jammy/linux-lowlatency: 5.15.0-27.28 -proposed tracker

[Andrea Righi]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
boot-testing-requested: true
bugs-spammed: true
built:
  from: 783b92e56cc20292
  route-entry: 2
delta:
  promote-to-proposed:
  - main
  - lrs
  - lrm
  - signed
  - meta
  - lrg
  promote-to-security: []
  promote-to-updates:
  - main
  - signed
  - lrs
  - meta
  - lrm
  sru-review:
  - meta
  - signed
  - main
  - lrm
  - lrs
  - lrg
kernel-stable-master-bug: 1968954
packages:
  lrg: linux-restricted-generate-lowlatency
  lrm: linux-restricted-modules-lowlatency
  lrs: linux-restricted-signatures-lowlatency
  main: linux-lowlatency
  meta: linux-meta-lowlatency
  signed: linux-signed-lowlatency
phase: Complete
phase-changed: Tuesday, 26. April 2022 19:51 UTC
proposed-announcement-sent: true
proposed-testing-requested: true
reason: {}
synthetic:
  :promote-to-as-proposed: Fix Released
trackers:
  jammy/linux-uc22-lowlatency: bug 1969500
variant: debs
versions:
  lrm: 5.15.0-27.28+1
  main: 5.15.0-27.28
  meta: 5.15.0.27.28
  signed: 5.15.0-27.28
~~:
  clamps:
    promote-to-proposed: 783b92e56cc20292
    self: 5.15.0-27.28
    sru-review: 783b92e56cc20292

[Andy Whitcroft (apw)]

LRM looks to be producing -generic packages.

[Kleber Sacilotto de Souza (kleber-souza)]

Certification tests not needed for this security-only release.

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-lowlatency - 5.15.0-27.28

---------------
linux-lowlatency (5.15.0-27.28) jammy; urgency=medium

  * jammy/linux-lowlatency: 5.15.0-27.28 -proposed tracker (LP: #1969459)

  [ Ubuntu: 5.15.0-27.28 ]

  * jammy/linux: 5.15.0-27.28 -proposed tracker (LP: #1968954)

  [ Ubuntu: 5.15.0-26.27 ]

  * jammy/linux: 5.15.0-26.27 -proposed tracker (LP: #1968850)
  * CVE-2022-1016
    - netfilter: nf_tables: initialize registers in nft_do_chain()
  * CVE-2022-1015
    - netfilter: nf_tables: validate registers coming from userspace.
  * CVE-2022-26490
    - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION
  * harden indirect calls against BHI attacks (LP: #1967579)
    - objtool: Classify symbols
    - objtool: Explicitly avoid self modifying code in .altinstr_replacement
    - objtool: Shrink struct instruction
    - objtool,x86: Replace alternatives with .retpoline_sites
    - x86/retpoline: Remove unused replacement symbols
    - x86/asm: Fix register order
    - x86/asm: Fixup odd GEN-for-each-reg.h usage
    - x86/retpoline: Move the retpoline thunk declarations to nospec-branch.h
    - x86/retpoline: Create a retpoline thunk array
    - x86/alternative: Implement .retpoline_sites support
    - x86/alternative: Handle Jcc __x86_indirect_thunk_\reg
    - x86/alternative: Try inline spectre_v2=retpoline,amd
    - x86/alternative: Add debug prints to apply_retpolines()
    - bpf,x86: Simplify computing label offsets
    - bpf,x86: Respect X86_FEATURE_RETPOLINE*

 -- Andrea Righi <email address hidden> Tue, 19 Apr 2022 15:46:59 +0200

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

All tasks have been completed and the bug is being set to Fix Released