linux: 3.19.0-64.72 -proposed tracker

[Luis Henriques]

This bug is for tracking the 3.19.0-64.72 upload package. This bug will contain status and testing results related to that upload.

For an explanation of the tasks and the associated workflow see: https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
derivative-trackers-created: true
phase: Released
proposed-announcement-sent: true

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Brad Figg (brad-figg)]

Backport packages from packages here can be worked on, the following tracking bugs were opened for them:
linux-lts-vivid (14.04.1) - bug 1595990

[Luis Henriques (henrix)]

Before uploading this kernel into the kernel team PPA, it has been tested on amd64 using the POC and the iptables-test.py test-suite (from git://git.netfilter.org/iptables). It was verified that the test failures were exactly the same ones as in previous kernels.

[Brad Figg (brad-figg)]

Here's the relevant information:

 vivid linux 3.19.0-64.72 REGR summary<REGN: 2 MISS: 2 FAIL: 46 GOOD: 98>

Please verify test results in http://people.canonical.com/~kernel/status/adt-matrix/overall.txt

[Brad Figg (brad-figg)]

        tests ran: 10, failed: 1;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/modoc__3.19.0-64.72__2016-06-26_03-29-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 3, failed: 1;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/modoc__3.19.0-64.72__2016-06-26_04-20-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 18, failed: 3;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/modoc__3.19.0-64.72__2016-06-26_05-07-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 20, failed: 7;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/modoc__3.19.0-64.72__2016-06-26_05-53-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 136, failed: 0;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/modoc__3.19.0-64.72__2016-06-26_07-06-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 81, failed: 19;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/modoc__3.19.0-64.72__2016-06-26_08-00-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 2, failed: 2;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/modoc__3.19.0-64.72__2016-06-26_08-43-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 65, failed: 65;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/modoc__3.19.0-64.72__2016-06-26_09-01-00/results-index.html

[Steve Beattie (sbeattie)]

USN Needed

[Brad Figg (brad-figg)]

        tests ran: 10, failed: 0;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/dagmar__3.19.0-64.72__2016-06-26_19-56-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 10, failed: 0;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/dagmar__3.19.0-64.72__2016-06-26_20-52-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 30, failed: 0;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/dagmar__3.19.0-64.72__2016-06-26_21-49-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 3, failed: 0;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/dagmar__3.19.0-64.72__2016-06-26_22-42-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 15, failed: 0;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/dagmar__3.19.0-64.72__2016-06-26_23-30-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 15, failed: 0;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/dagmar__3.19.0-64.72__2016-06-27_00-01-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 20, failed: 0;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/dagmar__3.19.0-64.72__2016-06-27_00-29-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 20, failed: 1;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/dagmar__3.19.0-64.72__2016-06-27_02-10-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 136, failed: 0;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/dagmar__3.19.0-64.72__2016-06-27_04-03-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 136, failed: 0;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/dagmar__3.19.0-64.72__2016-06-27_05-02-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 10, failed: 0;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/cavac__3.19.0-64.72__2016-06-27_05-26-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 81, failed: 0;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/dagmar__3.19.0-64.72__2016-06-27_05-58-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 10, failed: 0;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/cavac__3.19.0-64.72__2016-06-27_06-33-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 30, failed: 0;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/cavac__3.19.0-64.72__2016-06-27_07-41-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 2, failed: 2;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/dagmar__3.19.0-64.72__2016-06-27_09-25-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 3, failed: 0;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/cavac__3.19.0-64.72__2016-06-27_08-56-00/results-index.html

[Luis Henriques (henrix)]

amd64 kernel in -proposed tested using the POC and the iptables-test.py test-suite (from git://git.netfilter.org/iptables)

[Brad Figg (brad-figg)]

        tests ran: 2, failed: 2;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/dagmar__3.19.0-64.72__2016-06-27_09-45-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 65, failed: 65;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/dagmar__3.19.0-64.72__2016-06-27_10-05-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 15, failed: 0;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/cavac__3.19.0-64.72__2016-06-27_10-02-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 65, failed: 65;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/dagmar__3.19.0-64.72__2016-06-27_10-27-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 15, failed: 0;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/cavac__3.19.0-64.72__2016-06-27_10-52-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 20, failed: 0;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/cavac__3.19.0-64.72__2016-06-27_11-36-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 20, failed: 1;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/cavac__3.19.0-64.72__2016-06-27_13-24-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 136, failed: 0;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/cavac__3.19.0-64.72__2016-06-27_15-14-00/results-index.html

[Brad Figg (brad-figg)]

        tests ran: 136, failed: 0;
  http://kernel.ubuntu.com/testing/3.19.0-64.72/cavac__3.19.0-64.72__2016-06-27_16-23-00/results-index.html

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 3.19.0-64.72

---------------
linux (3.19.0-64.72) vivid; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1595976

  [ Upstream Kernel Changes ]

  * netfilter: x_tables: validate e->target_offset early
    - LP: #1555338
    - CVE-2016-3134
  * netfilter: x_tables: make sure e->next_offset covers remaining blob
    size
    - LP: #1555338
    - CVE-2016-3134
  * netfilter: x_tables: fix unconditional helper
    - LP: #1555338
    - CVE-2016-3134
  * netfilter: x_tables: don't move to non-existent next rule
    - LP: #1595350
  * netfilter: x_tables: validate targets of jumps
    - LP: #1595350
  * netfilter: x_tables: add and use xt_check_entry_offsets
    - LP: #1595350
  * netfilter: x_tables: kill check_entry helper
    - LP: #1595350
  * netfilter: x_tables: assert minimum target size
    - LP: #1595350
  * netfilter: x_tables: add compat version of xt_check_entry_offsets
    - LP: #1595350
  * netfilter: x_tables: check standard target size too
    - LP: #1595350
  * netfilter: x_tables: check for bogus target offset
    - LP: #1595350
  * netfilter: x_tables: validate all offsets and sizes in a rule
    - LP: #1595350
  * netfilter: x_tables: don't reject valid target size on some
    architectures
    - LP: #1595350
  * netfilter: arp_tables: simplify translate_compat_table args
    - LP: #1595350
  * netfilter: ip_tables: simplify translate_compat_table args
    - LP: #1595350
  * netfilter: ip6_tables: simplify translate_compat_table args
    - LP: #1595350
  * netfilter: x_tables: xt_compat_match_from_user doesn't need a retval
    - LP: #1595350
  * netfilter: x_tables: do compat validation via translate_table
    - LP: #1595350
  * netfilter: x_tables: introduce and use xt_copy_counters_from_user
    - LP: #1595350

linux (3.19.0-63.71) vivid; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1595723

  [ Serge Hallyn ]

  * SAUCE: add a sysctl to disable unprivileged user namespace unsharing
    - LP: #1555338, #1595350

linux (3.19.0-62.70) vivid; urgency=low

  [ Kamal Mostafa ]

  * Release Tracking Bug
    - LP: #1591307

  [ Kamal Mostafa ]

  * [debian] getabis: Only git add $abidir if running in local repo
    - LP: #1584890
  * [debian] getabis: Fix inconsistent compiler versions check
    - LP: #1584890

  [ Tim Gardner ]

  * [Config] Remove arc4 from nic-modules
    - LP: #1582991

  [ Upstream Kernel Changes ]

  * Revert "usb: hub: do not clear BOS field during reset device"
    - LP: #1582864
  * ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS
    - LP: #1580379
    - CVE-2016-4569
  * ALSA: timer: Fix leak in events via snd_timer_user_ccallback
    - LP: #1581866
    - CVE-2016-4578
  * ALSA: timer: Fix leak in events via snd_timer_user_tinterrupt
    - LP: #1581866
    - CVE-2016-4578
  * net: fix a kernel infoleak in x25 module
    - LP: #1585366
    - CVE-2016-4580
  * get_rock_ridge_filename(): handle malformed NM entries
    - LP: #1583962
    - CVE-2016-4913
  * tipc: check nl sock before parsing nested attributes
    - LP: #1585365
    - CVE-2016-4951
  * netfilter: Set /proc/net entries owner to root in namespace
    - L...

[Brad Figg (brad-figg)]

The package has been published and the bug is being set to Fix Released