jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker

[Stefan Bader]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
built:
  from: c11dbfcb4cbb0b05
  route-entry: 1
delta:
  promote-to-proposed: [lrm, main, lrs, meta, signed, lrg, generate]
  promote-to-security: []
  promote-to-updates: [lrs, main, meta, lrm, signed]
flag:
  boot-testing-requested: true
  bugs-spammed: true
  proposed-announcement-sent: true
  proposed-testing-requested: true
  stream-from-cycle: true
issue: KSRU-6464
packages:
  generate: linux-generate-oem-5.17
  lrg: linux-restricted-generate-oem-5.17
  lrm: linux-restricted-modules-oem-5.17
  lrs: linux-restricted-signatures-oem-5.17
  main: linux-oem-5.17
  meta: linux-meta-oem-5.17
  signed: linux-signed-oem-5.17
phase: Complete
phase-changed: Thursday, 02. March 2023 10:06 UTC
reason: {}
synthetic:
  :promote-to-as-proposed: Fix Released
variant: debs
versions:
  lrm: 5.17.0-1028.29
  main: 5.17.0-1028.29
  meta: 5.17.0.1028.26
  signed: 5.17.0-1028.29
~~:
  clamps:
    new-review: c11dbfcb4cbb0b05
    promote-to-proposed: c11dbfcb4cbb0b05
    self: 5.17.0-1028.29
    sru-review: c11dbfcb4cbb0b05

[Devices Certification Bot (ce-certification-qa)]

Kernel deb testing completes, no regressions found. Ready for Updates. Results here: https://trello.com/c/2UqWADCj/2864-oemjammy-linux-image-5170-1028-oem-5170-102829

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-oem-5.17 - 5.17.0-1028.29

---------------
linux-oem-5.17 (5.17.0-1028.29) jammy; urgency=medium

  * jammy/linux-oem-5.17: 5.17.0-1028.29 -proposed tracker (LP: #2004346)

  * CVE-2023-0045
    - x86/bugs: Flush IBP in ib_prctl_set()

  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/2023.01.30)

  * Keeps rebooting with AMD W6400, W6600, and W6800 graphic cards
    (LP: #2000110)
    - drm/amdgpu: move nbio ih_doorbell_range() into ih code for vega
    - drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega
    - drm/amdgpu: make sure to init common IP before gmc
    - drm/amdgpu: fix sdma doorbell init ordering on APUs

  * CVE-2022-47520
    - wifi: wilc1000: validate pairwise and authentication suite offsets

  * Improve arp_ndisc_evict_nocarrier.sh test result processing (LP: #2006546)
    - selftests: net: return non-zero for failures reported in
      arp_ndisc_evict_nocarrier

  * CVE-2022-43750
    - usb: mon: make mmapped memory read only

  * CVE-2023-0461
    - net/ulp: prevent ULP without clone op from entering the LISTEN status
    - net/ulp: use consistent error code when blocking ULP

  * CVE-2022-3565
    - mISDN: fix use-after-free bugs in l1oip timer handlers

  * CVE-2022-36879
    - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in
      xfrm_bundle_lookup()

  * CVE-2022-20369
    - NFSD: fix use-after-free in __nfs42_ssc_open()

  * arp_ndisc_evict_nocarrier.sh in net from ubuntu_kernel_selftests failed on
    J-oem-5.17 / K (LP: #1968310)
    - selftests: net: fix cleanup_v6() for arp_ndisc_evict_nocarrier

  * CVE-2022-20566
    - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put

  * Expose built-in trusted and revoked certificates (LP: #1996892)
    - [Packaging] Expose built-in trusted and revoked certificates

 -- Timo Aaltonen <email address hidden> Fri, 10 Feb 2023 12:15:41 +0200

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

All tasks have been completed and the bug is being closed