[ubuntu/groovy-updates] linux-kvm_5.8.0-1027.29_amd64.tar.gz - (Accepted)

[Stefan Bader]

linux-kvm (5.8.0-1027.29) groovy; urgency=medium

  [ Ubuntu: 5.8.0-53.60 ]

  * CVE-2021-3491
    - io_uring: fix provide_buffers sign extension
    - io_uring: fix overflows checks in provide buffers
    - SAUCE: proc: Avoid mixing integer types in mem_rw()
    - SAUCE: io_uring: truncate lengths larger than MAX_RW_COUNT on provide
      buffers
  * CVE-2021-3490
    - bpf: Fix a verifier failure with xor
    - SAUCE: bpf: verifier: fix ALU32 bounds tracking with bitwise ops
  * CVE-2021-3489
    - SAUCE: bpf: ringbuf: deny reserve of buffers larger than ringbuf
    - SAUCE: bpf: prevent writable memory-mapping of read-only ringbuf pages

Date: Thu, 06 May 2021 10:42:26 +0200
Changed-By: Stefan Bader <stefan.bader at canonical.com>
Maintainer: Launchpad Build Daemon <buildd at lgw01-amd64-037.buildd>

-------------- next part --------------
Format: 1.8
Date: Thu, 06 May 2021 10:42:26 +0200
Source: linux-kvm
Binary: linux-buildinfo-5.8.0-1027-kvm linux-headers-5.8.0-1027-kvm linux-image-unsigned-5.8.0-1027-kvm linux-kvm-headers-5.8.0-1027 linux-kvm-tools-5.8.0-1027 linux-modules-5.8.0-1027-kvm linux-tools-5.8.0-1027-kvm
Architecture: amd64 all amd64_translations
Version: 5.8.0-1027.29
Distribution: groovy
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd at lgw01-amd64-037.buildd>
Changed-By: Stefan Bader <stefan.bader at canonical.com>
Description:
 linux-buildinfo-5.8.0-1027-kvm - Linux kernel buildinfo for version 5.8.0 on 64 bit x86 SMP
 linux-headers-5.8.0-1027-kvm - Linux kernel headers for version 5.8.0 on 64 bit x86 SMP
 linux-image-unsigned-5.8.0-1027-kvm - Linux kernel image for version 5.8.0 on 64 bit x86 SMP
 linux-kvm-headers-5.8.0-1027 - Header files related to Linux kernel version 5.8.0
 linux-kvm-tools-5.8.0-1027 - Linux kernel version specific tools for version 5.8.0-1027
 linux-modules-5.8.0-1027-kvm - Linux kernel extra modules for version 5.8.0 on 64 bit x86 SMP
 linux-tools-5.8.0-1027-kvm - Linux kernel version specific tools for version 5.8.0-1027
Changes:
 linux-kvm (5.8.0-1027.29) groovy; urgency=medium
 .
   [ Ubuntu: 5.8.0-53.60 ]
 .
   * CVE-2021-3491
     - io_uring: fix provide_buffers sign extension
     - io_uring: fix overflows checks in provide buffers
     - SAUCE: proc: Avoid mixing integer types in mem_rw()
     - SAUCE: io_uring: truncate lengths larger than MAX_RW_COUNT on provide
       buffers
   * CVE-2021-3490
     - bpf: Fix a verifier failure with xor
     - SAUCE: bpf: verifier: fix ALU32 bounds tracking with bitwise ops
   * CVE-2021-3489
     - SAUCE: bpf: ringbuf: deny reserve of buffers larger than ringbuf
     - SAUCE: bpf: prevent writable memory-mapping of read-only ringbuf pages
Checksums-Sha1:
 92f745c04b03ad76b834d3fc1cd5f9819da424d4 234968 linux-buildinfo-5.8.0-1027-kvm_5.8.0-1027.29_amd64.deb
 8f2c7b88f824dfd4bb5a3c2a21a16237e1081867 1055292 linux-headers-5.8.0-1027-kvm_5.8.0-1027.29_amd64.deb
 5e5fd3a602244b0e19ddd9e20fe3b5e7cc6f3bff 165167252 linux-image-unsigned-5.8.0-1027-kvm-dbgsym_5.8.0-1027.29_amd64.ddeb
 f4df849544fba65d93ded941c92dec6310660032 6756784 linux-image-unsigned-5.8.0-1027-kvm_5.8.0-1027.29_amd64.deb
 80eeba3ba56bfc002707217ca35971dd572a1736 11413160 linux-kvm-headers-5.8.0-1027_5.8.0-1027.29_all.deb
 af526bebef586de1f5597e8e93d5823f3c68d90a 5548176 linux-kvm-tools-5.8.0-1027_5.8.0-1027.29_amd64.deb
 af5ac5672d29fe0805cb83b84db32265eac279a3 15806 linux-kvm_5.8.0-1027.29_amd64.buildinfo
 9a6b680aebc9c12d90da8ba62da91d6f295218b0 6990870 linux-kvm_5.8.0-1027.29_amd64.tar.gz
 a99263552dd123685b841b4ade5d9784ea3ccc20 27937 linux-kvm_5.8.0-1027.29_amd64_translations.tar.gz
 1cda1859c0d891636d9bb976c0eb13dd7f08925c 11363636 linux-modules-5.8.0-1027-kvm_5.8.0-1027.29_amd64.deb
 070362e1cfd10a524317536710bca0f2c68b5b21 1960 linux-tools-5.8.0-1027-kvm_5.8.0-1027.29_amd64.deb
Checksums-Sha256:
 efea242566b4003c7dba942acaf71765821a269fd4359fa3c976eb9b16534d70 234968 linux-buildinfo-5.8.0-1027-kvm_5.8.0-1027.29_amd64.deb
 49bb9eab4da085f6b9f5ce01b02cfeeacb20de83122e329312c3772144f33c32 1055292 linux-headers-5.8.0-1027-kvm_5.8.0-1027.29_amd64.deb
 8f95086174e6f939dbded424f30aebc707943c5e9a0b3f74f71642c8a60a5e32 165167252 linux-image-unsigned-5.8.0-1027-kvm-dbgsym_5.8.0-1027.29_amd64.ddeb
 9d778d27f12efd1e9e1622440a408010b84538ac8c0a81246c29e35e70d4b7e9 6756784 linux-image-unsigned-5.8.0-1027-kvm_5.8.0-1027.29_amd64.deb
 1d940912a01e9d79a39bdbd7297f41a96b68906adf7923ad70eb81fa2b5a2614 11413160 linux-kvm-headers-5.8.0-1027_5.8.0-1027.29_all.deb
 696748066818e0fd6c53e5f69d81157f5e9ae165a0933f951dd1d8bba6e7ddd5 5548176 linux-kvm-tools-5.8.0-1027_5.8.0-1027.29_amd64.deb
 79f1da7c963690373feaf23f6b12fa735fad0e77ce15241679f72757f8785dc7 15806 linux-kvm_5.8.0-1027.29_amd64.buildinfo
 65e776ad1284c8aade3357d53d08fbf3afc0726ccf2b2870d1589a8ee9a83034 6990870 linux-kvm_5.8.0-1027.29_amd64.tar.gz
 e5d4adc2c980025af20e1c3603cff178efccef876c090fec766c47138b82e15b 27937 linux-kvm_5.8.0-1027.29_amd64_translations.tar.gz
 4237cf5b068929b762668b4434e448996b9b4b8041d58c1cf720fc0440091399 11363636 linux-modules-5.8.0-1027-kvm_5.8.0-1027.29_amd64.deb
 54074c2ae02f37a4d7c245e4d19b83b7cc99fb695209731ee2df5bbf620b8662 1960 linux-tools-5.8.0-1027-kvm_5.8.0-1027.29_amd64.deb
Files:
 ee11c9a2665c991cc9e2edfd20119f35 234968 kernel optional linux-buildinfo-5.8.0-1027-kvm_5.8.0-1027.29_amd64.deb
 7f633214d2d6e6183c81304a85cacebf 1055292 devel optional linux-headers-5.8.0-1027-kvm_5.8.0-1027.29_amd64.deb
 aa7bcce1f11c6701f0304953abdba614 165167252 devel optional linux-image-unsigned-5.8.0-1027-kvm-dbgsym_5.8.0-1027.29_amd64.ddeb
 df10e171428fc4f981c4ea1213c79de1 6756784 kernel optional linux-image-unsigned-5.8.0-1027-kvm_5.8.0-1027.29_amd64.deb
 de536837e0b38a9212112411c90fe9b6 11413160 devel optional linux-kvm-headers-5.8.0-1027_5.8.0-1027.29_all.deb
 40b3c0b05024206f6b835db6438fdfff 5548176 devel optional linux-kvm-tools-5.8.0-1027_5.8.0-1027.29_amd64.deb
 9f86ff9f83729477b7d4a21d14f32b13 15806 devel optional linux-kvm_5.8.0-1027.29_amd64.buildinfo
 6ad612f328682aac6bbeae25a4fdd9d2 6990870 raw-signing - linux-kvm_5.8.0-1027.29_amd64.tar.gz
 3ec8c1f8a38eb6503b6fade094681924 27937 raw-translations - linux-kvm_5.8.0-1027.29_amd64_translations.tar.gz
 a8aa4c39e7d9bfe6b0fc82c770af41f9 11363636 kernel optional linux-modules-5.8.0-1027-kvm_5.8.0-1027.29_amd64.deb
 0ecb23f1d252b5fd2cd8b3fbe2a0ec0e 1960 devel optional linux-tools-5.8.0-1027-kvm_5.8.0-1027.29_amd64.deb