[ubuntu/eoan-updates] linux-oracle_5.3.0-1006.7_amd64.tar.gz - (Accepted)

Andrea Righi andrea.righi at canonical.com
Tue Nov 12 22:27:08 UTC 2019 

linux-oracle (5.3.0-1006.7) eoan; urgency=medium

  * CVE-2019-11135
    - [Config] Disable TSX by default when possible

  [ Ubuntu: 5.3.0-22.24 ]

  * [REGRESSION]  md/raid0: cannot assemble multi-zone RAID0 with default_layout
    setting (LP: #1849682)
    - Revert "md/raid0: avoid RAID0 data corruption due to layout confusion."
  * refcount underflow and type confusion in shiftfs (LP: #1850867) // CVE-2019-15793
    - SAUCE: shiftfs: Correct id translation for lower fs operations
    - SAUCE: shiftfs: prevent type confusion
    - SAUCE: shiftfs: Fix refcount underflow in btrfs ioctl handling
  * CVE-2018-12207
    - kvm: x86, powerpc: do not allow clearing largepages debugfs entry
    - SAUCE: KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is
      active
    - SAUCE: x86: Add ITLB_MULTIHIT bug infrastructure
    - SAUCE: kvm: mmu: ITLB_MULTIHIT mitigation
    - SAUCE: kvm: Add helper function for creating VM worker threads
    - SAUCE: kvm: x86: mmu: Recovery of shattered NX large pages
    - SAUCE: cpu/speculation: Uninline and export CPU mitigations helpers
    - SAUCE: kvm: x86: mmu: Apply global mitigations knob to ITLB_MULTIHIT
  * CVE-2019-11135
    - x86/msr: Add the IA32_TSX_CTRL MSR
    - x86/cpu: Add a helper function x86_read_arch_cap_msr()
    - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default
    - x86/speculation/taa: Add mitigation for TSX Async Abort
    - x86/speculation/taa: Add sysfs reporting for TSX Async Abort
    - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled
    - x86/tsx: Add "auto" option to the tsx= cmdline parameter
    - x86/speculation/taa: Add documentation for TSX Async Abort
    - x86/tsx: Add config options to set tsx=on|off|auto
    - [Config] Disable TSX by default when possible
  * CVE-2019-0154
    - SAUCE: drm/i915: Lower RM timeout to avoid DSI hard hangs
    - SAUCE: drm/i915/gen8+: Add RC6 CTX corruption WA
  * CVE-2019-0155
    - SAUCE: drm/i915: Rename gen7 cmdparser tables
    - SAUCE: drm/i915: Disable Secure Batches for gen6+
    - SAUCE: drm/i915: Remove Master tables from cmdparser
    - SAUCE: drm/i915: Add support for mandatory cmdparsing
    - SAUCE: drm/i915: Support ro ppgtt mapped cmdparser shadow buffers
    - SAUCE: drm/i915: Allow parsing of unsized batches
    - SAUCE: drm/i915: Add gen9 BCS cmdparsing
    - SAUCE: drm/i915/cmdparser: Use explicit goto for error paths
    - SAUCE: drm/i915/cmdparser: Add support for backward jumps
    - SAUCE: drm/i915/cmdparser: Ignore Length operands during command matching

Date: Mon, 11 Nov 2019 14:54:13 +0100
Changed-By: Andrea Righi <andrea.righi at canonical.com>
Maintainer: Launchpad Build Daemon <buildd at lgw01-amd64-032.buildd>

-------------- next part --------------
Format: 1.8
Date: Mon, 11 Nov 2019 14:54:13 +0100
Source: linux-oracle
Binary: linux-buildinfo-5.3.0-1006-oracle linux-headers-5.3.0-1006-oracle linux-image-unsigned-5.3.0-1006-oracle linux-modules-5.3.0-1006-oracle linux-modules-extra-5.3.0-1006-oracle linux-oracle-headers-5.3.0-1006 linux-oracle-tools-5.3.0-1006 linux-tools-5.3.0-1006-oracle
Architecture: amd64 all amd64_translations
Version: 5.3.0-1006.7
Distribution: eoan
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd at lgw01-amd64-032.buildd>
Changed-By: Andrea Righi <andrea.righi at canonical.com>
Description:
 linux-buildinfo-5.3.0-1006-oracle - Linux kernel buildinfo for version 5.3.0 on 64 bit x86 SMP
 linux-headers-5.3.0-1006-oracle - Oracle Linux kernel headers for version 5.3.0 on 64 bit x86 SMP
 linux-image-unsigned-5.3.0-1006-oracle - Oracle Linux kernel image for version 5.3.0 on 64 bit x86 SMP
 linux-modules-5.3.0-1006-oracle - Oracle Linux kernel extra modules for version 5.3.0 on 64 bit x86
 linux-modules-extra-5.3.0-1006-oracle - Oracle Linux kernel extra modules for version 5.3.0 on 64 bit x86
 linux-oracle-headers-5.3.0-1006 - Header files related to Oracle Linux kernel version 5.3.0
 linux-oracle-tools-5.3.0-1006 - Oracle Linux kernel version specific tools for version 5.3.0-1006
 linux-tools-5.3.0-1006-oracle - Oracle Linux kernel version specific tools for version 5.3.0-1006
Launchpad-Bugs-Fixed: 1849682 1850867
Changes:
 linux-oracle (5.3.0-1006.7) eoan; urgency=medium
 .
   * CVE-2019-11135
     - [Config] Disable TSX by default when possible
 .
   [ Ubuntu: 5.3.0-22.24 ]
 .
   * [REGRESSION]  md/raid0: cannot assemble multi-zone RAID0 with default_layout
     setting (LP: #1849682)
     - Revert "md/raid0: avoid RAID0 data corruption due to layout confusion."
   * refcount underflow and type confusion in shiftfs (LP: #1850867) // CVE-2019-15793
     - SAUCE: shiftfs: Correct id translation for lower fs operations
     - SAUCE: shiftfs: prevent type confusion
     - SAUCE: shiftfs: Fix refcount underflow in btrfs ioctl handling
   * CVE-2018-12207
     - kvm: x86, powerpc: do not allow clearing largepages debugfs entry
     - SAUCE: KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is
       active
     - SAUCE: x86: Add ITLB_MULTIHIT bug infrastructure
     - SAUCE: kvm: mmu: ITLB_MULTIHIT mitigation
     - SAUCE: kvm: Add helper function for creating VM worker threads
     - SAUCE: kvm: x86: mmu: Recovery of shattered NX large pages
     - SAUCE: cpu/speculation: Uninline and export CPU mitigations helpers
     - SAUCE: kvm: x86: mmu: Apply global mitigations knob to ITLB_MULTIHIT
   * CVE-2019-11135
     - x86/msr: Add the IA32_TSX_CTRL MSR
     - x86/cpu: Add a helper function x86_read_arch_cap_msr()
     - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default
     - x86/speculation/taa: Add mitigation for TSX Async Abort
     - x86/speculation/taa: Add sysfs reporting for TSX Async Abort
     - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled
     - x86/tsx: Add "auto" option to the tsx= cmdline parameter
     - x86/speculation/taa: Add documentation for TSX Async Abort
     - x86/tsx: Add config options to set tsx=on|off|auto
     - [Config] Disable TSX by default when possible
   * CVE-2019-0154
     - SAUCE: drm/i915: Lower RM timeout to avoid DSI hard hangs
     - SAUCE: drm/i915/gen8+: Add RC6 CTX corruption WA
   * CVE-2019-0155
     - SAUCE: drm/i915: Rename gen7 cmdparser tables
     - SAUCE: drm/i915: Disable Secure Batches for gen6+
     - SAUCE: drm/i915: Remove Master tables from cmdparser
     - SAUCE: drm/i915: Add support for mandatory cmdparsing
     - SAUCE: drm/i915: Support ro ppgtt mapped cmdparser shadow buffers
     - SAUCE: drm/i915: Allow parsing of unsized batches
     - SAUCE: drm/i915: Add gen9 BCS cmdparsing
     - SAUCE: drm/i915/cmdparser: Use explicit goto for error paths
     - SAUCE: drm/i915/cmdparser: Add support for backward jumps
     - SAUCE: drm/i915/cmdparser: Ignore Length operands during command matching
Checksums-Sha1:
 63dcbb65661510dcac025eed451c539c4ffb718c 294812 linux-buildinfo-5.3.0-1006-oracle_5.3.0-1006.7_amd64.deb
 111bfe413d4f9bac490b645096f4c74133326def 1242412 linux-headers-5.3.0-1006-oracle_5.3.0-1006.7_amd64.deb
 23afa62237b94821e4e739d08614c8243e7106dc 932398624 linux-image-unsigned-5.3.0-1006-oracle-dbgsym_5.3.0-1006.7_amd64.ddeb
 e5bd37f6696924d07bfec89cce26956895c9d578 9393260 linux-image-unsigned-5.3.0-1006-oracle_5.3.0-1006.7_amd64.deb
 38141f4f762bbae7fde36657b42c40c7e4a3e810 13994700 linux-modules-5.3.0-1006-oracle_5.3.0-1006.7_amd64.deb
 cd38e52ab434c8e574e66a6af1dd76b561b71d8a 37415320 linux-modules-extra-5.3.0-1006-oracle_5.3.0-1006.7_amd64.deb
 74e2f8ab62397a8ad29c06acc556c4cebfee4f48 10998084 linux-oracle-headers-5.3.0-1006_5.3.0-1006.7_all.deb
 a7442ca6dd8bd883783e59db5d6ca9610113e613 5871820 linux-oracle-tools-5.3.0-1006_5.3.0-1006.7_amd64.deb
 5b09fd17ed3e63579d989589b9d03b49333e5173 15944 linux-oracle_5.3.0-1006.7_amd64.buildinfo
 74487dc9feaea06c043baa34a1111e36d1fc17a5 9932983 linux-oracle_5.3.0-1006.7_amd64.tar.gz
 219437222678b8c20cbecbe84459259a926ccdb3 24515 linux-oracle_5.3.0-1006.7_amd64_translations.tar.gz
 5c2182ce8a1ef2de23f0d05619cde9698caab477 1992 linux-tools-5.3.0-1006-oracle_5.3.0-1006.7_amd64.deb
Checksums-Sha256:
 9da5cd9132a5b514d72814639adaefbda8e4dc8faccf873e01683f01cdcf8fbd 294812 linux-buildinfo-5.3.0-1006-oracle_5.3.0-1006.7_amd64.deb
 00812fac9948c2c3fd8493738d48f21286e1d93d4b913c6d5d2818589f0699b5 1242412 linux-headers-5.3.0-1006-oracle_5.3.0-1006.7_amd64.deb
 e07a3d5abae3587923b527324871dbf0dd476c1626c679784bc280f6171193ff 932398624 linux-image-unsigned-5.3.0-1006-oracle-dbgsym_5.3.0-1006.7_amd64.ddeb
 64f276421e5b0c9cf90480eef6abd7663995fbf29fb54f077d4f7fcc6af849e8 9393260 linux-image-unsigned-5.3.0-1006-oracle_5.3.0-1006.7_amd64.deb
 ee10dd573fb2217badce666fdc0680b6ca4f366531d312752a1e7c54fef30f4b 13994700 linux-modules-5.3.0-1006-oracle_5.3.0-1006.7_amd64.deb
 8f922329faa4a1adbbb370c847eadbf930d221104fcb43f1ae0be89391d8e414 37415320 linux-modules-extra-5.3.0-1006-oracle_5.3.0-1006.7_amd64.deb
 7010122433a895d4693f0c4d80cd6198e0b8419f23dbb8ee6e7f85eb69b8fac2 10998084 linux-oracle-headers-5.3.0-1006_5.3.0-1006.7_all.deb
 62f843a80f4309d399f7e167a2b2994c695f4829ef3c53f7df117cc702c8d2d5 5871820 linux-oracle-tools-5.3.0-1006_5.3.0-1006.7_amd64.deb
 f84db9ae0bcfa8a8a8fc7b7a253e1b6dc0ced67aafbf372662d7e2cc3a5bcaa9 15944 linux-oracle_5.3.0-1006.7_amd64.buildinfo
 afff2a4c8a62be1904234fd96ecf47c97be694852e37db084d5e3f524ec9a119 9932983 linux-oracle_5.3.0-1006.7_amd64.tar.gz
 3ddc2947c9978f70fc27866237a3d3485c1eaebed994b29badc40c624d6182c6 24515 linux-oracle_5.3.0-1006.7_amd64_translations.tar.gz
 eabd375ca6d345a3650e08d1a89e43b9852398bdb3dc2d63bf7d8d6738d990ad 1992 linux-tools-5.3.0-1006-oracle_5.3.0-1006.7_amd64.deb
Files:
 6ae57ffe1a60a1969b2d6c12dd148a8f 294812 kernel optional linux-buildinfo-5.3.0-1006-oracle_5.3.0-1006.7_amd64.deb
 286f5f4c32bf5fb387bdcce69551b5b0 1242412 devel optional linux-headers-5.3.0-1006-oracle_5.3.0-1006.7_amd64.deb
 bbc4c71069904712db3b466c7fe4e9d8 932398624 devel optional linux-image-unsigned-5.3.0-1006-oracle-dbgsym_5.3.0-1006.7_amd64.ddeb
 5ad6e8d8a6b4bf2ec8fdd331aa07cada 9393260 kernel optional linux-image-unsigned-5.3.0-1006-oracle_5.3.0-1006.7_amd64.deb
 66eb08616c45bb3556e10f9c0c11f52c 13994700 kernel optional linux-modules-5.3.0-1006-oracle_5.3.0-1006.7_amd64.deb
 1484800325bb907fce925f996606a843 37415320 kernel optional linux-modules-extra-5.3.0-1006-oracle_5.3.0-1006.7_amd64.deb
 a4f25cc005a5cfde63f774960b5262c7 10998084 devel optional linux-oracle-headers-5.3.0-1006_5.3.0-1006.7_all.deb
 69690bcd836d2e3abe5130c50dfb2f74 5871820 devel optional linux-oracle-tools-5.3.0-1006_5.3.0-1006.7_amd64.deb
 6ac5c3836c1c0946c423791d9097db20 15944 devel optional linux-oracle_5.3.0-1006.7_amd64.buildinfo
 4fd6f4742589803586a51eff5cb69f77 9932983 raw-signing - linux-oracle_5.3.0-1006.7_amd64.tar.gz
 009a76aef8e567729bf8d140039e1552 24515 raw-translations - linux-oracle_5.3.0-1006.7_amd64_translations.tar.gz
 2f2065d465a7fa0f8b99a4373ec420da 1992 devel optional linux-tools-5.3.0-1006-oracle_5.3.0-1006.7_amd64.deb

More information about the Eoan-changes mailing list