[ubuntu/bionic-proposed] linux-azure_4.15.0-1012.12_amd64.tar.gz - (Accepted)

Stefan Bader stefan.bader at canonical.com
Mon May 21 21:07:51 UTC 2018 

linux-azure (4.15.0-1012.12) bionic; urgency=medium

  * linux-image-4.15.0-20-generic install after upgrade from xenial breaks
    (LP: #1767133)
    - Packaging: Add versioned dependency for linux-base

  [ Ubuntu: 4.15.0-22.24 ]

  * CVE-2018-3639 (powerpc)
    - powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit
    - stf-barrier: set eieio instruction bit 6 for future optimisations
  * CVE-2018-3639 (x86)
    - x86/nospec: Simplify alternative_msr_write()
    - x86/bugs: Concentrate bug detection into a separate function
    - x86/bugs: Concentrate bug reporting into a separate function
    - x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits
    - x86/bugs, KVM: Support the combination of guest and host IBRS
    - x86/bugs: Expose /sys/../spec_store_bypass
    - x86/cpufeatures: Add X86_FEATURE_RDS
    - x86/bugs: Provide boot parameters for the spec_store_bypass_disable
      mitigation
    - x86/bugs/intel: Set proper CPU features and setup RDS
    - x86/bugs: Whitelist allowed SPEC_CTRL MSR values
    - x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if requested
    - x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest
    - x86/speculation: Create spec-ctrl.h to avoid include hell
    - prctl: Add speculation control prctls
    - x86/process: Allow runtime control of Speculative Store Bypass
    - x86/speculation: Add prctl for Speculative Store Bypass mitigation
    - nospec: Allow getting/setting on non-current task
    - proc: Provide details on speculation flaw mitigations
    - seccomp: Enable speculation flaw mitigations
    - x86/bugs: Make boot modes __ro_after_init
    - prctl: Add force disable speculation
    - seccomp: Use PR_SPEC_FORCE_DISABLE
    - seccomp: Add filter flag to opt-out of SSB mitigation
    - seccomp: Move speculation migitation control to arch code
    - x86/speculation: Make "seccomp" the default mode for Speculative Store
      Bypass
    - x86/bugs: Rename _RDS to _SSBD
    - proc: Use underscores for SSBD in 'status'
    - Documentation/spec_ctrl: Do some minor cleanups
    - x86/bugs: Fix __ssb_select_mitigation() return type
    - x86/bugs: Make cpu_show_common() static
  * LSM Stacking prctl values should be redefined as to not collide with
    upstream prctls (LP: #1769263) // CVE-2018-3639
    - SAUCE: LSM stacking: adjust prctl values

  [ Ubuntu: 4.15.0-21.22 ]

  * linux: 4.15.0-21.22 -proposed tracker (LP: #1767397)
  * initramfs-tools exception during pm.DoInstall with  do-release-upgrade from
    16.04 to 18.04  (LP: #1766727)
    - Add linux-image-* Breaks on s390-tools (<< 2.3.0-0ubuntu3)
  * linux-image-4.15.0-20-generic install after upgrade from xenial breaks
    (LP: #1767133)
    - Packaging: Depends on linux-base that provides the necessary tools
  * linux-image packages need to Breaks flash-kernel << 3.90ubuntu2
    (LP: #1766629)
    - linux-image-* breaks on flash-kernel (<< 3.90ubuntu2)

Date: Wed, 16 May 2018 18:31:36 +0200
Changed-By: Stefan Bader <stefan.bader at canonical.com>
Maintainer: Launchpad Build Daemon <buildd at lgw01-amd64-052.buildd>

-------------- next part --------------
Format: 1.8
Date: Wed, 16 May 2018 18:31:36 +0200
Source: linux-azure
Binary: linux-azure-headers-4.15.0-1012 linux-azure-tools-4.15.0-1012 linux-azure-cloud-tools-4.15.0-1012 linux-image-unsigned-4.15.0-1012-azure linux-modules-4.15.0-1012-azure linux-modules-extra-4.15.0-1012-azure linux-headers-4.15.0-1012-azure linux-image-unsigned-4.15.0-1012-azure-dbgsym linux-tools-4.15.0-1012-azure linux-cloud-tools-4.15.0-1012-azure linux-udebs-azure
Architecture: amd64 all amd64_translations
Version: 4.15.0-1012.12
Distribution: bionic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd at lgw01-amd64-052.buildd>
Changed-By: Stefan Bader <stefan.bader at canonical.com>
Description:
 linux-azure-cloud-tools-4.15.0-1012 - Linux kernel version specific cloud tools for version 4.15.0-1012
 linux-azure-headers-4.15.0-1012 - Header files related to Linux kernel version 4.15.0
 linux-azure-tools-4.15.0-1012 - Linux kernel version specific tools for version 4.15.0-1012
 linux-cloud-tools-4.15.0-1012-azure - Linux kernel version specific cloud tools for version 4.15.0-1012
 linux-headers-4.15.0-1012-azure - Linux kernel headers for version 4.15.0 on 64 bit x86 SMP
 linux-image-unsigned-4.15.0-1012-azure - Linux kernel image for version 4.15.0 on 64 bit x86 SMP
 linux-image-unsigned-4.15.0-1012-azure-dbgsym - Linux kernel debug image for version 4.15.0 on 64 bit x86 SMP
 linux-modules-4.15.0-1012-azure - Linux kernel extra modules for version 4.15.0 on 64 bit x86 SMP
 linux-modules-extra-4.15.0-1012-azure - Linux kernel extra modules for version 4.15.0 on 64 bit x86 SMP
 linux-tools-4.15.0-1012-azure - Linux kernel version specific tools for version 4.15.0-1012
 linux-udebs-azure - Metapackage depending on kernel udebs (udeb)
Launchpad-Bugs-Fixed: 1766629 1766727 1767133 1767397 1769263
Changes:
 linux-azure (4.15.0-1012.12) bionic; urgency=medium
 .
   * linux-image-4.15.0-20-generic install after upgrade from xenial breaks
     (LP: #1767133)
     - Packaging: Add versioned dependency for linux-base
 .
   [ Ubuntu: 4.15.0-22.24 ]
 .
   * CVE-2018-3639 (powerpc)
     - powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit
     - stf-barrier: set eieio instruction bit 6 for future optimisations
   * CVE-2018-3639 (x86)
     - x86/nospec: Simplify alternative_msr_write()
     - x86/bugs: Concentrate bug detection into a separate function
     - x86/bugs: Concentrate bug reporting into a separate function
     - x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved bits
     - x86/bugs, KVM: Support the combination of guest and host IBRS
     - x86/bugs: Expose /sys/../spec_store_bypass
     - x86/cpufeatures: Add X86_FEATURE_RDS
     - x86/bugs: Provide boot parameters for the spec_store_bypass_disable
       mitigation
     - x86/bugs/intel: Set proper CPU features and setup RDS
     - x86/bugs: Whitelist allowed SPEC_CTRL MSR values
     - x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if requested
     - x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest
     - x86/speculation: Create spec-ctrl.h to avoid include hell
     - prctl: Add speculation control prctls
     - x86/process: Allow runtime control of Speculative Store Bypass
     - x86/speculation: Add prctl for Speculative Store Bypass mitigation
     - nospec: Allow getting/setting on non-current task
     - proc: Provide details on speculation flaw mitigations
     - seccomp: Enable speculation flaw mitigations
     - x86/bugs: Make boot modes __ro_after_init
     - prctl: Add force disable speculation
     - seccomp: Use PR_SPEC_FORCE_DISABLE
     - seccomp: Add filter flag to opt-out of SSB mitigation
     - seccomp: Move speculation migitation control to arch code
     - x86/speculation: Make "seccomp" the default mode for Speculative Store
       Bypass
     - x86/bugs: Rename _RDS to _SSBD
     - proc: Use underscores for SSBD in 'status'
     - Documentation/spec_ctrl: Do some minor cleanups
     - x86/bugs: Fix __ssb_select_mitigation() return type
     - x86/bugs: Make cpu_show_common() static
   * LSM Stacking prctl values should be redefined as to not collide with
     upstream prctls (LP: #1769263) // CVE-2018-3639
     - SAUCE: LSM stacking: adjust prctl values
 .
   [ Ubuntu: 4.15.0-21.22 ]
 .
   * linux: 4.15.0-21.22 -proposed tracker (LP: #1767397)
   * initramfs-tools exception during pm.DoInstall with  do-release-upgrade from
     16.04 to 18.04  (LP: #1766727)
     - Add linux-image-* Breaks on s390-tools (<< 2.3.0-0ubuntu3)
   * linux-image-4.15.0-20-generic install after upgrade from xenial breaks
     (LP: #1767133)
     - Packaging: Depends on linux-base that provides the necessary tools
   * linux-image packages need to Breaks flash-kernel << 3.90ubuntu2
     (LP: #1766629)
     - linux-image-* breaks on flash-kernel (<< 3.90ubuntu2)
Checksums-Sha1:
 b1c8fbc9b947d3ec5140ba96fa19d8eccdd83416 4608 linux-azure-cloud-tools-4.15.0-1012-dbgsym_4.15.0-1012.12_amd64.ddeb
 355a44404f734d629997354fdb7395ab813bb236 87732 linux-azure-cloud-tools-4.15.0-1012_4.15.0-1012.12_amd64.deb
 79e193522d0bee4dd0ecd8aa67ddca9554b0e243 11009460 linux-azure-headers-4.15.0-1012_4.15.0-1012.12_all.deb
 8b9b1706552bc8e8fbe933c59d34ca53f26a4ee3 4814244 linux-azure-tools-4.15.0-1012-dbgsym_4.15.0-1012.12_amd64.ddeb
 3804e4037efb1875fffe6f4648b6e1dcbeb0a7c4 1223636 linux-azure-tools-4.15.0-1012_4.15.0-1012.12_amd64.deb
 a7755b50c76a57db0b3b346ea6573599f1f95ecb 16079 linux-azure_4.15.0-1012.12_amd64.buildinfo
 e1406bdac519c640228164dd5baa083287930814 7758378 linux-azure_4.15.0-1012.12_amd64.tar.gz
 b07034f88c5698f7d2b07c2cfee5975dc177cad0 24362 linux-azure_4.15.0-1012.12_amd64_translations.tar.gz
 41bdc07f6f2b2431d73d9906846f07006b2d5a73 1872 linux-cloud-tools-4.15.0-1012-azure_4.15.0-1012.12_amd64.deb
 fb130c5e74ead1f9b1c722768f70968f29b804cf 961580 linux-headers-4.15.0-1012-azure_4.15.0-1012.12_amd64.deb
 8b5724428e46827f8088bcbf0ca1f8fda83b845f 396435624 linux-image-unsigned-4.15.0-1012-azure-dbgsym_4.15.0-1012.12_amd64.ddeb
 dd403ceeffe090ad981f40ec7639738df1b5006d 7821024 linux-image-unsigned-4.15.0-1012-azure_4.15.0-1012.12_amd64.deb
 aba7d3c7034b0bc5b1a34bafbbe3eda60da400d9 11000920 linux-modules-4.15.0-1012-azure_4.15.0-1012.12_amd64.deb
 48d9d278a5df73832c58345df8cefe9776e47f43 10415632 linux-modules-extra-4.15.0-1012-azure_4.15.0-1012.12_amd64.deb
 c6e295d624aa1026c56970c59b441b675f0fa661 1948 linux-tools-4.15.0-1012-azure_4.15.0-1012.12_amd64.deb
Checksums-Sha256:
 0eab5fb9075ffd34ce3adb1c527507d6ad2fe77545c7c65693174c22b297da93 4608 linux-azure-cloud-tools-4.15.0-1012-dbgsym_4.15.0-1012.12_amd64.ddeb
 38559a257c9d7b8b8d3db3de177499b4c30c2e20dfc05dc7979af933a9c029c3 87732 linux-azure-cloud-tools-4.15.0-1012_4.15.0-1012.12_amd64.deb
 529a60709b75a5fe6c474f0e5b9f5751d8733e0cfa30c6561ffc11919c8f2890 11009460 linux-azure-headers-4.15.0-1012_4.15.0-1012.12_all.deb
 11013a6fe347b2916a831895a07c28a026ec9762cd9551d09fe0c4ad9669cb63 4814244 linux-azure-tools-4.15.0-1012-dbgsym_4.15.0-1012.12_amd64.ddeb
 5865f8a6df7f819674ab0f207e09d6f4d1dc6974626e081cdc0e1c6aaabd134a 1223636 linux-azure-tools-4.15.0-1012_4.15.0-1012.12_amd64.deb
 7f69d5d490a87c94db8aedc1c93dca83b6c9035e964012969b89416997f1e8f9 16079 linux-azure_4.15.0-1012.12_amd64.buildinfo
 d9568197265cb3ea6db6c42d8c364adfe30bc07b38b7b699ec34999f02fba899 7758378 linux-azure_4.15.0-1012.12_amd64.tar.gz
 83f5f23f55be2327b68d43670b90b28b90a38357cdf019d373e5c0f2b68e9dee 24362 linux-azure_4.15.0-1012.12_amd64_translations.tar.gz
 eb1818763a7ff62ff197c4bf5a7815d7fbc96d000d2378f57ee38b1509602f28 1872 linux-cloud-tools-4.15.0-1012-azure_4.15.0-1012.12_amd64.deb
 931d8795cb2448a7871e4636fe689160f84092b4fec7fa6c8326a167781875df 961580 linux-headers-4.15.0-1012-azure_4.15.0-1012.12_amd64.deb
 de92348a81459527c0159f8cecc4b9b0182d9051f44645d59c28b2c45ab484ae 396435624 linux-image-unsigned-4.15.0-1012-azure-dbgsym_4.15.0-1012.12_amd64.ddeb
 504c19c16c0fd427a282092dbab6fed288cb78bcd36497f5806b87fa7ccf3752 7821024 linux-image-unsigned-4.15.0-1012-azure_4.15.0-1012.12_amd64.deb
 8d10df73601016f2790af7270e107e75f2c0a939abd046b5898803023c4e3b7f 11000920 linux-modules-4.15.0-1012-azure_4.15.0-1012.12_amd64.deb
 9e9cb083c7899282fcc84679ff7ccb6c5786605f0a18ea1510c97adf8fc745f2 10415632 linux-modules-extra-4.15.0-1012-azure_4.15.0-1012.12_amd64.deb
 a9a66df9d452f30bcb5e2d81cea90cc1841739a6e007fe94e110b0451f5af5ed 1948 linux-tools-4.15.0-1012-azure_4.15.0-1012.12_amd64.deb
Files:
 2e198dfb77dea778af3c05871042cddf 4608 debug optional linux-azure-cloud-tools-4.15.0-1012-dbgsym_4.15.0-1012.12_amd64.ddeb
 efa740223f2076f424e59ed59f51d9e0 87732 devel optional linux-azure-cloud-tools-4.15.0-1012_4.15.0-1012.12_amd64.deb
 d54fc1024f7224c882595f0cd0e4f923 11009460 devel optional linux-azure-headers-4.15.0-1012_4.15.0-1012.12_all.deb
 9ef97b0832cef216e570969182a38dc9 4814244 debug optional linux-azure-tools-4.15.0-1012-dbgsym_4.15.0-1012.12_amd64.ddeb
 ef386f6e6041a094c62112f67bfc5480 1223636 devel optional linux-azure-tools-4.15.0-1012_4.15.0-1012.12_amd64.deb
 549fa533c99b63c1be2184cf11d8246e 16079 devel optional linux-azure_4.15.0-1012.12_amd64.buildinfo
 0a74dd58da49533c9cda693950904fb5 7758378 raw-signing - linux-azure_4.15.0-1012.12_amd64.tar.gz
 f6bb4493067b652fb1903338007b3b2a 24362 raw-translations - linux-azure_4.15.0-1012.12_amd64_translations.tar.gz
 683c525b321a145e8db3b0d7468a6fcd 1872 devel optional linux-cloud-tools-4.15.0-1012-azure_4.15.0-1012.12_amd64.deb
 faec9411e5902f771490ae6493e4760e 961580 devel optional linux-headers-4.15.0-1012-azure_4.15.0-1012.12_amd64.deb
 2181795a4d3ffb144d62f3386bd0418c 396435624 devel optional linux-image-unsigned-4.15.0-1012-azure-dbgsym_4.15.0-1012.12_amd64.ddeb
 1600f29566de4ec370dca5fb66ae91a9 7821024 kernel optional linux-image-unsigned-4.15.0-1012-azure_4.15.0-1012.12_amd64.deb
 cce03331c9d8a8be1e890aa44641a3b2 11000920 kernel optional linux-modules-4.15.0-1012-azure_4.15.0-1012.12_amd64.deb
 fe8fb097ec294fc494e9832f0753cc3c 10415632 kernel optional linux-modules-extra-4.15.0-1012-azure_4.15.0-1012.12_amd64.deb
 54b3888ad6a7d29315ccda283b5af7e5 1948 devel optional linux-tools-4.15.0-1012-azure_4.15.0-1012.12_amd64.deb

More information about the Bionic-changes mailing list