security and bugfixes, advosiry will follow... SRPMS: kernel-5.15.116-1.mga8.src.rpm kmod-virtualbox-7.0.8-1.6.mga8.src.rpm kmod-xtables-addons-3.23-1.16.mga8.src.rpm i586: bpftool-5.15.116-1.mga8.i586.rpm cpupower-5.15.116-1.mga8.i586.rpm cpupower-devel-5.15.116-1.mga8.i586.rpm kernel-desktop-5.15.116-1.mga8-1-1.mga8.i586.rpm kernel-desktop586-5.15.116-1.mga8-1-1.mga8.i586.rpm kernel-desktop586-devel-5.15.116-1.mga8-1-1.mga8.i586.rpm kernel-desktop586-devel-latest-5.15.116-1.mga8.i586.rpm kernel-desktop586-latest-5.15.116-1.mga8.i586.rpm kernel-desktop-devel-5.15.116-1.mga8-1-1.mga8.i586.rpm kernel-desktop-devel-latest-5.15.116-1.mga8.i586.rpm kernel-desktop-latest-5.15.116-1.mga8.i586.rpm kernel-doc-5.15.116-1.mga8.noarch.rpm kernel-server-5.15.116-1.mga8-1-1.mga8.i586.rpm kernel-server-devel-5.15.116-1.mga8-1-1.mga8.i586.rpm kernel-server-devel-latest-5.15.116-1.mga8.i586.rpm kernel-server-latest-5.15.116-1.mga8.i586.rpm kernel-source-5.15.116-1.mga8-1-1.mga8.noarch.rpm kernel-source-latest-5.15.116-1.mga8.noarch.rpm kernel-userspace-headers-5.15.116-1.mga8.i586.rpm libbpf0-5.15.116-1.mga8.i586.rpm libbpf-devel-5.15.116-1.mga8.i586.rpm perf-5.15.116-1.mga8.i586.rpm xtables-addons-kernel-5.15.116-desktop-1.mga8-3.23-1.16.mga8.i586.rpm xtables-addons-kernel-5.15.116-desktop586-1.mga8-3.23-1.16.mga8.i586.rpm xtables-addons-kernel-5.15.116-server-1.mga8-3.23-1.16.mga8.i586.rpm xtables-addons-kernel-desktop586-latest-3.23-1.16.mga8.i586.rpm xtables-addons-kernel-desktop-latest-3.23-1.16.mga8.i586.rpm xtables-addons-kernel-server-latest-3.23-1.16.mga8.i586.rpm x86_64: bpftool-5.15.116-1.mga8.x86_64.rpm cpupower-5.15.116-1.mga8.x86_64.rpm cpupower-devel-5.15.116-1.mga8.x86_64.rpm kernel-desktop-5.15.116-1.mga8-1-1.mga8.x86_64.rpm kernel-desktop-devel-5.15.116-1.mga8-1-1.mga8.x86_64.rpm kernel-desktop-devel-latest-5.15.116-1.mga8.x86_64.rpm kernel-desktop-latest-5.15.116-1.mga8.x86_64.rpm kernel-doc-5.15.116-1.mga8.noarch.rpm kernel-linus-5.15.116-1.mga8-1-1.mga8.x86_64.rpm kernel-server-5.15.116-1.mga8-1-1.mga8.x86_64.rpm kernel-server-devel-5.15.116-1.mga8-1-1.mga8.x86_64.rpm kernel-server-devel-latest-5.15.116-1.mga8.x86_64.rpm kernel-server-latest-5.15.116-1.mga8.x86_64.rpm kernel-source-5.15.116-1.mga8-1-1.mga8.noarch.rpm kernel-source-latest-5.15.116-1.mga8.noarch.rpm kernel-userspace-headers-5.15.116-1.mga8.x86_64.rpm lib64bpf0-5.15.116-1.mga8.x86_64.rpm lib64bpf-devel-5.15.116-1.mga8.x86_64.rpm perf-5.15.116-1.mga8.x86_64.rpm virtualbox-kernel-5.15.116-desktop-1.mga8-7.0.8-1.6.mga8.x86_64.rpm virtualbox-kernel-5.15.116-server-1.mga8-7.0.8-1.6.mga8.x86_64.rpm virtualbox-kernel-desktop-latest-7.0.8-1.6.mga8.x86_64.rpm virtualbox-kernel-server-latest-7.0.8-1.6.mga8.x86_64.rpm xtables-addons-kernel-5.15.116-desktop-1.mga8-3.23-1.16.mga8.x86_64.rpm xtables-addons-kernel-5.15.116-server-1.mga8-3.23-1.16.mga8.x86_64.rpm xtables-addons-kernel-desktop-latest-3.23-1.16.mga8.x86_64.rpm xtables-addons-kernel-server-latest-3.23-1.16.mga8.x86_64.rpm
No regressions noticed in two x86_64 systems, one rpi 4b system, or in vb i586 and x86_64 guests.
CC: (none) => davidwhodgins
MGA8-64 MATE on Acer Aspire 5253 No installation issues. After reboot tested internet via wifi, access to NFS-shares, newspaper site, file types docx, xlsx, odt, ods, pptx, odp, odb, pdf, jpg, avi. All work OK.
CC: (none) => herman.viaene
HP Pavilion 15, AMD A8-4555 APU, radeon 7600G graphics, rtl8188EE wifi, mga8-64 Plasma system. Tried some games, VirtualBox, Firefox, Atril, cups-pdf, no issues. Looks OK on this hardware.
CC: (none) => andrewsfarm
HP Probook 6550b, i3 m350, Intel graphics, Broadcom wifi using broadcom-wl driver, MGA8-64 Plasma system. No installation issues. Used it for this and that, including testing some other updates, with no issues to report.
putting on hold, a new one is coming with an ext4 regression fix and a remote dos fix...
Keywords: (none) => feedback
new set: SRPMS: kernel-5.15.117-1.mga8.src.rpm kmod-virtualbox-7.0.8-1.7.mga8.src.rpm kmod-xtables-addons-3.23-1.17.mga8.src.rpm i586: bpftool-5.15.117-1.mga8.i586.rpm cpupower-5.15.117-1.mga8.i586.rpm cpupower-devel-5.15.117-1.mga8.i586.rpm kernel-desktop-5.15.117-1.mga8-1-1.mga8.i586.rpm kernel-desktop586-5.15.117-1.mga8-1-1.mga8.i586.rpm kernel-desktop586-devel-5.15.117-1.mga8-1-1.mga8.i586.rpm kernel-desktop586-devel-latest-5.15.117-1.mga8.i586.rpm kernel-desktop586-latest-5.15.117-1.mga8.i586.rpm kernel-desktop-devel-5.15.117-1.mga8-1-1.mga8.i586.rpm kernel-desktop-devel-latest-5.15.117-1.mga8.i586.rpm kernel-desktop-latest-5.15.117-1.mga8.i586.rpm kernel-doc-5.15.117-1.mga8.noarch.rpm kernel-server-5.15.117-1.mga8-1-1.mga8.i586.rpm kernel-server-devel-5.15.117-1.mga8-1-1.mga8.i586.rpm kernel-server-devel-latest-5.15.117-1.mga8.i586.rpm kernel-server-latest-5.15.117-1.mga8.i586.rpm kernel-source-5.15.117-1.mga8-1-1.mga8.noarch.rpm kernel-source-latest-5.15.117-1.mga8.noarch.rpm kernel-userspace-headers-5.15.117-1.mga8.i586.rpm libbpf0-5.15.117-1.mga8.i586.rpm libbpf-devel-5.15.117-1.mga8.i586.rpm perf-5.15.117-1.mga8.i586.rpm xtables-addons-kernel-5.15.117-desktop-1.mga8-3.23-1.17.mga8.i586.rpm xtables-addons-kernel-5.15.117-desktop586-1.mga8-3.23-1.17.mga8.i586.rpm xtables-addons-kernel-5.15.117-server-1.mga8-3.23-1.17.mga8.i586.rpm xtables-addons-kernel-desktop586-latest-3.23-1.17.mga8.i586.rpm xtables-addons-kernel-desktop-latest-3.23-1.17.mga8.i586.rpm xtables-addons-kernel-server-latest-3.23-1.17.mga8.i586.rpm x86_64: bpftool-5.15.117-1.mga8.x86_64.rpm cpupower-5.15.117-1.mga8.x86_64.rpm cpupower-devel-5.15.117-1.mga8.x86_64.rpm kernel-desktop-5.15.117-1.mga8-1-1.mga8.x86_64.rpm kernel-desktop-devel-5.15.117-1.mga8-1-1.mga8.x86_64.rpm kernel-desktop-devel-latest-5.15.117-1.mga8.x86_64.rpm kernel-desktop-latest-5.15.117-1.mga8.x86_64.rpm kernel-doc-5.15.117-1.mga8.noarch.rpm kernel-server-5.15.117-1.mga8-1-1.mga8.x86_64.rpm kernel-server-devel-5.15.117-1.mga8-1-1.mga8.x86_64.rpm kernel-server-devel-latest-5.15.117-1.mga8.x86_64.rpm kernel-server-latest-5.15.117-1.mga8.x86_64.rpm kernel-source-5.15.117-1.mga8-1-1.mga8.noarch.rpm kernel-source-latest-5.15.117-1.mga8.noarch.rpm kernel-userspace-headers-5.15.117-1.mga8.x86_64.rpm lib64bpf0-5.15.117-1.mga8.x86_64.rpm lib64bpf-devel-5.15.117-1.mga8.x86_64.rpm perf-5.15.117-1.mga8.x86_64.rpm virtualbox-kernel-5.15.117-desktop-1.mga8-7.0.8-1.7.mga8.x86_64.rpm virtualbox-kernel-5.15.117-server-1.mga8-7.0.8-1.7.mga8.x86_64.rpm virtualbox-kernel-desktop-latest-7.0.8-1.7.mga8.x86_64.rpm virtualbox-kernel-server-latest-7.0.8-1.7.mga8.x86_64.rpm xtables-addons-kernel-5.15.117-desktop-1.mga8-3.23-1.17.mga8.x86_64.rpm xtables-addons-kernel-5.15.117-server-1.mga8-3.23-1.17.mga8.x86_64.rpm xtables-addons-kernel-desktop-latest-3.23-1.17.mga8.x86_64.rpm xtables-addons-kernel-server-latest-3.23-1.17.mga8.x86_64.rpm
Keywords: feedback => (none)Summary: Update request: kernel-5.15.116-1.mga8 => Update request: kernel-5.15.117-1.mga8
Advisory, added to svn: type: security subject: Updated kernel packages fix security vulnerabilities CVE: - CVE-2022-48425 - CVE-2023-2156 - CVE-2023-2269 - CVE-2023-31084 - CVE-2023-32233 - CVE-2023-34256 src: 8: core: - kernel-5.15.117-1.mga8 - kmod-virtualbox-7.0.8-1.7.mga8 - kmod-xtables-addons-3.23-1.17.mga8 description: | This kernel update is based on upstream 5.15.117 and fixes atleast the following security issues: In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs (CVE-2022-48425). A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data, which can lead to an assertion failure. This may allow an unauthenticated remote attacker to create a denial of service condition on the system (CVE-2023-2156). A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component (CVE-2023-2269). An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASK_RUNNING. In dvb_frontend_get_event, wait_event_interruptible is called; the condition is dvb_frontend_test_event(fepriv,events). In dvb_frontend_test_event, down(&fepriv->sem) is called. However, wait_event_interruptible would put the process to sleep, and down(&fepriv->sem) may block the process (CVE-2023-31084). In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled (CVE-2023-32233). An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4_group_desc_csum does not properly check an offset (CVE-2023-34256). For other upstream fixes in this update, see the referenced changelogs. references: - https://bugs.mageia.org/show_bug.cgi?id=32001 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.111 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.112 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.113 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.114 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.115 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.116 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.117
Priority: Normal => HighSeverity: normal => majorKeywords: (none) => advisory
I'm now geting a freeze in an m8 x86_64 vb guest after installing the updates in both the m8 x86_64 host and the guest. 5.15.117 running in both. htop is showing PID USER PRI NI VIRT RES SHR S CPU%▽MEM% TIME+ Command (merged) 43962 dave 20 0 7987M 3982M 3103M S 100. 25.0 14:17.28 VirtualBoxVM --comment x8v --startvm ff847ce0-7e1b-4120-a2a0-a324e04d806b --no-startvm-errormsgbox 43986 dave 21 1 7987M 3982M 3103M R 100. 25.0 5:39.70 EMT-0│VirtualBoxVM --comment x8v --startvm ff847ce0-7e1b-4120-a2a0-a324e04d806b --no-startvm-errormsgbox
After using machine/reset within the vb guest, after restarting it seems to be working ok, so not consistent.
Yeah, I just found an upstream report that points out a patch that landed in 5.15.111 that triggers boot hangs or RCU stalls about 1 in 30 boots... I'm going to revert that one for now while upstream figure out what to do with it...
After restarting the guest it remained stable in use for an hour before I shut it down.
new set: SRPMS: kernel-5.15.117-2.mga8.src.rpm kmod-virtualbox-7.0.8-1.8.mga8.src.rpm kmod-xtables-addons-3.23-1.18.mga8.src.rpm i586: bpftool-5.15.117-2.mga8.i586.rpm cpupower-5.15.117-2.mga8.i586.rpm cpupower-devel-5.15.117-2.mga8.i586.rpm kernel-desktop-5.15.117-2.mga8-1-1.mga8.i586.rpm kernel-desktop586-5.15.117-2.mga8-1-1.mga8.i586.rpm kernel-desktop586-devel-5.15.117-2.mga8-1-1.mga8.i586.rpm kernel-desktop586-devel-latest-5.15.117-2.mga8.i586.rpm kernel-desktop586-latest-5.15.117-2.mga8.i586.rpm kernel-desktop-devel-5.15.117-2.mga8-1-1.mga8.i586.rpm kernel-desktop-devel-latest-5.15.117-2.mga8.i586.rpm kernel-desktop-latest-5.15.117-2.mga8.i586.rpm kernel-doc-5.15.117-2.mga8.noarch.rpm kernel-server-5.15.117-2.mga8-1-1.mga8.i586.rpm kernel-server-devel-5.15.117-2.mga8-1-1.mga8.i586.rpm kernel-server-devel-latest-5.15.117-2.mga8.i586.rpm kernel-server-latest-5.15.117-2.mga8.i586.rpm kernel-source-5.15.117-2.mga8-1-1.mga8.noarch.rpm kernel-source-latest-5.15.117-2.mga8.noarch.rpm kernel-userspace-headers-5.15.117-2.mga8.i586.rpm libbpf0-5.15.117-2.mga8.i586.rpm libbpf-devel-5.15.117-2.mga8.i586.rpm perf-5.15.117-2.mga8.i586.rpm xtables-addons-kernel-5.15.117-desktop-2.mga8-3.23-1.18.mga8.i586.rpm xtables-addons-kernel-5.15.117-desktop586-2.mga8-3.23-1.18.mga8.i586.rpm xtables-addons-kernel-5.15.117-server-2.mga8-3.23-1.18.mga8.i586.rpm xtables-addons-kernel-desktop586-latest-3.23-1.18.mga8.i586.rpm xtables-addons-kernel-desktop-latest-3.23-1.18.mga8.i586.rpm xtables-addons-kernel-server-latest-3.23-1.18.mga8.i586.rpm x86_64: bpftool-5.15.117-2.mga8.x86_64.rpm cpupower-5.15.117-2.mga8.x86_64.rpm cpupower-devel-5.15.117-2.mga8.x86_64.rpm kernel-desktop-5.15.117-2.mga8-1-1.mga8.x86_64.rpm kernel-desktop-devel-5.15.117-2.mga8-1-1.mga8.x86_64.rpm kernel-desktop-devel-latest-5.15.117-2.mga8.x86_64.rpm kernel-desktop-latest-5.15.117-2.mga8.x86_64.rpm kernel-doc-5.15.117-2.mga8.noarch.rpm kernel-server-5.15.117-2.mga8-1-1.mga8.x86_64.rpm kernel-server-devel-5.15.117-2.mga8-1-1.mga8.x86_64.rpm kernel-server-devel-latest-5.15.117-2.mga8.x86_64.rpm kernel-server-latest-5.15.117-2.mga8.x86_64.rpm kernel-source-5.15.117-2.mga8-1-1.mga8.noarch.rpm kernel-source-latest-5.15.117-2.mga8.noarch.rpm kernel-userspace-headers-5.15.117-2.mga8.x86_64.rpm lib64bpf0-5.15.117-2.mga8.x86_64.rpm lib64bpf-devel-5.15.117-2.mga8.x86_64.rpm perf-5.15.117-2.mga8.x86_64.rpm virtualbox-kernel-5.15.117-desktop-2.mga8-7.0.8-1.8.mga8.x86_64.rpm virtualbox-kernel-5.15.117-server-2.mga8-7.0.8-1.8.mga8.x86_64.rpm virtualbox-kernel-desktop-latest-7.0.8-1.8.mga8.x86_64.rpm virtualbox-kernel-server-latest-7.0.8-1.8.mga8.x86_64.rpm xtables-addons-kernel-5.15.117-desktop-2.mga8-3.23-1.18.mga8.x86_64.rpm xtables-addons-kernel-5.15.117-server-2.mga8-3.23-1.18.mga8.x86_64.rpm xtables-addons-kernel-desktop-latest-3.23-1.18.mga8.x86_64.rpm xtables-addons-kernel-server-latest-3.23-1.18.mga8.x86_64.rpm
Keywords: feedback => (none)Summary: Update request: kernel-5.15.117-1.mga8 => Update request: kernel-5.15.117-2.mga8
No regressions noticed Tested on two x86_64 systems, an aarch64 rpi 4b, i586 and x86_64 vb guests.
Installed and running OK so far, no issues noted.
Probook 6550b, same system as comment 4, no issues noticed.
AMD x3-450, Nvidia 730GT (Nvidia 390) The following 7 packages are going to be installed: - cpupower-5.15.117-2.mga8.x86_64 - kernel-desktop-5.15.117-2.mga8-1-1.mga8.x86_64 - kernel-desktop-devel-5.15.117-2.mga8-1-1.mga8.x86_64 - kernel-desktop-devel-latest-5.15.117-2.mga8.x86_64 - kernel-desktop-latest-5.15.117-2.mga8.x86_64 - kernel-userspace-headers-5.15.117-2.mga8.x86_64 - lib64bpf0-5.15.117-2.mga8.x86_64 ---rebooted $ uname -a Linux localhost 5.15.65-desktop-1.mga8 #1 SMP Mon Sep 5 14:05:33 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux # nvidia-smi Fri Jun 16 16:00:29 2023 +-----------------------------------------------------------------------------+ | NVIDIA-SMI 390.157 Driver Version: 390.157 | |-------------------------------+----------------------+----------------------+ | GPU Name Persistence-M| Bus-Id Disp.A | Volatile Uncorr. ECC | | Fan Temp Perf Pwr:Usage/Cap| Memory-Usage | GPU-Util Compute M. | |===============================+======================+======================| | 0 GeForce GT 730 Off | 00000000:01:00.0 N/A | N/A | | 65% 51C P0 N/A / N/A | 129MiB / 963MiB | N/A Default | +-------------------------------+----------------------+----------------------+ Firefox, Videos working fine, audio working as expected, networking properly. System working as expected
CC: (none) => brtians1
Mageia8, x86_64 Intel Core i9, nvidia GTX1080 - 470.161 Installed or updated the whole lot and rebooted without problems. desktop kernel: NFS shares mounted OK, virtualbox working. nvidia GL OK. Pulseaudio over bluetooth is good. Video working. No issues with typical desktop applications. Switched to server version. Seamless, even bluetooth audio.
CC: (none) => tarazed25
Same HP Pavilion system as comment 3, again no issues to report.
The following 7 packages are going to be installed: - cpupower-5.15.117-2.mga8.x86_64 - kernel-desktop-5.15.117-2.mga8-1-1.mga8.x86_64 - kernel-desktop-devel-5.15.117-2.mga8-1-1.mga8.x86_64 - kernel-desktop-devel-latest-5.15.117-2.mga8.x86_64 - kernel-desktop-latest-5.15.117-2.mga8.x86_64 - kernel-userspace-headers-5.15.117-2.mga8.x86_64 - lib64bpf0-5.15.117-2.mga8.x86_64 128MB of additional disk space will be used. The following 4 packages are going to be installed: - kernel-server-5.15.117-2.mga8-1-1.mga8.x86_64 - kernel-server-devel-5.15.117-2.mga8-1-1.mga8.x86_64 - kernel-server-devel-latest-5.15.117-2.mga8.x86_64 - kernel-server-latest-5.15.117-2.mga8.x86_64 129MB of additional disk space will be used. no installation issues IPLd $ uname -a Linux localhost 5.15.117-server-2.mga8 #1 SMP Wed Jun 14 19:22:24 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux $ nvidia-smi Sat Jun 17 07:58:43 2023 +-----------------------------------------------------------------------------+ | NVIDIA-SMI 390.157 Driver Version: 390.157 | |-------------------------------+----------------------+----------------------+ | GPU Name Persistence-M| Bus-Id Disp.A | Volatile Uncorr. ECC | | Fan Temp Perf Pwr:Usage/Cap| Memory-Usage | GPU-Util Compute M. | |===============================+======================+======================| | 0 GeForce GT 730 Off | 00000000:01:00.0 N/A | N/A | | 65% 32C P8 N/A / N/A | 99MiB / 963MiB | N/A Default | +-------------------------------+----------------------+----------------------+ nextcloud, etc. working.
Foolishness, my Dell Inspiron 5100, P4, Radeon RV200 graphics, mga8-32 Xfce system using kernel-desktop. No new issues to report.
CC: (none) => sysadmin-bugsWhiteboard: (none) => MGA8-64-OK, MGA8-32-OKKeywords: (none) => validated_update
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2023-0201.html
Status: NEW => RESOLVEDResolution: (none) => FIXED