[ubuntu/focal-security] linux-kvm 5.4.0-1026.27 (Accepted)

[Andy Whitcroft]

linux-kvm (5.4.0-1026.27) focal; urgency=medium

  [ Ubuntu: 5.4.0-50.55 ]

  * CVE-2020-16119
    - SAUCE: dccp: avoid double free of ccid on child socket
  * CVE-2020-16120
    - Revert "UBUNTU: SAUCE: overlayfs: ensure mounter privileges when reading
      directories"
    - ovl: pass correct flags for opening real directory
    - ovl: switch to mounter creds in readdir
    - ovl: verify permissions in ovl_path_open()
    - ovl: call secutiry hook in ovl_real_ioctl()
    - ovl: check permission to open real file

Date: 2020-09-30 23:24:13.532833+00:00
Changed-By: Thadeu Lima de Souza Cascardo <thadeu.cascardo at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-kvm/5.4.0-1026.27
-------------- next part --------------
Sorry, changesfile not available.