- Security fixes - bugfixes - enabling Full dynticks system (tickless) (NO_HZ_FULL) - enabling CONFIG_RCU_NOCB_CPU (mga#24701) - adding kernel side support for temperature monitoring on Ryzen 3000 series - ... SRPMS: kernel-5.1.20-2.mga7.src.rpm kernel-userspace-headers-5.1.20-1.mga7.src.rpm kmod-virtualbox-6.0.10-2.mga7.src.rpm kmod-xtables-addons-3.3-56.mga7.src.rpm i586: bpftool-5.1.20-2.mga7.i586.rpm cpupower-5.1.20-2.mga7.i586.rpm cpupower-devel-5.1.20-2.mga7.i586.rpm kernel-desktop-5.1.20-2.mga7-1-1.mga7.i586.rpm kernel-desktop586-5.1.20-2.mga7-1-1.mga7.i586.rpm kernel-desktop586-devel-5.1.20-2.mga7-1-1.mga7.i586.rpm kernel-desktop586-devel-latest-5.1.20-2.mga7.i586.rpm kernel-desktop586-latest-5.1.20-2.mga7.i586.rpm kernel-desktop-devel-5.1.20-2.mga7-1-1.mga7.i586.rpm kernel-desktop-devel-latest-5.1.20-2.mga7.i586.rpm kernel-desktop-latest-5.1.20-2.mga7.i586.rpm kernel-doc-5.1.20-2.mga7.noarch.rpm kernel-server-5.1.20-2.mga7-1-1.mga7.i586.rpm kernel-server-devel-5.1.20-2.mga7-1-1.mga7.i586.rpm kernel-server-devel-latest-5.1.20-2.mga7.i586.rpm kernel-server-latest-5.1.20-2.mga7.i586.rpm kernel-source-5.1.20-1.mga7-1-1.mga7.noarch.rpm kernel-source-5.1.20-2.mga7-1-1.mga7.noarch.rpm kernel-source-latest-5.1.20-2.mga7.noarch.rpm kernel-userspace-headers-5.1.20-1.mga7.i586.rpm libbpf0-5.1.20-2.mga7.i586.rpm libbpf-devel-5.1.20-2.mga7.i586.rpm perf-5.1.20-2.mga7.i586.rpm virtualbox-kernel-5.1.20-desktop-2.mga7-6.0.10-2.mga7.i586.rpm virtualbox-kernel-5.1.20-desktop586-2.mga7-6.0.10-2.mga7.i586.rpm virtualbox-kernel-5.1.20-server-2.mga7-6.0.10-2.mga7.i586.rpm virtualbox-kernel-desktop586-latest-6.0.10-2.mga7.i586.rpm virtualbox-kernel-desktop-latest-6.0.10-2.mga7.i586.rpm virtualbox-kernel-server-latest-6.0.10-2.mga7.i586.rpm xtables-addons-kernel-5.1.20-desktop-2.mga7-3.3-56.mga7.i586.rpm xtables-addons-kernel-5.1.20-desktop586-2.mga7-3.3-56.mga7.i586.rpm xtables-addons-kernel-5.1.20-server-2.mga7-3.3-56.mga7.i586.rpm xtables-addons-kernel-desktop586-latest-3.3-56.mga7.i586.rpm xtables-addons-kernel-desktop-latest-3.3-56.mga7.i586.rpm xtables-addons-kernel-server-latest-3.3-56.mga7.i586.rpm x86_64: bpftool-5.1.20-2.mga7.x86_64.rpm cpupower-5.1.20-2.mga7.x86_64.rpm cpupower-devel-5.1.20-2.mga7.x86_64.rpm kernel-desktop-5.1.20-2.mga7-1-1.mga7.x86_64.rpm kernel-desktop-devel-5.1.20-2.mga7-1-1.mga7.x86_64.rpm kernel-desktop-devel-latest-5.1.20-2.mga7.x86_64.rpm kernel-desktop-latest-5.1.20-2.mga7.x86_64.rpm kernel-doc-5.1.20-1.mga7.noarch.rpm kernel-doc-5.1.20-2.mga7.noarch.rpm kernel-server-5.1.20-2.mga7-1-1.mga7.x86_64.rpm kernel-server-devel-5.1.20-2.mga7-1-1.mga7.x86_64.rpm kernel-server-devel-latest-5.1.20-2.mga7.x86_64.rpm kernel-server-latest-5.1.20-2.mga7.x86_64.rpm kernel-source-5.1.20-1.mga7-1-1.mga7.noarch.rpm kernel-source-5.1.20-2.mga7-1-1.mga7.noarch.rpm kernel-source-latest-5.1.20-1.mga7.noarch.rpm kernel-source-latest-5.1.20-2.mga7.noarch.rpm kernel-userspace-headers-5.1.20-1.mga7.x86_64.rpm lib64bpf0-5.1.20-2.mga7.x86_64.rpm lib64bpf-devel-5.1.20-2.mga7.x86_64.rpm perf-5.1.20-2.mga7.x86_64.rpm virtualbox-kernel-5.1.20-desktop-2.mga7-6.0.10-2.mga7.x86_64.rpm virtualbox-kernel-5.1.20-server-2.mga7-6.0.10-2.mga7.x86_64.rpm virtualbox-kernel-desktop-latest-6.0.10-2.mga7.x86_64.rpm virtualbox-kernel-server-latest-6.0.10-2.mga7.x86_64.rpm xtables-addons-kernel-5.1.20-desktop-2.mga7-3.3-56.mga7.x86_64.rpm xtables-addons-kernel-5.1.20-server-2.mga7-3.3-56.mga7.x86_64.rpm xtables-addons-kernel-desktop-latest-3.3-56.mga7.x86_64.rpm xtables-addons-kernel-server-latest-3.3-56.mga7.x86_64.rpm
Note that same kernel set is in use in Cauldron, so its already being tested. I have also verified the "adding kernel side support for temperature monitoring on Ryzen 3000 series" on my Ryzen 3600
mga7, x86_64 10-Core: Intel Core i9-7900X type: MT MCP Desktop Mobo: ASUSTeK model: TUF X299 MARK 2 NVIDIA GP102 [GeForce GTX 1080 Ti] - nvidia 430.26 Updates and rebooting to Mate desktop ran OK. NFS shares mounted. 64-bit mga6 virtualbox guest launched to a working desktop. Sound and video working in vlc, TV input also. stress tests completed. teapot and glxspheres64 ran with and without Sync to VBlank. glmark2 failed with a GLX problem - needs separate bug report. $ dkms status nvidia-current, 430.26-1.mga7.nonfree, 5.1.20-desktop-2.mga7, x86_64: installed nvidia-current, 430.26-1.mga7.nonfree, 5.1.14-desktop-1.mga7, x86_64: installed xtables-addons, 3.3-1.mga7, 5.1.20-desktop-2.mga7, x86_64: installed-binary from 5.1.20-desktop-2.mga7 virtualbox, 6.0.10-1.mga7, 5.1.20-desktop-2.mga7, x86_64: installed-binary from 5.1.20-desktop-2.mga7 virtualbox, 6.0.8-1.mga7, 5.1.14-desktop-1.mga7, x86_64: installed-binary from 5.1.14-desktop-1.mga7 Good for 64bits on this machine.
CC: (none) => tarazed25
mga7, x86_64 Quad Core: Intel Core i7-4790 type: MT MCP Desktop Mobo: MSI model: Z97-G43 (MS-7816) NVIDIA GM204 [GeForce GTX 970] - nvidia 430.26 - bpftool-5.1.20-2.mga7.x86_64 - cpupower-5.1.20-2.mga7.x86_64 - cpupower-devel-5.1.20-2.mga7.x86_64 - kernel-desktop-5.1.20-2.mga7-1-1.mga7.x86_64 - kernel-desktop-devel-5.1.20-2.mga7-1-1.mga7.x86_64 - kernel-desktop-devel-latest-5.1.20-2.mga7.x86_64 - kernel-desktop-latest-5.1.20-2.mga7.x86_64 - kernel-doc-5.1.20-2.mga7.noarch - kernel-userspace-headers-5.1.20-1.mga7.x86_64 - lib64bpf-devel-5.1.20-2.mga7.x86_64 - lib64bpf0-5.1.20-2.mga7.x86_64 - perf-5.1.20-2.mga7.x86_64 - virtualbox-kernel-5.1.20-desktop-2.mga7-6.0.10-2.mga7.x86_64 - virtualbox-kernel-desktop-latest-6.0.10-2.mga7.x86_64 - xtables-addons-kernel-5.1.20-desktop-2.mga7-3.3-56.mga7.x86_64 - xtables-addons-kernel-desktop-latest-3.3-56.mga7.x86_64 Clean update from desktop kernel 5.1.18. Fast reboot to login. Default boot was 5.1.20-desktop. $ sudo dkms status | grep 5.1.20 nvidia-current, 430.26-1.mga7.nonfree, 5.1.20-desktop-2.mga7, x86_64: installed xtables-addons, 3.3-1.mga7, 5.1.20-desktop-2.mga7, x86_64: installed-binary from 5.1.20-desktop-2.mga7 virtualbox, 6.0.10-1.mga7, 5.1.20-desktop-2.mga7, x86_64: installed-binary from 5.1.20-desktop-2.mga7 c/m/i/d stress tests for 25 seconds each. Everything else appears to be running normally. Launched a couple of vbox clients successfully. glmark2 is fine.
mga7, x86_64 Quad Core Intel Core i7-5700HQ (-MT MCP-) Aorus: Laptop System: GIGABYTE product: X5 NVIDIA GM204M [GeForce GTX 965M] - nvidia 430.14 Working. Recovers from closing and opening the lid. wifi OK. Overlapping stress tests ran to completion. Bluetooth sound working eventually - TV soundbar paired and connected immediately but it took a lot of fiddling with pavucontrol before the device appeared as an option. Playing Purcell via mplayer. The only oddity with the desktop is the query on a red circle in the panel which remains even when media are set up and a specific mirror enabled. Otherwise it works as expected.
on mga7-64 kernel-desktop plasma packages installed cleanly: - cpupower-5.1.20-2.mga7.x86_64 - kernel-desktop-5.1.20-2.mga7-1-1.mga7.x86_64 - kernel-desktop-devel-5.1.20-2.mga7-1-1.mga7.x86_64 - kernel-desktop-devel-latest-5.1.20-2.mga7.x86_64 - kernel-desktop-latest-5.1.20-2.mga7.x86_64 - kernel-userspace-headers-5.1.20-1.mga7.x86_64 - virtualbox-kernel-5.1.20-desktop-2.mga7-6.0.10-2.mga7.x86_64 - virtualbox-kernel-desktop-latest-6.0.10-2.mga7.x86_64 system re-booted normally: $ uname -r 5.1.20-desktop-2.mga7 # dkms status virtualbox, 6.0.10-1.mga7, 5.1.20-desktop-2.mga7, x86_64: installed-binary from 5.1.20-desktop-2.mga7 vbox and clients launched normally no regressions observed looks OK for mga7-64 on this system: Mobo: Dell model: 09WH54 v: UEFI [Legacy]: Dell v: 2.13.1 CPU: Intel Core i7-6700 Graphics: Intel HD Graphics 530 (Skylake GT2) also updated to 5.1.20-desktop586-2.mga7 in a 32 bit vbox VM - no regressions observed
CC: (none) => jim
$ uname -a Linux localhost.localdomain 5.1.20-desktop-2.mga7 #1 SMP Fri Jul 26 23:04:19 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux A6 laptop installed the following: - cpupower-5.1.20-2.mga7.x86_64 - kernel-desktop-5.1.20-2.mga7-1-1.mga7.x86_64 - kernel-desktop-latest-5.1.20-2.mga7.x86_64 seems to be working as designed
CC: (none) => brtians1
AMD x3-450, Nvidia 730GT (390 nvidia proprietary driver) - cpupower-5.1.20-2.mga7.x86_64 - kernel-desktop-5.1.20-2.mga7-1-1.mga7.x86_64 - kernel-desktop-devel-5.1.20-2.mga7-1-1.mga7.x86_64 - kernel-desktop-devel-latest-5.1.20-2.mga7.x86_64 - kernel-desktop-latest-5.1.20-2.mga7.x86_64 - kernel-firmware-nonfree-20190720-1.mga7.nonfree.noarch $ uname -a Linux localhost 5.1.20-desktop-2.mga7 #1 SMP Fri Jul 26 23:04:19 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux everything working as designed so far.
In a Vbox client, M7.1, Gnome, 32-bit Testing: kernel-desktop-latest cpupower [root@localhost wilcal]# uname -a Linux localhost 5.1.18-desktop586-1.mga7 #1 SMP Sun Jul 14 10:08:40 UTC 2019 i686 i686 i386 GNU/Linux [root@localhost wilcal]# urpmi kernel-desktop586-latest Package kernel-desktop586-latest-5.1.18-1.mga7.i586 is already installed [root@localhost wilcal]# urpmi cpupower Package cpupower-5.1.18-1.mga7.i586 is already installed Boots to a working desktop. Screen resolution is correct. Common apps work. Install kernel-desktop586-latest cpupower from updates testing The following 3 packages are going to be installed: - cpupower-5.1.20-2.mga7.i586 - kernel-desktop586-5.1.20-2.mga7-1-1.mga7.i586 - kernel-desktop586-latest-5.1.20-2.mga7.i586 Reboot system. [root@localhost wilcal]# uname -a Linux localhost 5.1.20-desktop586-2.mga7 #1 SMP Fri Jul 26 23:03:59 UTC 2019 i686 i686 i386 GNU/Linux [root@localhost wilcal]# urpmi kernel-desktop586-latest Package kernel-desktop586-latest-5.1.20-2.mga7.i586 is already installed [root@localhost wilcal]# urpmi cpupower Package cpupower-5.1.20-2.mga7.i586 is already installed Boots to a working desktop. Screen resolution is correct. Common apps work.
CC: (none) => wilcal.int
n a Vbox client, M7.1, Plasma, 64-bit Testing: kernel-desktop-latest cpupower [root@localhost wilcal]# uname -a Linux localhost 5.1.18-desktop-1.mga7 #1 SMP Sun Jul 14 10:08:39 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux [root@localhost wilcal]# urpmi kernel-desktop-latest Package kernel-desktop-latest-5.1.18-1.mga7.x86_64 is already installed [root@localhost wilcal]# urpmi cpupower Package cpupower-5.1.18-1.mga7.x86_64 is already installed Boots to a working desktop. Screen resolution is correct. Common apps work. Install kernel-desktop-latest cpupower from updates testing The following 3 packages are going to be installed: - cpupower-5.1.20-2.mga7.x86_64 - kernel-desktop-5.1.20-2.mga7-1-1.mga7.x86_64 - kernel-desktop-latest-5.1.20-2.mga7.x86_64 Reboot system. [root@localhost wilcal]# uname -a Linux localhost 5.1.20-desktop-2.mga7 #1 SMP Fri Jul 26 23:04:19 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux [root@localhost wilcal]# urpmi kernel-desktop-latest Package kernel-desktop-latest-5.1.20-2.mga7.x86_64 is already installed [root@localhost wilcal]# urpmi cpupower Package cpupower-5.1.20-2.mga7.x86_64 is already installed Boots to a working desktop. Screen resolution is correct. Common apps work.
On real hardware, M7.1, Plasma, 64-bit initial status: kernel-desktop-latest virtualbox dkms-virtualbox virtualbox-guest-additions virtualbox-kernel-desktop-latest x11-driver-video-vboxvideo kernel-desktop-devel-latest cpupower [root@localhost wilcal]# uname -a Linux localhost 5.1.18-desktop-1.mga7 #1 SMP Sun Jul 14 10:08:39 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux [root@localhost wilcal]# urpmi kernel-desktop-latest Package kernel-desktop-latest-5.1.18-1.mga7.x86_64 is already installed [root@localhost wilcal]# urpmi virtualbox Package virtualbox-6.0.10-1.mga7.x86_64 is already installed [root@localhost wilcal]# urpmi dkms-virtualbox Package dkms-virtualbox-6.0.10-1.mga7.noarch is already installed [root@localhost wilcal]# urpmi virtualbox-guest-additions Package virtualbox-guest-additions-6.0.10-1.mga7.x86_64 is already installed [root@localhost wilcal]# urpmi x11-driver-video-vboxvideo Package x11-driver-video-vboxvideo-1.0.0-5.mga7.x86_64 is already installed [root@localhost wilcal]# urpmi kernel-desktop-devel-latest Package kernel-desktop-devel-latest-5.1.18-1.mga7.x86_64 is already installed [root@localhost wilcal]# urpmi cpupower Package cpupower-5.1.18-1.mga7.x86_64 is already installed [root@localhost wilcal]# lspci -k 01:00.0 VGA compatible controller: NVIDIA Corporation GF108 [GeForce GT 440] (rev a1) Subsystem: Gigabyte Technology Co., Ltd Device 3518 Kernel driver in use: nvidia Kernel modules: nvidiafb, nouveau, nvidia_drm, nvidia390 Mageia-6.1-LiveDVD-Xfce-i586-DVD.iso Create a Vbox client. Works just fine. Boots to a working desktop. install from update_testing: kernel-desktop-latest virtualbox dkms-virtualbox virtualbox-guest-additions virtualbox-kernel-desktop-latest x11-driver-video-vboxvideo kernel-desktop-devel-latest cpupower The following 7 packages are going to be installed: - cpupower-5.1.20-2.mga7.x86_64 - kernel-desktop-5.1.20-2.mga7-1-1.mga7.x86_64 - kernel-desktop-devel-5.1.20-2.mga7-1-1.mga7.x86_64 - kernel-desktop-devel-latest-5.1.20-2.mga7.x86_64 - kernel-desktop-latest-5.1.20-2.mga7.x86_64 - virtualbox-kernel-5.1.20-desktop-2.mga7-6.0.10-2.mga7.x86_64 - virtualbox-kernel-desktop-latest-6.0.10-2.mga7.x86_64 [root@localhost wilcal]# uname -a Linux localhost 5.1.20-desktop-2.mga7 #1 SMP Fri Jul 26 23:04:19 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux [root@localhost wilcal]# urpmi kernel-desktop-latest Package kernel-desktop-latest-5.1.20-2.mga7.x86_64 is already installed [root@localhost wilcal]# urpmi virtualbox Package virtualbox-6.0.10-1.mga7.x86_64 is already installed [root@localhost wilcal]# urpmi dkms-virtualbox Package dkms-virtualbox-6.0.10-1.mga7.noarch is already installed [root@localhost wilcal]# urpmi virtualbox-guest-additions Package virtualbox-guest-additions-6.0.10-1.mga7.x86_64 is already installed [root@localhost wilcal]# urpmi x11-driver-video-vboxvideo Package x11-driver-video-vboxvideo-1.0.0-5.mga7.x86_64 is already installed [root@localhost wilcal]# urpmi kernel-desktop-devel-latest Package kernel-desktop-devel-latest-5.1.20-2.mga7.x86_64 is already installed [root@localhost wilcal]# urpmi cpupower Package cpupower-5.1.20-2.mga7.x86_64 is already installed [wilcal@localhost ~]$ lspci -k 01:00.0 VGA compatible controller: NVIDIA Corporation GF108 [GeForce GT 440] (rev a1) Subsystem: Gigabyte Technology Co., Ltd Device 3518 Kernel driver in use: nvidia Kernel modules: nvidiafb, nouveau, nvidia_drm, nvidia390 Mageia-6.1-LiveDVD-Xfce-i586-DVD.iso Still works as a Vbox client. Boots to a working desktop. Mageia-6.1-LiveDVD-GNOME-x86_64-DVD.iso Create a Vbox client. Works just fine. Boots to a working desktop. Mageia-7-x86_64.iso (M7.1) Installs as a Vbox client. Boots to a working desktop. Updates then reboots back to a working desktop. Test platform: Intel Core i7-2600K Sandy Bridge 3.4GHz GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB RTL8111/8168B PCI Express 1Gbit Ethernet DRAM 16GB (4 x 4GB)
Advisory, added to svn: type: security subject: Updated kernel packages fix security vulnerability src: 7: core: - kernel-5.1.20-2.mga7 - kernel-userspace-headers-5.1.20-1.mga7 - kmod-virtualbox-6.0.10-2.mga7 - kmod-xtables-addons-3.3-56.mga7 description: | This kernel update is based on the upstream 5.1.20 and fixes atleast the following security issue: With Xen, virtual device backends and device models running in domain 0, or other backend driver domains, need to be able to map guest memory (either via grant mappings, or via the foreign mapping interface). For Linux to keep track of these mappings, it needs to have a page structure for each one. In PV dom0, a range of pfns are typically set aside at boot (“pre-ballooned”) for this purpose; for PVH and Arm dom0s, no memory is set aside to begin with. In either case, when more of this “foreign / grant map pfn space” is needed, dom0 will balloon out extra pages to use for this purpose. Unfortunately, in Linux, there are no limits, either on the total amount of memory which dom0 will attempt to balloon down to, nor on the amount of “foreign / grant map” memory which any individual guest can consume. As a result, a malicious guest may be able, with crafted requests to the backend, to cause dom0 to exhaust its own memory, leading to a host crash; and if this is not possible, it may be able to monopolize all of the foreign / grant map pfn space, starving out other guests (XSA-300). Other changes in this update: - kernel configs: * enable Full dynticks system (tickless) (NO_HZ_FULL) * enable CONFIG_RCU_NOCB_CPU (mga#24701) - add kernel side support for temperature monitoring on Amd Ryzen 3000 series (lm_sensors 3.5.0-2.1.mga7 or newer is also needed) For other upstream changes in this update, see the referenced changelogs. Note! This is the last update that is based on the upstream 5.1 series. Next update will be based on the upstream 5.2 series. references: - https://bugs.mageia.org/show_bug.cgi?id=25185 - https://bugs.mageia.org/show_bug.cgi?id=24701 - https://xenbits.xen.org/xsa/advisory-300.html - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.19 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.20 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.21
Keywords: (none) => advisory, validated_updateWhiteboard: (none) => MGA7-64-OK, MGA7-32-OKCC: (none) => sysadmin-bugs
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2019-0217.html
Resolution: (none) => FIXEDStatus: NEW => RESOLVED