Hi I would like to upload another Linux upload, version 6.1.20-1 to unstable (aimed to move to bookworm). It consists of importing as usual the new stable series, 6.1.16 up to 6.1.20, including CVE fixes for CVE-2023-1032, CVE-2023-1076, CVE-2023-1077, CVE-2023-1079, CVE-2023-1118, CVE-2023-25012 and CVE-2023-28466. We have again an ABI bump icluded. Other packaging changes are mainly to add further support for Debian installation and support for hardware or features. Listing the full additional changes they are: * [arm64,armhf,riscv64] drivers/ata: Enable AHCI_DWC as module (Closes: #1032362) * [x86] drivers/platform/x86: Enable THINKPAD_LMI as module (Closes: #1032399) * [rt] Refresh "printk: Bring back the RT bits." for context changes in 6.1.16 * Bump ABI to 7 * net/sched: Drop setting of NET_CLS_TCINDEX (retired upstream) * net/kcm: Enable AF_KCM as module (Closes: #1023958) * wifi: mt76: do not run mt76_unregister_device() on unregistered hw This prevents a kernel panic when unloading the module, which happens within the installer after firmware files have been deployed, at least with mt7921e (Closes: #1029116). Thanks to Helmut Grohne for the initial patch, which led upstream to propose this patch. * udeb: Add michael_mic to crypto-modules, for ath11k and others. Thanks to Nicolas Dandrimont for reporting and Benoît Chauvet for testing (See: #1032140). * [powerpc/powerpc64,ppc64el] udeb: add DRM ast driver to fb-modules (Closes: #990016) * Enable modules to be used by rasdaemon tool on Intel platforms (Closes: #1032467) - [amd64] drivers/edac: Enable EDAC_IGEN6 as module - [x86] drivers/acpi/apei: Enable ACPI_APEI_EINJ as module * Enable important configs for ChromeOS boards: - Enable GOOGLE_VPD, GOOGLE_SMI, GOOGLE_FRAMEBUFFER_COREBOOT as modules - [x86] Enable FB_SIMPLE as built-in - [x86,armhf,arm64] Change GOOGLE_FRAMEBUFFER_COREBOOT and GOOGLE_COREBOOT_TABLE to built-in (except cloud-*) - [x86,arm64] Enable CHROMEOS_ACPI as module - [x86,arm64] Enable TCG_TIS_SPI_CR50 as built-in - [x86,arm64] Enable TCG_TIS_I2C_CR50 as module I cannot completely exclude there will be no regressions, as it includes as well a stable import which was following the merge window for 6.3 upstream, this is defintively bigger as the other rounds. But I'm following the exact same strategy for those imports as we would do for the point release. Once we are confident with the unstable upload, I should fill an unblock request for the release team. Regards, Salvatore
Attachment:
signature.asc
Description: PGP signature