[ubuntu/resolute-proposed] linux-oracle 6.19.0-1001.1 (Accepted)
Andy Whitcroft
apw at canonical.com
Fri Feb 6 11:55:50 UTC 2026
linux-oracle (6.19.0-1001.1) resolute; urgency=medium
* resolute/linux-oracle: 6.19.0-1001.1 -proposed tracker (LP: #2139185)
* Packaging resync (LP: #1786013)
- [Packaging] oracle: Remove dwarfdump from Build-Depends
- [Packaging] update variants
- [Packaging] update update.conf
- [Packaging] debian.oracle/dkms-versions -- update from kernel-versions
(main/d2025.09.29)
* Miscellaneous Ubuntu changes
- [Config] updateconfigs after rebase to 6.19-rc6
[ Ubuntu: 6.19.0-3.3 ]
* resolute/linux: 6.19.0-3.3 -proposed tracker (LP: #2138935)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/d2026.01.12)
- [Packaging] update variants
* [26.04] Please test secureboot and lock-down with 6.18 kernel (s390x) on
Resolute Raccoon (LP: #2131805)
- SAUCE: s390/boot/vmlinux.lds.S: Ensure bzImage ends with SecureBoot
trailer
* unconfined profile denies userns_create for chromium based processes
- [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS
* update apparmor and LSM stacking patch set
- SAUCE: apparmor5.0.0 [1/53]: Stacking: LSM: Single calls in secid hooks
- SAUCE: apparmor5.0.0 [2/53]: Stacking: LSM: Exclusive secmark usage
- SAUCE: apparmor5.0.0 [3/53]: Stacking: Audit: Call only the first of the
audit rule hooks
- SAUCE: apparmor5.0.0 [4/53]: Stacking: AppArmor: Remove the exclusive
flag
- SAUCE: apparmor5.0.0 [5/53]: apparmor-next 7.0: apparmor: replace
sprintf with snprintf in aa_new_learning_profile
- SAUCE: apparmor5.0.0 [6/53]: apparmor-next 7.0: apparmor: Replace
sprintf/strcpy with scnprintf/strscpy in aa_policy_init
- SAUCE: apparmor5.0.0 [7/53]: apparmor-next 7.0: apparmor: Replace
deprecated strcpy in d_namespace_path
- SAUCE: apparmor5.0.0 [8/53]: apparmor-next 7.0: apparmor: fix NULL
pointer dereference in __unix_needs_revalidation
- SAUCE: apparmor5.0.0 [9/53]: apparmor-next 7.0: apparmor: fix NULL sock
in aa_sock_file_perm
- SAUCE: apparmor5.0.0 [10/53]: apparmor-next 7.0: apparmor: Replace
deprecated strcpy with memcpy in gen_symlink_name
- SAUCE: apparmor5.0.0 [11/53]: apparmor-next 7.0: AppArmor: Allow
apparmor to handle unaligned dfa tables
- SAUCE: apparmor5.0.0 [12/53]: apparmor-next 7.0: apparmor: Fix &
Optimize table creation from possibly unaligned memory
- SAUCE: apparmor5.0.0 [13/53]: apparmor-next 7.0: apparmor: make str
table more generic and be able to have multiple entries
- SAUCE: apparmor5.0.0 [14/53]: apparmor-next 7.0: apparmor: add support
loading per permission tagging
- SAUCE: apparmor5.0.0 [15/53]: apparmor-next 7.0: aoparmor: userns: Add
support for execpath in userns
- SAUCE: apparmor5.0.0 [16/53]: apparmor-next 7.0: apparmor: fix boolean
argument in apparmor_mmap_file
- SAUCE: apparmor5.0.0 [17/53]: apparmor-next 7.0: apparmor: drop
in_atomic flag in common_mmap, and common_file_perm
- SAUCE: apparmor5.0.0 [18/53]: apparmor-next 7.0: apparmor: account for
in_atomic removal in common_file_perm
- SAUCE: apparmor5.0.0 [19/53]: apparmor-next 7.0: apparmor: return
-ENOMEM in unpack_perms_table upon alloc failure
- SAUCE: apparmor5.0.0 [20/53]: apparmor-next 7.0: apparmor: guard against
free routines being called with a NULL
- SAUCE: apparmor5.0.0 [21/53]: apparmor-next 7.0: apparmor: move check
for aa_null file to cover all cases
- SAUCE: apparmor5.0.0 [22/53]: apparmor-next 7.0: apparmor: fix label and
profile debug macros
- SAUCE: apparmor5.0.0 [23/53]: apparmor-next 7.0: apparmor:
refactor/cleanup cred helper fns.
- SAUCE: apparmor5.0.0 [24/53]: apparmor-next 7.0: apparmor: fix rlimit
for posix cpu timers
- SAUCE: apparmor5.0.0 [25/53]: apparmor-next 7.0: apparmor: fix fast path
cache check for unix sockets
- SAUCE: apparmor5.0.0 [26/53]: apparmor-next 7.0: apparmor: remove
apply_modes_to_perms from label_match
- SAUCE: apparmor5.0.0 [27/53]: apparmor-next 7.0: apparmor: make
label_match return a consistent value
- SAUCE: apparmor5.0.0 [28/53]: apparmor-next 7.0: apparmor: split
xxx_in_ns into its two separate semantic use cases
- SAUCE: apparmor5.0.0 [29/53]: apparmor-next 7.0: apparmor: avoid per-cpu
hold underflow in aa_get_buffer
- SAUCE: apparmor5.0.0 [30/53]: Revert "apparmor: fix dbus permission
queries to v9 ABI"
- SAUCE: apparmor5.0.0 [31/53]: Revert "apparmor: gate make fine grained
unix mediation behind v9 abi"
- SAUCE: apparmor5.0.0 [32/53]: apparmor: net: patch to provide
compatibility with v2.x net rules
- SAUCE: apparmor5.0.0 [33/53]: apparmor: net: add fine grained ipv4/ipv6
mediation
- SAUCE: apparmor5.0.0 [34/53]: apparmor: lift compatibility check out of
profile_af_perm
- SAUCE: apparmor5.0.0 [35/53]: apparmor: userns: add unprivileged user ns
mediation
- SAUCE: apparmor5.0.0 [36/53]: apparmor: userns: Add sysctls for
additional controls of unpriv userns restrictions
- SAUCE: apparmor5.0.0 [37/53]: apparmor: userns - make it so special
unconfined profiles can mediate user namespaces
- SAUCE: apparmor5.0.0 [38/53]: apparmor: userns: open userns related
sysctl so lxc can check if restriction are in place
- SAUCE: apparmor5.0.0 [39/53]: apparmor: userns: allow profile to be
transitioned when a userns is created
- SAUCE: apparmor5.0.0 [40/53]: apparmor: mqueue: call
security_inode_init_security on inode creation
- SAUCE: apparmor5.0.0 [41/53]: apparmor: mqueue: add fine grained
mediation of posix mqueues
- SAUCE: apparmor5.0.0 [42/53]: apparmor: uring: add io_uring mediation
- SAUCE: apparmor5.0.0 [43/53]: apparmor: create an
AA_SFS_TYPE_BOOLEAN_INTPRINT sysctl variant
- SAUCE: apparmor5.0.0 [44/53]: apparmor: Use AA_SFS_FILE_BOOLEAN_INTPRINT
for userns and io_uring sysctls
- SAUCE: apparmor5.0.0 [45/53]: apparmor: prompt: setup slab cache for
audit data
- SAUCE: apparmor5.0.0 [46/53]: apparmor: prompt: add the ability for
profiles to have a learning cache
- SAUCE: apparmor5.0.0 [47/53]: apparmor: prompt: enable userspace upcall
for mediation
- SAUCE: apparmor5.0.0 [48/53]: apparmor: prompt: pass prompt boolean
through into path_name as well
- SAUCE: apparmor5.0.0 [49/53]: apparmor: check for supported version in
notification messages.
- SAUCE: apparmor5.0.0 [50/53]: apparmor: refactor building notice so it
is easier to extend
- SAUCE: apparmor5.0.0 [51/53]: apparmor: switch from ENOTSUPP to
EPROTONOSUPPORT
- SAUCE: apparmor5.0.0 [52/53]: apparmor: add support for meta data tags
- SAUCE: apparmor5.0.0 [53/53]: apparmor: prevent profile->disconnected
double free in aa_free_profile
* Blacklisted sbsa_gwdt module makes machines reboot (LP: #2138924)
- [Packaging] remove sbsa_gwdt from watchdog blacklist
* Integrate IgH EtherCAT master (LP: #2138621)
- SAUCE: ubuntu/igh-ecat: Import IgH EtherCAT master
- SAUCE: igh-ecat: Plug IgH EtherCAT master into Kbuild
- SAUCE: igh-ecat: Fix build failure with kernel 6.19
- [Config] Enable IgH EtherCAT master
* TBT call trace while connecting TBT4 monitor on TBT5 port (LP: #2137613)
- SAUCE: thunderbolt: log path activation failures without WARN backtraces
* Boot up hang with ucsi call trace while plug power cord or device on tbt5
port (LP: #2127764)
- SAUCE: usb: typec: ucsi: Fix workqueue destruction race during connector
cleanup
* Ease the sysfs call trace which comes from ucsi firmware issue
(LP: #2127960)
- usb: typec: ucsi: Detect and skip duplicate altmodes from buggy firmware
- usb: typec: ucsi: Add duplicate detection to nvidia registration path
- usb: typec: ucsi: yoga_c630: Remove redundant duplicate altmode handling
* Enable RTL ASPM for more new Dell platforms (LP: #2133144)
- SAUCE: r8169: Add more Dell platforms to enable ASPM
* Enable RTL ASPM for new Dell platforms (LP: #2121200)
- SAUCE: r8169: enable ASPM on all new Dell platforms
* Miscellaneous Ubuntu changes
- [Packaging] Bump clang build-dep to match the current default.
- [Config] updateconfig after rebase to v6.19-rc6
- [Packaging] update Ubuntu.md
[ Ubuntu-unstable: 6.19.0-1.1 ]
* resolute/linux-unstable: 6.19.0-1.1 -proposed tracker (LP: #2138287)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/d2025.10.20)
- [Packaging] update variants
* Miscellaneous Ubuntu changes
- SAUCE: (lockdown) efi,lockdown: fix kernel lockdown on Secure Boot
- [Config] updateconfigs following v6.19-rc4 rebase
- SAUCE: aaeon: The modules need to import ASUS_WMI now
- Update Changes.md
- SAUCE: arm64: dts: qcom: x1-acer-swift-14: Fix includes
- [Packaging] Drop failing dkms packages
[ Ubuntu-unstable: 6.19.0-0.0 ]
* Dummy entry.
[ Ubuntu-unstable: 6.18.0-6.6 ]
* resolute/linux-unstable: 6.18.0-6.6 -proposed tracker (LP: #2133502)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/d2025.10.20)
* Miscellaneous Ubuntu changes
- Update dropped.txt
- [Packaging] debian.master/dkms-versions: Drop failing dkms packages
- rename dropped.txt to Changes.md
[ Ubuntu-unstable: 6.18.0-5.5 ]
* resolute/linux-unstable: 6.18.0-5.5 -proposed tracker (LP: #2131673)
* Re-enable INTEL_SKL_INT3472 for kernels >= 6.16 for Intel IPU camera
(LP: #2128792)
- Revert "UBUNTU: [Config] FTBFS: disable INTEL_SKL_INT3472"
- Revert "UBUNTU: SAUCE: platform/x86: int3472: Add handshake GPIO
function"
* i40e driver is triggering VF resets on every link state change
(LP: #2130552)
- i40e: avoid redundant VF link state updates
* Miscellaneous Ubuntu changes
- [Config] updateconfigs following v6.18-rc6 rebase
[ Ubuntu-unstable: 6.18.0-4.4 ]
* resolute/linux-unstable: 6.18.0-4.4 -proposed tracker (LP: #2131211)
* CAP_PERFMON insufficient to get perf data (LP: #2131046)
- SAUCE: perf/core: Allow CAP_PERFMON for paranoid level 4
* Miscellaneous Ubuntu changes
- [Config] updateconfigs following v6.18-rc5 rebase
[ Ubuntu-unstable: 6.18.0-3.3 ]
* resolute/linux-unstable: 6.18.0-3.3 -proposed tracker (LP: #2129919)
* [26.04 FEAT] Set Architecture Level (ALS) to z15 (LP: #2126577)
- [Config] Raise the architectural level set for s390x to z15
* Miscellaneous Ubuntu changes
- [Config]: Enable CONFIG_CRYPTO_BENCHMARK
- [Config] updateconfigs after v6.18-rc3 rebase
[ Ubuntu-unstable: 6.18.0-2.2 ]
* resolute/linux-unstable: 6.18.0-2.2 -proposed tracker (LP: #2129552)
* Miscellaneous Ubuntu changes
- [Config] update rustc version
[ Ubuntu-unstable: 6.18.0-1.1 ]
* resolute/linux-unstable: 6.18.0-1.1 -proposed tracker (LP: #2129038)
* Packaging resync (LP: #1786013)
- [Packaging] update Ubuntu.md
* Miscellaneous Ubuntu changes
- [Packaging] Rename to linux-unstable and move to 6.18
- [Config] updateconfigs following v6.18-rc1 rebase
- [Config] apparmor: remove SECURITY_APPARMOR_RESTRICT_USERNS
- [Packaging] debian.master/dkms-versions: Drop failing dkms packages
- [Config] updateconfigs following v6.18-rc2 rebase
- move to resolute
* Miscellaneous upstream changes
- Revert "audit: fix skb leak when audit rate limit is exceeded"
- Revert "audit: init ab->skb_list earlier in audit_buffer_alloc()"
- Revert "audit: add record for multiple object contexts"
- Revert "audit: add record for multiple task security contexts"
- Revert "lsm: security_lsmblob_to_secctx module selection"
- audit: fix skb leak when audit rate limit is exceeded
[ Ubuntu-unstable: 6.18.0-0.0 ]
* questing/linux: 6.17.0-6.6 -proposed tracker (LP: #2126040)
* Questing update: v6.17.1 upstream stable release (LP: #2126948)
- blk-mq: fix blk_mq_tags double free while nr_requests grown
- gcc-plugins: Remove TODO_verify_il for GCC >= 16
- scsi: target: target_core_configfs: Add length check to avoid buffer
overflow
- ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
- wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait()
- media: b2c2: Fix use-after-free causing by irq_check_work in
flexcop_pci_remove
- media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in
probe
- media: tuner: xc5000: Fix use-after-free in xc5000_release
- media: rc: fix races with imon_disconnect()
- media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
- mm: swap: check for stable address space before operating on the VMA
- wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()
- media: iris: Fix memory leak by freeing untracked persist buffer
- media: stm32-csi: Fix dereference before NULL check
- ASoC: qcom: audioreach: fix potential null pointer dereference
- Linux 6.17.1
* RISC-V kernel config is out of sync with other archs (LP: #1981437)
- [Config] riscv64: Update EFI_SBAT_FILE
- [Config] riscv64: Enable EFI_ZBOOT
- [Config] riscv64: Disable support for non-RVA23 SoCs
- [Config] riscv64: Disable RISCV_ISA_FALLBACK
- [Config] riscv64: Sync config with other architectures
* Miscellaneous Ubuntu changes
- [Config] updateconfigs after rebase to 6.17
Date: 2026-02-03 14:28:18.074965+00:00
Changed-By: Timo Aaltonen <tjaalton at ubuntu.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-oracle/6.19.0-1001.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the Resolute-changes
mailing list