[ubuntu/disco-proposed] linux-oracle_5.0.0-1007.12_amd64.tar.gz - (Accepted)

Stefan Bader stefan.bader at canonical.com
Tue Nov 12 18:13:09 UTC 2019 

linux-oracle (5.0.0-1007.12) disco; urgency=medium

  * CVE-2019-11135
    - [Config] oracle: Disable TSX by default when possible

  [ Ubuntu: 5.0.0-35.38 ]

  * [REGRESSION]  md/raid0: cannot assemble multi-zone RAID0 with default_layout
    setting (LP: #1849682)
    - SAUCE: Fix revert "md/raid0: avoid RAID0 data corruption due to layout
      confusion."
  * refcount underflow and type confusion in shiftfs (LP: #1850867) // CVE-2019-15793
    - SAUCE: shiftfs: Correct id translation for lower fs operations
    - SAUCE: shiftfs: prevent type confusion
    - SAUCE: shiftfs: Fix refcount underflow in btrfs ioctl handling
  * CVE-2018-12207
    - kvm: Convert kvm_lock to a mutex
    - kvm: x86: Do not release the page inside mmu_set_spte()
    - KVM: x86: make FNAME(fetch) and __direct_map more similar
    - KVM: x86: remove now unneeded hugepage gfn adjustment
    - KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON
    - KVM: x86: add tracepoints around __direct_map and FNAME(fetch)
    - kvm: x86, powerpc: do not allow clearing largepages debugfs entry
    - SAUCE: KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is
      active
    - SAUCE: x86: Add ITLB_MULTIHIT bug infrastructure
    - SAUCE: kvm: mmu: ITLB_MULTIHIT mitigation
    - SAUCE: kvm: Add helper function for creating VM worker threads
    - SAUCE: kvm: x86: mmu: Recovery of shattered NX large pages
    - SAUCE: cpu/speculation: Uninline and export CPU mitigations helpers
    - SAUCE: kvm: x86: mmu: Apply global mitigations knob to ITLB_MULTIHIT
  * CVE-2019-11135
    - KVM: x86: use Intel speculation bugs and features as derived in generic x86
      code
    - x86/msr: Add the IA32_TSX_CTRL MSR
    - x86/cpu: Add a helper function x86_read_arch_cap_msr()
    - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default
    - x86/speculation/taa: Add mitigation for TSX Async Abort
    - x86/speculation/taa: Add sysfs reporting for TSX Async Abort
    - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled
    - x86/tsx: Add "auto" option to the tsx= cmdline parameter
    - x86/speculation/taa: Add documentation for TSX Async Abort
    - x86/tsx: Add config options to set tsx=on|off|auto
    - SAUCE: x86/speculation/taa: Call tsx_init()
    - [Config] Disable TSX by default when possible
  * CVE-2019-0154
    - SAUCE: drm/i915: Lower RM timeout to avoid DSI hard hangs
    - SAUCE: drm/i915/gen8+: Add RC6 CTX corruption WA
  * CVE-2019-0155
    - SAUCE: drm/i915: Rename gen7 cmdparser tables
    - SAUCE: drm/i915: Disable Secure Batches for gen6+
    - SAUCE: drm/i915: Remove Master tables from cmdparser
    - SAUCE: drm/i915: Add support for mandatory cmdparsing
    - SAUCE: drm/i915: Support ro ppgtt mapped cmdparser shadow buffers
    - SAUCE: drm/i915: Allow parsing of unsized batches
    - SAUCE: drm/i915: Add gen9 BCS cmdparsing
    - SAUCE: drm/i915/cmdparser: Use explicit goto for error paths
    - SAUCE: drm/i915/cmdparser: Add support for backward jumps
    - SAUCE: drm/i915/cmdparser: Ignore Length operands during command matching

  [ Ubuntu: 5.0.0-34.36 ]

  * disco/linux: <version to be filled> -proposed tracker (LP: #1850574)
  * [REGRESSION]  md/raid0: cannot assemble multi-zone RAID0 with default_layout
    setting (LP: #1849682)
    - Revert "md/raid0: avoid RAID0 data corruption due to layout confusion."

Date: Mon, 11 Nov 2019 12:53:32 +0100
Changed-By: Stefan Bader <stefan.bader at canonical.com>
Maintainer: Launchpad Build Daemon <buildd at lcy01-amd64-027.buildd>

-------------- next part --------------
Format: 1.8
Date: Mon, 11 Nov 2019 12:53:32 +0100
Source: linux-oracle
Binary: linux-buildinfo-5.0.0-1007-oracle linux-headers-5.0.0-1007-oracle linux-image-unsigned-5.0.0-1007-oracle linux-modules-5.0.0-1007-oracle linux-modules-extra-5.0.0-1007-oracle linux-oracle-headers-5.0.0-1007 linux-oracle-tools-5.0.0-1007 linux-tools-5.0.0-1007-oracle
Architecture: amd64 all amd64_translations
Version: 5.0.0-1007.12
Distribution: disco
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd at lcy01-amd64-027.buildd>
Changed-By: Stefan Bader <stefan.bader at canonical.com>
Description:
 linux-buildinfo-5.0.0-1007-oracle - Linux kernel buildinfo for version 5.0.0 on 64 bit x86 SMP
 linux-headers-5.0.0-1007-oracle - Oracle Linux kernel headers for version 5.0.0 on 64 bit x86 SMP
 linux-image-unsigned-5.0.0-1007-oracle - Oracle Linux kernel image for version 5.0.0 on 64 bit x86 SMP
 linux-modules-5.0.0-1007-oracle - Oracle Linux kernel extra modules for version 5.0.0 on 64 bit x86
 linux-modules-extra-5.0.0-1007-oracle - Oracle Linux kernel extra modules for version 5.0.0 on 64 bit x86
 linux-oracle-headers-5.0.0-1007 - Header files related to Oracle Linux kernel version 5.0.0
 linux-oracle-tools-5.0.0-1007 - Oracle Linux kernel version specific tools for version 5.0.0-1007
 linux-tools-5.0.0-1007-oracle - Oracle Linux kernel version specific tools for version 5.0.0-1007
Launchpad-Bugs-Fixed: 1849682 1850574 1850867
Changes:
 linux-oracle (5.0.0-1007.12) disco; urgency=medium
 .
   * CVE-2019-11135
     - [Config] oracle: Disable TSX by default when possible
 .
   [ Ubuntu: 5.0.0-35.38 ]
 .
   * [REGRESSION]  md/raid0: cannot assemble multi-zone RAID0 with default_layout
     setting (LP: #1849682)
     - SAUCE: Fix revert "md/raid0: avoid RAID0 data corruption due to layout
       confusion."
   * refcount underflow and type confusion in shiftfs (LP: #1850867) // CVE-2019-15793
     - SAUCE: shiftfs: Correct id translation for lower fs operations
     - SAUCE: shiftfs: prevent type confusion
     - SAUCE: shiftfs: Fix refcount underflow in btrfs ioctl handling
   * CVE-2018-12207
     - kvm: Convert kvm_lock to a mutex
     - kvm: x86: Do not release the page inside mmu_set_spte()
     - KVM: x86: make FNAME(fetch) and __direct_map more similar
     - KVM: x86: remove now unneeded hugepage gfn adjustment
     - KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON
     - KVM: x86: add tracepoints around __direct_map and FNAME(fetch)
     - kvm: x86, powerpc: do not allow clearing largepages debugfs entry
     - SAUCE: KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is
       active
     - SAUCE: x86: Add ITLB_MULTIHIT bug infrastructure
     - SAUCE: kvm: mmu: ITLB_MULTIHIT mitigation
     - SAUCE: kvm: Add helper function for creating VM worker threads
     - SAUCE: kvm: x86: mmu: Recovery of shattered NX large pages
     - SAUCE: cpu/speculation: Uninline and export CPU mitigations helpers
     - SAUCE: kvm: x86: mmu: Apply global mitigations knob to ITLB_MULTIHIT
   * CVE-2019-11135
     - KVM: x86: use Intel speculation bugs and features as derived in generic x86
       code
     - x86/msr: Add the IA32_TSX_CTRL MSR
     - x86/cpu: Add a helper function x86_read_arch_cap_msr()
     - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default
     - x86/speculation/taa: Add mitigation for TSX Async Abort
     - x86/speculation/taa: Add sysfs reporting for TSX Async Abort
     - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled
     - x86/tsx: Add "auto" option to the tsx= cmdline parameter
     - x86/speculation/taa: Add documentation for TSX Async Abort
     - x86/tsx: Add config options to set tsx=on|off|auto
     - SAUCE: x86/speculation/taa: Call tsx_init()
     - [Config] Disable TSX by default when possible
   * CVE-2019-0154
     - SAUCE: drm/i915: Lower RM timeout to avoid DSI hard hangs
     - SAUCE: drm/i915/gen8+: Add RC6 CTX corruption WA
   * CVE-2019-0155
     - SAUCE: drm/i915: Rename gen7 cmdparser tables
     - SAUCE: drm/i915: Disable Secure Batches for gen6+
     - SAUCE: drm/i915: Remove Master tables from cmdparser
     - SAUCE: drm/i915: Add support for mandatory cmdparsing
     - SAUCE: drm/i915: Support ro ppgtt mapped cmdparser shadow buffers
     - SAUCE: drm/i915: Allow parsing of unsized batches
     - SAUCE: drm/i915: Add gen9 BCS cmdparsing
     - SAUCE: drm/i915/cmdparser: Use explicit goto for error paths
     - SAUCE: drm/i915/cmdparser: Add support for backward jumps
     - SAUCE: drm/i915/cmdparser: Ignore Length operands during command matching
 .
   [ Ubuntu: 5.0.0-34.36 ]
 .
   * disco/linux: <version to be filled> -proposed tracker (LP: #1850574)
   * [REGRESSION]  md/raid0: cannot assemble multi-zone RAID0 with default_layout
     setting (LP: #1849682)
     - Revert "md/raid0: avoid RAID0 data corruption due to layout confusion."
Checksums-Sha1:
 997cecca651bc487111f87ef577a5eb628705b43 381260 linux-buildinfo-5.0.0-1007-oracle_5.0.0-1007.12_amd64.deb
 6958fbff08143f457a6b4e16380dd96991c8c886 1303040 linux-headers-5.0.0-1007-oracle_5.0.0-1007.12_amd64.deb
 f6bbea6797d00e2fe2fa22e3230b8421c10cce98 865072284 linux-image-unsigned-5.0.0-1007-oracle-dbgsym_5.0.0-1007.12_amd64.ddeb
 b048ca61a8d1f8093e1e8c1774465ebbe9bd53c1 9230380 linux-image-unsigned-5.0.0-1007-oracle_5.0.0-1007.12_amd64.deb
 1925b46f06a1fae5a01e5687d7c8f97ca2190958 13730316 linux-modules-5.0.0-1007-oracle_5.0.0-1007.12_amd64.deb
 18408dc54bad5dbdf40964004c45091b2f08630c 32744076 linux-modules-extra-5.0.0-1007-oracle_5.0.0-1007.12_amd64.deb
 351d88ddd3b8448c3908868b6af4d48cf15ab106 10827520 linux-oracle-headers-5.0.0-1007_5.0.0-1007.12_all.deb
 1d84dc623334c7b54124fae8f623a1320b08cf09 5537488 linux-oracle-tools-5.0.0-1007_5.0.0-1007.12_amd64.deb
 466929fc6a052cdf0ad9e31cfd3268cc00b83372 15449 linux-oracle_5.0.0-1007.12_amd64.buildinfo
 92f5653a92ef9a52867c0f80b83645e6c69af959 9074693 linux-oracle_5.0.0-1007.12_amd64.tar.gz
 30b29f7f3774e721746870e48ff1f905bfd683a0 24513 linux-oracle_5.0.0-1007.12_amd64_translations.tar.gz
 2e2bac5911393bfb332c1ede030e374b07d5f834 1964 linux-tools-5.0.0-1007-oracle_5.0.0-1007.12_amd64.deb
Checksums-Sha256:
 4f9f18774cdcf42e11b16ac0e1b7272eb8e6df8f7420edf806acbaa6042ab4a6 381260 linux-buildinfo-5.0.0-1007-oracle_5.0.0-1007.12_amd64.deb
 08c8fafe701b2b67e3d1b46d1a779e34fed4260de8d0eb984b72432f0450ac1a 1303040 linux-headers-5.0.0-1007-oracle_5.0.0-1007.12_amd64.deb
 a2b75854db308278f80ac14b8b52e195183acdfa4add29ff64647878e06447b8 865072284 linux-image-unsigned-5.0.0-1007-oracle-dbgsym_5.0.0-1007.12_amd64.ddeb
 5afe45b7bf7e184b73415db9d33a425a3a733c82004da90b1abd69c12fb727e2 9230380 linux-image-unsigned-5.0.0-1007-oracle_5.0.0-1007.12_amd64.deb
 a70d136456cd2e31a58e6ace59613054da63f305251bc0e5ca2b9aa54b573a56 13730316 linux-modules-5.0.0-1007-oracle_5.0.0-1007.12_amd64.deb
 08eb0cd7596e96b91b3a26fb62349f0a58bcbe95c198d0a8b57d15645a5b6282 32744076 linux-modules-extra-5.0.0-1007-oracle_5.0.0-1007.12_amd64.deb
 4d15d55fcadf5bb13fc1cafd940f4ceaef5305075ddfc4a80e4d745d8b931896 10827520 linux-oracle-headers-5.0.0-1007_5.0.0-1007.12_all.deb
 8d9d23e5c08576ee0a80f81e0636fab33e7a1f3bfec64aba20884e5a13ef2fcd 5537488 linux-oracle-tools-5.0.0-1007_5.0.0-1007.12_amd64.deb
 946c4da2040386e91944f27f1394d4ab6d54c960575f5ba5c3d0d5d4aca28945 15449 linux-oracle_5.0.0-1007.12_amd64.buildinfo
 cca126755ead4ad80f1e1219519ef18a63c1094d487de6cad645afb8da0f2ca0 9074693 linux-oracle_5.0.0-1007.12_amd64.tar.gz
 01cf9894d61267903db8280f6935600855df62c526e3429ebd241f131774cade 24513 linux-oracle_5.0.0-1007.12_amd64_translations.tar.gz
 9584cc267eb572156350b5542f15cc419900d0db4b672c6c90bce5fccb62c473 1964 linux-tools-5.0.0-1007-oracle_5.0.0-1007.12_amd64.deb
Files:
 7a9a5c7c4ca920a5b95091822aa2a754 381260 kernel optional linux-buildinfo-5.0.0-1007-oracle_5.0.0-1007.12_amd64.deb
 355de0ecd4dc629f10723550dfb8a1e1 1303040 devel optional linux-headers-5.0.0-1007-oracle_5.0.0-1007.12_amd64.deb
 305d2e437d59b398f4d94b5aed3d1587 865072284 devel optional linux-image-unsigned-5.0.0-1007-oracle-dbgsym_5.0.0-1007.12_amd64.ddeb
 a292f227f6a4172e89fe6e8de3dc8b03 9230380 kernel optional linux-image-unsigned-5.0.0-1007-oracle_5.0.0-1007.12_amd64.deb
 9595228b1f4c8fd74ccbed05836cea68 13730316 kernel optional linux-modules-5.0.0-1007-oracle_5.0.0-1007.12_amd64.deb
 e21d73f064159a1cc31318d79f0e39f5 32744076 kernel optional linux-modules-extra-5.0.0-1007-oracle_5.0.0-1007.12_amd64.deb
 ac3c04d8fc43f08c80e433cfbfa5c624 10827520 devel optional linux-oracle-headers-5.0.0-1007_5.0.0-1007.12_all.deb
 1588d4a6eb6d9e0e491c56d624a6d67b 5537488 devel optional linux-oracle-tools-5.0.0-1007_5.0.0-1007.12_amd64.deb
 5e637cecf0010d6e5b90a4d8d2b038ac 15449 devel optional linux-oracle_5.0.0-1007.12_amd64.buildinfo
 b6a10dd500bc0d1bed8ef6b5846b1348 9074693 raw-signing - linux-oracle_5.0.0-1007.12_amd64.tar.gz
 0a193dcdc2b91769179d2341335d9f39 24513 raw-translations - linux-oracle_5.0.0-1007.12_amd64_translations.tar.gz
 24c800b8136971864d809140c7b632cf 1964 devel optional linux-tools-5.0.0-1007-oracle_5.0.0-1007.12_amd64.deb

More information about the Disco-changes mailing list