Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.kernel > #60063 > unrolled thread
| Started by | Julien Aubin <julien.aubin@gmail.com> |
|---|---|
| First post | 2018-01-24 13:50 +0100 |
| Last post | 2018-01-28 19:30 +0100 |
| Articles | 8 — 3 participants |
Back to article view | Back to linux.debian.kernel
Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u Julien Aubin <julien.aubin@gmail.com> - 2018-01-24 13:50 +0100
Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u Yves-Alexis Perez <corsac@debian.org> - 2018-01-24 14:10 +0100
Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u Yves-Alexis Perez <corsac@debian.org> - 2018-01-28 18:50 +0100
Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u Yves-Alexis Perez <corsac@debian.org> - 2018-01-28 19:30 +0100
Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u Ben Hutchings <ben@decadent.org.uk> - 2018-01-28 19:50 +0100
Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u Yves-Alexis Perez <corsac@debian.org> - 2018-01-28 20:40 +0100
Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u Yves-Alexis Perez <corsac@debian.org> - 2018-02-05 20:40 +0100
Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u Ben Hutchings <ben@decadent.org.uk> - 2018-01-28 19:30 +0100
| From | Julien Aubin <julien.aubin@gmail.com> |
|---|---|
| Date | 2018-01-24 13:50 +0100 |
| Subject | Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u |
| Message-ID | <vbsF3-8hF-1@gated-at.bofh.it> |
[Multipart message — attachments visible in raw view] — view raw
Package: linux-image-4.9.0-5-amd64 Version: 4.9.65-3+deb9u2 Severity: serious Tags: security Justification: root security hole Hi, Now that kernel release 4.9.77 has been released and contains the full retpoline fixes, could you please bring it to stretch before the next p-u ? I know this situation is quite exceptionnal, but all the Spectre story is. I'm not sure backporting only the required changes for retpoline would be that easy. Thanks a lot,
[toc] | [next] | [standalone]
| From | Yves-Alexis Perez <corsac@debian.org> |
|---|---|
| Date | 2018-01-24 14:10 +0100 |
| Message-ID | <vbsYq-bv-15@gated-at.bofh.it> |
| In reply to | #60063 |
[Multipart message — attachments visible in raw view] — view raw
On Wed, 2018-01-24 at 14:03 +0100, Julien Aubin wrote: > I know it... :'( But as you rebuild the kernel image the updated compiler > may come a bit later w/o needing another kernel update ? I'm not really sure we will do a kernel binNMU in stretch-pu, but in any case that's a discussion for when we will actually have a fix. > > Anyway if you want someone to test the updates please push the updated > packages to stretch-p-u and I'll tell you if it works on my four boxes which > are : > - An Intel Core i7 4790 w/ NVidia blob 384.111 > - An AMD Phenom 9850 w/ NVidia blob 384.111 > - An Intel Core i7 4800MQ laptop > - An Intel NUC Atom Apollo Lake You'll be notified when the upload is done and this bug is closed, so you'll be able to test at that point. Regards, -- Yves-Alexis
[toc] | [prev] | [next] | [standalone]
| From | Yves-Alexis Perez <corsac@debian.org> |
|---|---|
| Date | 2018-01-28 18:50 +0100 |
| Subject | Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u |
| Message-ID | <vcZfz-1hT-7@gated-at.bofh.it> |
| In reply to | #60063 |
[Multipart message — attachments visible in raw view] — view raw
On Wed, 2018-01-24 at 13:52 +0100, Yves-Alexis Perez wrote: > > work on 4.9.77 is mostly done, so yes I'd like to push it to stretch before > next point relase. 4.9.78 is just out but I'm unsure if we want to hold it or > not. Hi Ben, So I went ahead an updated to 4.9.78 and added the revert for the VERMAGIC stuff (which is queued for 4.9.79). I'm currently running a full build in pbuilder in a stretch chroot, so it should be ready for upload if it's ok for you. I'm unsure about stable-uploads procedure for the kernel (SRM and debian-boot notifications for example) so pointer to any specific stuff would be welcome. Regards, -- Yves-Alexis
[toc] | [prev] | [next] | [standalone]
| From | Yves-Alexis Perez <corsac@debian.org> |
|---|---|
| Date | 2018-01-28 19:30 +0100 |
| Subject | Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u |
| Message-ID | <vcZSi-1Lu-9@gated-at.bofh.it> |
| In reply to | #60085 |
[Multipart message — attachments visible in raw view] — view raw
On Sun, 2018-01-28 at 18:24 +0000, Ben Hutchings wrote: > > So I went ahead an updated to 4.9.78 and added the revert for the VERMAGIC > > stuff (which is queued for 4.9.79). > > This makes sense. I think once an updated gcc is available in stretch > we should bump the ABI number and Build-Depends at the same time as un- > reverting that. So you want to include the patch even if it's reverted upstream? > > > I'm currently running a full build in pbuilder in a stretch chroot, so it > > should be ready for upload if it's ok for you. > > > > I'm unsure about stable-uploads procedure for the kernel (SRM and debian- > boot > > notifications for example) so pointer to any specific stuff would be > welcome. > > I've tended to upload shortly before point releases, but I think we > should really be uploading earlier and more often so regressions are > more lilely to be caught before a point release. Yes I think it'd be a good idea to let this one stay a bit longer in s-p-u. Do I need to ping someone before doing the upload? Regards, -- Yves-Alexis
[toc] | [prev] | [next] | [standalone]
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Date | 2018-01-28 19:50 +0100 |
| Subject | Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u |
| Message-ID | <vd0bE-1Sn-9@gated-at.bofh.it> |
| In reply to | #60086 |
[Multipart message — attachments visible in raw view] — view raw
On Sun, 2018-01-28 at 19:27 +0100, Yves-Alexis Perez wrote: > On Sun, 2018-01-28 at 18:24 +0000, Ben Hutchings wrote: > > > So I went ahead an updated to 4.9.78 and added the revert for the VERMAGIC > > > stuff (which is queued for 4.9.79). > > > > This makes sense. I think once an updated gcc is available in stretch > > we should bump the ABI number and Build-Depends at the same time as un- > > reverting that. > > So you want to include the patch even if it's reverted upstream? Oh, I misunderstood what you were saying. No I don't. But I think it makes sense to trigger a rebuild of modules once the retpoline compiler support is in place. > > > I'm currently running a full build in pbuilder in a stretch chroot, so it > > > should be ready for upload if it's ok for you. > > > > > > I'm unsure about stable-uploads procedure for the kernel (SRM and debian- > > > > boot > > > notifications for example) so pointer to any specific stuff would be > > > > welcome. > > > > I've tended to upload shortly before point releases, but I think we > > should really be uploading earlier and more often so regressions are > > more lilely to be caught before a point release. > > Yes I think it'd be a good idea to let this one stay a bit longer in s-p-u. Do > I need to ping someone before doing the upload? No, that's not necessary. But could you wait a day or two so I have a chance to review your work? Ben. -- Ben Hutchings If the facts do not conform to your theory, they must be disposed of.
[toc] | [prev] | [next] | [standalone]
| From | Yves-Alexis Perez <corsac@debian.org> |
|---|---|
| Date | 2018-01-28 20:40 +0100 |
| Subject | Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u |
| Message-ID | <vd0Y3-2r4-27@gated-at.bofh.it> |
| In reply to | #60088 |
[Multipart message — attachments visible in raw view] — view raw
On Sun, 2018-01-28 at 18:45 +0000, Ben Hutchings wrote: > > So you want to include the patch even if it's reverted upstream? > > Oh, I misunderstood what you were saying. No I don't. But I think it > makes sense to trigger a rebuild of modules once the retpoline compiler > support is in place. Agreed. > Do > > I need to ping someone before doing the upload? > > No, that's not necessary. But could you wait a day or two so I have a > chance to review your work? Sure, I'd welcome a review on this actually :) Regards, -- Yves-Alexis
[toc] | [prev] | [next] | [standalone]
| From | Yves-Alexis Perez <corsac@debian.org> |
|---|---|
| Date | 2018-02-05 20:40 +0100 |
| Subject | Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u |
| Message-ID | <vfUMq-4Mc-7@gated-at.bofh.it> |
| In reply to | #60089 |
[Multipart message — attachments visible in raw view] — view raw
On Sun, 2018-01-28 at 20:34 +0100, Yves-Alexis Perez wrote: > > No, that's not necessary. But could you wait a day or two so I have a > > chance to review your work? > > Sure, I'd welcome a review on this actually :) Hi Ben, 4.9.80-1 is ready for me. I'm not totally sure how to interpret: 2018/02/02 - [12:40:22] (bwh): Corsac: Sorry, no, why don't you go ahead anyway Is it go for upload, even without review? If so, I'll do the 4.9.80 upload tonight and watch the list for any bug from stretch-pu. Regards, -- Yves-Alexis
[toc] | [prev] | [next] | [standalone]
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Date | 2018-01-28 19:30 +0100 |
| Subject | Re: Bug#888263: Spectre : release kernel 4.9.77 to stretch before p-u |
| Message-ID | <vcZSi-1Lu-13@gated-at.bofh.it> |
| In reply to | #60085 |
[Multipart message — attachments visible in raw view] — view raw
On Sun, 2018-01-28 at 18:42 +0100, Yves-Alexis Perez wrote: > On Wed, 2018-01-24 at 13:52 +0100, Yves-Alexis Perez wrote: > > > > work on 4.9.77 is mostly done, so yes I'd like to push it to stretch before > > next point relase. 4.9.78 is just out but I'm unsure if we want to hold it or > > not. > > Hi Ben, > > So I went ahead an updated to 4.9.78 and added the revert for the VERMAGIC > stuff (which is queued for 4.9.79). This makes sense. I think once an updated gcc is available in stretch we should bump the ABI number and Build-Depends at the same time as un- reverting that. > I'm currently running a full build in pbuilder in a stretch chroot, so it > should be ready for upload if it's ok for you. > > I'm unsure about stable-uploads procedure for the kernel (SRM and debian-boot > notifications for example) so pointer to any specific stuff would be welcome. I've tended to upload shortly before point releases, but I think we should really be uploading earlier and more often so regressions are more lilely to be caught before a point release. Ben. -- Ben Hutchings If the facts do not conform to your theory, they must be disposed of.
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.kernel
csiph-web