-
Notifications
You must be signed in to change notification settings - Fork 0
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Announcement for Linux 4.13 from September 3rd, 2017 [1][2]: > So last week was actually somewhat eventful, but not enough to push me > to delay 4.13. > > Most of the changes since rc7 are actually networking fixes, the bulk > of them to various drivers. With apologies to the authors of said > patches, they don't look all that interesting (which is definitely > exactly what you want just before a release). Details in the appended > shortlog. > > Note that the shortlog below is obviously only since rc7 - the _full_ > 4.13 log is much too big to post and nobody sane would read it. So if > you're interested in all the rest of it, get the git tree and limit > the logs to the files you are interested in if you crave details. > > No, the excitement was largely in the mmu notification layer, where we > had a fairly last-minute regression and some discussion about the > problem. Lots of kudos to Jérôme Glisse for jumping on it, and > implementing the fix. > > What's nice to see is that the regression pointed out a nasty and not > very well documented (or thought out) part of the mmu notifiers, and > the fix not only fixed the problem, but did so by cleaning up and > documenting what the right behavior should be, and furthermore did so > by getting rid of the problematic notifier and actually removing > almost two hundred lines in the process. > > I love seeing those kinds of fixes. Better, smaller, code. > > The other excitement this week was purely personal, consisting of > seven hours of pure agony due to a kidney stone. I'm all good, but it > sure _felt_ a lot longer than seven hours, and I don't even want to > imagine what it is for people that have had the experience drag out > for longer. Ugh. > > Anyway, on to actual 4.13 issues. > > While we've had lots of changes all over (4.13 was not particularly > big, but even a "solidly average" release is not exactly small), one > very _small_ change merits some extra attention, because it's one of > those very rare changes where we change behavior due to security > issues, and where people may need to be aware of that behavior change > when upgrading. > > This time it's not really a kernel security issue, but a generic > protocol security issue. > > The change in question is simply changing the default cifs behavior: > instead of defaulting to SMB 1.0 (which you really should not use: > just google for "stop using SMB1" or similar), the default cifs mount > now defaults to a rather more modern SMB 3.0. > > Now, because you shouldn't have been using SMB1 anyway, this shouldn't > affect anybody. But guess what? It almost certainly does affect some > people, because they blithely continued using SMB1 without really > thinking about it. > > And you certainly _can_ continue to use SMB1, but due to the default > change, now you need to be *aware* of it. You may need to add an > explicit "vers=1.0" to your mount options in /etc/fstab or similar if > you *really* want SMB1. > > But if the new default of 3.0 doesn't work (because you still use a > pterodactyl as a windshield wiper), before you go all the way back to > the bad old days and use that "vers=1.0", you might want to try > "vers=2.1". Because let's face it, SMB1 is just bad, bad, bad. > > Anyway, most people won't notice at all. And the ones that do notice > can check their current situation (just look at the output of "mount" > and see if you have any cifs things there), and you really should > update from the default even if you are *not* upgrading kernels. > > Ok, enough about that. It was literally a two-liner change top > defaults - out of the million or so lines of the full 4.13 patch > changing real code. > > Go get the new kernel, > > Linus [1] https://lkml.org/lkml/2017/9/3/155 [2] https://www.heise.de/ct/artikel/Die-Neuerungen-von-Linux-4-13-3771362.html
Announcement and change-log are available online [1][2]. [1] https://lkml.org/lkml/2017/9/10/9 [2] https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.1
Announcement and change-log are available online [1][2]. [1] https://lkml.org/lkml/2017/9/14/393 [2] https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.2
Announcement and change-log are available online [1][2]. [1] https://lkml.org/lkml/2017/9/20/184 [2] https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.3
Announcement and change-log are available online [1][2]. [1] https://lkml.org/lkml/2017/9/28/154 [2] https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.4
Announcement and change-log are available online [1][2]. > Makefile | 2 > arch/arm64/include/asm/pgtable.h | 2 > arch/arm64/kernel/head.S | 1 > arch/arm64/mm/fault.c | 2 > arch/mips/kernel/perf_event_mipsxx.c | 3 > arch/powerpc/kernel/eeh.c | 4 > arch/powerpc/kernel/eeh_dev.c | 18 - > arch/powerpc/kernel/ptrace.c | 2 > arch/powerpc/kvm/book3s_hv.c | 2 > arch/powerpc/kvm/book3s_hv_rm_xive.c | 1 > arch/powerpc/kvm/book3s_hv_rmhandlers.S | 17 + > arch/powerpc/kvm/book3s_xive.c | 1 > arch/powerpc/kvm/book3s_xive_template.c | 7 > arch/powerpc/platforms/pseries/mobility.c | 4 > arch/s390/include/asm/pgtable.h | 4 > arch/s390/kernel/perf_cpum_sf.c | 9 > arch/s390/mm/gup.c | 7 > arch/x86/kernel/fpu/regset.c | 9 > arch/x86/kernel/fpu/signal.c | 4 > arch/x86/kernel/kvm.c | 3 > arch/x86/kvm/vmx.c | 256 +++++++++++++------------- > arch/x86/mm/fault.c | 47 ++-- > block/bsg-lib.c | 1 > crypto/drbg.c | 8 > drivers/base/power/main.c | 9 > drivers/base/power/opp/core.c | 7 > drivers/block/brd.c | 2 > drivers/crypto/talitos.c | 9 > drivers/dax/super.c | 21 +- > drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c | 189 +++++++++++++++++++ > drivers/gpu/drm/etnaviv/etnaviv_gem.c | 3 > drivers/gpu/drm/etnaviv/etnaviv_gem_submit.c | 6 > drivers/gpu/drm/exynos/exynos_drm_drv.c | 4 > drivers/gpu/drm/i915/gvt/cfg_space.c | 113 ++++------- > drivers/gpu/drm/i915/intel_dsi.c | 11 - > drivers/gpu/drm/radeon/radeon_device.c | 2 > drivers/infiniband/hw/cxgb4/cm.c | 9 > drivers/infiniband/ulp/ipoib/ipoib_ib.c | 13 - > drivers/md/dm-integrity.c | 6 > drivers/md/dm-linear.c | 15 - > drivers/md/dm-stripe.c | 20 -- > drivers/md/dm.c | 19 - > drivers/md/md.c | 72 ++++--- > drivers/md/md.h | 1 > drivers/md/raid5.c | 13 + > drivers/mmc/core/queue.c | 7 > drivers/mmc/host/sdhci-pci-core.c | 15 + > drivers/mtd/mtdpart.c | 8 > drivers/mtd/nand/atmel/pmecc.c | 2 > drivers/net/wireless/mac80211_hwsim.c | 2 > drivers/nvdimm/namespace_devs.c | 9 > drivers/nvdimm/pmem.c | 7 > drivers/nvme/host/pci.c | 66 ++++-- > drivers/pci/pci-sysfs.c | 11 - > drivers/platform/x86/fujitsu-laptop.c | 10 - > drivers/scsi/aacraid/aachba.c | 12 - > drivers/scsi/aacraid/aacraid.h | 5 > drivers/scsi/aacraid/src.c | 2 > drivers/scsi/scsi_transport_fc.c | 2 > drivers/scsi/scsi_transport_iscsi.c | 2 > drivers/video/fbdev/aty/atyfb_base.c | 2 > fs/btrfs/inode.c | 20 ++ > fs/btrfs/ioctl.c | 6 > fs/btrfs/relocation.c | 2 > fs/cifs/cifsfs.c | 2 > fs/cifs/cifsglob.h | 6 > fs/cifs/connect.c | 32 ++- > fs/cifs/file.c | 7 > fs/cifs/inode.c | 15 + > fs/cifs/smb2ops.c | 40 ++++ > fs/cifs/smb2pdu.c | 111 +++++++++-- > fs/cifs/smb2pdu.h | 2 > fs/dax.c | 4 > fs/gfs2/glock.c | 14 - > fs/proc/array.c | 9 > fs/read_write.c | 4 > fs/xfs/xfs_ioctl.c | 3 > include/linux/dax.h | 5 > include/linux/device-mapper.h | 3 > include/linux/key.h | 2 > include/net/mac80211.h | 15 - > kernel/exit.c | 23 +- > kernel/extable.c | 45 +++- > kernel/futex.c | 33 ++- > kernel/irq/chip.c | 2 > kernel/irq/generic-chip.c | 1 > kernel/irq/irqdesc.c | 24 -- > kernel/irq/msi.c | 5 > kernel/rcu/tree.c | 10 + > kernel/seccomp.c | 23 +- > kernel/sysctl.c | 3 > kernel/trace/trace.c | 12 - > kernel/trace/trace_stack.c | 15 - > net/ceph/osdmap.c | 35 ++- > net/mac80211/agg-rx.c | 32 ++- > net/mac80211/ht.c | 6 > net/mac80211/ieee80211_i.h | 4 > net/mac80211/iface.c | 17 + > net/mac80211/offchannel.c | 2 > net/mac80211/tx.c | 36 ++- > net/wireless/nl80211.c | 3 > security/keys/Kconfig | 4 > security/keys/big_key.c | 138 ++++++-------- > security/keys/internal.h | 2 > security/keys/key.c | 2 > security/keys/keyctl.c | 5 > security/keys/keyring.c | 37 +-- > security/keys/process_keys.c | 6 > tools/testing/selftests/seccomp/seccomp_bpf.c | 18 + > 109 files changed, 1242 insertions(+), 723 deletions(-) [1] https://lkml.org/lkml/2017/10/5/93 [2] https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.5
Announcement and change-log are available online [1][2]: > Documentation/filesystems/overlayfs.txt | 5 > Makefile | 2 > arch/arm64/boot/dts/marvell/armada-ap806.dtsi | 4 > arch/arm64/kernel/armv8_deprecated.c | 2 > arch/arm64/kernel/cpufeature.c | 2 > arch/powerpc/kernel/dt_cpu_ftrs.c | 4 > arch/powerpc/kernel/exceptions-64s.S | 24 ++ > arch/powerpc/kernel/signal_64.c | 13 + > arch/powerpc/kvm/book3s_xive.c | 5 > arch/powerpc/kvm/book3s_xive.h | 1 > arch/powerpc/platforms/powernv/setup.c | 10 > arch/x86/include/asm/kvm_para.h | 4 > arch/x86/kernel/kvm.c | 14 - > arch/x86/kvm/mmu.c | 2 > arch/x86/net/bpf_jit_comp.c | 4 > block/bsg-lib.c | 27 +- > drivers/auxdisplay/charlcd.c | 11 - > drivers/auxdisplay/panel.c | 11 - > drivers/base/arch_topology.c | 14 - > drivers/base/platform.c | 3 > drivers/clk/samsung/clk-exynos4.c | 15 + > drivers/gpu/drm/i915/intel_audio.c | 5 > drivers/gpu/drm/i915/intel_bios.c | 7 > drivers/gpu/drm/i915/intel_modes.c | 17 + > drivers/hid/hid-rmi.c | 13 - > drivers/hid/i2c-hid/i2c-hid.c | 3 > drivers/hid/wacom_sys.c | 7 > drivers/hid/wacom_wac.c | 110 ++++++++-- > drivers/hv/channel_mgmt.c | 4 > drivers/hv/hv_fcopy.c | 4 > drivers/hwtracing/intel_th/pci.c | 5 > drivers/hwtracing/stm/core.c | 2 > drivers/iio/adc/ad7793.c | 4 > drivers/iio/adc/ad_sigma_delta.c | 28 ++ > drivers/iio/adc/mcp320x.c | 25 +- > drivers/iio/adc/stm32-adc.c | 2 > drivers/iio/adc/twl4030-madc.c | 10 > drivers/iio/industrialio-core.c | 4 > drivers/iio/pressure/bmp280-core.c | 2 > drivers/iio/trigger/stm32-timer-trigger.c | 4 > drivers/isdn/i4l/isdn_ppp.c | 37 ++- > drivers/md/dm-core.h | 1 > drivers/md/dm-crypt.c | 5 > drivers/md/dm-ioctl.c | 37 ++- > drivers/md/dm.c | 10 > drivers/mmc/core/mmc.c | 36 +-- > drivers/net/bonding/bond_main.c | 17 - > drivers/net/bonding/bond_options.c | 3 > drivers/net/dsa/mv88e6xxx/chip.c | 6 > drivers/net/ethernet/ibm/emac/mal.c | 3 > drivers/net/ethernet/mellanox/mlx5/core/ipoib/ipoib.c | 3 > drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 38 ++- > drivers/net/ethernet/qualcomm/emac/emac-mac.c | 3 > drivers/net/ethernet/realtek/8139too.c | 5 > drivers/net/ethernet/rocker/rocker_tlv.h | 48 ++-- > drivers/net/ethernet/stmicro/stmmac/stmmac_platform.c | 1 > drivers/net/phy/xilinx_gmii2rgmii.c | 2 > drivers/net/tun.c | 8 > drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c | 37 +-- > drivers/net/wireless/broadcom/brcm80211/brcmfmac/fwil_types.h | 5 > drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 10 > drivers/nvme/host/pci.c | 14 - > drivers/scsi/scsi_scan.c | 3 > drivers/scsi/sd.c | 35 ++- > drivers/staging/iio/adc/ad7192.c | 4 > drivers/staging/media/imx/imx-media-of.c | 2 > drivers/staging/vc04_services/interface/vchiq_arm/vchiq_2835_arm.c | 6 > drivers/usb/class/cdc-wdm.c | 4 > drivers/usb/core/config.c | 16 + > drivers/usb/core/devio.c | 11 - > drivers/usb/core/hub.c | 2 > drivers/usb/core/message.c | 4 > drivers/usb/dwc3/ep0.c | 7 > drivers/usb/gadget/function/f_mass_storage.c | 27 -- > drivers/usb/gadget/function/f_mass_storage.h | 14 - > drivers/usb/gadget/legacy/inode.c | 46 +++- > drivers/usb/gadget/legacy/mass_storage.c | 26 -- > drivers/usb/gadget/udc/atmel_usba_udc.c | 4 > drivers/usb/gadget/udc/core.c | 3 > drivers/usb/gadget/udc/dummy_hcd.c | 56 ++++- > drivers/usb/gadget/udc/renesas_usb3.c | 19 + > drivers/usb/host/pci-quirks.c | 10 > drivers/usb/host/xhci-hub.c | 14 - > drivers/usb/host/xhci-pci.c | 12 - > drivers/usb/host/xhci-plat.c | 16 - > drivers/usb/host/xhci.c | 3 > drivers/usb/host/xhci.h | 10 > drivers/usb/renesas_usbhs/fifo.c | 21 + > drivers/usb/storage/transport.c | 14 + > drivers/usb/storage/uas-detect.h | 15 - > drivers/usb/storage/uas.c | 10 > drivers/usb/storage/unusual_devs.h | 7 > drivers/uwb/hwa-rc.c | 2 > drivers/uwb/uwbd.c | 12 - > fs/btrfs/ctree.h | 2 > fs/btrfs/extent_io.c | 2 > fs/overlayfs/copy_up.c | 6 > fs/overlayfs/dir.c | 20 - > fs/overlayfs/namei.c | 1 > fs/overlayfs/overlayfs.h | 1 > fs/overlayfs/ovl_entry.h | 3 > fs/overlayfs/readdir.c | 6 > fs/overlayfs/super.c | 27 +- > fs/overlayfs/util.c | 24 ++ > fs/userfaultfd.c | 66 +++++- > fs/xattr.c | 2 > include/asm-generic/percpu.h | 24 ++ > include/linux/iio/adc/ad_sigma_delta.h | 3 > include/linux/mmu_notifier.h | 5 > include/linux/trace_events.h | 1 > include/net/netlink.h | 73 +++++- > include/net/protocol.h | 4 > include/net/route.h | 4 > include/net/sctp/ulpevent.h | 6 > include/net/tcp.h | 2 > include/net/udp.h | 2 > include/scsi/scsi_device.h | 1 > include/scsi/scsi_devinfo.h | 1 > include/uapi/linux/bpf.h | 2 > include/uapi/linux/dm-ioctl.h | 4 > include/uapi/linux/usb/ch9.h | 1 > kernel/bpf/core.c | 2 > kernel/bpf/syscall.c | 6 > kernel/bpf/verifier.c | 3 > kernel/cgroup/cgroup.c | 8 > kernel/events/core.c | 3 > kernel/trace/ftrace.c | 14 - > lib/ratelimit.c | 4 > mm/ksm.c | 5 > mm/madvise.c | 12 - > mm/oom_kill.c | 16 + > mm/rodata_test.c | 2 > mm/swap.c | 4 > mm/swap_state.c | 11 + > net/core/dev.c | 1 > net/core/filter.c | 12 - > net/core/gen_estimator.c | 4 > net/core/rtnetlink.c | 3 > net/core/sock.c | 7 > net/dsa/slave.c | 28 +- > net/ipv4/ip_input.c | 25 +- > net/ipv4/ip_vti.c | 3 > net/ipv4/route.c | 46 ++-- > net/ipv4/tcp_ipv4.c | 9 > net/ipv4/tcp_output.c | 33 ++- > net/ipv4/udp.c | 36 ++- > net/ipv6/addrconf.c | 5 > net/ipv6/ip6_gre.c | 22 +- > net/ipv6/ip6_tunnel.c | 8 > net/ipv6/ip6_vti.c | 3 > net/ipv6/udp.c | 1 > net/l2tp/l2tp_core.c | 10 > net/l2tp/l2tp_core.h | 5 > net/l2tp/l2tp_eth.c | 51 ---- > net/netlink/af_netlink.c | 7 > net/openvswitch/datapath.c | 3 > net/packet/af_packet.c | 28 +- > net/sched/act_api.c | 6 > net/sched/cls_matchall.c | 1 > net/sched/sch_generic.c | 1 > net/tipc/msg.c | 2 > net/wireless/nl80211.c | 14 + > security/smack/smack_lsm.c | 55 ++--- > sound/core/compress_offload.c | 3 > sound/pci/echoaudio/echoaudio.c | 6 > sound/usb/card.c | 20 + > sound/usb/usx2y/usb_stream.c | 6 > tools/testing/selftests/bpf/test_verifier.c | 16 + > 168 files changed, 1389 insertions(+), 671 deletions(-) [1] https://lkml.org/lkml/2017/10/12/160 [2] https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.6
Announcement and change-log are available online [1][2]. [1] https://lwn.net/Articles/736392/ [2] https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.7
Announcement and change-log are available online [1][2]. [1] http://lkml.iu.edu/hypermail/linux/kernel/1710.2/02537.html [2] https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.8
Announcement and change-log are available online [1][2]. [1] https://lkml.org/lkml/2017/10/22/117 [2] https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.9
Announcement and change-log are available online [1][2]. [1] https://lkml.org/lkml/2017/10/27/153 [2] https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.10
Announcement and change-log are available online [1][2]. Enable TLS. ``` diff -u /boot/config-4.13.10.mx64.186 /boot/config-4.13.11.mx64.187 --- /boot/config-4.13.10.mx64.186 2017-10-30 14:15:39.000000000 +0100 +++ /boot/config-4.13.11.mx64.187 2017-11-02 23:30:22.000000000 +0100 @@ -1,6 +1,6 @@ # # Automatically generated file; DO NOT EDIT. -# Linux/x86 4.13.10 Kernel Configuration +# Linux/x86 4.13.11 Kernel Configuration # CONFIG_64BIT=y CONFIG_X86_64=y @@ -52,7 +52,7 @@ CONFIG_INIT_ENV_ARG_LIMIT=32 CONFIG_CROSS_COMPILE="" # CONFIG_COMPILE_TEST is not set -CONFIG_LOCALVERSION=".mx64.186" +CONFIG_LOCALVERSION=".mx64.187" CONFIG_LOCALVERSION_AUTO=y CONFIG_HAVE_KERNEL_GZIP=y CONFIG_HAVE_KERNEL_BZIP2=y @@ -795,7 +795,7 @@ CONFIG_PACKET_DIAG=m CONFIG_UNIX=m CONFIG_UNIX_DIAG=m -# CONFIG_TLS is not set +CONFIG_TLS=m CONFIG_XFRM=y CONFIG_XFRM_ALGO=m CONFIG_XFRM_USER=m @@ -4424,7 +4424,7 @@ # # Authenticated Encryption with Associated Data # -# CONFIG_CRYPTO_CCM is not set +CONFIG_CRYPTO_CCM=m CONFIG_CRYPTO_GCM=m # CONFIG_CRYPTO_CHACHA20POLY1305 is not set CONFIG_CRYPTO_SEQIV=m ``` [1] https://lkml.org/lkml/2017/11/2/220 [2] https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.11
Announcement and change-log are available online [1][2]. [1] https://lkml.org/lkml/2017/11/8/207 [2] https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.12
Linux 4.14 was released, so Linux 4.13.12 is not interesting to us anymore.
b6764c9
to
81f09dc
Compare
Sign in
to join this conversation on GitHub.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This request adds the Linux 4.13 bee files to the archive. In the end, nothing is added.
These are tested on keineahnung.