Karmic: 2.6.31-22.70 -proposed tracker

Accepted linux into karmic-proposed, the package will build now and be available in a few hours. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance!

Assigning to the Cert team for Cert Testing.

Source package is in "Rejected" Upload queue
https://launchpad.net/ubuntu/karmic/+queue?queue_state=4

while armel package is already "Done" in proposed
https://launchpad.net/ubuntu/karmic/+queue?queue_state=3

??? Any progress with main architectures?

Hmmh... the i386 package for 2.6.31-22.70 is available on proposed but I wonder why this isn't reflected in the "Done" queue...?

We ran the Regression Testing on the proposed kernel and did not find any regression with it, as for us the kernel is good to go. The results of the LTP, Autotest, and qa-regression-testing are available at: http://people.canonical.com/~pedro/kernel/kernel-2.6.31-22.70/

marking as v-needed until we receive the results from the cert testing.

Jean-Baptiste Lallement [2010-12-15 20:22 -0000]:
> marking as v-needed until we receive the results from the cert testing.

Ah, sorry about that. Thanks!

The cert team has currently no plans to test this Karmic proposed kernel - as discuss with sconklin

Tested by Pedro: http://people.canonical.com/~pedro/kernel/kernel-2.6.31-22.70/

This bug was fixed in the package linux - 2.6.31-22.70

---------------
linux (2.6.31-22.70) karmic-proposed; urgency=low

  [ Leann Ogasawara ]

  - LP: #683474
  * Revert "SAUCE: AF_ECONET saddr->cookie prevent NULL pointer
    dereference"
  * Revert "SAUCE: AF_ECONET SIOCSIFADDR ioctl does not check privileges"
  * Revert "SAUCE: AF_ECONET prevent kernel stack overflow"

  [ Upstream Kernel Changes ]

  * Btrfs: fix checks in BTRFS_IOC_CLONE_RANGE
    - CVE-2010-2538
  * xfs: validate untrusted inode numbers during lookup
    - CVE-2010-2943
  * xfs: rename XFS_IGET_BULKSTAT to XFS_IGET_UNTRUSTED
    - CVE-2010-2943
  * xfs: remove block number from inode lookup code
    - CVE-2010-2943
  * xfs: fix untrusted inode number lookup
    - CVE-2010-2943
  * drm/i915: Sanity check pread/pwrite
    - CVE-2010-2962
  * drm/i915: Rephrase pwrite bounds checking to avoid any potential
    overflow
    - CVE-2010-2962
  * tracing: Do not allow llseek to set_ftrace_filter
    - CVE-2010-3079
  * drivers/net/cxgb3/cxgb3_main.c: prevent reading uninitialized stack
    memory
    - CVE-2010-3296
  * drivers/net/eql.c: prevent reading uninitialized stack memory
    - CVE-2010-3297
  * drivers/net/usb/hso.c: prevent reading uninitialized memory
    - CVE-2010-3298
  * setup_arg_pages: diagnose excessive argument size
    - CVE-2010-3858
  * net: clear heap allocation for ETHTOOL_GRXCLSRLALL
    - CVE-2010-3861
  * ipc: shm: fix information leak to userland
    - CVE-2010-4072
  * econet: disallow NULL remote addr for sendmsg(), fixes CVE-2010-3849
    - CVE-2010-3849
  * econet: fix CVE-2010-3850
    - CVE-2010-3850
  * econet: fix CVE-2010-3848
    - CVE-2010-3848
 -- Leann Ogasawara <email address hidden> Tue, 30 Nov 2010 20:16:51 -0800

karmic-proposed linux-ec2 still needs to be tested.

for linux-ec2 I've started a build of karmic daily builds with '--proposed' option (http://bazaar.launchpad.net/%7Eubuntu-on-ec2/vmbuilder/automated-ec2-builds/revision/213). karmic server build 20110105 should be published in about 6 hours or so, and have the new kernel which can then be tested.

Pedro and I ran tests on the image provided by Scott (and Scott helped a lot!). I have posted partial results (I am missing the i386 tests ran by Pedro) at http://people.canonical.com/~cerdea/kernel/kernel-tests-2.6.31-22.70/. Tomorrow we will add the missing pieces.

I notice errors on the qa-regression-tests (test-kernel-security.py), and will talk with the security team tomorrow.

karmic has seen the end of its life and is no longer receiving any updates. Marking the karmic task for this ticket as "Won't Fix".