>a) Upstream still has the warning[1] in the "news flash" on the top right of the page, telling users to not upgrade to 7.0.16. In the 7.0.16 changelog[2] page, though, there is no further information.
the situation is now more clear with 7.0.18 out >b) I browsed their bug database, and mailing lists, particularly right after the 7.0.16 announcement, and found no patch or follow-up more clear with 7.0.18 too >c) While not required, the patch in the SRU has no DEP-3 headers. Where is it coming from? I think in this case, given the little amount of information available elsewhere, it would be best if it had such headers. Or, instead, the SRU description of the bug could have more details: upstream bug, upstream commit, perhaps a link to some discussion. Is this fix enough? I found another place in the same file where the same variable is declared, and it does not have the 2* change. Maybe not needed there, but then again, there is no explanation about this patch. can we please avoid it? I usually stick with the very same content as for the Debian uploads, to have delta just between the changelog files >While we are at it, if a new upload would happen, it could also have these >changes: - run update-maintainer same reason as above, I would like to avoid having to maintain two codebases, except for changelog file last entry - while at it, the version could be changed to the SRU format, which in this case, would be 7.0.16-dfsg-2ubuntu0.1 I use the ~ approach, because in case of MRE a "backport" versioning makes the upgrade path work correctly. >I didn't see anything in the diff, though, about the first change (build only >the guest-* packages). It just has the same d/patch as virtualbox, for this >bug. Is something missing? yes, it has the patchset with the additional patch and just a changelog new entry. > MRE removed, I also would like to update to 7.0.18 later, but for now, better a quick SRU instead of a new MRE upload. (also because MRE is not whitelisted yet) ** Description changed: [Description] ATTENTION: PLEASE REFRAIN FROM UPGRADING TO 7.0.16 FOR NOW. THIS RELEASE HAS AN ISSUE WHICH MIGHT CAUSE HOST OS CRASH WHEN VM IS CONFIGURED TO USE BRIDGED OR HOST-ONLY NETWORKING. WE WILL SEND AN ANNOUNCEMENT TO MAILING LISTS WHEN FIX WILL BE AVAILABLE FOR DOWNLOAD. An incomplete allocation variable triggers an R0 memory corruption on kernel, leading to possible host crashes when high amount of traffic is generated [Fix] --- a/src/VBox/Devices/Network/SrvIntNetR0.cpp (revision 162842) +++ b/src/VBox/Devices/Network/SrvIntNetR0.cpp (revision 162843) @@ -2936,5 +2936,5 @@ union { - uint8_t abBuf[sizeof(INTNETSG) + sizeof(INTNETSEG)]; + uint8_t abBuf[sizeof(INTNETSG) + 2 * sizeof(INTNETSEG)]; INTNETSG SG; } u; [ Regression potential ] * Low, this is just a variable initialization. + + [ Test case ] + * Enable Bridge and NAT network interface on the guest and generate a huge amount of traffic. The host *should not crash* -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2063841 Title: [SRU] virtualbox crash on network traffic To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/virtualbox/+bug/2063841/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs