[linux] branch stretch-security updated (ad775f6 -> ffa8fbd)

[debian-kernel at lists.debian.org]

This is an automated email from the git hooks/post-receive script.

carnil pushed a change to branch stretch-security
in repository linux.

      from  ad775f6   Correct error in description of "bpf/verifier: Fix states_equal() ..."
       new  7d7df21   x86: setup PCID, preparation work for KPTI.
       new  4d63600   Add Kernel Page Table Isolation patchset.
       new  9379351   fix fuzz when applying patch against 4.9.65
       new  70e79d8   Bump ABI to 5.
       new  1c5f2c0   Update changelog entries
       new  8650a88   Fix one entry which kept the PATCH prefix
       new  ffa8fbd   Prepare to release linux (4.9.65-3+deb9u2).

The 7 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


Summary of changes:
 debian/changelog                                   |   51 +
 debian/config/amd64/config                         |    1 +
 debian/config/defines                              |    2 +-
 ...dd-nokaiser-boot-option-using-alternative.patch |  652 ++++++++++
 .../kaiser-align-addition-to-x86-mm-makefile.patch |   26 +
 ...sm-tlbflush.h-handle-nopge-at-lower-level.patch |   86 ++
 ...aiser-cleanups-while-trying-for-gold-link.patch |  134 ++
 .../kaiser-delete-kaiser_real_switch-option.patch  |   79 ++
 .../all/kpti/kaiser-disabled-on-xen-pv.patch       |   42 +
 .../kaiser-do-not-set-_page_nx-on-pgd_none.patch   |  204 +++
 ...op-is_atomic-arg-to-kaiser_pagetable_walk.patch |   53 +
 .../kaiser-enhanced-by-kernel-and-user-pcids.patch |  402 ++++++
 ...iser-enomem-if-kaiser_pagetable_walk-null.patch |   52 +
 ...r-fix-build-and-fixme-in-alloc_ldt_struct.patch |   53 +
 .../all/kpti/kaiser-fix-perf-crashes.patch         |  150 +++
 ...r-fix-regs-to-do_nmi-ifndef-config_kaiser.patch |   72 ++
 ...er-fix-unlikely-error-in-alloc_ldt_struct.patch |   33 +
 .../all/kpti/kaiser-kaiser-depends-on-smp.patch    |   54 +
 ...er_flush_tlb_on_return_to_user-check-pcid.patch |   86 ++
 ...-kaiser_remove_mapping-move-along-the-pgd.patch |   50 +
 .../all/kpti/kaiser-kernel-address-isolation.patch |  979 +++++++++++++++
 ...new_mm_cr3-let-switch_user_cr3-flush-user.patch |  392 ++++++
 .../features/all/kpti/kaiser-merged-update.patch   | 1297 ++++++++++++++++++++
 ...name-that-0x1000-kaiser_shadow_pgd_offset.patch |   66 +
 ...noid_entry-pass-cr3-need-to-paranoid_exit.patch |  166 +++
 ...kaiser-pcid-0-for-kernel-and-128-for-user.patch |  129 ++
 ...ck-map-page_size-at-thread_size-page_size.patch |  139 +++
 .../kaiser-tidied-up-asm-kaiser.h-somewhat.patch   |  105 ++
 ...ied-up-kaiser_add-remove_mapping-slightly.patch |   50 +
 ...ternative-instead-of-x86_cr3_pcid_noflush.patch |  130 ++
 ...vmstat-show-nr_kaisertable-as-nr_overhead.patch |  116 ++
 ...86_cr3_pcid_noflush-and-x86_cr3_pcid_user.patch |  141 +++
 .../kpti/kpti-rename-to-page_table_isolation.patch |  329 +++++
 .../all/kpti/kpti-report-when-enabled.patch        |   48 +
 ...mdline-parsing-for-options-with-arguments.patch |  178 +++
 .../x86-kaiser-check-boottime-cmdline-params.patch |  123 ++
 .../x86-kaiser-move-feature-detection-up.patch     |   79 ++
 .../all/kpti/x86-kaiser-reenable-paravirt.patch    |   28 +
 ...-and-simplify-x86_feature_kaiser-handling.patch |   97 ++
 ...-64-Fix-reboot-interaction-with-CR4.PCIDE.patch |   45 +
 ...d-the-nopcid-boot-option-to-turn-off-PCID.patch |   77 ++
 .../x86-mm-Disable-PCID-on-32-bit-kernels.patch    |   82 ++
 ...-mm-Enable-CR4.PCIDE-on-supported-systems.patch |  114 ++
 .../x86-paravirt-dont-patch-flush_tlb_single.patch |   69 ++
 debian/patches/series                              |   45 +
 45 files changed, 7305 insertions(+), 1 deletion(-)
 create mode 100644 debian/patches/features/all/kpti/kaiser-add-nokaiser-boot-option-using-alternative.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-align-addition-to-x86-mm-makefile.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-asm-tlbflush.h-handle-nopge-at-lower-level.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-cleanups-while-trying-for-gold-link.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-delete-kaiser_real_switch-option.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-disabled-on-xen-pv.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-do-not-set-_page_nx-on-pgd_none.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-drop-is_atomic-arg-to-kaiser_pagetable_walk.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-enhanced-by-kernel-and-user-pcids.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-enomem-if-kaiser_pagetable_walk-null.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-fix-build-and-fixme-in-alloc_ldt_struct.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-fix-perf-crashes.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-fix-regs-to-do_nmi-ifndef-config_kaiser.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-fix-unlikely-error-in-alloc_ldt_struct.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-kaiser-depends-on-smp.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-kaiser_flush_tlb_on_return_to_user-check-pcid.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-kaiser_remove_mapping-move-along-the-pgd.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-kernel-address-isolation.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-load_new_mm_cr3-let-switch_user_cr3-flush-user.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-merged-update.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-name-that-0x1000-kaiser_shadow_pgd_offset.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-paranoid_entry-pass-cr3-need-to-paranoid_exit.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-pcid-0-for-kernel-and-128-for-user.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-stack-map-page_size-at-thread_size-page_size.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-tidied-up-asm-kaiser.h-somewhat.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-tidied-up-kaiser_add-remove_mapping-slightly.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-use-alternative-instead-of-x86_cr3_pcid_noflush.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-vmstat-show-nr_kaisertable-as-nr_overhead.patch
 create mode 100644 debian/patches/features/all/kpti/kaiser-x86_cr3_pcid_noflush-and-x86_cr3_pcid_user.patch
 create mode 100644 debian/patches/features/all/kpti/kpti-rename-to-page_table_isolation.patch
 create mode 100644 debian/patches/features/all/kpti/kpti-report-when-enabled.patch
 create mode 100644 debian/patches/features/all/kpti/x86-boot-add-early-cmdline-parsing-for-options-with-arguments.patch
 create mode 100644 debian/patches/features/all/kpti/x86-kaiser-check-boottime-cmdline-params.patch
 create mode 100644 debian/patches/features/all/kpti/x86-kaiser-move-feature-detection-up.patch
 create mode 100644 debian/patches/features/all/kpti/x86-kaiser-reenable-paravirt.patch
 create mode 100644 debian/patches/features/all/kpti/x86-kaiser-rename-and-simplify-x86_feature_kaiser-handling.patch
 create mode 100644 debian/patches/features/all/kpti/x86-mm-64-Fix-reboot-interaction-with-CR4.PCIDE.patch
 create mode 100644 debian/patches/features/all/kpti/x86-mm-Add-the-nopcid-boot-option-to-turn-off-PCID.patch
 create mode 100644 debian/patches/features/all/kpti/x86-mm-Disable-PCID-on-32-bit-kernels.patch
 create mode 100644 debian/patches/features/all/kpti/x86-mm-Enable-CR4.PCIDE-on-supported-systems.patch
 create mode 100644 debian/patches/features/all/kpti/x86-paravirt-dont-patch-flush_tlb_single.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/kernel/linux.git