[ubuntu/bionic-updates] linux-azure-5.3_5.3.0-1007.8~18.04.1_amd64.tar.gz - (Accepted)

Stefan Bader stefan.bader at canonical.com
Tue Nov 12 22:32:49 UTC 2019 

linux-azure-5.3 (5.3.0-1007.8~18.04.1) bionic; urgency=medium

  [ Ubuntu: 5.3.0-1007.8 ]

  * CVE-2019-11135
    - [Config] azure: Disable TSX by default when possible
  * [REGRESSION]  md/raid0: cannot assemble multi-zone RAID0 with default_layout
    setting (LP: #1849682)
    - Revert "md/raid0: avoid RAID0 data corruption due to layout confusion."
  * refcount underflow and type confusion in shiftfs (LP: #1850867) // CVE-2019-15793
    - SAUCE: shiftfs: Correct id translation for lower fs operations
    - SAUCE: shiftfs: prevent type confusion
    - SAUCE: shiftfs: Fix refcount underflow in btrfs ioctl handling
  * CVE-2018-12207
    - kvm: x86, powerpc: do not allow clearing largepages debugfs entry
    - SAUCE: KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is
      active
    - SAUCE: x86: Add ITLB_MULTIHIT bug infrastructure
    - SAUCE: kvm: mmu: ITLB_MULTIHIT mitigation
    - SAUCE: kvm: Add helper function for creating VM worker threads
    - SAUCE: kvm: x86: mmu: Recovery of shattered NX large pages
    - SAUCE: cpu/speculation: Uninline and export CPU mitigations helpers
    - SAUCE: kvm: x86: mmu: Apply global mitigations knob to ITLB_MULTIHIT
  * CVE-2019-11135
    - x86/msr: Add the IA32_TSX_CTRL MSR
    - x86/cpu: Add a helper function x86_read_arch_cap_msr()
    - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default
    - x86/speculation/taa: Add mitigation for TSX Async Abort
    - x86/speculation/taa: Add sysfs reporting for TSX Async Abort
    - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled
    - x86/tsx: Add "auto" option to the tsx= cmdline parameter
    - x86/speculation/taa: Add documentation for TSX Async Abort
    - x86/tsx: Add config options to set tsx=on|off|auto
    - [Config] Disable TSX by default when possible
  * CVE-2019-0154
    - SAUCE: drm/i915: Lower RM timeout to avoid DSI hard hangs
    - SAUCE: drm/i915/gen8+: Add RC6 CTX corruption WA
  * CVE-2019-0155
    - SAUCE: drm/i915: Rename gen7 cmdparser tables
    - SAUCE: drm/i915: Disable Secure Batches for gen6+
    - SAUCE: drm/i915: Remove Master tables from cmdparser
    - SAUCE: drm/i915: Add support for mandatory cmdparsing
    - SAUCE: drm/i915: Support ro ppgtt mapped cmdparser shadow buffers
    - SAUCE: drm/i915: Allow parsing of unsized batches
    - SAUCE: drm/i915: Add gen9 BCS cmdparsing
    - SAUCE: drm/i915/cmdparser: Use explicit goto for error paths
    - SAUCE: drm/i915/cmdparser: Add support for backward jumps
    - SAUCE: drm/i915/cmdparser: Ignore Length operands during command matching

Date: Mon, 11 Nov 2019 14:24:33 +0100
Changed-By: Stefan Bader <stefan.bader at canonical.com>
Maintainer: Launchpad Build Daemon <buildd at lcy01-amd64-029.buildd>

-------------- next part --------------
Format: 1.8
Date: Mon, 11 Nov 2019 14:24:33 +0100
Source: linux-azure-5.3
Binary: linux-azure-5.3-headers-5.3.0-1007 linux-azure-5.3-tools-5.3.0-1007 linux-azure-5.3-cloud-tools-5.3.0-1007 linux-image-unsigned-5.3.0-1007-azure linux-modules-5.3.0-1007-azure linux-modules-extra-5.3.0-1007-azure linux-headers-5.3.0-1007-azure linux-image-unsigned-5.3.0-1007-azure-dbgsym linux-tools-5.3.0-1007-azure linux-cloud-tools-5.3.0-1007-azure linux-udebs-azure linux-buildinfo-5.3.0-1007-azure
Architecture: amd64 all amd64_translations
Version: 5.3.0-1007.8~18.04.1
Distribution: bionic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd at lcy01-amd64-029.buildd>
Changed-By: Stefan Bader <stefan.bader at canonical.com>
Description:
 linux-azure-5.3-cloud-tools-5.3.0-1007 - Linux kernel version specific cloud tools for version 5.3.0-1007
 linux-azure-5.3-headers-5.3.0-1007 - Header files related to Linux kernel version 5.3.0
 linux-azure-5.3-tools-5.3.0-1007 - Linux kernel version specific tools for version 5.3.0-1007
 linux-buildinfo-5.3.0-1007-azure - Linux kernel buildinfo for version 5.3.0 on 64 bit x86 SMP
 linux-cloud-tools-5.3.0-1007-azure - Azure Linux kernel version specific cloud tools for version 5.3.0
 linux-headers-5.3.0-1007-azure - Azure Linux kernel headers for version 5.3.0 on 64 bit x86 SMP
 linux-image-unsigned-5.3.0-1007-azure - Azure Linux kernel image for version 5.3.0 on 64 bit x86 SMP
 linux-image-unsigned-5.3.0-1007-azure-dbgsym - Azure Linux kernel debug image for version 5.3.0 on 64 bit x86 SM
 linux-modules-5.3.0-1007-azure - Azure Linux kernel extra modules for version 5.3.0 on 64 bit x86
 linux-modules-extra-5.3.0-1007-azure - Azure Linux kernel extra modules for version 5.3.0 on 64 bit x86
 linux-tools-5.3.0-1007-azure - Azure Linux kernel version specific tools for version 5.3.0-1007
 linux-udebs-azure - Metapackage depending on kernel udebs (udeb)
Launchpad-Bugs-Fixed: 1849682 1850867
Changes:
 linux-azure-5.3 (5.3.0-1007.8~18.04.1) bionic; urgency=medium
 .
   [ Ubuntu: 5.3.0-1007.8 ]
 .
   * CVE-2019-11135
     - [Config] azure: Disable TSX by default when possible
   * [REGRESSION]  md/raid0: cannot assemble multi-zone RAID0 with default_layout
     setting (LP: #1849682)
     - Revert "md/raid0: avoid RAID0 data corruption due to layout confusion."
   * refcount underflow and type confusion in shiftfs (LP: #1850867) // CVE-2019-15793
     - SAUCE: shiftfs: Correct id translation for lower fs operations
     - SAUCE: shiftfs: prevent type confusion
     - SAUCE: shiftfs: Fix refcount underflow in btrfs ioctl handling
   * CVE-2018-12207
     - kvm: x86, powerpc: do not allow clearing largepages debugfs entry
     - SAUCE: KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is
       active
     - SAUCE: x86: Add ITLB_MULTIHIT bug infrastructure
     - SAUCE: kvm: mmu: ITLB_MULTIHIT mitigation
     - SAUCE: kvm: Add helper function for creating VM worker threads
     - SAUCE: kvm: x86: mmu: Recovery of shattered NX large pages
     - SAUCE: cpu/speculation: Uninline and export CPU mitigations helpers
     - SAUCE: kvm: x86: mmu: Apply global mitigations knob to ITLB_MULTIHIT
   * CVE-2019-11135
     - x86/msr: Add the IA32_TSX_CTRL MSR
     - x86/cpu: Add a helper function x86_read_arch_cap_msr()
     - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default
     - x86/speculation/taa: Add mitigation for TSX Async Abort
     - x86/speculation/taa: Add sysfs reporting for TSX Async Abort
     - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled
     - x86/tsx: Add "auto" option to the tsx= cmdline parameter
     - x86/speculation/taa: Add documentation for TSX Async Abort
     - x86/tsx: Add config options to set tsx=on|off|auto
     - [Config] Disable TSX by default when possible
   * CVE-2019-0154
     - SAUCE: drm/i915: Lower RM timeout to avoid DSI hard hangs
     - SAUCE: drm/i915/gen8+: Add RC6 CTX corruption WA
   * CVE-2019-0155
     - SAUCE: drm/i915: Rename gen7 cmdparser tables
     - SAUCE: drm/i915: Disable Secure Batches for gen6+
     - SAUCE: drm/i915: Remove Master tables from cmdparser
     - SAUCE: drm/i915: Add support for mandatory cmdparsing
     - SAUCE: drm/i915: Support ro ppgtt mapped cmdparser shadow buffers
     - SAUCE: drm/i915: Allow parsing of unsized batches
     - SAUCE: drm/i915: Add gen9 BCS cmdparsing
     - SAUCE: drm/i915/cmdparser: Use explicit goto for error paths
     - SAUCE: drm/i915/cmdparser: Add support for backward jumps
     - SAUCE: drm/i915/cmdparser: Ignore Length operands during command matching
Checksums-Sha1:
 dc0404b74bc385df530d32bc9fdeafe5b5355ec3 56272 linux-azure-5.3-cloud-tools-5.3.0-1007_5.3.0-1007.8~18.04.1_amd64.deb
 7e7012b9340a49736e4c900580988d2e14903c1a 10964552 linux-azure-5.3-headers-5.3.0-1007_5.3.0-1007.8~18.04.1_all.deb
 a628571d317b08c068371d623115ca45bec0bfdc 5090476 linux-azure-5.3-tools-5.3.0-1007_5.3.0-1007.8~18.04.1_amd64.deb
 fa5f629d55ea68c2883bfa9c5e2363996e93fd90 17032 linux-azure-5.3_5.3.0-1007.8~18.04.1_amd64.buildinfo
 b672f5f00491aaa01b89a495fc5424c394587247 8015977 linux-azure-5.3_5.3.0-1007.8~18.04.1_amd64.tar.gz
 38804787dbdf5e022750b34483ed35c150580ff9 24515 linux-azure-5.3_5.3.0-1007.8~18.04.1_amd64_translations.tar.gz
 412fe03fb82d5b65b39a9b896d4c23d2fed1514c 182484 linux-buildinfo-5.3.0-1007-azure_5.3.0-1007.8~18.04.1_amd64.deb
 58973618499c0f8fe9f967366e4cbd06999f93f7 1884 linux-cloud-tools-5.3.0-1007-azure_5.3.0-1007.8~18.04.1_amd64.deb
 db7db45f116b6b5364236114e8d0803cce7678c0 958560 linux-headers-5.3.0-1007-azure_5.3.0-1007.8~18.04.1_amd64.deb
 dee4d28ef89d419e30d8f918a416f38e333bd190 483752332 linux-image-unsigned-5.3.0-1007-azure-dbgsym_5.3.0-1007.8~18.04.1_amd64.ddeb
 c9c67571f92f0e8d86ee4808a5be1924eba7a8ac 8044032 linux-image-unsigned-5.3.0-1007-azure_5.3.0-1007.8~18.04.1_amd64.deb
 74d55aad1adc350a6de4f4321901b31051aa09b5 12159408 linux-modules-5.3.0-1007-azure_5.3.0-1007.8~18.04.1_amd64.deb
 796ca654f627f3faf9fb479b22fbe1961fad619c 14315136 linux-modules-extra-5.3.0-1007-azure_5.3.0-1007.8~18.04.1_amd64.deb
 5680f71055372b7c28d61647edca9346b2646e2c 1976 linux-tools-5.3.0-1007-azure_5.3.0-1007.8~18.04.1_amd64.deb
Checksums-Sha256:
 c25f986891cf099c5fcd9037da6c856ec26425a62732cc33b4bb198f5a5ce968 56272 linux-azure-5.3-cloud-tools-5.3.0-1007_5.3.0-1007.8~18.04.1_amd64.deb
 c5147f7a3c79abf0061c86d633a367ef88229e4da7549160cfb5f874f202ba94 10964552 linux-azure-5.3-headers-5.3.0-1007_5.3.0-1007.8~18.04.1_all.deb
 5e583876034d9bc93bdeb0ab6b2eed32ab22c49dc184e8df8dd44529dba83f97 5090476 linux-azure-5.3-tools-5.3.0-1007_5.3.0-1007.8~18.04.1_amd64.deb
 2158d5bb0af153d7676fd98dc71a6bbf86a73df27ada24a28f5c1bd99942e161 17032 linux-azure-5.3_5.3.0-1007.8~18.04.1_amd64.buildinfo
 bffd2b3536d672721031564ae84ab15e7506124d696cc17f22c0c21251353863 8015977 linux-azure-5.3_5.3.0-1007.8~18.04.1_amd64.tar.gz
 40bec71c1858b8aab55dd4eeb86907a673e0e55a52011fb6bc6f6c1cc38e9bb3 24515 linux-azure-5.3_5.3.0-1007.8~18.04.1_amd64_translations.tar.gz
 66de73b1350cd826fbfb0e558c944aeb69c69ea1914bc8ebdc8024876056955a 182484 linux-buildinfo-5.3.0-1007-azure_5.3.0-1007.8~18.04.1_amd64.deb
 61e35d5a82cb31e25da71ad9303257f4edfec906fcac287e6d4706191f4e6c51 1884 linux-cloud-tools-5.3.0-1007-azure_5.3.0-1007.8~18.04.1_amd64.deb
 fe418811c50075c69d0c96be254d1d7197ec7820a6a481267e2e8a5ff7c44863 958560 linux-headers-5.3.0-1007-azure_5.3.0-1007.8~18.04.1_amd64.deb
 d947d9dcaafb4d77368d75b860c3ff62d0f0490210322bc45064cb6d67339fed 483752332 linux-image-unsigned-5.3.0-1007-azure-dbgsym_5.3.0-1007.8~18.04.1_amd64.ddeb
 dc6cc9d4b6652c2706544d644f1e47123b1449d81432f5bc0abce7b83b82034c 8044032 linux-image-unsigned-5.3.0-1007-azure_5.3.0-1007.8~18.04.1_amd64.deb
 cf01993fb27dc68a701f1dced43a091d08f11b96b805fc94281b0c2772df31b4 12159408 linux-modules-5.3.0-1007-azure_5.3.0-1007.8~18.04.1_amd64.deb
 e6379038bc0965a30176b5e71e595722d785cf4f0baeb2eb4ce7a040bee3eb9d 14315136 linux-modules-extra-5.3.0-1007-azure_5.3.0-1007.8~18.04.1_amd64.deb
 acac654fa39c52b97bf2f01052475eaf9ff901f59bd8a07b1ca4d88efb037aa6 1976 linux-tools-5.3.0-1007-azure_5.3.0-1007.8~18.04.1_amd64.deb
Files:
 b6e99febbf358e3c3cf611f8bee5e8ad 56272 devel optional linux-azure-5.3-cloud-tools-5.3.0-1007_5.3.0-1007.8~18.04.1_amd64.deb
 cf37d1797261d56d42ed0b37929a4520 10964552 devel optional linux-azure-5.3-headers-5.3.0-1007_5.3.0-1007.8~18.04.1_all.deb
 72a756841898e8ede6ded3af48f6b7af 5090476 devel optional linux-azure-5.3-tools-5.3.0-1007_5.3.0-1007.8~18.04.1_amd64.deb
 b6d15b11aeab782e78e278c7e3055bae 17032 devel optional linux-azure-5.3_5.3.0-1007.8~18.04.1_amd64.buildinfo
 77d0501d2ff42477c1d602ab8fcb0954 8015977 raw-signing - linux-azure-5.3_5.3.0-1007.8~18.04.1_amd64.tar.gz
 7b85a4e8f24b0f948f60280d35e2ba5e 24515 raw-translations - linux-azure-5.3_5.3.0-1007.8~18.04.1_amd64_translations.tar.gz
 e9398924d13b06b2abf7199e200a32ab 182484 kernel optional linux-buildinfo-5.3.0-1007-azure_5.3.0-1007.8~18.04.1_amd64.deb
 297de2000e1a9e277c07d3cb110c7f75 1884 devel optional linux-cloud-tools-5.3.0-1007-azure_5.3.0-1007.8~18.04.1_amd64.deb
 cd1b0676a9355d876c32893dec7cfdbf 958560 devel optional linux-headers-5.3.0-1007-azure_5.3.0-1007.8~18.04.1_amd64.deb
 88f000b5e9d9eb843fc073b15288f880 483752332 devel optional linux-image-unsigned-5.3.0-1007-azure-dbgsym_5.3.0-1007.8~18.04.1_amd64.ddeb
 2560cac0af1945e14ba91b3b7c6d079c 8044032 kernel optional linux-image-unsigned-5.3.0-1007-azure_5.3.0-1007.8~18.04.1_amd64.deb
 abbcfdeb39dbcb3256a8073ae7563bed 12159408 kernel optional linux-modules-5.3.0-1007-azure_5.3.0-1007.8~18.04.1_amd64.deb
 d6e334bb5a3663be54842e018d20c0d7 14315136 kernel optional linux-modules-extra-5.3.0-1007-azure_5.3.0-1007.8~18.04.1_amd64.deb
 cff898effafbba368fecc5b78fbd6b97 1976 devel optional linux-tools-5.3.0-1007-azure_5.3.0-1007.8~18.04.1_amd64.deb

More information about the Bionic-changes mailing list