Kernel SRU Workflow

jammy/linux-gkeop: 5.15.0-1031.37 -proposed tracker

Bug #2038180 reported by Thadeu Lima de Souza Cascardo
12
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Kernel SRU Workflow
Fix Released
Medium
Unassigned
Abi-testing
New
Undecided
Unassigned
Automated-testing
Invalid
Medium
Canonical Kernel Team
Boot-testing
Fix Released
Medium
Unassigned
Certification-testing
Invalid
Medium
Unassigned
New-review
Fix Released
Medium
Andy Whitcroft
Prepare-package
Fix Released
Medium
John Cabaj
Prepare-package-generate
Fix Released
Medium
John Cabaj
Prepare-package-meta
Fix Released
Medium
Hui Wang
Prepare-package-signed
Fix Released
Medium
John Cabaj
Promote-signing-to-proposed
Invalid
Medium
Unassigned
Promote-to-proposed
Fix Released
Medium
Ubuntu Stable Release Updates Team
Promote-to-security
Fix Released
Medium
Andy Whitcroft
Promote-to-updates
Fix Released
Medium
Andy Whitcroft
Regression-testing
Fix Released
Medium
Canonical Kernel Team
Security-signoff
Fix Released
Medium
Steve Beattie
Sru-review
Fix Released
Medium
Andy Whitcroft
Verification-testing
Fix Released
Medium
Canonical Kernel Team
canonical-signing-jobs
Task00
Fix Released
Medium
Andy Whitcroft
linux-gkeop (Ubuntu)
Jammy
Fix Released
Medium
Unassigned

Bug Description

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
built:
  from: fae7cb9006c2f3d9
  route-entry: 2
delta:
  promote-to-proposed: [main, meta, signed, generate]
  promote-to-security: []
  promote-to-updates: [main, meta, signed]
flag:
  boot-testing-requested: true
  bugs-spammed: true
  proposed-announcement-sent: true
  proposed-testing-requested: true
issue: KSRU-10070
kernel-stable-master-bug: 2038209
packages:
  generate: linux-generate-gkeop
  main: linux-gkeop
  meta: linux-meta-gkeop
  signed: linux-signed-gkeop
phase: Complete
phase-changed: Thursday, 19. October 2023 13:48 UTC
reason: {}
synthetic:
  :promote-to-as-proposed: Invalid
trackers:
  focal/linux-gkeop-5.15: bug 2038179
variant: debs
versions:
  main: 5.15.0-1031.37
  meta: 5.15.0.1031.30
  signed: 5.15.0-1031.37
~~:
  announce:
    swm-transition-crankable: 2023-10-09 12:26:36.530673
  clamps:
    new-review: fae7cb9006c2f3d9
    promote-to-proposed: fae7cb9006c2f3d9
    self: 5.15.0-1031.37
    sru-review: fae7cb9006c2f3d9

See original description
Thadeu Lima de Souza Cascardo (cascardo)
tags: added: kernel-release-tracking-bug-live
description: updated
tags: added: kernel-sru-cycle-s2023.09.04-1
description: updated
description: updated
tags: added: kernel-sru-derivative-of-2038209
Changed in kernel-sru-workflow:
status: New → Confirmed
importance: Undecided → Medium
Ubuntu Kernel Bot (ubuntu-kernel-bot)
Changed in linux-gkeop (Ubuntu Jammy):
importance: Undecided → Medium
Changed in kernel-sru-workflow:
status: Confirmed → Triaged
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Changed in kernel-sru-workflow:
status: Triaged → In Progress
tags: added: kernel-jira-issue-ksru-10070
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Hui Wang (hui.wang)
summary: - jammy/linux-gkeop: <version to be filled> -proposed tracker
+ jammy/linux-gkeop: 5.15.0-1031.36 -proposed tracker
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
tags: added: kernel-jira-in-review
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
tags: removed: kernel-jira-in-review
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Revision history for this message
Andy Whitcroft (apw) wrote : Re: jammy/linux-gkeop: 5.15.0-1031.36 -proposed tracker

Looks to be based on linux from 2023.10.02-1

Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Hui Wang (hui.wang)
summary: - jammy/linux-gkeop: 5.15.0-1031.36 -proposed tracker
+ jammy/linux-gkeop: 5.15.0-1031.37 -proposed tracker
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
tags: added: kernel-jira-in-review
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
tags: removed: kernel-jira-in-review
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package linux-gkeop - 5.15.0-1031.37

---------------
linux-gkeop (5.15.0-1031.37) jammy; urgency=medium

  * jammy/linux-gkeop: 5.15.0-1031.37 -proposed tracker (LP: #2038180)

  * CVE-2023-42755
    - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6

  [ Ubuntu: 5.15.0-87.97 ]

  * jammy/linux: 5.15.0-87.97 -proposed tracker (LP: #2038209)
  * CVE-2023-4623
    - net/sched: sch_hfsc: Ensure inner classes have fsc curve
  * CVE-2023-42755
    - net/sched: Retire rsvp classifier
    - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
  * CVE-2023-34319
    - xen/netback: Fix buffer overrun triggered by unusual packet
  * CVE-2023-4921
    - net: sched: sch_qfq: Fix UAF in qfq_dequeue()
  * CVE-2023-42752
    - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
  * CVE-2023-4622
    - af_unix: Fix null-ptr-deref in unix_stream_sendpage().
  * CVE-2023-4244
    - netfilter: nft_set_rbtree: fix overlap expiration walk
    - netfilter: nf_tables: don't skip expired elements during walk
    - netfilter: nf_tables: adapt set backend to use GC transaction API
    - netfilter: nft_set_hash: mark set element as dead when deleting from packet
      path
    - netfilter: nf_tables: GC transaction API to avoid race with control plane
    - netfilter: nf_tables: remove busy mark and gc batch API
    - netfilter: nf_tables: don't fail inserts if duplicate has expired
    - netfilter: nf_tables: fix kdoc warnings after gc rework
    - netfilter: nf_tables: fix GC transaction races with netns and netlink event
      exit path
    - netfilter: nf_tables: GC transaction race with netns dismantle
    - netfilter: nf_tables: GC transaction race with abort path
    - netfilter: nf_tables: use correct lock to protect gc_list
    - netfilter: nf_tables: defer gc run if previous batch is still pending
    - netfilter: nft_dynset: disallow object maps
    - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
  * CVE-2023-42756
    - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
  * CVE-2023-42753
    - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
      ip_set_hash_netportnet.c
  * CVE-2023-5197
    - netfilter: nf_tables: skip bound chain in netns release path
    - netfilter: nf_tables: disallow rule removal from chain binding
  * CVE-2023-4881
    - netfilter: nftables: exthdr: fix 4-byte stack OOB write

 -- John Cabaj <email address hidden> Thu, 12 Oct 2023 15:44:15 -0500

Changed in linux-gkeop (Ubuntu Jammy):
status: New → Fix Released
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Ubuntu Kernel Bot (ubuntu-kernel-bot)
description: updated
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote : Workflow done!

All tasks have been completed and the bug is being closed

Changed in kernel-sru-workflow:
status: In Progress → Fix Committed
Ubuntu Kernel Bot (ubuntu-kernel-bot)
Changed in kernel-sru-workflow:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.