Bug#1034446: unblock: linux/6.1.24-1

2023-04-17 Thread Salvatore Bonaccorso 
Hi Paul,

On Sat, Apr 15, 2023 at 09:41:02PM +0200, Paul Gevers wrote:
> Hi Salvatore,
> 
> On 15-04-2023 17:02, Salvatore Bonaccorso wrote:
> > Would you in principle agree on that, imporantly, at this stage of the
> > release? The current debian/changelog is attached.
> 
> I'm pretty sure I've mentioned this to you before, but to be clear to
> everybody I'll state it in public here: we currently trust the kernel
> maintainers to make the right decision until (around) the full freeze under
> the condition that they consider the following:
> 
> * would you propose the same for a point release?

Yes confirmed.

> * if activity in the archive on the d-i front is ongoing or expected
>   check with d-boot.

Right, I do CC as well respectively Cyril specifically and be verbose
with him on plans. So do check with d-i people accordingly.

What I cannot assure is that we never will see regressions in such
point releases, and in fact for instance currently on bullseye we have
for instance #1022126 (got long to get addressed) or #1031753 (to be
fixed in next upload).

So I completely agree, around the time before the full freeze those
updates then need to be postponed to the point releases to not risk
blocking the release.

Regards,
Salvatore

Bug#1034446: unblock: linux/6.1.24-1

2023-04-15 Thread Paul Gevers 

Hi Salvatore,

On 15-04-2023 17:02, Salvatore Bonaccorso wrote:

Would you in principle agree on that, imporantly, at this stage of the
release? The current debian/changelog is attached.


I'm pretty sure I've mentioned this to you before, but to be clear to 
everybody I'll state it in public here: we currently trust the kernel 
maintainers to make the right decision until (around) the full freeze 
under the condition that they consider the following:


* would you propose the same for a point release?
* if activity in the archive on the d-i front is ongoing or expected
  check with d-boot.

Paul


OpenPGP_signature
Description: OpenPGP digital signature

Bug#1034446: unblock: linux/6.1.24-1

2023-04-15 Thread Salvatore Bonaccorso 
Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: unblock
X-Debbugs-Cc: li...@packages.debian.org, k...@debian.org, car...@debian.org
Control: affects -1 + src:linux

Dear release team,

Please unblock package linux

I'm seaking for pre-approval and your opinion on time availability to
still do at least (and depending on finding the release date for
bookworm) further stable series imports. After 6.1.20-2 migration to
testing (which I see it is already unblocked, thanks Paul Gevers), the
next update could be to update to at least 6.1.24:

There are stable series imports from 6.1.20 up to 6.1.24, convering as
well fixes for CVE-2023-1989, CVE-2023-1583 and CVE-2023-1611. Ideally
we as well address #1033058 (Cyril will be happy).

There are fixed in different areas as well, which we can benefit of
(e.g. fixes for the newly enabled mpi3mr driver, this was known the
fixes will land in post 6.1.20). With the stable series import there
is as well always a slight risk on new upstream regressions.

Would you in principle agree on that, imporantly, at this stage of the
release? The current debian/changelog is attached.

unblock linux/6.1.24-1

Regards,
Salvatore
linux (6.1.24-1) UNRELEASED; urgency=medium

  * New upstream stable update:
https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.21
- xfrm: Allow transport-mode states with AF_UNSPEC selector
- drm/virtio: Pass correct device to dma_sync_sgtable_for_device()
- drm/msm/gem: Prevent blocking within shrinker loop
- [arm64,armhf] drm/panfrost: Don't sync rpm suspension after mmu flushing
- cifs: Move the in_send statistic to __smb_send_rqst()
- [arm64] drm/meson: fix 1px pink line on GXM when scaling video overlay
- [x86] ASoC: SOF: Intel: MTL: Fix the device description
- [x86] ASoC: SOF: Intel: HDA: Fix device description
- [x86] ASoC: SOF: Intel: SKL: Fix device description
- [x86] ASOC: SOF: Intel: pci-tgl: Fix device description
- docs: Correct missing "d_" prefix for dentry_operations member
  d_weak_revalidate
- scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add()
- ALSA: hda: Match only Intel devices with CONTROLLER_IN_GPU()
- netfilter: nft_nat: correct length for loading protocol registers
- netfilter: nft_masq: correct length for loading protocol registers
- netfilter: nft_redir: correct length for loading protocol registers
- netfilter: nft_redir: correct value of inet type `.maxattrs`
- scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD
- scsi: core: Fix a procfs host directory removal regression
- ftrace,kcfi: Define ftrace_stub_graph conditionally
- tcp: tcp_make_synack() can be called from process context
- wifi: nl80211: fix NULL-ptr deref in offchan check
- wifi: cfg80211: fix MLO connection ownership
- nfc: pn533: initialize struct pn533_out_arg properly
- ipvlan: Make skb->skb_iif track skb->dev for l3s mode
- i40e: Fix kernel crash during reboot when adapter is in recovery mode
- [s390x] PCI: s390: Fix use-after-free of PCI resources with per-function
  hotplug
- [x86] drm/i915/psr: Use calculated io and fast wake lines
- [x86] drm/i915/sseu: fix max_subslices array-index-out-of-bounds access
- net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler()
- qed/qed_dev: guard against a possible division by zero
- block: do not reverse request order when flushing plug list
- loop: Fix use-after-free issues
- net: tunnels: annotate lockless accesses to dev->needed_headroom
- net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status
  fails
- tcp: Fix bind() conflict check for dual-stack wildcard address.
- net/smc: fix deadlock triggered by cancel_delayed_work_syn()
- net: usb: smsc75xx: Limit packet length to skb->len
- drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts
  kdoc
- [powerpc*] mm: Fix false detection of read faults
- nvme: fix handling single range discard request
- nvmet: avoid potential UAF in nvmet_req_complete()
- block: sunvdc: add check for mdesc_grab() returning NULL
- net/mlx5e: Fix macsec ASO context alignment
- net/mlx5e: Don't cache tunnel offloads capability
- net/mlx5: Fix setting ec_function bit in MANAGE_PAGES
- net/mlx5: Disable eswitch before waiting for VF pages
- net/mlx5e: Support Geneve and GRE with VF tunnel offload
- net/mlx5: E-switch, Fix wrong usage of source port rewrite in split rules
- net/mlx5: E-switch, Fix missing set of split_count when forward to ovs
  internal port
- net/mlx5e: Fix cleanup null-ptr deref on encap lock
- net/mlx5: Set BREAK_FW_WAIT flag first when removing driver
- veth: Fix use after free in XDP_REDIRECT
- ice: xsk: disable txq irq before flushing hw
- [arm64,armhf] net: dsa: don't error out when drivers return ETH_DATA_LEN
  in .port_max_m