| Summary: | Update request: kernel-5.10.43-1.mga8/7 | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | Thomas Backlund <tmb> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | Sec team <security> |
| Severity: | normal | ||
| Priority: | Normal | CC: | brtians1, davidwhodgins, fri, guillaume.royer, sysadmin-bugs, tarazed25, wilcal.int |
| Version: | 8 | Keywords: | advisory, validated_update |
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | MGA7TOO, MGA8-64-OK, MGA8-32-OK, MGA7-64-OK, MGA7-32-OK | ||
| Source RPM: | kernel | CVE: | |
| Status comment: | |||
|
Description
Thomas Backlund
2021-06-11 16:12:38 CEST
Mga7 rpms: SRPMS: kernel-5.10.43-1.mga7.src.rpm kmod-virtualbox-6.1.22-1.6.mga7.src.rpm kmod-xtables-addons-3.13-28.mga7.src.rpm i586: bpftool-5.10.43-1.mga7.i586.rpm cpupower-5.10.43-1.mga7.i586.rpm cpupower-devel-5.10.43-1.mga7.i586.rpm kernel-desktop-5.10.43-1.mga7-1-1.mga7.i586.rpm kernel-desktop586-5.10.43-1.mga7-1-1.mga7.i586.rpm kernel-desktop586-devel-5.10.43-1.mga7-1-1.mga7.i586.rpm kernel-desktop586-devel-latest-5.10.43-1.mga7.i586.rpm kernel-desktop586-latest-5.10.43-1.mga7.i586.rpm kernel-desktop-devel-5.10.43-1.mga7-1-1.mga7.i586.rpm kernel-desktop-devel-latest-5.10.43-1.mga7.i586.rpm kernel-desktop-latest-5.10.43-1.mga7.i586.rpm kernel-doc-5.10.43-1.mga7.noarch.rpm kernel-server-5.10.43-1.mga7-1-1.mga7.i586.rpm kernel-server-devel-5.10.43-1.mga7-1-1.mga7.i586.rpm kernel-server-devel-latest-5.10.43-1.mga7.i586.rpm kernel-server-latest-5.10.43-1.mga7.i586.rpm kernel-source-5.10.43-1.mga7-1-1.mga7.noarch.rpm kernel-source-latest-5.10.43-1.mga7.noarch.rpm kernel-userspace-headers-5.10.43-1.mga7.i586.rpm libbpf0-5.10.43-1.mga7.i586.rpm libbpf-devel-5.10.43-1.mga7.i586.rpm perf-5.10.43-1.mga7.i586.rpm xtables-addons-kernel-5.10.43-desktop-1.mga7-3.13-28.mga7.i586.rpm xtables-addons-kernel-5.10.43-desktop586-1.mga7-3.13-28.mga7.i586.rpm xtables-addons-kernel-5.10.43-server-1.mga7-3.13-28.mga7.i586.rpm xtables-addons-kernel-desktop586-latest-3.13-28.mga7.i586.rpm xtables-addons-kernel-desktop-latest-3.13-28.mga7.i586.rpm xtables-addons-kernel-server-latest-3.13-28.mga7.i586.rpm x86_64: bpftool-5.10.43-1.mga7.x86_64.rpm cpupower-5.10.43-1.mga7.x86_64.rpm cpupower-devel-5.10.43-1.mga7.x86_64.rpm kernel-desktop-5.10.43-1.mga7-1-1.mga7.x86_64.rpm kernel-desktop-devel-5.10.43-1.mga7-1-1.mga7.x86_64.rpm kernel-desktop-devel-latest-5.10.43-1.mga7.x86_64.rpm kernel-desktop-latest-5.10.43-1.mga7.x86_64.rpm kernel-doc-5.10.43-1.mga7.noarch.rpm kernel-server-5.10.43-1.mga7-1-1.mga7.x86_64.rpm kernel-server-devel-5.10.43-1.mga7-1-1.mga7.x86_64.rpm kernel-server-devel-latest-5.10.43-1.mga7.x86_64.rpm kernel-server-latest-5.10.43-1.mga7.x86_64.rpm kernel-source-5.10.43-1.mga7-1-1.mga7.noarch.rpm kernel-source-latest-5.10.43-1.mga7.noarch.rpm kernel-userspace-headers-5.10.43-1.mga7.x86_64.rpm lib64bpf0-5.10.43-1.mga7.x86_64.rpm lib64bpf-devel-5.10.43-1.mga7.x86_64.rpm perf-5.10.43-1.mga7.x86_64.rpm virtualbox-kernel-5.10.43-desktop-1.mga7-6.1.22-1.6.mga7.x86_64.rpm virtualbox-kernel-5.10.43-server-1.mga7-6.1.22-1.6.mga7.x86_64.rpm virtualbox-kernel-desktop-latest-6.1.22-1.6.mga7.x86_64.rpm virtualbox-kernel-server-latest-6.1.22-1.6.mga7.x86_64.rpm xtables-addons-kernel-5.10.43-desktop-1.mga7-3.13-28.mga7.x86_64.rpm xtables-addons-kernel-5.10.43-server-1.mga7-3.13-28.mga7.x86_64.rpm xtables-addons-kernel-desktop-latest-3.13-28.mga7.x86_64.rpm xtables-addons-kernel-server-latest-3.13-28.mga7.x86_64.rpm Whiteboard:
(none) =>
MGA7TOO MGA 8 XFCE core i3 4Go ram, Nividia 540M, driver 390 and Broadcom Wl non free. Updated kernel with QA repo tool: bpftool-5.10.43-1.mga8.x86_64.rpm cpupower-5.10.43-1.mga8.x86_64.rpm cpupower-devel-5.10.43-1.mga8.x86_64.rpm kernel-desktop-5.10.43-1.mga8-1-1.mga8.x86_64.rpm kernel-desktop-devel-5.10.43-1.mga8-1-1.mga8.x86_64.rpm kernel-desktop-devel-latest-5.10.43-1.mga8.x86_64.rpm kernel-desktop-latest-5.10.43-1.mga8.x86_64.rpm libbpf0-5.10.43-1.mga7.i586.rpm libbpf-devel-5.10.43-1.mga7.i586.rpm perf-5.10.43-1.mga7.i586.rpm virtualbox-kernel-5.10.43-desktop-1.mga7-6.1.22-1.6.mga7.x86_64.rpm virtualbox-kernel-desktop-latest-6.1.22-1.6.mga7.x86_64.rpm No issues found after 2 days of use. Use with mageia-prime switch ok ================================================================================ MGA7 LXQt VM Updated kernel with QA repo tools No issues found after reboot. CC:
(none) =>
guillaume.royer Package management quirks I am running kernel 5.12.10 Using drakrpm, I uninstalled cpupower 5.12.10, and selected for install the 5.10.43 variants. Problem: it wants to install the "-latest" packages of *5.12.10* : - cpupower-5.10.43-1.mga8.x86_64 - kernel-desktop-5.10.43-1.mga8-1-1.mga8.x86_64 - kernel-desktop-devel-5.10.43-1.mga8-1-1.mga8.x86_64 - kernel-desktop-devel-latest-5.12.10-2.mga8.x86_64 - kernel-desktop-latest-5.12.10-2.mga8.x86_64 - virtualbox-kernel-5.10.43-desktop-1.mga8-6.1.22-1.6.mga8.x86_64 Possible workaround: manually deselect the "-latest" packages But I did not execute that, instead I disabled any backport repos and started drakrpm again: When I select kernel-desktop-5.10.43-1.mga8, it asks to install: - cpupower-5.12.8-1.mga8.x86_64 - kernel-desktop-5.12.8-1.mga8-1-1.mga8.x86_64 - kernel-desktop-latest-5.12.8-1.mga8.x86_64 Which is insane as they are not in an enabled repo. It may matter this system have *had* them installed ? - uninstalled them before this post (after successful test of 5.12.10) $ urpmq --list-media active Core Release (distrib1) Core Updates (distrib3) Core Updates Testing (distrib5) Nonfree Release (distrib11) Nonfree Updates (distrib13) Nonfree Updates Testing (distrib15) Tainted Release (distrib21) Tainted Updates (distrib23) Tainted Updates Testing (distrib25) Core 32bit Release (distrib31) Core 32bit Updates (distrib32) Core 32bit Updates Testing (distrib33) Nonfree 32bit Release (distrib36) Nonfree 32bit Updates (distrib37) Nonfree 32bit Updates Testing (distrib38) Tainted 32bit Release (distrib41) Tainted 32bit Updates (distrib42) Tainted 32bit Updates Testing (distrib43) $ LC_ALL=C urpmq cpupower-5.12.8-1.mga8 No package named cpupower-5.12.8-1.mga8 ( and to compare: $ LC_ALL=C urpmq cpupower-5.10.43-1.mga8 cpupower ) So why do drakrpm want to install 5.12 packages?? They are a) for wrong kernel version, and b) from a (configured but) not enabled repo. I am leaving it here for a while if someone want me to try something. CC:
(none) =>
fri Phys Hardware - AMD, Nvidia 730GT (390), Plasma The following 7 packages are going to be installed: - cpupower-5.10.43-1.mga8.x86_64 - kernel-desktop-5.10.43-1.mga8-1-1.mga8.x86_64 - kernel-desktop-devel-5.10.43-1.mga8-1-1.mga8.x86_64 - kernel-desktop-devel-latest-5.10.43-1.mga8.x86_64 - kernel-desktop-latest-5.10.43-1.mga8.x86_64 - virtualbox-kernel-5.10.43-desktop-1.mga8-6.1.22-1.6.mga8.x86_64 - virtualbox-kernel-desktop-latest-6.1.22-1.6.mga8.x86_64 --reboot-- $ uname -a Linux localhost 5.10.43-desktop-1.mga8 #1 SMP Fri Jun 11 07:17:46 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux # lsmod | grep nvidia nvidia_uvm 925696 0 nvidia_drm 53248 1 drm_kms_helper 270336 1 nvidia_drm nvidia_modeset 1056768 13 nvidia_drm nvidia 15831040 491 nvidia_uvm,nvidia_modeset ipmi_msghandler 69632 2 ipmi_devintf,nvidia drm 606208 4 drm_kms_helper,nvidia_drm system is behaving - virtualbox is working - browser works - Clementine/sound work Working for me CC:
(none) =>
brtians1 (In reply to Morgan Leijström from comment #3) > Package management quirks > > I am running kernel 5.12.10 > Using drakrpm, I uninstalled cpupower 5.12.10, and selected for install the > 5.10.43 variants. > Problem: it wants to install the "-latest" packages of *5.12.10* : While drakrpm shows all of the versions available, it uses just the package name when installing, so always gets the latest version and the default arch. To install a specific version urpmi must be used. CC:
(none) =>
davidwhodgins On M7.1 hardware in a Vbox client, M8, Plasma, 64-bit clear uname -a urpmi kernel-desktop-latest urpmi kernel-userspace-headers urpmi cpupower Linux localhost 5.10.41-desktop-1.mga8 #1 SMP Fri May 28 14:12:17 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux Package kernel-desktop-latest-5.10.41-1.mga8.x86_64 is already installed Package kernel-userspace-headers-5.10.41-1.mga8.x86_64 is already installed Package cpupower-5.10.41-1.mga8.x86_64 is already installed Boots to a working desktop. Screen resolution is correct. Common apps work. Install kernel-desktop-latest cpupower kernel-userspace-headers from updates testing The following 4 packages are going to be installed: - cpupower-5.10.43-1.mga8.x86_64 - kernel-desktop-5.10.43-1.mga8-1-1.mga8.x86_64 - kernel-desktop-latest-5.10.43-1.mga8.x86_64 - kernel-userspace-headers-5.10.43-1.mga8.x86_64 Reboot system. Linux localhost 5.10.43-desktop-1.mga8 #1 SMP Fri Jun 11 07:17:46 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux Package kernel-desktop-latest-5.10.43-1.mga8.x86_64 is already installed Package kernel-userspace-headers-5.10.43-1.mga8.x86_64 is already installed Package cpupower-5.10.43-1.mga8.x86_64 is already installed Boots to a working desktop. Screen resolution is correct. Common apps work. CC:
(none) =>
wilcal.int On real hardware, M7, Plasma, 64-bit
Packages checked:
kernel-desktop-latest virtualbox kernel-userspace-headers
virtualbox-guest-additions virtualbox-kernel-desktop-latest
x11-driver-video-vboxvideo kernel-desktop-devel-latest
cpupower dkms-vboxadditions dkms-virtualbox
clear
uname -a
urpmi kernel-desktop-latest
urpmi virtualbox
urpmi x11-driver-video-vboxvideo
urpmi kernel-desktop-devel-latest
urpmi kernel-userspace-headers
urpmi cpupower
urpmi dkms-vboxadditions
urpmi dkms-virtualbox
[root@localhost wilcal]# uname -a
Linux localhost 5.10.41-desktop-1.mga7 #1 SMP Fri May 28 14:28:33 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-5.10.41-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi virtualbox
Package virtualbox-6.1.22-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi x11-driver-video-vboxvideo
Package x11-driver-video-vboxvideo-1.0.0-5.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi kernel-desktop-devel-latest
Package kernel-desktop-devel-latest-5.10.41-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi kernel-userspace-headers
Package kernel-userspace-headers-5.10.41-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.10.41-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi dkms-vboxadditions
Package dkms-vboxadditions-6.1.22-1.mga7.noarch is already installed
[root@localhost wilcal]# urpmi dkms-virtualbox
Package dkms-virtualbox-6.1.22-1.mga7.x86_64 is already installed
[root@localhost wilcal]# lspci -k
00:02.0 VGA compatible controller: Intel Corporation Iris Plus Graphics G1 (Ice Lake) (rev 07)
DeviceName: To Be Filled by O.E.M.
Subsystem: Dell Device 097c
Kernel driver in use: i915
Kernel modules: i915
Boots to working desktop
M7.1 x86_64 Vbox Plasma Client, boots to a working desktop - Screen size correct
M8 x86_64 Vbox Plasma Client, boots to a working desktop - Screen size correct
install from update_testing:
kernel-desktop-latest kernel-desktop-devel-latest kernel-userspace-headers virtualbox-kernel-desktop-latest cpupower
The following 7 packages are going to be installed:
- cpupower-5.10.43-1.mga7.x86_64
- kernel-desktop-5.10.43-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-5.10.43-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-latest-5.10.43-1.mga7.x86_64
- kernel-userspace-headers-5.10.43-1.mga7.x86_64
- virtualbox-kernel-5.10.43-desktop-1.mga7-6.1.22-1.6.mga7.x86_64
- virtualbox-kernel-desktop-latest-6.1.22-1.6.mga7.x86_64
clear
uname -a
urpmi kernel-desktop-latest
urpmi kernel-desktop-devel-latest
urpmi kernel-userspace-headers
urpmi virtualbox-kernel-desktop-latest
urpmi cpupower
[root@localhost wilcal]# uname -a
Linux localhost 5.10.43-desktop-1.mga7 #1 SMP Fri Jun 11 07:28:47 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-5.10.43-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi kernel-desktop-devel-latest
Package kernel-desktop-devel-latest-5.10.43-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi kernel-userspace-headers
Package kernel-userspace-headers-5.10.43-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi virtualbox-kernel-desktop-latest
Package virtualbox-kernel-desktop-latest-6.1.22-1.6.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.10.43-1.mga7.x86_64 is already installed
[root@localhost wilcal]# lspci -k
00:02.0 VGA compatible controller: Intel Corporation Iris Plus Graphics G1 (Ice Lake) (rev 07)
DeviceName: To Be Filled by O.E.M.
Subsystem: Dell Device 097c
Kernel driver in use: i915
Kernel modules: i915
Boots to working desktop
M7.1 x86_64 Vbox Plasma Client, boots to a working desktop - Screen size correct
M8 x86_64 Vbox Plasma Client, boots to a working desktop - Screen size correct
(In reply to Dave Hodgins from comment #5) > (In reply to Morgan Leijström from comment #3) > > Package management quirks > While drakrpm shows all of the versions available, it uses just the package > name when installing, so always gets the latest version and the default arch. > > To install a specific version urpmi must be used. I try using drakrpm as that is probably what most users use... In this second attempt i selected packages in different order, and it decided to install 5.12.8 in addition to the 5.10.43 packages i selected (i guess the -latest packages triggered that), I let it proceed and it succeeded. * But sure it must be a bug that drakrpm use a non active repo! * In the menu there is a link to the media manager where repos can be enabled and disabled but then that is not obeyed! After I let it install per above I uninstalled the 5.12.8 packages (including kernel-*-latest), and installed cpupower 5.10.43. Using drakrpm. Will return later with test results. On M8 hardware in a Vbox client, M7.1, Plasma, 64-bit clear uname -a urpmi kernel-desktop-latest urpmi kernel-userspace-headers urpmi cpupower [root@localhost wilcal]# uname -a Linux localhost 5.10.41-desktop-1.mga7 #1 SMP Fri May 28 14:28:33 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux [root@localhost wilcal]# urpmi kernel-desktop-latest Package kernel-desktop-latest-5.10.41-1.mga7.x86_64 is already installed [root@localhost wilcal]# urpmi kernel-userspace-headers Package kernel-userspace-headers-5.10.41-1.mga7.x86_64 is already installed [root@localhost wilcal]# urpmi cpupower Package cpupower-5.10.41-1.mga7.x86_64 is already installed Boots to a working desktop. Screen resolution is correct. Common apps work. Install kernel-desktop-latest cpupower kernel-userspace-headers from updates testing Reboot system. [root@localhost wilcal]# uname -a Linux localhost 5.10.43-desktop-1.mga7 #1 SMP Fri Jun 11 07:28:47 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux [root@localhost wilcal]# urpmi kernel-desktop-latest Package kernel-desktop-latest-5.10.43-1.mga7.x86_64 is already installed [root@localhost wilcal]# urpmi kernel-userspace-headers Package kernel-userspace-headers-5.10.43-1.mga7.x86_64 is already installed [root@localhost wilcal]# urpmi cpupower Package cpupower-5.10.43-1.mga7.x86_64 is already installed Boots to a working desktop. Screen resolution is correct. Common apps work. On M8 hardware in a Vbox client, M8, Plasma, 64-bit clear uname -a urpmi kernel-desktop-latest urpmi kernel-userspace-headers urpmi cpupower Linux localhost 5.10.41-desktop-1.mga8 #1 SMP Fri May 28 14:12:17 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux Package kernel-desktop-latest-5.10.41-1.mga8.x86_64 is already installed Package kernel-userspace-headers-5.10.41-1.mga8.x86_64 is already installed Package cpupower-5.10.41-1.mga8.x86_64 is already installed Boots to a working desktop. Screen resolution is correct. Common apps work. Install kernel-desktop-latest cpupower kernel-userspace-headers from updates testing The following 4 packages are going to be installed: - cpupower-5.10.43-1.mga8.x86_64 - kernel-desktop-5.10.43-1.mga8-1-1.mga8.x86_64 - kernel-desktop-latest-5.10.43-1.mga8.x86_64 - kernel-userspace-headers-5.10.43-1.mga8.x86_64 Reboot system. Linux localhost 5.10.43-desktop-1.mga8 #1 SMP Fri Jun 11 07:17:46 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux Package kernel-desktop-latest-5.10.43-1.mga8.x86_64 is already installed Package kernel-userspace-headers-5.10.43-1.mga8.x86_64 is already installed Package cpupower-5.10.43-1.mga8.x86_64 is already installed Boots to a working desktop. Screen resolution is correct. Common apps work. On real hardware, M8, Plasma, 64-bit
Packages checked:
kernel-desktop-latest virtualbox kernel-userspace-headers
virtualbox-guest-additions virtualbox-kernel-desktop-latest
x11-driver-video-vboxvideo kernel-desktop-devel-latest
cpupower dkms-virtualbox
clear
uname -a
urpmi kernel-desktop-latest
urpmi virtualbox
urpmi x11-driver-video-vboxvideo
urpmi kernel-desktop-devel-latest
urpmi kernel-userspace-headers
urpmi cpupower
urpmi virtualbox-kernel-desktop-latest
urpmi dkms-virtualbox
Linux localhost 5.10.41-desktop-1.mga8 #1 SMP Fri May 28 14:12:17 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
Package kernel-desktop-latest-5.10.41-1.mga8.x86_64 is already installed
Package virtualbox-6.1.22-1.mga8.x86_64 is already installed
Package x11-driver-video-vboxvideo-1.0.0-6.mga8.x86_64 is already installed
Package kernel-desktop-devel-latest-5.10.41-1.mga8.x86_64 is already installed
Package kernel-userspace-headers-5.10.41-1.mga8.x86_64 is already installed
Package cpupower-5.10.41-1.mga8.x86_64 is already installed
Package virtualbox-kernel-desktop-latest-6.1.22-1.5.mga8.x86_64 is already installed
Package dkms-virtualbox-6.1.22-1.mga8.x86_64 is already installed
[root@localhost wilcal]# lspic -k
00:02.0 VGA compatible controller: Intel Corporation Iris Plus Graphics G1 (Ice Lake) (rev 07)
DeviceName: To Be Filled by O.E.M.
Subsystem: Dell Device 097c
Kernel driver in use: i915
Kernel modules: i915
Boots to working desktop
M7.1 x86_64 Vbox Plasma Client, boots to a working desktop - Screen size correct
M8 x86_64 Vbox Plasma Client, boots to a working desktop - Screen size correct
install from update_testing:
kernel-desktop-latest kernel-desktop-devel-latest virtualbox-kernel-desktop-latest kernel-userspace-headers cpupower virtualbox-kernel-desktop-latest
The following 8 packages are going to be installed:
- cpupower-5.10.43-1.mga8.x86_64
- kernel-desktop-5.10.43-1.mga8-1-1.mga8.x86_64
- kernel-desktop-devel-5.10.43-1.mga8-1-1.mga8.x86_64
- kernel-desktop-devel-latest-5.10.43-1.mga8.x86_64
- kernel-desktop-latest-5.10.43-1.mga8.x86_64
- kernel-userspace-headers-5.10.43-1.mga8.x86_64
- virtualbox-kernel-5.10.43-desktop-1.mga8-6.1.22-1.6.mga8.x86_64
- virtualbox-kernel-desktop-latest-6.1.22-1.6.mga8.x86_64
clear
uname -a
urpmi kernel-desktop-latest
urpmi kernel-desktop-devel-latest
urpmi kernel-userspace-headers
urpmi virtualbox-kernel-desktop-latest
urpmi cpupower
Linux localhost 5.10.43-desktop-1.mga8 #1 SMP Fri Jun 11 07:17:46 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
Package kernel-desktop-latest-5.10.43-1.mga8.x86_64 is already installed
Package kernel-desktop-devel-latest-5.10.43-1.mga8.x86_64 is already installed
Package kernel-userspace-headers-5.10.43-1.mga8.x86_64 is already installed
Package virtualbox-kernel-desktop-latest-6.1.22-1.6.mga8.x86_64 is already installed
Package cpupower-5.10.43-1.mga8.x86_64 is already installed
[root@localhost wilcal]# lspci -k
00:02.0 VGA compatible controller: Intel Corporation Iris Plus Graphics G1 (Ice Lake) (rev 07)
DeviceName: To Be Filled by O.E.M.
Subsystem: Dell Device 097c
Kernel driver in use: i915
Kernel modules: i915
Boots to working desktop
M7.1 x86_64 Vbox Plasma Client, boots to a working desktop - Screen size correct
M8 x86_64 Vbox Plasma Client, boots to a working desktop - Screen size correct
On M8 hardware in a Vbox client, M8, XFCE, 32-bit updated from 5.10.16&41-desktop586-1 to 5.10.41-desktop586-1 just fine uname -a urpmi kernel-desktop-latest urpmi kernel-userspace-headers urpmi cpupower Linux localhost 5.10.41-desktop586-1.mga8 #1 SMP Fri May 28 13:42:38 UTC 2021 i686 i686 i386 GNU/Linux Package kernel-desktop-latest-5.10.41-1.mga8.i586 is already installed Package kernel-userspace-headers-5.10.41-1.mga8.i586 is already installed Package cpupower-5.10.41-1.mga8.i586 is already installed Boots to a working desktop, common apps work, screen resoluteion ok Install from updates_testing: kernel-desktop-latest cpupower kernel-userspace-headers from updates The following 4 packages are going to be installed: - cpupower-5.10.43-1.mga8.i586 - kernel-desktop-5.10.43-1.mga8-1-1.mga8.i586 - kernel-desktop-latest-5.10.43-1.mga8.i586 - kernel-userspace-headers-5.10.43-1.mga8.i586 Fails to boot. Boot error: "This kernel requires the following features not present on the CPU: pae Unable to boot - please use a kernel appropriate for your CPU" Going backward in boot menu to 5.10.41-desktop586-1 it boots just fine. Even going back to the original 5.10.16-desktop586-1 works fine I have no idea what "pae" is (In reply to William Kenney from comment #12) > On M8 hardware in a Vbox client, M8, XFCE, 32-bit ... > "This kernel requires the following features not present on the CPU: pae So a regression, as it did not complain before update. > I have no idea what "pae" is https://en.wikipedia.org/wiki/Physical_Address_Extension In VirtualBox Settings -> System -> CPU there is a checkbox for PAE @wilcal: "pae" https://en.wikipedia.org/wiki/Physical_Address_Extension The default VirtualBox 32-bit cpu emulates earlier 32-bit models, without things like pae and sse2. These virtual cpus only work with our "kernel-desktop586." You installed "kernel-desktop," which is for newer 32-bit cpus, like the P4. You need to remove that and install "kernel-desktop586." Mga8-64 OK here
Everything is updated to testing
$ uname -a
Linux svarten.tribun 5.10.43-desktop-1.mga8 #1 SMP Fri Jun 11 07:17:46 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
Hardware: My workstation "svarten": Mainboard: Sabertooth P67, CPU: i7-3770, RAM 16G, GM107 [GeForce GTX 750] using nvidia-current; GeForce 635 series and later, 4k display. Disk&Filesystem: SSD with /boot/EFI and ext4 /boot, LUKS{LVM {swap, ext4 /home & / } and a spinner at /mnt/spinner
dkms status tells me VirtualBox and nvidia-current are OK.
BOINC detects CUDA and OpenCL
Plasma desktop, using Thunderbird, LibreOffice, Ktorrent, Nextcloud client, flatpak Firefox...
Video with sound in Mageia Firefox ESR
Stress test: While working with other things BOINC use all cores to 100%, videos do not stutter.
VirtualBox running MSW7 64 bit OK: graphics, window resize, bidirectional clipboard, drag file from Dolphin to Explorer, folder sharing write protected and not, folder sharing, USB2 with plugin from upstream using USB stick, internet video playing in Firefox
(In reply to Morgan Leijström from comment #13) > In VirtualBox Settings -> System -> CPU there is a checkbox for PAE After setting that to PAE all three kernels, 16, 41 & 43, now boot to a working desktop. uname -a urpmi kernel-desktop-latest urpmi kernel-userspace-headers urpmi cpupower Linux localhost 5.10.43-desktop-1.mga8 #1 SMP Fri Jun 11 07:55:11 UTC 2021 i686 i686 i386 GNU/Linux Package kernel-desktop-latest-5.10.43-1.mga8.i586 is already installed Package kernel-userspace-headers-5.10.43-1.mga8.i586 is already installed Package cpupower-5.10.43-1.mga8.i586 is already installed Thanks all setting this to resolved Status:
NEW =>
RESOLVED Ah yes i believe Thomas A is correct on the kernel i586 version I guess as usual Thomas B will decide when there is enough tests and validate, and we need an advisory, then pushed before this update is fixed... ;) Status:
RESOLVED =>
REOPENED The following 3 packages are going to be installed: - cpupower-5.10.43-1.mga7.i586 - kernel-server-5.10.43-1.mga7-1-1.mga7.i586 - kernel-server-latest-5.10.43-1.mga7.i586 -- rebooted left machine run for several hours. Seems to be working okay $ uname -a Linux localhost 5.10.43-server-1.mga7 #1 SMP Fri Jun 11 08:42:14 UTC 2021 i686 i686 i386 GNU/Linux It works as a file and nextcloud server (In reply to William Kenney from comment #12) > On M8 hardware in a Vbox client, M8, XFCE, 32-bit > > updated from 5.10.16&41-desktop586-1 to 5.10.41-desktop586-1 just fine > > uname -a > urpmi kernel-desktop-latest > urpmi kernel-userspace-headers > urpmi cpupower > > Linux localhost 5.10.41-desktop586-1.mga8 #1 SMP Fri May 28 13:42:38 UTC > 2021 i686 i686 i386 GNU/Linux here you are using desktop*586* kernel > The following 4 packages are going to be installed: > > - cpupower-5.10.43-1.mga8.i586 > - kernel-desktop-5.10.43-1.mga8-1-1.mga8.i586 > - kernel-desktop-latest-5.10.43-1.mga8.i586 > - kernel-userspace-headers-5.10.43-1.mga8.i586 Here you installed the i686 optimized one... on unsupported hw > > Fails to boot. > Boot error: > > "This kernel requires the following features not present on the CPU: pae > Unable to boot - please use a kernel appropriate for your CPU" causing the boot to fail (In reply to Thomas Backlund from comment #19) > Here you installed the i686 optimized one... on unsupported hw It may be important to note that when I installed this clint about a week ago I just used the i586 XFCE Live-DVD ISO and just let it default to whatever kernel it choose itself. Which on the third update of the kernel resulted in the error. Probably something that a user will rarely encounter. But still a wrinkle none the less. You mean it automatically selected the wrong kernel as update? Switched from the linus kernel, which had been running without problems for 24 hours. Kernel: 5.10.43-desktop-1.mga8 x86_64 10-Core Intel Core i9-7900X [MT MCP] NVIDIA GP102 [GeForce GTX 1080 Ti] driver: nvidia v: 460.84 NFS shares mounted automatically. Other network operations work. Virtualbox runs 32-bit and 64-bit clients successfully. Common desktop applications run OK. Stress tests OK. Video with vlc, pulseaudio and bluetooth audio working. CC:
(none) =>
tarazed25 (In reply to Morgan Leijström from comment #21) > You mean it automatically selected the wrong kernel as update? If PAE is defaulted to be set off when you install from the Live-DVD the installed kernel appears to be kernel-desktop-5.10.43-1.mga8-1-1.mga8.i586 I'm going to run some testing here today with PAE off and on to see which kernel is installed. Here's whats listed in the boot menu after install and update: 5.10.43-desktop-1.mga8 5.10.41-desktop-1.mga8 5.10.16-desktop-1.mga8 But here's what the Live-DVD looks like when booted live and not installed: PAE/NX off (default) LiveDVD: 5.10.16-desktop586-1.mga8 PAE/NX on LiveDVD: 5.10.16-desktop586-1.mga8 Kernel: 5.10.43-desktop-1.mga7 x86_64 Quad Core: Intel Core i7-4790 type: MT MCP NVIDIA GM204 [GeForce GTX 970] driver: nvidia v: 460.80 Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet driver: r8169 Mate desktop running fine. NFS shares already mounted after reboot. Sound and video OK. Virtualbox running well. (In reply to William Kenney from comment #23) > when you install from the Live-DVD The Live installer more or less copies its content *) to the target, and it has the more compatible kernel. *) including any settings, changes and updates made, user files added...
Advisory, added to svn:
type: security
subject: Updated kernel packages fix security vulnerabilities
CVE:
- CVE-2020-24586
- CVE-2020-24587
- CVE-2020-24588
- CVE-2020-26139
- CVE-2020-26141
- CVE-2020-26145
- CVE-2020-26147
- CVE-2021-3573
- CVE-2021-3587
- CVE-2021-28691
src:
8:
core:
- kernel-5.10.43-1.mga8
- kmod-virtualbox-6.1.22-1.6.mga8
- kmod-xtables-addons-3.18-1.6.mga8
7:
core:
- kernel-5.10.43-1.mga7
- kmod-virtualbox-6.1.22-1.6.mga7
- kmod-xtables-addons-3.13-28.mga7
description: |
This kernel update is based on upstream 5.10.43 and fixes atleast the
following security issues:
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and
WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received
fragments be cleared from memory after (re)connecting to a network. Under
the right circumstances, when another device sends fragmented frames
encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary
network packets and/or exfiltrate user data (CVE-2020-24586).
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and
WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments
of a frame are encrypted under the same key. An adversary can abuse this to
decrypt selected fragments when another device sends fragmented frames and
the WEP, CCMP, or GCMP encryption key is periodically renewed
(CVE-2020-24587).
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and
WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU
flag in the plaintext QoS header field is authenticated. Against devices
that support receiving non-SSP A-MSDU frames (which is mandatory as part
of 802.11n), an adversary can abuse this to inject arbitrary network
packets (CVE-2020-24588).
An issue was discovered in the kernel. An Access Point (AP) forwards EAPOL
frames to other clients even though the sender has not yet successfully
authenticated to the AP. This might be abused in projected Wi-Fi networks
to launch denial-of-service attacks against connected clients and makes
it easier to exploit other vulnerabilities in connected clients
(CVE-2020-26139).
An issue was discovered in the kernel ath10k driver. The Wi-Fi
implementation does not verify the Message Integrity Check (authenticity)
of fragmented TKIP frames. An adversary can abuse this to inject and
possibly decrypt packets in WPA or WPA2 networks that support the TKIP
data-confidentiality protocol (CVE-2020-26141).
An issue was discovered in the kernel ath10k driver. The WEP, WPA, WPA2,
and WPA3 implementations accept second (or subsequent) broadcast fragments
even when sent in plaintext and process them as full unfragmented frames.
An adversary can abuse this to inject arbitrary network packets independent
of the network configuration (CVE-2020-26145).
An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and
WPA3 implementations reassemble fragments even though some of them were
sent in plaintext. This vulnerability can be abused to inject packets and/
or exfiltrate selected fragments when another device sends fragmented
frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used
(CVE-2020-26147).
A use after free vulnerability has been found in the hci_sock_bound_ioctl()
function of the Linux kernel. It can allow attackers to corrupt kernel
heaps (kmalloc-8k to be specific) and adopt further exploitations
(CVE-2021-3573).
There is a null pointer dereference in llcp_sock_getname in net/nfc/
llcp_sock.c of the Linux kernel. An unprivileged user can trigger this bug
and cause denial of service (CVE-2021-3587).
There is a guest triggered use-after-free in Linux xen-netback. A malicious
or buggy network PV frontend can force Linux netback to disable the
interface and terminate the receive kernel thread associated with queue 0
in response to the frontend sending a malformed packet. Such kernel thread
termination will lead to a use-after-free in Linux netback when the backend
is destroyed, as the kernel thread associated with queue 0 will have already
exited and thus the call to kthread_stop will be performed against a stale
pointer. A malicious or buggy frontend driver can trigger a dom0 crash.
Privilege escalation and information leaks cannot be ruled out.
(CVE-2021-28691 / XSA-374).
Other fixes in this update:
- bpf: Forbid trampoline attach for functions with variable arguments
- bpf: Add deny list of btf ids check for tracing programs
- net/nfc/rawsock.c: fix a permission check bug
- proc: Track /proc/$pid/attr/ opener mm_struct
- RDS tcp loopback connection can hang
For other upstream fixes, see the referenced changelogs.
references:
- https://bugs.mageia.org/show_bug.cgi?id=29106
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.42
- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.43
- https://xenbits.xen.org/xsa/advisory-374.htmlKeywords:
(none) =>
advisory Enough tests, flushing out Keywords:
(none) =>
validated_update An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2021-0257.html Status:
REOPENED =>
RESOLVED |