Bug 21521 - Update request: kernel-4.4.82-1.mga5
Summary: Update request: kernel-4.4.82-1.mga5
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 5
Hardware: All Linux
Priority: Normal critical
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: mga5-32-ok mga5-64-ok advisory
Keywords: validated_update
Depends on:
Blocks:
 
Reported: 2017-08-13 23:53 CEST by Thomas Backlund
Modified: 2017-08-18 19:07 CEST (History)
8 users (show)

See Also:
Source RPM: kernel
CVE:
Status comment:


Attachments

Description Thomas Backlund 2017-08-13 23:53:41 CEST
New kernels to test, contains security fixes for atleast a local root exploit, advisory will follow...


SRPMS:
kernel-4.4.82-1.mga5.src.rpm
kernel-userspace-headers-4.4.82-1.mga5.src.rpm
kmod-vboxadditions-5.1.26-2.mga5.src.rpm
kmod-virtualbox-5.1.26-2.mga5.src.rpm
kmod-xtables-addons-2.10-45.mga5.src.rpm



i586:
cpupower-4.4.82-1.mga5.i586.rpm
cpupower-devel-4.4.82-1.mga5.i586.rpm
kernel-desktop-4.4.82-1.mga5-1-1.mga5.i586.rpm
kernel-desktop586-4.4.82-1.mga5-1-1.mga5.i586.rpm
kernel-desktop586-devel-4.4.82-1.mga5-1-1.mga5.i586.rpm
kernel-desktop586-devel-latest-4.4.82-1.mga5.i586.rpm
kernel-desktop586-latest-4.4.82-1.mga5.i586.rpm
kernel-desktop-devel-4.4.82-1.mga5-1-1.mga5.i586.rpm
kernel-desktop-devel-latest-4.4.82-1.mga5.i586.rpm
kernel-desktop-latest-4.4.82-1.mga5.i586.rpm
kernel-doc-4.4.82-1.mga5.noarch.rpm
kernel-server-4.4.82-1.mga5-1-1.mga5.i586.rpm
kernel-server-devel-4.4.82-1.mga5-1-1.mga5.i586.rpm
kernel-server-devel-latest-4.4.82-1.mga5.i586.rpm
kernel-server-latest-4.4.82-1.mga5.i586.rpm
kernel-source-4.4.82-1.mga5-1-1.mga5.noarch.rpm
kernel-source-latest-4.4.82-1.mga5.noarch.rpm
kernel-userspace-headers-4.4.82-1.mga5.i586.rpm
perf-4.4.82-1.mga5.i586.rpm

vboxadditions-kernel-4.4.82-desktop-1.mga5-5.1.26-2.mga5.i586.rpm
vboxadditions-kernel-4.4.82-desktop586-1.mga5-5.1.26-2.mga5.i586.rpm
vboxadditions-kernel-4.4.82-server-1.mga5-5.1.26-2.mga5.i586.rpm
vboxadditions-kernel-desktop586-latest-5.1.26-2.mga5.i586.rpm
vboxadditions-kernel-desktop-latest-5.1.26-2.mga5.i586.rpm
vboxadditions-kernel-server-latest-5.1.26-2.mga5.i586.rpm

virtualbox-kernel-4.4.82-desktop-1.mga5-5.1.26-2.mga5.i586.rpm
virtualbox-kernel-4.4.82-desktop586-1.mga5-5.1.26-2.mga5.i586.rpm
virtualbox-kernel-4.4.82-server-1.mga5-5.1.26-2.mga5.i586.rpm
virtualbox-kernel-desktop586-latest-5.1.26-2.mga5.i586.rpm
virtualbox-kernel-desktop-latest-5.1.26-2.mga5.i586.rpm
virtualbox-kernel-server-latest-5.1.26-2.mga5.i586.rpm

xtables-addons-kernel-4.4.82-desktop-1.mga5-2.10-45.mga5.i586.rpm
xtables-addons-kernel-4.4.82-desktop586-1.mga5-2.10-45.mga5.i586.rpm
xtables-addons-kernel-4.4.82-server-1.mga5-2.10-45.mga5.i586.rpm
xtables-addons-kernel-desktop586-latest-2.10-45.mga5.i586.rpm
xtables-addons-kernel-desktop-latest-2.10-45.mga5.i586.rpm
xtables-addons-kernel-server-latest-2.10-45.mga5.i586.rpm



x86_64:
cpupower-4.4.82-1.mga5.x86_64.rpm
cpupower-devel-4.4.82-1.mga5.x86_64.rpm
dkms-vboxadditions-5.1.24-1.mga5.noarch.rpm
dkms-virtualbox-5.1.24-1.mga5.noarch.rpm
kernel-desktop-4.4.82-1.mga5-1-1.mga5.x86_64.rpm
kernel-desktop-devel-4.4.82-1.mga5-1-1.mga5.x86_64.rpm
kernel-desktop-devel-latest-4.4.82-1.mga5.x86_64.rpm
kernel-desktop-latest-4.4.82-1.mga5.x86_64.rpm
kernel-doc-4.4.82-1.mga5.noarch.rpm
kernel-server-4.4.82-1.mga5-1-1.mga5.x86_64.rpm
kernel-server-devel-4.4.82-1.mga5-1-1.mga5.x86_64.rpm
kernel-server-devel-latest-4.4.82-1.mga5.x86_64.rpm
kernel-server-latest-4.4.82-1.mga5.x86_64.rpm
kernel-source-4.4.82-1.mga5-1-1.mga5.noarch.rpm
kernel-source-latest-4.4.82-1.mga5.noarch.rpm
kernel-userspace-headers-4.4.82-1.mga5.x86_64.rpm
perf-4.4.82-1.mga5.x86_64.rpm

vboxadditions-kernel-4.4.82-desktop-1.mga5-5.1.26-2.mga5.x86_64.rpm
vboxadditions-kernel-4.4.82-server-1.mga5-5.1.26-2.mga5.x86_64.rpm
vboxadditions-kernel-desktop-latest-5.1.26-2.mga5.x86_64.rpm
vboxadditions-kernel-server-latest-5.1.26-2.mga5.x86_64.rpm

virtualbox-doc-5.1.24-1.mga5.noarch.rpm
virtualbox-kernel-4.4.82-desktop-1.mga5-5.1.26-2.mga5.x86_64.rpm
virtualbox-kernel-4.4.82-server-1.mga5-5.1.26-2.mga5.x86_64.rpm
virtualbox-kernel-desktop-latest-5.1.26-2.mga5.x86_64.rpm
virtualbox-kernel-server-latest-5.1.26-2.mga5.x86_64.rpm

xtables-addons-kernel-4.4.82-desktop-1.mga5-2.10-45.mga5.x86_64.rpm
xtables-addons-kernel-4.4.82-server-1.mga5-2.10-45.mga5.x86_64.rpm
xtables-addons-kernel-desktop-latest-2.10-45.mga5.x86_64.rpm
xtables-addons-kernel-server-latest-2.10-45.mga5.x86_64.rpm
Comment 1 James Kerr 2017-08-14 12:01:55 CEST
On mga5-64

Packages installed cleanly:
- cpupower-4.4.82-1.mga5.x86_64
- kernel-desktop-4.4.82-1.mga5-1-1.mga5.x86_64
- kernel-desktop-latest-4.4.82-1.mga5.x86_64
- virtualbox-kernel-4.4.82-desktop-1.mga5-5.1.26-2.mga5.x86_64
- virtualbox-kernel-desktop-latest-5.1.26-2.mga5.x86_64

System re-booted normally
$ uname -r
4.4.82-desktop-1.mga5

No regressions noted

Virtualbox and client launched normally

OK for mga5-64 on this system:

Dell product: Precision Tower 3620
Mobo: Dell model: 09WH54 
Card: Intel HD Graphics 530
CPU: Quad core Intel Core i7-6700 (-HT-MCP-)
PC-BIOS boot
GPT partitions

CC: (none) => jim

Comment 2 James Kerr 2017-08-14 12:04:22 CEST
On mga5-32 in a vbox VM

Packages installed cleanly:
- cpupower-4.4.82-1.mga5.i586
- kernel-desktop-4.4.82-1.mga5-1-1.mga5.i586
- kernel-desktop-latest-4.4.82-1.mga5.i586
- vboxadditions-kernel-4.4.82-desktop-1.mga5-5.1.26-2.mga5.i586
- vboxadditions-kernel-desktop-latest-5.1.26-2.mga5.i586

VM re-booted normally:
$ uname -r
4.4.82-desktop-1.mga5

No rgresssions noted

OK for mga5-32 in a vbox VM
Comment 3 Len Lawrence 2017-08-14 15:31:23 CEST
Intel(R) Core(TM) i7-5700HQ CPU @ 2.70GHz
NVIDIA Corporation GM204M [GeForce GTX 965M] 
RAM 15.63 GB
UEFI boot

Installed 
- cpupower-4.4.82-1.mga5.x86_64
- cpupower-devel-4.4.82-1.mga5.x86_64
- dkms-virtualbox-5.1.24-1.mga5.noarch
- kernel-desktop-4.4.82-1.mga5-1-1.mga5.x86_64
- kernel-desktop-devel-4.4.82-1.mga5-1-1.mga5.x86_64
- kernel-desktop-devel-latest-4.4.82-1.mga5.x86_64
- kernel-desktop-latest-4.4.82-1.mga5.x86_64
- kernel-doc-4.4.82-1.mga5.noarch
- kernel-source-4.4.82-1.mga5-1-1.mga5.noarch
- kernel-source-latest-4.4.82-1.mga5.noarch
- kernel-userspace-headers-4.4.82-1.mga5.x86_64
- perf-4.4.82-1.mga5.x86_64
- virtualbox-doc-5.1.24-1.mga5.noarch
- virtualbox-kernel-desktop-latest-5.1.26-2.mga5.x86_64
- virtualbox-kernel-4.4.82-desktop-1.mga5-5.1.26-2.mga5.x86_64
- xtables-addons-kernel-4.4.82-desktop-1.mga5-2.10-45.mga5.x86_64
- xtables-addons-kernel-desktop-latest-2.10-45.mga5.x86_64

The firmware package was also updated.  All installed cleanly.
$ sudo drakboot --boot

Rebooted to Mate desktop and built the nvidia-current module on the way.  Everything running OK.  The laptop passed the stress tests, just.  One sent the temperature dangerously high; 97°C.

Leaving this running for a day.

CC: (none) => tarazed25

Comment 4 Brian Rockwell 2017-08-14 17:33:16 CEST
$ uname -a
Linux localhost 4.4.82-desktop-1.mga5 #1 SMP Sun Aug 13 18:43:43 UTC 2017 i686 i686 i686 GNU/Linux

The following 2 packages are going to be installed:

- kernel-desktop-4.4.82-1.mga5-1-1.mga5.i586
- kernel-desktop-latest-4.4.82-1.mga5.i586

52MB of additional disk space will be used.

47MB of packages will be retrieved.

Is it ok to continue?



Running in vbox on amd/radeon hardware.  No issues to report so far.  I'll try physical hardware shortly.

CC: (none) => brtians1

Comment 5 Brian Rockwell 2017-08-14 21:23:06 CEST
MGA5-64-OK

Athlon X3 - 64bit integated AMD graphics (Physical hardware)

Working as designed.  Supporting virtualbox clients without issues.

Working as designed.
Comment 6 Marja Van Waes 2017-08-14 22:29:58 CEST
updated over 6 hours ago to

kernel-desktop-latest-4.4.82-1.mga5.x86_64
kernel-desktop-4.4.82-1.mga5-1-1.mga5.x86_64
kernel-userspace-headers-4.4.82-1.mga5.x86_64
cpupower-4.4.82-1.mga5.x86_64

on an old Intel Celeron ThinkPad SL510

Everything works fine (apart from one thing that already didn't work well before)

CC: (none) => marja11

Comment 7 William Kenney 2017-08-15 20:25:40 CEST
In a Vbox client, M5.1, KDE, 64bit

Testing: kernel-desktop-latest vboxadditions-kernel-desktop-latest

[root@localhost wilcal]# uname -a
Linux localhost 4.4.79-desktop-1.mga5 #1 SMP Fri Jul 28 02:50:06 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-4.4.79-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi vboxadditions-kernel-desktop-latest
Package vboxadditions-kernel-desktop-latest-5.1.26-1.mga5.x86_64 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

Installed kernel-desktop-latest vboxadditions-kernel-desktop-latest from updates testing

Reboot client

[root@localhost wilcal]# uname -a
Linux localhost 4.4.82-desktop-1.mga5 #1 SMP Sun Aug 13 18:03:58 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-4.4.82-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi vboxadditions-kernel-desktop-latest
Package vboxadditions-kernel-desktop-latest-5.1.26-2.mga5.x86_64 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

CC: (none) => wilcal.int

Comment 8 William Kenney 2017-08-15 20:26:00 CEST
In a Vbox client, M5.1, KDE, 32bit

Testing: kernel-desktop-latest vboxadditions-kernel-desktop-latest

[root@localhost wilcal]# uname -a
Linux localhost 4.4.79-desktop-1.mga5 #1 SMP Fri Jul 28 02:02:29 UTC 2017 i686 i686 i686 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-4.4.79-1.mga5.i586 is already installed
[root@localhost wilcal]# urpmi vboxadditions-kernel-desktop-latest
Package vboxadditions-kernel-desktop-latest-5.1.26-1.mga5.i586 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

Installed kernel-desktop-latest vboxadditions-kernel-desktop-latest from updates testing

Reboot client

[root@localhost wilcal]# uname -a
Linux localhost 4.4.82-desktop-1.mga5 #1 SMP Sun Aug 13 18:43:43 UTC 2017 i686 i686 i686 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-4.4.82-1.mga5.i586 is already installed
[root@localhost wilcal]# urpmi vboxadditions-kernel-desktop-latest
Package vboxadditions-kernel-desktop-latest-5.1.26-2.mga5.i586 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.
Comment 9 William Kenney 2017-08-15 20:26:19 CEST
On real hardware, M5.1, KDE, 64-bit

initial install:
kernel-desktop-latest
virtualbox vboxadditions-kernel-desktop-latest dkms-virtualbox
virtualbox-guest-additions virtualbox-kernel-desktop-latest x11-driver-video-vboxvideo
kernel-desktop-devel-latest dkms-nvidia-current

[root@localhost wilcal]# uname -a
Linux localhost 4.4.79-desktop-1.mga5 #1 SMP Fri Jul 28 02:50:06 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-4.4.79-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi virtualbox
Package virtualbox-5.1.26-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi vboxadditions-kernel-desktop-latest
Package vboxadditions-kernel-desktop-latest-5.1.26-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi dkms-virtualbox
Package dkms-virtualbox-5.1.26-1.mga5.noarch is already installed
[root@localhost wilcal]# urpmi virtualbox-guest-additions
Package virtualbox-guest-additions-5.1.26-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi virtualbox-kernel-desktop-latest
Package virtualbox-kernel-desktop-latest-5.1.26-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi x11-driver-video-vboxvideo
Package x11-driver-video-vboxvideo-5.1.26-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi kernel-desktop-devel-latest
Package kernel-desktop-devel-latest-4.4.79-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi dkms-nvidia-current
Package dkms-nvidia-current-375.66-1.mga5.nonfree.x86_64 is already installed
[wilcal@localhost ~]$ lspci -k
01:00.0 VGA compatible controller: NVIDIA Corporation GF108 [GeForce GT 440] (rev a1)
        Subsystem: Gigabyte Technology Co., Ltd Device 3518
        Kernel driver in use: nvidia
        Kernel modules: nvidiafb, nouveau, nvidia_drm, nvidia_current

M5.1 i586 Gnome Live-DVD runs as a Vbox client.
Boots to a working desktop. Common apps work.
Screen sizes are correct.

update:
kernel-desktop-latest
virtualbox vboxadditions-kernel-desktop-latest dkms-virtualbox
virtualbox-guest-additions virtualbox-kernel-desktop-latest x11-driver-video-vboxvideo
kernel-desktop-devel-latest dkms-nvidia-current
from updates_testing

[root@localhost wilcal]# uname -a
Linux localhost 4.4.82-desktop-1.mga5 #1 SMP Sun Aug 13 18:03:58 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-4.4.82-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi virtualbox
Package virtualbox-5.1.26-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi vboxadditions-kernel-desktop-latest
Package vboxadditions-kernel-desktop-latest-5.1.26-2.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi dkms-virtualbox
Package dkms-virtualbox-5.1.26-1.mga5.noarch is already installed
[root@localhost wilcal]# urpmi virtualbox-guest-additions
Package virtualbox-guest-additions-5.1.26-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi virtualbox-kernel-desktop-latest
Package virtualbox-kernel-desktop-latest-5.1.26-2.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi x11-driver-video-vboxvideo
Package x11-driver-video-vboxvideo-5.1.26-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi kernel-desktop-devel-latest
Package kernel-desktop-devel-latest-4.4.82-1.mga5.x86_64 is already installed
[root@localhost wilcal]# urpmi dkms-nvidia-current
Package dkms-nvidia-current-384.59-1.mga5.nonfree.x86_64 is already installed
[wilcal@localhost ~]$ lspci -k
01:00.0 VGA compatible controller: NVIDIA Corporation GF108 [GeForce GT 440] (rev a1)
        Subsystem: Gigabyte Technology Co., Ltd Device 3518
        Kernel driver in use: nvidia
        Kernel modules: nvidiafb, nouveau, nvidia_drm, nvidia_current

M5.1 i586 Gnome LiveDVD still runs as a Vbox client.

M6 x86_64 Gnome LiveDVD runs as a Vbox client.
Boots to a working desktop. Common apps work.
Screen sizes are correct.

M6 x86_64 CI installs and runs as a Vbox client.
Updates then reboots back to a working desktop.
Screen sizes are correct.

Test platform:
Intel Core i7-2600K Sandy Bridge 3.4GHz
GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo
GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB
RTL8111/8168B PCI Express 1Gbit Ethernet
DRAM 16GB (4 x 4GB)
Looks good
Comment 10 PC LX 2017-08-16 01:52:21 CEST
Installed and is running for over a day of varied use without issues.

System: Mageia 5, Intel x86_64, Plasma, nVidia using proprietary nvidia340 driver.

$ uname -a
Linux marte 4.4.82-desktop-1.mga5 #1 SMP Sun Aug 13 18:03:58 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ rpm -qa | egrep 'kernel|nvidia|virtualbox|dkms|cpupower' | sort
cpupower-4.4.82-1.mga5
dkms-2.0.19-34.1.mga5
dkms-minimal-2.0.19-34.1.mga5
dkms-nvidia340-340.101-1.mga5.nonfree
dkms-virtualbox-5.1.26-1.mga5
kernel-desktop-4.4.82-1.mga5-1-1.mga5
kernel-desktop-devel-4.4.82-1.mga5-1-1.mga5
kernel-desktop-devel-latest-4.4.82-1.mga5
kernel-desktop-latest-4.4.82-1.mga5                                                                                                                                         
kernel-firmware-20160409-1.mga5                                                                                                                                             
kernel-firmware-nonfree-20160914-1.mga5.nonfree                                                                                                                             
kernel-userspace-headers-4.4.82-1.mga5                                                                                                                                      
nvidia340-cuda-opencl-340.101-1.mga5.nonfree
nvidia340-devel-340.101-1.mga5.nonfree
nvidia340-kernel-desktop-latest-340.96-6.mga5.nonfree
virtualbox-5.1.26-1.mga5
virtualbox-doc-5.1.26-1.mga5
x11-driver-video-nvidia340-340.101-1.mga5.nonfree

CC: (none) => mageia

Comment 11 PC LX 2017-08-16 02:20:16 CEST
Installed on VirtualBox VM and is running without issues.

Host System: Mageia 5, Intel x86_64, Plasma, nVidia using proprietary nvidia340 driver.
Guest System: Mageia 5, Intel x86_64, Plasma, virtualbox guest additions with working desktop resizing.

$ uname -a
Linux vbox-marte 4.4.82-desktop-1.mga5 #1 SMP Sun Aug 13 18:03:58 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
$ rpm -qa | egrep 'kernel|dkms|cpupower|virtualbox' | sort
cpupower-4.4.82-1.mga5
dkms-minimal-2.0.19-34.1.mga5
kernel-desktop-4.4.82-1.mga5-1-1.mga5
kernel-desktop-latest-4.4.82-1.mga5
kernel-firmware-20160409-1.mga5
kernel-firmware-nonfree-20160914-1.mga5.nonfree
kernel-userspace-headers-4.4.82-1.mga5
vboxadditions-kernel-4.4.82-desktop-1.mga5-5.1.26-2.mga5
vboxadditions-kernel-desktop-latest-5.1.26-2.mga5
virtualbox-guest-additions-5.1.26-1.mga5
Comment 12 William Kenney 2017-08-17 02:15:39 CEST
Validating in 24-hours unless someone finds a problem
Comment 13 Brian Rockwell 2017-08-17 03:14:14 CEST
physical hardware
- ‎Pentium(R) Dual-Core  CPU      E5800  @ 3.20GHz



The following 3 packages are going to be installed:

- cpupower-4.4.82-1.mga5.i586
- kernel-desktop-4.4.82-1.mga5-1-1.mga5.i586
- kernel-desktop-latest-4.4.82-1.mga5.i586

52MB of additional disk space will be used.

47MB of packages will be retrieved.

Is it ok to continue?

--


$ uname -a
Linux localhost 4.4.82-desktop-1.mga5 #1 SMP Sun Aug 13 18:43:43 UTC 2017 i686
i686 i686 GNU/Linux

confirmed ftp server and web servers are working with patching.
Confirmed sound is working properly.
confirmed atril document viewer working properly
USB thumbdrives working
firefox is working
libreoffice writer working
GIMP is working
audacity is working and able to import
mate terminal is working


No regressions - approved mga5-32-ok

--- I'll install server module and confirm all memory is utilized (6 GB)
Comment 14 Brian Rockwell 2017-08-17 03:25:36 CEST
The following 2 packages are going to be installed:

- kernel-server-4.4.82-1.mga5-1-1.mga5.i586
- kernel-server-latest-4.4.82-1.mga5.i586

54MB of additional disk space will be used.

49MB of packages will be retrieved.

Is it ok to continue?
---

$ uname -a
Linux localhost 4.4.82-server-1.mga5 #1 SMP Sun Aug 13 19:13:48 UTC 2017 i686
i686 i686 GNU/Linux


top - 20:18:51 up 1 min,  3 users,  load average: 0.19, 0.11, 0.04
Tasks: 176 total,   1 running, 174 sleeping,   0 stopped,   1 zombie
%Cpu(s):  0.5 us,  0.7 sy,  0.0 ni, 98.7 id,  0.2 wa,  0.0 hi,  0.0 si,  0.0
%st
KiB Mem:   6141364 total,   536260 used,  5605104 free,    22900 buffers
KiB Swap:  4186308 total,        0 used,  4186308 free.   317196 cached Mem


system is pulling in all memory using server.

- ftp server working
- web server working
- successful file transfers
- sound is working
- firefox is working

mga5-32-ok (Server)

Whiteboard: (none) => mga5-32-ok

Comment 15 Brian Rockwell 2017-08-17 03:46:50 CEST
I went ahead and installed VirtualBox modules as well.

Able to spin up VirtualBox and import a client, spin up instance instance.

Will test remote access shortly. 

VirtualBox module for 32 bit are working

$ uname -a
Linux localhost 4.4.82-server-1.mga5 #1 SMP Sun Aug 13 19:13:48 UTC 2017 i686 i686 i686 GNU/Linux
Comment 16 Brian Rockwell 2017-08-17 04:00:37 CEST
Remoting into Vbox works.  Good signs overall.

Anybody run the server for days to see if there are any performance regressions?
Comment 17 Len Lawrence 2017-08-17 08:44:07 CEST
Thanks for testing the server kernels Brian.  Claire pointed out that need some time ago but they have not been addressed very well to date.
Comment 18 James Kerr 2017-08-17 18:51:05 CEST
kernel-server on mga5-64

Packages installed cleanly:
- kernel-server-4.4.82-1.mga5-1-1.mga5.x86_64
- kernel-server-devel-4.4.82-1.mga5-1-1.mga5.x86_64
- kernel-server-devel-latest-4.4.82-1.mga5.x86_64
- kernel-server-latest-4.4.82-1.mga5.x86_64

System re-booted normally
$ uname -r
4.4.82-server-1.mga5

No problems noted in normal use

Virtualbox and client launched normally

kernel-server is OK for mga5-64 on this system:

Dell product: Precision Tower 3620
Mobo: Dell model: 09WH54 
Card: Intel HD Graphics 530
CPU: Quad core Intel Core i7-6700 (-HT-MCP-)
PC-BIOS boot
GPT partitions
Comment 19 James Kerr 2017-08-17 18:56:02 CEST
kernel-server on mga5-32 in a vbox VM

Packages installed cleanly:
- kernel-server-4.4.82-1.mga5-1-1.mga5.i586
- kernel-server-devel-4.4.82-1.mga5-1-1.mga5.i586
- kernel-server-devel-latest-4.4.82-1.mga5.i586
- kernel-server-latest-4.4.82-1.mga5.i586

VM re-booted normally
$ uname -r
4.4.82-server-1.mga5

RAM (6GB) fully recognised:

No problems in normal use.

kernel-server OK for mga5-32 in a vbox VM
Comment 20 Herman Viaene 2017-08-17 20:07:46 CEST
MGA5-32 on Asus A6000VM Xfce with nVidia GeForce7300
Installation of desktop flavor and reboot with nVidia driver OK.
Continuing test wirh usual suspects.

CC: (none) => herman.viaene

Comment 21 Herman Viaene 2017-08-17 21:38:31 CEST
ODP file, large mpg file, pictures all OK.
Comment 22 William Kenney 2017-08-17 21:58:06 CEST
This update works fine.
Testing complete for MGA5, 32-bit & 64-bit
Validating the update.
Could someone from the sysadmin team push to updates.
Thanks

CC: (none) => sysadmin-bugs
Keywords: (none) => validated_update
Whiteboard: mga5-32-ok => mga5-32-ok mga5-64-ok

Comment 23 Thomas Backlund 2017-08-18 18:47:25 CEST
Advisory:

  This kernel update is based on upstream 4.4.82 and fixes atleast the
  following security issues:

  The curseg->segno call in f2fs driver can be malformed so that it will have
  a value that triggers an out of boundary write that could cause memory
  corruption on the affected devices, leading to code execution in the kernel
  context. This would allow for more data to be accessed and controlled by
  the malware (CVE-2017-10663).

  The UDP Fragmentation Offload (UFO) feature is vulnerable to out-of-bounds
  writes causing exploitable memory corruption. If unprivileged user
  namespaces are available, this bug can be exploited to gain root privileges
  (CVE-2017-1000112).

  For other upstream fixes in this update, read the referenced changelogs.

Whiteboard: mga5-32-ok mga5-64-ok => mga5-32-ok mga5-64-ok advisory

Comment 24 Mageia Robot 2017-08-18 19:07:34 CEST
An update for this issue has been pushed to the Mageia Updates repository.

http://advisories.mageia.org/MGASA-2017-0279.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.