xenial/linux-oracle: 4.15.0-1050.54~16.04.1 -proposed tracker

[Khaled El Mously]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
boot-testing-requested: true
kernel-stable-master-bug: 1887044
packages:
  main: linux-oracle
  meta: linux-meta-oracle
  signed: linux-signed-oracle
phase: Complete
phase-changed: Tuesday, 21. July 2020 17:15 UTC
proposed-announcement-sent: true
proposed-testing-requested: true
reason: {}
variant: debs
versions:
  main: 4.15.0-1050.54~16.04.1
  meta: 4.15.0.1050.41
  signed: 4.15.0-1050.54~16.04.1

[Andy Whitcroft (apw)]

Seems to lose the change below:

- * Build and ship a signed wireguard.ko (LP: #1861284)
- - [Config] oracle: wireguard -- enable on all architectures
[...]
-do_dkms_wireguard = true

[Kleber Sacilotto de Souza (kleber-souza)]

@apw: those changes are expected, as commit 9c7ed04f349bb2b46289f87bd13c0a5954493ada applied for Ubuntu-oracle-4.15.0-1049.53 added a duplicated `do_dkms_wireguard=true` entry on `debian.oracle/rules.d/amd64.mk`. That commit was dropped during the re-spin for bionic/linux-oracle and this change is being reflected on xenial/linux-oracle as well.

[Po-Hsu Lin (cypressyew)]

4.15.0-1050.54~16.04.1 - oracle
Regression test CMPL, RTB.

Issue to note in oracle (amd64):
  ubuntu_kvm_unit_tests - apic timeouted (bug 1748103) memory (bug 1831449) pcid (bug 1827979) port80 (bug 1748105) vmx (bug 1821394) vmx_apic_passthrough_thread (bug 1822309) vmx_hlt_with_rvi_test (bug 1822308) vmx_host_state_area (bug 1866585) vmx_intr_window_test (bug 1866586) vmx_nm_test timeout (bug 1872419) vmx_nmi_window_test (bug 1866588) vmx_pending_event_test (bug 1866591)
  ubuntu_ltp_syscalls - btrfs fill_fs test in fallocate06 (bug 1866323) fanotify09 case 3 (bug 1876684) move_pages12 (bug 1831043) on some instance quotactl04 (bug 1854153) statx05 (bug 1798524) kill11 (bug 1865965)

Skipped / blacklisted:
 * ubuntu_bpf
 * ubuntu_ltp

Note:
  * ubuntu_kvm_unit_tests will hang with vmx_nm_test (bug 1872401) on VM.Standard2.16

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-oracle - 4.15.0-1050.54~16.04.1

---------------
linux-oracle (4.15.0-1050.54~16.04.1) xenial; urgency=medium

  * xenial/linux-oracle: 4.15.0-1050.54~16.04.1 -proposed tracker (LP: #1887043)

  [ Ubuntu: 4.15.0-1050.54 ]

  * bionic/linux-oracle: 4.15.0-1050.54 -proposed tracker (LP: #1887044)
  * bionic/linux: 4.15.0-112.113 -proposed tracker (LP: #1887048)
  * Packaging resync (LP: #1786013)
    - update dkms package versions
  * CVE-2020-11935
    - SAUCE: aufs: do not call i_readcount_inc()
    - SAUCE: aufs: bugfix, IMA i_readcount
  * CVE-2020-10757
    - mm: Fix mremap not considering huge pmd devmap
  * Update lockdown patches (LP: #1884159)
    - efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN
    - efi: Restrict efivar_ssdt_load when the kernel is locked down
    - powerpc/xmon: add read-only mode
    - powerpc/xmon: Restrict when kernel is locked down
    - [Config] CONFIG_XMON_DEFAULT_RO_MODE=y
    - SAUCE: acpi: disallow loading configfs acpi tables when locked down
  * seccomp_bpf fails on powerpc (LP: #1885757)
    - SAUCE: selftests/seccomp: fix ptrace tests on powerpc
  * Introduce the new NVIDIA 418-server and 440-server series, and update the
    current NVIDIA drivers (LP: #1881137)
    - [packaging] add signed modules for the 418-server and the 440-server
      flavours
  * bionic/linux: 4.15.0-111.112 -proposed tracker (LP: #1886999)
  * Bionic update: upstream stable patchset 2020-05-07 (LP: #1877461)
    - SAUCE: mlxsw: Add missmerged ERR_PTR hunk
  * linux 4.15.0-109-generic network DoS regression vs -108 (LP: #1886668)
    - SAUCE: Revert "netprio_cgroup: Fix unlimited memory leak of v2 cgroups"

  [ Ubuntu: 4.15.0-1048.52 ]

  * Build and ship a signed wireguard.ko (LP: #1861284)
    - [Config] oracle: wireguard -- enable on all architectures
  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts
    - update dkms package versions
  * Build and ship a signed wireguard.ko (LP: #1861284)
    - [Packaging] wireguard -- add support for building signed .ko
  * CVE-2019-16089
    - SAUCE: nbd_genl_status: null check for nla_nest_start
  * CVE-2019-19642
    - kernel/relay.c: handle alloc_percpu returning NULL in relay_open
  * CVE-2019-12380
    - efi/x86/Add missing error handling to old_memmap 1:1 mapping code
  * CVE-2019-19039 // CVE-2019-19377
    - btrfs: sink flush_fn to extent_write_cache_pages
    - btrfs: extent_io: Move the BUG_ON() in flush_write_bio() one level up
    - btrfs: Don't submit any btree write bio if the fs has errors
  * CVE-2019-19036
    - btrfs: volumes: Use more straightforward way to calculate map length
    - btrfs: tree-checker: Try to detect missing INODE_ITEM
    - Btrfs: tree-checker: detect file extent items with overlapping ranges
    - Btrfs: make tree checker detect checksum items with overlapping ranges
    - btrfs: harden agaist duplicate fsid on scanned devices
    - Btrfs: fix missing data checksums after replaying a log tree
    - btrfs: reloc: fix reloc root leak and NULL pointer dereference
    - btrfs: Validate child tree block's level and first key
    - btrfs: Detect unbalanced tree with empty le...

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

All tasks have been completed and the bug is being set to Fix Released