jammy/linux-gke: 5.15.0-1061.67 -proposed tracker

[Stefan Bader]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
built:
  from: 8ad15d3c81e9c830
  route-entry: 2
comments:
  abi-testing: 1
delta:
  promote-to-proposed: [main, meta, signed, generate]
  promote-to-security: []
  promote-to-updates: [main, meta, signed]
flag:
  boot-testing-requested: true
  bugs-spammed: true
  proposed-announcement-sent: true
  proposed-testing-requested: true
  stream-from-cycle: true
issue: KSRU-12566
kernel-stable-master-bug: 2068242
packages:
  generate: linux-generate-gke
  main: linux-gke
  meta: linux-meta-gke
  signed: linux-signed-gke
phase: Complete
phase-changed: Tuesday, 02. July 2024 13:47 UTC
reason: {}
synthetic:
  :promote-to-as-proposed: Invalid
variant: debs
versions:
  main: 5.15.0-1061.67
  meta: 5.15.0.1061.60
  signed: 5.15.0-1061.67
~~:
  announce:
    swm-transition-crankable: 2024-06-12 09:53:58.707551
  clamps:
    new-review: 8ad15d3c81e9c830
    promote-to-proposed: 8ad15d3c81e9c830
    self: 5.15.0-1061.67
    sru-review: 8ad15d3c81e9c830
  tracker:
    last-message: '2024-07-01 01:10:20.249650+00:00'

[Ubuntu Kernel Ancillary Bot (ubuntu-kernel-ancillary-bot)]

amd64/gke canonical-certs.pem unchanged
amd64/gke canonical-revoked-certs.pem unchanged
amd64/gke fwinfo unchanged
amd64/gke modules unchanged
amd64/gke retpoline unchanged
arm64/gke canonical-certs.pem unchanged
arm64/gke canonical-revoked-certs.pem unchanged
arm64/gke fwinfo unchanged
arm64/gke modules unchanged
arm64/gke retpoline unchanged

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-gke - 5.15.0-1061.67

---------------
linux-gke (5.15.0-1061.67) jammy; urgency=medium

  * jammy/linux-gke: 5.15.0-1061.67 -proposed tracker (LP: #2068208)

  [ Ubuntu: 5.15.0-113.123 ]

  * jammy/linux: 5.15.0-113.123 -proposed tracker (LP: #2068242)
  * CVE-2024-26924
    - netfilter: nft_set_pipapo: do not free live element
  * CVE-2024-26643
    - netfilter: nf_tables: mark set as dead when unbinding anonymous set with
      timeout

  [ Ubuntu: 5.15.0-112.122 ]

  * jammy/linux: 5.15.0-112.122 -proposed tracker (LP: #2065898)
  * CVE-2024-21823
    - dmanegine: idxd: reformat opcap output to match bitmap_parse() input
    - dmaengine: idxd: add WQ operation cap restriction support
    - dmaengine: idxd: add knob for enqcmds retries
    - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist
    - dmaengine: idxd: add a new security check to deal with a hardware erratum
    - dmaengine: idxd: add a write() method for applications to submit work

 -- Jacob Martin <email address hidden> Wed, 12 Jun 2024 12:08:19 -0500

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

All tasks have been completed and the bug is being closed