lunar/linux-gcp: 6.2.0-1018.20 -proposed tracker

Bug #2038064 reported by Roxana Nicolescu
12
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Kernel SRU Workflow
In Progress
Medium
Unassigned
Automated-testing
Incomplete
Medium
Canonical Kernel Team
Boot-testing
Fix Released
Medium
Unassigned
Certification-testing
Invalid
Medium
Unassigned
New-review
Fix Released
Medium
Andy Whitcroft
Prepare-package
Fix Released
Medium
Manuel Diewald
Prepare-package-generate
Fix Released
Medium
Manuel Diewald
Prepare-package-lrg
Fix Released
Medium
Manuel Diewald
Prepare-package-lrm
Fix Released
Medium
Manuel Diewald
Prepare-package-lrs
Fix Released
Medium
Manuel Diewald
Prepare-package-meta
Fix Released
Medium
Manuel Diewald
Prepare-package-signed
Fix Released
Medium
Manuel Diewald
Promote-signing-to-proposed
Invalid
Medium
Unassigned
Promote-to-proposed
Fix Released
Medium
Ubuntu Stable Release Updates Team
Promote-to-security
New
Medium
Ubuntu Stable Release Updates Team
Promote-to-updates
New
Medium
Ubuntu Stable Release Updates Team
Regression-testing
Incomplete
Medium
Canonical Kernel Team
Security-signoff
In Progress
Medium
Steve Beattie
Sru-review
Fix Released
Medium
Andy Whitcroft
Verification-testing
Fix Released
Medium
Canonical Kernel Team
canonical-signing-jobs
Task00
Fix Released
Medium
Andy Whitcroft
linux-gcp (Ubuntu)
Lunar
Fix Released
Medium
Unassigned

Bug Description

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
built:
  from: 94a7d8a423baa6f5
  route-entry: 1
delta:
  promote-to-proposed: [lrm, lrs, main, meta, signed, lrg, generate]
flag:
  boot-testing-requested: true
  bugs-spammed: true
  proposed-announcement-sent: true
  proposed-testing-requested: true
  stream-from-cycle: true
issue: KSRU-9993
kernel-stable-master-bug: 2038076
packages:
  generate: linux-generate-gcp
  lrg: linux-restricted-generate-gcp
  lrm: linux-restricted-modules-gcp
  lrs: linux-restricted-signatures-gcp
  main: linux-gcp
  meta: linux-meta-gcp
  signed: linux-signed-gcp
phase: Testing
phase-changed: Thursday, 12. October 2023 12:32 UTC
reason:
  automated-testing: Stalled -s testing FAILED
  prerequisite-packages: Pending -- packages not released --
    nvidia-graphics-drivers-535/535.113.01-0ubuntu0.23.04.1 missing
    nvidia-graphics-drivers-535-server/535.104.12-0ubuntu0.23.04.1
    missing
  regression-testing: Stalled -s testing FAILED
  security-signoff: Stalled -s waiting for signoff
synthetic:
  :promote-to-as-proposed: Fix Released
trackers:
  jammy/linux-gcp-6.2: bug 2038063
variant: debs
versions:
  lrm: 6.2.0-1018.20
  main: 6.2.0-1018.20
  meta: 6.2.0.1018.18
  signed: 6.2.0-1018.20
~~:
  clamps:
    new-review: 94a7d8a423baa6f5
    promote-to-proposed: 94a7d8a423baa6f5
    self: 6.2.0-1018.20
    sru-review: 94a7d8a423baa6f5

tags: added: kernel-release-tracking-bug-live
description: updated
tags: added: kernel-sru-cycle-2023.10.02-1
description: updated
tags: added: kernel-sru-derivative-of-2038076
Changed in kernel-sru-workflow:
status: New → Confirmed
importance: Undecided → Medium
Changed in linux-gcp (Ubuntu Lunar):
importance: Undecided → Medium
Changed in kernel-sru-workflow:
status: Confirmed → Triaged
description: updated
Changed in kernel-sru-workflow:
status: Triaged → In Progress
tags: added: kernel-jira-issue-ksru-9993
description: updated
John Cabaj (john-cabaj)
summary: - lunar/linux-gcp: <version to be filled> -proposed tracker
+ lunar/linux-gcp: 6.2.0-1017.19 -proposed tracker
description: updated
description: updated
John Cabaj (john-cabaj)
summary: - lunar/linux-gcp: 6.2.0-1017.19 -proposed tracker
+ lunar/linux-gcp: <version to be filled> -proposed tracker
description: updated
Manuel Diewald (diewald)
summary: - lunar/linux-gcp: <version to be filled> -proposed tracker
+ lunar/linux-gcp: 6.2.0-1018.20 -proposed tracker
description: updated
tags: added: kernel-jira-in-review
description: updated
tags: removed: kernel-jira-in-review
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
description: updated
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package linux-gcp - 6.2.0-1017.19

---------------
linux-gcp (6.2.0-1017.19) lunar; urgency=medium

  * lunar/linux-gcp: 6.2.0-1017.19 -proposed tracker (LP: #2038064)

  * CVE-2023-42755
    - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6

  * SEV_SNP failure to init (LP: #2037316)
    - x86/sev-es: Allow copy_from_kernel_nofault in earlier boot
    - x86/sev-es: Only set x86_virt_bits to correct value

  [ Ubuntu: 6.2.0-35.35 ]

  * lunar/linux: 6.2.0-35.35 -proposed tracker (LP: #2038229)
  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts
  * CVE-2023-4244
    - netfilter: nf_tables: don't skip expired elements during walk
    - netfilter: nf_tables: integrate pipapo into commit protocol
    - netfilter: nft_set_rbtree: fix overlap expiration walk
    - netfilter: nf_tables: adapt set backend to use GC transaction API
    - netfilter: nft_set_hash: mark set element as dead when deleting from packet
      path
    - netfilter: nf_tables: drop map element references from preparation phase
    - netfilter: nf_tables: GC transaction API to avoid race with control plane
    - netfilter: nf_tables: remove busy mark and gc batch API
    - netfilter: nf_tables: don't fail inserts if duplicate has expired
    - netfilter: nf_tables: fix kdoc warnings after gc rework
    - netfilter: nf_tables: fix GC transaction races with netns and netlink event
      exit path
    - netfilter: nf_tables: GC transaction race with netns dismantle
    - netfilter: nf_tables: GC transaction race with abort path
    - netfilter: nf_tables: use correct lock to protect gc_list
    - netfilter: nf_tables: defer gc run if previous batch is still pending
    - netfilter: nft_dynset: disallow object maps
    - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
  * CVE-2023-5197
    - netfilter: nf_tables: skip bound chain in netns release path
    - netfilter: nf_tables: disallow rule removal from chain binding
  * CVE-2023-4921
    - net: sched: sch_qfq: Fix UAF in qfq_dequeue()
  * CVE-2023-4881
    - netfilter: nftables: exthdr: fix 4-byte stack OOB write
  * CVE-2023-4623
    - net/sched: sch_hfsc: Ensure inner classes have fsc curve
  * CVE-2023-4622
    - af_unix: Fix null-ptr-deref in unix_stream_sendpage().
  * CVE-2023-42756
    - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
  * CVE-2023-42755
    - net/sched: Retire rsvp classifier
    - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
  * CVE-2023-42753
    - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
      ip_set_hash_netportnet.c
  * CVE-2023-42752
    - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
    - net: add SKB_HEAD_ALIGN() helper
    - net: remove osize variable in __alloc_skb()
    - net: factorize code in kmalloc_reserve()
    - net: deal with integer overflows in kmalloc_reserve()
  * CVE-2023-34319
    - xen/netback: Fix buffer overrun triggered by unusual packet

 -- John Cabaj <email address hidden> Thu, 05 Oct 2023 21:59:43 -0500

Changed in linux-gcp (Ubuntu Lunar):
status: New → Fix Released
description: updated
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.