linux-gcp 6.11.0-1001.1 source package in Ubuntu

Changelog

linux-gcp (6.11.0-1001.1) oracular; urgency=medium

  * oracular/linux-gcp: 6.11.0-1001.1 -proposed tracker (LP: #2079971)

  * Packaging resync (LP: #1786013)
    - [Packaging] update update.conf
    - [Packaging] debian.gcp/dkms-versions -- update from kernel-versions
      (main/d2024.08.12)

  * Miscellaneous Ubuntu changes
    - [packaging] move to 6.11 and oracular
    - [Config] updateconfigs following Ubuntu-6.11.0-7.7 rebase
    - [packaging] sync Build-Depends and Build-Depends-Indep wrt debian.master

  [ Ubuntu: 6.11.0-7.7 ]

  * oracular/linux: 6.11.0-7.7 -proposed tracker (LP: #2079949)
  * update apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor4.0.0 [1/99]: LSM: Infrastructure management of the sock
      security
    - SAUCE: apparmor4.0.0 [2/99]: LSM: Add the lsmblob data structure.
    - SAUCE: apparmor4.0.0 [3/99]: LSM: Use lsmblob in security_audit_rule_match
    - SAUCE: apparmor4.0.0 [4/99]: LSM: Call only one hook for audit rules
    - SAUCE: apparmor4.0.0 [5/99]: LSM: Add lsmblob_to_secctx hook
    - SAUCE: apparmor4.0.0 [6/99]: Audit: maintain an lsmblob in audit_context
    - SAUCE: apparmor4.0.0 [7/99]: LSM: Use lsmblob in security_ipc_getsecid
    - SAUCE: apparmor4.0.0 [8/99]: Audit: Update shutdown LSM data
    - SAUCE: apparmor4.0.0 [9/99]: LSM: Use lsmblob in security_current_getsecid
    - SAUCE: apparmor4.0.0 [10/99]: LSM: Use lsmblob in security_inode_getsecid
    - SAUCE: apparmor4.0.0 [11/99]: Audit: use an lsmblob in audit_names
    - SAUCE: apparmor4.0.0 [12/99]: LSM: Create new security_cred_getlsmblob LSM
      hook
    - SAUCE: apparmor4.0.0 [13/99]: Audit: Change context data from secid to
      lsmblob
    - SAUCE: apparmor4.0.0 [14/99]: Netlabel: Use lsmblob for audit data
    - SAUCE: apparmor4.0.0 [15/99]: LSM: Ensure the correct LSM context releaser
    - SAUCE: apparmor4.0.0 [16/99]: LSM: Use lsmcontext in
      security_secid_to_secctx
    - SAUCE: apparmor4.0.0 [17/99]: LSM: Use lsmcontext in
      security_lsmblob_to_secctx
    - SAUCE: apparmor4.0.0 [18/99]: LSM: Use lsmcontext in
      security_inode_getsecctx
    - SAUCE: apparmor4.0.0 [19/99]: LSM: lsmcontext in
      security_dentry_init_security
    - SAUCE: apparmor4.0.0 [20/99]: LSM: security_lsmblob_to_secctx module
      selection
    - SAUCE: apparmor4.0.0 [21/99]: Audit: Create audit_stamp structure
    - SAUCE: apparmor4.0.0 [22/99]: Audit: Allow multiple records in an
      audit_buffer
    - SAUCE: apparmor4.0.0 [23/99]: Audit: Add record for multiple task security
      contexts
    - SAUCE: apparmor4.0.0 [24/99]: audit: multiple subject lsm values for
      netlabel
    - SAUCE: apparmor4.0.0 [25/99]: Audit: Add record for multiple object contexts
    - SAUCE: apparmor4.0.0 [26/99]: LSM: Remove unused lsmcontext_init()
    - SAUCE: apparmor4.0.0 [27/99]: LSM: Improve logic in security_getprocattr
    - SAUCE: apparmor4.0.0 [28/99]: LSM: secctx provider check on release
    - SAUCE: apparmor4.0.0 [29/99]: LSM: Single calls in socket_getpeersec hooks
    - SAUCE: apparmor4.0.0 [30/99]: LSM: Exclusive secmark usage
    - SAUCE: apparmor4.0.0 [31/99]: LSM: Identify which LSM handles the context
      string
    - SAUCE: apparmor4.0.0 [32/99]: AppArmor: Remove the exclusive flag
    - SAUCE: apparmor4.0.0 [33/99]: LSM: Add mount opts blob size tracking
    - SAUCE: apparmor4.0.0 [34/99]: LSM: allocate mnt_opts blobs instead of module
      specific data
    - SAUCE: apparmor4.0.0 [35/99]: LSM: Infrastructure management of the key
      security blob
    - SAUCE: apparmor4.0.0 [36/99]: LSM: Infrastructure management of the mnt_opts
      security blob
    - SAUCE: apparmor4.0.0 [37/99]: LSM: Remove lsmblob scaffolding
    - SAUCE: apparmor4.0.0 [38/99]: LSM: Allow reservation of netlabel
    - SAUCE: apparmor4.0.0 [39/99]: LSM: restrict security_cred_getsecid() to a
      single LSM
    - SAUCE: apparmor4.0.0 [40/99]: Smack: Remove LSM_FLAG_EXCLUSIVE
    - SAUCE: apparmor4.0.0 [41/99]: LSM stacking v39: UBUNTU: SAUCE: apparmor4.0.0
      [41/99]: add/use fns to print hash string hex value
    - SAUCE: apparmor4.0.0 [42/99]: patch to provide compatibility with v2.x net
      rules
    - SAUCE: apparmor4.0.0 [43/99]: add unpriviled user ns mediation
    - SAUCE: apparmor4.0.0 [44/99]: Add sysctls for additional controls of unpriv
      userns restrictions
    - SAUCE: apparmor4.0.0 [45/99]: af_unix mediation
    - SAUCE: apparmor4.0.0 [46/99]: Add fine grained mediation of posix mqueues
    - SAUCE: apparmor4.0.0 [47/99] fixup inode_set_attr
    - SAUCE: apparmor4.0.0 [48/99]: setup slab cache for audit data
    - SAUCE: apparmor4.0.0 [49/99]: Improve debug print infrastructure
    - SAUCE: apparmor4.0.0 [50/99]: add the ability for profiles to have a
      learning cache
    - SAUCE: apparmor4.0.0 [51/99]: enable userspace upcall for mediation
    - SAUCE: apparmor4.0.0 [52/99]: prompt - lock down prompt interface
    - SAUCE: apparmor4.0.0 [53/99]: prompt - allow controlling of caching of a
      prompt response
    - SAUCE: apparmor4.0.0 [54/99]: prompt - add refcount to audit_node in prep or
      reuse and delete
    - SAUCE: apparmor4.0.0 [55/99]: prompt - refactor to moving caching to
      uresponse
    - SAUCE: apparmor4.0.0 [56/99]: prompt - Improve debug statements
    - SAUCE: apparmor4.0.0 [57/99]: prompt - fix caching
    - SAUCE: apparmor4.0.0 [58/99]: prompt - rework build to use append fn, to
      simplify adding strings
    - SAUCE: apparmor4.0.0 [59/99]: prompt - refcount notifications
    - SAUCE: apparmor4.0.0 [60/99]: prompt - add the ability to reply with a
      profile name
    - SAUCE: apparmor4.0.0 [61/99]: prompt - fix notification cache when updating
    - SAUCE: apparmor4.0.0 [62/99]: prompt - add tailglob on name for cache
      support
    - SAUCE: apparmor4.0.0 [63/99]: prompt - allow profiles to set prompts as
      interruptible
    - SAUCE: apparmor4.0.0 [64/93] v6.8 prompt:fixup interruptible
    - SAUCE: apparmor4.0.0 [65/99]: prompt - add support for advanced filtering of
      notifications
    - SAUCE: apparmor4.0.0 [66/99]: userns - add the ability to reference a global
      variable for a feature value
    - SAUCE: apparmor4.0.0 [67/99]: userns - make it so special unconfined
      profiles can mediate user namespaces
    - SAUCE: apparmor4.0.0 [68/99]: add io_uring mediation
    - SAUCE: apparmor4.0.0 [69/99]: apparmor: fix oops when racing to retrieve
      notification
    - SAUCE: apparmor4.0.0 [70/99]: apparmor: fix notification header size
    - SAUCE: apparmor4.0.0 [71/99]: apparmor: fix request field from a prompt
      reply that denies all access
    - SAUCE: apparmor4.0.0 [72/99]: apparmor: open userns related sysctl so lxc
      can check if restriction are in place
    - SAUCE: apparmor4.0.0 [73/99]: apparmor: cleanup attachment perm lookup to
      use lookup_perms()
    - SAUCE: apparmor4.0.0 [74/99]: apparmor: remove redundant unconfined check.
    - SAUCE: apparmor4.0.0 [75/99]: apparmor: switch signal mediation to using
      RULE_MEDIATES
    - SAUCE: apparmor4.0.0 [76/99]: apparmor: ensure labels with more than one
      entry have correct flags
    - SAUCE: apparmor4.0.0 [77/99]: apparmor: remove explicit restriction that
      unconfined cannot use change_hat
    - SAUCE: apparmor4.0.0 [78/99]: apparmor: cleanup: refactor file_perm() to
      provide semantics of some checks
    - SAUCE: apparmor4.0.0 [79/99]: apparmor: carry mediation check on label
    - SAUCE: apparmor4.0.0 [80/99]: apparmor: convert easy uses of unconfined() to
      label_mediates()
    - SAUCE: apparmor4.0.0 [81/99]: apparmor: add additional flags to extended
      permission.
    - SAUCE: apparmor4.0.0 [82/99]: apparmor: add support for profiles to define
      the kill signal
    - SAUCE: apparmor4.0.0 [83/99]: apparmor: fix x_table_lookup when stacking is
      not the first entry
    - SAUCE: apparmor4.0.0 [84/99]: apparmor: allow profile to be transitioned
      when a user ns is created
    - SAUCE: apparmor4.0.0 [85/99]: apparmor: add ability to mediate caps with
      policy state machine
    - SAUCE: apparmor4.0.0 [86/99]: fixup notify
    - SAUCE: apparmor4.0.0 [87/99]: apparmor: add fine grained ipv4/ipv6 mediation
    - SAUCE: apparmor4.0.0 [88/99]: apparmor: disable tailglob responses for now
    - SAUCE: apparmor4.0.0 [89/99]: apparmor: Fix notify build warnings
    - SAUCE: apparmor4.0.0 [90/99]: fix reserved mem for when we save ipv6
      addresses
    - SAUCE: apparmor4.0.0 [91/99]: fix address mapping for recvfrom
    - SAUCE: apparmor4.0.0 [92/99]: apparmor: add support for 2^24 states to the
      dfa state machine.
    - SAUCE: apparmor4.0.0 [93/99]: apparmor: advertise to userspace support of
      user upcall for file rules.
    - SAUCE: apparmor4.0.0 [94/99]: apparmor: allocate xmatch for nullpdf inside
      aa_alloc_null
    - SAUCE: apparmor4.0.0 [95/99]: apparmor: properly handle cx/px lookup failure
      for complain
    - SAUCE: apparmor4.0.0 [96/99]: apparmor: fix prompt failing during large down
      loads
    - SAUCE: apparmor4.0.0 [97/99]: apparmor: fix allow field in notification
    - SAUCE: apparmor4.0.0 [98/99]: fix build error with !CONFIG_SECURITY
    - SAUCE: apparmor4.0.0 [99/99]: fix build error with in nfs4xdr
  * Intel Lunar Lake / Battlemage enablement (LP: #2076209)
    - drm/xe/lnl: Drop force_probe requirement
    - drm/xe: Support 'nomodeset' kernel command-line option
    - drm/i915/display: Plane capability for 64k phys alignment
    - drm/xe: Align all VRAM scanout buffers to 64k physical pages when needed.
    - drm/xe: Use separate rpm lockdep map for non-d3cold-capable devices
    - drm/xe: Fix NPD in ggtt_node_remove()
    - drm/xe/bmg: Drop force_probe requirement
    - drm/xe/gsc: Fix FW status if the firmware is already loaded
    - drm/xe/gsc: Track the platform in the compatibility version
    - drm/xe/gsc: Wedge the device if the GSCCS reset fails
    - drm/i915/bios: Update new entries in VBT BDB block definitions
    - drm/xe/hwmon: Treat hwmon as a per-device concept
    - drm/xe: s/xe_tile_migrate_engine/xe_tile_migrate_exec_queue
    - drm/xe: Add xe_vm_pgtable_update_op to xe_vma_ops
    - drm/xe: Add xe_exec_queue_last_fence_test_dep
    - drm/xe: Add timeout to preempt fences
    - drm/xe: Convert multiple bind ops into single job
    - drm/xe: Update VM trace events
    - drm/xe: Update PT layer with better error handling
    - drm/xe: Add VM bind IOCTL error injection
    - dma-buf: Split out dma fence array create into alloc and arm functions
    - drm/xe: Invalidate media_gt TLBs in PT code
    - drm/i915/display: Fix BMG CCS modifiers
    - drm/xe: Use xe_pm_runtime_get in xe_bo_move() if reclaim-safe.
    - drm/xe: Remove extra dma_fence_put on xe_sync_entry_add_deps failure
  * [24.10 FEAT] [KRN1911] Vertical CPU Polarization Support Stage 2
    (LP: #2072760)
    - s390/wti: Introduce infrastructure for warning track interrupt
    - s390/wti: Prepare graceful CPU pre-emption on wti reception
    - s390/wti: Add wti accounting for missed grace periods
    - s390/wti: Add debugfs file to display missed grace periods per cpu
    - s390/topology: Add sysctl handler for polarization
    - s390/topology: Add config option to switch to vertical during boot
    - s390/smp: Add cpu capacities
    - s390/hiperdispatch: Introduce hiperdispatch
    - s390/hiperdispatch: Add steal time averaging
    - s390/hiperdispatch: Add trace events
    - s390/hiperdispatch: Add hiperdispatch sysctl interface
    - s390/hiperdispatch: Add hiperdispatch debug attributes
    - s390/hiperdispatch: Add hiperdispatch debug counters
    - [Config] Initial set of new options HIPERDISPATCH_ON and
      SCHED_TOPOLOGY_VERTICAL to yes for s390x
  * Remove non-LPAE kernel flavor (LP: #2025265)
    - [Packaging] Drop control.d/vars.generic-lpae
  * generate and ship vmlinux.h to allow packages to build BPF CO-RE
    (LP: #2050083)
    - [Packaging] Don't call dh_all on linux-bpf-dev unless on master kernel
  * Miscellaneous Ubuntu changes
    - [Config] updateconfigs following v6.11-rc7 rebase

  [ Ubuntu: 6.11.0-6.6 ]

  * oracular/linux: 6.11.0-6.6 -proposed tracker (LP: #2077949)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/d2024.08.12)
    - [Packaging] update Ubuntu.md
  * Pull in latest X13s commits (LP: #2078929)
    - arm64: dts: qcom: sc8280xp-x13s: disable PCIe perst pull downs
    - arm64: dts: qcom: sc8280xp-x13s: clean up PCIe2a pinctrl node
    - media: qcom: camss: Remove use_count guard in stop_streaming
    - media: qcom: camss: Fix ordering of pm_runtime_enable
    - arm64: dts: qcom: sc8280xp-x13s: Enable RGB sensor
    - wifi: ath11k: fix NULL pointer dereference in ath11k_mac_get_eirp_power()
    - Revert "wifi: ath11k: restore country code during resume"
    - Revert "wifi: ath11k: support hibernation"
    - SAUCE: media: ov5675: Fix power on/off delay timings
    - SAUCE: media: dt-bindings: Document SC8280XP/SM8350 Venus
    - SAUCE: media: venus: core: Remove trailing commas from of match entries
    - SAUCE: media: venus: hfi_venus: Support only updating certain bits with
      presets
    - SAUCE: media: platform: venus: Add optional LLCC path
    - SAUCE: media: venus: core: Add SM8350 resource struct
    - SAUCE: media: venus: core: Add SC8280XP resource struct
    - SAUCE: arm64: dts: qcom: sc8280xp: Add Venus
    - SAUCE: arm64: dts: qcom: sc8280xp-x13s: Enable Venus
    - SAUCE: phy: qcom-qmp-combo: drop regulator loads
    - SAUCE: phy: qcom-edp: drop regulator loads
    - SAUCE: i2c: qcom-cci: Stop complaining about DT set clock rate
    - SAUCE: clk: qcom: gcc-sc8280xp: don't use parking clk_ops for QUPs
  * Intel Lunar Lake / Battlemage enablement (LP: #2076209)
    - drm/i915: Skip programming FIA link enable bits for MTL+
    - drm/i915: disable fbc due to Wa_16023588340
    - drm/xe/xe2lpm: Extend Wa_16021639441
    - drm/i915/display: Cache adpative sync caps to use it later
    - drm/xe: Generate oob before compiling anything
    - drm/i915/display: WA for Re-initialize dispcnlunitt1 xosc clock
    - drm/xe/gsc: add Battlemage support
    - drm/xe/migrate: Handle clear ccs logic for xe2 dgfx
    - drm/xe/migrate: Add helper function to program identity map
    - drm/xe/xe2: Introduce identity map for compressed pat for vram
    - drm/xe/xe_migrate: Handle migration logic for xe2+ dgfx
    - drm/xe/fbdev: Limit the usage of stolen for LNL+
    - drm/xe/uapi: Expose SIMD16 EU mask in topology query
    - drm/xe: Fix warning on unreachable statement
    - drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability
    - drm/i915/hdcp: Add encoder check in hdcp2_get_capability
    - drm/xe/hdcp: Check GSC structure validity
    - drm/i915/dp: Clear VSC SDP during post ddi disable routine
    - drm/xe/huc: Define HuC binary for LNL
    - drm/xe/gsc: Define GSC binary for LNL
    - drm/xe/huc: Define HuC binary for BMG
    - drm/xe/xe2hpg: Introduce performance tuning changes for Xe2_HPG
    - drm/i915/display/dp: Compute AS SDP when vrr is also enabled
    - drm/xe: Move and export xe_hw_engine lookup.
    - drm/xe/xe2: Enable Priority Mem Read
    - drm/xe/xe2: Introduce performance changes
    - drm/xe/xe2: Add performance turning changes
    - drm/xe/guc: Bump minimum required GuC version to v70.29.2
    - drm/xe/guc: Define GuC version v70.29.2 for BMG
    - drm/xe/guc: Enable w/a 14022293748 and 22019794406
    - drm/xe: Move enable host l2 VRAM post MCR init
    - drm/xe: Write all slices if its mcr register
    - drm/xe: Define STATELESS_COMPRESSION_CTRL as mcr register
    - drm/i915/pps: Disable DPLS_GATING around pps sequence
    - drm/xe: fix engine_class bounds check again
    - drm/xe/uc: Use managed bo for HuC and GSC objects
    - drm/xe: Use reserved copy engine for user binds on faulting devices
    - drm/xe/display: Match i915 driver suspend/resume sequences better
    - drm/i915: move rawclk from runtime to display runtime info
    - drm/xe/display: drop unused rawclk_freq and RUNTIME_INFO()
    - drm/i915/psr: Prevent Panel Replay if CRC calculation is enabled
    - drm/i915/display: Don't enable decompression on Xe2 with Tile4
    - drm/fourcc: define Intel Xe2 related tile4 ccs modifiers
    - drm/i915/display: allow creation of Xe2 ccs framebuffers
    - drm/xe/display: fix compat IS_DISPLAY_STEP() range end
    - drm/xe/display: remove intel_display_step_name() to simplify
    - drm/xe/display: remove the unused compat HAS_GMD_ID()
    - drm/xe/step: define more steppings E-J
    - drm/i915/display: rename IS_DISPLAY_IP_RANGE() to IS_DISPLAY_VER_FULL()
    - drm/i915/display: rename IS_DISPLAY_IP_STEP() to IS_DISPLAY_VER_STEP()
    - drm/i915/display: identify display steppings in display probe
    - drm/i915/display: switch to display detected steppings
    - drm/i915: remove display stepping handling
    - drm/xe: remove display stepping handling
    - drm/xe: Removed unused xe_ggtt_printk
    - drm/xe: Introduce GGTT documentation
    - drm/xe: Remove unnecessary drm_mm.h includes
    - drm/{i915, xe}: Avoid direct inspection of dpt_vma from outside dpt
    - drm/xe: Encapsulate drm_mm_node inside xe_ggtt_node
    - drm/xe: Rename xe_ggtt_node related functions
    - drm/xe: Limit drm_mm_node_allocated access to xe_ggtt_node
    - drm/xe: Introduce xe_ggtt_largest_hole
    - drm/xe: Introduce xe_ggtt_print_holes
    - drm/xe: Refactor xe_ggtt balloon functions to make the node clear
    - drm/xe: Make xe_ggtt_node struct independent
    - drm/xe: Fix missing runtime outer protection for ggtt_remove_node
    - drm/xe: Move ggtt_fini to devm managed
    - drm/xe: Set firmware state to loadable before registering guc_fini_hw
    - drm/xe: Drop warn on xe_guc_pc_gucrc_disable in guc pc fini
    - drm/xe: Move hw_engine_fini to devm managed
    - drm/xe: Update xe_sa to use xe_managed_bo_create_pin_map
    - drm/xe: Suspend/resume user access only during system s/r
    - drm/xe: Handle polling only for system s/r in xe_display_pm_suspend/resume()
    - drm/xe/display: handle HPD polling in display runtime suspend/resume
    - drm/xe: Fix total initialization in xe_ggtt_print_holes()
  * Missing device ID for amd_atl for AMD platforms Kraken and Strix-Halo
    (LP: #2077922)
    - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
    - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h
  * generate and ship vmlinux.h to allow packages to build BPF CO-RE
    (LP: #2050083)
    - [Packaging] add linux-bpf-dev package
    - [Packaging] do not attempt to generate BTF header on armhf
  * Fix ethernet performance on JSL and EHL (LP: #2077858)
    - intel_idle: Disable promotion to C1E on Jasper Lake and Elkhart Lake
  * Regression: unable to reach low idle states on Tiger Lake (LP: #2072679)
    - SAUCE: PCI: ASPM: Allow OS to configure ASPM where BIOS is incapable of
    - SAUCE: PCI: vmd: Let OS control ASPM for devices under VMD domain
  * Random flickering with Intel i915 (Gen9 GPUs in 6th-8th gen CPUs) on Linux
    6.8 (LP: #2062951)
    - SAUCE: iommu/intel: disable DMAR for SKL integrated gfx
  * Make linux-tools-common Provide linux-cpupower (LP: #1960841)
    - [Packaging] Add linux-cpupower to linux-tools-common Provides
  * Miscellaneous Ubuntu changes
    - SAUCE: apparmor4.0.0: fix build error with !CONFIG_SECURITY
    - [Config] updateconfigs following v6.11-rc6 rebase
    - SAUCE: apparmor4.0.0: fix build after rebase to v6.11-rc6
    - [Packaging] perf: reenable libtraceevent

  [ Ubuntu: 6.11.0-5.5 ]

  * oracular/linux: 6.11.0-5.5 -proposed tracker (LP: #2077454)
  * GDS force mitigation re-enabled in 6.10 (and 6.11) causing crashes
    (LP: #2077145)
    - [Config] Force disable CONFIG_MITIGATION_GDS_FORCE again
  * Miscellaneous Ubuntu changes
    - [Config] updateconfigs following v6.11-rc5 rebase

  [ Ubuntu: 6.11.0-4.4 ]

  * oracular/linux: 6.11.0-4.4 -proposed tracker (LP: #2077394)
  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
  * Miscellaneous Ubuntu changes
    - [Config] Disable CONFIG_DRM_I915_REPLAY_GPU_HANGS_API
    - [Packaging] carry ELF_PACKAGE_METADATA into relinking
    - [Packaging] Rename to linux

  [ Ubuntu: 6.11.0-3.3 ]

  * dummy entry

  [ Ubuntu: 6.11.0-3.3 ]

  * oracular/linux-unstable: 6.11.0-3.3 -proposed tracker (LP: #2077292)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/d2024.08.12)
  * Disable PCI_DYNAMIC_OF_NODES in Ubuntu (LP: #2074376)
    - [Config] Disable PCI_DYNAMIC_OF_NODES
  * Miscellaneous Ubuntu changes
    - [Config] updateconfigs following v6.11-rc3 rebase

  [ Ubuntu: 6.11.0-2.2 ]

  * oracular/linux-unstable: 6.11.0-2.2 -proposed tracker (LP: #2076564)
  * please help enable more EROFS compression algorithms (LP: #2074049)
    - [Config] enable LZMA and ZSTD file compressions in EROFS
  * Enable CONFIG_EXFAT_FS in s390x too (LP: #2076428)
    - [Config] Enable EXFAT_FS on s390x too
  * Miscellaneous Ubuntu changes
    - [Packaging] Disable tools/perf on armhf (FTBFS)
    - [Config] toolchain version update
  * Miscellaneous Ubuntu changes
    - UBUNTU: Rebase on v6.11-rc3

  [ Ubuntu: 6.11.0-1.1 ]

  * oracular/linux-unstable: 6.11.0-1.1 -proposed tracker (LP: #2076116)
  * Miscellaneous Ubuntu changes
    - [packaging] move to v6.11 and rename to linux-unstable
    - [Config] updateconfigs following v6.11-rc2 rebase
    - SAUCE: hwmon: Fix aaeon driver for 6.11.
    - debian.master/dkms-versions: temporarily remove all dkms

  [ Ubuntu: 6.11.0-0.0 ]

  * Dummy entry.

  [ Ubuntu: 6.10.0-18.18 ]

  * oracular/linux: 6.10.0-18.18 -proposed tracker (LP: #2073754)
  * net:fib_rule_tests.sh in ubuntu_kselftests_net fails on Noble (LP: #2066332)
    - Revert "UBUNTU: SAUCE: selftests: net: fix "from" match test in
      fib_rule_tests.sh"
  * Pull-request to address TPM bypass issue (LP: #2037688)
    - [Config]: Configure TPM drivers as builtins for arm64 in annotations
  * kdump doesn't work with UEFI secure boot and kernel lockdown enabled on
    ARM64 (LP: #2033007)
    - [Config]: Enable CONFIG_KEXEC_IMAGE_VERIFY_SIG on arm64
  * Miscellaneous Ubuntu changes
    - SAUCE: s390/setup: Fix __pa/__va for modules under non-GPL licenses
  * Miscellaneous upstream changes
    - Revert "UBUNTU: [Packaging] debian.master/dkms-versions -- disable zfs for
      s390x"

  [ Ubuntu: 6.10.0-17.17 ]

  * oracular/linux: 6.10.0-17.17 -proposed tracker (LP: #2073091)
  * Miscellaneous Ubuntu changes
    - rebase on v6.10

  [ Ubuntu: 6.10.0-16.16 ]

  * oracular/linux: 6.10.0-16.16 -proposed tracker (LP: #2072507)
  * Miscellaneous Ubuntu changes
    - rebase on v6.10-rc7

  [ Ubuntu: 6.10.0-15.15 ]

  * oracular/linux: 6.10.0-15.15 -proposed tracker (LP: #2071915)
  * [UBUNTU 24.04] IOMMU DMA mode changed in kernel config causes massive
    throughput degradation for PCI-related network workloads (LP: #2071471)
    - [Config] Set IOMMU_DEFAULT_DMA_STRICT=n and IOMMU_DEFAULT_DMA_LAZY=yes for
      s390x
  * Miscellaneous Ubuntu changes
    - rename to linux

  [ Ubuntu: 6.10.0-14.14 ]

  * oracular/linux-unstable: 6.10.0-14.14 -proposed tracker (LP: #2071786)
  * zfs-dkms FTBFS on Linux 6.10/s390x (LP: #2071774)
    - [Packaging] debian.master/dkms-versions -- disable zfs for s390x
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/d2024.06.11)
  * update apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor4.0.0 [42/92]: LSM stacking v39: UBUNTU: SAUCE: apparmor4.0.0
      [42/92]: add/use fns to print hash string hex value
    - SAUCE: apparmor4.0.0 [43/92]: patch to provide compatibility with v2.x net
      rules
    - SAUCE: apparmor4.0.0 [44/92]: add unpriviled user ns mediation
    - SAUCE: apparmor4.0.0 [45/92]: Add sysctls for additional controls of unpriv
      userns restrictions
    - SAUCE: apparmor4.0.0 [46/92]: af_unix mediation
    - SAUCE: apparmor4.0.0 [47/92]: Add fine grained mediation of posix mqueues
    - SAUCE: apparmor4.0.0 [49/92]: setup slab cache for audit data
    - SAUCE: apparmor4.0.0 [50/92]: Improve debug print infrastructure
    - SAUCE: apparmor4.0.0 [51/92]: add the ability for profiles to have a
      learning cache
    - SAUCE: apparmor4.0.0 [52/92]: enable userspace upcall for mediation
    - SAUCE: apparmor4.0.0 [53/92]: prompt - lock down prompt interface
    - SAUCE: apparmor4.0.0 [54/92]: prompt - allow controlling of caching of a
      prompt response
    - SAUCE: apparmor4.0.0 [55/92]: prompt - add refcount to audit_node in prep or
      reuse and delete
    - SAUCE: apparmor4.0.0 [56/92]: prompt - refactor to moving caching to
      uresponse
    - SAUCE: apparmor4.0.0 [57/92]: prompt - Improve debug statements
    - SAUCE: apparmor4.0.0 [58/92]: prompt - fix caching
    - SAUCE: apparmor4.0.0 [59/92]: prompt - rework build to use append fn, to
      simplify adding strings
    - SAUCE: apparmor4.0.0 [60/92]: prompt - refcount notifications
    - SAUCE: apparmor4.0.0 [61/92]: prompt - add the ability to reply with a
      profile name
    - SAUCE: apparmor4.0.0 [62/92]: prompt - fix notification cache when updating
    - SAUCE: apparmor4.0.0 [63/92]: prompt - add tailglob on name for cache
      support
    - SAUCE: apparmor4.0.0 [64/92]: prompt - allow profiles to set prompts as
      interruptible
    - SAUCE: apparmor4.0.0 [65/93] v6.8 prompt:fixup interruptible
    - SAUCE: apparmor4.0.0 [69/92]: add io_uring mediation
    - SAUCE: apparmor4.0.0 [70/92]: apparmor: fix oops when racing to retrieve
      notification
    - SAUCE: apparmor4.0.0 [71/92]: apparmor: fix notification header size
    - SAUCE: apparmor4.0.0 [72/92]: apparmor: fix request field from a prompt
      reply that denies all access
    - SAUCE: apparmor4.0.0 [73/92]: apparmor: open userns related sysctl so lxc
      can check if restriction are in place
    - SAUCE: apparmor4.0.0 [74/92]: apparmor: cleanup attachment perm lookup to
      use lookup_perms()
    - SAUCE: apparmor4.0.0 [75/92]: apparmor: remove redundant unconfined check.
    - SAUCE: apparmor4.0.0 [76/92]: apparmor: switch signal mediation to using
      RULE_MEDIATES
    - SAUCE: apparmor4.0.0 [77/92]: apparmor: ensure labels with more than one
      entry have correct flags
    - SAUCE: apparmor4.0.0 [78/92]: apparmor: remove explicit restriction that
      unconfined cannot use change_hat
    - SAUCE: apparmor4.0.0 [79/92]: apparmor: cleanup: refactor file_perm() to
      provide semantics of some checks
    - SAUCE: apparmor4.0.0 [80/92]: apparmor: carry mediation check on label
    - SAUCE: apparmor4.0.0 [81/92]: apparmor: convert easy uses of unconfined() to
      label_mediates()
    - SAUCE: apparmor4.0.0 [82/92]: apparmor: add additional flags to extended
      permission.
    - SAUCE: apparmor4.0.0 [83/92]: apparmor: add support for profiles to define
      the kill signal
    - SAUCE: apparmor4.0.0 [84/92]: apparmor: fix x_table_lookup when stacking is
      not the first entry
    - SAUCE: apparmor4.0.0 [85/92]: apparmor: allow profile to be transitioned
      when a user ns is created
    - SAUCE: apparmor4.0.0 [86/92]: apparmor: add ability to mediate caps with
      policy state machine
    - SAUCE: apparmor4.0.0 [87/92]: fixup notify
    - SAUCE: apparmor4.0.0 [88/92]: apparmor: add fine grained ipv4/ipv6 mediation
    - SAUCE: apparmor4.0.0 [89/92]: apparmor: disable tailglob responses for now
    - SAUCE: apparmor4.0.0 [90/92]: apparmor: Fix notify build warnings
    - SAUCE: apparmor4.0.0 [91/92]: fix reserved mem for when we save ipv6
      addresses
    - [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS
  * linux-gcp 6.8.0-1005.5 (+ others) Noble kernel regression with new apparmor
    profiles/features (LP: #2061851)
    - SAUCE: apparmor4.0.0 [92/92]: fix address mapping for recvfrom
  * update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]
    apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in mantic
    (LP: #2032602)
    - SAUCE: apparmor4.0.0 [66/92]: prompt - add support for advanced filtering of
      notifications
    - SAUCE: apparmor4.0.0 [67/92]: userns - add the ability to reference a global
      variable for a feature value
    - SAUCE: apparmor4.0.0 [68/92]: userns - make it so special unconfined
      profiles can mediate user namespaces
  * Miscellaneous Ubuntu changes
    - SAUCE: apparmor4.0.0 [1/92]: LSM: Infrastructure management of the sock
      security
    - SAUCE: apparmor4.0.0 [2/92]: LSM: Add the lsmblob data structure.
    - SAUCE: apparmor4.0.0 [3/92]: LSM: Use lsmblob in security_audit_rule_match
    - SAUCE: apparmor4.0.0 [4/92]: LSM: Call only one hook for audit rules
    - SAUCE: apparmor4.0.0 [5/92]: LSM: Add lsmblob_to_secctx hook
    - SAUCE: apparmor4.0.0 [6/92]: Audit: maintain an lsmblob in audit_context
    - SAUCE: apparmor4.0.0 [7/92]: LSM: Use lsmblob in security_ipc_getsecid
    - SAUCE: apparmor4.0.0 [8/92]: Audit: Update shutdown LSM data
    - SAUCE: apparmor4.0.0 [9/92]: LSM: Use lsmblob in security_current_getsecid
    - SAUCE: apparmor4.0.0 [10/92]: LSM: Use lsmblob in security_inode_getsecid
    - SAUCE: apparmor4.0.0 [11/92]: Audit: use an lsmblob in audit_names
    - SAUCE: apparmor4.0.0 [12/92]: LSM: Create new security_cred_getlsmblob LSM
      hook
    - SAUCE: apparmor4.0.0 [13/92]: Audit: Change context data from secid to
      lsmblob
    - SAUCE: apparmor4.0.0 [14/92]: Netlabel: Use lsmblob for audit data
    - SAUCE: apparmor4.0.0 [15/92]: LSM: Ensure the correct LSM context releaser
    - SAUCE: apparmor4.0.0 [16/92]: LSM: Use lsmcontext in
      security_secid_to_secctx
    - SAUCE: apparmor4.0.0 [17/92]: LSM: Use lsmcontext in
      security_lsmblob_to_secctx
    - SAUCE: apparmor4.0.0 [18/92]: LSM: Use lsmcontext in
      security_inode_getsecctx
    - SAUCE: apparmor4.0.0 [19/92]: LSM: lsmcontext in
      security_dentry_init_security
    - SAUCE: apparmor4.0.0 [20/92]: LSM: security_lsmblob_to_secctx module
      selection
    - SAUCE: apparmor4.0.0 [21/92]: Audit: Create audit_stamp structure
    - SAUCE: apparmor4.0.0 [22/92]: Audit: Allow multiple records in an
      audit_buffer
    - SAUCE: apparmor4.0.0 [23/92]: Audit: Add record for multiple task security
      contexts
    - SAUCE: apparmor4.0.0 [24/92]: audit: multiple subject lsm values for
      netlabel
    - SAUCE: apparmor4.0.0 [25/92]: Audit: Add record for multiple object contexts
    - SAUCE: apparmor4.0.0 [26/92]: LSM: Remove unused lsmcontext_init()
    - SAUCE: apparmor4.0.0 [27/92]: LSM: Improve logic in security_getprocattr
    - SAUCE: apparmor4.0.0 [28/92]: LSM: secctx provider check on release
    - SAUCE: apparmor4.0.0 [29/92]: LSM: Single calls in socket_getpeersec hooks
    - SAUCE: apparmor4.0.0 [30/92]: LSM: Exclusive secmark usage
    - SAUCE: apparmor4.0.0 [31/92]: LSM: Identify which LSM handles the context
      string
    - SAUCE: apparmor4.0.0 [32/92]: AppArmor: Remove the exclusive flag
    - SAUCE: apparmor4.0.0 [33/92]: LSM: Add mount opts blob size tracking
    - SAUCE: apparmor4.0.0 [34/92]: LSM: allocate mnt_opts blobs instead of module
      specific data
    - SAUCE: apparmor4.0.0 [35/92]: LSM: Infrastructure management of the key
      security blob
    - SAUCE: apparmor4.0.0 [36/92]: LSM: Infrastructure management of the mnt_opts
      security blob
    - SAUCE: apparmor4.0.0 [37/92]: LSM: Remove lsmblob scaffolding
    - SAUCE: apparmor4.0.0 [38/92]: LSM: Allow reservation of netlabel
    - SAUCE: apparmor4.0.0 [39/92]: LSM: Correct handling of ENOSYS in
      inode_setxattr
    - SAUCE: apparmor4.0.0 [40/92]: LSM: restrict security_cred_getsecid() to a
      single LSM
    - SAUCE: apparmor4.0.0 [41/92]: Smack: Remove LSM_FLAG_EXCLUSIVE
  * Miscellaneous upstream changes
    - fixup inode_set_attr

  [ Ubuntu: 6.10.0-13.13 ]

  * oracular/linux-unstable: 6.10.0-13.13 -proposed tracker (LP: #2071598)
  * Miscellaneous Ubuntu changes
    - zfs FTBFS on s390x - temporarily disable it
  * Miscellaneous Ubuntu changes
    - rebase on v6.10-rc6

  [ Ubuntu: 6.10.0-12.12 ]

  * oracular/linux-unstable: 6.10.0-12.12 -proposed tracker (LP: #2071461)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/d2024.06.11)
  * noble:linux: ADT ubuntu-regression-suite misses fakeroot dependency
    (LP: #2070042)
    - [DEP-8] Add missing fakeroot dependency
  * Add Real-time Linux Analysis tool (rtla) to linux-tools (LP: #2059080)
    - [Packaging] add Real-time Linux Analysis tool (rtla) to linux-tools
    - [Packaging] update dependencies for rtla
  * failed to enable IPU6 camera sensor on kernel >= 6.8: ivsc_ace
    intel_vsc-5db76cf6-0a68-4ed6-9b78-0361635e2447: switch camera to host
    failed: -110 (LP: #2067364)
    - SAUCE: media: ivsc: csi: don't count privacy on as error
    - SAUCE: media: ivsc: csi: add separate lock for v4l2 control handler
    - SAUCE: media: ivsc: csi: remove privacy status in struct mei_csi
    - SAUCE: mei: vsc: Enhance IVSC chipset stability during warm reboot
    - SAUCE: mei: vsc: Enhance SPI transfer of IVSC rom
    - SAUCE: mei: vsc: Utilize the appropriate byte order swap function
    - SAUCE: mei: vsc: Prevent timeout error with added delay post-firmware
      download
  * Miscellaneous Ubuntu changes
    - SAUCE: nvme-tcp: Do not terminate commands when in RESETTING
    - SAUCE: nvme-tcp: make 'err_work' a delayed work
    - SAUCE: nvme-tcp: delay error recovery until the next KATO interval
    - SAUCE: nvme-tcp: add recovery_delay to sysfs
    - [Packaging] rtla: workaround the empty LD variable
    - [Packaging] Check do_lib_rust before linking Rust lib files
    - [Config] toolchain version update

  [ Ubuntu: 6.10.0-11.11 ]

  * oracular/linux-unstable: 6.10.0-11.11 -proposed tracker (LP: #2070368)
  * Provide python perf module (LP: #2051560)
    - [Packaging] enable perf python module
    - [Packaging] provide a wrapper module for python-perf
  * Miscellaneous Ubuntu changes
    - [Config] toolchain version update
    - [Packaging] Fix python3-setuptools build-dep for tools/perf

  [ Ubuntu: 6.10.0-10.10 ]

  * oracular/linux-unstable: 6.10.0-10.10 -proposed tracker (LP: #2070030)
  * Miscellaneous Ubuntu changes
    - [Config] arm64: disable RELR
    - [Config] updateconfigs following v6.10-rc5 rebase
  * Miscellaneous Ubuntu changes
    - rebase on v6.10-rc5

  [ Ubuntu: 6.10.0-7.7 ]

  * oracular/linux-unstable: 6.10.0-7.7 -proposed tracker (LP: #2069713)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/d2024.06.11)
  * Miscellaneous Ubuntu changes
    - SAUCE: Revert "mm: remove follow_pfn"
    - [Packaging] debian.master/dkms-versions -- remove zfs-linux

  [ Ubuntu: 6.10.0-6.6 ]

  * oracular/linux-unstable: 6.10.0-6.6 -proposed tracker (LP: #2069590)
  * Miscellaneous Ubuntu changes
    - rebase on v6.10-rc4
    - [Config] updateconfigs following v6.10-rc4 rebase
  * Miscellaneous Ubuntu changes
    - rebase on v6.10-rc4

  [ Ubuntu: 6.10.0-5.5 ]

  * oracular/linux-unstable: 6.10.0-5.5 -proposed tracker (LP: #2069031)
  * Miscellaneous Ubuntu changes
    - [packaging] remove the kernel configuration for perf
    - [Packaging] dkms-build: Support DEB822 sources
  * Miscellaneous Ubuntu changes
    - rebase on v6.10-rc3

  [ Ubuntu: 6.10.0-4.4 ]

  * oracular/linux-unstable: 6.10.0-4.4 -proposed tracker (LP: #2067887)
  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
  * Miscellaneous Ubuntu changes
    - rebase on v6.10-rc2

  [ Ubuntu: 6.10.0-3.3 ]

  * oracular/linux-unstable: 6.10.0-3.3 -proposed tracker (LP: #2067718)
  * Miscellaneous Ubuntu changes
    - SAUCE: [packaging] `make scripts_gdb` target  is broken upstream, to avoid a
      FTBFS, do not try to install GDB_SCRIPTS

  [ Ubuntu: 6.10.0-2.2 ]

  * oracular/linux-unstable: 6.10.0-2.2 -proposed tracker (LP: #2067473)
  * Miscellaneous Ubuntu changes
    - SAUCE: update hv_fcopy_daemon target to hv_fcopy_uio_daemon (following
      upstream rename)
  * Miscellaneous upstream changes
    - Revert "UBUNTU: [Packaging] update dependencies for rtla"
    - Revert "UBUNTU: [Packaging] add Real-time Linux Analysis tool (rtla) to
      linux-tools"
    - Revert "UBUNTU: [Packaging] provide a wrapper module for python-perf"
    - Revert "UBUNTU: [Packaging] enable perf python module"

  [ Ubuntu: 6.10.0-1.1 ]

  * oracular/linux-unstable: 6.10.0-1.1 -proposed tracker (LP: #2067390)
  * Miscellaneous Ubuntu changes
    - [packaging] move to v6.10 and rename to linux-unstable
    - [Config] updateconfigs following v6.10-rc1 rebase
    - SAUCE: (lockdown) security: use default hook return value
    - debian.master/dkms-versions: temporarily remove all dkms
  * Miscellaneous Ubuntu changes
    - rebase on v6.10-rc1

  [ Ubuntu: 6.10.0-0.0 ]

  * noble/linux: 6.8.0-34.34 -proposed tracker (LP: #2065167)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2024.04.29)

 -- Paolo Pisati <email address hidden>  Tue, 10 Sep 2024 09:22:17 +0200