Bug #2048900 “noble/linux-ibm: 6.6.0-1001.1 -proposed tracker” : Bugs : Kernel SRU Workflow

Paolo Pisati (p-pisati) on 2024-01-10

tags:	added: kernel-release-tracking-bug-live
description:	updated
tags:	added: kernel-sru-cycle-d2024.01.02-1
description:	updated
tags:	added: kernel-sru-derivative-of-2048859
Changed in kernel-sru-workflow:
status:	New → Confirmed
importance:	Undecided → Medium

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-01-10

Changed in linux-ibm (Ubuntu Noble):
importance:	Undecided → Medium
Changed in kernel-sru-workflow:
status:	Confirmed → Triaged
description:	updated
Changed in kernel-sru-workflow:
status:	Triaged → In Progress

Paolo Pisati (p-pisati) on 2024-01-10

summary:

- noble/linux-ibm: <version to be filled> -proposed tracker
+ noble/linux-ibm: 6.6.0-1001.1 -proposed tracker

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-01-10

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-01-10

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-01-10

description:

updated

Paolo Pisati (p-pisati) on 2024-01-11

description:

updated

Revision history for this message

Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote on 2024-01-11: Kernel requires additional signoff

#1

Major kernel version bump with signed kernels; signing-review required.
linux-image major version change detected, upgrade testing required; kernel-signoff required.

description:

updated

Revision history for this message

Ubuntu Kernel Ancillary Bot (ubuntu-kernel-ancillary-bot) wrote on 2024-01-11: ABI testing

#2

Download full text (12.4 KiB)

amd64/ibm canonical-certs.pem unchanged
amd64/ibm canonical-revoked-certs.pem unchanged
amd64/ibm fwinfo differs
  @@ -402,6 +402,8 @@
   firmware: amdgpu/psp_13_0_7_ta.bin
   firmware: amdgpu/psp_13_0_8_ta.bin
   firmware: amdgpu/psp_13_0_8_toc.bin
  +firmware: amdgpu/psp_14_0_0_ta.bin (ok)
  +firmware: amdgpu/psp_14_0_0_toc.bin (ok)
   firmware: amdgpu/raven2_asd.bin
   firmware: amdgpu/raven2_ce.bin
   firmware: amdgpu/raven2_gpu_info.bin
  @@ -443,6 +445,7 @@
   firmware: amdgpu/sdma_6_0_1.bin
   firmware: amdgpu/sdma_6_0_2.bin
   firmware: amdgpu/sdma_6_0_3.bin
  +firmware: amdgpu/sdma_6_1_0.bin (ok)
   firmware: amdgpu/si58_mc.bin
   firmware: amdgpu/sienna_cichlid_cap.bin
   firmware: amdgpu/sienna_cichlid_ce.bin
  @@ -813,6 +816,7 @@
   firmware: cmmb_venice_12mhz.inp
   firmware: comedi/jr3pci.idm
   firmware: cp204unx.cod
  +firmware: cs42l43.bin (ok)
   firmware: cs46xx/cwc4630
   firmware: cs46xx/cwcasync
   firmware: cs46xx/cwcbinhack
  @@ -1156,6 +1160,7 @@
   firmware: liquidio/lio_23xx_nic.bin
   firmware: liquidio/lio_410nv_nic.bin
   firmware: me2600_firmware.bin
  +firmware: me4000_firmware.bin (ok)
   firmware: mediatek/BT_RAM_CODE_MT7961_1_2_hdr.bin
   firmware: mediatek/WIFI_MT7922_patch_mcu_1_1_hdr.bin
   firmware: mediatek/WIFI_MT7961_patch_mcu_1_2_hdr.bin
  @@ -1179,6 +1184,8 @@
   firmware: mediatek/mt7916_rom_patch.bin
   firmware: mediatek/mt7916_wa.bin
   firmware: mediatek/mt7916_wm.bin
  +firmware: mediatek/mt7925/BT_RAM_CODE_MT7925_1_1_hdr.bin (ok)
  +firmware: mediatek/mt7996/mt7996_dsp.bin (ok)
   firmware: mediatek/mt7996/mt7996_rom_patch.bin
   firmware: mediatek/mt7996/mt7996_wa.bin
   firmware: mediatek/mt7996/mt7996_wm.bin
amd64/ibm modules differs
  @@ -226,6 +226,8 @@
   adl_pci6208
   adl_pci7x3x
   adl_pci8164
  +adl_pci9111 (ok)
  +adl_pci9118 (ok)
   adm1025
   adm1026
   adm1029
  @@ -247,6 +249,7 @@
   adp5589-keys
   adp8860_bl
   adp8870_bl
  +adq12b (ok)
   adrf6780
   ads7828
   ads7846
  @@ -273,10 +276,12 @@
   adv7511-v4l2
   adv7604
   adv7842
  +adv_pci1710 (ok)
   adv_pci1720
   adv_pci1723
   adv_pci1724
   adv_pci1760
  +adv_pci_dio (ok)
   adv_swbutton
   advansys
   advantech_ec_wdt
  @@ -325,6 +330,8 @@
   aic79xx
   aic7xxx
   aic94xx
  +aio_aio12_8 (ok)
  +aio_iiro_16 (ok)
   aiptek
   aircable
   airo
  @@ -380,7 +387,14 @@
   amdxcp
   amilo-rfkill
   amlogic-gxl-crypto
  +amplc_dio200 (ok)
  +amplc_dio200_common (ok)
  +amplc_dio200_pci (ok)
  +amplc_pc236 (ok)
   amplc_pc236_common
  +amplc_pc263 (ok)
  +amplc_pci224 (ok)
  +amplc_pci230 (ok)
   amplc_pci236
   amplc_pci263
   ams-iaq-core
  @@ -535,6 +549,7 @@
   authencesn
   autofs4
   avmfritz
  +aw37503-regulator (ok)
   ax25
   ax88179_178a
   ax88796b
  @@ -720,6 +735,7 @@
   button
   c2port-duramar2150
   c67x00
  +c6xdigio (ok)
   c_can
   c_can_pci
   c_can_platform
  @@ -759,8 +775,11 @@
   cavium_ptp
   cb710
   cb710-mmc
  +cb_das16_cs (ok)
  +cb_pcidas (ok)
   cb_pcidas64
   cb_pcidda
  +cb_pc...

amd64/ibm canonical-certs.pem unchanged
amd64/ibm canonical-revoked-certs.pem unchanged
amd64/ibm fwinfo differs
  @@ -402,6 +402,8 @@
   firmware:       amdgpu/psp_13_0_7_ta.bin
   firmware:       amdgpu/psp_13_0_8_ta.bin
   firmware:       amdgpu/psp_13_0_8_toc.bin
  +firmware:       amdgpu/psp_14_0_0_ta.bin (ok)
  +firmware:       amdgpu/psp_14_0_0_toc.bin (ok)
   firmware:       amdgpu/raven2_asd.bin
   firmware:       amdgpu/raven2_ce.bin
   firmware:       amdgpu/raven2_gpu_info.bin
  @@ -443,6 +445,7 @@
   firmware:       amdgpu/sdma_6_0_1.bin
   firmware:       amdgpu/sdma_6_0_2.bin
   firmware:       amdgpu/sdma_6_0_3.bin
  +firmware:       amdgpu/sdma_6_1_0.bin (ok)
   firmware:       amdgpu/si58_mc.bin
   firmware:       amdgpu/sienna_cichlid_cap.bin
   firmware:       amdgpu/sienna_cichlid_ce.bin
  @@ -813,6 +816,7 @@
   firmware:       cmmb_venice_12mhz.inp
   firmware:       comedi/jr3pci.idm
   firmware:       cp204unx.cod
  +firmware:       cs42l43.bin (ok)
   firmware:       cs46xx/cwc4630
   firmware:       cs46xx/cwcasync
   firmware:       cs46xx/cwcbinhack
  @@ -1156,6 +1160,7 @@
   firmware:       liquidio/lio_23xx_nic.bin
   firmware:       liquidio/lio_410nv_nic.bin
   firmware:       me2600_firmware.bin
  +firmware:       me4000_firmware.bin (ok)
   firmware:       mediatek/BT_RAM_CODE_MT7961_1_2_hdr.bin
   firmware:       mediatek/WIFI_MT7922_patch_mcu_1_1_hdr.bin
   firmware:       mediatek/WIFI_MT7961_patch_mcu_1_2_hdr.bin
  @@ -1179,6 +1184,8 @@
   firmware:       mediatek/mt7916_rom_patch.bin
   firmware:       mediatek/mt7916_wa.bin
   firmware:       mediatek/mt7916_wm.bin
  +firmware:       mediatek/mt7925/BT_RAM_CODE_MT7925_1_1_hdr.bin (ok)
  +firmware:       mediatek/mt7996/mt7996_dsp.bin (ok)
   firmware:       mediatek/mt7996/mt7996_rom_patch.bin
   firmware:       mediatek/mt7996/mt7996_wa.bin
   firmware:       mediatek/mt7996/mt7996_wm.bin
amd64/ibm modules differs
  @@ -226,6 +226,8 @@
   adl_pci6208
   adl_pci7x3x
   adl_pci8164
  +adl_pci9111 (ok)
  +adl_pci9118 (ok)
   adm1025
   adm1026
   adm1029
  @@ -247,6 +249,7 @@
   adp5589-keys
   adp8860_bl
   adp8870_bl
  +adq12b (ok)
   adrf6780
   ads7828
   ads7846
  @@ -273,10 +276,12 @@
   adv7511-v4l2
   adv7604
   adv7842
  +adv_pci1710 (ok)
   adv_pci1720
   adv_pci1723
   adv_pci1724
   adv_pci1760
  +adv_pci_dio (ok)
   adv_swbutton
   advansys
   advantech_ec_wdt
  @@ -325,6 +330,8 @@
   aic79xx
   aic7xxx
   aic94xx
  +aio_aio12_8 (ok)
  +aio_iiro_16 (ok)
   aiptek
   aircable
   airo
  @@ -380,7 +387,14 @@
   amdxcp
   amilo-rfkill
   amlogic-gxl-crypto
  +amplc_dio200 (ok)
  +amplc_dio200_common (ok)
  +amplc_dio200_pci (ok)
  +amplc_pc236 (ok)
   amplc_pc236_common
  +amplc_pc263 (ok)
  +amplc_pci224 (ok)
  +amplc_pci230 (ok)
   amplc_pci236
   amplc_pci263
   ams-iaq-core
  @@ -535,6 +549,7 @@
   authencesn
   autofs4
   avmfritz
  +aw37503-regulator (ok)
   ax25
   ax88179_178a
   ax88796b
  @@ -720,6 +735,7 @@
   button
   c2port-duramar2150
   c67x00
  +c6xdigio (ok)
   c_can
   c_can_pci
   c_can_platform
  @@ -759,8 +775,11 @@
   cavium_ptp
   cb710
   cb710-mmc
  +cb_das16_cs (ok)
  +cb_pcidas (ok)
   cb_pcidas64
   cb_pcidda
  +cb_pcimdas (ok)
   cb_pcimdda
   cbc
   cc10001_adc
  @@ -886,9 +905,11 @@
   com90io
   com90xx
   comedi
  +comedi_8254 (ok)
   comedi_8255
   comedi_bond
   comedi_example_test
  +comedi_isadma (ok)
   comedi_parport
   comedi_pci
   comedi_pcmcia
  @@ -979,6 +1000,9 @@
   crypto_user
   cryptomgr
   cs3308
  +cs42l43 (ok)
  +cs42l43-i2c (ok)
  +cs42l43-sdw (ok)
   cs5345
   cs53l32a
   cs_dsp
  @@ -1089,7 +1113,17 @@
   da9150-gpadc
   da9210-regulator
   da9211-regulator
  +dac02 (ok)
   daqboard2000
  +das08 (ok)
  +das08_cs (ok)
  +das08_isa (ok)
  +das08_pci (ok)
  +das16 (ok)
  +das16m1 (ok)
  +das1800 (ok)
  +das6402 (ok)
  +das800 (ok)
   davicom
   dax
   dax_cxl
  @@ -1113,7 +1147,6 @@
   dell-smbios
   dell-smm-hwmon
   dell-smo8800
  -dell-uart-backlight (rejected)
   dell-wmi
   dell-wmi-aio
   dell-wmi-ddv
  @@ -1199,6 +1232,7 @@
   dme1737
   dmfe
   dmi-sysfs
  +dmm32at (ok)
   dmx3191d
   dnet
   dns_resolver
  @@ -1221,6 +1255,7 @@
   drm_buddy
   drm_display_helper
   drm_dma_helper
  +drm_exec (ok)
   drm_kms_helper
   drm_mipi_dbi
   drm_mipi_dsi
  @@ -1254,6 +1289,12 @@
   dst
   dst_ca
   dstr
  +dt2801 (ok)
  +dt2811 (ok)
  +dt2814 (ok)
  +dt2815 (ok)
  +dt2817 (ok)
  +dt282x (ok)
   dt3000
   dt3155
   dt9812
  @@ -1312,6 +1353,7 @@
   dw-i3c-master
   dw-xdata-pcie
   dw9714
  +dw9719 (ok)
   dw9768
   dw9807-vcm
   dw_dmac
  @@ -1566,6 +1608,7 @@
   fixed
   fixed_phy
   fjes
  +fl512 (ok)
   floppy
   fm10k
   fm801-gp
  @@ -1723,6 +1766,7 @@
   gpio-da9052
   gpio-da9055
   gpio-dln2
  +gpio-ds4520 (ok)
   gpio-dwapb
   gpio-elkhartlake
   gpio-exar
  @@ -1937,6 +1981,7 @@
   hid-gfrm
   hid-glorious
   hid-google-hammer
  +hid-google-stadiaff (ok)
   hid-gt683r
   hid-gyration
   hid-holtek-kbd
  @@ -2058,6 +2103,7 @@
   hostap_cs
   hostap_pci
   hostap_plx
  +hp-bioscfg (ok)
   hp-wmi
   hp-wmi-sensors
   hp03
  @@ -2068,6 +2114,7 @@
   hpsa
   hptiop
   hpwdt
  +hs3001 (ok)
   hsi
   hsi_char
   hso
  @@ -2176,6 +2223,7 @@
   i7core_edac
   i8042
   i82092
  +i8254 (ok)
   i82975x_edac
   i915
   iTCO_vendor_support
  @@ -2234,6 +2282,7 @@
   igen6_edac
   igorplugusb
   iguanair
  +ii_pci20kc (ok)
   iio-mux
   iio-rescale
   iio-trig-hrtimer
  @@ -2393,6 +2442,7 @@
   inv-mpu6050
   inv-mpu6050-i2c
   inv-mpu6050-spi
  +inv_sensors_timestamp (ok)
   io_edgeport
   io_ti
   ioatdma
  @@ -2508,6 +2558,7 @@
   iqs626a
   iqs62x
   iqs62x-keys
  +iqs7211 (ok)
   iqs7222
   ir-imon-decoder
   ir-jvc-decoder
  @@ -2530,6 +2581,7 @@
   irps5401
   irq-madera
   irqbypass
  +irsd200 (ok)
   isci
   iscsi_boot_sysfs
   iscsi_ibft
  @@ -2568,6 +2620,8 @@
   ite-cir
   itg3200
   iuu_phoenix
  +ivsc-ace (ok)
  +ivsc-csi (ok)
   ivtv
   ivtv-alsa
   ivtvfb
  @@ -2726,6 +2780,7 @@
   leds-pca9532
   leds-pca955x
   leds-pca963x
  +leds-pca995x (ok)
   leds-pwm
   leds-pwm-multicolor
   leds-regulator
  @@ -2801,7 +2856,6 @@
   libsha1
   libsha256
   libwx
  -lightning (rejected)
   line-display
   lineage-pem
   linear
  @@ -2851,6 +2905,7 @@
   lnbp21
   lnbp22
   lockd
  +loongson (ok)
   loop
   lp
   lp3943
  @@ -2970,6 +3025,7 @@
   map_ram
   map_rom
   marvell
  +marvell-88q2xxx (ok)
   marvell-88x2222
   marvell10g
   matrix-keymap
  @@ -3053,6 +3109,7 @@
   max77693-regulator
   max77693_charger
   max77826-regulator
  +max77857-regulator (ok)
   max77976_charger
   max8649
   max8660
  @@ -3103,6 +3160,7 @@
   mchp48l640
   mchp_pci1xxxx_gp
   mchp_pci1xxxx_gpio
  +mchp_pci1xxxx_otpe2p (ok)
   mcp251x
   mcp251xfd
   mcp3021
  @@ -3114,6 +3172,7 @@
   mcp4131
   mcp4531
   mcp4725
  +mcp4728 (ok)
   mcp4922
   mcr20a
   mcs5000_ts
  @@ -3138,6 +3197,7 @@
   mdio-regmap
   mdio-thunder
   mdio_devres
  +me4000 (ok)
   me_daq
   mediatek-ge
   megaraid
  @@ -3250,6 +3310,7 @@
   mp2975
   mp5023
   mp8859
  +mpc624 (ok)
   mpi
   mpi3mr
   mpl115
  @@ -3353,6 +3414,8 @@
   mt7921e
   mt7921s
   mt7921u
  +mt792x-lib (ok)
  +mt792x-usb (ok)
   mt7996e
   mt9m001
   mt9m111
  @@ -3376,6 +3439,7 @@
   mtk_t7xx
   mtouch
   multipath
  +multiq3 (ok)
   musb_hdrc
   mux-adg792a
   mux-adgs1408
  @@ -3576,8 +3640,17 @@
   ni_65xx
   ni_660x
   ni_670x
  +ni_at_a2150 (ok)
  +ni_at_ao (ok)
  +ni_atmio (ok)
  +ni_atmio16d (ok)
   ni_daq_700
   ni_daq_dio24
  +ni_labpc (ok)
  +ni_labpc_common (ok)
  +ni_labpc_cs (ok)
  +ni_labpc_isadma (ok)
  +ni_labpc_pci (ok)
   ni_mio_cs
   ni_pcidio
   ni_pcimio
  @@ -3635,6 +3708,7 @@
   nls_koi8-r
   nls_koi8-ru
   nls_koi8-u
  +nls_ucs2_utils (ok)
   nls_utf8
   nmclan_cs
   noa1305
  @@ -3644,7 +3718,6 @@
   novatek-nvt-ts
   nozomi
   npcm750-pwm-fan
  -ns558 (rejected)
   ns83820
   nsh
   ntb
  @@ -3870,10 +3943,22 @@
   pci-stub
   pci200syn
   pcips2
  +pcl711 (ok)
  +pcl724 (ok)
  +pcl726 (ok)
  +pcl730 (ok)
  +pcl812 (ok)
  +pcl816 (ok)
  +pcl818 (ok)
  +pcm3724 (ok)
  +pcmad (ok)
   pcmcia
   pcmcia_core
   pcmcia_rsrc
   pcmciamtd
  +pcmda12 (ok)
  +pcmmio (ok)
  +pcmuio (ok)
   pcnet32
   pcnet_cs
   pcrypt
  @@ -3885,6 +3970,7 @@
   pcwd_usb
   pd6729
   pdc_adma
  +pds-vfio-pci (ok)
   pds_core
   pds_vdpa
   peak_pci
  @@ -3928,6 +4014,7 @@
   pinctrl-cannonlake
   pinctrl-cedarfork
   pinctrl-cherryview
  +pinctrl-cs42l43 (ok)
   pinctrl-cy8c95x0
   pinctrl-da9062
   pinctrl-denverton
  @@ -4042,6 +4129,7 @@
   ptp_idt82p33
   ptp_ines
   ptp_kvm
  +ptp_mock (ok)
   ptp_ocp
   ptp_vmw
   public_key
  @@ -4452,7 +4540,6 @@
   rtc-ab-eoz9
   rtc-abx80x
   rtc-bq32k
  -rtc-bq4802 (rejected)
   rtc-cmos
   rtc-cros-ec
   rtc-da9052
  @@ -4531,6 +4618,9 @@
   rtc-wm831x
   rtc-wm8350
   rtc-x1205
  +rtd520 (ok)
  +rti800 (ok)
  +rti802 (ok)
   rtl2830
   rtl2832
   rtl2832_sdr
  @@ -4560,6 +4650,7 @@
   rtlwifi
   rtmv20-regulator
   rtq2134-regulator
  +rtq2208-regulator (ok)
   rtq6056
   rtq6752-regulator
   rtrs-client
  @@ -4613,6 +4704,7 @@
   s3fwrn5
   s3fwrn5_i2c
   s3fwrn82_uart
  +s526 (ok)
   s5c73m3
   s5h1409
   s5h1411
  @@ -4744,6 +4836,7 @@
   sdio_uart
   sdricoh_cs
   seco-cec
  +sel3350-platform (ok)
   selftests
   sensehat-joystick
   sensorhub
  @@ -4781,7 +4874,6 @@
   sha512-ssse3
   sha512_generic
   shark2
  -shiftfs (rejected)
   sht15
   sht21
   sht3x
  @@ -4805,9 +4897,14 @@
   silead
   sim710
   simatic-ipc
  +simatic-ipc-batt (ok)
  +simatic-ipc-batt-apollolake (ok)
  +simatic-ipc-batt-elkhartlake (ok)
  +simatic-ipc-batt-f7188x (ok)
   simatic-ipc-leds
   simatic-ipc-leds-gpio-apollolake
   simatic-ipc-leds-gpio-core
  +simatic-ipc-leds-gpio-elkhartlake (ok)
   simatic-ipc-leds-gpio-f7188x
   simatic-ipc-wdt
   simple-mfd-i2c
  @@ -4867,7 +4964,6 @@
   smc91c92_cs
   smc_diag
   smipcie
  -smm665 (rejected)
   smpro-core
   smpro-errmon
   smpro-hwmon
  @@ -4890,6 +4986,7 @@
   snd-ac97-codec
   snd-acp-config
   snd-acp-i2s
  +snd-acp-legacy-common (ok)
   snd-acp-legacy-mach
   snd-acp-mach
   snd-acp-pci
  @@ -4976,6 +5073,10 @@
   snd-hda-scodec-cs35l41
   snd-hda-scodec-cs35l41-i2c
   snd-hda-scodec-cs35l41-spi
  +snd-hda-scodec-cs35l56 (ok)
  +snd-hda-scodec-cs35l56-i2c (ok)
  +snd-hda-scodec-cs35l56-spi (ok)
  +snd-hda-scodec-tas2781-i2c (ok)
   snd-hdmi-lpe-audio
   snd-hdsp
   snd-hdspm
  @@ -5083,9 +5184,11 @@
   snd-soc-ak5558
   snd-soc-alc5623
   snd-soc-arizona
  +snd-soc-audio-iio-aux (ok)
   snd-soc-avs
   snd-soc-avs-da7219
   snd-soc-avs-dmic
  +snd-soc-avs-es8336 (ok)
   snd-soc-avs-hdaudio
   snd-soc-avs-i2s-test
   snd-soc-avs-max98357a
  @@ -5096,9 +5199,11 @@
   snd-soc-avs-rt274
   snd-soc-avs-rt286
   snd-soc-avs-rt298
  +snd-soc-avs-rt5663 (ok)
   snd-soc-avs-rt5682
   snd-soc-avs-ssm4567
   snd-soc-aw8738
  +snd-soc-aw88261 (ok)
   snd-soc-aw88395
   snd-soc-aw88395-lib
   snd-soc-bd28623
  @@ -5135,6 +5240,8 @@
   snd-soc-cs42l42
   snd-soc-cs42l42-i2c
   snd-soc-cs42l42-sdw
  +snd-soc-cs42l43 (ok)
  +snd-soc-cs42l43-sdw (ok)
   snd-soc-cs42l51
   snd-soc-cs42l51-i2c
   snd-soc-cs42l52
  @@ -5249,6 +5356,7 @@
   snd-soc-rt1011
   snd-soc-rt1015
   snd-soc-rt1015p
  +snd-soc-rt1017-sdca (ok)
   snd-soc-rt1019
   snd-soc-rt1308
   snd-soc-rt1308-sdw
  @@ -5372,6 +5480,7 @@
   snd-soc-tscs42xx
   snd-soc-tscs454
   snd-soc-uda1334
  +snd-soc-wcd-classh (ok)
   snd-soc-wcd-mbhc
   snd-soc-wcd9335
   snd-soc-wcd934x
  @@ -5422,6 +5531,7 @@
   snd-sof-amd-acp
   snd-sof-amd-rembrandt
   snd-sof-amd-renoir
  +snd-sof-amd-vangogh (ok)
   snd-sof-intel-atom
   snd-sof-intel-hda
   snd-sof-intel-hda-common
  @@ -5430,6 +5540,7 @@
   snd-sof-pci-intel-apl
   snd-sof-pci-intel-cnl
   snd-sof-pci-intel-icl
  +snd-sof-pci-intel-lnl (ok)
   snd-sof-pci-intel-mtl
   snd-sof-pci-intel-skl
   snd-sof-pci-intel-tgl
  @@ -5515,6 +5626,7 @@
   spi-bitbang
   spi-butterfly
   spi-cadence
  +spi-cs42l43 (ok)
   spi-dln2
   spi-dw
   spi-dw-mmio
  @@ -5687,7 +5799,6 @@
   symbolserial
   synaptics_i2c
   synaptics_usb
  -synclink_gt (rejected)
   syscopyarea
   sysfillrect
   sysimgblt
  @@ -6091,6 +6202,7 @@
   usb_f_hid
   usb_f_mass_storage
   usb_f_midi
  +usb_f_midi2 (ok)
   usb_f_ncm
   usb_f_obex
   usb_f_phonet
  @@ -6138,6 +6250,7 @@
   uvcvideo
   uvesafb
   v4l2-async
  +v4l2-cci (ok)
   v4l2-dv-timings
   v4l2-flash-led-class
   v4l2-fwnode
  @@ -6194,8 +6307,6 @@
   vicodec
   video
   video-i2c
  -videobuf-core (rejected)
  -videobuf-dma-sg (rejected)
   videobuf2-common
   videobuf2-dma-contig
   videobuf2-dma-sg
  @@ -6447,6 +6558,7 @@
   xilinx-pr-decoupler
   xilinx-spi
   xilinx-xadc
  +xilinx_dma (ok)
   xilinx_emac
   xilinx_emaclite
   xilinx_gmii2rgmii
amd64/ibm retpoline unchanged

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-01-11

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-01-11

description:

updated

Revision history for this message

Paolo Pisati (p-pisati) wrote on 2024-01-11:

#3

$ uname -a
Linux amd64-secureboot-testing 6.6.0-1001-ibm #1-Ubuntu SMP Wed Jan 10 16:31:12 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux

$ sudo dmesg | grep secure
[ 0.000000] secureboot: Secure boot enabled
[ 0.004598] secureboot: Secure boot enabled

$ cat /sys/kernel/security/lockdown
none [integrity] confidentiality

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-01-11

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-01-11

description:	updated
description:	updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-01-11

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-01-12

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-01-21

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-01-21

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-01-31

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-02-08

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-02-08

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-02-09

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-02-09

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-02-09

description:	updated
description:	updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-02-09

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-02-09

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-02-09

description:	updated
description:	updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-02-09

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-02-09

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-02-10

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-02-10

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-02-12

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-02-12

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-02-13

description:	updated
description:	updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-02-13

description:

updated

Revision history for this message

Launchpad Janitor (janitor) wrote on 2024-02-16:

#4

Download full text (49.1 KiB)

This bug was fixed in the package linux-ibm - 6.8.0-1001.1

---------------
linux-ibm (6.8.0-1001.1) noble; urgency=medium

* noble/linux-ibm: 6.8.0-1001.1 -proposed tracker (LP: #2052778)

* Packaging resync (LP: #1786013)
- debian.ibm/dkms-versions -- update from kernel-versions (main/d2024.02.07)

  * Miscellaneous Ubuntu changes
    - [packaging] update rust, clang and bindgen build-deps
    - [Config] updateconfigs following 6.8.0-7.7 rebase

[ Ubuntu: 6.8.0-7.7 ]

  * noble/linux: 6.8.0-7.7 -proposed tracker (LP: #2052691)
  * update apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor4.0.0 [01/87]: LSM stacking v39: integrity: disassociate
      ima_filter_rule from security_audit_rule
    - SAUCE: apparmor4.0.0 [02/87]: LSM stacking v39: SM: Infrastructure
      management of the sock security
    - SAUCE: apparmor4.0.0 [03/87]: LSM stacking v39: LSM: Add the lsmblob data
      structure.
    - SAUCE: apparmor4.0.0 [04/87]: LSM stacking v39: IMA: avoid label collisions
      with stacked LSMs
    - SAUCE: apparmor4.0.0 [05/87]: LSM stacking v39: LSM: Use lsmblob in
      security_audit_rule_match
    - SAUCE: apparmor4.0.0 [06/87]: LSM stacking v39: LSM: Add lsmblob_to_secctx
      hook
    - SAUCE: apparmor4.0.0 [07/87]: LSM stacking v39: Audit: maintain an lsmblob
      in audit_context
    - SAUCE: apparmor4.0.0 [08/87]: LSM stacking v39: LSM: Use lsmblob in
      security_ipc_getsecid
    - SAUCE: apparmor4.0.0 [09/87]: LSM stacking v39: Audit: Update shutdown LSM
      data
    - SAUCE: apparmor4.0.0 [10/87]: LSM stacking v39: LSM: Use lsmblob in
      security_current_getsecid
    - SAUCE: apparmor4.0.0 [11/87]: LSM stacking v39: LSM: Use lsmblob in
      security_inode_getsecid
    - SAUCE: apparmor4.0.0 [12/87]: LSM stacking v39: Audit: use an lsmblob in
      audit_names
    - SAUCE: apparmor4.0.0 [13/87]: LSM stacking v39: LSM: Create new
      security_cred_getlsmblob LSM hook
    - SAUCE: apparmor4.0.0 [14/87]: LSM stacking v39: Audit: Change context data
      from secid to lsmblob
    - SAUCE: apparmor4.0.0 [15/87]: LSM stacking v39: Netlabel: Use lsmblob for
      audit data
    - SAUCE: apparmor4.0.0 [16/87]: LSM stacking v39: LSM: Ensure the correct LSM
      context releaser
    - SAUCE: apparmor4.0.0 [17/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_secid_to_secctx
    - SAUCE: apparmor4.0.0 [18/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_lsmblob_to_secctx
    - SAUCE: apparmor4.0.0 [19/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_inode_getsecctx
    - SAUCE: apparmor4.0.0 [20/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_dentry_init_security
    - SAUCE: apparmor4.0.0 [21/87]: LSM stacking v39: LSM:
      security_lsmblob_to_secctx module selection
    - SAUCE: apparmor4.0.0 [22/87]: LSM stacking v39: Audit: Create audit_stamp
      structure
    - SAUCE: apparmor4.0.0 [23/87]: LSM stacking v39: Audit: Allow multiple
      records in an audit_buffer
    - SAUCE: apparmor4.0.0 [24/87]: LSM stacking v39: Audit: Add record for
      multiple task security contexts
    - SAUCE: apparmor4.0.0 [25/87]: LSM stacking v39: audit: mu...

This bug was fixed in the package linux-ibm - 6.8.0-1001.1

---------------
linux-ibm (6.8.0-1001.1) noble; urgency=medium

* noble/linux-ibm: 6.8.0-1001.1 -proposed tracker (LP: #2052778)

* Packaging resync (LP: #1786013)
    - debian.ibm/dkms-versions -- update from kernel-versions (main/d2024.02.07)

* Miscellaneous Ubuntu changes
    - [packaging] update rust, clang and bindgen build-deps
    - [Config] updateconfigs following 6.8.0-7.7 rebase

[ Ubuntu: 6.8.0-7.7 ]

* noble/linux: 6.8.0-7.7 -proposed tracker (LP: #2052691)
  * update apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor4.0.0 [01/87]: LSM stacking v39: integrity: disassociate
      ima_filter_rule from security_audit_rule
    - SAUCE: apparmor4.0.0 [02/87]: LSM stacking v39: SM: Infrastructure
      management of the sock security
    - SAUCE: apparmor4.0.0 [03/87]: LSM stacking v39: LSM: Add the lsmblob data
      structure.
    - SAUCE: apparmor4.0.0 [04/87]: LSM stacking v39: IMA: avoid label collisions
      with stacked LSMs
    - SAUCE: apparmor4.0.0 [05/87]: LSM stacking v39: LSM: Use lsmblob in
      security_audit_rule_match
    - SAUCE: apparmor4.0.0 [06/87]: LSM stacking v39: LSM: Add lsmblob_to_secctx
      hook
    - SAUCE: apparmor4.0.0 [07/87]: LSM stacking v39: Audit: maintain an lsmblob
      in audit_context
    - SAUCE: apparmor4.0.0 [08/87]: LSM stacking v39: LSM: Use lsmblob in
      security_ipc_getsecid
    - SAUCE: apparmor4.0.0 [09/87]: LSM stacking v39: Audit: Update shutdown LSM
      data
    - SAUCE: apparmor4.0.0 [10/87]: LSM stacking v39: LSM: Use lsmblob in
      security_current_getsecid
    - SAUCE: apparmor4.0.0 [11/87]: LSM stacking v39: LSM: Use lsmblob in
      security_inode_getsecid
    - SAUCE: apparmor4.0.0 [12/87]: LSM stacking v39: Audit: use an lsmblob in
      audit_names
    - SAUCE: apparmor4.0.0 [13/87]: LSM stacking v39: LSM: Create new
      security_cred_getlsmblob LSM hook
    - SAUCE: apparmor4.0.0 [14/87]: LSM stacking v39: Audit: Change context data
      from secid to lsmblob
    - SAUCE: apparmor4.0.0 [15/87]: LSM stacking v39: Netlabel: Use lsmblob for
      audit data
    - SAUCE: apparmor4.0.0 [16/87]: LSM stacking v39: LSM: Ensure the correct LSM
      context releaser
    - SAUCE: apparmor4.0.0 [17/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_secid_to_secctx
    - SAUCE: apparmor4.0.0 [18/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_lsmblob_to_secctx
    - SAUCE: apparmor4.0.0 [19/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_inode_getsecctx
    - SAUCE: apparmor4.0.0 [20/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_dentry_init_security
    - SAUCE: apparmor4.0.0 [21/87]: LSM stacking v39: LSM:
      security_lsmblob_to_secctx module selection
    - SAUCE: apparmor4.0.0 [22/87]: LSM stacking v39: Audit: Create audit_stamp
      structure
    - SAUCE: apparmor4.0.0 [23/87]: LSM stacking v39: Audit: Allow multiple
      records in an audit_buffer
    - SAUCE: apparmor4.0.0 [24/87]: LSM stacking v39: Audit: Add record for
      multiple task security contexts
    - SAUCE: apparmor4.0.0 [25/87]: LSM stacking v39: audit: multiple subject lsm
      values for netlabel
    - SAUCE: apparmor4.0.0 [26/87]: LSM stacking v39: Audit: Add record for
      multiple object contexts
    - SAUCE: apparmor4.0.0 [27/87]: LSM stacking v39: LSM: Remove unused
      lsmcontext_init()
    - SAUCE: apparmor4.0.0 [28/87]: LSM stacking v39: LSM: Improve logic in
      security_getprocattr
    - SAUCE: apparmor4.0.0 [29/87]: LSM stacking v39: LSM: secctx provider check
      on release
    - SAUCE: apparmor4.0.0 [31/87]: LSM stacking v39: LSM: Exclusive secmark usage
    - SAUCE: apparmor4.0.0 [32/87]: LSM stacking v39: LSM: Identify which LSM
      handles the context string
    - SAUCE: apparmor4.0.0 [33/87]: LSM stacking v39: AppArmor: Remove the
      exclusive flag
    - SAUCE: apparmor4.0.0 [34/87]: LSM stacking v39: LSM: Add mount opts blob
      size tracking
    - SAUCE: apparmor4.0.0 [35/87]: LSM stacking v39: LSM: allocate mnt_opts blobs
      instead of module specific data
    - SAUCE: apparmor4.0.0 [36/87]: LSM stacking v39: LSM: Infrastructure
      management of the key security blob
    - SAUCE: apparmor4.0.0 [37/87]: LSM stacking v39: LSM: Infrastructure
      management of the mnt_opts security blob
    - SAUCE: apparmor4.0.0 [38/87]: LSM stacking v39: LSM: Correct handling of
      ENOSYS in inode_setxattr
    - SAUCE: apparmor4.0.0 [39/87]: LSM stacking v39: LSM: Remove lsmblob
      scaffolding
    - SAUCE: apparmor4.0.0 [40/87]: LSM stacking v39: LSM: Allow reservation of
      netlabel
    - SAUCE: apparmor4.0.0 [41/87]: LSM stacking v39: LSM: restrict
      security_cred_getsecid() to a single LSM
    - SAUCE: apparmor4.0.0 [42/87]: LSM stacking v39: Smack: Remove
      LSM_FLAG_EXCLUSIVE
    - SAUCE: apparmor4.0.0 [43/87]: LSM stacking v39: UBUNTU: SAUCE: apparmor4.0.0
      [12/95]: add/use fns to print hash string hex value
    - SAUCE: apparmor4.0.0 [44/87]: patch to provide compatibility with v2.x net
      rules
    - SAUCE: apparmor4.0.0 [45/87]: add unpriviled user ns mediation
    - SAUCE: apparmor4.0.0 [46/87]: Add sysctls for additional controls of unpriv
      userns restrictions
    - SAUCE: apparmor4.0.0 [47/87]: af_unix mediation
    - SAUCE: apparmor4.0.0 [48/87]: Add fine grained mediation of posix mqueues
    - SAUCE: apparmor4.0.0 [49/87]: setup slab cache for audit data
    - SAUCE: apparmor4.0.0 [50/87]: Improve debug print infrastructure
    - SAUCE: apparmor4.0.0 [51/87]: add the ability for profiles to have a
      learning cache
    - SAUCE: apparmor4.0.0 [52/87]: enable userspace upcall for mediation
    - SAUCE: apparmor4.0.0 [53/87]: prompt - lock down prompt interface
    - SAUCE: apparmor4.0.0 [54/87]: prompt - allow controlling of caching of a
      prompt response
    - SAUCE: apparmor4.0.0 [55/87]: prompt - add refcount to audit_node in prep or
      reuse and delete
    - SAUCE: apparmor4.0.0 [56/87]: prompt - refactor to moving caching to
      uresponse
    - SAUCE: apparmor4.0.0 [57/87]: prompt - Improve debug statements
    - SAUCE: apparmor4.0.0 [58/87]: prompt - fix caching
    - SAUCE: apparmor4.0.0 [59/87]: prompt - rework build to use append fn, to
      simplify adding strings
    - SAUCE: apparmor4.0.0 [60/87]: prompt - refcount notifications
    - SAUCE: apparmor4.0.0 [61/87]: prompt - add the ability to reply with a
      profile name
    - SAUCE: apparmor4.0.0 [62/87]: prompt - fix notification cache when updating
    - SAUCE: apparmor4.0.0 [63/87]: prompt - add tailglob on name for cache
      support
    - SAUCE: apparmor4.0.0 [64/87]: prompt - allow profiles to set prompts as
      interruptible
    - SAUCE: apparmor4.0.0 [65/87] v6.8 prompt:fixup interruptible
    - SAUCE: apparmor4.0.0 [69/87]: add io_uring mediation
    - SAUCE: apparmor4.0.0 [70/87]: apparmor: fix oops when racing to retrieve
      notification
    - SAUCE: apparmor4.0.0 [71/87]: apparmor: fix notification header size
    - SAUCE: apparmor4.0.0 [72/87]: apparmor: fix request field from a prompt
      reply that denies all access
    - SAUCE: apparmor4.0.0 [73/87]: apparmor: open userns related sysctl so lxc
      can check if restriction are in place
    - SAUCE: apparmor4.0.0 [74/87]: apparmor: cleanup attachment perm lookup to
      use lookup_perms()
    - SAUCE: apparmor4.0.0 [75/87]: apparmor: remove redundant unconfined check.
    - SAUCE: apparmor4.0.0 [76/87]: apparmor: switch signal mediation to using
      RULE_MEDIATES
    - SAUCE: apparmor4.0.0 [77/87]: apparmor: ensure labels with more than one
      entry have correct flags
    - SAUCE: apparmor4.0.0 [78/87]: apparmor: remove explicit restriction that
      unconfined cannot use change_hat
    - SAUCE: apparmor4.0.0 [79/87]: apparmor: cleanup: refactor file_perm() to
      provide semantics of some checks
    - SAUCE: apparmor4.0.0 [80/87]: apparmor: carry mediation check on label
    - SAUCE: apparmor4.0.0 [81/87]: apparmor: convert easy uses of unconfined() to
      label_mediates()
    - SAUCE: apparmor4.0.0 [82/87]: apparmor: add additional flags to extended
      permission.
    - SAUCE: apparmor4.0.0 [83/87]: apparmor: add support for profiles to define
      the kill signal
    - SAUCE: apparmor4.0.0 [84/87]: apparmor: fix x_table_lookup when stacking is
      not the first entry
    - SAUCE: apparmor4.0.0 [85/87]: apparmor: allow profile to be transitioned
      when a user ns is created
    - SAUCE: apparmor4.0.0 [86/87]: apparmor: add ability to mediate caps with
      policy state machine
    - SAUCE: apparmor4.0.0 [87/87]: fixup notify
    - [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS
  * update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]
    apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in mantic
    (LP: #2032602)
    - SAUCE: apparmor4.0.0 [66/87]: prompt - add support for advanced filtering of
      notifications
    - SAUCE: apparmor4.0.0 [67/87]: userns - add the ability to reference a global
      variable for a feature value
    - SAUCE: apparmor4.0.0 [68/87]: userns - make it so special unconfined
      profiles can mediate user namespaces

[ Ubuntu: 6.8.0-6.6 ]

* noble/linux: 6.8.0-6.6 -proposed tracker (LP: #2052592)
  * Packaging resync (LP: #1786013)
    - debian.master/dkms-versions -- update from kernel-versions
      (main/d2024.02.07)
    - [Packaging] update variants
  * FIPS kernels should default to fips mode (LP: #2049082)
    - SAUCE: Enable fips mode by default, in FIPS kernels only
  * Fix snapcraftyaml.yaml for jammy:linux-raspi (LP: #2051468)
    - [Packaging] Remove old snapcraft.yaml
  * Azure: Fix regression introduced in LP: #2045069 (LP: #2052453)
    - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
  * Miscellaneous Ubuntu changes
    - [Packaging] Remove in-tree abi checks
    - [Packaging] drop abi files with clean
    - [Packaging] Remove do_full_source variable (fixup)
    - [Packaging] Remove update-dkms-versions and move dkms-versions
    - [Config] updateconfigs following v6.8-rc3 rebase
    - [packaging] rename to linux
    - [packaging] rebase on v6.8-rc3
    - [packaging] disable signing for ppc64el
  * Rebase on v6.8-rc3

[ Ubuntu: 6.8.0-5.5 ]

* noble/linux-unstable: 6.8.0-5.5 -proposed tracker (LP: #2052136)
  * Miscellaneous upstream changes
    - Revert "mm/sparsemem: fix race in accessing memory_section->usage"

[ Ubuntu: 6.8.0-4.4 ]

* noble/linux-unstable: 6.8.0-4.4 -proposed tracker (LP: #2051502)
  * Migrate from fbdev drivers to simpledrm and DRM fbdev emulation layer
    (LP: #1965303)
    - [Config] enable simpledrm and DRM fbdev emulation layer
  * Miscellaneous Ubuntu changes
    - [Config] toolchain update
  * Miscellaneous upstream changes
    - rust: upgrade to Rust 1.75.0

[ Ubuntu: 6.8.0-3.3 ]

* noble/linux-unstable: 6.8.0-3.3 -proposed tracker (LP: #2051488)
  * update apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor4.0.0 [43/87]: LSM stacking v39: UBUNTU: SAUCE: apparmor4.0.0
      [12/95]: add/use fns to print hash string hex value
    - SAUCE: apparmor4.0.0 [44/87]: patch to provide compatibility with v2.x net
      rules
    - SAUCE: apparmor4.0.0 [45/87]: add unpriviled user ns mediation
    - SAUCE: apparmor4.0.0 [46/87]: Add sysctls for additional controls of unpriv
      userns restrictions
    - SAUCE: apparmor4.0.0 [47/87]: af_unix mediation
    - SAUCE: apparmor4.0.0 [48/87]: Add fine grained mediation of posix mqueues
    - SAUCE: apparmor4.0.0 [49/87]: setup slab cache for audit data
    - SAUCE: apparmor4.0.0 [50/87]: Improve debug print infrastructure
    - SAUCE: apparmor4.0.0 [51/87]: add the ability for profiles to have a
      learning cache
    - SAUCE: apparmor4.0.0 [52/87]: enable userspace upcall for mediation
    - SAUCE: apparmor4.0.0 [53/87]: prompt - lock down prompt interface
    - SAUCE: apparmor4.0.0 [54/87]: prompt - allow controlling of caching of a
      prompt response
    - SAUCE: apparmor4.0.0 [55/87]: prompt - add refcount to audit_node in prep or
      reuse and delete
    - SAUCE: apparmor4.0.0 [56/87]: prompt - refactor to moving caching to
      uresponse
    - SAUCE: apparmor4.0.0 [57/87]: prompt - Improve debug statements
    - SAUCE: apparmor4.0.0 [58/87]: prompt - fix caching
    - SAUCE: apparmor4.0.0 [59/87]: prompt - rework build to use append fn, to
      simplify adding strings
    - SAUCE: apparmor4.0.0 [60/87]: prompt - refcount notifications
    - SAUCE: apparmor4.0.0 [61/87]: prompt - add the ability to reply with a
      profile name
    - SAUCE: apparmor4.0.0 [62/87]: prompt - fix notification cache when updating
    - SAUCE: apparmor4.0.0 [63/87]: prompt - add tailglob on name for cache
      support
    - SAUCE: apparmor4.0.0 [64/87]: prompt - allow profiles to set prompts as
      interruptible
    - SAUCE: apparmor4.0.0 [69/87]: add io_uring mediation
    - [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS
  * apparmor restricts read access of user namespace mediation sysctls to root
    (LP: #2040194)
    - SAUCE: apparmor4.0.0 [73/87]: apparmor: open userns related sysctl so lxc
      can check if restriction are in place
  * AppArmor spams kernel log with assert when auditing (LP: #2040192)
    - SAUCE: apparmor4.0.0 [72/87]: apparmor: fix request field from a prompt
      reply that denies all access
  * apparmor notification files verification (LP: #2040250)
    - SAUCE: apparmor4.0.0 [71/87]: apparmor: fix notification header size
  * apparmor oops when racing to retrieve a notification (LP: #2040245)
    - SAUCE: apparmor4.0.0 [70/87]: apparmor: fix oops when racing to retrieve
      notification
  * update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]
    apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in mantic
    (LP: #2032602)
    - SAUCE: apparmor4.0.0 [66/87]: prompt - add support for advanced filtering of
      notifications
    - SAUCE: apparmor4.0.0 [67/87]: userns - add the ability to reference a global
      variable for a feature value
    - SAUCE: apparmor4.0.0 [68/87]: userns - make it so special unconfined
      profiles can mediate user namespaces
  * Miscellaneous Ubuntu changes
    - SAUCE: apparmor4.0.0 [01/87]: LSM stacking v39: integrity: disassociate
      ima_filter_rule from security_audit_rule
    - SAUCE: apparmor4.0.0 [02/87]: LSM stacking v39: SM: Infrastructure
      management of the sock security
    - SAUCE: apparmor4.0.0 [03/87]: LSM stacking v39: LSM: Add the lsmblob data
      structure.
    - SAUCE: apparmor4.0.0 [04/87]: LSM stacking v39: IMA: avoid label collisions
      with stacked LSMs
    - SAUCE: apparmor4.0.0 [05/87]: LSM stacking v39: LSM: Use lsmblob in
      security_audit_rule_match
    - SAUCE: apparmor4.0.0 [06/87]: LSM stacking v39: LSM: Add lsmblob_to_secctx
      hook
    - SAUCE: apparmor4.0.0 [07/87]: LSM stacking v39: Audit: maintain an lsmblob
      in audit_context
    - SAUCE: apparmor4.0.0 [08/87]: LSM stacking v39: LSM: Use lsmblob in
      security_ipc_getsecid
    - SAUCE: apparmor4.0.0 [09/87]: LSM stacking v39: Audit: Update shutdown LSM
      data
    - SAUCE: apparmor4.0.0 [10/87]: LSM stacking v39: LSM: Use lsmblob in
      security_current_getsecid
    - SAUCE: apparmor4.0.0 [11/87]: LSM stacking v39: LSM: Use lsmblob in
      security_inode_getsecid
    - SAUCE: apparmor4.0.0 [12/87]: LSM stacking v39: Audit: use an lsmblob in
      audit_names
    - SAUCE: apparmor4.0.0 [13/87]: LSM stacking v39: LSM: Create new
      security_cred_getlsmblob LSM hook
    - SAUCE: apparmor4.0.0 [14/87]: LSM stacking v39: Audit: Change context data
      from secid to lsmblob
    - SAUCE: apparmor4.0.0 [15/87]: LSM stacking v39: Netlabel: Use lsmblob for
      audit data
    - SAUCE: apparmor4.0.0 [16/87]: LSM stacking v39: LSM: Ensure the correct LSM
      context releaser
    - SAUCE: apparmor4.0.0 [17/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_secid_to_secctx
    - SAUCE: apparmor4.0.0 [18/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_lsmblob_to_secctx
    - SAUCE: apparmor4.0.0 [19/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_inode_getsecctx
    - SAUCE: apparmor4.0.0 [20/87]: LSM stacking v39: LSM: Use lsmcontext in
      security_dentry_init_security
    - SAUCE: apparmor4.0.0 [21/87]: LSM stacking v39: LSM:
      security_lsmblob_to_secctx module selection
    - SAUCE: apparmor4.0.0 [22/87]: LSM stacking v39: Audit: Create audit_stamp
      structure
    - SAUCE: apparmor4.0.0 [23/87]: LSM stacking v39: Audit: Allow multiple
      records in an audit_buffer
    - SAUCE: apparmor4.0.0 [24/87]: LSM stacking v39: Audit: Add record for
      multiple task security contexts
    - SAUCE: apparmor4.0.0 [25/87]: LSM stacking v39: audit: multiple subject lsm
      values for netlabel
    - SAUCE: apparmor4.0.0 [26/87]: LSM stacking v39: Audit: Add record for
      multiple object contexts
    - SAUCE: apparmor4.0.0 [27/87]: LSM stacking v39: LSM: Remove unused
      lsmcontext_init()
    - SAUCE: apparmor4.0.0 [28/87]: LSM stacking v39: LSM: Improve logic in
      security_getprocattr
    - SAUCE: apparmor4.0.0 [29/87]: LSM stacking v39: LSM: secctx provider check
      on release
    - SAUCE: apparmor4.0.0 [30/87]: LSM stacking v39: LSM: Single calls in
      socket_getpeersec hooks
    - SAUCE: apparmor4.0.0 [31/87]: LSM stacking v39: LSM: Exclusive secmark usage
    - SAUCE: apparmor4.0.0 [32/87]: LSM stacking v39: LSM: Identify which LSM
      handles the context string
    - SAUCE: apparmor4.0.0 [33/87]: LSM stacking v39: AppArmor: Remove the
      exclusive flag
    - SAUCE: apparmor4.0.0 [34/87]: LSM stacking v39: LSM: Add mount opts blob
      size tracking
    - SAUCE: apparmor4.0.0 [35/87]: LSM stacking v39: LSM: allocate mnt_opts blobs
      instead of module specific data
    - SAUCE: apparmor4.0.0 [36/87]: LSM stacking v39: LSM: Infrastructure
      management of the key security blob
    - SAUCE: apparmor4.0.0 [37/87]: LSM stacking v39: LSM: Infrastructure
      management of the mnt_opts security blob
    - SAUCE: apparmor4.0.0 [38/87]: LSM stacking v39: LSM: Correct handling of
      ENOSYS in inode_setxattr
    - SAUCE: apparmor4.0.0 [39/87]: LSM stacking v39: LSM: Remove lsmblob
      scaffolding
    - SAUCE: apparmor4.0.0 [40/87]: LSM stacking v39: LSM: Allow reservation of
      netlabel
    - SAUCE: apparmor4.0.0 [41/87]: LSM stacking v39: LSM: restrict
      security_cred_getsecid() to a single LSM
    - SAUCE: apparmor4.0.0 [42/87]: LSM stacking v39: Smack: Remove
      LSM_FLAG_EXCLUSIVE
    - SAUCE: apparmor4.0.0 [65/87] v6.8 prompt:fixup interruptible
    - SAUCE: apparmor4.0.0 [74/87]: apparmor: cleanup attachment perm lookup to
      use lookup_perms()
    - SAUCE: apparmor4.0.0 [75/87]: apparmor: remove redundant unconfined check.
    - SAUCE: apparmor4.0.0 [76/87]: apparmor: switch signal mediation to using
      RULE_MEDIATES
    - SAUCE: apparmor4.0.0 [77/87]: apparmor: ensure labels with more than one
      entry have correct flags
    - SAUCE: apparmor4.0.0 [78/87]: apparmor: remove explicit restriction that
      unconfined cannot use change_hat
    - SAUCE: apparmor4.0.0 [79/87]: apparmor: cleanup: refactor file_perm() to
      provide semantics of some checks
    - SAUCE: apparmor4.0.0 [80/87]: apparmor: carry mediation check on label
    - SAUCE: apparmor4.0.0 [81/87]: apparmor: convert easy uses of unconfined() to
      label_mediates()
    - SAUCE: apparmor4.0.0 [82/87]: apparmor: add additional flags to extended
      permission.
    - SAUCE: apparmor4.0.0 [83/87]: apparmor: add support for profiles to define
      the kill signal
    - SAUCE: apparmor4.0.0 [84/87]: apparmor: fix x_table_lookup when stacking is
      not the first entry
    - SAUCE: apparmor4.0.0 [85/87]: apparmor: allow profile to be transitioned
      when a user ns is created
    - SAUCE: apparmor4.0.0 [86/87]: apparmor: add ability to mediate caps with
      policy state machine
    - SAUCE: apparmor4.0.0 [87/87]: fixup notify
    - [Config] updateconfigs following v6.8-rc2 rebase

[ Ubuntu: 6.8.0-2.2 ]

* noble/linux-unstable: 6.8.0-2.2 -proposed tracker (LP: #2051110)
  * Miscellaneous Ubuntu changes
    - [Config] toolchain update
    - [Config] enable Rust

[ Ubuntu: 6.8.0-1.1 ]

* noble/linux-unstable: 6.8.0-1.1 -proposed tracker (LP: #2051102)
  * Miscellaneous Ubuntu changes
    - [packaging] move to v6.8-rc1
    - [Config] updateconfigs following v6.8-rc1 rebase
    - SAUCE: export file_close_fd() instead of close_fd_get_file()
    - SAUCE: cpufreq: s/strlcpy/strscpy/
    - debian/dkms-versions -- temporarily disable zfs dkms
    - debian/dkms-versions -- temporarily disable ipu6 and isvsc dkms
    - debian/dkms-versions -- temporarily disable v4l2loopback

[ Ubuntu: 6.8.0-0.0 ]

* Empty entry.

[ Ubuntu: 6.7.0-7.7 ]

* noble/linux-unstable: 6.7.0-7.7 -proposed tracker (LP: #2049357)
  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
  * Miscellaneous Ubuntu changes
    - [Packaging] re-enable signing for s390x and ppc64el

[ Ubuntu: 6.7.0-6.6 ]

* Empty entry.

[ Ubuntu: 6.7.0-2.2 ]

* noble/linux: 6.7.0-2.2 -proposed tracker (LP: #2049182)
  * Packaging resync (LP: #1786013)
    - [Packaging] resync getabis
  * Enforce RETPOLINE and SLS mitigrations (LP: #2046440)
    - SAUCE: objtool: Make objtool check actually fatal upon fatal errors
    - SAUCE: objtool: make objtool SLS validation fatal when building with
      CONFIG_SLS=y
    - SAUCE: objtool: make objtool RETPOLINE validation fatal when building with
      CONFIG_RETPOLINE=y
    - SAUCE: scripts: remove generating .o-ur objects
    - [Packaging] Remove all custom retpoline-extract code
    - Revert "UBUNTU: SAUCE: vga_set_mode -- avoid jump tables"
    - Revert "UBUNTU: SAUCE: early/late -- annotate indirect calls in early/late
      initialisation code"
    - Revert "UBUNTU: SAUCE: apm -- annotate indirect calls within
      firmware_restrict_branch_speculation_{start,end}"
  * Miscellaneous Ubuntu changes
    - [Packaging] temporarily disable riscv64 builds
    - [Packaging] temporarily disable Rust dependencies on riscv64

[ Ubuntu: 6.7.0-1.1 ]

* noble/linux: 6.7.0-1.1 -proposed tracker (LP: #2048859)
  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
    - debian/dkms-versions -- update from kernel-versions (main/d2024.01.02)
  * [UBUNTU 23.04] Regression: Ubuntu 23.04/23.10 do not include uvdevice
    anymore (LP: #2048919)
    - [Config] Enable S390_UV_UAPI (built-in)
  * Support mipi camera on Intel Meteor Lake platform (LP: #2031412)
    - SAUCE: iommu: intel-ipu: use IOMMU passthrough mode for Intel IPUs on Meteor
      Lake
    - SAUCE: platform/x86: int3472: Add handshake GPIO function
  * [SRU][J/L/M] UBUNTU: [Packaging] Make WWAN driver a loadable module
    (LP: #2033406)
    - [Packaging] Make WWAN driver loadable modules
  * usbip: error: failed to open /usr/share/hwdata//usb.ids (LP: #2039439)
    - [Packaging] Make linux-tools-common depend on hwdata
  * [Mediatek] mt8195-demo: enable CONFIG_MTK_IOMMU as module for multimedia and
    PCIE peripherals (LP: #2036587)
    - [Config] Enable CONFIG_MTK_IOMMU on arm64
  * linux-*: please enable dm-verity kconfigs to allow MoK/db verified root
    images (LP: #2019040)
    - [Config] CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_SECONDARY_KEYRING=y
  * kexec enable to load/kdump zstd compressed zimg (LP: #2037398)
    - [Packaging] Revert arm64 image format to Image.gz
  * Mantic minimized/minimal cloud images do not receive IP address during
    provisioning; systemd regression with wait-online (LP: #2036968)
    - [Config] Enable virtio-net as built-in to avoid race
  * Make backlight module auto detect dell_uart_backlight (LP: #2008882)
    - SAUCE: ACPI: video: Dell AIO UART backlight detection
  * Linux 6.2 fails to reboot with current u-boot-nezha (LP: #2021364)
    - [Config] Default to performance CPUFreq governor on riscv64
  * Enable Nezha board (LP: #1975592)
    - [Config] Build in D1 clock drivers on riscv64
    - [Config] Enable CONFIG_SUN6I_RTC_CCU on riscv64
    - [Config] Enable CONFIG_SUNXI_WATCHDOG on riscv64
    - [Config] Disable SUN50I_DE2_BUS on riscv64
    - [Config] Disable unneeded sunxi pinctrl drivers on riscv64
  * Enable StarFive VisionFive 2 board (LP: #2013232)
    - [Config] Enable CONFIG_PINCTRL_STARFIVE_JH7110_SYS on riscv64
    - [Config] Enable CONFIG_STARFIVE_WATCHDOG on riscv64
  * rcu_sched detected stalls on CPUs/tasks (LP: #1967130)
    - [Config] Enable virtually mapped stacks on riscv64
  * Check for changes relevant for security certifications (LP: #1945989)
    - [Packaging] Add a new fips-checks script
  * Installation support for SMARC RZ/G2L platform (LP: #2030525)
    - [Config] build Renesas RZ/G2L USBPHY control driver statically
  * Add support for kernels compiled with CONFIG_EFI_ZBOOT (LP: #2002226)
    - [Config]: Turn on CONFIG_EFI_ZBOOT on ARM64
  * Default module signing algo should be accelerated (LP: #2034061)
    - [Config] Default module signing algo should be accelerated
  * Miscellaneous Ubuntu changes
    - [Config] annotations clean-up
  [ Upstream Kernel Changes ]
  * Rebase to v6.7

[ Ubuntu: 6.7.0-0.0 ]

* Empty entry

[ Ubuntu: 6.7.0-5.5 ]

* noble/linux-unstable: 6.7.0-5.5 -proposed tracker (LP: #2048118)
  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/d2024.01.02)
  * Miscellaneous Ubuntu changes
    - [Packaging] re-enable Rust support
    - [Packaging] temporarily disable riscv64 builds

[ Ubuntu: 6.7.0-4.4 ]

* noble/linux-unstable: 6.7.0-4.4 -proposed tracker (LP: #2047807)
  * unconfined profile denies userns_create for chromium based processes
    (LP: #1990064)
    - [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS
  * apparmor restricts read access of user namespace mediation sysctls to root
    (LP: #2040194)
    - SAUCE: apparmor4.0.0 [69/69]: apparmor: open userns related sysctl so lxc
      can check if restriction are in place
  * AppArmor spams kernel log with assert when auditing (LP: #2040192)
    - SAUCE: apparmor4.0.0 [68/69]: apparmor: fix request field from a prompt
      reply that denies all access
  * apparmor notification files verification (LP: #2040250)
    - SAUCE: apparmor4.0.0 [67/69]: apparmor: fix notification header size
  * apparmor oops when racing to retrieve a notification (LP: #2040245)
    - SAUCE: apparmor4.0.0 [66/69]: apparmor: fix oops when racing to retrieve
      notification
  * update apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor4.0.0 [01/69]: add/use fns to print hash string hex value
    - SAUCE: apparmor4.0.0 [02/69]: patch to provide compatibility with v2.x net
      rules
    - SAUCE: apparmor4.0.0 [03/69]: add unpriviled user ns mediation
    - SAUCE: apparmor4.0.0 [04/69]: Add sysctls for additional controls of unpriv
      userns restrictions
    - SAUCE: apparmor4.0.0 [05/69]: af_unix mediation
    - SAUCE: apparmor4.0.0 [06/69]: Add fine grained mediation of posix mqueues
    - SAUCE: apparmor4.0.0 [07/69]: Stacking v38: LSM: Identify modules by more
      than name
    - SAUCE: apparmor4.0.0 [08/69]: Stacking v38: LSM: Add an LSM identifier for
      external use
    - SAUCE: apparmor4.0.0 [09/69]: Stacking v38: LSM: Identify the process
      attributes for each module
    - SAUCE: apparmor4.0.0 [10/69]: Stacking v38: LSM: Maintain a table of LSM
      attribute data
    - SAUCE: apparmor4.0.0 [11/69]: Stacking v38: proc: Use lsmids instead of lsm
      names for attrs
    - SAUCE: apparmor4.0.0 [12/69]: Stacking v38: integrity: disassociate
      ima_filter_rule from security_audit_rule
    - SAUCE: apparmor4.0.0 [13/69]: Stacking v38: LSM: Infrastructure management
      of the sock security
    - SAUCE: apparmor4.0.0 [14/69]: Stacking v38: LSM: Add the lsmblob data
      structure.
    - SAUCE: apparmor4.0.0 [15/69]: Stacking v38: LSM: provide lsm name and id
      slot mappings
    - SAUCE: apparmor4.0.0 [16/69]: Stacking v38: IMA: avoid label collisions with
      stacked LSMs
    - SAUCE: apparmor4.0.0 [17/69]: Stacking v38: LSM: Use lsmblob in
      security_audit_rule_match
    - SAUCE: apparmor4.0.0 [18/69]: Stacking v38: LSM: Use lsmblob in
      security_kernel_act_as
    - SAUCE: apparmor4.0.0 [19/69]: Stacking v38: LSM: Use lsmblob in
      security_secctx_to_secid
    - SAUCE: apparmor4.0.0 [20/69]: Stacking v38: LSM: Use lsmblob in
      security_secid_to_secctx
    - SAUCE: apparmor4.0.0 [21/69]: Stacking v38: LSM: Use lsmblob in
      security_ipc_getsecid
    - SAUCE: apparmor4.0.0 [22/69]: Stacking v38: LSM: Use lsmblob in
      security_current_getsecid
    - SAUCE: apparmor4.0.0 [23/69]: Stacking v38: LSM: Use lsmblob in
      security_inode_getsecid
    - SAUCE: apparmor4.0.0 [24/69]: Stacking v38: LSM: Use lsmblob in
      security_cred_getsecid
    - SAUCE: apparmor4.0.0 [25/69]: Stacking v38: LSM: Specify which LSM to
      display
    - SAUCE: apparmor4.0.0 [27/69]: Stacking v38: LSM: Ensure the correct LSM
      context releaser
    - SAUCE: apparmor4.0.0 [28/69]: Stacking v38: LSM: Use lsmcontext in
      security_secid_to_secctx
    - SAUCE: apparmor4.0.0 [29/69]: Stacking v38: LSM: Use lsmcontext in
      security_inode_getsecctx
    - SAUCE: apparmor4.0.0 [30/69]: Stacking v38: Use lsmcontext in
      security_dentry_init_security
    - SAUCE: apparmor4.0.0 [31/69]: Stacking v38: LSM: security_secid_to_secctx in
      netlink netfilter
    - SAUCE: apparmor4.0.0 [32/69]: Stacking v38: NET: Store LSM netlabel data in
      a lsmblob
    - SAUCE: apparmor4.0.0 [33/69]: Stacking v38: binder: Pass LSM identifier for
      confirmation
    - SAUCE: apparmor4.0.0 [34/69]: Stacking v38: LSM: security_secid_to_secctx
      module selection
    - SAUCE: apparmor4.0.0 [35/69]: Stacking v38: Audit: Keep multiple LSM data in
      audit_names
    - SAUCE: apparmor4.0.0 [36/69]: Stacking v38: Audit: Create audit_stamp
      structure
    - SAUCE: apparmor4.0.0 [37/69]: Stacking v38: LSM: Add a function to report
      multiple LSMs
    - SAUCE: apparmor4.0.0 [38/69]: Stacking v38: Audit: Allow multiple records in
      an audit_buffer
    - SAUCE: apparmor4.0.0 [39/69]: Stacking v38: Audit: Add record for multiple
      task security contexts
    - SAUCE: apparmor4.0.0 [40/69]: Stacking v38: audit: multiple subject lsm
      values for netlabel
    - SAUCE: apparmor4.0.0 [41/69]: Stacking v38: Audit: Add record for multiple
      object contexts
    - SAUCE: apparmor4.0.0 [42/69]: Stacking v38: netlabel: Use a struct lsmblob
      in audit data
    - SAUCE: apparmor4.0.0 [43/69]: Stacking v38: LSM: Removed scaffolding
      function lsmcontext_init
    - SAUCE: apparmor4.0.0 [44/69]: Stacking v38: AppArmor: Remove the exclusive
      flag
    - SAUCE: apparmor4.0.0 [45/69]: setup slab cache for audit data
    - SAUCE: apparmor4.0.0 [46/69]: Improve debug print infrastructure
    - SAUCE: apparmor4.0.0 [47/69]: add the ability for profiles to have a
      learning cache
    - SAUCE: apparmor4.0.0 [48/69]: enable userspace upcall for mediation
    - SAUCE: apparmor4.0.0 [49/69]: prompt - lock down prompt interface
    - SAUCE: apparmor4.0.0 [50/69]: prompt - allow controlling of caching of a
      prompt response
    - SAUCE: apparmor4.0.0 [51/69]: prompt - add refcount to audit_node in prep or
      reuse and delete
    - SAUCE: apparmor4.0.0 [52/69]: prompt - refactor to moving caching to
      uresponse
    - SAUCE: apparmor4.0.0 [53/69]: prompt - Improve debug statements
    - SAUCE: apparmor4.0.0 [54/69]: prompt - fix caching
    - SAUCE: apparmor4.0.0 [55/69]: prompt - rework build to use append fn, to
      simplify adding strings
    - SAUCE: apparmor4.0.0 [56/69]: prompt - refcount notifications
    - SAUCE: apparmor4.0.0 [57/69]: prompt - add the ability to reply with a
      profile name
    - SAUCE: apparmor4.0.0 [58/69]: prompt - fix notification cache when updating
    - SAUCE: apparmor4.0.0 [59/69]: prompt - add tailglob on name for cache
      support
    - SAUCE: apparmor4.0.0 [60/69]: prompt - allow profiles to set prompts as
      interruptible
    - SAUCE: apparmor4.0.0 [64/69]: advertise disconnected.path is available
    - SAUCE: apparmor4.0.0 [65/69]: add io_uring mediation
  * update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]
    apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in mantic
    (LP: #2032602)
    - SAUCE: apparmor4.0.0 [61/69]: prompt - add support for advanced filtering of
      notifications
    - SAUCE: apparmor4.0.0 [62/69]: userns - add the ability to reference a global
      variable for a feature value
    - SAUCE: apparmor4.0.0 [63/69]: userns - make it so special unconfined
      profiles can mediate user namespaces
  * udev fails to make prctl() syscall with apparmor=0 (as used by maas by
    default) (LP: #2016908) // update apparmor and LSM stacking patch set
    (LP: #2028253)
    - SAUCE: apparmor4.0.0 [26/69]: Stacking v38: Fix prctl() syscall with
      apparmor=0
  * Fix RPL-U CPU C-state always keep at C3 when system run PHM with idle screen
    on (LP: #2042385)
    - SAUCE: r8169: Add quirks to enable ASPM on Dell platforms
  * [Debian] autoreconstruct - Do not generate chmod -x for deleted  files
    (LP: #2045562)
    - [Debian] autoreconstruct - Do not generate chmod -x for deleted files
  * Disable Legacy TIOCSTI (LP: #2046192)
    - [Config]: disable CONFIG_LEGACY_TIOCSTI
  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
    - [Packaging] remove helper scripts
    - [Packaging] update annotations scripts
  * Miscellaneous Ubuntu changes
    - [Packaging] rules: Remove unused dkms make variables
    - [Config] update annotations after rebase to v6.7-rc8
  [ Upstream Kernel Changes ]
  * Rebase to v6.7-rc8

[ Ubuntu: 6.7.0-3.3 ]

* noble/linux-unstable: 6.7.0-3.3 -proposed tracker (LP: #2046060)
  * enable CONFIG_INTEL_TDX_HOST in linux >= 6.7 for noble (LP: #2046040)
    - [Config] enable CONFIG_INTEL_TDX_HOST
  * linux tools packages for derived kernels refuse to install simultaneously
    due to libcpupower name collision (LP: #2035971)
    - [Packaging] Statically link libcpupower into cpupower tool
  * make lazy RCU a boot time option (LP: #2045492)
    - SAUCE: rcu: Provide a boot time parameter to control lazy RCU
  * Build failure if run in a console (LP: #2044512)
    - [Packaging] Fix kernel module compression failures
  * Turning COMPAT_32BIT_TIME off on arm64 (64k & derivatives) (LP: #2038582)
    - [Config] y2038: Turn off COMPAT and COMPAT_32BIT_TIME on arm64 64k
  * Turning COMPAT_32BIT_TIME off on riscv64 (LP: #2038584)
    - [Config] y2038: Disable COMPAT_32BIT_TIME on riscv64
  * Turning COMPAT_32BIT_TIME off on ppc64el (LP: #2038587)
    - [Config] y2038: Disable COMPAT and COMPAT_32BIT_TIME on ppc64le
  * [UBUNTU 23.04] Kernel config option missing for s390x PCI passthrough
    (LP: #2042853)
    - [Config] CONFIG_VFIO_PCI_ZDEV_KVM=y
  * back-out zstd module compression automatic for backports (LP: #2045593)
    - [Packaging] make ZSTD module compression conditional
  * Miscellaneous Ubuntu changes
    - [Packaging] Remove do_full_source variable
    - [Packaging] Remove obsolete config handling
    - [Packaging] Remove support for sub-flavors
    - [Packaging] Remove old linux-libc-dev version hack
    - [Packaging] Remove obsolete scripts
    - [Packaging] Remove README.inclusion-list
    - [Packaging] make $(stampdir)/stamp-build-perarch depend on build-arch
    - [Packaging] Enable rootless builds
    - [Packaging] Allow to run debian/rules without (fake)root
    - [Packaging] remove unneeded trailing slash for INSTALL_MOD_PATH
    - [Packaging] override KERNELRELEASE instead of KERNELVERSION
    - [Config] update toolchain versions in annotations
    - [Packaging] drop useless linux-doc
    - [Packaging] scripts: Rewrite insert-ubuntu-changes in Python
    - [Packaging] enable riscv64 builds
    - [Packaging] remove the last sub-flavours bit
    - [Packaging] check debian.env to determine do_libc_dev_package
    - [Packaging] remove debian.*/variants
    - [Packaging] remove do_libc_dev_package variable
    - [Packaging] move linux-libc-dev.stub to debian/control.d/
    - [Packaging] Update check to build linux-libc-dev to the source package name
    - [Packaging] rules: Remove startnewrelease target
    - [Packaging] Remove debian/commit-templates
    - [Config] update annotations after rebase to v6.7-rc4
  [ Upstream Kernel Changes ]
  * Rebase to v6.7-rc4

[ Ubuntu: 6.7.0-2.2 ]

* noble/linux-unstable: 6.7.0-2.2 -proposed tracker (LP: #2045107)
  * Miscellaneous Ubuntu changes
    - [Packaging] re-enable Rust
    - [Config] enable Rust in annotations
    - [Packaging] Remove do_enforce_all variable
    - [Config] disable Softlogic 6x10 capture card driver on armhf
    - [Packaging] disable Rust support
    - [Config] update annotations after rebase to v6.7-rc3
  [ Upstream Kernel Changes ]
  * Rebase to v6.7-rc3

[ Ubuntu: 6.7.0-1.1 ]

* noble/linux-unstable: 6.7.0-1.1 -proposed tracker (LP: #2044069)
  * Packaging resync (LP: #1786013)
    - [Packaging] update annotations scripts
    - [Packaging] update helper scripts
  * Miscellaneous Ubuntu changes
    - [Config] update annotations after rebase to v6.7-rc2
  [ Upstream Kernel Changes ]
  * Rebase to v6.7-rc2

[ Ubuntu: 6.7.0-0.0 ]

* Empty entry

[ Ubuntu: 6.6.0-12.12 ]

* noble/linux-unstable: 6.6.0-12.12 -proposed tracker (LP: #2043664)
  * Miscellaneous Ubuntu changes
    - [Packaging] temporarily disable zfs dkms

[ Ubuntu: 6.6.0-11.11 ]

* noble/linux-unstable: 6.6.0-11.11 -proposed tracker (LP: #2043480)
  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log
    - [Packaging] resync update-dkms-versions helper
    - [Packaging] update variants
    - debian/dkms-versions -- update from kernel-versions (main/d2023.11.14)
  * Miscellaneous Ubuntu changes
    - [Packaging] move to Noble
    - [Config] toolchain version update

[ Ubuntu: 6.6.0-10.10 ]

* mantic/linux-unstable: 6.6.0-10.10 -proposed tracker (LP: #2043088)
  * Bump arm64's CONFIG_NR_CPUS to 512 (LP: #2042897)
    - [Config] Bump CONFIG_NR_CPUS to 512 for arm64
  * Miscellaneous Ubuntu changes
    - [Config] Include a note for the NR_CPUS setting on riscv64
    - SAUCE: apparmor4.0.0 [83/83]: Fix inode_init for changed prototype

[ Ubuntu: 6.6.0-9.9 ]

* mantic/linux-unstable: 6.6.0-9.9 -proposed tracker (LP: #2041852)
  * Switch IMA default hash to sha256 (LP: #2041735)
    - [Config] Switch IMA_DEFAULT_HASH from sha1 to sha256
  * apparmor restricts read access of user namespace mediation sysctls to root
    (LP: #2040194)
    - SAUCE: apparmor4.0.0 [82/82]: apparmor: open userns related sysctl so lxc
      can check if restriction are in place
  * AppArmor spams kernel log with assert when auditing (LP: #2040192)
    - SAUCE: apparmor4.0.0 [81/82]: apparmor: fix request field from a prompt
      reply that denies all access
  * apparmor notification files verification (LP: #2040250)
    - SAUCE: apparmor4.0.0 [80/82]: apparmor: fix notification header size
  * apparmor oops when racing to retrieve a notification (LP: #2040245)
    - SAUCE: apparmor4.0.0 [79/82]: apparmor: fix oops when racing to retrieve
      notification
  * Disable restricting unprivileged change_profile by default, due to LXD
    latest/stable not yet compatible with this new apparmor feature
    (LP: #2038567)
    - SAUCE: apparmor4.0.0 [78/82]: apparmor: Make
      apparmor_restrict_unprivileged_unconfined opt-in
  * update apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor4.0.0 [01/82]: add/use fns to print hash string hex value
    - SAUCE: apparmor4.0.0 [02/82]: rename SK_CTX() to aa_sock and make it an
      inline fn
    - SAUCE: apparmor4.0.0 [03/82]: patch to provide compatibility with v2.x net
      rules
    - SAUCE: apparmor4.0.0 [04/82]: add user namespace creation mediation
    - SAUCE: apparmor4.0.0 [05/82]: Add sysctls for additional controls of unpriv
      userns restrictions
    - SAUCE: apparmor4.0.0 [06/82]: af_unix mediation
    - SAUCE: apparmor4.0.0 [07/82]: Add fine grained mediation of posix mqueues
    - SAUCE: apparmor4.0.0 [08/82]: Stacking v38: LSM: Identify modules by more
      than name
    - SAUCE: apparmor4.0.0 [09/82]: Stacking v38: LSM: Add an LSM identifier for
      external use
    - SAUCE: apparmor4.0.0 [10/82]: Stacking v38: LSM: Identify the process
      attributes for each module
    - SAUCE: apparmor4.0.0 [11/82]: Stacking v38: LSM: Maintain a table of LSM
      attribute data
    - SAUCE: apparmor4.0.0 [12/82]: Stacking v38: proc: Use lsmids instead of lsm
      names for attrs
    - SAUCE: apparmor4.0.0 [13/82]: Stacking v38: integrity: disassociate
      ima_filter_rule from security_audit_rule
    - SAUCE: apparmor4.0.0 [14/82]: Stacking v38: LSM: Infrastructure management
      of the sock security
    - SAUCE: apparmor4.0.0 [15/82]: Stacking v38: LSM: Add the lsmblob data
      structure.
    - SAUCE: apparmor4.0.0 [16/82]: Stacking v38: LSM: provide lsm name and id
      slot mappings
    - SAUCE: apparmor4.0.0 [17/82]: Stacking v38: IMA: avoid label collisions with
      stacked LSMs
    - SAUCE: apparmor4.0.0 [18/82]: Stacking v38: LSM: Use lsmblob in
      security_audit_rule_match
    - SAUCE: apparmor4.0.0 [19/82]: Stacking v38: LSM: Use lsmblob in
      security_kernel_act_as
    - SAUCE: apparmor4.0.0 [20/82]: Stacking v38: LSM: Use lsmblob in
      security_secctx_to_secid
    - SAUCE: apparmor4.0.0 [21/82]: Stacking v38: LSM: Use lsmblob in
      security_secid_to_secctx
    - SAUCE: apparmor4.0.0 [22/82]: Stacking v38: LSM: Use lsmblob in
      security_ipc_getsecid
    - SAUCE: apparmor4.0.0 [23/82]: Stacking v38: LSM: Use lsmblob in
      security_current_getsecid
    - SAUCE: apparmor4.0.0 [24/82]: Stacking v38: LSM: Use lsmblob in
      security_inode_getsecid
    - SAUCE: apparmor4.0.0 [25/82]: Stacking v38: LSM: Use lsmblob in
      security_cred_getsecid
    - SAUCE: apparmor4.0.0 [26/82]: Stacking v38: LSM: Specify which LSM to
      display
    - SAUCE: apparmor4.0.0 [28/82]: Stacking v38: LSM: Ensure the correct LSM
      context releaser
    - SAUCE: apparmor4.0.0 [29/82]: Stacking v38: LSM: Use lsmcontext in
      security_secid_to_secctx
    - SAUCE: apparmor4.0.0 [30/82]: Stacking v38: LSM: Use lsmcontext in
      security_inode_getsecctx
    - SAUCE: apparmor4.0.0 [31/82]: Stacking v38: Use lsmcontext in
      security_dentry_init_security
    - SAUCE: apparmor4.0.0 [32/82]: Stacking v38: LSM: security_secid_to_secctx in
      netlink netfilter
    - SAUCE: apparmor4.0.0 [33/82]: Stacking v38: NET: Store LSM netlabel data in
      a lsmblob
    - SAUCE: apparmor4.0.0 [34/82]: Stacking v38: binder: Pass LSM identifier for
      confirmation
    - SAUCE: apparmor4.0.0 [35/82]: Stacking v38: LSM: security_secid_to_secctx
      module selection
    - SAUCE: apparmor4.0.0 [36/82]: Stacking v38: Audit: Keep multiple LSM data in
      audit_names
    - SAUCE: apparmor4.0.0 [37/82]: Stacking v38: Audit: Create audit_stamp
      structure
    - SAUCE: apparmor4.0.0 [38/82]: Stacking v38: LSM: Add a function to report
      multiple LSMs
    - SAUCE: apparmor4.0.0 [39/82]: Stacking v38: Audit: Allow multiple records in
      an audit_buffer
    - SAUCE: apparmor4.0.0 [40/82]: Stacking v38: Audit: Add record for multiple
      task security contexts
    - SAUCE: apparmor4.0.0 [41/82]: Stacking v38: audit: multiple subject lsm
      values for netlabel
    - SAUCE: apparmor4.0.0 [42/82]: Stacking v38: Audit: Add record for multiple
      object contexts
    - SAUCE: apparmor4.0.0 [43/82]: Stacking v38: netlabel: Use a struct lsmblob
      in audit data
    - SAUCE: apparmor4.0.0 [44/82]: Stacking v38: LSM: Removed scaffolding
      function lsmcontext_init
    - SAUCE: apparmor4.0.0 [45/82]: Stacking v38: AppArmor: Remove the exclusive
      flag
    - SAUCE: apparmor4.0.0 [46/82]: combine common_audit_data and
      apparmor_audit_data
    - SAUCE: apparmor4.0.0 [47/82]: setup slab cache for audit data
    - SAUCE: apparmor4.0.0 [48/82]: rename audit_data->label to
      audit_data->subj_label
    - SAUCE: apparmor4.0.0 [49/82]: pass cred through to audit info.
    - SAUCE: apparmor4.0.0 [50/82]: Improve debug print infrastructure
    - SAUCE: apparmor4.0.0 [51/82]: add the ability for profiles to have a
      learning cache
    - SAUCE: apparmor4.0.0 [52/82]: enable userspace upcall for mediation
    - SAUCE: apparmor4.0.0 [53/82]: cache buffers on percpu list if there is lock
      contention
    - SAUCE: apparmor4.0.0 [54/82]: advertise availability of exended perms
    - SAUCE: apparmor4.0.0 [56/82]: cleanup: provide separate audit messages for
      file and policy checks
    - SAUCE: apparmor4.0.0 [57/82]: prompt - lock down prompt interface
    - SAUCE: apparmor4.0.0 [58/82]: prompt - ref count pdb
    - SAUCE: apparmor4.0.0 [59/82]: prompt - allow controlling of caching of a
      prompt response
    - SAUCE: apparmor4.0.0 [60/82]: prompt - add refcount to audit_node in prep or
      reuse and delete
    - SAUCE: apparmor4.0.0 [61/82]: prompt - refactor to moving caching to
      uresponse
    - SAUCE: apparmor4.0.0 [62/82]: prompt - Improve debug statements
    - SAUCE: apparmor4.0.0 [63/82]: prompt - fix caching
    - SAUCE: apparmor4.0.0 [64/82]: prompt - rework build to use append fn, to
      simplify adding strings
    - SAUCE: apparmor4.0.0 [65/82]: prompt - refcount notifications
    - SAUCE: apparmor4.0.0 [66/82]: prompt - add the ability to reply with a
      profile name
    - SAUCE: apparmor4.0.0 [67/82]: prompt - fix notification cache when updating
    - SAUCE: apparmor4.0.0 [68/82]: prompt - add tailglob on name for cache
      support
    - SAUCE: apparmor4.0.0 [69/82]: prompt - allow profiles to set prompts as
      interruptible
    - SAUCE: apparmor4.0.0 [74/82]: advertise disconnected.path is available
    - SAUCE: apparmor4.0.0 [75/82]: fix invalid reference on profile->disconnected
    - SAUCE: apparmor4.0.0 [76/82]: add io_uring mediation
    - SAUCE: apparmor4.0.0 [77/82]: apparmor: Fix regression in mount mediation
  * update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]
    apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in mantic
    (LP: #2032602)
    - SAUCE: apparmor4.0.0 [70/82]: prompt - add support for advanced filtering of
      notifications
    - SAUCE: apparmor4.0.0 [71/82]: userns - add the ability to reference a global
      variable for a feature value
    - SAUCE: apparmor4.0.0 [72/82]: userns - make it so special unconfined
      profiles can mediate user namespaces
    - SAUCE: apparmor4.0.0 [73/82]: userns - allow restricting unprivileged
      change_profile
  * LSM stacking and AppArmor for 6.2: additional fixes (LP: #2017903) // update
    apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor4.0.0 [55/82]: fix profile verification and enable it
  * udev fails to make prctl() syscall with apparmor=0 (as used by maas by
    default) (LP: #2016908) // update apparmor and LSM stacking patch set
    (LP: #2028253)
    - SAUCE: apparmor4.0.0 [27/82]: Stacking v38: Fix prctl() syscall with
      apparmor=0
  * Miscellaneous Ubuntu changes
    - [Config] SECURITY_APPARMOR_RESTRICT_USERNS=y

[ Ubuntu: 6.6.0-8.8 ]

* mantic/linux-unstable: 6.6.0-8.8 -proposed tracker (LP: #2040243)
  * Miscellaneous Ubuntu changes
    - abi: gc reference to phy-rtk-usb2/phy-rtk-usb3

[ Ubuntu: 6.6.0-7.7 ]

* mantic/linux-unstable: 6.6.0-7.7 -proposed tracker (LP: #2040147)
  * test_021_aslr_dapper_libs from ubuntu_qrt_kernel_security failed on K-5.19 /
    J-OEM-6.1 / J-6.2 AMD64 (LP: #1983357)
    - [Config]: set ARCH_MMAP_RND_{COMPAT_, }BITS to the maximum
  * Miscellaneous Ubuntu changes
    - [Config] updateconfigs following v6.6-rc7 rebase

[ Ubuntu: 6.6.0-6.6 ]

* mantic/linux-unstable: 6.6.0-6.6 -proposed tracker (LP: #2039780)
  * Miscellaneous Ubuntu changes
    - rebase on v6.6-rc6
    - [Config] updateconfigs following v6.6-rc6 rebase
  [ Upstream Kernel Changes ]
  * Rebase to v6.6-rc6

[ Ubuntu: 6.6.0-5.5 ]

* mantic/linux-unstable: 6.6.0-5.5 -proposed tracker (LP: #2038899)
  * Miscellaneous Ubuntu changes
    - rebase on v6.6-rc5
    - [Config] updateconfigs following v6.6-rc5 rebase
  [ Upstream Kernel Changes ]
  * Rebase to v6.6-rc5

[ Ubuntu: 6.6.0-4.4 ]

* mantic/linux-unstable: 6.6.0-4.4 -proposed tracker (LP: #2038423)
  * Miscellaneous Ubuntu changes
    - rebase on v6.6-rc4
  [ Upstream Kernel Changes ]
  * Rebase to v6.6-rc4

[ Ubuntu: 6.6.0-3.3 ]

* mantic/linux-unstable: 6.6.0-3.3 -proposed tracker (LP: #2037622)
  * Miscellaneous Ubuntu changes
    - [Config] updateconfigs following v6.6-rc3 rebase
  * Miscellaneous upstream changes
    - Revert "UBUNTU: SAUCE: enforce rust availability only on x86_64"
    - arm64: rust: Enable Rust support for AArch64
    - arm64: rust: Enable PAC support for Rust.
    - arm64: Restrict Rust support to little endian only.

[ Ubuntu: 6.6.0-2.2 ]

* Miscellaneous upstream changes
    - UBUBNTU: [Config] build all COMEDI drivers as modules

[ Ubuntu: 6.6.0-1.1 ]

* Miscellaneous Ubuntu changes
    - [Packaging] move linux to linux-unstable
    - [Packaging] rebase on v6.6-rc1
    - [Config] updateconfigs following v6.6-rc1 rebase
    - [packaging] skip ABI, modules and retpoline checks
    - update dropped.txt
    - [Config] SHIFT_FS FTBFS with Linux 6.6, disable it
    - [Config] DELL_UART_BACKLIGHT FTBFS with Linux 6.6, disable it
    - [Packaging] debian/dkms-versions: temporarily disable dkms
    - [Packaging] temporarily disable signing for s390x
  [ Upstream Kernel Changes ]
  * Rebase to v6.6-rc1

[ Ubuntu: 6.6.0-0.0 ]

* Empty entry

-- Paolo Pisati <paolo.pisati@canonical.com>  Fri, 09 Feb 2024 18:08:28 +0100

Changed in linux-ibm (Ubuntu Noble):
status:	New → Fix Released

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-02-16

description:

updated

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-04-11

Changed in kernel-sru-workflow:
status:	In Progress → Fix Committed

Ubuntu Kernel Bot (ubuntu-kernel-bot) on 2024-04-25

Changed in kernel-sru-workflow:
status:	Fix Committed → Fix Released

Kernel SRU Workflow

noble/linux-ibm: 6.6.0-1001.1 -proposed tracker

Bug Description

Other bug subscribers

Remote bug watches

	Status	Importance	Assigned to
Kernel SRU Workflow	Fix Released	Medium	Unassigned
Abi-testing	Fix Released	Medium	Paolo Pisati
Automated-testing	Triaged	Medium	Canonical Kernel Team
Boot-testing	Fix Released	Medium	Unassigned
Kernel-signoff	Fix Released	Undecided	Paolo Pisati
New-review	Fix Released	Medium	Andy Whitcroft
Prepare-package	Fix Released	Medium	Paolo Pisati
Prepare-package-generate	Fix Released	Medium	Paolo Pisati
Prepare-package-meta	Fix Released	Medium	Paolo Pisati
Prepare-package-signed	Fix Released	Medium	Paolo Pisati
Promote-signing-to-proposed	Invalid	Medium	Unassigned
Promote-to-proposed	Fix Released	Medium	Canonical Kernel Team
Promote-to-release	New	Medium	Ubuntu Package Archive Administrators
Regression-testing	Incomplete	Medium	Canonical Kernel Team
Signing-signoff	Fix Released	Undecided	Paolo Pisati
Sru-review	Fix Released	Medium	Andy Whitcroft
canonical-signing-jobs
Task00	Fix Released	Medium	Andy Whitcroft
linux-ibm (Ubuntu)
Noble	Fix Released	Medium	Unassigned