January 2023 Linux kernel update

freedomofpress / securedrop

GitHub repository for the SecureDrop whistleblower platform. Do not submit tips here!

https://securedrop.org/

Other

3.62k stars 688 forks source link

January 2023 Linux kernel update #6729

Closed legoktm closed 1 year ago

legoktm commented 1 year ago

Being done with coordination in https://github.com/freedomofpress/securedrop-workstation/issues/850.

Checklist

[x] Source tarball saved internally
[x] Uploaded to apt-test.freedom.press
[x] Tested on recommended hardware (see below)
[ ] Uploaded to apt.freedom.press and released

Testing matrix

Instructions on testing procedure

[x] NUC12 : @nathandyer
[x] NUC11: @cfm
[x] NUC10: @legoktm
[x] NUC8: @zenmonkeykstop
[x] NUC7: @creviera

nathandyer commented 1 year ago

Tested on NUC12, verified everything is functional and that the paxtest and spectre-meltdown-checker output is as expected (not vulnerable).

cfm commented 1 year ago

Kernel and smoke tests pass on NUC11s. The rest of the test coverage is assigned above. We're aiming to finish testing this week so that we can release the new kernel packages next week.

sssoleileraaa commented 1 year ago

nuc7 kernel testing

[x] Confirm that the system boots, and that uname -r returns the expected kernel
[x] Confirm that values are comparable to previous kernels when running sudo paxtest blackhat
[x] Verify the kernel is not vulnerable to known exploits by running https://meltdown.ovh

legoktm commented 1 year ago

All good on NUC10!

zenmonkeykstop commented 1 year ago

NUC8 checks out.

cfm commented 1 year ago

Thanks, @nathandyer, @legoktm, @creviera, and @zenmonkeykstop! Tomorrow I'll queue up these packages for review into apt.freedom.press.