Bug#940530: Add CONFIG_BRCMFMAC_SDIO=y to linux-image-rpi

2019-09-16 Thread Gregory Johnson
Package: linux-image-4.19.0-6-rpi
Version: 4.19.67-2

The linux-image-rpi kernel for armel does not
include CONFIG_BRCMFMAC_SDIO=y.  This config option is necessary to support
the WiFi on the Raspberry Pi Zero W.  I have verified that enabling this
option fixes the problem on my Pi Zero W by building a version of the
kernel package with the option enabled following
https://wiki.debian.org/HowToCrossBuildAnOfficialDebianKernelPackage.

I installed Debian using the images available here:
https://wiki.debian.org/RaspberryPiImages


Bug#939330: marked as done (firmware-brcm80211: BCM4350 rev 08 wifi card speeds decline to sluggish 50 kB/s consistently)

2019-09-16 Thread Debian Bug Tracking System
Your message dated Mon, 16 Sep 2019 21:36:51 +
with message-id 

and subject line irmware-brcm80211: BCM4350 rev 08 wifi card speeds decline to 
sluggish 50 kB/s consistently
has caused the Debian Bug report #939330,
regarding firmware-brcm80211: BCM4350 rev 08 wifi card speeds decline to 
sluggish 50 kB/s consistently
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
939330: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=939330
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: firmware-brcm80211
Version: 20190717-2
Severity: important

Dear Maintainer,

Recently I installed Debian Buster on a Dell XPS 13 9350 laptop, which
contains a BCM4350 rev. 08 wireless card. During the installation process I had
to grab one of the unofficial CD images containing the non-free firmware to get
that downloaded.

My internet has ~10MB/s upload/download speed, and on my other computers
the speeds are near this limit and are consistently at that speed.

However, usually speeds on this wireless card are abnormally at
100-200kB/s, sometimes as low as 30-50kB/s. Furthermore, it often
unpredictably switches between such low speeds and 1MB/s speed (which is
acceptable).

I first attempted to upgrade the firmware to their absolute latest versions,
which did not improve the situation. I also noticed that in the brcmfmac
description
that there's a file for rev. 5+ card but that brcmfmac is only loading the rev.
4 and
below card. I wonder if that might be part of the problem.

Anyway, here's some diagnostic information:

$ inxi -Fx
System:Host: 4 Kernel: 4.19.0-5-amd64 x86_64 bits: 64 compiler: gcc v:
8.3.0 Desktop: Cinnamon 3.8.8
   Distro: Debian GNU/Linux 10 (buster)
Machine:   Type: Laptop System: Dell product: XPS 13 9350 v: N/A serial: 
   Mobo: Dell model: 07TYC2 v: A00 serial:  UEFI: Dell
v: 1.10.1 date: 01/22/2019
Battery:   ID-1: BAT0 charge: 48.7 Wh condition: 51.5/57.5 Wh (89%) model: SMP
DELL JHXPY53 status: Unknown
CPU:   Topology: Dual Core model: Intel Core i5-6200U bits: 64 type: MT MCP
arch: Skylake rev: 3 L2 cache: 3072 KiB
   flags: lm nx pae sse sse2 sse3 sse4_1 sse4_2 ssse3 vmx bogomips:
19200
   Speed: 500 MHz min/max: 400/2800 MHz Core speeds (MHz): 1: 500 2:
500 3: 500 4: 500
Graphics:  Device-1: Intel HD Graphics 520 vendor: Dell Skylake GT2 driver:
i915 v: kernel bus ID: 00:02.0
   Display: x11 server: X.Org 1.20.4 driver: modesetting unloaded:
fbdev,vesa resolution: 3200x1800~60Hz
   OpenGL: renderer: Mesa DRI Intel HD Graphics 520 (Skylake GT2) v:
4.5 Mesa 18.3.6 direct render: Yes
Audio: Device-1: Intel Sunrise Point-LP HD Audio vendor: Dell driver:
snd_hda_intel v: kernel bus ID: 00:1f.3
   Sound Server: ALSA v: k4.19.0-5-amd64
Network:   Device-1: Broadcom Limited BCM4350 802.11ac Wireless Network Adapter
vendor: Dell driver: brcmfmac v: kernel
   port: f040 bus ID: 3a:00.0
   IF: wlp58s0 state: up mac: 30:52:cb:81:ef:1d
Drives:Local Storage: total: 238.47 GiB used: 15.24 GiB (6.4%)
   ID-1: /dev/nvme0n1 vendor: Samsung model: PM951 NVMe 256GB size:
238.47 GiB
Partition: ID-1: / size: 225.49 GiB used: 14.94 GiB (6.6%) fs: ext4 dev:
/dev/nvme0n1p2
   ID-2: swap-1 size: 7.87 GiB used: 294.7 MiB (3.7%) fs: swap dev:
/dev/nvme0n1p3
Sensors:   System Temperatures: cpu: 39.0 C mobo: 27.8 C
   Fan Speeds (RPM): N/A
Info:  Processes: 240 Uptime: 11h 18m Memory: 7.66 GiB used: 3.03 GiB
(39.5%) Init: systemd runlevel: 5 Compilers:
   gcc: 8.3.0 clang: 7.0.1-8 Shell: bash v: 5.0.3 inxi: 3.0.32

$ sudo dmesg | grep brcm
[4.511409] usbcore: registered new interface driver brcmfmac
[4.511475] brcmfmac :3a:00.0: enabling device ( -> 0002)
[4.636428] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac4350-pcie
for chip BCM4350/8
[4.641489] brcmfmac :3a:00.0: firmware: direct-loading firmware
brcm/brcmfmac4350-pcie.bin
[4.641508] brcmfmac :3a:00.0: firmware: failed to load
brcm/brcmfmac4350-pcie.txt (-2)
[4.641576] brcmfmac :3a:00.0: Direct firmware load for
brcm/brcmfmac4350-pcie.txt failed with error -2
[4.981502] bluetooth hci0: firmware: failed to load brcm/BCM-0a5c-6412.hcd
(-2)
[4.981532] bluetooth hci0: Direct firmware load for brcm/BCM-0a5c-6412.hcd
failed with error -2
[4.981534] Bluetooth: hci0: BCM: Patch brcm/BCM-0a5c-6412.hcd not found
[5.085081] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac4350-pcie
for chip BCM4350/8
[5.085100] brcmfmac :3a:00.0: firmware: failed to 

Proposal/Guidelines for working on *-security branches in packaging repository

2019-09-16 Thread Salvatore Bonaccorso
Hi

I was pondering for a while to try to start this discussion. And it is
more a collection of some thoughs.

Recently more people have started to work to as well commit fixes for
CVEs into the respective *-security branches. This is very good news
indeed :) and is very encouraging to see contributions!

I started to think we might want to outline some guidelines what to
commit on *-security branches while we are yet UNRELEASED.

Two preliminary points have to be stated to make the idea clear:

- Not every CVE fix needs really a DSA or an "urgent" release via
  security, many fixes go in as well via import of upstream stable
  releases and scheduled in point releases.
- If a security upload needs to be done, and there is in particular an
  ABI bump involved, then more needs to be done (bump ABI, make a new
  linux-latest upload, packages need to go through NEW on
  security-master and need manual intervention from ftp-masters, the
  later is as well then in twice instance needed for now from
  ftp-masters for signed kernel as well).

So my idea was to bring this up here for discussion: I think while
working on *-security branches and keep the possibilty to release
"fast" updates without ABI bump via security, whenever needed for an
"urgent" fix -- I would propose as guideline -- commits can, and are
*encouraged* to be added, if there is no ABI break. If there is an ABI
break and the fix is not very urgent, then rather keep if off for the
time beeing.

Whenever then an urgent fix is needed which in any case requires an
ABI bump then it's safe to add as well other less urgent commits for
CVEs.

So as idea "try to always keep *-security branches safe for 'easy to
process' uploads.

What contributors think? Does this make sense to have somewhere
written properly out and documented? 

Regards,
Salvatore



Bug#940105: linux: serious corruption issue with btrfs

2019-09-16 Thread Laurence Parry
I had a look at and it appears to have gone into both 5.3 (final) and
5.2.15.

For what it's worth, it took only a day or so to exhibit the issue on our
(admittedly active) nginx/postgres/PHP server; we weren't doing any unusual
work during that time. If you're using btrfs, and you can't apply a patch
to the backports kernel, it'd be a good idea to revert to a 4.19 kernel for
the time being.

-- 
Laurence "GreenReaper" Parry


Processed: Re: Bug#939773: Duplicate

2019-09-16 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> forcemerge 939773 935945
Bug #939773 [src:linux] linux-image-5.2.0-2-amd64: MOK key not used for 
verification of modules signatures.
Bug #935945 [src:linux] linux-image-5.2.0-2-amd64: does not load signed kernel 
modules when UEFI Secure Boot is enabled
Bug #940181 [src:linux] linux-image-5.2.0-2-amd64: Kernel does not accept 
self-signed modules using UEFI db key
Merged 935945 939773 940181
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
935945: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=935945
939773: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=939773
940181: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=940181
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Processed: your mail

2019-09-16 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org:

> found 940105 5.2+106~bpo10+1
Bug #940105 [src:linux] linux: serious corruption issue with btrfs
The source 'linux' and version '5.2+106~bpo10+1' do not appear to match any 
binary packages
Marked as found in versions linux/5.2+106~bpo10+1.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
940105: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=940105
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



firmware-nonfree_20190114-2~bpo9+1_amd64.changes ACCEPTED into stretch-backports->backports-policy, stretch-backports

2019-09-16 Thread Debian FTP Masters



Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Sat, 14 Sep 2019 22:34:35 +0900
Source: firmware-nonfree
Binary: firmware-linux firmware-linux-nonfree firmware-adi firmware-ralink 
firmware-amd-graphics firmware-atheros firmware-bnx2 firmware-bnx2x 
firmware-brcm80211 firmware-cavium firmware-intelwimax firmware-intel-sound 
firmware-ipw2x00 firmware-ivtv firmware-iwlwifi firmware-libertas 
firmware-misc-nonfree firmware-myricom firmware-netronome firmware-netxen 
firmware-qcom-media firmware-qlogic firmware-realtek firmware-samsung 
firmware-siano firmware-ti-connectivity
Architecture: source all
Version: 20190114-2~bpo9+1
Distribution: stretch-backports
Urgency: medium
Maintainer: Debian Kernel Team 
Changed-By: Roger Shimizu 
Description:
 firmware-adi - Binary firmware for Analog Devices Inc. DSL modem chips (dummmy 
p
 firmware-amd-graphics - Binary firmware for AMD/ATI graphics chips
 firmware-atheros - Binary firmware for Atheros wireless cards
 firmware-bnx2 - Binary firmware for Broadcom NetXtremeII
 firmware-bnx2x - Binary firmware for Broadcom NetXtreme II 10Gb
 firmware-brcm80211 - Binary firmware for Broadcom/Cypress 802.11 wireless cards
 firmware-cavium - Binary firmware for Cavium Ethernet adapters
 firmware-intel-sound - Binary firmware for Intel sound DSPs
 firmware-intelwimax - Binary firmware for Intel WiMAX Connection
 firmware-ipw2x00 - Binary firmware for Intel Pro Wireless 2100, 2200 and 2915
 firmware-ivtv - Binary firmware for iTVC15-family MPEG codecs (ivtv and 
pvrusb2 d
 firmware-iwlwifi - Binary firmware for Intel Wireless cards
 firmware-libertas - Binary firmware for Marvell wireless cards
 firmware-linux - Binary firmware for various drivers in the Linux kernel 
(metapack
 firmware-linux-nonfree - Binary firmware for various drivers in the Linux 
kernel (meta-pac
 firmware-misc-nonfree - Binary firmware for various drivers in the Linux kernel
 firmware-myricom - Binary firmware for Myri-10G Ethernet adapters
 firmware-netronome - Binary firmware for Netronome network adapters
 firmware-netxen - Binary firmware for QLogic Intelligent Ethernet (3000 and 
3100 Se
 firmware-qcom-media - Binary firmware for Qualcomm graphics/video
 firmware-qlogic - Binary firmware for QLogic HBAs
 firmware-ralink - Binary firmware for Ralink wireless cards (dummmy package)
 firmware-realtek - Binary firmware for Realtek wired/wifi/BT adapters
 firmware-samsung - Binary firmware for Samsung MFC video codecs
 firmware-siano - Binary firmware for Siano MDTV receivers
 firmware-ti-connectivity - Binary firmware for TI Connectivity wifi and 
BT/FM/GPS adapters
Closes: 903437 919452 919632 927917 928510 928672
Changes:
 firmware-nonfree (20190114-2~bpo9+1) stretch-backports; urgency=medium
 .
   * Rebuild for stretch-backports.
 .
 firmware-nonfree (20190114-2) buster; urgency=medium
 .
   [ Ben Hutchings ]
   * Update to linux-support 4.19.0-5
   * amd-graphics: Trigger update-initramfs when installed (Closes: #928510)
   * cavium, netronome: Trigger update-initramfs when installed
   * atheros: Add Qualcomm Atheros QCA9377 rev 1.0 firmware version
 WLAN.TF.2.1-00021-QCARMSWP-1 (Closes: #903437, #919632, #927917)
   * realtek: Add Realtek RTL8822CU Bluetooth firmware
   * atheros: Revert change of QCA9377 rev 1.0 firmware in 20180518-1
 (Closes: #919632)
 .
   [ Raphaël Hertzog ]
   * misc-nonfree: Add firmware for MediaTek MT76x0/MT76x2u wireless chips
 (Closes: #919452)
   * misc-nonfree: Add firmware for MediaTek MT7622/MT7668 bluetooth chips
 .
   [ Romain Perier ]
   * misc-nonfree: Add GV100 signed firmware (Closes: #928672)
Checksums-Sha1:
 e5ee77ca390d56f7845ff209977fdb85930ed4c5 4056 
firmware-nonfree_20190114-2~bpo9+1.dsc
 6cd1fc840ad8e41bd6380fa747008277924a9d5a 1608276 
firmware-nonfree_20190114-2~bpo9+1.debian.tar.xz
 98c1463baf9039b52e5a287b506509caf5b65a74 17844 
firmware-adi_20190114-2~bpo9+1_all.deb
 36dd6ccd1967fcb6a901c19ed59000c1f9fdf421 3430932 
firmware-amd-graphics_20190114-2~bpo9+1_all.deb
 bd4b7ad0e0578d0006a8691f4a595ae38b17b9d8 4011816 
firmware-atheros_20190114-2~bpo9+1_all.deb
 18434681a32a414bffdc3116c12aff30a8ba67ed 102832 
firmware-bnx2_20190114-2~bpo9+1_all.deb
 9233e6eb5a1e43e76fe4553268a143524a5a431a 2820138 
firmware-bnx2x_20190114-2~bpo9+1_all.deb
 e4dd331efdf7a746bbcf0b6e68683a618f7549d3 4278574 
firmware-brcm80211_20190114-2~bpo9+1_all.deb
 dc200f21b454ee8feead94bf41937b0703b8e1eb 641988 
firmware-cavium_20190114-2~bpo9+1_all.deb
 e540da2c8beb3e32bab1f8fea99f44527201a767 760596 
firmware-intel-sound_20190114-2~bpo9+1_all.deb
 216150897dab9b33f4544c13947a6db426c17cfa 1194342 
firmware-intelwimax_20190114-2~bpo9+1_all.deb
 aef4420d9d03cb1cff6eb07864d44b216c853e2f 252160 
firmware-ipw2x00_20190114-2~bpo9+1_all.deb
 4420052de51859125db303599147cc9f5e19cf58 109730 
firmware-ivtv_20190114-2~bpo9+1_all.deb
 7b0d394d398a357c542370f1a9ed830df71d6085 5318422 
firmware-iwlwifi_20190114-2~bpo9+1_all.deb
 

linux-latest_105+deb10u1~bpo9+1_source.changes ACCEPTED into stretch-backports->backports-policy, stretch-backports

2019-09-16 Thread Debian FTP Masters



Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Sun, 15 Sep 2019 17:12:20 +0100
Source: linux-latest
Architecture: source
Version: 105+deb10u1~bpo9+1
Distribution: stretch-backports
Urgency: medium
Maintainer: Debian Kernel Team 
Changed-By: Ben Hutchings 
Changes:
 linux-latest (105+deb10u1~bpo9+1) stretch-backports; urgency=medium
 .
   * Rebuild for stretch-backports:
 - ABI version is 0.bpo.6, not 6
 .
 linux-latest (105+deb10u1) buster; urgency=medium
 .
   * Update to 4.19.0-6
Checksums-Sha1:
 fd39a259e919fd4af97e00b08a21f1a999c2e32b 11622 
linux-latest_105+deb10u1~bpo9+1.dsc
 c50300c79aebf38f860510e9e3bff7d45636c443 20692 
linux-latest_105+deb10u1~bpo9+1.tar.xz
 5e532609a54b48b75e583b56b261608c2829397f 8390 
linux-latest_105+deb10u1~bpo9+1_source.buildinfo
Checksums-Sha256:
 09b0a4049948a86ba6a81b1b8a2263f8ed063f4fb10d333f9f4e36d0af0bb8c0 11622 
linux-latest_105+deb10u1~bpo9+1.dsc
 d2ae79b8913b3bef105599c7741086216acbdf17d4c79ec52201c5a6dfde897e 20692 
linux-latest_105+deb10u1~bpo9+1.tar.xz
 1ac26b236111f7b1dce77c1b03526d77f9798fe4aee841ff05e37c40e24b7755 8390 
linux-latest_105+deb10u1~bpo9+1_source.buildinfo
Files:
 23848c95d855175f4b6ebeb640298dd7 11622 kernel optional 
linux-latest_105+deb10u1~bpo9+1.dsc
 67ef5c1ee8b4b4294d1f2ff23c7c5941 20692 kernel optional 
linux-latest_105+deb10u1~bpo9+1.tar.xz
 272dec3fadb564f7c31ed61e566afc35 8390 kernel optional 
linux-latest_105+deb10u1~bpo9+1_source.buildinfo

-BEGIN PGP SIGNATURE-
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=T+Qs
-END PGP SIGNATURE-


Thank you for your contribution to Debian.



Bug#940105: linux: serious corruption issue with btrfs

2019-09-16 Thread Laurence Parry
We seem to have run into this yesterday on a production server sing a
custom compile of the 5.2.9 buster-backports kernel. nginx was hung in D
status, sync hung as well, no obvious reason for it; I ended up having to
reset the machine.

On boot I found we had lost several hours of logs and worse, several user
data files supposedly saved during that time. A small but noticeable
increase in iowait accompanied the start of the lost logs and continued
until the hang.

I guess I was lucky we did not lose more - at least, I *hope* not, because
it is hard to be sure of that without a byte-by-byte verification...

Don't know if it is related, but the behaviour of this kernel has also been
to significantly increase the size of the slab cache of dentries/inodes
during rsync, resulting in fragmentation and a massive increase in the
amount of free memory (despite setting vm.vfs_cache_pressure=1 in an
attempt to remedy it).

I can of course compile my own kernel, but I concur with Christoph's
assessment of this bug's severity and would encourage a new backports
release ASAP.
-- 
Laurence "GreenReaper" Parry - administrator, Inkbunny.net