Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.kernel > #71902 > unrolled thread

Bug#988442: unblock: linux/5.10.37-1 (pre-approval checking)

Back to article view | Back to linux.debian.kernel

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Bug#988442: unblock: linux/5.10.37-1 (pre-approval checking) Cyril Brulebois <kibi@debian.org> - 2021-05-27 11:10 +0200
    Bug#988442: unblock: linux/5.10.40-1 Salvatore Bonaccorso <carnil@debian.org> - 2021-05-28 11:00 +0200
      Bug#988442: unblock: linux/5.10.40-1 Salvatore Bonaccorso <carnil@debian.org> - 2021-06-01 08:10 +0200
        Bug#988442: unblock: linux/5.10.40-1 Paul Gevers <elbrus@debian.org> - 2021-06-01 21:40 +0200
          Bug#988442: unblock: linux/5.10.40-1 Cyril Brulebois <kibi@debian.org> - 2021-06-02 11:20 +0200
            Bug#988442: unblock: linux/5.10.40-1 Cyril Brulebois <kibi@debian.org> - 2021-06-03 22:40 +0200

#71902 — Bug#988442: unblock: linux/5.10.37-1 (pre-approval checking)

[Multipart message — attachments visible in raw view] — view raw

Paul Gevers <elbrus@debian.org> (2021-05-27):
> Control: tags -1 confirmed d-i
> 
> @boot: needs d-i ACK. As I believe you are aware of, the upload has
> already happened.
> 
> @kibi: feel free to age it if/when you see fit

We've just discussed that (with Salvatore) on IRC minutes ago, and it
seems like this unblock request will be withdrawn/recycled for another
version, that version needs fixing.


Cheers,
-- 
Cyril Brulebois (kibi@debian.org)            <https://debamax.com/>
D-I release manager -- Release team member -- Freelance Consultant

[toc] | [next] | [standalone]

#71912 — Bug#988442: unblock: linux/5.10.40-1

Control: retitle -1 unblock: linux/5.10.40-1

Hi Paul, hi Cyril,

On Thu, May 27, 2021 at 11:04:14AM +0200, Cyril Brulebois wrote:
> Paul Gevers <elbrus@debian.org> (2021-05-27):
> > Control: tags -1 confirmed d-i
> > 
> > @boot: needs d-i ACK. As I believe you are aware of, the upload has
> > already happened.
> > 
> > @kibi: feel free to age it if/when you see fit
> 
> We've just discussed that (with Salvatore) on IRC minutes ago, and it
> seems like this unblock request will be withdrawn/recycled for another
> version, that version needs fixing.

So let's give some background. Whilst it would have bee good to
finally move linux/5.10.38-1 to testing because it contained many
needed bugfixes and in particular as well the CVE fixes for the bpf
issues, doing so would have introduced the worse bpf issue
CVE-2021-33200.

Cf. https://www.openwall.com/lists/oss-security/2021/05/27/1

I uploaded now 5.10.40-1 which contains those fixes for CVE-2021-33200
in the upload, we should ensure those fixes go into bullseye.

Assuming we notice no issues with that upload, once Cyril is fine with
it as well from d-i perspective, please let it migrate to bullseye.

Regards,
Salvatore

[toc] | [prev] | [next] | [standalone]

#72061 — Bug#988442: unblock: linux/5.10.40-1

Hi Cyril, Paul,

On Fri, May 28, 2021 at 10:54:32AM +0200, Salvatore Bonaccorso wrote:
> Control: retitle -1 unblock: linux/5.10.40-1
> 
> Hi Paul, hi Cyril,
> 
> On Thu, May 27, 2021 at 11:04:14AM +0200, Cyril Brulebois wrote:
> > Paul Gevers <elbrus@debian.org> (2021-05-27):
> > > Control: tags -1 confirmed d-i
> > > 
> > > @boot: needs d-i ACK. As I believe you are aware of, the upload has
> > > already happened.
> > > 
> > > @kibi: feel free to age it if/when you see fit
> > 
> > We've just discussed that (with Salvatore) on IRC minutes ago, and it
> > seems like this unblock request will be withdrawn/recycled for another
> > version, that version needs fixing.
> 
> So let's give some background. Whilst it would have bee good to
> finally move linux/5.10.38-1 to testing because it contained many
> needed bugfixes and in particular as well the CVE fixes for the bpf
> issues, doing so would have introduced the worse bpf issue
> CVE-2021-33200.
> 
> Cf. https://www.openwall.com/lists/oss-security/2021/05/27/1
> 
> I uploaded now 5.10.40-1 which contains those fixes for CVE-2021-33200
> in the upload, we should ensure those fixes go into bullseye.
> 
> Assuming we notice no issues with that upload, once Cyril is fine with
> it as well from d-i perspective, please let it migrate to bullseye.

The version is not 4 days in unstable, looks good to me to let it
migrate to testing (unless Cyril spotted issues in recent d-i tests).

The FragAttack CVE fixes were now queued upstream as well for the
stable series, so I expect I can followup soon with a follow up for
those as well "soonish". But we should first let 5.10.40-1 enter
bullseye in any case.

Thanks all for your work!

Regards,
Salvatore

[toc] | [prev] | [next] | [standalone]

#72063 — Bug#988442: unblock: linux/5.10.40-1

[Multipart message — attachments visible in raw view] — view raw

Hi,

On 01-06-2021 08:06, Salvatore Bonaccorso wrote:
> The version is not 4 days in unstable, looks good to me to let it
> migrate to testing (unless Cyril spotted issues in recent d-i tests).

I'm still good to go.

Paul

[toc] | [prev] | [next] | [standalone]

#72068 — Bug#988442: unblock: linux/5.10.40-1

[Multipart message — attachments visible in raw view] — view raw

Hi,

Paul Gevers <elbrus@debian.org> (2021-06-01):
> On 01-06-2021 08:06, Salvatore Bonaccorso wrote:
> > The version is not 4 days in unstable, looks good to me to let it
> > migrate to testing (unless Cyril spotted issues in recent d-i tests).
> 
> I'm still good to go.

Tests look good, please let it migrate. :)


Cheers,
-- 
Cyril Brulebois (kibi@debian.org)            <https://debamax.com/>
D-I release manager -- Release team member -- Freelance Consultant

[toc] | [prev] | [next] | [standalone]

#72077 — Bug#988442: unblock: linux/5.10.40-1

[Multipart message — attachments visible in raw view] — view raw

Cyril Brulebois <kibi@debian.org> (2021-06-02):
> Paul Gevers <elbrus@debian.org> (2021-06-01):
> > On 01-06-2021 08:06, Salvatore Bonaccorso wrote:
> > > The version is not 4 days in unstable, looks good to me to let it
> > > migrate to testing (unless Cyril spotted issues in recent d-i tests).
> > 
> > I'm still good to go.
> 
> Tests look good, please let it migrate. :)

JFTR: Hinted myself, along with other l10n-only or bugfixes for d-i
packages. Will keep an eye on this, and close this bug report once
migration has happend (just in case some bit is missing/some typo
happened or something).


Cheers,
-- 
Cyril Brulebois (kibi@debian.org)            <https://debamax.com/>
D-I release manager -- Release team member -- Freelance Consultant

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.kernel

csiph-web