linux-goldfish (3.4.0-4.27) xenial; urgency=low

  [ Andy Whitcroft ]

  * [Config] depend on kmod in preference to module-init-tools -- part 2
    - LP: #1541917

 -- Andy Whitcroft <apw@canonical.com>  Wed, 24 Feb 2016 19:20:23 +0000

linux-goldfish (3.4.0-4.26) xenial; urgency=low

  [ Andy Whitcroft ]

  * [Packaging] correct spelling of probabaly on the tools packages
    - LP: #1256822
  * [Config] depend on kmod in preference to module-init-tools
    - LP: #1541917

 -- Andy Whitcroft <apw@canonical.com>  Wed, 24 Feb 2016 11:59:42 +0000

linux-goldfish (3.4.0-4.24) wily; urgency=low

  [ Upstream Kernel Changes ]

  * audit: printk USER_AVC messages when audit isn't enabled
    - LP: #1473584

 -- Tim Gardner <tim.gardner@canonical.com>  Mon, 13 Jul 2015 14:57:44 -0700

linux-goldfish (3.4.0-4.23) utopic; urgency=low

  [ Andy Whitcroft ]

  * SAUCE: ensure that if the first firmware is top level the firmware
    directory is made.
    Fixes FTBS

 -- Tim Gardner <tim.gardner@canonical.com>  Mon, 22 Sep 2014 11:59:19 -0600

linux-goldfish (3.4.0-4.22) utopic; urgency=low

  [ John Johansen ]

  * SAUCE: (no-up) apparmor: Sync to apparmor3 - RC1 snapshot
    - LP: #1362199

  [ Tyler Hicks ]

  * Revert "SAUCE: (no-up) apparmor: fix disconnected bind mnts
    reconnection"
  * Revert "SAUCE: (no-up) apparmor fix: remove unused cxt var for
    unix_sendmsg"
  * Revert "SAUCE: (no-up) apparmor: use custom write_is_locked macro"
  * Revert "SAUCE: (no-up) apparmor: fix bug that constantly spam the
    console"
  * Revert "SAUCE: (no-up) apparmor: fix apparmor refcount bug in
    apparmor_kill"
  * Revert "SAUCE: (no-up) apparmor: fix refcount bug in apparmor
    pivotroot"
  * Revert "SAUCE: (no-up) apparmor: fix apparmor spams log with warning
    message"
  * Revert "SAUCE: (no-up) apparmor: update configs for apparmor 3 alpha 6"
  * Revert "SAUCE: (no-up) apparmor: Sync to apparmor 3 - alpha 6 snapshot"
  * SAUCE: (no-up) apparmor: update configs for apparmor3 - RC1

 -- Tim Gardner <tim.gardner@canonical.com>  Fri, 19 Sep 2014 09:47:58 -0600

linux-goldfish (3.4.0-4.21) utopic; urgency=low

  [ Upstream Kernel Changes ]

  * auditsc: audit_krule mask accesses need bounds checking
    - LP: #1325941
    - CVE-2014-3917
  * ptrace, x86: force IRET path after a ptrace_stop()
    - LP: #1337339
    - CVE-2014-4699
  * net/l2tp: don't fall back on UDP [get|set]sockopt
    - LP: #1341472
    - CVE-2014-4943

 -- Tim Gardner <tim.gardner@canonical.com>  Wed, 03 Sep 2014 12:29:01 -0700

linux-goldfish (3.4.0-4.20) utopic; urgency=low

  [ Tim Gardner ]

  * [Config] updateconfigs (fixes FTBS)

 -- Tim Gardner <tim.gardner@canonical.com>  Thu, 17 Jul 2014 10:22:25 -0600

linux-goldfish (3.4.0-4.19) utopic; urgency=low

  [ Tim Gardner ]

  * Rebase to https://android.googlesource.com/kernel/goldfish
    9ac497fb4f1974c006cf4a0a920cf05bfb747ac7
    -LP: #1342783

  [ Upstream Kernel Changes ]

  * rebase to https://android.googlesource.com/kernel/goldfish 9ac497fb4f1974c006cf4a0a920cf05bfb747ac7

 -- Tim Gardner <tim.gardner@canonical.com>  Thu, 17 Jul 2014 08:54:45 -0600

linux-goldfish (3.4.0-3.18) utopic; urgency=low

  [ Upstream Kernel Changes ]

  * tty: Correct tty buffer flush.
    - LP: #1329374

 -- Tim Gardner <tim.gardner@canonical.com>  Thu, 17 Jul 2014 06:26:03 -0600

linux-goldfish (3.4.0-3.17) utopic; urgency=low

  [ Javier Martinez Canillas ]

  * SAUCE: (no-up) apparmor: fix bug that constantly spam the console
    - LP: #1323526

  [ John Johansen ]

  * Revert "SAUCE: (no-up) apparmor: fix backtrace on non-smp, kernels."
  * Revert "SAUCE: apparmor: fix bad lock balance when introspecting
    policy"
  * Revert "SAUCE: apparmor: fix memleak of replacedby struct"
  * Revert "SAUCE: apparmor: fix memleak of the profile hash"
  * Revert "SAUCE: apparmor: allocate path lookup buffers during init"
  * Revert "SAUCE: apparmor: fix unix domain sockets to be mediated on
    connection"
  * Revert "SAUCE: (no-up) apparmor: Sync to apparmor 3 - alpha 4 snapshot"
  * SAUCE: (no-up) apparmor: Sync to apparmor 3 - alpha 6 snapshot
  * SAUCE: (no-up) apparmor: update configs for apparmor 3 alpha 6
  * SAUCE: (no-up) apparmor: fix apparmor spams log with warning message
    - LP: #1308761
  * SAUCE: (no-up) apparmor: fix refcount bug in apparmor pivotroot
    - LP: #1308765
  * SAUCE: (no-up) apparmor: fix apparmor refcount bug in apparmor_kill
    - LP: #1308764
  * SAUCE: (no-up) apparmor: use custom write_is_locked macro
    - LP: #1323530
  * SAUCE: (no-up) apparmor fix: remove unused cxt var for unix_sendmsg
  * SAUCE: (no-up) apparmor: fix disconnected bind mnts reconnection
    - LP: #1319984

  [ Tyler Hicks ]

  * [Config] CONFIG_ECRYPT_FS=y
  * [Config] CONFIG_DEFAULT_MMAP_MIN_ADDR varies by arch
  * [Config] Sync LSM config options
  * [Config] CONFIG_KEYS_DEBUG_PROC_KEYS=n
  * [Config] CONFIG_COMPAT_BRK=n
  * [Config] Sync crypto config options
  * [Config] Sync IPsec config options

  [ Upstream Kernel Changes ]

  * kernel/sys.c: fix stack memory content leak via UNAME26
    - CVE-2012-0957
  * use clamp_t in UNAME26 fix
    - CVE-2012-0957
  * ptrace: introduce signal_wake_up_state() and ptrace_signal_wake_up()
    - CVE-2013-0871
  * ptrace: ensure arch_ptrace/ptrace_request can never race with SIGKILL
    - CVE-2013-0871
  * wake_up_process() should be never used to wakeup a TASK_STOPPED/TRACED
    task
    - CVE-2013-0871
  * net: fix incorrect credentials passing
    - CVE-2013-1979
  * perf: Treat attr.config as u64 in perf_swevent_init()
    - CVE-2013-2094
  * iscsi-target: fix heap buffer overflow on error
    - CVE-2013-2850
  * ARM: 7809/1: perf: fix event validation for software group leaders
    - CVE-2013-4254
  * ARM: 7810/1: perf: Fix array out of bounds access in
    armpmu_map_hw_event()
    - CVE-2013-4254
  * n_tty: Fix n_tty_write crash when echoing in raw mode
    - CVE-2014-0196
  * floppy: ignore kernel-only members in FDRAWCMD ioctl input
    - CVE-2014-1737
  * floppy: don't write kernel-only members to FDRAWCMD ioctl output
    - CVE-2014-1738
  * futex: Test for pi_mutex on fault in futex_wait_requeue_pi()
    - CVE-2014-3153
  * futex: Fix bug in WARN_ON for NULL q.pi_state
    - CVE-2014-3153
  * futex: Forbid uaddr == uaddr2 in futex_wait_requeue_pi()
    - CVE-2014-3153
  * futex: Handle futex_pi OWNER_DIED take over correctly
    - CVE-2014-3153
  * futex: avoid wake_futex() for a PI futex_q
    - CVE-2014-3153
  * futex: Revert "futex: Mark get_robust_list as deprecated"
    - CVE-2014-3153
  * futex: fix handling of read-only-mapped hugepages
    - CVE-2014-3153
  * futex: Add another early deadlock detection check
    - CVE-2014-3153
  * futex: Prevent attaching to kernel threads
    - CVE-2014-3153
  * futex-prevent-requeue-pi-on-same-futex.patch futex: Forbid uaddr ==
    uaddr2 in futex_requeue(..., requeue_pi=1)
    - CVE-2014-3153
  * futex: Validate atomic acquisition in futex_lock_pi_atomic()
    - CVE-2014-3153
  * futex: Always cleanup owner tid in unlock_pi
    - CVE-2014-3153
  * futex: Make lookup_pi_state more robust
    - CVE-2014-3153

 -- Tim Gardner <tim.gardner@canonical.com>  Thu, 26 Jun 2014 12:34:15 -0600

linux-goldfish (3.4.0-3.16) utopic; urgency=low

  [ Tim Gardner ]

  * Revert "Use default compiler for armhf/i386"
  * Use gcc-4.7 for armhf/i386

 -- Tim Gardner <tim.gardner@canonical.com>  Fri, 30 May 2014 14:57:46 +0200

linux-goldfish (3.4.0-3.15) utopic; urgency=low

  [ Tyler Hicks ]

  * [Config] CONFIG_DEVKMEM=n
  * [Config] CONFIG_STRICT_DEVMEM=y
  * [Config] CONFIG_DEFAULT_MMAP_MIN_ADDR=65536

  [ Upstream Kernel Changes ]

  * exec/ptrace: fix get_dumpable() incorrect tests
    - LP: #1266546
    - CVE-2013-2929

 -- Tim Gardner <tim.gardner@canonical.com>  Fri, 30 May 2014 11:30:42 +0200

linux-goldfish (3.4.0-3.14) trusty; urgency=low

  [ Andy Whitcroft ]

  * [Config] CONFIG_RT_GROUP_SCHED=n
    - LP: #1284731
  * [Config] enforcer file cannot be zero length

 -- Andy Whitcroft <apw@canonical.com>  Wed, 26 Feb 2014 11:56:56 +0000

linux-goldfish (3.4.0-2.13) trusty; urgency=low

  [ Ricardo Salveti de Araujo ]

  * Revert "Use the default 4.8 compiler again"
  * [Config] Also enabling CONFIG_PRINTK_TIME for armhf
  * Using gcc-4.7 when building for x86 (following AOSP)
  * [Config] Syncing i386 Android configs with the armhf one

  [ Tim Gardner ]

  * Fix Vcs-git path and branch name

  [ Upstream Kernel Changes ]

  * Goldfish: Fix multi-touch support on emulator

 -- Ricardo Salveti de Araujo <ricardo.salveti@canonical.com>  Mon, 10 Feb 2014 17:32:56 -0200

linux-goldfish (3.4.0-1.12) trusty; urgency=low

  [ Andy Whitcroft ]

  * [Config] CONFIG_SECURITY_YAMA=y

  [ Kees Cook ]

  * SAUCE: (no-up) Yama: add link restrictions

  [ Tyler Hicks ]

  * [Config] Enable Stacked Yama

  [ Upstream Kernel Changes ]

  * Yama: add additional ptrace scopes
  * Yama: higher restrictions should block PTRACE_TRACEME
  * security: allow Yama to be unconditionally stacked

 -- Andy Whitcroft <apw@canonical.com>  Fri, 07 Feb 2014 19:02:47 +0000

linux-goldfish (3.4.0-1.11) trusty; urgency=low

  [ Loïc Minier ]

  * [Config] Enable VMSPLIT_2G to allow more memory in emulator

  [ Ricardo Salveti de Araujo ]

  * Use the default 4.8 compiler again

  [ Upstream Kernel Changes ]

  * ARM: 7668/1: fix memset-related crashes caused by recent GCC (4.7.2)
    optimizations
  * ARM: 7670/1: fix the memset fix

 -- Tim Gardner <tim.gardner@canonical.com>  Wed, 29 Jan 2014 08:34:54 -0700

linux-goldfish (3.4.0-1.10) trusty; urgency=low

  [ Andy Whitcroft ]

  * [Config] switch build-depends to libiberty-dev

  [ Dimitri John Ledkov ]

  * [Config] enable CONFIG_INPUT_UINPUT
    - LP: #1260023

  [ John Johansen ]

  * SAUCE: (no-up) apparmor: fix backtrace on non-smp, kernels.
    - LP: #1253707

 -- Andy Whitcroft <apw@canonical.com>  Wed, 11 Dec 2013 18:04:04 +0000

linux-goldfish (3.4.0-1.9) trusty; urgency=low

  [ Tim Gardner ]

  * Revert "[Config] Drop armhf dependency on gcc-4.6"
    armhf won't boot using more recent gcc versions.
    - LP: #1252339

 -- Tim Gardner <tim.gardner@canonical.com>  Tue, 19 Nov 2013 10:53:35 -0700

linux-goldfish (3.4.0-1.8) trusty; urgency=low

  [ Dmitrijs Ledkovs ]

  * [Config] Enable EFI partitions on armhf build.
    - LP: #1252339

 -- Tim Gardner <tim.gardner@canonical.com>  Mon, 18 Nov 2013 10:19:01 -0700

linux-goldfish (3.4.0-1.7) saucy; urgency=low

  [ John Johansen ]

  * SAUCE: apparmor: fix unix domain sockets to be mediated on connection
    - LP: #1208988
  * SAUCE: apparmor: allocate path lookup buffers during init
    - LP: #1208988
  * SAUCE: apparmor: fix memleak of the profile hash
    - LP: #1235523
  * SAUCE: apparmor: fix memleak of replacedby struct
    - LP: #1235973
  * SAUCE: apparmor: fix bad lock balance when introspecting policy
    - LP: #1235977

  [ Tim Gardner ]

  * [Config] Use gcc-4.6 for armhf
    - LP: #1236444

 -- Andy Whitcroft <apw@canonical.com>  Tue, 08 Oct 2013 11:06:06 +0100

linux-goldfish (3.4.0-0.6) saucy; urgency=low

  * Fix stupid FTBS because of ABI files

 -- Tim Gardner <tim.gardner@canonical.com>  Thu, 19 Sep 2013 13:09:26 -0600

linux-goldfish (3.4.0-0.5) saucy; urgency=low

  [ Tim Gardner ]

  * CONFIG_SECURITY_APPARMOR=y

 -- Tim Gardner <tim.gardner@canonical.com>  Thu, 19 Sep 2013 12:27:51 -0600

linux-goldfish (3.4.0-0.4) saucy; urgency=low

  [ Andy Whitcroft ]

  * [Packaging] sort out linux-tools naming
    - LP: #1205284
  * [Config] switch to new linux-tools naming
    - LP: #1205284
  * [Config] fix up build-depends:

  [ Tim Gardner ]

  * [Config] CONFIG_*_NS=y
    - LP: #1222772
  * [Config] CONFIG_DEVPTS_MULTIPLE_INSTANCES=y
    - LP: #1222772
  * [Config] CONFIG_ANDROID_PARANOID_NETWORK=n
    - LP: #1222772

 -- Andy Whitcroft <apw@canonical.com>  Wed, 11 Sep 2013 18:10:03 +0100

linux-goldfish (3.4.0-0.3) saucy; urgency=low

  * No code change rebuild, fix FTBS because of incorrect
    ABI directory name.

 -- Tim Gardner <tim.gardner@canonical.com>  Wed, 11 Sep 2013 11:52:30 -0600

linux-goldfish (3.4.0-0.2) saucy; urgency=low

  [ Tim Gardner ]

  * [Config] Build for i386

 -- Tim Gardner <tim.gardner@canonical.com>  Wed, 11 Sep 2013 11:19:52 -0600

linux-goldfish (3.4.0-0.1) saucy; urgency=low

  * Initial release 

 -- Tim Gardner <tim.gardner@canonical.com>  Wed, 21 Aug 2013 12:19:33 -0600

linux-goldfish (3.4.0-0.0) saucy; urgency=low

  * Place holder

 --  Tim Gardner <tim.gardner@canonical.com>  Wed, 27 Feb 2013 11:55:02 -0700
