jammy/linux-starfive-6.5: 6.5.0-1016.17~22.04.1 -proposed tracker

[Stefan Bader]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
built:
  from: b9457468e3120527
  route-entry: 2
comments:
  abi-testing: 1
delta:
  promote-to-proposed: [main, meta]
  promote-to-security: []
  promote-to-updates: [main, meta]
flag:
  boot-testing-requested: true
  bugs-spammed: true
  proposed-announcement-sent: true
  proposed-testing-requested: true
  stream-from-cycle: true
issue: KSRU-12540
kernel-stable-master-bug: 2068182
packages:
  main: linux-starfive-6.5
  meta: linux-meta-starfive-6.5
phase: Complete
phase-changed: Tuesday, 02. July 2024 13:46 UTC
reason: {}
synthetic:
  :promote-to-as-proposed: Invalid
variant: debs
versions:
  main: 6.5.0-1016.17~22.04.1
  meta: 6.5.0.1016.17~22.04.1
~~:
  announce:
    swm-transition-crankable: 2024-06-19 11:12:03.139960
    swm-transition-peer-reviewable: 2024-06-26 12:02:44.029132
  clamps:
    new-review: b9457468e3120527
    promote-to-proposed: b9457468e3120527
    self: 6.5.0-1016.17~22.04.1
    sru-review: b9457468e3120527
  tracker:
    last-message: '2024-07-01 08:52:49.560714+00:00'

[Ubuntu Kernel Ancillary Bot (ubuntu-kernel-ancillary-bot)]

riscv64/starfive canonical-certs.pem unchanged
riscv64/starfive canonical-revoked-certs.pem unchanged
riscv64/starfive fwinfo unchanged
riscv64/starfive modules unchanged
riscv64/starfive retpoline unchanged

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-starfive-6.5 - 6.5.0-1016.17~22.04.1

---------------
linux-starfive-6.5 (6.5.0-1016.17~22.04.1) jammy; urgency=medium

  * jammy/linux-starfive-6.5: 6.5.0-1016.17~22.04.1 -proposed tracker
    (LP: #2068181)

  [ Ubuntu: 6.5.0-1016.17 ]

  * mantic/linux-starfive: 6.5.0-1016.17 -proposed tracker (LP: #2068182)
  * mantic/linux: 6.5.0-42.42 -proposed tracker (LP: #2068188)
  * CVE-2024-26925
    - netfilter: nf_tables: release batch on table validation from abort path
    - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
  * CVE-2024-26924
    - netfilter: nft_set_pipapo: do not free live element
  * CVE-2024-26809
    - netfilter: nft_set_pipapo: release elements in clone only from destroy path
  * Mantic update: upstream stable patchset 2024-04-02 (LP: #2059991) //
    CVE-2024-26809
    - netfilter: nft_set_pipapo: store index in scratch maps
    - netfilter: nft_set_pipapo: add helper to release pcpu scratch area
    - netfilter: nft_set_pipapo: remove scratch_aligned pointer
  * CVE-2024-26643
    - netfilter: nf_tables: mark set as dead when unbinding anonymous set with
      timeout
  * mantic/linux: 6.5.0-41.41 -proposed tracker (LP: #2065893)
  * CVE-2024-21823
    - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist
    - dmaengine: idxd: add a new security check to deal with a hardware erratum
    - dmaengine: idxd: add a write() method for applications to submit work

 -- Hannah Peuckmann <email address hidden> Thu, 20 Jun 2024 10:07:40 +0200

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

All tasks have been completed and the bug is being closed