focal/linux-iot: 5.4.0-1005.7 -proposed tracker

[Stefan Bader]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
built:
  from: b05c75ab207b5551
  route-entry: 1
delta:
  promote-to-proposed: [meta, signed, main]
  promote-to-security: []
  promote-to-updates: [meta, main, signed]
flag:
  boot-testing-requested: true
  bugs-spammed: true
  proposed-announcement-sent: true
  proposed-testing-requested: true
issue: KSRU-4994
kernel-stable-master-bug: 1990152
packages:
  main: linux-iot
  meta: linux-meta-iot
  signed: linux-signed-iot
phase: Complete
phase-changed: Wednesday, 26. October 2022 16:18 UTC
reason: {}
synthetic:
  :promote-to-as-proposed: Fix Released
trackers:
  focal/linux-uc20-iot: bug 1989877
variant: debs
versions:
  main: 5.4.0-1005.7
  meta: 5.4.0.1005.7
  signed: 5.4.0-1005.7
~~:
  clamps:
    new-review: b05c75ab207b5551
    promote-to-proposed: b05c75ab207b5551
    self: 5.4.0-1005.7
    sru-review: b05c75ab207b5551

[Andy Whitcroft (apw)]

# title kernel 1989878
validate --publications ~canonical-kernel-team/+archive/ubuntu/ppa/+sourcepub/13985475 ~canonical-kernel-team/+archive/ubuntu/ppa/+sourcepub/13985476 ~canonical-kernel-team/+archive/ubuntu/ppa/+sourcepub/13985477
copy --from ppa:canonical-kernel-team/ubuntu/ppa --from-suite focal --sources linux-iot/5.4.0-1005.7 linux-meta-iot/5.4.0.1005.7 linux-signed-iot/5.4.0-1005.7/signing --to ppa:canonical-signing/ubuntu/primary --to-suite focal
copy --from ppa:canonical-signing/ubuntu/primary --from-suite focal --sources linux-iot/5.4.0-1005.7 linux-meta-iot/5.4.0.1005.7 linux-signed-iot/5.4.0-1005.7 --to ubuntu --to-suite focal-proposed
delete --from ppa:canonical-signing/ubuntu/primary --from-suite focal --sources linux-iot/5.4.0-1005.7 linux-meta-iot/5.4.0.1005.7 linux-signed-iot/5.4.0-1005.7

[Jesse Sung (wenchien)]

Based on the previous cycle, for now cert team only works on the kernel snap for this kernel. Change the status of certification-testing to invalid.

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-iot - 5.4.0-1005.7

---------------
linux-iot (5.4.0-1005.7) focal; urgency=medium

  * focal/linux-iot: 5.4.0-1005.7 -proposed tracker (LP: #1989878)

  * Focal update: v5.4.208 upstream stable release (LP: #1988225)
    - [Config] updateconfigs for IMA_TEMPLATE
    - [Config] updateconfigs for REFCOUNT_FULL

  [ Ubuntu: 5.4.0-128.144 ]

  * focal/linux: 5.4.0-128.144 -proposed tracker (LP: #1990152)
  * CVE-2022-3176
    - io_uring: disable polling pollfree files
  * ip/nexthop: fix default address selection for connected nexthop
    (LP: #1988809)
    - selftests/net: test nexthop without gw
  * ip/nexthop: fix default address selection for connected nexthop
    (LP: #1988809) // icmp_redirect.sh in ubuntu_kernel_selftests failed on
    Jammy 5.15.0-49.55 (LP: #1990124)
    - ip: fix triggering of 'icmp redirect'

  [ Ubuntu: 5.4.0-127.143 ]

  * focal/linux: 5.4.0-127.143 -proposed tracker (LP: #1989892)
  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/2022.09.19)
  * [UBUNTU 20.04] mlx5 driver crashes on accessing device attributes during
    recovery (LP: #1987287)
    - net/mlx5: Avoid processing commands before cmdif is ready
  * Focal update: v5.4.210 upstream stable release (LP: #1989230)
    - thermal: Fix NULL pointer dereferences in of_thermal_ functions
    - ACPI: video: Force backlight native for some TongFang devices
    - ACPI: video: Shortening quirk list by identifying Clevo by board_name only
    - ACPI: APEI: Better fix to avoid spamming the console with old error logs
    - bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds()
    - selftests/bpf: Extend verifier and bpf_sock tests for dst_port loads
    - bpf: Test_verifier, #70 error message updates for 32-bit right shift
    - KVM: Don't null dereference ops->destroy
    - selftests: KVM: Handle compiler optimizations in ucall
    - media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls
    - macintosh/adb: fix oob read in do_adb_query() function
    - x86/speculation: Add RSB VM Exit protections
    - x86/speculation: Add LFENCE to RSB fill sequence
    - Linux 5.4.210
  * Focal update: v5.4.209 upstream stable release (LP: #1989228)
    - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put
    - ntfs: fix use-after-free in ntfs_ucsncmp()
    - s390/archrandom: prevent CPACF trng invocations in interrupt context
    - tcp: Fix data-races around sysctl_tcp_dsack.
    - tcp: Fix a data-race around sysctl_tcp_app_win.
    - tcp: Fix a data-race around sysctl_tcp_adv_win_scale.
    - tcp: Fix a data-race around sysctl_tcp_frto.
    - tcp: Fix a data-race around sysctl_tcp_nometrics_save.
    - ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS)
    - ice: do not setup vlan for loopback VSI
    - scsi: ufs: host: Hold reference returned by of_parse_phandle()
    - tcp: Fix a data-race around sysctl_tcp_limit_output_bytes.
    - tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit.
    - net: ping6: Fix memleak in ipv6_renew_options().
    - ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr
    - igmp: Fix d...

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

All tasks have been completed and the bug is being closed