jammy/linux-gkeop: 5.15.0-1030.35 -proposed tracker

[Stefan Bader]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
built:
  from: 30aed3a7670935d7
  route-entry: 1
delta:
  promote-to-proposed: [main, meta, signed, generate]
  promote-to-security: []
  promote-to-updates: [main, meta, signed]
flag:
  boot-testing-requested: true
  bugs-spammed: true
  proposed-announcement-sent: true
  proposed-testing-requested: true
  stream-from-cycle: true
issue: KSRU-9828
kernel-stable-master-bug: 2036575
packages:
  generate: linux-generate-gkeop
  main: linux-gkeop
  meta: linux-meta-gkeop
  signed: linux-signed-gkeop
phase: Complete
phase-changed: Wednesday, 04. October 2023 08:47 UTC
reason: {}
synthetic:
  :promote-to-as-proposed: Fix Released
trackers:
  focal/linux-gkeop-5.15: bug 2036543
variant: debs
versions:
  main: 5.15.0-1030.35
  meta: 5.15.0.1030.29
  signed: 5.15.0-1030.35
~~:
  announce:
    swm-transition-crankable: 2023-09-20 09:11:37.807216
  clamps:
    new-review: 30aed3a7670935d7
    promote-to-proposed: 30aed3a7670935d7
    self: 5.15.0-1030.35
    sru-review: 30aed3a7670935d7

[Roxana Nicolescu (roxanan)]

Testing looks fine, nothing new, but I am behind things, and I did not hint everything

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-gkeop - 5.15.0-1030.35

---------------
linux-gkeop (5.15.0-1030.35) jammy; urgency=medium

  * jammy/linux-gkeop: 5.15.0-1030.35 -proposed tracker (LP: #2036544)

  [ Ubuntu: 5.15.0-86.96 ]

  * jammy/linux: 5.15.0-86.96 -proposed tracker (LP: #2036575)
  * 5.15.0-85 live migration regression (LP: #2036675)
    - Revert "KVM: x86: Always enable legacy FP/SSE in allowed user XFEATURES"
    - Revert "x86/kvm/fpu: Limit guest user_xfeatures to supported bits of XCR0"
  * Regression for ubuntu_bpf test build on Jammy 5.15.0-85.95 (LP: #2035181)
    - selftests/bpf: fix static assert compilation issue for test_cls_*.c
  * `refcount_t: underflow; use-after-free.` on hidon w/ 5.15.0-85-generic
    (LP: #2034447)
    - crypto: rsa-pkcs1pad - Use helper to set reqsize

linux-gkeop (5.15.0-1029.34) jammy; urgency=medium

  * jammy/linux-gkeop: 5.15.0-1029.34 -proposed tracker (LP: #2033793)

  * CVE-2023-20569
    - Ubuntu: [Config] gkeop: enable Speculative Return Stack Overflow mitigation

  * Jammy update: v5.15.118 upstream stable release (LP: #2030239)
    - [Config] gkeop: updateconfigs for DECNET

  * Jammy update: v5.15.117 upstream stable release (LP: #2030107)
    - [Config] gkeop: updateconfigs for BLK_DEV_SX8

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts

  [ Ubuntu: 5.15.0-85.95 ]

  * jammy/linux: 5.15.0-85.95 -proposed tracker (LP: #2033821)
  * Please enable Renesas RZ platform serial installer (LP: #2022361)
    - [Config] enable hihope RZ/G2M serial console
    - [Config] Mark sh-sci as built-in
  * Request backport of xen timekeeping performance improvements (LP: #2033122)
    - x86/xen/time: prefer tsc as clocksource when it is invariant
  * kdump doesn't work with UEFI secure boot and kernel lockdown enabled on
    ARM64 (LP: #2033007)
    - [Config]: Enable CONFIG_KEXEC_IMAGE_VERIFY_SIG
    - kexec, KEYS: make the code in bzImage64_verify_sig generic
    - arm64: kexec_file: use more system keyrings to verify kernel image signature
  * ubuntu_kernel_selftests:net:vrf-xfrm-tests.sh: 8 failed test cases on
    jammy/fips (LP: #2019880)
    - selftests: net: vrf-xfrm-tests: change authentication and encryption algos
  * ubuntu_kernel_selftests:net:tls: 88 failed test cases on jammy/fips
    (LP: #2019868)
    - selftests/harness: allow tests to be skipped during setup
    - selftests: net: tls: check if FIPS mode is enabled
  * A general-proteciton exception during guest migration to unsupported PKRU
    machine (LP: 2032164, reverted)
    - x86/kvm/fpu: Limit guest user_xfeatures to supported bits of XCR0
    - KVM: x86: Always enable legacy FP/SSE in allowed user XFEATURES
  * CVE-2023-4569
    - netfilter: nf_tables: deactivate catchall elements in next generation
  * CVE-2023-20569
    - x86/cpu, kvm: Add support for CPUID_80000021_EAX
    - x86/srso: Add a Speculative RAS Overflow mitigation
    - x86/srso: Add IBPB_BRTYPE support
    - x86/srso: Add SRSO_NO support
    - x86/srso: Add IBPB
    - x86/srso: Add IBPB on VMEXIT
    - x86/srso: Fix return thunks in generated code
    - x86/srso: Tie SBPB bit setting to microcode patch detection
    - x86: fix ba...

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

All tasks have been completed and the bug is being closed