Immediate fallouts from the big linux changes, and actions

[Cyril Brulebois]

Hi,

This is mostly for information: linux went through a lot of big changes,
initially staged in experimental, and uploaded to unstable as of linux
6.6.8-1. These impacted the installer in different ways. This is a
summary of the obvious impacts, there might be some others down the line
(just by glancing at hw-detect's massaging of module list by stripping
the .ko suffix).

- kernel-image-* packages are now shipping /boot/vmlinuz-* (or
  /boot/vmlinux-* depending on the arch), instead of just /boot/vmlinuz
  (respectively /boot/vmlinux). I didn't dive into all the changes but
  I'm not sure whether that was on purpose or a side effect of the big
  changes. In any case, on the short term, since the build system was
  relying on a single file there, that should be moved out of the way,
  I decided to unversion those files to restore the old names. If kernel
  maintainers decide to go back to unversioned files, two reverts should
  be enough:

https://salsa.debian.org/installer-team/debian-installer/-/commit/c17360e632b6f133d4b43a47461944b6203ed730

https://salsa.debian.org/installer-team/debian-installer/-/commit/865c66e497d8e809872bad04aa2269d2a9f889c8

- Modules are compressed now, so the drm workaround needed an updated to
  cope with the extra .xz suffix:

https://salsa.debian.org/installer-team/debian-installer/-/commit/bd0f1106f90756e6f4514108492d71e1f2e695ea

- I'm skipping two commits regarding the new way the ABI is written
  down, that's in line with what was announced initially.

- YIL: If you don't see anything move in the graphical installer (no
  keyboard, no mouse), if your video is garbled, and if you can't load a
  NIC module in the text installer, you might have a totally broken
  support for kernel modules in your installer. This required adjusting
  src:xz-utils to get a liblzma udeb and src:kmod to enable xz support
  in its udebs; “thankfully” the former is NMU-maintained, plus the ftp
  team speed-reviewed it from NEW; thankfully Marco ACK'd my NMU-ing
  kmod so that we unbreak things ASAP. Everything should be sorted out
  in unstable. Plus an extra commit to be extra careful between the
  kmod upload and the cronned daily builds (which were going to start
  before the 01:52Z dinstall):

https://tracker.debian.org/news/1489255/accepted-xz-utils-545-02-source-amd64-all-into-unstable/

https://tracker.debian.org/news/1489268/accepted-xz-utils-545-03-source-into-unstable/
https://salsa.debian.org/md/kmod/-/merge_requests/13

https://tracker.debian.org/news/1489283/accepted-kmod-3020230601-21-source-into-unstable/

https://salsa.debian.org/installer-team/debian-installer/-/commit/c65bdb8128bc68cb566b302feb46267e5c177eb4

- Finally, the armel build fails because it can't find its kernel. The
  marvell flavour seems to have been dropped entirely (at least that's
  how I read the linux changelog for 6.6.3-1~exp1:

https://tracker.debian.org/news/1482751/accepted-linux-663-1exp1-source-into-experimental/

I didn't investigate the last point and I'd appreciate it if porters
could double check that we really want to drop marvell at this point,
and maybe submit (or commit) patches to drop it from the installer:
  https://salsa.debian.org/installer-team/debian-installer

Various netboot and netboot-gtk checks on amd64 seem very positive
after those changes, but I haven't built a netinst image and checked
on actual hardware with the combination of Secure Boot + firmware
packages + reloading of kernel modules. The latter should primarily work
by using module *names* and firmware *paths* as seen in kernel logs, so
having different module *paths* shouldn't make a difference, but that's
just my gut feeling based on my recollection (so nobody should trust
me on this), and seeing how \.ko$ stripping appears in some other files,
I cannot be certain until it's been actually tested.

Feel free to reply to this thread if you spot other fallouts. Of course,
as usual, the best way to report installer bugs is to file them against
the relevant component, X-Debbugs-Cc-ing this list; but leaving an
explicit reference in this thread wouldn't hurt.


Cheers,
-- 
Cyril Brulebois (k...@debian.org)
D-I release manager -- Release team member -- Freelance Consultant


signature.asc
Description: PGP signature

Re: consolidate linux-libc-dev headers

[Helmut Grohne]

Hi Dimitri and Bastian,

On Thu, Nov 16, 2023 at 06:28:13PM +, Dimitri John Ledkov wrote:
> Currently in both Debian and Ubuntu we ship like close to 40 .deb packages
> that have linux-libc-dev (for native/multiarch, cross, ports, mipses).
> 
> Each one of them is like 1.5MB, however they actually all have the same and
> repeated content.
> 
> the bulk of headers are the same on all arches (and enforced via
> multi-arch:same), asm-generic is also the same for all of them, and then
> kernel-arch asm headers are unique - but only for given kernel arches (not
> all of the debian arch names).
> 
> Currently there are only 13 kernel archs for unique asm-arch headers, but
> in Debian we have multiple reuses of the same kernel archs with different
> userspace abi properties (arm = armel armhf, mips = 12 mips archs, powerpc
> = 4, x86 = 3, and so on).
> 
> It seems wasteful on disk, build-time, and derivative build time to package
> all of these separately. Especially since there is a chain of src:linux
> building native ones + linux-source as a .deb; which is then used by
> cross-toolchain-base{,-ports,-mips} to unpack and rebuild linux headers
> again, and publish. When in practice src:linux itself could build an
> efficient libc-dev packages for all arches as an arch:all package and
> Multi-Arch:foreign.

Thanks for working on this. I would have appreciated copying
debian-cr...@lists.debian.org as I am not following d-kernel@l.d.o.

> The linux-libc-dev is native & multiarch uapi headers for all arches. The
> linux-libc-dev-alpha-cross is all debian arch crosses. It is implemented
> using hardlinks to maintain all the same paths that are currently being
> used by all the arch:any linux-libc-dev packages, and the
> linux-libc-dev-*-cross packages. In total they provide equivalent
> functionality as 40+ linux-libc-dev* current debs in either Debian or
> Ubuntu.

> Is this something that the debian kernel team could consider supporting /
> building as either standalone source package, or out of src:linux directly?
> as this would reduce 40+ .deb duplication in the mirror pools of the same
> content; and will eliminate build-depends on linux-source (and thus
> built-using) from src:cross-toolchain-base* and will actually ensure that
> all kernel headers for native / multiarch / cross arches are updated
> simultaneously, without need to wait for all arch:any builds to catch up
> first. It also gives ability to trivially create freestanding toolchains to
> any of the arches without actually building a full debian port for or
> having a working kernel for a given port.

I agree with this in principle, but I see a number of shortcomings and
hope you can address them.

When creating a new port, linux is one the pieces that comes first.
Hence building a new linux-lib-dev package was a natural with custom
changes was a very natural thing to do. Until now, we never needed to
build architecture-independent packages, so this is a noticeable
deviation. I'll be looking to support this in rebootstrap.

An example where this kinda fails is musl-linux-any. I'm still vaguely
trying to bootstrap this even though it kinda is stuck really hard on
musl vs systemd being unable to cooperate in any meaningful way. I'm not
sure it is reasonable to add these links the regular linux-libc-dev
package as 99% of people will never use them.

The same goes for esoteric architectures such as sh3, s390 (without x),
arc, loong64, and others.

I guess that the list of architectures will always be incomplete for
some, so we probably still need a process for building a modified
linux-libc-dev package only. This probably requires some build profiles.
Is pkg.linux.nokernel pkg.linux.notools pkg.linux.quick a sensible set
of profiles for this? Is there an easily patchable way to add an
architecture?

Let me also summarize how I see this change affecting various
infrastructure.

Bootstrapping will have to branch on whether the default linux-libc-dev
is usable and for many architectures it will be usable thus speeding up
bootstrap there.

For cross building we completely eliminate multi-arch skews of
linux-libc-dev that used to happen every so often. Cool.

For c-t-b, I guess that we can simply cut out linux-libc-dev and remove
all the -cross packages. I hope there is no devil in the detail.

So if the shortcomings end up having viable solutions, this seems like a
rather positive change to me.

Helmut

Bug#1058999: linux-image-6.5.0-5-amd64: System hangs when connecting an ethernet NIC to network which was not connected on boot

[Erwan David]

Le 19/12/2023 à 19:34, Diederik de Haas a écrit :

On Tuesday, 19 December 2023 19:16:33 CET Erwan David wrote:

Same behaviour with 6.6.3-1 from experimental (that's what apt gave me,
maybe tomoroow the 6.6.4).

Either your APT cache should be updated or you're using a mirror which is
rather severely out of date.
6.6.4-1 was uploaded to Debian on 2023-12-03, a day after .3-1.


it was 6.6.4. I tried with my Aten Dock : same thing.

I disabled the virtualbox service so that the virtualbox modules are not 
loaded : it does not hang immediately, but waits a few minutes before 
doing it.

Bug#1059362: linux: Add the Intel On Demand (intel_sdsi) kernel tool

[Jair Gonzalez]

Source: linux
Version: 6.6.7-1~exp1
Severity: wishlist
Tags: patch
X-Debbugs-Cc: miguel.bernal.ma...@linux.intel.com,
jair.gonza...@linux.intel.com

Dear Maintainer,

Please add the Intel On Demand (intel_sdsi) kernel tool, which can be
used for provisioning certificates and activation payloads on supported
cpus.

Intel Xeon family processors with support for Intel On Demand (formerly
known as Software Defined Silicon or SDSi) allow the configuration of
additional CPU features through a license activation process.

On BTS #1027953, there was a request to enable CONFIG_INTEL_SDSI, which
was merged at linux 5e631707bc22 ("Enable Intel VSEC, SDSi and PMT as
module") with version 6.1.4-1.

Link: https://github.com/intel/intel-sdsi

A MR was created with this proposal at:
https://salsa.debian.org/kernel-team/linux/-/merge_requests/964

Thanks,
Jair Gonzalez

Bug#1058890: more info

[Dr . André Desgualdo Pereira]

sedutil seems to be working

`$ cat /sys/module/libata/parameters/allow_tpm` result "1" 
and 
`sedutil-cli --scan` shows the disk correctly ("/dev/sda2  KINGSTON 
SKC600256G  S4800105")

If there are any further tests that can help elucidate the problem, please let 
me know.

-- 
André Desgualdo Pereira

linux-signed-arm64_6.6.8+1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Fri, 22 Dec 2023 10:40:01 +0100
Source: linux-signed-arm64
Architecture: source
Version: 6.6.8+1
Distribution: sid
Urgency: medium
Maintainer: Debian Kernel Team 
Changed-By: Bastian Blank 
Changes:
 linux-signed-arm64 (6.6.8+1) unstable; urgency=medium
 .
   * Sign kernel from linux 6.6.8-1
 .
   * New upstream stable update:
 https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.8
 - afs: Fix refcount underflow from error handling race (Closes: #1052304)
 - HID: lenovo: Restrict detection of patched firmware only to USB cptkbd
   (Closes: #1058758)
 - [mips*] PCI: loongson: Limit MRRS to 256 (Closes: #1035587)
Checksums-Sha1:
 4dcf623f86586441bab59cbda3e51abebc1f250e 9926 linux-signed-arm64_6.6.8+1.dsc
 18ff652ed76bb857e471bfa7a33b7b7130113475 574572 
linux-signed-arm64_6.6.8+1.tar.xz
Checksums-Sha256:
 722e661ca691ef0fad6fc599bca181a42583682e9fbcf1972c3af89a97ee11b9 9926 
linux-signed-arm64_6.6.8+1.dsc
 6c4b8e5a835efe9d042c44f706245048940fa14f53f5dc9a4691a3b3badd9f16 574572 
linux-signed-arm64_6.6.8+1.tar.xz
Files:
 d171523f0efe6402bf81babcdbdcd908 9926 kernel optional 
linux-signed-arm64_6.6.8+1.dsc
 eb4fad5928c94a2dea78065bb927f70f 574572 kernel optional 
linux-signed-arm64_6.6.8+1.tar.xz

-BEGIN PGP SIGNATURE-
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=bxrX
-END PGP SIGNATURE-

linux-signed-amd64_6.6.8+1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Fri, 22 Dec 2023 10:40:01 +0100
Source: linux-signed-amd64
Architecture: source
Version: 6.6.8+1
Distribution: sid
Urgency: medium
Maintainer: Debian Kernel Team 
Changed-By: Bastian Blank 
Changes:
 linux-signed-amd64 (6.6.8+1) unstable; urgency=medium
 .
   * Sign kernel from linux 6.6.8-1
 .
   * New upstream stable update:
 https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.8
 - afs: Fix refcount underflow from error handling race (Closes: #1052304)
 - HID: lenovo: Restrict detection of patched firmware only to USB cptkbd
   (Closes: #1058758)
 - [mips*] PCI: loongson: Limit MRRS to 256 (Closes: #1035587)
Checksums-Sha1:
 f5b845651445fe483e4123370962ea5528e17f8e 11375 linux-signed-amd64_6.6.8+1.dsc
 7f4bf7303d0d92945f583b717f8322d93da7e51f 574728 
linux-signed-amd64_6.6.8+1.tar.xz
Checksums-Sha256:
 36093fa351aaff1fd7252cff35cdb49c119f10138c75e9c7c5780e8d03302be4 11375 
linux-signed-amd64_6.6.8+1.dsc
 f5697867beb38c48a0cd45a9b776504a43ac5eefb2dabd36bbbfadb9d882bca7 574728 
linux-signed-amd64_6.6.8+1.tar.xz
Files:
 9ffa96891db03aa52acc2c27b46ba7ea 11375 kernel optional 
linux-signed-amd64_6.6.8+1.dsc
 1dc7faec9426739ff8de4d5129e630e8 574728 kernel optional 
linux-signed-amd64_6.6.8+1.tar.xz

-BEGIN PGP SIGNATURE-

iQIzBAEBCgAdFiEEfKFfvHEI+gkU+E+di0FRiLdONzYFAmWGmAAACgkQi0FRiLdO
NzZzvRAArvqrKYE2qdpxsePsDqLjsSm3u1a3U8K++uiEwtzAUE0At8mjWl2g9R7o
lkVOikEETGAu2Gxsu5NCEpdmk0J5WWJRTnnq2b+ZdH5jl9in/vv+dEXk8JEiCg+2
TW73AnaSmg1nr9PjBHZJdVFUoPSR7+BgyQ9fpIIHzadnccsyB8EEQjMqXjiEgk3a
sPjk7qmeS5C/SgE5cybVVbjDAwwS+xEtIhV0hF5gOjtlX+fetEn+gvk0NdW+yu83
Uig8m9JU9TXxunkTlx/rIhDHYb89voYbDZwlzWsVVtLb37Gu7orpMW4seLvAadwr
X8cRe07jqvgBC0s7GLlxbce753lhInIv4Dtxhr4PwvxYZ4xuTRxvGsMpwufc2vCo
Yh/IEa2UjINiIxMSYg+nFY1Ca7k/ymuXrYnit5z7Aey6VNdqHulmptpu/6k4ti77
+lKe/PuWb6pgIITSeykHmBth3rBILg9eYozlgE+65SyIRoSjNcnnj9XoHzyh5EFY
K0I0PY6jAIFweKsWcoSg6G4FXp08HxzjBK8KFMPbHkZqEJd0zipV+t4GiYZIUX/D
1St1N3w6nDbBlqdT3m2+WNvP9FmGEdfBhYxUecLeqw8FZzdQPIfdIDRdG5aOe+a+
k7CCOFsMqiI+RbSGfunAwwIPpGqMZPMWtPU2A3jRBhwdo/CIqhw=
=qZ8I
-END PGP SIGNATURE-

linux-signed-arm64_6.6.8+1_source.changes is NEW

[Debian FTP Masters]

Mapping sid to unstable.
binary:ata-modules-6.6.8-arm64-di is NEW.
binary:btrfs-modules-6.6.8-arm64-di is NEW.
binary:cdrom-core-modules-6.6.8-arm64-di is NEW.
binary:crc-modules-6.6.8-arm64-di is NEW.
binary:crypto-dm-modules-6.6.8-arm64-di is NEW.
binary:crypto-modules-6.6.8-arm64-di is NEW.
binary:efi-modules-6.6.8-arm64-di is NEW.
binary:event-modules-6.6.8-arm64-di is NEW.
binary:ext4-modules-6.6.8-arm64-di is NEW.
binary:f2fs-modules-6.6.8-arm64-di is NEW.
binary:fat-modules-6.6.8-arm64-di is NEW.
binary:fb-modules-6.6.8-arm64-di is NEW.
binary:i2c-modules-6.6.8-arm64-di is NEW.
binary:input-modules-6.6.8-arm64-di is NEW.
binary:isofs-modules-6.6.8-arm64-di is NEW.
binary:jfs-modules-6.6.8-arm64-di is NEW.
binary:kernel-image-6.6.8-arm64-di is NEW.
binary:leds-modules-6.6.8-arm64-di is NEW.
binary:linux-image-6.6.8-arm64 is NEW.
binary:linux-image-6.6.8-cloud-arm64 is NEW.
binary:linux-image-6.6.8-rt-arm64 is NEW.
binary:loop-modules-6.6.8-arm64-di is NEW.
binary:md-modules-6.6.8-arm64-di is NEW.
binary:mmc-modules-6.6.8-arm64-di is NEW.
binary:mtd-core-modules-6.6.8-arm64-di is NEW.
binary:multipath-modules-6.6.8-arm64-di is NEW.
binary:nbd-modules-6.6.8-arm64-di is NEW.
binary:nic-modules-6.6.8-arm64-di is NEW.
binary:nic-shared-modules-6.6.8-arm64-di is NEW.
binary:nic-usb-modules-6.6.8-arm64-di is NEW.
binary:nic-wireless-modules-6.6.8-arm64-di is NEW.
binary:ppp-modules-6.6.8-arm64-di is NEW.
binary:sata-modules-6.6.8-arm64-di is NEW.
binary:scsi-core-modules-6.6.8-arm64-di is NEW.
binary:scsi-modules-6.6.8-arm64-di is NEW.
binary:scsi-nic-modules-6.6.8-arm64-di is NEW.
binary:sound-modules-6.6.8-arm64-di is NEW.
binary:speakup-modules-6.6.8-arm64-di is NEW.
binary:squashfs-modules-6.6.8-arm64-di is NEW.
binary:udf-modules-6.6.8-arm64-di is NEW.
binary:uinput-modules-6.6.8-arm64-di is NEW.
binary:usb-modules-6.6.8-arm64-di is NEW.
binary:usb-serial-modules-6.6.8-arm64-di is NEW.
binary:usb-storage-modules-6.6.8-arm64-di is NEW.
binary:xfs-modules-6.6.8-arm64-di is NEW.

Your package has been put into the NEW queue, which requires manual action
from the ftpteam to process. The upload was otherwise valid (it had a good
OpenPGP signature and file hashes are valid), so please be patient.

Packages are routinely processed through to the archive, and do feel
free to browse the NEW queue[1].

If there is an issue with the upload, you will receive an email from a
member of the ftpteam.

If you have any questions, you may reply to this email.

[1]: https://ftp-master.debian.org/new.html
 or https://ftp-master.debian.org/backports-new.html for *-backports

linux-signed-arm64_6.6.7+1~exp1_source.changes ACCEPTED into experimental

[Debian FTP Masters]

Thank you for your contribution to Debian.

Mapping rc-buggy to experimental.

Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Wed, 20 Dec 2023 12:06:39 +0100
Source: linux-signed-arm64
Architecture: source
Version: 6.6.7+1~exp1
Distribution: rc-buggy
Urgency: medium
Maintainer: Debian Kernel Team 
Changed-By: Bastian Blank 
Changes:
 linux-signed-arm64 (6.6.7+1~exp1) experimental; urgency=medium
 .
   * Sign kernel from linux 6.6.7-1~exp1
 .
   * New upstream stable update:
 https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.5
 - r8169: fix deadlock on RTL8125 in jumbo mtu mode (Closes: #1057790)
 - io_uring: don't allow discontig pages for IORING_SETUP_NO_MMAP
   (CVE-2023-6560)
 - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
   (CVE-2023-6932)
 https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.6
 https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.7
 - netfilter: nf_tables: bail out on mismatching dynset and set expressions
   (CVE-2023-6622)
 - perf: Fix perf_event_validate_size() (CVE-2023-6931)
 - [mips*] kernel: Clear FPU states when setting up kernel threads
   (Closes: #1055021)
 - netfilter: nft_set_pipapo: skip inactive elements during set walk
   (CVE-2023-6817)
 .
   [ Anatoliy Gunya ]
   * [riscv64] improve Starfive Visionfive 2 support: enable DW_AXI_DMAC and
 MOTORCOMM_PHY as modules
 .
   [ Bastian Blank ]
   * [i386] No longer sign kernels.
   * Properly merge Build-Depends, so that we don't carry hundred identical
 entries.
   * [udeb] Fix nic-shared-modules dependencies.
   * Add dependency on image to headers package.
 .
   [ Salvatore Bonaccorso ]
   * Enable vDPA support (Closes: #1057619)
 - drivers/vdpa: Enable VDPA and VDPA_USER as module
 - drivers/virtio: Enable VIRTIO_VDPA as module
 - drivers/vhost: Enable VHOST_VDPA as module
   * [rt] Refresh "serial: amba-pl011: Use port lock wrappers" for context
 changes
 .
   [ Miguel Bernal Marin ]
   * [amd64] Enable System Trace Modules and the Intel Trace Hub Software
 Trace Hub support (Closes: #1050353)
 - drivers/hwtracing/stm: Enable STM as module
 - drivers/hwtracing/stm: Enable STM_PROTO_BASIC as module
 - drivers/hwtracing/stm: Enable STM_PROTO_SYS_T as module
 - drivers/hwtracing/stm: Enable STM_DUMMY as module
 - drivers/hwtracing/stm: Enable STM_SOURCE_CONSOLE as module
 - drivers/hwtracing/stm: Enable STM_SOURCE_HEARTBEAT as module
 - drivers/hwtracing/stm: Enable STM_SOURCE_FTRACE as module
 - drivers/hwtracing/intel_th: Enable INTEL_TH_STH as module
 .
   [ Jair Gonzalez ]
   * [amd64] drivers/platform/x86/intel: Enable INTEL_TPMI (Topology Aware
 Register and PM Capsule Interface).
   * [amd64] drivers/powercap/Kconfig: Enable INTEL_RAPL_TPMI (Running Average
 Power Limit Energy Reporting via the Topology Aware Register and PM
 Capsule Interface) (Closes: #1053187).
 .
   [ Vincent Blut ]
   * [x86] sound/soc/amd: Enable SND_SOC_AMD_PS and SND_SOC_AMD_PS_MACH as
 modules (Closes: #1055649)
   * [x86] sound/soc/amd: Enable SND_SOC_AMD_RPL_ACP6x as module
 (Closes: #1058576)
 .
   [ Luca Boccassi ]
   * Set CONFIG_VIRTIO_FS and its dependencies to builtin, to allow building
 images that boot directly to rootfs (skipping the initrd)
Checksums-Sha1:
 47d1ea4a8ca05824b18c71dff1209da9d54d0d45 9775 
linux-signed-arm64_6.6.7+1~exp1.dsc
 b70bb0d4541139bf04baca4c7855dd4d29760b40 574488 
linux-signed-arm64_6.6.7+1~exp1.tar.xz
Checksums-Sha256:
 3e873eb547775ae206efe3b4a76841555247d198fac7500b808274569f8d8ab4 9775 
linux-signed-arm64_6.6.7+1~exp1.dsc
 df2f25343f5c6495317d3fb71a52a8b3f7ccb8ab0758687686817f7db29f81df 574488 
linux-signed-arm64_6.6.7+1~exp1.tar.xz
Files:
 0a019ef62bd505fb6f2f009914769ba2 9775 kernel optional 
linux-signed-arm64_6.6.7+1~exp1.dsc
 651eb242b2f7c49cce2414b5c5fc8dc7 574488 kernel optional 
linux-signed-arm64_6.6.7+1~exp1.tar.xz

-BEGIN PGP SIGNATURE-

iQIzBAEBCgAdFiEEfKFfvHEI+gkU+E+di0FRiLdONzYFAmWGmBoACgkQi0FRiLdO
NzbFWA/+JO75xWcx8/cs/Z4/1dvsTYf3Us1UCP5iINCsiW9P9usCGhwMq1uvmeMI
fo2eroyFJA/fNcuhPgBW4njLqVZOY9G664jlvJIQWs7Pr5XiXmClygW0o7pkR6NQ
/dn617LoctY3pMtvlmDiy10XQVcgnjaTmycx7Il2JqFadzOeJKxlXxw8LlQHMlyL
g6C6qSuzJe9GKruNYeNDYyxXs2KLOk7Q9Blvylfs0lR+RgZR21nwl92nCAagQQcf
H+7nl5kMgEBqPC5kv3zDhvoxem4YKqbCOj1KrLkL+VCYZVSJqJlCtnV5cPvJ6mi2
S12Kkl+iB/GhnfuYwbnBf+ksS+Ky2QPOdMnufjLoOL5ptXOvFYajGWk5Nu+ZE30B
yctJ32YnLXu3EbcbDbFOkhVWTJz+dy58TZXNce+PmDsbgkT7J8pqkvUPdGP7Kv+W
vxuC7Vi8w2hRuKw6WDUA27Hl41N5ns5rPUoBEbHUxuqu4xem3ksO0MswqZ1DXWIi
tB1DdtuQjH7CXjkvFSkKGokUxEzEeFzdhVOzcVgQtBw51ZRRKI5FO3W4Sf1vyDSf
MQWpck3KlMJJiLW5ENJyhrwfkPw5JZ1hY27o7vsX50lNdPiyo0ZXKcqxO2I7t+Jp
TzJAXt4MuA5jkdKs0qKPpqI8OVOY+Rh7ALTPLP0mZy9X4DWCQx4=
=FPNE
-END PGP SIGNATURE-

linux-signed-amd64_6.6.8+1_source.changes is NEW

[Debian FTP Masters]

Mapping sid to unstable.
binary:acpi-modules-6.6.8-amd64-di is NEW.
binary:ata-modules-6.6.8-amd64-di is NEW.
binary:btrfs-modules-6.6.8-amd64-di is NEW.
binary:cdrom-core-modules-6.6.8-amd64-di is NEW.
binary:crc-modules-6.6.8-amd64-di is NEW.
binary:crypto-dm-modules-6.6.8-amd64-di is NEW.
binary:crypto-modules-6.6.8-amd64-di is NEW.
binary:efi-modules-6.6.8-amd64-di is NEW.
binary:event-modules-6.6.8-amd64-di is NEW.
binary:ext4-modules-6.6.8-amd64-di is NEW.
binary:f2fs-modules-6.6.8-amd64-di is NEW.
binary:fat-modules-6.6.8-amd64-di is NEW.
binary:fb-modules-6.6.8-amd64-di is NEW.
binary:firewire-core-modules-6.6.8-amd64-di is NEW.
binary:i2c-modules-6.6.8-amd64-di is NEW.
binary:input-modules-6.6.8-amd64-di is NEW.
binary:isofs-modules-6.6.8-amd64-di is NEW.
binary:jfs-modules-6.6.8-amd64-di is NEW.
binary:kernel-image-6.6.8-amd64-di is NEW.
binary:linux-image-6.6.8-amd64 is NEW.
binary:linux-image-6.6.8-cloud-amd64 is NEW.
binary:linux-image-6.6.8-rt-amd64 is NEW.
binary:loop-modules-6.6.8-amd64-di is NEW.
binary:md-modules-6.6.8-amd64-di is NEW.
binary:mmc-core-modules-6.6.8-amd64-di is NEW.
binary:mmc-modules-6.6.8-amd64-di is NEW.
binary:mouse-modules-6.6.8-amd64-di is NEW.
binary:mtd-core-modules-6.6.8-amd64-di is NEW.
binary:multipath-modules-6.6.8-amd64-di is NEW.
binary:nbd-modules-6.6.8-amd64-di is NEW.
binary:nic-modules-6.6.8-amd64-di is NEW.
binary:nic-pcmcia-modules-6.6.8-amd64-di is NEW.
binary:nic-shared-modules-6.6.8-amd64-di is NEW.
binary:nic-usb-modules-6.6.8-amd64-di is NEW.
binary:nic-wireless-modules-6.6.8-amd64-di is NEW.
binary:pata-modules-6.6.8-amd64-di is NEW.
binary:pcmcia-modules-6.6.8-amd64-di is NEW.
binary:pcmcia-storage-modules-6.6.8-amd64-di is NEW.
binary:ppp-modules-6.6.8-amd64-di is NEW.
binary:rfkill-modules-6.6.8-amd64-di is NEW.
binary:sata-modules-6.6.8-amd64-di is NEW.
binary:scsi-core-modules-6.6.8-amd64-di is NEW.
binary:scsi-modules-6.6.8-amd64-di is NEW.
binary:scsi-nic-modules-6.6.8-amd64-di is NEW.
binary:serial-modules-6.6.8-amd64-di is NEW.
binary:sound-modules-6.6.8-amd64-di is NEW.
binary:speakup-modules-6.6.8-amd64-di is NEW.
binary:squashfs-modules-6.6.8-amd64-di is NEW.
binary:udf-modules-6.6.8-amd64-di is NEW.
binary:uinput-modules-6.6.8-amd64-di is NEW.
binary:usb-modules-6.6.8-amd64-di is NEW.
binary:usb-serial-modules-6.6.8-amd64-di is NEW.
binary:usb-storage-modules-6.6.8-amd64-di is NEW.
binary:xfs-modules-6.6.8-amd64-di is NEW.

Your package has been put into the NEW queue, which requires manual action
from the ftpteam to process. The upload was otherwise valid (it had a good
OpenPGP signature and file hashes are valid), so please be patient.

Packages are routinely processed through to the archive, and do feel
free to browse the NEW queue[1].

If there is an issue with the upload, you will receive an email from a
member of the ftpteam.

If you have any questions, you may reply to this email.

[1]: https://ftp-master.debian.org/new.html
 or https://ftp-master.debian.org/backports-new.html for *-backports

linux-signed-amd64_6.6.7+1~exp1_source.changes ACCEPTED into experimental

[Debian FTP Masters]

Thank you for your contribution to Debian.

Mapping rc-buggy to experimental.

Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Wed, 20 Dec 2023 12:06:39 +0100
Source: linux-signed-amd64
Architecture: source
Version: 6.6.7+1~exp1
Distribution: rc-buggy
Urgency: medium
Maintainer: Debian Kernel Team 
Changed-By: Bastian Blank 
Changes:
 linux-signed-amd64 (6.6.7+1~exp1) experimental; urgency=medium
 .
   * Sign kernel from linux 6.6.7-1~exp1
 .
   * New upstream stable update:
 https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.5
 - r8169: fix deadlock on RTL8125 in jumbo mtu mode (Closes: #1057790)
 - io_uring: don't allow discontig pages for IORING_SETUP_NO_MMAP
   (CVE-2023-6560)
 - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet
   (CVE-2023-6932)
 https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.6
 https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.7
 - netfilter: nf_tables: bail out on mismatching dynset and set expressions
   (CVE-2023-6622)
 - perf: Fix perf_event_validate_size() (CVE-2023-6931)
 - [mips*] kernel: Clear FPU states when setting up kernel threads
   (Closes: #1055021)
 - netfilter: nft_set_pipapo: skip inactive elements during set walk
   (CVE-2023-6817)
 .
   [ Anatoliy Gunya ]
   * [riscv64] improve Starfive Visionfive 2 support: enable DW_AXI_DMAC and
 MOTORCOMM_PHY as modules
 .
   [ Bastian Blank ]
   * [i386] No longer sign kernels.
   * Properly merge Build-Depends, so that we don't carry hundred identical
 entries.
   * [udeb] Fix nic-shared-modules dependencies.
   * Add dependency on image to headers package.
 .
   [ Salvatore Bonaccorso ]
   * Enable vDPA support (Closes: #1057619)
 - drivers/vdpa: Enable VDPA and VDPA_USER as module
 - drivers/virtio: Enable VIRTIO_VDPA as module
 - drivers/vhost: Enable VHOST_VDPA as module
   * [rt] Refresh "serial: amba-pl011: Use port lock wrappers" for context
 changes
 .
   [ Miguel Bernal Marin ]
   * [amd64] Enable System Trace Modules and the Intel Trace Hub Software
 Trace Hub support (Closes: #1050353)
 - drivers/hwtracing/stm: Enable STM as module
 - drivers/hwtracing/stm: Enable STM_PROTO_BASIC as module
 - drivers/hwtracing/stm: Enable STM_PROTO_SYS_T as module
 - drivers/hwtracing/stm: Enable STM_DUMMY as module
 - drivers/hwtracing/stm: Enable STM_SOURCE_CONSOLE as module
 - drivers/hwtracing/stm: Enable STM_SOURCE_HEARTBEAT as module
 - drivers/hwtracing/stm: Enable STM_SOURCE_FTRACE as module
 - drivers/hwtracing/intel_th: Enable INTEL_TH_STH as module
 .
   [ Jair Gonzalez ]
   * [amd64] drivers/platform/x86/intel: Enable INTEL_TPMI (Topology Aware
 Register and PM Capsule Interface).
   * [amd64] drivers/powercap/Kconfig: Enable INTEL_RAPL_TPMI (Running Average
 Power Limit Energy Reporting via the Topology Aware Register and PM
 Capsule Interface) (Closes: #1053187).
 .
   [ Vincent Blut ]
   * [x86] sound/soc/amd: Enable SND_SOC_AMD_PS and SND_SOC_AMD_PS_MACH as
 modules (Closes: #1055649)
   * [x86] sound/soc/amd: Enable SND_SOC_AMD_RPL_ACP6x as module
 (Closes: #1058576)
 .
   [ Luca Boccassi ]
   * Set CONFIG_VIRTIO_FS and its dependencies to builtin, to allow building
 images that boot directly to rootfs (skipping the initrd)
Checksums-Sha1:
 b56006fd25be1dfc8197935b7f63dbb986f57b60 11188 
linux-signed-amd64_6.6.7+1~exp1.dsc
 d2e1db7a76861a3aaff9ce8fb127654828ed2058 574664 
linux-signed-amd64_6.6.7+1~exp1.tar.xz
Checksums-Sha256:
 8abac7ba42c5e8a1bef6bfc83192f5abb49e855a0ad5635631e713c204e5ea2f 11188 
linux-signed-amd64_6.6.7+1~exp1.dsc
 25c7bb81b9b2cdeef0c2ff2810a6bb826db8c6e828d0921c3c6b76480f55af2c 574664 
linux-signed-amd64_6.6.7+1~exp1.tar.xz
Files:
 e633e1a5c22b7dba5965ba5ceebecc24 11188 kernel optional 
linux-signed-amd64_6.6.7+1~exp1.dsc
 4832eeae9ff18d59530c4126462eb512 574664 kernel optional 
linux-signed-amd64_6.6.7+1~exp1.tar.xz

-BEGIN PGP SIGNATURE-
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=lS/M
-END PGP SIGNATURE-

Processing of linux-signed-arm64_6.6.8+1_source.changes

[Debian FTP Masters]

linux-signed-arm64_6.6.8+1_source.changes uploaded successfully to localhost
along with the files:
  linux-signed-arm64_6.6.8+1.dsc
  linux-signed-arm64_6.6.8+1.tar.xz

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

Processing of linux-signed-amd64_6.6.7+1~exp1_source.changes

[Debian FTP Masters]

linux-signed-amd64_6.6.7+1~exp1_source.changes uploaded successfully to 
localhost
along with the files:
  linux-signed-amd64_6.6.7+1~exp1.dsc
  linux-signed-amd64_6.6.7+1~exp1.tar.xz

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

Processing of linux-signed-arm64_6.6.7+1~exp1_source.changes

[Debian FTP Masters]

linux-signed-arm64_6.6.7+1~exp1_source.changes uploaded successfully to 
localhost
along with the files:
  linux-signed-arm64_6.6.7+1~exp1.dsc
  linux-signed-arm64_6.6.7+1~exp1.tar.xz

Greetings,

Your Debian queue daemon (running on host usper.debian.org)

Processing of linux-signed-amd64_6.6.8+1_source.changes

[Debian FTP Masters]

linux-signed-amd64_6.6.8+1_source.changes uploaded successfully to localhost
along with the files:
  linux-signed-amd64_6.6.8+1.dsc
  linux-signed-amd64_6.6.8+1.tar.xz

Greetings,

Your Debian queue daemon (running on host usper.debian.org)