[ubuntu/bionic-proposed] linux-gke-5.4_5.4.0-1027.28~18.04.1_amd64.tar.gz - (Accepted)

[Kleber Sacilotto de Souza]

linux-gke-5.4 (5.4.0-1027.28~18.04.1) bionic; urgency=medium

  [ Ubuntu: 5.4.0-1027.28 ]

  * CVE-2020-16119
    - SAUCE: dccp: avoid double free of ccid on child socket
  * CVE-2020-16120
    - Revert "UBUNTU: SAUCE: overlayfs: ensure mounter privileges when reading
      directories"
    - ovl: pass correct flags for opening real directory
    - ovl: switch to mounter creds in readdir
    - ovl: verify permissions in ovl_path_open()
    - ovl: call secutiry hook in ovl_real_ioctl()
    - ovl: check permission to open real file

Date: Thu, 01 Oct 2020 14:58:21 +0200
Changed-By: Kleber Sacilotto de Souza <kleber.souza at canonical.com>
Maintainer: Launchpad Build Daemon <buildd at lgw01-amd64-035.buildd>

-------------- next part --------------
Format: 1.8
Date: Thu, 01 Oct 2020 14:58:21 +0200
Source: linux-gke-5.4
Binary: linux-gke-5.4-headers-5.4.0-1027 linux-gke-5.4-tools-5.4.0-1027 linux-image-unsigned-5.4.0-1027-gke linux-modules-5.4.0-1027-gke linux-modules-extra-5.4.0-1027-gke linux-headers-5.4.0-1027-gke linux-image-unsigned-5.4.0-1027-gke-dbgsym linux-tools-5.4.0-1027-gke linux-buildinfo-5.4.0-1027-gke
Architecture: amd64 amd64_translations
Version: 5.4.0-1027.28~18.04.1
Distribution: bionic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd at lgw01-amd64-035.buildd>
Changed-By: Kleber Sacilotto de Souza <kleber.souza at canonical.com>
Description:
 linux-buildinfo-5.4.0-1027-gke - Linux kernel buildinfo for version 5.4.0 on 64 bit x86 SMP
 linux-gke-5.4-headers-5.4.0-1027 - Header files related to Linux kernel version 5.4.0
 linux-gke-5.4-tools-5.4.0-1027 - Linux kernel version specific tools for version 5.4.0-1027
 linux-headers-5.4.0-1027-gke - Linux kernel headers for version 5.4.0 on 64 bit x86 SMP
 linux-image-unsigned-5.4.0-1027-gke - Linux kernel image for version 5.4.0 on 64 bit x86 SMP
 linux-image-unsigned-5.4.0-1027-gke-dbgsym - Linux kernel debug image for version 5.4.0 on 64 bit x86 SMP
 linux-modules-5.4.0-1027-gke - Linux kernel extra modules for version 5.4.0 on 64 bit x86 SMP
 linux-modules-extra-5.4.0-1027-gke - Linux kernel extra modules for version 5.4.0 on 64 bit x86 SMP
 linux-tools-5.4.0-1027-gke - Linux kernel version specific tools for version 5.4.0-1027
Changes:
 linux-gke-5.4 (5.4.0-1027.28~18.04.1) bionic; urgency=medium
 .
   [ Ubuntu: 5.4.0-1027.28 ]
 .
   * CVE-2020-16119
     - SAUCE: dccp: avoid double free of ccid on child socket
   * CVE-2020-16120
     - Revert "UBUNTU: SAUCE: overlayfs: ensure mounter privileges when reading
       directories"
     - ovl: pass correct flags for opening real directory
     - ovl: switch to mounter creds in readdir
     - ovl: verify permissions in ovl_path_open()
     - ovl: call secutiry hook in ovl_real_ioctl()
     - ovl: check permission to open real file
Checksums-Sha1:
 bb6e6dbeb3928f90c04b16ada28e498c6885c2d4 376060 linux-buildinfo-5.4.0-1027-gke_5.4.0-1027.28~18.04.1_amd64.deb
 2f841dcc16631d97a4548d1bd7d27e64b92835b3 11085728 linux-gke-5.4-headers-5.4.0-1027_5.4.0-1027.28~18.04.1_amd64.deb
 79abdb56607ba63cd702329effe17d4a91210f65 4963796 linux-gke-5.4-tools-5.4.0-1027_5.4.0-1027.28~18.04.1_amd64.deb
 f945c9e87d043190fd93d52322caf29243a67c8c 16959 linux-gke-5.4_5.4.0-1027.28~18.04.1_amd64.buildinfo
 92c97d1246f8a2d08b41de8612e4efc7b7be684d 8960779 linux-gke-5.4_5.4.0-1027.28~18.04.1_amd64.tar.gz
 00f2d1acb2abd4e69a6bed41f00be4aa253aea9a 28232 linux-gke-5.4_5.4.0-1027.28~18.04.1_amd64_translations.tar.gz
 748b25ac6b554dc0d2f471b0116defe0efaadf0d 1264128 linux-headers-5.4.0-1027-gke_5.4.0-1027.28~18.04.1_amd64.deb
 16b695673ae270540c0451ff9117771ba785f7ad 865790756 linux-image-unsigned-5.4.0-1027-gke-dbgsym_5.4.0-1027.28~18.04.1_amd64.ddeb
 fba9cfb1080bfcd9d473868e7d72f70d115a8f06 9111576 linux-image-unsigned-5.4.0-1027-gke_5.4.0-1027.28~18.04.1_amd64.deb
 71e3f3e070c80587390c3781df313d67e5cfad32 14047868 linux-modules-5.4.0-1027-gke_5.4.0-1027.28~18.04.1_amd64.deb
 2a886bc4144157fbcf6ba86a59b0b110b09eb260 32854664 linux-modules-extra-5.4.0-1027-gke_5.4.0-1027.28~18.04.1_amd64.deb
 8dd3a26dfb04d83b9c4f1055b06f3ee7ca4ada2d 1964 linux-tools-5.4.0-1027-gke_5.4.0-1027.28~18.04.1_amd64.deb
Checksums-Sha256:
 764d9ec046330b642028a2db09898b8e9d0de82f8db84b2f3f80b1459e21dc1d 376060 linux-buildinfo-5.4.0-1027-gke_5.4.0-1027.28~18.04.1_amd64.deb
 639f74f949514be85e144c15178e771478fc40867a7ed3f402350c665613c863 11085728 linux-gke-5.4-headers-5.4.0-1027_5.4.0-1027.28~18.04.1_amd64.deb
 0c076a651d88381f45c7d54d032e62d83eb8fd2257fe7b1a2263a83ee449c64b 4963796 linux-gke-5.4-tools-5.4.0-1027_5.4.0-1027.28~18.04.1_amd64.deb
 2e06c2b4e66b85f068c9d79cebd4329dce6cc2bc61856ff39b19b971a0a10792 16959 linux-gke-5.4_5.4.0-1027.28~18.04.1_amd64.buildinfo
 0816cc08bf57f61306fdefc5bd2087d1d4417522debc63ea44467fbae9b0ba92 8960779 linux-gke-5.4_5.4.0-1027.28~18.04.1_amd64.tar.gz
 704d6084f6f4e4252ca8819f0c07ac47226acd2acfb3eb2db7bedf246daa7ba5 28232 linux-gke-5.4_5.4.0-1027.28~18.04.1_amd64_translations.tar.gz
 36480eebef2888c445457183e92a539cdd8950fe2fbe051491b533cda2c00b5a 1264128 linux-headers-5.4.0-1027-gke_5.4.0-1027.28~18.04.1_amd64.deb
 b50ec42bb49be604606d21f98407e0dffc8302e0033f88160b95c8b4c203077f 865790756 linux-image-unsigned-5.4.0-1027-gke-dbgsym_5.4.0-1027.28~18.04.1_amd64.ddeb
 4f438f6831cec85bc0b34fb9a9174bb900a6e982bb7af7a6983506ff24638adc 9111576 linux-image-unsigned-5.4.0-1027-gke_5.4.0-1027.28~18.04.1_amd64.deb
 9b6758558ad0df18b12c1ec9340c030b32a9b0919cb06864818c655673f200ef 14047868 linux-modules-5.4.0-1027-gke_5.4.0-1027.28~18.04.1_amd64.deb
 2038154317ec7fd24d1a3ba7753f69ac2c5b611016f1f9e3b741448364af9503 32854664 linux-modules-extra-5.4.0-1027-gke_5.4.0-1027.28~18.04.1_amd64.deb
 8bf71c85ac13902c3d9bd624bd3ee61d8a9a32a29e4865a1cfab51457ac9d98c 1964 linux-tools-5.4.0-1027-gke_5.4.0-1027.28~18.04.1_amd64.deb
Files:
 c023f5f896995c930853e299bd563235 376060 kernel optional linux-buildinfo-5.4.0-1027-gke_5.4.0-1027.28~18.04.1_amd64.deb
 7952c3b8bf57cc6278bbb78bc5494788 11085728 devel optional linux-gke-5.4-headers-5.4.0-1027_5.4.0-1027.28~18.04.1_amd64.deb
 5d9fdee4e67c14d28e19a56fbba0774c 4963796 devel optional linux-gke-5.4-tools-5.4.0-1027_5.4.0-1027.28~18.04.1_amd64.deb
 dee60102b68e99bbd5d1bc5b953d0302 16959 devel optional linux-gke-5.4_5.4.0-1027.28~18.04.1_amd64.buildinfo
 f5407b85f01844b6eea79d87bed32c8c 8960779 raw-signing - linux-gke-5.4_5.4.0-1027.28~18.04.1_amd64.tar.gz
 9e708e241418b241600008308fe5b033 28232 raw-translations - linux-gke-5.4_5.4.0-1027.28~18.04.1_amd64_translations.tar.gz
 b51b150261daa37ac6a82af9ba7da16b 1264128 devel optional linux-headers-5.4.0-1027-gke_5.4.0-1027.28~18.04.1_amd64.deb
 4ae39e23a96001f28c4853b7b7b88755 865790756 devel optional linux-image-unsigned-5.4.0-1027-gke-dbgsym_5.4.0-1027.28~18.04.1_amd64.ddeb
 b0e63f4f665aa6a1cce2e025148835f4 9111576 kernel optional linux-image-unsigned-5.4.0-1027-gke_5.4.0-1027.28~18.04.1_amd64.deb
 809d95495a89aa9452965bb9e494df77 14047868 kernel optional linux-modules-5.4.0-1027-gke_5.4.0-1027.28~18.04.1_amd64.deb
 2548e588b259d6b26e185689d6c4268a 32854664 kernel optional linux-modules-extra-5.4.0-1027-gke_5.4.0-1027.28~18.04.1_amd64.deb
 a05a802d998b96e7a5f659c68444dc8d 1964 devel optional linux-tools-5.4.0-1027-gke_5.4.0-1027.28~18.04.1_amd64.deb