Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.kernel > #60063 > unrolled thread

Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u

Started byJulien Aubin <julien.aubin@gmail.com>
First post2018-01-24 13:50 +0100
Last post2018-01-28 19:30 +0100
Articles 8 — 3 participants

Back to article view | Back to linux.debian.kernel


Contents

  Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u Julien Aubin <julien.aubin@gmail.com> - 2018-01-24 13:50 +0100
    Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u Yves-Alexis Perez <corsac@debian.org> - 2018-01-24 14:10 +0100
    Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before  p-u Yves-Alexis Perez <corsac@debian.org> - 2018-01-28 18:50 +0100
      Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before  p-u Yves-Alexis Perez <corsac@debian.org> - 2018-01-28 19:30 +0100
        Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before  p-u Ben Hutchings <ben@decadent.org.uk> - 2018-01-28 19:50 +0100
          Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before  p-u Yves-Alexis Perez <corsac@debian.org> - 2018-01-28 20:40 +0100
            Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before  p-u Yves-Alexis Perez <corsac@debian.org> - 2018-02-05 20:40 +0100
      Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before  p-u Ben Hutchings <ben@decadent.org.uk> - 2018-01-28 19:30 +0100

#60063 — Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u

FromJulien Aubin <julien.aubin@gmail.com>
Date2018-01-24 13:50 +0100
SubjectBug#888263: Spectre : release kernel 4.9.77 to stretch before p-u
Message-ID<vbsF3-8hF-1@gated-at.bofh.it>

[Multipart message — attachments visible in raw view] — view raw

Package: linux-image-4.9.0-5-amd64
Version: 4.9.65-3+deb9u2
Severity: serious
Tags: security
Justification: root security hole

Hi,

Now that kernel release 4.9.77 has been released and contains the full
retpoline fixes, could you please bring it to stretch before the next p-u ?

I know this situation is quite exceptionnal, but all the Spectre story is.
I'm not sure backporting only the required changes for retpoline would be
that easy.

Thanks a lot,

[toc] | [next] | [standalone]


#60064

FromYves-Alexis Perez <corsac@debian.org>
Date2018-01-24 14:10 +0100
Message-ID<vbsYq-bv-15@gated-at.bofh.it>
In reply to#60063

[Multipart message — attachments visible in raw view] — view raw

On Wed, 2018-01-24 at 14:03 +0100, Julien Aubin wrote:
> I know it... :'( But as you rebuild the kernel image the updated compiler
> may come a bit later w/o needing another kernel update ?

I'm not really sure we will do a kernel binNMU in stretch-pu, but in any case
that's a discussion for when we will actually have a fix.
> 
> Anyway if you want someone to test the updates please push the updated
> packages to stretch-p-u and I'll tell you if it works on my four boxes which
> are :
> - An Intel Core i7 4790 w/ NVidia blob 384.111
> - An AMD Phenom 9850 w/ NVidia blob 384.111
> - An Intel Core i7 4800MQ laptop
> - An Intel NUC Atom Apollo Lake

You'll be notified when the upload is done and this bug is closed, so you'll
be able to test at that point.

Regards,
-- 
Yves-Alexis

[toc] | [prev] | [next] | [standalone]


#60085 — Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u

FromYves-Alexis Perez <corsac@debian.org>
Date2018-01-28 18:50 +0100
SubjectRe: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u
Message-ID<vcZfz-1hT-7@gated-at.bofh.it>
In reply to#60063

[Multipart message — attachments visible in raw view] — view raw

On Wed, 2018-01-24 at 13:52 +0100, Yves-Alexis Perez wrote:
> 
> work on 4.9.77 is mostly done, so yes I'd like to push it to stretch before
> next point relase. 4.9.78 is just out but I'm unsure if we want to hold it or
> not.

Hi Ben,

So I went ahead an updated to 4.9.78 and added the revert for the VERMAGIC
stuff (which is queued for 4.9.79).

I'm currently running a full build in pbuilder in a stretch chroot, so it
should be ready for upload if it's ok for you.

I'm unsure about stable-uploads procedure for the kernel (SRM and debian-boot
notifications for example) so pointer to any specific stuff would be welcome.

Regards,
-- 
Yves-Alexis

[toc] | [prev] | [next] | [standalone]


#60086 — Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u

FromYves-Alexis Perez <corsac@debian.org>
Date2018-01-28 19:30 +0100
SubjectRe: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u
Message-ID<vcZSi-1Lu-9@gated-at.bofh.it>
In reply to#60085

[Multipart message — attachments visible in raw view] — view raw

On Sun, 2018-01-28 at 18:24 +0000, Ben Hutchings wrote:
> > So I went ahead an updated to 4.9.78 and added the revert for the VERMAGIC
> > stuff (which is queued for 4.9.79).
> 
> This makes sense.  I think once an updated gcc is available in stretch
> we should bump the ABI number and Build-Depends at the same time as un-
> reverting that.

So you want to include the patch even if it's reverted upstream?
> 
> > I'm currently running a full build in pbuilder in a stretch chroot, so it
> > should be ready for upload if it's ok for you.
> > 
> > I'm unsure about stable-uploads procedure for the kernel (SRM and debian-
> boot
> > notifications for example) so pointer to any specific stuff would be
> welcome.
> 
> I've tended to upload shortly before point releases, but I think we
> should really be uploading earlier and more often so regressions are
> more lilely to be caught before a point release.

Yes I think it'd be a good idea to let this one stay a bit longer in s-p-u. Do
I need to ping someone before doing the upload?

Regards,
-- 
Yves-Alexis

[toc] | [prev] | [next] | [standalone]


#60088 — Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u

FromBen Hutchings <ben@decadent.org.uk>
Date2018-01-28 19:50 +0100
SubjectRe: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u
Message-ID<vd0bE-1Sn-9@gated-at.bofh.it>
In reply to#60086

[Multipart message — attachments visible in raw view] — view raw

On Sun, 2018-01-28 at 19:27 +0100, Yves-Alexis Perez wrote:
> On Sun, 2018-01-28 at 18:24 +0000, Ben Hutchings wrote:
> > > So I went ahead an updated to 4.9.78 and added the revert for the VERMAGIC
> > > stuff (which is queued for 4.9.79).
> > 
> > This makes sense.  I think once an updated gcc is available in stretch
> > we should bump the ABI number and Build-Depends at the same time as un-
> > reverting that.
> 
> So you want to include the patch even if it's reverted upstream?

Oh, I misunderstood what you were saying.  No I don't.  But I think it
makes sense to trigger a rebuild of modules once the retpoline compiler
support is in place.

> > > I'm currently running a full build in pbuilder in a stretch chroot, so it
> > > should be ready for upload if it's ok for you.
> > > 
> > > I'm unsure about stable-uploads procedure for the kernel (SRM and debian-
> > 
> > boot
> > > notifications for example) so pointer to any specific stuff would be
> > 
> > welcome.
> > 
> > I've tended to upload shortly before point releases, but I think we
> > should really be uploading earlier and more often so regressions are
> > more lilely to be caught before a point release.
> 
> Yes I think it'd be a good idea to let this one stay a bit longer in s-p-u. Do
> I need to ping someone before doing the upload?

No, that's not necessary.  But could you wait a day or two so I have a
chance to review your work?

Ben.

-- 
Ben Hutchings
If the facts do not conform to your theory, they must be disposed of.

[toc] | [prev] | [next] | [standalone]


#60089 — Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u

FromYves-Alexis Perez <corsac@debian.org>
Date2018-01-28 20:40 +0100
SubjectRe: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u
Message-ID<vd0Y3-2r4-27@gated-at.bofh.it>
In reply to#60088

[Multipart message — attachments visible in raw view] — view raw

On Sun, 2018-01-28 at 18:45 +0000, Ben Hutchings wrote:
> > So you want to include the patch even if it's reverted upstream?
> 
> Oh, I misunderstood what you were saying.  No I don't.  But I think it
> makes sense to trigger a rebuild of modules once the retpoline compiler
> support is in place.

Agreed.
> Do
> > I need to ping someone before doing the upload?
> 
> No, that's not necessary.  But could you wait a day or two so I have a
> chance to review your work?

Sure, I'd welcome a review on this actually :)

Regards,
-- 
Yves-Alexis

[toc] | [prev] | [next] | [standalone]


#60153 — Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u

FromYves-Alexis Perez <corsac@debian.org>
Date2018-02-05 20:40 +0100
SubjectRe: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u
Message-ID<vfUMq-4Mc-7@gated-at.bofh.it>
In reply to#60089

[Multipart message — attachments visible in raw view] — view raw

On Sun, 2018-01-28 at 20:34 +0100, Yves-Alexis Perez wrote:
> > No, that's not necessary.  But could you wait a day or two so I have a
> > chance to review your work?
> 
> Sure, I'd welcome a review on this actually :)

Hi Ben,

4.9.80-1 is ready for me. I'm not totally sure how to interpret:

2018/02/02 - [12:40:22] (bwh): Corsac: Sorry, no, why don't you go ahead anyway

Is it go for upload, even without review? If so, I'll do the 4.9.80 upload
tonight and watch the list for any bug from stretch-pu.

Regards,
-- 
Yves-Alexis

[toc] | [prev] | [next] | [standalone]


#60087 — Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u

FromBen Hutchings <ben@decadent.org.uk>
Date2018-01-28 19:30 +0100
SubjectRe: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u
Message-ID<vcZSi-1Lu-13@gated-at.bofh.it>
In reply to#60085

[Multipart message — attachments visible in raw view] — view raw

On Sun, 2018-01-28 at 18:42 +0100, Yves-Alexis Perez wrote:
> On Wed, 2018-01-24 at 13:52 +0100, Yves-Alexis Perez wrote:
> > 
> > work on 4.9.77 is mostly done, so yes I'd like to push it to stretch before
> > next point relase. 4.9.78 is just out but I'm unsure if we want to hold it or
> > not.
> 
> Hi Ben,
> 
> So I went ahead an updated to 4.9.78 and added the revert for the VERMAGIC
> stuff (which is queued for 4.9.79).

This makes sense.  I think once an updated gcc is available in stretch
we should bump the ABI number and Build-Depends at the same time as un-
reverting that.

> I'm currently running a full build in pbuilder in a stretch chroot, so it
> should be ready for upload if it's ok for you.
> 
> I'm unsure about stable-uploads procedure for the kernel (SRM and debian-boot
> notifications for example) so pointer to any specific stuff would be welcome.

I've tended to upload shortly before point releases, but I think we
should really be uploading earlier and more often so regressions are
more lilely to be caught before a point release.

Ben.

-- 
Ben Hutchings
If the facts do not conform to your theory, they must be disposed of.

[toc] | [prev] | [standalone]


Back to top | Article view | linux.debian.kernel


csiph-web