Bug 15616

Summary: Update request: kernel-vserver-3.14.39-0.vs2.3.6.15.1.mga4
Product: Mageia Reporter: Thomas Backlund <tmb>
Component: SecurityAssignee: Thomas Backlund <tmb>
Status: RESOLVED WONTFIX QA Contact: Sec team <security>
Severity: normal    
Priority: Normal CC: ottoleipala1, wilcal.int
Version: 4   
Target Milestone: ---   
Hardware: All   
OS: Linux   
Whiteboard: feedback
Source RPM: kernel-vserver-3.14.39-0.vs2.3.6.15.1.mga4.src.rpm CVE:
Status comment:

Description Thomas Backlund 2015-04-01 20:58:25 CEST
New kernels for test, advisory will follow:

SRPMS:
kernel-vserver-3.14.37-0.vs2.3.6.15.1.mga4.src.rpm


i586:
kernel-vserver-3.14.37-0.vs2.3.6.15.1.mga4-1-1.mga4.i586.rpm
kernel-vserver-devel-3.14.37-0.vs2.3.6.15.1.mga4-1-1.mga4.i586.rpm
kernel-vserver-devel-latest-3.14.37-0.vs2.3.6.15.1.mga4.i586.rpm
kernel-vserver-doc-3.14.37-0.vs2.3.6.15.1.mga4.noarch.rpm
kernel-vserver-latest-3.14.37-0.vs2.3.6.15.1.mga4.i586.rpm
kernel-vserver-source-3.14.37-0.vs2.3.6.15.1.mga4-1-1.mga4.noarch.rpm
kernel-vserver-source-latest-3.14.37-0.vs2.3.6.15.1.mga4.noarch.rpm


x86_64:
kernel-vserver-3.14.37-0.vs2.3.6.15.1.mga4-1-1.mga4.x86_64.rpm
kernel-vserver-devel-3.14.37-0.vs2.3.6.15.1.mga4-1-1.mga4.x86_64.rpm
kernel-vserver-devel-latest-3.14.37-0.vs2.3.6.15.1.mga4.x86_64.rpm
kernel-vserver-doc-3.14.37-0.vs2.3.6.15.1.mga4.noarch.rpm
kernel-vserver-latest-3.14.37-0.vs2.3.6.15.1.mga4.x86_64.rpm
kernel-vserver-source-3.14.37-0.vs2.3.6.15.1.mga4-1-1.mga4.noarch.rpm
kernel-vserver-source-latest-3.14.37-0.vs2.3.6.15.1.mga4.noarch.rpm


Reproducible: 

Steps to Reproduce:
Comment 1 Thomas Backlund 2015-04-03 11:15:14 CEST
taking this back, there is reports of btrfs hangs on reboot

Assignee: qa-bugs => tmb

Comment 2 Thomas Backlund 2015-04-03 14:09:06 CEST
btrfs fix and a infiniband CVE fix added, new list:

SRPMS:
kernel-vserver-3.14.37-0.vs2.3.6.15.2.mga4.src.rpm


i586:
kernel-vserver-3.14.37-0.vs2.3.6.15.2.mga4-1-2.mga4.i586.rpm
kernel-vserver-devel-3.14.37-0.vs2.3.6.15.2.mga4-1-2.mga4.i586.rpm
kernel-vserver-devel-latest-3.14.37-0.vs2.3.6.15.2.mga4.i586.rpm
kernel-vserver-doc-3.14.37-0.vs2.3.6.15.2.mga4.noarch.rpm
kernel-vserver-latest-3.14.37-0.vs2.3.6.15.2.mga4.i586.rpm
kernel-vserver-source-3.14.37-0.vs2.3.6.15.2.mga4-1-2.mga4.noarch.rpm
kernel-vserver-source-latest-3.14.37-0.vs2.3.6.15.2.mga4.noarch.rpm


x86_64:
kernel-vserver-3.14.37-0.vs2.3.6.15.2.mga4-1-2.mga4.x86_64.rpm
kernel-vserver-devel-3.14.37-0.vs2.3.6.15.2.mga4-1-2.mga4.x86_64.rpm
kernel-vserver-devel-latest-3.14.37-0.vs2.3.6.15.2.mga4.x86_64.rpm
kernel-vserver-doc-3.14.37-0.vs2.3.6.15.2.mga4.noarch.rpm
kernel-vserver-latest-3.14.37-0.vs2.3.6.15.2.mga4.x86_64.rpm
kernel-vserver-source-3.14.37-0.vs2.3.6.15.2.mga4-1-2.mga4.noarch.rpm
kernel-vserver-source-latest-3.14.37-0.vs2.3.6.15.2.mga4.noarch.rpm

Assignee: tmb => qa-bugs
Summary: Update request: kernel-vserver-3.14.37-0.vs2.3.6.15.1.mga4 => Update request: kernel-vserver-3.14.37-0.vs2.3.6.15.2.mga4
Source RPM: kernel-vserver-3.14.37-0.vs2.3.6.15.1.mga4.src.rpm => kernel-vserver-3.14.37-0.vs2.3.6.15.2.mga4.src.rpm

Comment 3 William Kenney 2015-04-05 18:38:05 CEST
In VirtualBox, M4, KDE, 32-bit

Package(s) under test:
kernel-vserver-latest

default install of kernel-vserver-latest

[root@localhost wilcal]# uname -a
Linux localhost 3.14.32-vserver-0.vs2.3.6.14.1.mga4 #1 SMP Sat Feb 7 12:26:24 UTC 2015 i686 i686 i686 GNU/Linux
[root@localhost wilcal]# urpmi kernel-vserver-latest
Package kernel-vserver-latest-3.14.32-0.vs2.3.6.14.1.mga4.i586 is already installed

System boots to a working desktop. Common apps work. Screen dimensions are correct.

install urpmi kernel-vserver-latest from updates_testing

[root@localhost wilcal]# uname -a
Linux localhost 3.14.37-vserver-0.vs2.3.6.15.2.mga4 #1 SMP Fri Apr 3 11:30:57 UTC 2015 i686 i686 i686 GNU/Linux
[root@localhost wilcal]# urpmi kernel-vserver-latest
Package kernel-vserver-latest-3.14.37-0.vs2.3.6.15.2.mga4.i586 is already installed

System boots to a working desktop. Common apps work. Screen dimensions are correct.

Test platform:
Intel Core i7-2600K Sandy Bridge 3.4GHz
GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo
GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB
RTL8111/8168B PCI Express 1Gbit Ethernet
DRAM 16GB (4 x 4GB)
Mageia 4 64-bit, Nvidia driver
virtualbox-4.3.10-1.1.mga4.x86_64
virtualbox-guest-additions-4.3.10-1.1.mga4.x86_64

CC: (none) => wilcal.int

Comment 4 William Kenney 2015-04-05 19:36:50 CEST
In VirtualBox, M4, KDE, 64-bit

Package(s) under test:
kernel-vserver-latest

default install of kernel-vserver-latest

[root@localhost wilcal]# uname -a
Linux localhost 3.14.32-vserver-0.vs2.3.6.14.1.mga4 #1 SMP Sat Feb 7 12:26:25 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-vserver-latest
Package kernel-vserver-latest-3.14.32-0.vs2.3.6.14.1.mga4.x86_64 is already installed

System boots to a working desktop. Common apps work. Screen dimensions are correct.

install urpmi kernel-vserver-latest from updates_testing

[root@localhost wilcal]# uname -a
Linux localhost 3.14.37-vserver-0.vs2.3.6.15.2.mga4 #1 SMP Fri Apr 3 11:38:06 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-vserver-latest
Package kernel-vserver-latest-3.14.37-0.vs2.3.6.15.2.mga4.x86_64 is already installed

System boots to a working desktop. Common apps work. Screen dimensions are correct.

Test platform:
Intel Core i7-2600K Sandy Bridge 3.4GHz
GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo
GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB
RTL8111/8168B PCI Express 1Gbit Ethernet
DRAM 16GB (4 x 4GB)
Mageia 4 64-bit, Nvidia driver
virtualbox-4.3.10-1.1.mga4.x86_64
virtualbox-guest-additions-4.3.10-1.1.mga4.x86_64
Comment 5 Thomas Backlund 2015-04-19 15:13:47 CEST

Taking the kernels back :/

Turns out a fix for tcp fastopen in 3.14.37 causes a regression that has turned into a local dos security issue fixed in 3.14.39

So I will roll out new sets based on 3.14.39

Assignee: qa-bugs => tmb

Comment 6 Thomas Backlund 2015-04-19 20:55:02 CEST
New rpms for test:

SRPMS:
kernel-vserver-3.14.39-0.vs2.3.6.15.1.mga4.src.rpm


i586:
kernel-vserver-3.14.39-0.vs2.3.6.15.1.mga4-1-1.mga4.i586.rpm
kernel-vserver-devel-3.14.39-0.vs2.3.6.15.1.mga4-1-1.mga4.i586.rpm
kernel-vserver-devel-latest-3.14.39-0.vs2.3.6.15.1.mga4.i586.rpm
kernel-vserver-doc-3.14.39-0.vs2.3.6.15.1.mga4.noarch.rpm
kernel-vserver-latest-3.14.39-0.vs2.3.6.15.1.mga4.i586.rpm
kernel-vserver-source-3.14.39-0.vs2.3.6.15.1.mga4-1-1.mga4.noarch.rpm
kernel-vserver-source-latest-3.14.39-0.vs2.3.6.15.1.mga4.noarch.rpm


x86_64:
kernel-vserver-3.14.39-0.vs2.3.6.15.1.mga4-1-1.mga4.x86_64.rpm
kernel-vserver-devel-3.14.39-0.vs2.3.6.15.1.mga4-1-1.mga4.x86_64.rpm
kernel-vserver-devel-latest-3.14.39-0.vs2.3.6.15.1.mga4.x86_64.rpm
kernel-vserver-doc-3.14.39-0.vs2.3.6.15.1.mga4.noarch.rpm
kernel-vserver-latest-3.14.39-0.vs2.3.6.15.1.mga4.x86_64.rpm
kernel-vserver-source-3.14.39-0.vs2.3.6.15.1.mga4-1-1.mga4.noarch.rpm
kernel-vserver-source-latest-3.14.39-0.vs2.3.6.15.1.mga4.noarch.rpm

Assignee: tmb => qa-bugs
Summary: Update request: kernel-vserver-3.14.37-0.vs2.3.6.15.2.mga4 => Update request: kernel-vserver-3.14.39-0.vs2.3.6.15.1.mga4
Source RPM: kernel-vserver-3.14.37-0.vs2.3.6.15.2.mga4.src.rpm => kernel-vserver-3.14.39-0.vs2.3.6.15.1.mga4.src.rpm

Comment 7 William Kenney 2015-04-26 20:04:41 CEST
In VirtualBox, M4, KDE, 32-bit

Package(s) under test:
kernel-vserver-latest

default install of kernel-vserver-latest

[root@localhost wilcal]# uname -a
Linux localhost 3.14.32-vserver-0.vs2.3.6.14.1.mga4 #1 SMP Sat Feb 7 12:26:24 UTC 2015 i686 i686 i686 GNU/Linux
[root@localhost wilcal]# urpmi kernel-vserver-latest
Package kernel-vserver-latest-3.14.32-0.vs2.3.6.14.1.mga4.i586 is already installed

System boots to a working desktop. Common apps work. Screen dimensions are correct.

install urpmi kernel-vserver-latest from updates_testing

[root@localhost wilcal]# uname -a
Linux localhost 3.14.39-vserver-0.vs2.3.6.15.1.mga4 #1 SMP Sun Apr 19 14:47:48 UTC 2015 i686 i686 i686 GNU/Linux
[root@localhost wilcal]# urpmi kernel-vserver-latest
Package kernel-vserver-latest-3.14.39-0.vs2.3.6.15.1.mga4.i586 is already installed

System boots to a working desktop. Common apps work. Screen dimensions are correct.

Test platform:
Intel Core i7-2600K Sandy Bridge 3.4GHz
GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo
GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB
RTL8111/8168B PCI Express 1Gbit Ethernet
DRAM 16GB (4 x 4GB)
Mageia 4 64-bit, Nvidia driver
virtualbox-4.3.10-1.1.mga4.x86_64
virtualbox-guest-additions-4.3.10-1.1.mga4.x86_64
Comment 8 William Kenney 2015-04-26 20:51:12 CEST
In VirtualBox, M4, KDE, 64-bit

Package(s) under test:
kernel-vserver-latest

default install of kernel-vserver-latest

[root@localhost wilcal]# uname -a
Linux localhost 3.14.32-vserver-0.vs2.3.6.14.1.mga4 #1 SMP Sat Feb 7 12:26:25 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-vserver-latest
Package kernel-vserver-latest-3.14.32-0.vs2.3.6.14.1.mga4.x86_64 is already installed

System boots to a working desktop. Common apps work. Screen dimensions are correct.

install urpmi kernel-vserver-latest from updates_testing

[root@localhost wilcal]# uname -a
Linux localhost 3.14.39-vserver-0.vs2.3.6.15.1.mga4 #1 SMP Sun Apr 19 15:07:01 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-vserver-latest
Package kernel-vserver-latest-3.14.39-0.vs2.3.6.15.1.mga4.x86_64 is already installed

System boots to a working desktop. Common apps work. Screen dimensions are correct.

Test platform:
Intel Core i7-2600K Sandy Bridge 3.4GHz
GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo
GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB
RTL8111/8168B PCI Express 1Gbit Ethernet
DRAM 16GB (4 x 4GB)
Mageia 4 64-bit, Nvidia driver
virtualbox-4.3.10-1.1.mga4.x86_64
virtualbox-guest-additions-4.3.10-1.1.mga4.x86_64
Comment 9 claire robinson 2015-04-30 22:55:00 CEST
Adding feedback marker for now as this will be updated for new CVE's again before pushing.

Whiteboard: (none) => feedback

Comment 10 Marek Laane 2015-06-29 02:28:23 CEST
60 days without any action? Forgotten bug? Obsolete for now?
Comment 11 Otto Leipälä 2015-06-29 08:17:44 CEST
NO no no we don't obsolete bugs so please stop spamming our bugzilla.

CC: (none) => ozkyster

Comment 12 Thomas Backlund 2015-06-29 08:41:34 CEST
Nope, just been waiting on upstream to get back in sync...
Comment 13 Thomas Backlund 2015-09-15 16:59:48 CEST
Sorry to say theese wont be fixed before Mga 4 EOL

Status: NEW => RESOLVED
Resolution: (none) => WONTFIX
Assignee: qa-bugs => tmb