[ubuntu/focal-proposed] linux-kvm_5.4.0-1026.27_amd64.tar.gz - (Accepted)

[Thadeu Lima de Souza Cascardo]

linux-kvm (5.4.0-1026.27) focal; urgency=medium

  [ Ubuntu: 5.4.0-50.55 ]

  * CVE-2020-16119
    - SAUCE: dccp: avoid double free of ccid on child socket
  * CVE-2020-16120
    - Revert "UBUNTU: SAUCE: overlayfs: ensure mounter privileges when reading
      directories"
    - ovl: pass correct flags for opening real directory
    - ovl: switch to mounter creds in readdir
    - ovl: verify permissions in ovl_path_open()
    - ovl: call secutiry hook in ovl_real_ioctl()
    - ovl: check permission to open real file

Date: Wed, 30 Sep 2020 18:04:11 -0300
Changed-By: Thadeu Lima de Souza Cascardo <cascardo at canonical.com>
Maintainer: Launchpad Build Daemon <buildd at lgw01-amd64-039.buildd>

-------------- next part --------------
Format: 1.8
Date: Wed, 30 Sep 2020 18:04:11 -0300
Source: linux-kvm
Binary: linux-buildinfo-5.4.0-1026-kvm linux-headers-5.4.0-1026-kvm linux-image-unsigned-5.4.0-1026-kvm linux-kvm-headers-5.4.0-1026 linux-kvm-tools-5.4.0-1026 linux-modules-5.4.0-1026-kvm linux-tools-5.4.0-1026-kvm
Architecture: amd64 all amd64_translations
Version: 5.4.0-1026.27
Distribution: focal
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd at lgw01-amd64-039.buildd>
Changed-By: Thadeu Lima de Souza Cascardo <cascardo at canonical.com>
Description:
 linux-buildinfo-5.4.0-1026-kvm - Linux kernel buildinfo for version 5.4.0 on 64 bit x86 SMP
 linux-headers-5.4.0-1026-kvm - Linux kernel headers for version 5.4.0 on 64 bit x86 SMP
 linux-image-unsigned-5.4.0-1026-kvm - Linux kernel image for version 5.4.0 on 64 bit x86 SMP
 linux-kvm-headers-5.4.0-1026 - Header files related to Linux kernel version 5.4.0
 linux-kvm-tools-5.4.0-1026 - Linux kernel version specific tools for version 5.4.0-1026
 linux-modules-5.4.0-1026-kvm - Linux kernel extra modules for version 5.4.0 on 64 bit x86 SMP
 linux-tools-5.4.0-1026-kvm - Linux kernel version specific tools for version 5.4.0-1026
Changes:
 linux-kvm (5.4.0-1026.27) focal; urgency=medium
 .
   [ Ubuntu: 5.4.0-50.55 ]
 .
   * CVE-2020-16119
     - SAUCE: dccp: avoid double free of ccid on child socket
   * CVE-2020-16120
     - Revert "UBUNTU: SAUCE: overlayfs: ensure mounter privileges when reading
       directories"
     - ovl: pass correct flags for opening real directory
     - ovl: switch to mounter creds in readdir
     - ovl: verify permissions in ovl_path_open()
     - ovl: call secutiry hook in ovl_real_ioctl()
     - ovl: check permission to open real file
Checksums-Sha1:
 84a895c2acd54329e60eba609cb805cf954f3cfe 155984 linux-buildinfo-5.4.0-1026-kvm_5.4.0-1026.27_amd64.deb
 8b5fce78d0b0a9ce19a6d63750d4c0f082db9b90 925700 linux-headers-5.4.0-1026-kvm_5.4.0-1026.27_amd64.deb
 ad1ff836297b9cd1fc3be02056037294dc08dab2 28684412 linux-image-unsigned-5.4.0-1026-kvm-dbgsym_5.4.0-1026.27_amd64.ddeb
 06ef2eb2f2858b27ee8ffdb9316ecfeae6c1c4ca 5280640 linux-image-unsigned-5.4.0-1026-kvm_5.4.0-1026.27_amd64.deb
 bcece56ec104f9ef8c57a1a79e4ab6df3073115d 10998416 linux-kvm-headers-5.4.0-1026_5.4.0-1026.27_all.deb
 06a045cea04fffe95f1f8e0a7c28fda353cfde87 5264368 linux-kvm-tools-5.4.0-1026_5.4.0-1026.27_amd64.deb
 e637a83c1e084fd5ca270ddccd82147999e4d500 15902 linux-kvm_5.4.0-1026.27_amd64.buildinfo
 cc8bb493e145ddd200ce1c6c91b33edb3c2e88c8 5462311 linux-kvm_5.4.0-1026.27_amd64.tar.gz
 cc8daceb117362dd3b7228ac24a87109fc7e6a25 28255 linux-kvm_5.4.0-1026.27_amd64_translations.tar.gz
 079b22f6c89bc4c4f9ca0ac3a8ea070558490789 10440784 linux-modules-5.4.0-1026-kvm_5.4.0-1026.27_amd64.deb
 f8688f537914fa2279975f0692efac8c1a851e66 1964 linux-tools-5.4.0-1026-kvm_5.4.0-1026.27_amd64.deb
Checksums-Sha256:
 df88b941121bc34793352ac14e6c9e59e7068c162907d0249c380fef29b6eafe 155984 linux-buildinfo-5.4.0-1026-kvm_5.4.0-1026.27_amd64.deb
 46a046ae4bcf3eab5a1c586fb3b0ba50a5a7e3d89842b153bab7e0addad6957d 925700 linux-headers-5.4.0-1026-kvm_5.4.0-1026.27_amd64.deb
 1b3c95544c352b685bad226f514c63e44d2d2e4fd0b4fdd4a5a4e49bc22e091d 28684412 linux-image-unsigned-5.4.0-1026-kvm-dbgsym_5.4.0-1026.27_amd64.ddeb
 ee4c8391ca0753c213fffb363c06e890eb5223ca2f69faa2e0f9cd5077c9fe50 5280640 linux-image-unsigned-5.4.0-1026-kvm_5.4.0-1026.27_amd64.deb
 42e2cec628c3ab959bdb7fdb9d0340eaf63c13e742ec9986beddf2d5f821710f 10998416 linux-kvm-headers-5.4.0-1026_5.4.0-1026.27_all.deb
 8be37de94229b7bfd041b8f886681d70d970324c22d3f08a1d38cf61325dbea6 5264368 linux-kvm-tools-5.4.0-1026_5.4.0-1026.27_amd64.deb
 962a8bbf29eda07aee8c11b134df2557ffb6914de53c29351f94ce597fc757c3 15902 linux-kvm_5.4.0-1026.27_amd64.buildinfo
 bb8112680e30603042c447b5bd39c86ccc153f9073575098360547a7324b96d3 5462311 linux-kvm_5.4.0-1026.27_amd64.tar.gz
 3507f387c19c329cfcd0e74d0c2fa3d9cd17ace1d5f597184009857a9ebedad6 28255 linux-kvm_5.4.0-1026.27_amd64_translations.tar.gz
 4bc70f484a258f6f805eba0965ec55c12837f60e4f1e329e1e456c0849758dca 10440784 linux-modules-5.4.0-1026-kvm_5.4.0-1026.27_amd64.deb
 46292ccaa2dbe5d79618d85a65679c2b5d33658f865c8125fa00cd19fc157f84 1964 linux-tools-5.4.0-1026-kvm_5.4.0-1026.27_amd64.deb
Files:
 3063fe224986d0f632edcaba2da93813 155984 kernel optional linux-buildinfo-5.4.0-1026-kvm_5.4.0-1026.27_amd64.deb
 449be00c31b8699d647279c24e1f7b6c 925700 devel optional linux-headers-5.4.0-1026-kvm_5.4.0-1026.27_amd64.deb
 72985af1b559e72130774ab71a6301e4 28684412 devel optional linux-image-unsigned-5.4.0-1026-kvm-dbgsym_5.4.0-1026.27_amd64.ddeb
 d4104dc4b2b7f79c6bbc9cb48d9a1157 5280640 kernel optional linux-image-unsigned-5.4.0-1026-kvm_5.4.0-1026.27_amd64.deb
 3016b057367c7e06190f5f52e50269a2 10998416 devel optional linux-kvm-headers-5.4.0-1026_5.4.0-1026.27_all.deb
 faa685955202f86c055f21875fcf948b 5264368 devel optional linux-kvm-tools-5.4.0-1026_5.4.0-1026.27_amd64.deb
 f9d5d53e7e5a4164863d154b063c48cc 15902 devel optional linux-kvm_5.4.0-1026.27_amd64.buildinfo
 86335cd4db3a98add2ec5f42df6c723a 5462311 raw-signing - linux-kvm_5.4.0-1026.27_amd64.tar.gz
 da664b767d5db967039bd3dd84626aa1 28255 raw-translations - linux-kvm_5.4.0-1026.27_amd64_translations.tar.gz
 3305770e5bead6a4ff000817ca665580 10440784 kernel optional linux-modules-5.4.0-1026-kvm_5.4.0-1026.27_amd64.deb
 c54dba20e135bfa4a2ed92d8ba28d590 1964 devel optional linux-tools-5.4.0-1026-kvm_5.4.0-1026.27_amd64.deb