts_to_decoder() - hvc/xen: prevent concurrent accesses to the shared ring - [x86] uaccess: Implement macros for CMPXCHG on user addresses - seccomp: Invalidate seccomp mode to catch death failures - block: ataflop: fix breakage introduced at blk-mq refactoring - [powerpc*] watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions - [powerpc*] watchpoints: Annotate atomic context in more places - cifs: add a warning when the in-flight count goes negative - mtd: spinand: macronix: Add support for MX35LFxGE4AD - [x86] ASoC: Intel: boards: harden codec property handling - [x86] ASoC: Intel: boards: get codec device with ACPI instead of bus search - [x86] ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use - task_stack, x86/cea: Force-inline stack helpers - btrfs: tree-checker: check for overlapping extent items - btrfs: introduce btrfs_lookup_match_dir - btrfs: unify lookup return value when dir entry is missing - btrfs: do not pin logs too early during renames - lan743x: fix for potential NULL pointer dereference with bare card - [x86] platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC - iwlwifi: mvm: do more useful queue sync accounting - iwlwifi: mvm: write queue_sync_state only for sync - jbd2: remove redundant buffer io error checks - jbd2: recheck chechpointing non-dirty buffer - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint - [x86] drop bogus "cc" clobber from __try_cmpxchg_user_asm() - erofs: fix lz4 inplace decompression (CVE-2023-52497) - [amd64] IB/hfi1: Fix sdma.h tx->num_descs off-by-one error - [s390x] cio: fix invalid -EBUSY on ccw_device_start - dm-crypt: don't modify the data when using authenticated encryption - [arm64] KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler - [arm64] KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() - PCI/MSI: Prevent MSI hardware interrupt number truncation - l2tp: pass correct message length to ip6_append_data - [x86] Revert "x86/ftrace: Use alternative RET encoding" - [x86] text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR - [x86] ibt,paravirt: Use text_gen_insn() for paravirt_patch() - [x86] ftrace: Use alternative RET encoding - [x86] returnthunk: Allow different return thunks - [x86] Revert "x86/alternative: Make custom return thunk unconditional" - [x86] alternative: Make custom return thunk unconditional - usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs - mptcp: fix lockless access in subflow ULP diag - [amd64] IB/hfi1: Fix a memleak in init_credit_return - RDMA/bnxt_re: Return error for SRQ resize - RDMA/srpt: Support specifying the srpt_service_guid parameter - RDMA/qedr: Fix qedr_create_user_qp error flow - [arm64] dts: rockchip: set num-cs property for spi on px30 - RDMA/srpt: fix function pointer cast warnings - bpf, scripts: Correct GPL license name - scsi: jazz_esp: Only build if SCSI core is builtin - nouveau: fix function cast warnings - ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid - ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid - afs: Increase buffer size in afs_update_volume_status() - ipv6: sr: fix possible use-after-free and null-ptr-deref - packet: move from strlcpy with unused retval to strscpy - net: dev: Convert sa_data to flexible array in struct sockaddr - [s390x] use the correct count for __iowrite64_copy() - netfilter: nf_tables: set dormant flag on hook register failure - drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3 - drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set - drm/amd/display: Fix memory leak in dm_sw_fini() - block: ataflop: more blk-mq refactoring fixes - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio - arp: Prevent overflow in arp_req_get(). - ext4: regenerate buddy after block freeing failed if under fc replay (CVE-2024-26601) https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.212 - [x86] platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names - crypto: virtio/akcipher - Fix stack overflow on memcpy - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter - net: ip_tunnel: prevent perpetual headroom growth - tun: Fix xdp_rxq_info's queue_index when detaching - ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() - lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected - net: usb: dm9601: fix wrong return value in dm9601_mdio_read - Bluetooth: Avoid potential use-after-free in hci_error_reset - Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR - Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST - Bluetooth: Enforce validation on max value of connection interval - netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() - rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back - efi/capsule-loader: fix incorrect allocation size - ALSA: Drop leftover snd-rtctimer stuff from Makefile - afs: Fix endless loop in directory parsing - tomoyo: fix UAF write bug in tomoyo_write_control() (CVE-2024-26622) - gtp: fix use-after-free and null-ptr-deref in gtp_newlink() - wifi: nl80211: reject iftype change with mesh ID change - btrfs: dev-replace: properly validate device names - [arm64] dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read - [arm64] dmaengine: fsl-qdma: init irq after reg initialization - mmc: core: Fix eMMC initialization with 1-bit bus connection - [arm64] mmc: sdhci-xenon: add timeout for PHY init complete - [arm64] mmc: sdhci-xenon: fix PHY init clock stability - [arm64] pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation - [x86] cpu/intel: Detect TME keyid bits before setting MTRR mask registers - mptcp: fix possible deadlock in subflow diag - ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks() - cachefiles: fix memory leak in cachefiles_add_cache() - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (CVE-2024-0841) - gpiolib: Fix the error path order in gpiochip_add_data_with_key() - gpio: fix resource unwinding order in error path - mptcp: fix double-free on socket dismantle https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.213 - [arm64,armhf] mmc: mmci: stm32: use a buffer for unaligned DMA requests - [arm64,armhf] mmc: mmci: stm32: fix DMA API overlapping mappings warning - lan78xx: Fix white space and style issues - lan78xx: Add missing return code checks - lan78xx: Fix partial packet errors on suspend/resume - lan78xx: Fix race conditions in suspend/resume handling - net: lan78xx: fix runtime PM count underflow on link stop - ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able - i40e: disable NAPI right after disabling irqs when handling xsk_pool - tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string - geneve: make sure to pull inner header in geneve_rx() - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() - cpumap: Zero-initialise xdp_rxq_info struct before running XDP program - net/rds: fix WARNING in rds_conn_connect_if_down - netfilter: nft_ct: fix l3num expectations with inet pseudo family - netfilter: nf_conntrack_h323: Add protection for bmp length out of range - netrom: Fix a data-race around sysctl_netrom_default_path_quality - netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser - netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser - netrom: Fix a data-race around sysctl_netrom_transport_timeout - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries - netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay - netrom: Fix a data-race around sysctl_netrom_transport_busy_delay - netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size - netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout - netrom: Fix a data-race around sysctl_netrom_routing_control - netrom: Fix a data-race around sysctl_netrom_link_fails_count - netrom: Fix data-races around sysctl_net_busy_read - xhci: remove extra loop in interrupt context - xhci: prevent double-fetch of transfer and transfer event TRBs - xhci: process isoc TD properly when there was a transaction error mid TD. - xhci: handle isoc Babble and Buffer Overrun events properly - net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr - bpf: net: Change sk_getsockopt() to take the sockptr_t argument - lsm: make security_socket_getpeersec_stream() sockptr_t safe - lsm: fix default return value of the socket_getpeersec_*() hooks - ext4: make ext4_es_insert_extent() return void - ext4: refactor ext4_da_map_blocks() - ext4: convert to exclusive lock while inserting delalloc extents - [x86] Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening - [x86] hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening - [x86] hv_netvsc: Wait for completion on request SWITCH_DATA_PATH - [x86] hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove - [x86] hv_netvsc: Make netvsc/VF binding check both MAC and serial number - [x86] hv_netvsc: use netif_is_bond_master() instead of open code - [x86] hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed - mm/hugetlb: change hugetlb_reserve_pages() to type bool - mm: hugetlb pages should not be reserved by shmat() if SHM_NORESERVE - getrusage: add the "signal_struct *sig" local variable - getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand() - getrusage: use __for_each_thread() - getrusage: use sig->stats_lock rather than lock_task_sighand() - [x86] Drivers: hv: vmbus: Drop error message when 'No request id available' - regmap: allow to define reg_update_bits for no bus configuration - regmap: Add bulk read/write callbacks into regmap_config https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.214 - io_uring/unix: drop usage of io_uring socket - io_uring: drop any code related to SCM_RIGHTS - rcu-tasks: Provide rcu_trace_implies_rcu_gp() - bpf: Defer the free of inner map when necessary (CVE-2023-52447) - ASoC: rt5645: Make LattePanda board DMI match more precise - [x86] xen: Add some null pointer checking to smp.c - [mips*] Clear Cause.BD in instruction_pointer_set - HID: multitouch: Add required quirk for Synaptics 0xcddc device - gen_compile_commands: fix invalid escape sequence warning - RDMA/mlx5: Fix fortify source warning while accessing Eth segment - RDMA/mlx5: Relax DEVX access upon modify commands - [x86] mm: Move is_vsyscall_vaddr() into asm/vsyscall.h - [x86] mm: Disallow vsyscall page read for copy_from_kernel_nofault() - net/iucv: fix the allocation size of iucv_path_table array - block: sed-opal: handle empty atoms when parsing response - dm-verity, dm-crypt: align "struct bvec_iter" correctly - scsi: mpt3sas: Prevent sending diag_reset when the controller is ready - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (CVE-2024-22099) - firewire: core: use long bus reset on gap count error - [x86] ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet - Input: gpio_keys_polled - suppress deferred probe error for gpio - [x86] paravirt: Fix build due to __text_gen_insn() backport - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak - nbd: null check for nla_nest_start - fs/select: rework stack allocation hack for clang - block: add a new set_read_only method - md: implement ->set_read_only to hook into BLKROSET processing - md: Don't clear MD_CLOSING when the raid is about to stop - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (CVE-2023-6270) - timekeeping: Fix cross-timestamp interpolation on counter wrap - timekeeping: Fix cross-timestamp interpolation corner case decision - timekeeping: Fix cross-timestamp interpolation for non-x86 - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (CVE-2023-7042) - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled - wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled - wifi: b43: Stop correct queue in DMA worker when QoS is disabled - wifi: b43: Disable QoS for bcm4331 - wifi: wilc1000: fix declarations ordering - wifi: wilc1000: fix RCU usage in connect path - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work - wifi: wilc1000: fix multi-vif management when deleting a vif - wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value - sock_diag: annotate data-races around sock_diag_handlers[family] - inet_diag: annotate data-races around inet_diag_table[] - bpftool: Silence build warning about calloc() - af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc(). - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete - wifi: iwlwifi: dbg-tlv: ensure NUL termination - wifi: iwlwifi: fix EWRD table validity check - net: blackhole_dev: fix build warning for ethh set but not used - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() - bpf: Factor out bpf_spin_lock into helpers. - bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly - wireless: Remove redundant 'flush_workqueue()' calls - wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() - [amd64] iommu/amd: Mark interrupt as managed - wifi: brcmsmac: avoid function pointer casts - net: ena: Remove ena_select_queue - ACPI: scan: Fix device check notification handling - [x86] relocs: Ignore relocations in .notes section (CVE-2024-26816) - SUNRPC: fix some memleaks in gssx_dec_option_array - mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function - wifi: rtw88: 8821c: Fix false alarm count - PCI: Make pci_dev_is_disconnected() helper public for other drivers - [amd64] iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected - igb: move PEROUT and EXTTS isr logic to separate functions - igb: Fix missing time sync events - Bluetooth: Remove superfluous call to hci_conn_check_pending() - Bluetooth: hci_core: Fix possible buffer overflow - sr9800: Add check for usbnet_get_endpoints (CVE-2024-26651) - bpf: Eliminate rlimit-based memory accounting for devmap maps - bpf: Fix DEVMAP_HASH overflow check on 32-bit arches - bpf: Fix hashtab overflow check on 32-bit arches - bpf: Fix stackmap overflow check on 32-bit arches - ipv6: fib6_rules: flush route cache when rule is changed - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() - net: phy: fix phy_get_internal_delay accessing an empty array - net: hns3: fix port duplex configure error in IMP reset - net: phy: DP83822: enable rgmii mode if phy_interface_is_rgmii - net: phy: dp83822: Fix RGMII TX delay configuration - OPP: debugfs: Fix warning around icc_get_name() - tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function - net/ipv4: Replace one-element array with flexible-array member - net/ipv4: Revert use of struct_size() helper - net/ipv4/ipv6: Replace one-element arraya with flexible-array members - bpf: net: Change do_ip_getsockopt() to take the sockptr_t argument - ipmr: fix incorrect parameter validation in the ip_mroute_getsockopt() function - l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function - udp: fix incorrect parameter validation in the udp_lib_getsockopt() function - net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function - nfp: flower: handle acti_netdevs allocation failure - dm raid: fix false positive for requeue needed during reshape - dm: call the resume method on internal suspend - [arm64,armhf] drm/tegra: dsi: Add missing check for of_find_device_by_node - [arm64,armhf] drm/tegra: dsi: Make use of the helper function dev_err_probe() - [arm64,armhf] drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe() - [arm64,armhf] drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe() - [arm64,armhf] drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe() - drm/rockchip: inno_hdmi: Fix video timing - drm: Don't treat 0 as -1 in drm_fixp2int_ceil - drm/rockchip: lvds: do not overwrite error code - drm/rockchip: lvds: do not print scary message when probing defer - drm/lima: fix a memleak in lima_heap_alloc - dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA - media: tc358743: register v4l2 async device only after successful setup - PCI/DPC: Print all TLP Prefixes, not just the first - perf record: Fix possible incorrect free in record__switch_output() - HID: lenovo: Add middleclick_workaround sysfs knob for cptkbd - drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' - drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' - perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample() - media: em28xx: annotate unchecked call to media_device_register() - media: v4l2-tpg: fix some memleaks in tpg_alloc - media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity - media: edia: dvbdev: fix a use-after-free - pinctrl: mediatek: Drop bogus slew rate register range for MT8192 - [arm64] clk: qcom: reset: Commonize the de/assert functions - [arm64] clk: qcom: reset: Ensure write completion on reset de/assertion - quota: simplify drop_dquot_ref() - quota: Fix potential NULL pointer dereference - quota: Fix rcu annotations of inode dquot pointers - PCI: switchtec: Fix an error handling path in switchtec_pci_probe() - crypto: xilinx - call finalize with bh disabled - perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() - drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode() - ALSA: seq: fix function cast warnings - perf stat: Avoid metric-only segv - media: sun8i-di: Fix coefficient writes - media: sun8i-di: Fix power on/off sequences - media: sun8i-di: Fix chroma difference threshold - media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak - media: go7007: add check of return value of go7007_read_addr() - media: pvrusb2: remove redundant NULL check - media: pvrusb2: fix pvr2_stream_callback casts - PCI: Mark 3ware-9650SE Root Port Extended Tags as broken - [arm64] clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister() - [arm64,armhf] drm/tegra: put drm_gem_object ref on error in tegra_fb_create - mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref - mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref - crypto: arm/sha - fix function cast warnings - drm/tidss: Fix initial plane zpos values - mtd: maps: physmap-core: fix flash size larger than 32-bit - mtd: rawnand: lpc32xx_mlc: fix irq handler prototype - drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int() - media: pvrusb2: fix uaf in pvr2_context_set_notify - media: dvb-frontends: avoid stack overflow warnings with clang - media: go7007: fix a memleak in go7007_load_encoder - media: ttpci: fix two memleaks in budget_av_attach - media: mediatek: vcodec: avoid -Wcast-function-type-strict warning - powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks - [arm64] drm/msm/dpu: add division of drm_display_mode's hskew parameter - [powerpc*] embedded6xx: Fix no previous prototype for avr_uart_send() etc. - leds: aw2013: Unlock mutex before destroying it - leds: sgm3140: Add missing timer cleanup and flash gpio control - backlight: lm3630a: Initialize backlight_properties on init - backlight: lm3630a: Don't set bl->props.brightness in get_brightness - backlight: da9052: Fully initialize backlight_properties during probe - backlight: lm3639: Fully initialize backlight_properties during probe - backlight: lp8788: Fully initialize backlight_properties during probe - clk: Fix clk_core_get NULL dereference - ALSA: hda/realtek: fix ALC285 issues on HP Envy x360 laptops - ALSA: usb-audio: Stop parsing channels bits when all channels are found. - RDMA/srpt: Do not register event handler until srpt device is fully setup - f2fs: compress: fix to check unreleased compressed cluster - scsi: csiostor: Avoid function pointer casts - RDMA/device: Fix a race between mad_client and cm_client init - scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn - net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 - NFSv4.2: fix listxattr maximum XDR buffer size - watchdog: stm32_iwdg: initialize default timeout - NFS: Fix an off by one in root_nfs_cat() - afs: Revert "afs: Hide silly-rename files from userspace" - [armhf] remoteproc: stm32: Constify st_rproc_ops - [armhf] remoteproc: Add new get_loaded_rsc_table() to rproc_ops - [armhf] remoteproc: stm32: Move resource table setup to rproc_ops - [armhf] remoteproc: stm32: use correct format strings on 64-bit - [armhf] remoteproc: stm32: Fix incorrect type in assignment for va - [armhf] remoteproc: stm32: Fix incorrect type assignment returned by stm32_rproc_get_loaded_rsc_tablef - tty: vt: fix 20 vs 0x20 typo in EScsiignore - serial: max310x: fix syntax error in IRQ error message - tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT - kconfig: fix infinite loop when expanding a macro at the end of file - rtc: mt6397: select IRQ_DOMAIN instead of depending on it - serial: 8250_exar: Don't remove GPIO device on suspend - staging: greybus: fix get_channel_from_mode() failure path - usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin - io_uring: don't save/restore iowait state - [s390x] vtime: fix average steal time calculation - soc: fsl: dpio: fix kcalloc() argument order - hsr: Fix uninit-value access in hsr_get_node() - packet: annotate data-races around ignore_outgoing - net: dsa: mt7530: prevent possible incorrect XTAL frequency selection - wireguard: receive: annotate data-race around receiving_counter.counter - rds: introduce acquire/release ordering in acquire/release_in_xmit() - hsr: Handle failures in module init - net/bnx2x: Prevent access to a freed page in page_pool - netfilter: nft_set_pipapo: release elements in clone only from destroy path (CVE-2024-26809) - scsi: fc: Update formal FPIN descriptor definitions - netfilter: nf_tables: do not compare internal table flags on updates - rcu: add a helper to report consolidated flavor QS - bpf: report RCU QS in cpumap kthread - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler - regmap: Add missing map->bus check - [armhf] remoteproc: stm32: fix phys_addr_t format string https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.215 - amdkfd: use calloc instead of kzalloc to avoid integer overflow (CVE-2024-26817) - Documentation/hw-vuln: Update spectre doc - [x86] cpu: Support AMD Automatic IBRS - [x86] bugs: Use sysfs_emit() - timers: Update kernel-doc for various functions - timers: Use del_timer_sync() even on UP - timers: Rename del_timer_sync() to timer_delete_sync() - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach (CVE-2023-47233) - [armhf] dts: marvell: Fix maxium->maxim typo in brownstone dts - [x86] drm/vmwgfx: stop using ttm_bo_create v2 - [x86] drm/vmwgfx: switch over to the new pin interface v2 - [x86] drm/vmwgfx/vmwgfx_cmdbuf_res: Remove unused variable 'ret' - [x86] drm/vmwgfx: Fix some static checker warnings - [x86] drm/vmwgfx: Fix possible null pointer derefence with invalid contexts - media: xc4000: Fix atomicity violation in xc4000_get_frequency (CVE-2024-24861) - KVM: Always flush async #PF workqueue when vCPU is being destroyed - [x86] crypto: qat - fix double free during reset - [x86] crypto: qat - resolve race condition during AER recovery - ext4: correct best extent lstart adjustment logic - block: introduce zone_write_granularity limit - block: Clear zone limits for a non-zoned stacked queue - bounds: support non-power-of-two CONFIG_NR_CPUS - fat: fix uninitialized field in nostale filehandles - ubifs: Set page uptodate in the correct place - ubi: Check for too small LEB size in VTBL code - ubi: correct the calculation of fastmap size - mtd: rawnand: meson: fix scrambling mode value in command macro - PM: suspend: Set mem_sleep_current during kernel command line setup - [powerpc*] fsl: Fix mfpmr build errors with newer binutils - USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB - USB: serial: add device ID for VeriFone adapter - USB: serial: cp210x: add ID for MGP Instruments PDS100 - USB: serial: option: add MeiG Smart SLM320 product - USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M - PM: sleep: wakeirq: fix wake irq warning in system suspend - mmc: tmio: avoid concurrent runs of mmc_request_done() - fuse: fix root lookup with nonzero generation - fuse: don't unhash root - usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros - printk/console: Split out code that enables default console - serial: Lock console when calling into driver before registration - btrfs: fix off-by-one chunk length calculation at contains_pending_extent() - PCI: Drop pci_device_remove() test of pci_dev->driver - PCI/PM: Drain runtime-idle callbacks before driver removal - PCI/ERR: Cache RCEC EA Capability offset in pci_init_capabilities() - PCI: Cache PCIe Device Capabilities register - PCI: Work around Intel I210 ROM BAR overlap defect - PCI/ASPM: Make Intel DG2 L1 acceptable latency unlimited - PCI/DPC: Quirk PIO log size for certain Intel Root Ports - PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports - Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" - dm-raid: fix lockdep waring in "pers->hot_add_disk" - mac802154: fix llsec key resources release in mac802154_llsec_key_del - mm: swap: fix race between free_swap_and_cache() and swapoff() - mmc: core: Fix switch on gp3 partition - [armhf] drm/etnaviv: Restore some id values - hwmon: (amc6821) add of_match table - ext4: fix corruption during on-line resize - nvmem: meson-efuse: fix function pointer type mismatch - slimbus: core: Remove usage of the deprecated ida_simple_xx() API - [arm64,armhf] phy: tegra: xusb: Add API to retrieve the port number of phy - usb: gadget: tegra-xudc: Use dev_err_probe() - usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic - speakup: Fix 8bit characters from direct synth - PCI/ERR: Clear AER status only when we control AER - PCI/AER: Block runtime suspend when handling errors - nfs: fix UAF in direct writes - kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1 - PCI: dwc: endpoint: Fix advertised resizable BAR size - vfio/platform: Disable virqfds on cleanup - ring-buffer: Fix waking up ring buffer readers - ring-buffer: Do not set shortest_full when full target is hit - ring-buffer: Fix resetting of shortest_full - ring-buffer: Fix full_waiters_pending in poll - [s390x] zcrypt: fix reference counting on zcrypt card objects - drm/panel: do not return negative error codes from drm_panel_get_modes() - [armhf] drm/exynos: do not return negative values from .get_modes() - drm/imx/ipuv3: do not return negative values from .get_modes() - drm/vc4: hdmi: do not return negative values from .get_modes() - nilfs2: fix failure to detect DAT corruption in btree and direct mappings - nilfs2: prevent kernel bug at submit_bh_wbc() - cpufreq: dt: always allocate zeroed cpumask - [x86] CPU/AMD: Update the Zenbleed microcode revisions - net: hns3: tracing: fix hclgevf trace event strings - wireguard: netlink: check for dangling peer via is_dead instead of empty list - wireguard: netlink: access device through ctx instead of peer - ahci: asm1064: correct count of reported ports - ahci: asm1064: asm1166: don't limit reported ports - drm/amd/display: Return the correct HDCP error code - drm/amd/display: Fix noise issue on HDMI AV mute - dm snapshot: fix lockup in dm_exception_table_exit - vxge: remove unnecessary cast in kfree() - [x86] stackprotector/32: Make the canary into a regular percpu variable - [x86] pm: Work around false positive kmemleak report in msr_build_context() - scripts: kernel-doc: Fix syntax error due to undeclared args variable (Closes: #1064035) - comedi: comedi_test: Prevent timers rescheduling during deletion - cpufreq: brcmstb-avs-cpufreq: fix up "add check for cpufreq_cpu_get's return value" - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (CVE-2024-26643) - netfilter: nf_tables: disallow anonymous set with timeout flag (CVE-2024-26642) - netfilter: nf_tables: reject constant set with timeout - Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory - xfrm: Avoid clang fortify warning in copy_to_user_tmpl() - [x86] KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() - ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command - usb: gadget: ncm: Fix handling of zero block length packets - usb: port: Don't try to peer unused USB ports based on location - tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled - mei: me: add arrow lake point S DID - mei: me: add arrow lake point H DID - vt: fix unicode buffer corruption when deleting characters - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion - tee: optee: Fix kernel panic caused by incorrect error handling - xen/events: close evtchn after mapping cleanup (CVE-2024-26687) - printk: Update @console_may_schedule in console_trylock_spinning() - btrfs: allocate btrfs_ioctl_defrag_range_args on stack - [x86] asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix - [x86] bugs: Add asm helpers for executing VERW - [x86] entry_64: Add VERW just before userspace transition - [x86] entry_32: Add VERW just before userspace transition - [x86] bugs: Use ALTERNATIVE() instead of mds_user_clear static key - [x86] KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH - [x86] KVM/VMX: Move VERW closer to VMentry for MDS mitigation - [x86] Mitigate Register File Data Sampling (RFDS) vulnerability (CVE-2023-28746): + [x86] mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set + Documentation/hw-vuln: Add documentation for RFDS + [x86] rfds: Mitigate Register File Data Sampling (RFDS) + [x86] KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests - perf/core: Fix reentry problem in perf_output_read_group() - efivarfs: Request at most 512 bytes for variable names - [powerpc*] xor_vmx: Add '-mhard-float' to CFLAGS - serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO (CVE-2023-52488) - mm/memory-failure: fix an incorrect use of tail pages - mm/migrate: set swap entry values of THP tail pages properly. - init: open /initrd.image with O_LARGEFILE - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes - exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack() - mmc: core: Initialize mmc_blk_ioc_data - mmc: core: Avoid negative index with array access - net: ll_temac: platform_get_resource replaced by wrong function - usb: cdc-wdm: close race between read and workqueue - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (CVE-2024-26654) - scsi: core: Fix unremoved procfs host directory regression - [arm*] staging: vc04_services: changen strncpy() to strscpy_pad() - [arm*] staging: vc04_services: fix information leak in create_component() - USB: core: Add hub_get() and hub_put() routines - [arm*] usb: dwc2: host: Fix remote wakeup from hibernation - [arm*] usb: dwc2: host: Fix hibernation flow - [arm*] usb: dwc2: host: Fix ISOC flow in DDMA mode - [arm*] usb: dwc2: gadget: LPM flow fix - usb: udc: remove warning when queue disabled ep - usb: typec: ucsi: Ack unsupported commands - usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset - scsi: qla2xxx: Split FCE|EFT trace control - scsi: qla2xxx: Fix command flush on cable pull - scsi: qla2xxx: Delay I/O Abort on PCI error - [x86] cpu: Enable STIBP on AMD if Automatic IBRS is enabled - PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports - scsi: lpfc: Correct size for wqe for memset() - USB: core: Fix deadlock in usb_deauthorize_interface() - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet - ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa() - tcp: properly terminate timers for kernel sockets - ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields() - bpf: Protect against int overflow for stack access size - dm integrity: fix out-of-range warning - r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d - [x86] cpufeatures: Add new word for scattered features - Bluetooth: hci_event: set the conn encrypted before conn establishes - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CVE-2024-24857, CVE-2024-24858) - netfilter: nf_tables: disallow timeout for anonymous sets (CVE-2023-52620) - net/rds: fix possible cp null dereference - vfio/pci: Disable auto-enable of exclusive INTx IRQ (CVE-2024-27437) - vfio/pci: Lock external INTx masking ops (CVE-2024-26810) - vfio: Introduce interface to flush virqfd inject workqueue - vfio/pci: Create persistent INTx handler (CVE-2024-26812) - vfio/platform: Create persistent IRQ handlers (CVE-2024-26813) - vfio/fsl-mc: Block calling interrupt handler without trigger (CVE-2024-26814) - io_uring: ensure '0' is returned on file registration success - Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped." - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations - [x86] srso: Add SRSO mitigation for Hygon processors (CVE-2023-52482) - block: add check that partition length needs to be aligned with block size (CVE-2023-52458) - netfilter: nf_tables: reject new basechain after table flag update - netfilter: nf_tables: flush pending destroy work before exit_net release - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() - netfilter: validate user input for expected length - vboxsf: Avoid an spurious warning if load_nls_xxx() fails - bpf, sockmap: Prevent lock inversion deadlock in map delete elem - net/sched: act_skbmod: prevent kernel-infoleak - net: stmmac: fix rx queue priority assignment - erspan: make sure erspan_base_hdr is present in skb->head - ipv6: Fix infinite recursion in fib6_dump_done(). - udp: do not transition UDP GRO fraglist partial checksums to unnecessary - i40e: fix i40e_count_filters() to count only active/new filters - i40e: fix vf may be used uninitialized in this function warning - scsi: qla2xxx: Update manufacturer details - scsi: qla2xxx: Update manufacturer detail - Revert "usb: phy: generic: Get the vbus supply" - udp: do not accept non-tunnel GSO skbs landing in a tunnel - net: ravb: Always process TX descriptor ring - [arm64] dts: qcom: sc7180: Remove clock for bluetooth on Trogdor - [arm64] dts: qcom: sc7180-trogdor: mark bluetooth address as broken - ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw - ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit - scsi: mylex: Fix sysfs buffer lengths - ata: sata_mv: Fix PCI device ID table declaration compilation warning - ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone - driver core: Introduce device_link_wait_removal() - of: dynamic: Synchronize of_changeset_destroy() with the devlink removals - [x86] mce: Make sure to grab mce_sysfs_mutex in set_bank() - [s390x] entry: align system call table on 8 bytes - [x86] bugs: Fix the SRSO mitigation on Zen3/4 - [x86] retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO - mptcp: don't account accept() of non-MPC client as fallback to TCP - [x86] cpufeatures: Add CPUID_LNX_5 to track recently added Linux-defined word - objtool: Add asm version of STACK_FRAME_NON_STANDARD - wifi: ath9k: fix LNA selection in ath_ant_try_scan() - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() - panic: Flush kernel log buffer at the end - [arm64] dts: rockchip: fix rk3328 hdmi ports node - [arm64] dts: rockchip: fix rk3399 hdmi ports node - ionic: set adminq irq affinity - pstore/zone: Add a null pointer check to the psz_kmsg_read - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() - btrfs: export: handle invalid inode or root reference in btrfs_get_parent() - btrfs: send: handle path ref underflow in header iterate_inode_ref() - net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() - Bluetooth: btintel: Fix null ptr deref in btintel_read_version - Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails - pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs - sysv: don't call sb_bread() with pointers_lock held - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() - isofs: handle CDs with bad root inode but good Joliet root directory - media: sta2x11: fix irq handler cast - ext4: add a hint for block bitmap corrupt state in mb_groups - ext4: forbid commit inconsistent quota data when errors=remount-ro - drm/amd/display: Fix nanosec stat overflow - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int - Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default" - libperf evlist: Avoid out-of-bounds access - block: prevent division by zero in blk_rq_stat_sum() - RDMA/cm: add timeout to cm_destroy_id wait - Input: allocate keycode for Display refresh rate toggle - [x86] platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet - ring-buffer: use READ_ONCE() to read cpu_buffer->commit_page in concurrent environment - tools: iio: replace seekdir() in iio_generic_buffer - usb: typec: tcpci: add generic tcpci fallback compatible - usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined - fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 - drivers/nvme: Add quirks for device 126f:2262 - fbmon: prevent division by zero in fb_videomode_from_videomode() - netfilter: nf_tables: release batch on table validation from abort path - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (CVE-2024-26925) - netfilter: nf_tables: discard table flag update with pending basechain deletion - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc - virtio: reenable config if freezing device failed - [x86] mm/pat: fix VM_PAT handling in COW mappings - [x86] drm/i915/gt: Reset queue_priority_hint on parking - Bluetooth: btintel: Fixe build regression - [x86] VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() - kbuild: dummy-tools: adjust to stricter stackprotector check - scsi: sd: Fix wrong zone_write_granularity value during revalidate - [x86] retpoline: Add NOENDBR annotation to the SRSO dummy return thunk - [x86] head/64: Re-enable stack protection https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.216 - batman-adv: Avoid infinite loop trying to resize local TT - Bluetooth: Fix memory leak in hci_req_sync_complete() - media: cec: core: remove length check of Timer Status - nouveau: fix function cast warning - net: openvswitch: fix unwanted error log on timeout policy probing - u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING - geneve: fix header validation in geneve[6]_xmit_skb - ipv6: fib: hide unused 'pn' variable - ipv4/route: avoid unused-but-set-variable warning - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr - Bluetooth: SCO: Fix not validating setsockopt user input - netfilter: complete validation of user input - net/mlx5: Properly link new fs rules into the tree - af_unix: Do not use atomic ops for unix_sk(sk)->inflight. - af_unix: Fix garbage collector racing against connect() (CVE-2024-26923) - net: ena: Fix potential sign extension issue - net: ena: Wrong missing IO completions check order - net: ena: Fix incorrect descriptor free behavior - [amd64] iommu/vt-d: Allocate local memory for page request queue - [arm64] mailbox: imx: fix suspend failue - btrfs: qgroup: correctly model root qgroup rsv in convert - drm/client: Fully protect modes[] with dev->mode_config.mutex - vhost: Add smp_rmb() in vhost_vq_avail_empty() - [x86] cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n - [x86] apic: Force native_apic_mem_read() to use the MOV instruction - irqflags: Explicitly ignore lockdep_hrtimer_exit() argument - btrfs: record delayed inode root in transaction - kprobes: Fix possible use-after-free issue on kprobe registration - Revert "tracing/trigger: Fix to return error if failed to alloc snapshot" - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (CVE-2024-27020) - netfilter: nft_set_pipapo: do not free live element (CVE-2024-26924) - tun: limit printing rate when illegal packet received by tun dev (CVE-2024-27013) - RDMA/rxe: Fix the problem "mutex_destroy missing" - RDMA/cm: Print the old state when cm_destroy_id gets timeout - RDMA/mlx5: Fix port number for counter query in multi-port configuration - drm: nv04: Fix out of bounds access (CVE-2024-27008) - drm/panel: visionox-rm69299: don't unregister DSI device - clk: Remove prepare_lock hold assertion in __clk_release() - clk: Mark 'all_lists' as const - clk: remove extra empty line - clk: Print an info line before disabling unused clocks - clk: Initialize struct clk_core kref earlier - clk: Get runtime PM before walking tree during disable_unused (CVE-2024-27004) - [x86] cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ - [arm*] binder: check offset alignment in binder_get_object() (CVE-2024-26926) - [x86] thunderbolt: Avoid notify PM core about runtime PM resume - [x86] thunderbolt: Fix wake configurations after device unplug - [x86] comedi: vmk80xx: fix incomplete endpoint checking (CVE-2024-27001) - USB: serial: option: add Fibocom FM135-GL variants - USB: serial: option: add support for Fibocom FM650/FG650 - USB: serial: option: add Lonsung U8300/U9300 product - USB: serial: option: support Quectel EM060K sub-models - USB: serial: option: add Rolling RW101-GL and RW135-GL support - USB: serial: option: add Telit FN920C04 rmnet compositions - Revert "usb: cdc-wdm: close race between read and workqueue" - usb: dwc2: host: Fix dereference issue in DDMA completion flow. (CVE-2024-26997) - usb: Disable USB3 LPM at shutdown - mei: me: disable RPL-S on SPS and IGN firmwares - speakup: Avoid crash on very long word (CVE-2024-26994) - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (CVE-2024-26993) - init/main.c: Fix potential static_command_line memory overflow (CVE-2024-26988) - drm/amdgpu: validate the parameters of bo mapping operations more clearly (CVE-2024-26922) - nouveau: fix instmem race condition around ptr stores (CVE-2024-26984) - nilfs2: fix OOB in nilfs_set_de_type (CVE-2024-26981) - wifi: iwlwifi: mvm: remove old PASN station when adding a new one - vxlan: drop packets from invalid src-address - ipv4: check for NULL idev in ip_route_use_hint() - net: usb: ax88179_178a: stop lying about skb->truesize - net: gtp: Fix Use-After-Free in gtp_dellink - ipvs: Fix checksumming on GSO of SCTP packets - net: openvswitch: Fix Use-After-Free in ovs_ct_exit - netfilter: nf_tables: honor table dormant flag from netdev release event path - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue - i40e: Report MFS in decimal base instead of hex - iavf: Fix TC config comparison with existing adapter TC config - net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). - serial: core: Provide port lock wrappers - Revert "crypto: api - Disallow identical driver names" - net/mlx5e: Fix a race in command alloc flow - tracing: Show size of requested perf buffer - tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together - PM / devfreq: Fix buffer overflow in trans_stat_show (CVE-2023-52614) - Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() - cpu: Re-enable CPU mitigations by default for !X86 architectures - drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3 - drm/amdgpu: Fix leak when GPU memory allocation fails - irqchip/gic-v3-its: Prevent double free on error - ethernet: Add helper for assigning packet type when dest address does not match device address - net: b44: set pause params only when interface is up - stackdepot: respect __GFP_NOLOCKDEP allocation flag - mtd: diskonchip: work around ubsan link failure - tcp: Clean up kernel listener's reqsk in inet_twsk_purge() - tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge() - [x86] idma64: Don't try to serve interrupts when device is powered off - i2c: smbus: fix NULL function pointer dereference - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up - bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS - udp: preserve the connected status if only UDP cmsg - serial: core: fix kernel-doc for uart_port_unlock_irqrestore() . [ Salvatore Bonaccorso ] * Bump ABI to 29 * [rt] Refresh "sched/vtime: Consolidate IRQ time accounting" * [rt] Update to 5.10.215-rt107 * [rt] Refresh "u64_stats: Disable preemption on 32bit-UP/SMP with RT during updates" * drivers/tty: Disable N_GSM * tipc: fix UAF in error path * tipc: fix a possible memleak in tipc_buf_append mediawiki (1:1.35.13-1+deb11u2) bullseye-security; urgency=medium . * Cherry-pick upstream patch fixing T357760 (DoS in Special:MovePage, CVE pending). nano (5.4-2+deb11u3) bullseye; urgency=medium . * Non-maintainer upload. * CVE-2024-5742: Emergency file symlink attack ngircd (26.1-1+deb11u1) bullseye; urgency=high . * Cherry-pick "Respect "SSLConnect" option for incoming connections". Closes: #1067237 * Cherry-pick "Support for server certificate validation on server links [S2S-TLS]" * Cherry-pick "METADATA: Fix unsetting "cloakhost"" nvidia-graphics-drivers (470.256.02-2) bullseye; urgency=medium . * ppc64el: Use pfn_valid() variant with rcu_read_{,un}lock_sched() for Linux 5.10 from 5.10.210 onwards to avoid using GPL symbols. * Upload to bullseye. nvidia-graphics-drivers (470.256.02-1) bullseye; urgency=medium . * New upstream LTS and Tesla branch release 470.256.02 (2024-06-04). * Fixed CVE-2024-0090, CVE-2024-0092. (Closes: #1072792) https://nvidia.custhelp.com/app/answers/detail/a_id/5551 - Fixed a bug that could cause the X server to crash when graphics applications requested single-buffered drawables while certain features (such as Vulkan sharpening) are enabled. . [ Andreas Beckmann ] * Refresh patches. * xserver-xorg-video-nvidia: Recommend nvidia-vulkan-icd. * Move the libnvidia-glvkspirv dependency to libnvidia-(e)glcore. (Cf. #1064194) * Bump Standards-Version to 4.7.0. No changes needed. nvidia-graphics-drivers (470.239.06-1) bullseye; urgency=medium . * New upstream long term support branch release 470.239.06 (2024-02-22). * Fixed CVE-2024-0074, CVE-2024-0078, CVE-2022-42265. (Closes: #1064983) https://nvidia.custhelp.com/app/answers/detail/a_id/5520 * Improved compatibility with recent Linux kernels. . [ Andreas Beckmann ] * Refresh patches. * Upload to bullseye. nvidia-graphics-drivers (470.223.02-2) bullseye; urgency=medium . * Build libnvidia-fbc1 for arm64, too. (Closes: #1057078) * bug-control: Report information about more driver components. * nvidia-detect: Drop support for Tesla 450 drivers (EoL). * *-common: Drop alternative Suggests on EoL Tesla 450 packages that have been turned into transitional packages. nvidia-graphics-drivers-tesla-450 (450.248.02-4~deb11u1) bullseye; urgency=medium . * Rebuild for bullseye. . nvidia-graphics-drivers-tesla-450 (450.248.02-4) unstable; urgency=medium . * The Tesla 450 driver series has been declared as End-of-Life by NVIDIA. No further updates fixing security issues, critical bugs, or adding support for new Xorg or Linux releases will be issued. https://docs.nvidia.com/datacenter/tesla/drivers/ . * Turn metapackages into transitional packages to aid switching to nvidia-graphics-drivers-tesla-470. (Closes: #1055140) * Provide less virtual packages. * Remove the Tesla 450 driver from the nvidia alternative. . nvidia-graphics-drivers-tesla-450 (450.248.02-3) unstable; urgency=medium . * Revert backport of pin_user_pages changes. * Backport drm_gem_prime_handle_to_fd changes from 470.223.02 to fix kernel module build for Linux 6.6. * Refuse to load module if IBT is enabled. (Closes: #1052069) * Switch suggestion from obsolete vulkan-utils to vulkan-tools (525.125.06-3). (Closes: #1055503) . nvidia-graphics-drivers-tesla-450 (450.248.02-2) unstable; urgency=medium . * Backport get_user_pages and pin_user_pages changes from 520.56.06, 525.53 and 535.86.05 to fix kernel module build for Linux 6.5. nvidia-graphics-drivers-tesla-450 (450.248.02-3) unstable; urgency=medium . * Revert backport of pin_user_pages changes. * Backport drm_gem_prime_handle_to_fd changes from 470.223.02 to fix kernel module build for Linux 6.6. * Refuse to load module if IBT is enabled. (Closes: #1052069) * Switch suggestion from obsolete vulkan-utils to vulkan-tools (525.125.06-3). (Closes: #1055503) nvidia-graphics-drivers-tesla-450 (450.248.02-2) unstable; urgency=medium . * Backport get_user_pages changes from 520.56.06, 525.53 and 535.86.05 to fix kernel module build for Linux 6.5. nvidia-graphics-drivers-tesla-450 (450.248.02-1) unstable; urgency=medium . * New upstream Tesla release 450.248.02 (2023-06-26). * Fixed CVE-2023-25515, CVE-2023-25516. (Closes: #1039682) https://nvidia.custhelp.com/app/answers/detail/a_id/5468 * Improved compatibility with recent Linux kernels. . [ Andreas Beckmann ] * Refresh patches. nvidia-graphics-drivers-tesla-470 (470.256.02-1~deb11u2) bullseye; urgency=medium . * Rebuild as Tesla 470 driver for bullseye. . nvidia-graphics-drivers (470.256.02-2) bullseye; urgency=medium . * ppc64el: Use pfn_valid() variant with rcu_read_{,un}lock_sched() for Linux 5.10 from 5.10.210 onwards to avoid using GPL symbols. * Upload to bullseye. nvidia-graphics-drivers-tesla-470 (470.256.02-1~deb11u1) bullseye; urgency=medium . * Rebuild for bullseye. . nvidia-graphics-drivers-tesla-470 (470.256.02-1~deb12u1) bookworm; urgency=medium . * Rebuild for bookworm. . nvidia-graphics-drivers-tesla-470 (470.256.02-1) unstable; urgency=medium . * New upstream LTS and Tesla branch release 470.256.02 (2024-06-04). * Fixed CVE-2024-0090, CVE-2024-0092. (Closes: #1072798) https://nvidia.custhelp.com/app/answers/detail/a_id/5551 - Fixed a bug that could cause the X server to crash when graphics applications requested single-buffered drawables while certain features (such as Vulkan sharpening) are enabled. . [ Andreas Beckmann ] * Refresh patches. . nvidia-graphics-drivers (470.256.02-1) bullseye; urgency=medium . * New upstream LTS and Tesla branch release 470.256.02 (2024-06-04). * Fixed CVE-2024-0090, CVE-2024-0092. (Closes: #1072792) https://nvidia.custhelp.com/app/answers/detail/a_id/5551 - Fixed a bug that could cause the X server to crash when graphics applications requested single-buffered drawables while certain features (such as Vulkan sharpening) are enabled. . [ Andreas Beckmann ] * Refresh patches. * xserver-xorg-video-nvidia: Recommend nvidia-vulkan-icd. * Move the libnvidia-glvkspirv dependency to libnvidia-(e)glcore. (Cf. #1064194) * Bump Standards-Version to 4.7.0. No changes needed. * Upload to bullseye. nvidia-graphics-drivers-tesla-470 (470.239.06-1) unstable; urgency=medium . * New upstream long term support branch release 470.239.06 (2024-02-22). * Improved compatibility with recent Linux kernels. . [ Andreas Beckmann ] * Refresh patches. nvidia-graphics-drivers-tesla-470 (470.239.06-1~deb12u1) bookworm; urgency=medium . * Rebuild for bookworm. . nvidia-graphics-drivers-tesla-470 (470.239.06-1) unstable; urgency=medium . * New upstream long term support branch release 470.239.06 (2024-02-22). * Fixed CVE-2024-0074, CVE-2024-0078, CVE-2022-42265. (Closes: #1064989) https://nvidia.custhelp.com/app/answers/detail/a_id/5520 * Improved compatibility with recent Linux kernels. . [ Andreas Beckmann ] * Refresh patches. . nvidia-graphics-drivers (470.239.06-1) bullseye; urgency=medium . * New upstream long term support branch release 470.239.06 (2024-02-22). * Fixed CVE-2024-0074, CVE-2024-0078, CVE-2022-42265. (Closes: #1064983) https://nvidia.custhelp.com/app/answers/detail/a_id/5520 * Improved compatibility with recent Linux kernels. . [ Andreas Beckmann ] * Refresh patches. * Upload to bullseye. nvidia-graphics-drivers-tesla-470 (470.239.06-1~deb11u1) bullseye; urgency=medium . * Rebuild for bullseye. . nvidia-graphics-drivers-tesla-470 (470.239.06-1~deb12u1) bookworm; urgency=medium . * Rebuild for bookworm. . nvidia-graphics-drivers-tesla-470 (470.239.06-1) unstable; urgency=medium . * New upstream long term support branch release 470.239.06 (2024-02-22). * Fixed CVE-2024-0074, CVE-2024-0078, CVE-2022-42265. (Closes: #1064989) https://nvidia.custhelp.com/app/answers/detail/a_id/5520 * Improved compatibility with recent Linux kernels. . [ Andreas Beckmann ] * Refresh patches. . nvidia-graphics-drivers (470.239.06-1) bullseye; urgency=medium . * New upstream long term support branch release 470.239.06 (2024-02-22). * Fixed CVE-2024-0074, CVE-2024-0078, CVE-2022-42265. (Closes: #1064983) https://nvidia.custhelp.com/app/answers/detail/a_id/5520 * Improved compatibility with recent Linux kernels. . [ Andreas Beckmann ] * Refresh patches. * Upload to bullseye. . nvidia-graphics-drivers-tesla-470 (470.223.02-4~deb12u1) bookworm; urgency=medium . * Rebuild for bookworm. . nvidia-graphics-drivers-tesla-470 (470.223.02-4) unstable; urgency=medium . * Apply pfn_valid patch from gentoo to fix kernel module build for Linux 6.1.76, 6.6.15, 6.7.3, 6.8. (Closes: #1063361) * Update lintian overrides. . nvidia-graphics-drivers-tesla-470 (470.223.02-3) unstable; urgency=medium . * nvidia-cuda-mps is again built from src:nvidia-graphics-drivers. . nvidia-graphics-drivers (470.223.02-3) UNRELEASED; urgency=medium . * Switch src:nvidia-graphics-drivers to the Tesla 470 driver series. * Build for ppc64el. * Build all unversioned packages from src:nvidia-graphics-drivers. * New Romanian (ro) debconf translations by Remus-Gabriel Chelu. nvidia-graphics-drivers-tesla-470 (470.223.02-4) unstable; urgency=medium . * Apply pfn_valid patch from gentoo to fix kernel module build for Linux 6.1.76, 6.6.15, 6.7.3, 6.8. (Closes: #1063361) * Update lintian overrides. nvidia-graphics-drivers-tesla-470 (470.223.02-4~deb12u1) bookworm; urgency=medium . * Rebuild for bookworm. . nvidia-graphics-drivers-tesla-470 (470.223.02-4) unstable; urgency=medium . * Apply pfn_valid patch from gentoo to fix kernel module build for Linux 6.1.76, 6.6.15, 6.7.3, 6.8. (Closes: #1063361) * Update lintian overrides. . nvidia-graphics-drivers-tesla-470 (470.223.02-3) unstable; urgency=medium . * nvidia-cuda-mps is again built from src:nvidia-graphics-drivers. . nvidia-graphics-drivers-tesla-470 (470.223.02-2~deb11u1) bullseye; urgency=medium . * Rebuild for bullseye. nvidia-graphics-drivers-tesla-470 (470.223.02-3) unstable; urgency=medium . * nvidia-cuda-mps is again built from from src:nvidia-graphics-drivers. nvidia-graphics-drivers-tesla-470 (470.223.02-2) unstable; urgency=medium . * Build libnvidia-tesla-470-fbc1 for arm64, too. (Closes: #1057078) * bug-control: Report information about more driver components. nvidia-graphics-drivers-tesla-470 (470.223.02-2~deb12u1) bookworm; urgency=medium . * Rebuild for bookworm. . nvidia-graphics-drivers-tesla-470 (470.223.02-2) unstable; urgency=medium . * Build libnvidia-tesla-470-fbc1 for arm64, too. (Closes: #1057078) * bug-control: Report information about more driver components. . nvidia-graphics-drivers-tesla-470 (470.223.02-1) unstable; urgency=medium . * New upstream Tesla release 470.223.02 (2023-10-31). * Fixed CVE-2023-31022. (Closes: #1055142) https://nvidia.custhelp.com/app/answers/detail/a_id/5491 - Fixed a bug which caused incorrect reporting of presentation times when using the VK_NV_present_barrier Vulkan extension. * Improved compatibility with recent Linux kernels. . [ Andreas Beckmann ] * Refresh patches. . nvidia-graphics-drivers (470.223.02-1) bullseye; urgency=medium . * New upstream long term support branch release 470.223.02 (2023-10-31). * Fixed CVE-2023-31022. (Closes: #1055136) https://nvidia.custhelp.com/app/answers/detail/a_id/5491 - Fixed a bug which caused incorrect reporting of presentation times when using the VK_NV_present_barrier Vulkan extension. * Improved compatibility with recent Linux kernels. . [ Andreas Beckmann ] * Refresh patches. * Upload to bullseye. . nvidia-graphics-drivers-tesla-470 (470.199.02-4) unstable; urgency=medium . * Refuse to load module if IBT is enabled. (Closes: #1052069) * Switch suggestion from obsolete vulkan-utils to vulkan-tools (525.125.06-3). (Closes: #1055503) . nvidia-graphics-drivers-tesla-470 (470.199.02-3) unstable; urgency=medium . * Revert backport of pin_user_pages changes. * Backport drm_gem_prime_handle_to_fd changes from 470.223.02 to fix kernel module build for Linux 6.6. . nvidia-graphics-drivers-tesla-470 (470.199.02-2) unstable; urgency=medium . * Backport get_user_pages and pin_user_pages changes from 520.56.06, 525.53 and 535.86.05 to fix kernel module build for Linux 6.5. . nvidia-graphics-drivers-tesla-470 (470.199.02-1~deb11u1) bullseye; urgency=medium . * Rebuild for bullseye. nvidia-settings (470.239.06-1) bullseye; urgency=medium . * New upstream release 470.141.03. * Build for ppc64el. * Upload to bullseye. nvidia-settings (470.141.03-1) unstable; urgency=medium . * New upstream release 470.141.03. - Fixed a bug that prevented nvidia-settings from accurately reflecting changes to some configuration properties. openjdk-11 (11.0.23+9-1~deb11u1) bullseye-security; urgency=medium . * Rebuild for bullseye openjdk-11 (11.0.23~7ea-1) unstable; urgency=medium . * OpenJDK 11.0.23+7 build (early access). . [ Matthias Klose ] * Update cups dependencies for time_t64. . [ Pushkar Kulkarni ] * copyright-generator: Derive release from debian/rules. openjdk-11 (11.0.22+7-3) unstable; urgency=medium . * libcups2, libfontconfig1: Make it a recommends in jre-headless, a dependency in jre. * Make the dependencies for libfontmanager.so and libjsound.so recommendations in jre-headless, and dependencies in jre. * Drop build dependencies on libgtk2 | libgtk3. * Disable running the tests for the time_t64 bootstrap. openjdk-11 (11.0.22+7-2) unstable; urgency=medium . [ Matthias Klose ] * Add zero support for loong64 (Leslie Zhai). Closes: #1060821. * d/changelog: Whitespace cleanup. * Update build dependency on libfontconfig-dev. * Apply proposed patch for JDK-8307977. Closes: #1034600. . [ Vladimir Petko ] * d/t/jtreg-autopkgtest.*: Set jtreg home property correctly. openjdk-11 (11.0.22+7-1) unstable; urgency=high . * OpenJDK 11.0.22 release, build 7. - CVEs: + CVE-2024-20918 + CVE-2024-20919 + CVE-2024-20921 + CVE-2024-20945 + CVE-2024-20952 - Security fixes: + JDK-8308204: Enhanced certificate processing. + JDK-8314295: Enhance verification of verifier. + JDK-8314307: Improve loop handling. + JDK-8314468: Improve Compiler loops. + JDK-8316976: Improve signature handling. + JDK-8317547: Enhance TLS connection support. + JDK-8314284: Enhance Nashorn performance (CVE-2024-20926). . [ Vladimir Petko ] * Generate d/watch to cope with early access and release builds. * d/rules: Trim trailing whitespaces from debian/control. . [ Pushkar Kulkarni ] * Minor improvements to the copyright-generator. openjdk-17 (17.0.11+9-1~deb11u1) bullseye-security; urgency=medium . * Rebuild for bullseye openjdk-17 (17.0.11~7ea-1) unstable; urgency=medium . * OpenJDK 17.0.11 early access, build 7. . [ Matthias Klose ] * Don't try to install jhsdb on armhf with a zero-only build. * Update cups dependencies for time_t64. . [ Pushkar Kulkarni ] * Fix a typo in the vendor name derivation logic. * copyright-generator: Derive release from debian/rules. . [ Vladimir Petko ] * Fix installing the s390x build. openjdk-17 (17.0.11~6ea-1) unstable; urgency=medium . * OpenJDK 17.0.11 early access, build 6. openjdk-17 (17.0.10+7-3) unstable; urgency=medium . * d/changelog: Whitespace cleanup. * Update build dependency on libfontconfig-dev. * Apply proposed patch for JDK-8307977. Addresses: #1034600. * libcups2, libfontconfig1: Make it a recommends in jre-headless, a dependency in jre. * Make the dependencies for libfontmanager.so and libjsound.so recommendations in jre-headless, and dependencies in jre. * Drop build dependencies on libgtk2 | libgtk3. * Disable running the tests for the time_t64 bootstrap. openjdk-17 (17.0.10+7-2) unstable; urgency=medium . * d/changelog: Whitespace cleanup. * Update build dependency on libfontconfig-dev. * Apply proposed patch for JDK-8307977. Addresses: #1034600. * libcups2, libfontconfig1: Make it a recommends in jre-headless, a dependency in jre. * Make the dependencies for libfontmanager.so and libjsound.so recommendations in jre-headless, and dependencies in jre. * Drop build dependencies on libgtk2 | libgtk3. * Disable running the tests for the time_t64 bootstrap. openjdk-17 (17.0.10+7-1) unstable; urgency=high . * OpenJDK 17.0.10 release, build 7. - CVEs: + CVE-2024-20918 + CVE-2024-20919 + CVE-2024-20921 + CVE-2024-20932 + CVE-2024-20945 + CVE-2024-20952 - Security fixes: + JDK-8276123, JDK-8316613: ZipFile::getEntry will not return a file entry when there is a directory entry of the same name within a Zip File. + JDK-8308204: Enhanced certificate processing. + JDK-8314295: Enhance verification of verifier. + JDK-8314307: Improve loop handling. + JDK-8314468: Improve Compiler loops. + JDK-8316976: Improve signature handling. + JDK-8317547: Enhance TLS connection support. . [ Vladimir Petko ] * d/t/jtreg-autopkgtest.sh: Regenerate test script. * Generate d/watch to cope with early access and release builds. * d/rules: Trim trailing whitespaces from debian/control. . [ Matthias Klose ] * Build again zero on amd64 (accidental change in 6ea-1). . [ Pushkar Kulkarni ] * Minor improvements to the copyright-generator. openjdk-17 (17.0.10+7-1~deb12u1) bookworm-security; urgency=medium . * Rebuild for bookworm openvswitch (2.15.0+ds1-2+deb11u5) bullseye-security; urgency=medium . * CVE-2023-5366: A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass OpenFlow rules. This issue may allow a local attacker to create specially crafted packets with a modified or spoofed target IP address field that can redirect ICMPv6 traffic to arbitrary IP addresses. Added upstream patch: "Fix missing masks on a final stage with ports trie". Added additional patches that the LTS team added to fix this: - Cherry-pick additional patch adjust-segment-boundary.patch to fix test suite for the patch for this CVE. - Cherry-pick fix-testcase-ipv6-ND-dependency.patch to fix new test ipv6-ND-dependency (added by the previous patch) * CVE-2023-3966: Invalid memory access in Geneve with HW offload. Add upstream patches (Closes: #1063492): - Fix the mask for tunnel metadata length - Check geneve metadata length * CVE-2024-22563: openvswitch 2.17.8 was discovered to contain a memory leak via the function xmalloc__ in openvswitch-2.17.8/lib/util.c. Add upstream patch "Fix memory leak in ovs_pcap_open". * Blacklist unittest 21 - bpf decay, which isn't deterministic. org-mode (9.4.0+dfsg-1+deb11u2) bullseye; urgency=high . * Team upload. * Fix CVE-2024-30203, CVE-2024-30204 & CVE-2024-30205 (Closes: #1067663). - Require Emacs 1:27.1+1-3.1+deb11u3 to ensure we get the whole fix. php-composer-xdebug-handler (1.4.5-1+deb11u1) bullseye; urgency=medium . * Track debian/bullseye * Force system dependencies loading php-doctrine-annotations (1.11.2-1+deb11u1) bullseye; urgency=medium . * Track debian/bullseye * Force system dependencies loading php-phpseclib (2.0.30-2+deb11u2) bullseye; urgency=medium . * Backport upstream fixes - BigInteger: put guardrails on isPrime() and randomPrime() [CVE-2024-27354] - BigInteger: rm visibility modifiers from static variables - ASN1: limit OID length [CVE-2024-27355] - Tests: updates for phpseclib 2.0 - BigInteger: phpseclib 2.0 updates - BigInteger: fix getLength() php-proxy-manager (2.11.1+1.0.3-1+deb11u1) bullseye; urgency=medium . * Track debian/bullseye * Force system dependencies loading php-symfony-contracts (1.1.10-2+deb11u1) bullseye; urgency=medium . * Force system dependencies loading php-zend-code (4.0.0-2+deb11u1) bullseye; urgency=medium . * Track debian/bullseye * Force system dependencies loading php7.4 (7.4.33-1+deb11u5) bullseye-security; urgency=high . * Backported from 8.0.30 + CVE-2023-3823: Fixed bug GHSA-3qrf-m4j2-pcrr (Security issue with external entity loading in XML without enabling it). + CVE-2023-3824: Fixed bug GHSA-jqcx-ccgc-xwhv (Buffer mismanagement in phar_dir_read()). * Backported from 8.1.28 + CVE-2024-1874: Fixed bug GHSA-pc52-254m-w9w7 (Command injection via array-ish $command parameter of proc_open). + CVE-2024-2756: Fixed bug GHSA-wpj3-hf5j-x4v4 (__Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix). + CVE-2024-3096: Fixed bug GHSA-h746-cjrr-wfmr (password_verify can erroneously return true, opening ATO risk). phpseclib (1.0.19-3+deb11u2) bullseye; urgency=medium . * Backport upstream fixes - BigInteger: put guardrails on isPrime() and randomPrime() [CVE-2024-27354] - ASN1: limit OID length [CVE-2024-27355] - BigInteger: fix getLength() * Force system dependencies loading pillow (8.1.2+dfsg-0.3+deb11u2) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * Backport follow-up fix for CVE-2022-22817, upstream commit c930be075. * Backport fixes for CVE-2023-44271, CVE-2023-50447, CVE-2024-28219. postfix (3.5.25-0+deb11u1) bullseye; urgency=medium . [Wietse Venema] . * 3.5.25 - Bugfix (defect introduced: Postfix 2.3, date 20051222): the Dovecot auth client did not reset the 'reason' from a previous Dovecot auth service response, before parsing the next Dovecot auth server response in the same SMTP session. Reported by Stephan Bosch, File: xsasl/xsasl_dovecot_server.c. - Cleanup: Postfix SMTP server response with an empty authentication failure reason. File: smtpd/smtpd_sasl_glue.c. - Bugfix (defect introduced: Postfix 3.1, date: 20151128): "postqueue -j" produced broken JSON when escaping a control character as \uXXXX. Found during code maintenance. File: postqueue/showq_json.c. - Cleanup: posttls-finger certificate match expectations for all TLS security levels, including warnings for levels that don't implement certificate matching. Viktor Dukhovni. File: posttls-finger.c. - Bugfix (defect introduced: Postfix 2.3): after prepending a message header with a Postfix access table PREPEND action, a Milter request to delete or update an existing header could have no effect, or it could target the wrong instance of an existing header. Root cause: the fix dated 20141018 for the Postfix Milter client was incomplete. The client did correctly hide the first, Postfix-generated, Received: header when sending message header information to a Milter with the smfi_header() application callback function, but it was still hiding the first header (instead of the first Received: header) when handling requests from a Milter to delete or update an existing header. Problem report by Carlos Velasco. This change was verified to have no effect on requests from a Milter to add or insert a header. File: cleanup/cleanup_milter.c. - Workaround: tlsmgr logfile spam. Some OS lies under load: it says that a socket is readable, then it says that the socket has unread data, and then it says that read returns EOF, causing Postfix to spam the log with a warning message. File: tlsmgr/tlsmgr.c. - Bugfix (defect introduced: Postfix 3.4): the SMTP server's BDAT command handler could be tricked to read $message_size_limit bytes into memory. Found during code maintenance. File: smtpd/smtpd.c. - Performance: eliminate worst-case behavior where the queue manager defers delivery to all destinations over a specific delivery transport, after only a single delivery agent failure. The scheduler now throttles one destination, and allows deliveries to other destinations to keep making progress. Files: *qmgr/qmgr_deliver.c. - Safety: drop and log over-size DNS responses resulting in more than 100 records. This 20x larger than the number of server addresses that the Postfix SMTP client is willing to consider when delivering mail, and is well below the number of records that could cause a tail recursion crash in dns_rr_append() as reported by Toshifumi Sakaguchi. This also limits the number of DNS requests from check_*_*_access restrictions. Files: dns/dns.h, dns/dns_lookup.c, dns/dns_rr.c, dns/test_dns_lookup.c, posttls-finger/posttls-finger.c, smtp/smtp_addr.c, smtpd/smtpd_check.c. postgresql-13 (13.15-0+deb11u1) bullseye; urgency=medium . * New upstream version. postgresql-13 (13.14-0+deb11u1) bullseye-security; urgency=medium . * New upstream version. . * Tighten security restrictions within REFRESH MATERIALIZED VIEW CONCURRENTLY (Heikki Linnakangas) . One step of a concurrent refresh command was run under weak security restrictions. If a materialized view's owner could persuade a superuser or other high-privileged user to perform a concurrent refresh on that view, the view's owner could control code executed with the privileges of the user running REFRESH. Fix things so that all user-determined code is run as the view's owner, as expected. . The PostgreSQL Project thanks Pedro Gallegos for reporting this problem. (CVE-2024-0985) puma (4.3.8-1+deb11u2) bullseye-security; urgency=medium . * Team upload. * d/p: Add security patch for CVE-2021-41136 puma (4.3.8-1+deb11u1) bullseye-security; urgency=medium . * Team upload. * d/p: Add security patch for CVE-2022-23634 (closes: #1005391) * d/p: Add security patch for CVE-2022-24790 (closes: #1008723) py7zr (0.11.3+dfsg-1+deb11u1) bullseye-security; urgency=medium . [ YOKOTA Hiroshi ] * Fix sanity check for path traversal attack (Closes: #1032091, CVE-2022-44900) pypdf2 (1.26.0-4+deb11u1) bullseye; urgency=medium . * Forward-port CVE fixes by LTS team - CVE-2023-36810: Quadratic runtime with malformed PDF missing xref marker. - Fix CVE-2022-24859: Sebastian Krause discovered that manipulated inline images can force PyPDF2, a pure Python PDF library, into an infinite loop, if a maliciously crafted PDF file is processed. python-aiosmtpd (1.2.2-1+deb11u1) bullseye; urgency=medium . * Team upload. * CVE-2024-27305 - SMTP smuggling due to poor handling of non-standard line endings (Closes: #1066820) * CVE-2024-34083 - STARTTLS unencrypted command injection (Closes: #1072119) python-dnslib (0.9.14-1+deb11u1) bullseye; urgency=medium . * Add d/p/0002-Validate-TXID-in-client.py.patch to address CVE-2022-22846 python-idna (2.10-1+deb11u1) bullseye; urgency=high . * Non-maintainer upload. * Fix CVE-2024-3651: Specially crafted inputs to idna.encode() can consume significant resources, which may lead to denial of service. (Closes: #1069127) python-pymysql (0.9.3-2+deb11u1) bullseye-security; urgency=medium . * CVE-2024-36039: PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON input because keys are not escaped by escape_dict. Applied upstream patch: forbid_dict_parameter.patch (Closes: #1071628). python-stdnum (1.16-1+deb11u1) bullseye; urgency=medium . * Team upload. [ Arthur de Jong ] * Update Fødselsnummer test case for date in future. Closes: #1022311. qtbase-opensource-src (5.15.2+dfsg-9+deb11u1) bullseye; urgency=medium . * Non-maintainer upload by the LTS Team. * CVE-2024-25580 (Closes: #1064053) fix buffer overflow due to crafted KTX image file * CVE-2023-32763 (Closes: #1036702) fix QTextLayout buffer overflow due to crafted SVG file * CVE-2022-25255 prevent QProcess from execution of a binary from the current working directory when not found in the PATH * CVE-2023-24607 (Closes: #1031872) fix denial of service via a crafted string when the SQL ODBC driver plugin is used * fix regression caused by patch for CVE-2023-24607 * CVE-2023-32762 prevent incorrect parsing of the strict-transport-security (HSTS) header * CVE-2023-51714 (Closes: #1060694) fix incorrect HPack integer overflow check. * CVE-2023-38197 (Closes: #1041105) fix infinite loop in recursive entity expansion * CVE-2023-37369 (Closes: #1059302) fix crash of application in QXmlStreamReader due to crafted XML string * CVE-2023-34410 (Closes: #1037210) fix checking during TLS whether root of the chain really is a configured CA certificate * CVE-2023-33285 (Closes: #1036848) fix buffer overflow in QDnsLookup reportbug (7.10.3+deb11u2) bullseye; urgency=medium . * Rotate suite names after the bookworm release. (Closes: #1034260) roundcube (1.4.15+dfsg.1-1+deb11u3) bullseye-security; urgency=high . * Fix CVE-2024-37384: Cross-site scripting (XSS) vulnerability in handling list columns from user preferences. (Closes: #1071474) * Fix CVE-2024-37383: Cross-site scripting (XSS) vulnerability in handling SVG animate attributes. (Closes: #1071474) ruby-rack (2.1.4-3+deb11u2) bullseye-security; urgency=medium . * Non-maintainer upload. * CVE-2024-25126: ReDoS in Content Type header parsing * CVE-2024-26141: Reject Range headers which are too large * CVE-2024-26146: ReDoS in Accept header parsing * Closes: #1064516 ruby-sanitize (5.2.1-2+deb11u1) bullseye-security; urgency=medium . * CVE-2023-36823 (Closes: #1041430) rust-cbindgen-web (0.26.0-3~deb11u1) bullseye; urgency=medium . * Backport to bullseye. * Lower dh-cargo requirement to 24. * Build with cargo-mozilla. rustc-web (1.70.0+dfsg1-7~deb11u1) bullseye; urgency=medium . * Non-maintainer upload. * Backport to bullseye. samba (2:4.13.13+dfsg-1~deb11u6) bullseye-security; urgency=medium . * CVE-2022-2127: Out-of-bounds read in winbind AUTH_CRAP * CVE-2022-3437: Heimdal des/des3 heap-based buffer overflow * CVE-2023-4091: Client can truncate files even with read-only permissions * CVE-2023-34966: Spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability * CVE-2023-34967: Spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability * CVE-2023-34968: Spotlight server-side Share Path Disclosure sendmail (8.15.2-22+deb11u3) bullseye; urgency=medium . * QA upload * Add forgotten configuration for rejecting NUL by default. sendmail (8.15.2-22+deb11u2) bullseye; urgency=medium . * QA upload * Use correct location for debian/NEWS. sendmail (8.15.2-22+deb11u1) bullseye; urgency=medium . * QA-upload * Fix CVE-2023-51765 (Closes: #1059386): sendmail allowed SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because sendmail supports . but some other popular e-mail servers do not. This is resolved with 'o' in srv_features. * Enable _FFR_REJECT_NUL_BYTE for rejecting mail that include NUL byte * By default enable rejecting mail that include NUL byte. set confREJECT_NUL to 'true' by default . User could disable by setting confREJECT_NUL to false. (Closes: #1070190). Close a variant of CVE-2023-51765 aka SMTP smuggling. squid (4.13-10+deb11u3) bullseye-security; urgency=high . * Non-maintainer upload. * Fix CVE-2023-46724, CVE-2023-46846, CVE-2023-46847 CVE-2023-49285, CVE-2023-49286, CVE-2023-50269, CVE-2024-23638, CVE-2024-25617. * Several security vulnerabilities have been discovered in Squid, a full featured web proxy cache. Due to programming errors in Squid's HTTP request parsing, remote attackers may be able to execute a denial of service attack by sending large X-Forwarded-For header or trigger a stack buffer overflow while performing HTTP Digest authentication. Other issues facilitate request smuggling past a firewall or a denial of service against Squid's Helper process management. In regard to CVE-2023-46728: Please note that support for the Gopher protocol has simply been removed in future Squid versions. There are no plans by the upstream developers of Squid to fix this issue. We recommend to reject all Gopher URL requests instead. symfony (4.4.19+dfsg-2+deb11u5) bullseye; urgency=medium . * make sure that the submitted year is an accepted choice (Closes: #1061033) * Force system dependencies loading systemd (247.3-7+deb11u5) bullseye; urgency=medium . * Backport patches to fix build reproducibility thunderbird (1:115.12.0-1~deb11u1) bullseye-security; urgency=medium . * Rebuild for bullseye-security thunderbird (1:115.11.0-1) unstable; urgency=medium . * [47bb447] d/c-u-t.py: Ignore potentially non ESR versions * [f008566] New upstream version 115.11.0 Fixed CVE issues in upstream version 115.11 (MFSA 2024-23): CVE-2024-4367: Arbitrary JavaScript execution in PDF.js CVE-2024-4767: IndexedDB files retained in private browsing mode CVE-2024-4768: Potential permissions request bypass via clickjacking CVE-2024-4769: Cross-origin responses could be distinguished between script and non-script content-types CVE-2024-4770: Use-after-free could occur when printing to PDF CVE-2024-4777: Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11 * [b029857] d/control: Re-add build and binary dep on rnp library (Closes: #1070871) thunderbird (1:115.11.0-1~deb12u1) bookworm-security; urgency=medium . * Rebuild for bookworm-security thunderbird (1:115.11.0-1~deb11u1) bullseye-security; urgency=medium . * Rebuild for bullseye-security thunderbird (1:115.10.1-1) unstable; urgency=medium . [ William Desportes ] * [d0cbb66] Fix a typo in the wrapper file . [ Carsten Schoenert ] * [47d140b] New upstream version 115.10.1 Fixed CVE issues in upstream version 115.10 (MFSA 2024-20): CVE-2024-3852: GetBoundName in the JIT returned the wrong object CVE-2024-3854: Out-of-bounds-read after mis-optimized switch statement CVE-2024-3857: Incorrect JITting of arguments led to use-after-free during garbage collection CVE-2024-2609: Permission prompt input delay could expire when not in focus CVE-2024-3859: Integer-overflow led to out-of-bounds-read in the OpenType sanitizer CVE-2024-3861: Potential use-after-free due to AlignedBuffer self-move CVE-2024-3302: Denial of Service using HTTP/2 CONTINUATION frames CVE-2024-3864: Memory safety bug fixed in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10 * [5612f7b] d/control: Move libotr5 to libotr5t64 for bin:thunderbird (Closes: #1069337) * [195482a] d/mozconfig.default: Use internal shipped librnp version The Debian package has a RC bug for longer time which would prevent the migration of the thunderbird package to testing. * [cd4de72] d/control: Drop dependencies on librnp{0,-dev} * [761eb83] d/thunderbird.install: Install local built rnp tools * [ce212a8] d/control: Increase Standards-Version to 4.7.0 No further changes needed. thunderbird (1:115.10.1-1~deb12u1) bookworm-security; urgency=medium . * Rebuild for bookworm-security thunderbird (1:115.10.1-1~deb11u1) bullseye-security; urgency=medium . * Rebuild for bullseye-security thunderbird (1:115.9.0-1) unstable; urgency=medium . * [c122f7d] New upstream version 115.9.0 Fixed CVE issues in upstream version 115.9 (MFSA 2024-14): CVE-2024-0743: Crash in NSS TLS method CVE-2024-2607: JIT code failed to save return registers on Armv7-A CVE-2024-2608: Integer overflow could have led to out of bounds write CVE-2024-2616: Improve handling of out-of-memory conditions in ICU CVE-2023-5388: NSS susceptible to timing attack against RSA decryption CVE-2024-2610: Improper handling of html and body tags enabled CSP nonce leakage CVE-2024-2611: Clickjacking vulnerability could have led to a user accidentally granting permissions CVE-2024-2612: Self referencing object could have potentially led to a use-after-free CVE-2024-2614: Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9 thunderbird (1:115.9.0-1~deb12u1) bookworm-security; urgency=medium . * Rebuild for bookworm-security thunderbird (1:115.9.0-1~deb11u1) bullseye-security; urgency=medium . * Rebuild for bullseye-security thunderbird (1:115.8.1-1) unstable; urgency=medium . * [b9b4842] New upstream version 115.8.1 Fixed CVE issues in upstream version 115.8.1 (MFSA 2024-11): CVE-2024-1936: Leaking of encrypted email subjects to other conversations thunderbird (1:115.8.0-1) unstable; urgency=medium . * [68f2fbe] New upstream version 115.8.0 Fixed CVE issues in upstream version 115.8 (MFSA 2024-07): CVE-2024-1546: Out-of-bounds memory read in networking channels CVE-2024-1547: Alert dialog could have been spoofed on another site CVE-2024-1548: Fullscreen Notification could have been hidden by select element CVE-2024-1549: Custom cursor could obscure the permission dialog CVE-2024-1550: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants CVE-2024-1551: Multipart HTTP Responses would accept the Set-Cookie header in response parts CVE-2024-1552: Incorrect code generation on 32-bit ARM devices CVE-2024-1553: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8 thunderbird (1:115.8.0-1~deb12u1) bookworm-security; urgency=medium . * Rebuild for bookworm-security thunderbird (1:115.8.0-1~deb11u1) bullseye-security; urgency=medium . * Rebuild for bullseye-security thunderbird (1:115.7.0-1) unstable; urgency=medium . * [6e0c26c] New upstream version 115.7.0 Fixed CVE issues in upstream version 115.7 (MFSA 2024-04): CVE-2024-0741: Out of bounds write in ANGLE CVE-2024-0742: Failure to update user input timestamp CVE-2024-0746: Crash when listing printers on Linux CVE-2024-0747: Bypass of Content Security Policy when directive unsafe-inline was set CVE-2024-0749: Phishing site popup could show local origin in address bar CVE-2024-0750: Potential permissions request bypass via clickjacking CVE-2024-0751: Privilege escalation through devtools CVE-2024-0753: HSTS policy on subdomain could bypass policy of upper domain CVE-2024-0755: Memory safety bugs fixed in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7 thunderbird (1:115.7.0-1~deb12u1) bookworm-security; urgency=medium . * Rebuild for bookworm-security tomcat9 (9.0.43-2~deb11u10) bullseye-security; urgency=high . * Team upload. * Fix CVE-2023-46589: Improper Input Validation vulnerability in Apache Tomcat. Tomcat 10 did not correctly parse HTTP trailer headers. A trailer header that exceeded the header size limit could cause Tomcat to treat a single request as multiple requests leading to the possibility of request smuggling when behind a reverse proxy. * Fix CVE-2024-24549: Denial of Service due to improper input validation vulnerability for HTTP/2. When processing an HTTP/2 request, if the request exceeded any of the configured limits for headers, the associated HTTP/2 stream was not reset until after all of the headers had been processed. * Fix CVE-2024-23672: Denial of Service via incomplete cleanup vulnerability. It was possible for WebSocket clients to keep WebSocket connections open leading to increased resource consumption. trafficserver (8.1.10+ds-1~deb11u1) bullseye-security; urgency=medium . * New upstream version 8.1.10+ds * CVEs fix (Closes: #1068417) - CVE-2024-31309: HTTP/2 CONTINUATION DoS attack unbound (1.13.1-1+deb11u2) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * Address DNSSEC protocol vulnerabilities (Closes: #1063845) - Fix CVE-2023-50387, DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers. - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU. util-linux (2.36.1-8+deb11u2) bullseye-security; urgency=high . * d/gbp.conf: update for stable release * Add upstream patches to fix CVE-2024-28085 (Closes: #1067849) * No longer install wall, write setgid tty to address CVE-2024-28085 vlc (3.0.21-0+deb11u1) bullseye-security; urgency=medium . * New upstream version 3.0.21 - Fix security integer overflow in MMS module vlc (3.0.20-4) unstable; urgency=medium . [ Bastian Germann ] * Drop OMX support (see #1065623) * Drop kFreeBSD support . [ Sebastian Ramacher ] * debian/: - Complete omxil removal - Complete kfreebsd support removal * debian/control: Bump Standards-Version vlc (3.0.20-3) unstable; urgency=medium . * debian/control: Add missing dpkg-dev BD for time_t vlc (3.0.20-2) unstable; urgency=medium . * debian/patches: Bump module ABI for time_t transition vlc (3.0.20-1) unstable; urgency=medium . * New upstream version 3.0.20. vlc (3.0.20-0+deb12u1) bookworm-security; urgency=medium . * New upstream version 3.0.20 - Improve muxing timestamps in a few formats (Closes: #1054528) - Fix potential security issue (OOB Write) on MMS:// * debian/gbp.conf: Work in bookworm branch * debian/patches: Drop patches included upstream webkit2gtk (2.44.2-1~deb11u1) bullseye-security; urgency=medium . * Rebuild for bullseye-security. * gcc 10 segfaults when building webkit in amd64 (see #1008098) so use clang instead. Keep using gcc in other architectures because clang has problems in at least i386, arm64 and mipsel (see #1010329 and #1016811). - debian/rules: Tell CMake to use clang. - debian/control.in: Build depend on clang. * Build libsoup2 packages only. - debian/rules: Set ENABLE_SOUP3=NO, ENABLE_GTK4=NO and USE_PREBUILT_DOCS=YES. - debian/control.in: Remove build dependency on ccache. * debian/rules: - Disable USE_AVI, USE_GBM, USE_GSTREAMER_TRANSCODER and USE_JPEGXL due to missing or additional build dependencies. - Enable USE_OLD_DOC_PKG and USE_OLD_JSCBIN_PKG to keep using the old package names. * debian/control.in: - Remove build dependencies on libgstreamer-plugins-bad1.0-dev, libjxl-dev and libavif-dev. - Make the -dev packages depend on the gir packages. - Replace gobject-introspection-bin with gobject-introspection. * debian/patches/disable-dmabuf.patch: - Disable the DMABuf renderer in all cases in bullseye (see #1054101). webkit2gtk (2.44.1-1) unstable; urgency=medium . * New upstream release. * Re-enable WebGL on armel. - debian/rules: stop using -DENABLE_WEBGL=OFF on armel, powerpc and sh4. * debian/patches/fix-ftbfs-i386.patch: - Drop this patch, it is included in this release. webkit2gtk (2.44.1-1~deb12u1) bookworm-security; urgency=medium . * Rebuild for bookworm-security. * Disable JPEG XL to avoid adding new dependencies. - debian/control.in: Remove build dependency on libjxl-dev. - debian/rules: Build with -DUSE_JPEGXL=OFF. * debian/rules: - Enable ENABLE_SOUP2, USE_OLD_DOC_PKG and USE_OLD_JSCBIN_PKG to keep using the old package names. * debian/control.in: - Replace gobject-introspection-bin with gobject-introspection. - Make the -dev packages depend on the gir packages. - Build depend on ccache. webkit2gtk (2.44.1-1~deb11u1) bullseye-security; urgency=medium . * Rebuild for bullseye-security. * gcc 10 segfaults when building webkit in amd64 (see #1008098) so use clang instead. Keep using gcc in other architectures because clang has problems in at least i386, arm64 and mipsel (see #1010329 and #1016811). - debian/rules: Tell CMake to use clang. - debian/control.in: Build depend on clang. * Build libsoup2 packages only. - debian/rules: Set ENABLE_SOUP3=NO, ENABLE_GTK4=NO and USE_PREBUILT_DOCS=YES. - debian/control.in: Remove build dependency on ccache. * debian/rules: - Disable USE_AVI, USE_GBM, USE_GSTREAMER_TRANSCODER and USE_JPEGXL due to missing or additional build dependencies. - Enable USE_OLD_DOC_PKG and USE_OLD_JSCBIN_PKG to keep using the old package names. * debian/control.in: - Remove build dependencies on libgstreamer-plugins-bad1.0-dev, libjxl-dev and libavif-dev. - Make the -dev packages depend on the gir packages. - Replace gobject-introspection-bin with gobject-introspection. * debian/patches/disable-dmabuf.patch: - Disable the DMABuf renderer in all cases in bullseye (see #1054101). webkit2gtk (2.44.0-2) unstable; urgency=high . * The WebKitGTK security advisory WSA-2024-0002 lists the following security fixes in the latest versions of WebKitGTK: - CVE-2024-23252, CVE-2024-23254, CVE-2024-23263, CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956, CVE-2023-42843 (fixed in 2.44.0). * debian/patches/fix-ftbfs-riscv64.patch: - Treat riscv64 as an unknown CPU to fix a FTBFS in JavaScriptCore (webkit bug #271371). webkit2gtk (2.44.0-1) unstable; urgency=medium . * New upstream release. * Stop building the 4.0 API packages. - debian/rules: Set ENABLE_SOUP2=NO - debian/control.in: Remove build dependency on ccache. * Replace debian/patches/fix-ftbfs-i386.patch with a new patch for this version. * debian/control.in: - Build depend on libsoup-3.0-doc instead of libsoup2.4-doc. - Enable the bubblewrap sandbox only in the architectures where libseccomp is working (Closes: #1067643). * Bring all changes from the 2.43 (experimental) branch. * debian/gbp.conf: - Update upstream branch name. * debian/control.in: - Add build dependency on libdrm-dev. - Replace gobject-introspection with gobject-introspection-bin. - Remove build dependendency on libwpebackend-fdo, upstream no longer uses it. - And missing ${gir:Depends} and ${gir:Provides} to the -dev and gir1.2 packages. * debian/rules: - GTK4 is now the default, pass -DUSE_GTK4=OFF to the GTK3 builds. - Build with -DUSE_LIBDRM=OFF in the Hurd. - Build with -DUSE_LIBBACKTRACE=OFF. * Use the documentation from the 6.0 API build and update path of installed docs, upstream no longer uses the gtk-doc dir (see webkit bug #265133). * Rename libwebkit2gtk-4.0-doc to libwebkitgtk-doc and libjavascriptcoregtk-4.0-bin to libjavascriptcoregtk-bin. - debian/control.in: add the necessary Conflicts / Breaks / Replaces. - debian/control-doc.in: control file for the transitional package. - debian/control-jscbin.in: control file for the transitional package. - Rename debian/libwebkit2gtk-4.0-doc.* -> libwebkitgtk-doc.* - Remove debian/libjavascriptcoregtk-4.0-bin.* - debian/rules: Add the USE_OLD_DOC_PKG and USE_OLD_JSCBIN_PKG variables and the logic to decide which packages to build. * Refresh debian/patches/disable-dmabuf-nvidia.patch. * debian/source/lintian-overrides: - Update source-is-missing overrides. * debian/copyright: - Update copyright information of all files. webkit2gtk (2.43.4-2) experimental; urgency=medium . * debian/control.in: - Add build dependency on libdrm-dev. - Replace gobject-introspection with gobject-introspection-bin. * debian/patches/fix-ftbfs-riscv64.patch: - Drop this patch, the problem has been fixed upstream in commit 6b46c24db814. * debian/rules: - Don't use ccache on the gtk4 build since it won't reuse any results from the gtk3 builds. - Don't copy CFLAGS to CXXFLAGS: -Werror=implicit-function-declaration (default since dpkg 1.22.6) causes a FTBFS when added to the latter (see #1066411). * Rename libwebkit2gtk-4.0-doc to libwebkitgtk-doc and libjavascriptcoregtk-4.0-bin to libjavascriptcoregtk-bin. - debian/control.in: add the necessary Conflicts / Breaks / Replaces. - debian/control-doc.in: control file for the transitional package. - debian/control-jscbin.in: control file for the transitional package. - Rename debian/libwebkit2gtk-4.0-doc.* -> libwebkitgtk-doc.* - Remove debian/libjavascriptcoregtk-4.0-bin.* - debian/rules: Add the USE_OLD_DOC_PKG and USE_OLD_JSCBIN_PKG variables and the logic to decide which packages to build. webkit2gtk (2.43.4-1) experimental; urgency=medium . * New upstream development release. * debian/rules: - Remove last empty line from debian/control. - Build with -DUSE_LIBDRM=OFF in the Hurd. * debian/control.in: - And missing ${gir:Depends} and ${gir:Provides} to the -dev and gir1.2 packages. - Remove build dependencies on libseccomp-dev, bwrap, xdg-dbus-proxy and ccache on m68k (Closes: #1061879). * Stop overriding the typelib-package-name-does-not-match and gir-missing-typelib-dependency lintian warnings, they're not happening since the aforementioned changes to debian/control. * debian/copyright: - Update copyright information of all files. * debian/source/lintian-overrides: - Update source-is-missing overrides. webkit2gtk (2.43.3-1) experimental; urgency=medium . * New upstream development release. * debian/patches/fix-ftbfs-riscv64.patch: - Fix FTBFS in riscv64 (#1058034). * debian/copyright: - Update copyright information of all files. webkit2gtk (2.43.2-1) experimental; urgency=medium . * New upstream development release. * Drop support for some arches that are unsupported or haven't worked in a long time: ia64, m68k, kfreebsd, mips and mipsel. * debian/control.in, debian/rules: - Remove build dependendency on libwpebackend-fdo, upstream no longer uses it. * debian/copyright: - Update copyright information of all files. * Use the documentation from the 6.0 API build and update path of installed docs, upstream no longer uses the gtk-doc dir (see webkit bug #265133). webkit2gtk (2.43.1-1) experimental; urgency=medium . * New upstream development release. * debian/watch, debian/gbp.conf: - Update for 2.43.x packages in experimental. * Refresh all patches. - Remove disable-dmabuf-nvidia.patch. - Remove fix-ftbfs-m68k.patch (this hasn't worked in a long time). * debian/control.in: - Set the debhelper compatibility level to 13. * debian/rules: - GTK4 is now the default, pass -DUSE_GTK4=OFF to the GTK3 builds. - Build with -DUSE_LIBBACKTRACE=OFF. - Stop overriding dh_missing, no longer needed with dh compat 13. * debian/copyright: - Update copyright information of all files. * debian/source/lintian-overrides: - Update source-is-missing overrides. webkit2gtk (2.42.5-2) unstable; urgency=medium . * debian/rules: - Don't copy CFLAGS to CXXFLAGS: -Werror=implicit-function-declaration (default since dpkg 1.22.6) causes a FTBFS when added to the latter (Closes: #1066411). - Don't use ccache on the gtk4 build since it won't reuse any results from the gtk3 builds. webkit2gtk (2.42.5-1) unstable; urgency=high . * New upstream release. * debian/copyright: - Update copyright information of all files. * debian/rules: - Remove last empty line from debian/control. * debian/patches/fix-ftbfs-i386.patch: - i386 build fix. webkit2gtk (2.42.5-1~deb12u1) bookworm-security; urgency=medium . * Rebuild for bookworm-security. * The WebKitGTK security advisory WSA-2024-0001 lists the following security fixes in the latest versions of WebKitGTK: - CVE-2023-42833 (fixed in 2.38.0). - CVE-2014-1745 (fixed in 2.42.0). - CVE-2023-40414 (fixed in 2.42.1). - CVE-2024-23222, CVE-2024-23213, CVE-2024-23206 (fixed in 2.42.5). * Disable JPEG XL to avoid adding new dependencies. - debian/control.in: Remove build dependency on libjxl-dev. - debian/rules: Build with -DUSE_JPEGXL=OFF. webkit2gtk (2.42.5-1~deb11u1) bullseye-security; urgency=medium . * Rebuild for bullseye-security. * The WebKitGTK security advisory WSA-2024-0001 lists the following security fixes in the latest versions of WebKitGTK: - CVE-2023-42833 (fixed in 2.38.0). - CVE-2014-1745 (fixed in 2.42.0). - CVE-2023-40414 (fixed in 2.42.1). - CVE-2024-23222, CVE-2024-23213, CVE-2024-23206 (fixed in 2.42.5). * gcc 10 segfaults when building webkit in amd64 (see #1008098) so use clang instead. Keep using gcc in other architectures because clang has problems in at least i386, arm64 and mipsel (see #1010329 and #1016811). - debian/rules: Tell CMake to use clang. - debian/control.in: Build depend on clang. * Build libsoup2 packages only. - debian/rules: Set ENABLE_SOUP3=NO, ENABLE_GTK4=NO and USE_PREBUILT_DOCS=YES. - debian/control.in: Remove build dependency on ccache. * debian/rules: - Disable USE_AVI, USE_GBM, USE_GSTREAMER_TRANSCODER and USE_JPEGXL due to missing or additional build dependencies. * debian/control.in: - Don't require version 1.20.0 of libgstreamer-plugins-bad1.0-dev. - Remove build dependency on libjxl-dev. * debian/patches/disable-dmabuf.patch: - Disable the DMABuf renderer in all cases in bullseye (see #1054101). webkit2gtk (2.42.4-1) unstable; urgency=high . * New upstream release. webkit2gtk (2.42.4-1~deb12u1) bookworm-security; urgency=medium . * Rebuild for bookworm-security. - Fixes CVE-2023-42883. * Disable JPEG XL to avoid adding new dependencies. - debian/control.in: Remove build dependency on libjxl-dev. - debian/rules: Build with -DUSE_JPEGXL=OFF. webkit2gtk (2.42.4-1~deb11u1) bullseye-security; urgency=medium . * Rebuild for bullseye-security. - Fixes CVE-2023-42883. * gcc 10 segfaults when building webkit in amd64 (see #1008098) so use clang instead. Keep using gcc in other architectures because clang has problems in at least i386, arm64 and mipsel (see #1010329 and #1016811). - debian/rules: Tell CMake to use clang. - debian/control.in: Build depend on clang. * Build libsoup2 packages only. - debian/rules: Set ENABLE_SOUP3=NO, ENABLE_GTK4=NO and USE_PREBUILT_DOCS=YES. - debian/control.in: Remove build dependency on ccache. * debian/rules: - Disable USE_AVI, USE_GBM, USE_GSTREAMER_TRANSCODER and USE_JPEGXL due to missing or additional build dependencies. * debian/control.in: - Don't require version 1.20.0 of libgstreamer-plugins-bad1.0-dev. - Remove build dependency on libjxl-dev. * debian/patches/disable-dmabuf.patch: - Disable the DMABuf renderer in all cases in bullseye (see #1054101). webkit2gtk (2.42.3-1) unstable; urgency=high . * New upstream release. * Drop tweaks for some arches that are unsupported or haven't worked in a long time: ia64, m68k, kfreebsd, mips and mipsel. * Refresh all patches. * debian/control.in: - Set the debhelper compatibility level to 13. * debian/rules: - Stop overriding dh_missing, no longer needed with dh compat 13. webkit2gtk (2.42.3-1~deb12u1) bookworm-security; urgency=medium . * Rebuild for bookworm-security. - Fixes CVE-2023-42916 and CVE-2023-42917. * Disable JPEG XL to avoid adding new dependencies. - debian/control.in: Remove build dependency on libjxl-dev. - debian/rules: Build with -DUSE_JPEGXL=OFF. webkit2gtk (2.42.3-1~deb11u1) bullseye-security; urgency=medium . * Rebuild for bullseye-security. - Fixes CVE-2023-42916 and CVE-2023-42917. * gcc 10 segfaults when building webkit in amd64 (see #1008098) so use clang instead. Keep using gcc in other architectures because clang has problems in at least i386, arm64 and mipsel (see #1010329 and #1016811). - debian/rules: Tell CMake to use clang. - debian/control.in: Build depend on clang. * Build libsoup2 packages only. - debian/rules: Set ENABLE_SOUP3=NO, ENABLE_GTK4=NO and USE_PREBUILT_DOCS=YES. - debian/control.in: Remove build dependency on ccache. * debian/rules: - Disable USE_AVI, USE_GBM, USE_GSTREAMER_TRANSCODER and USE_JPEGXL due to missing or additional build dependencies. * debian/control.in: - Don't require version 1.20.0 of libgstreamer-plugins-bad1.0-dev. - Remove build dependency on libjxl-dev. * debian/patches/disable-dmabuf.patch: - Disable the DMABuf renderer in all cases in bullseye (see #1054101). webkit2gtk (2.42.2-1) unstable; urgency=high . * New upstream release. * debian/copyright: - Update copyright information of all files. webkit2gtk (2.42.2-1~deb12u1) bookworm-security; urgency=medium . * Rebuild for bookworm-security. - Fixes CVE-2023-41983 and CVE-2023-42852. * Disable JPEG XL to avoid adding new dependencies. - debian/control.in: Remove build dependency on libjxl-dev. - debian/rules: Build with -DUSE_JPEGXL=OFF. wordpress (5.7.11+dfsg1-0+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload. * Fix CVE-2024-31210, CVE-2023-39999, CVE-2023-38000, CVE-2023-5561, CVE-2023-2745. Several security vulnerabilities have been discovered in Wordpress, a popular content management framework, which may lead to exposure of sensitive information to an unauthorized actor in WordPress or allowing unauthenticated attackers to discern the email addresses of users who have published public posts on an affected website via an Oracle style attack. Furthermore this update resolves a possible cross-site-scripting vulnerability, a PHP File Upload bypass via the plugin installer and a possible remote code execution vulnerability which requires an attacker to control all the properties of a deserialized object though. wpa (2:2.9.0-21+deb11u1) bullseye; urgency=high . * Non-maintainer upload on behalf of the Security Team. * Fix CVE-2023-52160 (Closes: #1064061): The implementation of PEAP in wpa_supplicant allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks. xorg-server (2:1.20.11-1+deb11u13) bullseye-security; urgency=high . * render: Avoid possible double-free in ProcRenderAddGlyphs() xorg-server (2:1.20.11-1+deb11u12) bullseye-security; urgency=high . * CVE-2024-31080: Heap buffer overread/data leakage in ProcXIGetSelectedEvents * CVE-2024-31081: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice * CVE-2024-31082: Heap buffer overread/data leakage in ProcAppleDRICreatePixmap * CVE-2024-31083: User-after-free in ProcRenderAddGlyphs yard (0.9.24-1+deb11u1) bullseye-security; urgency=medium . * CVE-2024-27285 (Closes: #1065118) ======================================= Sat, 10 Feb 2024 - Debian 11.9 released ======================================= ========================================================================= [Date: Sat, 10 Feb 2024 11:45:16 -0000] [ftpmaster: Archive Administrator] Removed the following packages from oldstable: gimp-dds | 3.0.1-1 | source gimp-dds | 3.0.1-1+b1 | amd64, arm64, armel, armhf, i386, mips64el, mipsel, ppc64el, s390x Closed bugs: 1056711 ------------------- Reason ------------------- RM: gimp-dds/3.0.1-1 ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 10 Feb 2024 11:54:06 -0000] [ftpmaster: Mark Hymers] Removed the following packages from oldstable: btrfs-modules-5.10.0-22-s390x-di | 5.10.178-3 | s390x btrfs-modules-5.10.0-27-s390x-di | 5.10.205-2 | s390x cdrom-core-modules-5.10.0-22-s390x-di | 5.10.178-3 | s390x cdrom-core-modules-5.10.0-27-s390x-di | 5.10.205-2 | s390x crc-modules-5.10.0-22-s390x-di | 5.10.178-3 | s390x crc-modules-5.10.0-27-s390x-di | 5.10.205-2 | s390x crypto-dm-modules-5.10.0-22-s390x-di | 5.10.178-3 | s390x crypto-dm-modules-5.10.0-27-s390x-di | 5.10.205-2 | s390x crypto-modules-5.10.0-22-s390x-di | 5.10.178-3 | s390x crypto-modules-5.10.0-27-s390x-di | 5.10.205-2 | s390x dasd-extra-modules-5.10.0-22-s390x-di | 5.10.178-3 | s390x dasd-extra-modules-5.10.0-27-s390x-di | 5.10.205-2 | s390x dasd-modules-5.10.0-22-s390x-di | 5.10.178-3 | s390x dasd-modules-5.10.0-27-s390x-di | 5.10.205-2 | s390x ext4-modules-5.10.0-22-s390x-di | 5.10.178-3 | s390x ext4-modules-5.10.0-27-s390x-di | 5.10.205-2 | s390x f2fs-modules-5.10.0-22-s390x-di | 5.10.178-3 | s390x f2fs-modules-5.10.0-27-s390x-di | 5.10.205-2 | s390x fat-modules-5.10.0-22-s390x-di | 5.10.178-3 | s390x fat-modules-5.10.0-27-s390x-di | 5.10.205-2 | s390x fuse-modules-5.10.0-22-s390x-di | 5.10.178-3 | s390x fuse-modules-5.10.0-27-s390x-di | 5.10.205-2 | s390x isofs-modules-5.10.0-22-s390x-di | 5.10.178-3 | s390x isofs-modules-5.10.0-27-s390x-di | 5.10.205-2 | s390x kernel-image-5.10.0-22-s390x-di | 5.10.178-3 | s390x kernel-image-5.10.0-27-s390x-di | 5.10.205-2 | s390x linux-headers-5.10.0-22-s390x | 5.10.178-3 | s390x linux-headers-5.10.0-27-s390x | 5.10.205-2 | s390x linux-image-5.10.0-22-s390x | 5.10.178-3 | s390x linux-image-5.10.0-22-s390x-dbg | 5.10.178-3 | s390x linux-image-5.10.0-27-s390x | 5.10.205-2 | s390x linux-image-5.10.0-27-s390x-dbg | 5.10.205-2 | s390x loop-modules-5.10.0-22-s390x-di | 5.10.178-3 | s390x loop-modules-5.10.0-27-s390x-di | 5.10.205-2 | s390x md-modules-5.10.0-22-s390x-di | 5.10.178-3 | s390x md-modules-5.10.0-27-s390x-di | 5.10.205-2 | s390x mtd-core-modules-5.10.0-22-s390x-di | 5.10.178-3 | s390x mtd-core-modules-5.10.0-27-s390x-di | 5.10.205-2 | s390x multipath-modules-5.10.0-22-s390x-di | 5.10.178-3 | s390x multipath-modules-5.10.0-27-s390x-di | 5.10.205-2 | s390x nbd-modules-5.10.0-22-s390x-di | 5.10.178-3 | s390x nbd-modules-5.10.0-27-s390x-di | 5.10.205-2 | s390x nic-modules-5.10.0-22-s390x-di | 5.10.178-3 | s390x nic-modules-5.10.0-27-s390x-di | 5.10.205-2 | s390x scsi-core-modules-5.10.0-22-s390x-di | 5.10.178-3 | s390x scsi-core-modules-5.10.0-27-s390x-di | 5.10.205-2 | s390x scsi-modules-5.10.0-22-s390x-di | 5.10.178-3 | s390x scsi-modules-5.10.0-27-s390x-di | 5.10.205-2 | s390x udf-modules-5.10.0-22-s390x-di | 5.10.178-3 | s390x udf-modules-5.10.0-27-s390x-di | 5.10.205-2 | s390x xfs-modules-5.10.0-22-s390x-di | 5.10.178-3 | s390x xfs-modules-5.10.0-27-s390x-di | 5.10.205-2 | s390x ------------------- Reason ------------------- [auto-cruft] NBS (no longer built by linux) ---------------------------------------------- ========================================================================= ========================================================================= [Date: Sat, 10 Feb 2024 11:54:18 -0000] [ftpmaster: Mark Hymers] Removed the following packages from oldstable: affs-modules-5.10.0-22-4kc-malta-di | 5.10.178-3 | mipsel affs-modules-5.10.0-27-4kc-malta-di | 5.10.205-2 | mipsel ata-modules-5.10.0-22-4kc-malta-di | 5.10.178-3 | mipsel ata-modules-5.10.0-27-4kc-malta-di | 5.10.205-2 | mipsel btrfs-modules-5.10.0-22-4kc-malta-di | 5.10.178-3 | mipsel btrfs-modules-5.10.0-27-4kc-malta-di | 5.10.205-2 | mipsel cdrom-core-modules-5.10.0-22-4kc-malta-di | 5.10.178-3 | mipsel cdrom-core-modules-5.10.0-27-4kc-malta-di | 5.10.205-2 | mipsel crc-modules-5.10.0-22-4kc-malta-di