[ubuntu/bionic-updates] linux-gke-5.4_5.4.0-1042.44~18.04.1_amd64.tar.gz - (Accepted)

[Ian May]

linux-gke-5.4 (5.4.0-1042.44~18.04.1) bionic; urgency=medium

  [ Ubuntu: 5.4.0-1042.44 ]

  * overlayfs calls vfs_setxattr without cap_convert_nscap
    - vfs: move cap_convert_nscap() call into vfs_setxattr()
  * CVE-2021-3492
    - SAUCE: shiftfs: free allocated memory in shiftfs_btrfs_ioctl_fd_replace()
      error paths
    - SAUCE: shiftfs: handle copy_to_user() return values correctly
  * CVE-2021-29154
    - SAUCE: bpf, x86: Validate computation of branch displacements for x86-64
    - SAUCE: bpf, x86: Validate computation of branch displacements for x86-32

  [ Ubuntu: 5.4.0-1041.43 ]

  * focal/linux-gke: 5.4.0-1041.43 -proposed tracker (LP: #1922201)
  *  Kernel panic on `5.4.0-1033-gke` (Kernel panic - not syncing: Aiee, killing
    interrupt handler!) possibly iscsi related  (LP: #1921825)
    - scsi: iscsi: iscsi_tcp: Avoid holding spinlock while calling getpeername()

Date: Tue, 13 Apr 2021 14:53:08 -0500
Changed-By: Ian May <ian.may at canonical.com>
Maintainer: Launchpad Build Daemon <buildd at lcy01-amd64-021.buildd>

-------------- next part --------------
Format: 1.8
Date: Tue, 13 Apr 2021 14:53:08 -0500
Source: linux-gke-5.4
Binary: linux-gke-5.4-headers-5.4.0-1042 linux-gke-5.4-tools-5.4.0-1042 linux-image-unsigned-5.4.0-1042-gke linux-modules-5.4.0-1042-gke linux-modules-extra-5.4.0-1042-gke linux-headers-5.4.0-1042-gke linux-image-unsigned-5.4.0-1042-gke-dbgsym linux-tools-5.4.0-1042-gke linux-buildinfo-5.4.0-1042-gke
Architecture: amd64 amd64_translations
Version: 5.4.0-1042.44~18.04.1
Distribution: bionic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd at lcy01-amd64-021.buildd>
Changed-By: Ian May <ian.may at canonical.com>
Description:
 linux-buildinfo-5.4.0-1042-gke - Linux kernel buildinfo for version 5.4.0 on 64 bit x86 SMP
 linux-gke-5.4-headers-5.4.0-1042 - Header files related to Linux kernel version 5.4.0
 linux-gke-5.4-tools-5.4.0-1042 - Linux kernel version specific tools for version 5.4.0-1042
 linux-headers-5.4.0-1042-gke - Linux kernel headers for version 5.4.0 on 64 bit x86 SMP
 linux-image-unsigned-5.4.0-1042-gke - Linux kernel image for version 5.4.0 on 64 bit x86 SMP
 linux-image-unsigned-5.4.0-1042-gke-dbgsym - Linux kernel debug image for version 5.4.0 on 64 bit x86 SMP
 linux-modules-5.4.0-1042-gke - Linux kernel extra modules for version 5.4.0 on 64 bit x86 SMP
 linux-modules-extra-5.4.0-1042-gke - Linux kernel extra modules for version 5.4.0 on 64 bit x86 SMP
 linux-tools-5.4.0-1042-gke - Linux kernel version specific tools for version 5.4.0-1042
Launchpad-Bugs-Fixed: 1921825 1922201
Changes:
 linux-gke-5.4 (5.4.0-1042.44~18.04.1) bionic; urgency=medium
 .
   [ Ubuntu: 5.4.0-1042.44 ]
 .
   * overlayfs calls vfs_setxattr without cap_convert_nscap
     - vfs: move cap_convert_nscap() call into vfs_setxattr()
   * CVE-2021-3492
     - SAUCE: shiftfs: free allocated memory in shiftfs_btrfs_ioctl_fd_replace()
       error paths
     - SAUCE: shiftfs: handle copy_to_user() return values correctly
   * CVE-2021-29154
     - SAUCE: bpf, x86: Validate computation of branch displacements for x86-64
     - SAUCE: bpf, x86: Validate computation of branch displacements for x86-32
 .
   [ Ubuntu: 5.4.0-1041.43 ]
 .
   * focal/linux-gke: 5.4.0-1041.43 -proposed tracker (LP: #1922201)
   *  Kernel panic on `5.4.0-1033-gke` (Kernel panic - not syncing: Aiee, killing
     interrupt handler!) possibly iscsi related  (LP: #1921825)
     - scsi: iscsi: iscsi_tcp: Avoid holding spinlock while calling getpeername()
Checksums-Sha1:
 bc28a5d118769a67dbb8aca004faf675e8d66cf3 453700 linux-buildinfo-5.4.0-1042-gke_5.4.0-1042.44~18.04.1_amd64.deb
 c36433ba4833c8bc7462c1083cefab53388b48ef 11033968 linux-gke-5.4-headers-5.4.0-1042_5.4.0-1042.44~18.04.1_amd64.deb
 05461fdd7a343bb3913e83c45e67416effe8ba2b 4902740 linux-gke-5.4-tools-5.4.0-1042_5.4.0-1042.44~18.04.1_amd64.deb
 82d1138a6fd0f4f9e6ea5236012ffdeb6c9208d9 17008 linux-gke-5.4_5.4.0-1042.44~18.04.1_amd64.buildinfo
 299a9a6e99993bbffda278ec5adb6187b4b2ce80 9020478 linux-gke-5.4_5.4.0-1042.44~18.04.1_amd64.tar.gz
 fde41e23b1bf390f51e1a9a1e21c0135dcd1173c 28216 linux-gke-5.4_5.4.0-1042.44~18.04.1_amd64_translations.tar.gz
 528f90e40715f2d6dbcc9f384c2735b25c5b88fd 1362532 linux-headers-5.4.0-1042-gke_5.4.0-1042.44~18.04.1_amd64.deb
 f79df6802574fccaa46a5c9b6b0a15c546173fa8 868344712 linux-image-unsigned-5.4.0-1042-gke-dbgsym_5.4.0-1042.44~18.04.1_amd64.ddeb
 856586dfb40987e0ffd1fdc12b4b51b2f48056d6 9109508 linux-image-unsigned-5.4.0-1042-gke_5.4.0-1042.44~18.04.1_amd64.deb
 38bbff41c751f76e964b5d7771976619ba7f5fae 14338140 linux-modules-5.4.0-1042-gke_5.4.0-1042.44~18.04.1_amd64.deb
 d3ae38cf8988114dc62de8b3b5e2a931382d19cb 33533292 linux-modules-extra-5.4.0-1042-gke_5.4.0-1042.44~18.04.1_amd64.deb
 c34071b69c8833f6c6ed61f2073f69eb989f191e 1968 linux-tools-5.4.0-1042-gke_5.4.0-1042.44~18.04.1_amd64.deb
Checksums-Sha256:
 6db05342f542504ac42cfa05832b36226a099202c81b7276190d14bdb368c9aa 453700 linux-buildinfo-5.4.0-1042-gke_5.4.0-1042.44~18.04.1_amd64.deb
 cd9b1e426f4158fa5096270601b34e11e041ec95eb96d5a88548318224c84e71 11033968 linux-gke-5.4-headers-5.4.0-1042_5.4.0-1042.44~18.04.1_amd64.deb
 8d52769fc3d5d4d2c16b6580105296280f577e3f1ffedaf25d89773375e57462 4902740 linux-gke-5.4-tools-5.4.0-1042_5.4.0-1042.44~18.04.1_amd64.deb
 4acd03b223ede3c2e13bcd3553afdc0a3c07ab191aa9c3b01987333bc49d3d54 17008 linux-gke-5.4_5.4.0-1042.44~18.04.1_amd64.buildinfo
 7f918025ca1cc85fff4d3e678a655835cbc4b6dbade9320141ba0b9546865df1 9020478 linux-gke-5.4_5.4.0-1042.44~18.04.1_amd64.tar.gz
 4f67270dad862237f44f0a3b903fe17379efa494bfa047258b42374619e9aee6 28216 linux-gke-5.4_5.4.0-1042.44~18.04.1_amd64_translations.tar.gz
 cf9440e566d045d145660aac814433bb9abab27371425d8e7333efc6c8839bec 1362532 linux-headers-5.4.0-1042-gke_5.4.0-1042.44~18.04.1_amd64.deb
 8684407fbd580ac906264420645e327a7f0c802e028eabfe369b7c2e9ab6d41e 868344712 linux-image-unsigned-5.4.0-1042-gke-dbgsym_5.4.0-1042.44~18.04.1_amd64.ddeb
 96cd4acfd91d0280abb8d01a9f7d0a0928e2759f166ad9d7d383d4e5ab2cbf4c 9109508 linux-image-unsigned-5.4.0-1042-gke_5.4.0-1042.44~18.04.1_amd64.deb
 3d45cc3db3cbfa9ba24fe297f39ca83af045801b15ad45336da3e6abb523ca52 14338140 linux-modules-5.4.0-1042-gke_5.4.0-1042.44~18.04.1_amd64.deb
 6629fc2866a0838b2423004c3a85bc7471d3118eacf16498d554949c03ecd4f0 33533292 linux-modules-extra-5.4.0-1042-gke_5.4.0-1042.44~18.04.1_amd64.deb
 f9ca4edf326634c8cf7810ef8deadf109367d7c13006874c36764f605d9eceb0 1968 linux-tools-5.4.0-1042-gke_5.4.0-1042.44~18.04.1_amd64.deb
Files:
 1c83c452f921afa4e39e9d6432292254 453700 kernel optional linux-buildinfo-5.4.0-1042-gke_5.4.0-1042.44~18.04.1_amd64.deb
 56b7425edadb9b78a75bd8958dbe332e 11033968 devel optional linux-gke-5.4-headers-5.4.0-1042_5.4.0-1042.44~18.04.1_amd64.deb
 805ff9ef1aa2e9fda0a15b9e198e4512 4902740 devel optional linux-gke-5.4-tools-5.4.0-1042_5.4.0-1042.44~18.04.1_amd64.deb
 6c39364608041fa0058238b92170ea02 17008 devel optional linux-gke-5.4_5.4.0-1042.44~18.04.1_amd64.buildinfo
 4705b53d161076a2a47506b37980e508 9020478 raw-signing - linux-gke-5.4_5.4.0-1042.44~18.04.1_amd64.tar.gz
 db3bcabc156786d74f19fd6203063642 28216 raw-translations - linux-gke-5.4_5.4.0-1042.44~18.04.1_amd64_translations.tar.gz
 cb2852a1013ab99aa04d17447fb0035d 1362532 devel optional linux-headers-5.4.0-1042-gke_5.4.0-1042.44~18.04.1_amd64.deb
 81bd30b72d5d0a236aba2186d4bb02cf 868344712 devel optional linux-image-unsigned-5.4.0-1042-gke-dbgsym_5.4.0-1042.44~18.04.1_amd64.ddeb
 f032e5326208c896693f6064820025cb 9109508 kernel optional linux-image-unsigned-5.4.0-1042-gke_5.4.0-1042.44~18.04.1_amd64.deb
 a7dc82a31600c5412c25edd9d85c978b 14338140 kernel optional linux-modules-5.4.0-1042-gke_5.4.0-1042.44~18.04.1_amd64.deb
 b7f0c12727438e2a64f614ae4651becf 33533292 kernel optional linux-modules-extra-5.4.0-1042-gke_5.4.0-1042.44~18.04.1_amd64.deb
 177478575811dcaa521f38790a4e2ec5 1968 devel optional linux-tools-5.4.0-1042-gke_5.4.0-1042.44~18.04.1_amd64.deb