kernel/module/signing.c | 61 59 + 2 - 0 !
1 file changed, 59 insertions(+), 2 deletions(-)

 [patch 3/4] modsign: checking the blacklisted hash before loading a
 kernel module

security/integrity/platform_certs/machine_keyring.c | 3 1 + 2 - 0 !
1 file changed, 1 insertion(+), 2 deletions(-)

 trust machine keyring (mok) by default
 Debian always trusted keys in MoK by default. Upstream made it conditional on
 a new EFI variable being set. To keep backward compatibility skip this check.

arch/x86/pci/common.c | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 [i386/686-pae] pci: set pci=nobios by default

fs/ntfs/Kconfig | 1 1 + 0 - 0 !
1 file changed, 1 insertion(+)

 ntfs: mark it as broken

NTFS has unfixed issues CVE-2018-12929, CVE-2018-12930, and
CVE-2018-12931.  ntfs-3g is a better supported alternative.

Make sure it can't be enabled even in custom kernels.

kernel/module/version.c | 5 2 + 3 - 0 !
1 file changed, 2 insertions(+), 3 deletions(-)

 module: disable matching missing version crc

tools/usb/usbip/doc/usbipd.8 | 6 4 + 2 - 0 !
1 file changed, 4 insertions(+), 2 deletions(-)

 usbip: document tcp wrappers

scripts/Makefile.build | 5 5 + 0 - 0 !
1 file changed, 5 insertions(+)

 kbuild: fix recordmcount dependency for oot modules
Date: Mon, 08 Sep 2014 18:31:24 +0100

tools/perf/Documentation/Makefile | 3 3 + 0 - 0 !
tools/perf/Documentation/asciidoc.conf | 3 3 + 0 - 0 !
2 files changed, 6 insertions(+)

 perf tools: use $kbuild_build_timestamp as man page date

tools/perf/scripts/perl/rw-by-file.pl | 1 0 + 1 - 0 !
tools/perf/scripts/perl/rw-by-pid.pl | 1 0 + 1 - 0 !
tools/perf/scripts/perl/rwtop.pl | 1 0 + 1 - 0 !
tools/perf/scripts/perl/wakeup-latency.pl | 1 0 + 1 - 0 !
4 files changed, 4 deletions(-)

 tools/perf: remove shebang lines from perf scripts

tools/perf/Makefile.config | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 revert "perf build: fix libunwind feature detection on 32-bit x86"

tools/build/feature/test-bpf.c | 8 5 + 3 - 0 !
1 file changed, 5 insertions(+), 3 deletions(-)

 tools/build: remove bpf() run-time check at build time

tools/power/cpupower/Makefile | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 cpupower: bump soname version

tools/power/cpupower/bench/system.c | 13 10 + 3 - 0 !
1 file changed, 10 insertions(+), 3 deletions(-)

 cpupower: fix checks for cpu existence

tools/perf/pmu-events/jevents.py | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 tools/perf: pmu-events: fix reproducibility

tools/lib/api/Makefile | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 libapi: define _fortify_source as 2, not empty

Signed-off-by: Ben Hutchings <benh@debian.org>

tools/perf/Makefile.perf | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 tools/perf: fix missing ldflags for some programs

Signed-off-by: Ben Hutchings <benh@debian.org>