bionic/linux-azure-4.15: 4.15.0-1128.141 -proposed tracker

[Kleber Sacilotto de Souza]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
boot-testing-requested: true
built:
  route-entry: 1
delta:
  sru-review:
  - lrg
  - lrm
  - lrs
  - meta
  - main
  - signed
issue: KSRU-561
kernel-stable-master-bug: 1952780
packages:
  lrg: linux-restricted-generate-azure-4.15
  lrm: linux-restricted-modules-azure-4.15
  lrs: linux-restricted-signatures-azure-4.15
  main: linux-azure-4.15
  meta: linux-meta-azure-4.15
  signed: linux-signed-azure-4.15
phase: Holding before Promote to Proposed
phase-changed: Friday, 03. December 2021 16:16 UTC
reason:
  sru-review: Stalled -- review in progress
trackers:
  bionic/linux-azure-fips: bug 1952326
  trusty/linux-azure: bug 1952329
  xenial/linux-azure: bug 1952328
variant: debs
versions:
  lrm: 4.15.0-1128.141
  main: 4.15.0-1128.141
  meta: 4.15.0.1128.101
  signed: 4.15.0-1128.141

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-azure-4.15 - 4.15.0-1129.142

---------------
linux-azure-4.15 (4.15.0-1129.142) bionic; urgency=medium

  * bionic/linux-azure-4.15: 4.15.0-1129.142 -proposed tracker (LP: #1953649)

  [ Ubuntu: 4.15.0-166.174 ]

  * bionic/linux: 4.15.0-166.174 -proposed tracker (LP: #1953667)
  * Ubuntu version macros overflow with high ABI numbers (LP: #1953522)
    - SAUCE: Revert "stable: clamp SUBLEVEL in 4.14"
  * test_bpf.sh test in net of ubuntu_kernel_selftests failed on B-4.15 and
    variants (LP: #1953287)
    - SAUCE: Revert "bpf: add also cbpf long jump test cases with heavy expansion"
  * test_bpf.sh test in net of ubuntu_kernel_selftests failed on B-4.15 and
    variants (LP: #1953287) // CVE-2018-25020
    - bpf: fix truncated jump targets on heavy expansions

linux-azure-4.15 (4.15.0-1128.141) bionic; urgency=medium

  * bionic/linux-azure-4.15: 4.15.0-1128.141 -proposed tracker (LP: #1952330)

  * linux-azure: add Icelake servers support in no-HWP mode to
    cpufreq/intel_pstate driver (LP: #1952234)
    - cpufreq: intel_pstate: Add Icelake servers support in no-HWP mode

  [ Ubuntu: 4.15.0-165.173 ]

  * bionic/linux: 4.15.0-165.173 -proposed tracker (LP: #1952780)
  * Support builtin revoked certificates (LP: #1932029)
    - certs: Add EFI_CERT_X509_GUID support for dbx entries
    - certs: Move load_system_certificate_list to a common function
    - integrity: Move import of MokListRT certs to a separate routine
    - integrity: Load certs from the EFI MOK config table
    - certs: Add ability to preload revocation certs
    - certs: add 'x509_revocation_list' to gitignore
    - SAUCE: Dump stack when X.509 certificates cannot be loaded
    - [Packaging] build canonical-revoked-certs.pem from branch/arch certs
    - [Packaging] Revoke 2012 UEFI signing certificate as built-in
    - [Config] Configure CONFIG_SYSTEM_REVOCATION_KEYS with revoked keys
  * Support importing mokx keys into revocation list from the mok table
    (LP: #1928679)
    - efi: Support for MOK variable config table
    - efi: mokvar-table: fix some issues in new code
    - efi: mokvar: add missing include of asm/early_ioremap.h
    - efi/mokvar: Reserve the table only if it is in boot services data
    - SAUCE: integrity: Load mokx certs from the EFI MOK config table
    - SAUCE: integrity: add informational messages when revoking certs
  * CVE-2021-4002
    - arm64: tlb: Provide forward declaration of tlb_flush() before including
      tlb.h
    - mm: mmu_notifier fix for tlb_end_vma
    - hugetlbfs: flush TLBs correctly after huge_pmd_unshare

  [ Ubuntu: 4.15.0-164.172 ]

  * bionic/linux: 4.15.0-164.172 -proposed tracker (LP: #1952348)
  * Packaging resync (LP: #1786013)
    - [Packaging] resync update-dkms-versions helper
    - debian/dkms-versions -- update from kernel-versions (main/2021.11.29)
  * Bionic update: upstream stable patchset 2021-11-23 (LP: #1951997)
    - btrfs: always wait on ordered extents at fsync time
    - ARM: dts: at91: sama5d2_som1_ek: disable ISC node by default
    - xtensa: xtfpga: use CONFIG_USE_OF instead of CONFIG_OF
    - xtensa: xtfpga: Try software restart before simulating CPU reset
   ...