linux: 3.2.0-133.179 -proposed tracker

[Kleber Sacilotto de Souza]

This bug is for tracking the <version to be filled> upload package. This bug will contain status and testing results related to that upload.

For an explanation of the tasks and the associated workflow see: https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

backports:
derivatives:
-- swm properties --
boot-testing-requested: true
packages:
  lbm: linux-backports-modules-3.2.0
  main: linux
  meta: linux-meta
phase: Released
proposed-announcement-sent: true
proposed-testing-requested: true
reason: {}

[Po-Hsu Lin (cypressyew)]

Our MaaS server is still affected by bug 1739761
Please feel free to set this task to Invalid.

[Po-Hsu Lin (cypressyew)]

3.2.0-133.179 - generic
Regression test CMPL.
http://kernel.ubuntu.com/testing/tracker-index.html

Issue to note in amd64:
  ubuntu_qrt_apparmor - recaching test failed, passed after retest

Issue to note in i386:
  ubuntu_qrt_apparmor - recaching test failed, passed after retest
  ubuntu_qrt_kernel_security - test_021_aslr_dapper_libs passed (bug 1717856), test_022_aslr_hardy_vdso failed on this system, not a regression as it can be reproduced with 3.2.0-131, bug 1747630

Note that I'm using systems from the Cert lab for this cycle, 201307-13930 (i386) and 201308-14073 (amd64)

[Brad Figg (brad-figg)]

The package has been published and the bug is being set to Fix Released

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 3.2.0-150.197

---------------
linux (3.2.0-150.197) precise; urgency=medium

  * precise/linux: 3.2.0-150.197 -proposed tracker (LP: #1919172)

  * CVE-2021-27365
    - scsi: iscsi: Verify lengths on passthrough PDUs
    - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output
    - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE

  * CVE-2021-27363 // CVE-2021-27364
    - scsi: iscsi: Restrict sessions and handles to admin capabilities

  * CVE-2021-27364
    - scsi: iscsi: respond to netlink with unicast when appropriate
    - Add file_ns_capable() helper function for open-time capability checking
    - net: Add variants of capable for use on on sockets
    - netlink: Make the sending netlink socket availabe in NETLINK_CB

 -- Thadeu Lima de Souza Cascardo <email address hidden> Mon, 05 Apr 2021 14:23:29 -0300