[ubuntu/trusty-proposed] linux-azure_4.15.0-1033.34~14.04.2_amd64.tar.gz - (Accepted)

Marcelo Henrique Cerri marcelo.cerri at canonical.com
Wed Nov 21 21:37:30 UTC 2018


linux-azure (4.15.0-1033.34~14.04.2) trusty; urgency=medium

  * linux-azure: 4.15.0-1033.34~14.04.2 -proposed tracker (LP: #1802564)

  [ Ubuntu: 4.15.0-1033.34 ]

  * linux-azure: 4.15.0-1033.34 -proposed tracker (LP: #1802559)
  * linux: 4.15.0-42.45 -proposed tracker (LP: #1803592)
  * [FEAT] Guest-dedicated Crypto Adapters (LP: #1787405)
    - KVM: s390: reset crypto attributes for all vcpus
    - KVM: s390: vsie: simulate VCPU SIE entry/exit
    - KVM: s390: introduce and use KVM_REQ_VSIE_RESTART
    - KVM: s390: refactor crypto initialization
    - s390: vfio-ap: base implementation of VFIO AP device driver
    - s390: vfio-ap: register matrix device with VFIO mdev framework
    - s390: vfio-ap: sysfs interfaces to configure adapters
    - s390: vfio-ap: sysfs interfaces to configure domains
    - s390: vfio-ap: sysfs interfaces to configure control domains
    - s390: vfio-ap: sysfs interface to view matrix mdev matrix
    - KVM: s390: interface to clear CRYCB masks
    - s390: vfio-ap: implement mediated device open callback
    - s390: vfio-ap: implement VFIO_DEVICE_GET_INFO ioctl
    - s390: vfio-ap: zeroize the AP queues
    - s390: vfio-ap: implement VFIO_DEVICE_RESET ioctl
    - KVM: s390: Clear Crypto Control Block when using vSIE
    - KVM: s390: vsie: Do the CRYCB validation first
    - KVM: s390: vsie: Make use of CRYCB FORMAT2 clear
    - KVM: s390: vsie: Allow CRYCB FORMAT-2
    - KVM: s390: vsie: allow CRYCB FORMAT-1
    - KVM: s390: vsie: allow CRYCB FORMAT-0
    - KVM: s390: vsie: allow guest FORMAT-0 CRYCB on host FORMAT-1
    - KVM: s390: vsie: allow guest FORMAT-1 CRYCB on host FORMAT-2
    - KVM: s390: vsie: allow guest FORMAT-0 CRYCB on host FORMAT-2
    - KVM: s390: device attrs to enable/disable AP interpretation
    - KVM: s390: CPU model support for AP virtualization
    - s390: doc: detailed specifications for AP virtualization
    - KVM: s390: fix locking for crypto setting error path
    - KVM: s390: Tracing APCB changes
    - s390: vfio-ap: setup APCB mask using KVM dedicated function
    - s390/zcrypt: Add ZAPQ inline function.
    - s390/zcrypt: Review inline assembler constraints.
    - s390/zcrypt: Integrate ap_asm.h into include/asm/ap.h.
    - s390/zcrypt: fix ap_instructions_available() returncodes
    - s390/zcrypt: remove VLA usage from the AP bus
    - s390/zcrypt: Remove deprecated ioctls.
    - s390/zcrypt: Remove deprecated zcrypt proc interface.
    - s390/zcrypt: Support up to 256 crypto adapters.
    - [Config:] Enable CONFIG_S390_AP_IOMMU and set CONFIG_VFIO_AP to module.
  * Bypass of mount visibility through userns + mount propagation (LP: #1789161)
    - mount: Retest MNT_LOCKED in do_umount
    - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts
  *  CVE-2018-18955: nested user namespaces with more than five extents
    incorrectly grant privileges over inode (LP: #1801924) // CVE-2018-18955
    - userns: also map extents in the reverse map to kernel IDs
  * kdump fail due to an IRQ storm (LP: #1797990)
    - SAUCE: x86/PCI: Export find_cap() to be used in early PCI code
    - SAUCE: x86/quirks: Add parameter to clear MSIs early on boot
    - SAUCE: x86/quirks: Scan all busses for early PCI quirks
  * linux: 4.15.0-40.43 -proposed tracker (LP: #1802554)
  * crash in ENA driver on removing an interface (LP: #1802341)
    - SAUCE: net: ena: fix crash during ena_remove()
  * Ubuntu 18.04.1 - [s390x] Kernel panic while stressing network bonding
    (LP: #1797367)
    - s390/qeth: don't keep track of MAC address's cast type
    - s390/qeth: consolidate qeth MAC address helpers
    - s390/qeth: avoid using is_multicast_ether_addr_64bits on (u8 *)[6]
    - s390/qeth: remove outdated portname debug msg
    - s390/qeth: reduce hard-coded access to ccw channels
    - s390/qeth: sanitize strings in debug messages
  * [18.04 FEAT] zcrypt DD: introduce APQN tags to support deterministic driver
    binding (LP: #1799184)
    - s390/zcrypt: code beautify
    - s390/zcrypt: AP bus support for alternate driver(s)
    - s390/zcrypt: hex string mask improvements for apmask and aqmask.
    - s390/zcrypt: remove unused functions and declarations
    - s390/zcrypt: Show load of cards and queues in sysfs
  * [GLK/CLX] Enhanced IBRS (LP: #1786139)
    - x86/speculation: Remove SPECTRE_V2_IBRS in enum spectre_v2_mitigation
    - x86/speculation: Support Enhanced IBRS on future CPUs
  * Allow signed kernels to be kexec'ed under lockdown (LP: #1798441)
    - Fix kexec forbidding kernels signed with keys in the secondary keyring to
      boot
  * Overlayfs in user namespace leaks directory content of inaccessible
    directories (LP: #1793458) // CVE-2018-6559
    - SAUCE: overlayfs: ensure mounter privileges when reading directories
  * Update ENA driver to version 2.0.1K (LP: #1798182)
    - net: ena: remove ndo_poll_controller
    - net: ena: fix warning in rmmod caused by double iounmap
    - net: ena: fix rare bug when failed restart/resume is followed by driver
      removal
    - net: ena: fix NULL dereference due to untimely napi initialization
    - net: ena: fix auto casting to boolean
    - net: ena: minor performance improvement
    - net: ena: complete host info to match latest ENA spec
    - net: ena: introduce Low Latency Queues data structures according to ENA spec
    - net: ena: add functions for handling Low Latency Queues in ena_com
    - net: ena: add functions for handling Low Latency Queues in ena_netdev
    - net: ena: use CSUM_CHECKED device indication to report skb's checksum status
    - net: ena: explicit casting and initialization, and clearer error handling
    - net: ena: limit refill Rx threshold to 256 to avoid latency issues
    - net: ena: change rx copybreak default to reduce kernel memory pressure
    - net: ena: remove redundant parameter in ena_com_admin_init()
    - net: ena: update driver version to 2.0.1
    - net: ena: fix indentations in ena_defs for better readability
    - net: ena: Fix Kconfig dependency on X86
    - net: ena: enable Low Latency Queues
    - net: ena: fix compilation error in xtensa architecture
  * Bionic update: upstream stable patchset 2018-10-29 (LP: #1800537)
    - bonding: re-evaluate force_primary when the primary slave name changes
    - cdc_ncm: avoid padding beyond end of skb
    - ipv6: allow PMTU exceptions to local routes
    - net: dsa: add error handling for pskb_trim_rcsum
    - net/sched: act_simple: fix parsing of TCA_DEF_DATA
    - tcp: verify the checksum of the first data segment in a new connection
    - udp: fix rx queue len reported by diag and proc interface
    - net: in virtio_net_hdr only add VLAN_HLEN to csum_start if payload holds
      vlan
    - tls: fix use-after-free in tls_push_record
    - ext4: fix hole length detection in ext4_ind_map_blocks()
    - ext4: update mtime in ext4_punch_hole even if no blocks are released
    - ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget()
    - ext4: fix fencepost error in check for inode count overflow during resize
    - driver core: Don't ignore class_dir_create_and_add() failure.
    - Btrfs: fix clone vs chattr NODATASUM race
    - Btrfs: fix memory and mount leak in btrfs_ioctl_rm_dev_v2()
    - btrfs: return error value if create_io_em failed in cow_file_range
    - btrfs: scrub: Don't use inode pages for device replace
    - ALSA: hda/conexant - Add fixup for HP Z2 G4 workstation
    - ALSA: hda - Handle kzalloc() failure in snd_hda_attach_pcm_stream()
    - ALSA: hda: add dock and led support for HP EliteBook 830 G5
    - ALSA: hda: add dock and led support for HP ProBook 640 G4
    - x86/MCE: Fix stack out-of-bounds write in mce-inject.c: Flags_read()
    - smb3: fix various xid leaks
    - CIFS: 511c54a2f69195b28afb9dd119f03787b1625bb4 adds a check for session
      expiry
    - cifs: For SMB2 security informaion query, check for minimum sized security
      descriptor instead of sizeof FileAllInformation class
    - nbd: fix nbd device deletion
    - nbd: update size when connected
    - nbd: use bd_set_size when updating disk size
    - blk-mq: reinit q->tag_set_list entry only after grace period
    - bdi: Move cgroup bdi_writeback to a dedicated low concurrency workqueue
    - cpufreq: Fix new policy initialization during limits updates via sysfs
    - cpufreq: governors: Fix long idle detection logic in load calculation
    - libata: zpodd: small read overflow in eject_tray()
    - libata: Drop SanDisk SD7UB3Q*G1001 NOLPM quirk
    - w1: mxc_w1: Enable clock before calling clk_get_rate() on it
    - x86/intel_rdt: Enable CMT and MBM on new Skylake stepping
    - iwlwifi: fw: harden page loading code
    - orangefs: set i_size on new symlink
    - orangefs: report attributes_mask and attributes for statx
    - HID: intel_ish-hid: ipc: register more pm callbacks to support hibernation
    - HID: wacom: Correct logical maximum Y for 2nd-gen Intuos Pro large
    - mm, page_alloc: do not break __GFP_THISNODE by zonelist reset
    - net: phy: dp83822: use BMCR_ANENABLE instead of BMSR_ANEGCAPABLE for DP83620
    - cpufreq: ti-cpufreq: Fix an incorrect error return value
    - x86/vector: Fix the args of vector_alloc tracepoint
    - x86/apic/vector: Prevent hlist corruption and leaks
    - x86/apic: Provide apic_ack_irq()
    - x86/ioapic: Use apic_ack_irq()
    - x86/platform/uv: Use apic_ack_irq()
    - irq_remapping: Use apic_ack_irq()
    - genirq/generic_pending: Do not lose pending affinity update
    - genirq/affinity: Defer affinity setting if irq chip is busy
    - genirq/migration: Avoid out of line call if pending is not set
  * [bionic]mlx5: reading SW stats through ifstat cause kernel crash
    (LP: #1799049)
    - net/mlx5e: Don't attempt to dereference the ppriv struct if not being
      eswitch manager
  * [Bionic][Cosmic]  ipmi: Fix timer race with module unload (LP: #1799281)
    - ipmi: Fix timer race with module unload
  * [Bionic] ipmi: Remove ACPI SPMI probing from the SSIF (I2C) driver
    (LP: #1799276)
    - ipmi: Remove ACPI SPMI probing from the SSIF (I2C) driver
  * execveat03 in ubuntu_ltp_syscalls failed on X/B (LP: #1786729)
    - cap_inode_getsecurity: use d_find_any_alias() instead of d_find_alias()
  * [Bionic][Cosmic] Fix to ipmi to support vendor specific messages greater
    than 255 bytes (LP: #1799794)
    - ipmi:ssif: Add support for multi-part transmit messages > 2 parts
  * libvirtd is unable to configure bridge devices inside of LXD containers
    (LP: #1784501)
    - kernfs: allow creating kernfs objects with arbitrary uid/gid
    - sysfs, kobject: allow creating kobject belonging to arbitrary users
    - kobject: kset_create_and_add() - fetch ownership info from parent
    - driver core: set up ownership of class devices in sysfs
    - net-sysfs: require net admin in the init ns for setting tx_maxrate
    - net-sysfs: make sure objects belong to container's owner
    - net: create reusable function for getting ownership info of sysfs inodes
    - bridge: make sure objects belong to container's owner
    - sysfs: Fix regression when adding a file to an existing group
  * [Ubuntu] kvm: fix deadlock when killed by oom (LP: #1800849)
    - s390/kvm: fix deadlock when killed by oom
  * [Ubuntu] net/af_iucv: fix skb leaks for HiperTransport (LP: #1800639)
    - net/af_iucv: drop inbound packets with invalid flags
    - net/af_iucv: fix skb handling on HiperTransport xmit error
  * Power consumption during s2idle is higher than long idle(sk hynix)
    (LP: #1801875)
    - SAUCE: pci: prevent sk hynix nvme from entering D3
    - SAUCE: nvme: add quirk to not call disable function when suspending
  * Enable keyboard wakeup for S2Idle laptops (LP: #1798552)
    - Input: i8042 - enable keyboard wakeups by default when s2idle is used
  * NULL pointer dereference at 0000000000000020 when access
    dst_orig->ops->family in function  xfrm_lookup_with_ifid() (LP: #1801878)
    - xfrm: Fix NULL pointer dereference when skb_dst_force clears the dst_entry.
  * [Ubuntu] qdio: reset old sbal_state flags (LP: #1801686)
    - s390/qdio: reset old sbal_state flags
  * hns3: map tx ring to tc (LP: #1802023)
    - net: hns3: Set tx ring' tc info when netdev is up
  * [Ubuntu] qeth: Fix potential array overrun in cmd/rc lookup (LP: #1800641)
    - s390: qeth_core_mpc: Use ARRAY_SIZE instead of reimplementing its function
    - s390: qeth: Fix potential array overrun in cmd/rc lookup
  * Vulkan applications cause permanent memory leak with Intel GPU
    (LP: #1798165)
    - drm/syncobj: Don't leak fences when WAIT_FOR_SUBMIT is set
  * Mounting SOFS SMB shares fails (LP: #1792580)
    - cifs: connect to servername instead of IP for IPC$ share
  * Packaging resync (LP: #1786013)
    - [Package] add support for specifying the primary makefile

Date: Thu, 15 Nov 2018 20:37:53 -0200
Changed-By: Marcelo Henrique Cerri <marcelo.cerri at canonical.com>
Maintainer: Launchpad Build Daemon <buildd at lgw01-amd64-024.buildd>

-------------- next part --------------
Format: 1.8
Date: Thu, 15 Nov 2018 20:37:53 -0200
Source: linux-azure
Binary: linux-azure-headers-4.15.0-1033 linux-azure-tools-4.15.0-1033 linux-azure-cloud-tools-4.15.0-1033 linux-image-unsigned-4.15.0-1033-azure linux-modules-4.15.0-1033-azure linux-modules-extra-4.15.0-1033-azure linux-headers-4.15.0-1033-azure linux-image-unsigned-4.15.0-1033-azure-dbgsym linux-tools-4.15.0-1033-azure linux-cloud-tools-4.15.0-1033-azure linux-udebs-azure
Architecture: all amd64_translations amd64
Version: 4.15.0-1033.34~14.04.2
Distribution: trusty
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd at lgw01-amd64-024.buildd>
Changed-By: Marcelo Henrique Cerri <marcelo.cerri at canonical.com>
Description: 
 linux-azure-cloud-tools-4.15.0-1033 - Linux kernel version specific cloud tools for version 4.15.0-1033
 linux-azure-headers-4.15.0-1033 - Header files related to Linux kernel version 4.15.0
 linux-azure-tools-4.15.0-1033 - Linux kernel version specific tools for version 4.15.0-1033
 linux-cloud-tools-4.15.0-1033-azure - Linux kernel version specific cloud tools for version 4.15.0-1033
 linux-headers-4.15.0-1033-azure - Linux kernel headers for version 4.15.0 on 64 bit x86 SMP
 linux-image-unsigned-4.15.0-1033-azure - Linux kernel image for version 4.15.0 on 64 bit x86 SMP
 linux-image-unsigned-4.15.0-1033-azure-dbgsym - Linux kernel debug image for version 4.15.0 on 64 bit x86 SMP
 linux-modules-4.15.0-1033-azure - Linux kernel extra modules for version 4.15.0 on 64 bit x86 SMP
 linux-modules-extra-4.15.0-1033-azure - Linux kernel extra modules for version 4.15.0 on 64 bit x86 SMP
 linux-tools-4.15.0-1033-azure - Linux kernel version specific tools for version 4.15.0-1033
 linux-udebs-azure - Metapackage depending on kernel udebs (udeb)
Launchpad-Bugs-Fixed: 1784501 1786013 1786139 1786729 1787405 1789161 1792580 1793458 1797367 1797990 1798165 1798182 1798441 1798552 1799049 1799184 1799276 1799281 1799794 1800537 1800639 1800641 1800849 1801686 1801875 1801878 1801924 1802023 1802341 1802554 1802559 1802564 1803592
Changes: 
 linux-azure (4.15.0-1033.34~14.04.2) trusty; urgency=medium
 .
   * linux-azure: 4.15.0-1033.34~14.04.2 -proposed tracker (LP: #1802564)
 .
   [ Ubuntu: 4.15.0-1033.34 ]
 .
   * linux-azure: 4.15.0-1033.34 -proposed tracker (LP: #1802559)
   * linux: 4.15.0-42.45 -proposed tracker (LP: #1803592)
   * [FEAT] Guest-dedicated Crypto Adapters (LP: #1787405)
     - KVM: s390: reset crypto attributes for all vcpus
     - KVM: s390: vsie: simulate VCPU SIE entry/exit
     - KVM: s390: introduce and use KVM_REQ_VSIE_RESTART
     - KVM: s390: refactor crypto initialization
     - s390: vfio-ap: base implementation of VFIO AP device driver
     - s390: vfio-ap: register matrix device with VFIO mdev framework
     - s390: vfio-ap: sysfs interfaces to configure adapters
     - s390: vfio-ap: sysfs interfaces to configure domains
     - s390: vfio-ap: sysfs interfaces to configure control domains
     - s390: vfio-ap: sysfs interface to view matrix mdev matrix
     - KVM: s390: interface to clear CRYCB masks
     - s390: vfio-ap: implement mediated device open callback
     - s390: vfio-ap: implement VFIO_DEVICE_GET_INFO ioctl
     - s390: vfio-ap: zeroize the AP queues
     - s390: vfio-ap: implement VFIO_DEVICE_RESET ioctl
     - KVM: s390: Clear Crypto Control Block when using vSIE
     - KVM: s390: vsie: Do the CRYCB validation first
     - KVM: s390: vsie: Make use of CRYCB FORMAT2 clear
     - KVM: s390: vsie: Allow CRYCB FORMAT-2
     - KVM: s390: vsie: allow CRYCB FORMAT-1
     - KVM: s390: vsie: allow CRYCB FORMAT-0
     - KVM: s390: vsie: allow guest FORMAT-0 CRYCB on host FORMAT-1
     - KVM: s390: vsie: allow guest FORMAT-1 CRYCB on host FORMAT-2
     - KVM: s390: vsie: allow guest FORMAT-0 CRYCB on host FORMAT-2
     - KVM: s390: device attrs to enable/disable AP interpretation
     - KVM: s390: CPU model support for AP virtualization
     - s390: doc: detailed specifications for AP virtualization
     - KVM: s390: fix locking for crypto setting error path
     - KVM: s390: Tracing APCB changes
     - s390: vfio-ap: setup APCB mask using KVM dedicated function
     - s390/zcrypt: Add ZAPQ inline function.
     - s390/zcrypt: Review inline assembler constraints.
     - s390/zcrypt: Integrate ap_asm.h into include/asm/ap.h.
     - s390/zcrypt: fix ap_instructions_available() returncodes
     - s390/zcrypt: remove VLA usage from the AP bus
     - s390/zcrypt: Remove deprecated ioctls.
     - s390/zcrypt: Remove deprecated zcrypt proc interface.
     - s390/zcrypt: Support up to 256 crypto adapters.
     - [Config:] Enable CONFIG_S390_AP_IOMMU and set CONFIG_VFIO_AP to module.
   * Bypass of mount visibility through userns + mount propagation (LP: #1789161)
     - mount: Retest MNT_LOCKED in do_umount
     - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts
   *  CVE-2018-18955: nested user namespaces with more than five extents
     incorrectly grant privileges over inode (LP: #1801924) // CVE-2018-18955
     - userns: also map extents in the reverse map to kernel IDs
   * kdump fail due to an IRQ storm (LP: #1797990)
     - SAUCE: x86/PCI: Export find_cap() to be used in early PCI code
     - SAUCE: x86/quirks: Add parameter to clear MSIs early on boot
     - SAUCE: x86/quirks: Scan all busses for early PCI quirks
   * linux: 4.15.0-40.43 -proposed tracker (LP: #1802554)
   * crash in ENA driver on removing an interface (LP: #1802341)
     - SAUCE: net: ena: fix crash during ena_remove()
   * Ubuntu 18.04.1 - [s390x] Kernel panic while stressing network bonding
     (LP: #1797367)
     - s390/qeth: don't keep track of MAC address's cast type
     - s390/qeth: consolidate qeth MAC address helpers
     - s390/qeth: avoid using is_multicast_ether_addr_64bits on (u8 *)[6]
     - s390/qeth: remove outdated portname debug msg
     - s390/qeth: reduce hard-coded access to ccw channels
     - s390/qeth: sanitize strings in debug messages
   * [18.04 FEAT] zcrypt DD: introduce APQN tags to support deterministic driver
     binding (LP: #1799184)
     - s390/zcrypt: code beautify
     - s390/zcrypt: AP bus support for alternate driver(s)
     - s390/zcrypt: hex string mask improvements for apmask and aqmask.
     - s390/zcrypt: remove unused functions and declarations
     - s390/zcrypt: Show load of cards and queues in sysfs
   * [GLK/CLX] Enhanced IBRS (LP: #1786139)
     - x86/speculation: Remove SPECTRE_V2_IBRS in enum spectre_v2_mitigation
     - x86/speculation: Support Enhanced IBRS on future CPUs
   * Allow signed kernels to be kexec'ed under lockdown (LP: #1798441)
     - Fix kexec forbidding kernels signed with keys in the secondary keyring to
       boot
   * Overlayfs in user namespace leaks directory content of inaccessible
     directories (LP: #1793458) // CVE-2018-6559
     - SAUCE: overlayfs: ensure mounter privileges when reading directories
   * Update ENA driver to version 2.0.1K (LP: #1798182)
     - net: ena: remove ndo_poll_controller
     - net: ena: fix warning in rmmod caused by double iounmap
     - net: ena: fix rare bug when failed restart/resume is followed by driver
       removal
     - net: ena: fix NULL dereference due to untimely napi initialization
     - net: ena: fix auto casting to boolean
     - net: ena: minor performance improvement
     - net: ena: complete host info to match latest ENA spec
     - net: ena: introduce Low Latency Queues data structures according to ENA spec
     - net: ena: add functions for handling Low Latency Queues in ena_com
     - net: ena: add functions for handling Low Latency Queues in ena_netdev
     - net: ena: use CSUM_CHECKED device indication to report skb's checksum status
     - net: ena: explicit casting and initialization, and clearer error handling
     - net: ena: limit refill Rx threshold to 256 to avoid latency issues
     - net: ena: change rx copybreak default to reduce kernel memory pressure
     - net: ena: remove redundant parameter in ena_com_admin_init()
     - net: ena: update driver version to 2.0.1
     - net: ena: fix indentations in ena_defs for better readability
     - net: ena: Fix Kconfig dependency on X86
     - net: ena: enable Low Latency Queues
     - net: ena: fix compilation error in xtensa architecture
   * Bionic update: upstream stable patchset 2018-10-29 (LP: #1800537)
     - bonding: re-evaluate force_primary when the primary slave name changes
     - cdc_ncm: avoid padding beyond end of skb
     - ipv6: allow PMTU exceptions to local routes
     - net: dsa: add error handling for pskb_trim_rcsum
     - net/sched: act_simple: fix parsing of TCA_DEF_DATA
     - tcp: verify the checksum of the first data segment in a new connection
     - udp: fix rx queue len reported by diag and proc interface
     - net: in virtio_net_hdr only add VLAN_HLEN to csum_start if payload holds
       vlan
     - tls: fix use-after-free in tls_push_record
     - ext4: fix hole length detection in ext4_ind_map_blocks()
     - ext4: update mtime in ext4_punch_hole even if no blocks are released
     - ext4: bubble errors from ext4_find_inline_data_nolock() up to ext4_iget()
     - ext4: fix fencepost error in check for inode count overflow during resize
     - driver core: Don't ignore class_dir_create_and_add() failure.
     - Btrfs: fix clone vs chattr NODATASUM race
     - Btrfs: fix memory and mount leak in btrfs_ioctl_rm_dev_v2()
     - btrfs: return error value if create_io_em failed in cow_file_range
     - btrfs: scrub: Don't use inode pages for device replace
     - ALSA: hda/conexant - Add fixup for HP Z2 G4 workstation
     - ALSA: hda - Handle kzalloc() failure in snd_hda_attach_pcm_stream()
     - ALSA: hda: add dock and led support for HP EliteBook 830 G5
     - ALSA: hda: add dock and led support for HP ProBook 640 G4
     - x86/MCE: Fix stack out-of-bounds write in mce-inject.c: Flags_read()
     - smb3: fix various xid leaks
     - CIFS: 511c54a2f69195b28afb9dd119f03787b1625bb4 adds a check for session
       expiry
     - cifs: For SMB2 security informaion query, check for minimum sized security
       descriptor instead of sizeof FileAllInformation class
     - nbd: fix nbd device deletion
     - nbd: update size when connected
     - nbd: use bd_set_size when updating disk size
     - blk-mq: reinit q->tag_set_list entry only after grace period
     - bdi: Move cgroup bdi_writeback to a dedicated low concurrency workqueue
     - cpufreq: Fix new policy initialization during limits updates via sysfs
     - cpufreq: governors: Fix long idle detection logic in load calculation
     - libata: zpodd: small read overflow in eject_tray()
     - libata: Drop SanDisk SD7UB3Q*G1001 NOLPM quirk
     - w1: mxc_w1: Enable clock before calling clk_get_rate() on it
     - x86/intel_rdt: Enable CMT and MBM on new Skylake stepping
     - iwlwifi: fw: harden page loading code
     - orangefs: set i_size on new symlink
     - orangefs: report attributes_mask and attributes for statx
     - HID: intel_ish-hid: ipc: register more pm callbacks to support hibernation
     - HID: wacom: Correct logical maximum Y for 2nd-gen Intuos Pro large
     - mm, page_alloc: do not break __GFP_THISNODE by zonelist reset
     - net: phy: dp83822: use BMCR_ANENABLE instead of BMSR_ANEGCAPABLE for DP83620
     - cpufreq: ti-cpufreq: Fix an incorrect error return value
     - x86/vector: Fix the args of vector_alloc tracepoint
     - x86/apic/vector: Prevent hlist corruption and leaks
     - x86/apic: Provide apic_ack_irq()
     - x86/ioapic: Use apic_ack_irq()
     - x86/platform/uv: Use apic_ack_irq()
     - irq_remapping: Use apic_ack_irq()
     - genirq/generic_pending: Do not lose pending affinity update
     - genirq/affinity: Defer affinity setting if irq chip is busy
     - genirq/migration: Avoid out of line call if pending is not set
   * [bionic]mlx5: reading SW stats through ifstat cause kernel crash
     (LP: #1799049)
     - net/mlx5e: Don't attempt to dereference the ppriv struct if not being
       eswitch manager
   * [Bionic][Cosmic]  ipmi: Fix timer race with module unload (LP: #1799281)
     - ipmi: Fix timer race with module unload
   * [Bionic] ipmi: Remove ACPI SPMI probing from the SSIF (I2C) driver
     (LP: #1799276)
     - ipmi: Remove ACPI SPMI probing from the SSIF (I2C) driver
   * execveat03 in ubuntu_ltp_syscalls failed on X/B (LP: #1786729)
     - cap_inode_getsecurity: use d_find_any_alias() instead of d_find_alias()
   * [Bionic][Cosmic] Fix to ipmi to support vendor specific messages greater
     than 255 bytes (LP: #1799794)
     - ipmi:ssif: Add support for multi-part transmit messages > 2 parts
   * libvirtd is unable to configure bridge devices inside of LXD containers
     (LP: #1784501)
     - kernfs: allow creating kernfs objects with arbitrary uid/gid
     - sysfs, kobject: allow creating kobject belonging to arbitrary users
     - kobject: kset_create_and_add() - fetch ownership info from parent
     - driver core: set up ownership of class devices in sysfs
     - net-sysfs: require net admin in the init ns for setting tx_maxrate
     - net-sysfs: make sure objects belong to container's owner
     - net: create reusable function for getting ownership info of sysfs inodes
     - bridge: make sure objects belong to container's owner
     - sysfs: Fix regression when adding a file to an existing group
   * [Ubuntu] kvm: fix deadlock when killed by oom (LP: #1800849)
     - s390/kvm: fix deadlock when killed by oom
   * [Ubuntu] net/af_iucv: fix skb leaks for HiperTransport (LP: #1800639)
     - net/af_iucv: drop inbound packets with invalid flags
     - net/af_iucv: fix skb handling on HiperTransport xmit error
   * Power consumption during s2idle is higher than long idle(sk hynix)
     (LP: #1801875)
     - SAUCE: pci: prevent sk hynix nvme from entering D3
     - SAUCE: nvme: add quirk to not call disable function when suspending
   * Enable keyboard wakeup for S2Idle laptops (LP: #1798552)
     - Input: i8042 - enable keyboard wakeups by default when s2idle is used
   * NULL pointer dereference at 0000000000000020 when access
     dst_orig->ops->family in function  xfrm_lookup_with_ifid() (LP: #1801878)
     - xfrm: Fix NULL pointer dereference when skb_dst_force clears the dst_entry.
   * [Ubuntu] qdio: reset old sbal_state flags (LP: #1801686)
     - s390/qdio: reset old sbal_state flags
   * hns3: map tx ring to tc (LP: #1802023)
     - net: hns3: Set tx ring' tc info when netdev is up
   * [Ubuntu] qeth: Fix potential array overrun in cmd/rc lookup (LP: #1800641)
     - s390: qeth_core_mpc: Use ARRAY_SIZE instead of reimplementing its function
     - s390: qeth: Fix potential array overrun in cmd/rc lookup
   * Vulkan applications cause permanent memory leak with Intel GPU
     (LP: #1798165)
     - drm/syncobj: Don't leak fences when WAIT_FOR_SUBMIT is set
   * Mounting SOFS SMB shares fails (LP: #1792580)
     - cifs: connect to servername instead of IP for IPC$ share
   * Packaging resync (LP: #1786013)
     - [Package] add support for specifying the primary makefile
Checksums-Sha1: 
 f8bf305dc0347f1bac6c342af0679ec1004a134c 10971588 linux-azure-headers-4.15.0-1033_4.15.0-1033.34~14.04.2_all.deb
 3a4e843605faf68b412e486ac18d5c72f16d1f3e 24106 linux-azure_4.15.0-1033.34~14.04.2_amd64_translations.tar.gz
 06b08b723bc6e39b703273d46ba10221ab66979b 1035636 linux-azure-tools-4.15.0-1033_4.15.0-1033.34~14.04.2_amd64.deb
 325e2e398cd3cd715db711239d083f631c78ffe9 876 linux-azure-tools-4.15.0-1033-dbgsym_4.15.0-1033.34~14.04.2_amd64.ddeb
 c2f17fb233ef1ae6b8ea8ebf0033905accdfcb50 67828 linux-azure-cloud-tools-4.15.0-1033_4.15.0-1033.34~14.04.2_amd64.deb
 63444311c9aef41d3040c2d72542637ca43d1c73 852 linux-azure-cloud-tools-4.15.0-1033-dbgsym_4.15.0-1033.34~14.04.2_amd64.ddeb
 f0d3367445c4b6121052969bc2b7ece3d1739c69 7733236 linux-image-unsigned-4.15.0-1033-azure_4.15.0-1033.34~14.04.2_amd64.deb
 594c9475b99e8442e5a4b1003911823a2693882c 10928970 linux-modules-4.15.0-1033-azure_4.15.0-1033.34~14.04.2_amd64.deb
 99df2ada29a55f22af94a48444e9b9e2d4950273 10242012 linux-modules-extra-4.15.0-1033-azure_4.15.0-1033.34~14.04.2_amd64.deb
 ecf75a3489eef6261b74564b0185f84af7e8f880 928434 linux-headers-4.15.0-1033-azure_4.15.0-1033.34~14.04.2_amd64.deb
 a138b57271009c351adcb3cf86e3edb90f5f5541 322157364 linux-image-unsigned-4.15.0-1033-azure-dbgsym_4.15.0-1033.34~14.04.2_amd64.ddeb
 0a18013944e252f2b17fba82ae450feabb444fb1 1886 linux-tools-4.15.0-1033-azure_4.15.0-1033.34~14.04.2_amd64.deb
 539e027e6358cdae61bce61423f4bd6e15a5a558 1812 linux-cloud-tools-4.15.0-1033-azure_4.15.0-1033.34~14.04.2_amd64.deb
 22a41587c31a99677a1740ba87b6d3a15f7061c8 7689456 linux-azure_4.15.0-1033.34~14.04.2_amd64.tar.gz
Checksums-Sha256: 
 a5d624f960d225f382bce9b967d3b87762fa1716717ca5c1b33aee0860c3fc0d 10971588 linux-azure-headers-4.15.0-1033_4.15.0-1033.34~14.04.2_all.deb
 617dd57069bb439f3f51d1fbafc5ea9b6fbb1f5875082fc8d2a15b3eaa2b65a6 24106 linux-azure_4.15.0-1033.34~14.04.2_amd64_translations.tar.gz
 d9d5cb3d7dfa87e3f3af683c00b1e85cd9c1d4a52bad018403aa8f6971d736ea 1035636 linux-azure-tools-4.15.0-1033_4.15.0-1033.34~14.04.2_amd64.deb
 26714f160ce711e4c10584c0dbd3aaa78921e3e918cc3c0607a21b6eeead2461 876 linux-azure-tools-4.15.0-1033-dbgsym_4.15.0-1033.34~14.04.2_amd64.ddeb
 3432cb13abf2c6dd18f98e22bca5cd1fd838b5697eca933012da2fb0f1e877fc 67828 linux-azure-cloud-tools-4.15.0-1033_4.15.0-1033.34~14.04.2_amd64.deb
 15907e60c3eb8c0eca6bcc928d154dbb1c5953865a41f51dd7f00dd130ba61b5 852 linux-azure-cloud-tools-4.15.0-1033-dbgsym_4.15.0-1033.34~14.04.2_amd64.ddeb
 d7c424986e2b943142ab02334b9a8751b31e3f6b4121d833a554c1e53ffa9f80 7733236 linux-image-unsigned-4.15.0-1033-azure_4.15.0-1033.34~14.04.2_amd64.deb
 ac8b18023348bedd821479b75533054ff413f4c1d65b3ef022dd0802daea9c83 10928970 linux-modules-4.15.0-1033-azure_4.15.0-1033.34~14.04.2_amd64.deb
 1b79a051b4eed1e9ce9bc8e103aaddb8715eb89d11eb418a7b9b9293ca5381a9 10242012 linux-modules-extra-4.15.0-1033-azure_4.15.0-1033.34~14.04.2_amd64.deb
 1205a1aae3899e44ced8f80e712c410e3947de9f58c316c4d3359be4072a3447 928434 linux-headers-4.15.0-1033-azure_4.15.0-1033.34~14.04.2_amd64.deb
 520bd7b4a467da5a3e731670e9e934f5d8459f6b89366cde5182ef46e44c7471 322157364 linux-image-unsigned-4.15.0-1033-azure-dbgsym_4.15.0-1033.34~14.04.2_amd64.ddeb
 2796c1a2de307e958fa81d4e21852d0860b624950922d4f42a8e64adacea08d1 1886 linux-tools-4.15.0-1033-azure_4.15.0-1033.34~14.04.2_amd64.deb
 011526aedf99ff039d9491cf9eb3619f50c05b1ab6df850a73beaeaeccf0388c 1812 linux-cloud-tools-4.15.0-1033-azure_4.15.0-1033.34~14.04.2_amd64.deb
 1fafa9deae181e6fc19d66bce5e2d1c12a7b432ec522ae0b2dcdcafd4182de8d 7689456 linux-azure_4.15.0-1033.34~14.04.2_amd64.tar.gz
Files: 
 9ece9c560fcceb3ccd5b5c2e97c7169d 10971588 devel optional linux-azure-headers-4.15.0-1033_4.15.0-1033.34~14.04.2_all.deb
 b875debe7018992d08db36f6d251b675 24106 raw-translations - linux-azure_4.15.0-1033.34~14.04.2_amd64_translations.tar.gz
 c9180837080a97a27c8e02f44d7b0e0d 1035636 devel optional linux-azure-tools-4.15.0-1033_4.15.0-1033.34~14.04.2_amd64.deb
 5b808aafde4404dbd3d4ac2184b026e2 876 devel extra linux-azure-tools-4.15.0-1033-dbgsym_4.15.0-1033.34~14.04.2_amd64.ddeb
 25e24a379bf9c73348d1dde0a820382b 67828 devel optional linux-azure-cloud-tools-4.15.0-1033_4.15.0-1033.34~14.04.2_amd64.deb
 05209865f0afa9542941b424bed06492 852 devel extra linux-azure-cloud-tools-4.15.0-1033-dbgsym_4.15.0-1033.34~14.04.2_amd64.ddeb
 71a5fcee51ad4025321b9d3c3b7fff1d 7733236 kernel optional linux-image-unsigned-4.15.0-1033-azure_4.15.0-1033.34~14.04.2_amd64.deb
 8141b4b3c69f351d320c17201f76ef8c 10928970 kernel optional linux-modules-4.15.0-1033-azure_4.15.0-1033.34~14.04.2_amd64.deb
 d416bd8fd0ad9059c40132a9faf48558 10242012 kernel optional linux-modules-extra-4.15.0-1033-azure_4.15.0-1033.34~14.04.2_amd64.deb
 afa20ac590095fe497662c0f44f85607 928434 devel optional linux-headers-4.15.0-1033-azure_4.15.0-1033.34~14.04.2_amd64.deb
 5cb7f9dad7561691bd987aa48ed8000b 322157364 devel optional linux-image-unsigned-4.15.0-1033-azure-dbgsym_4.15.0-1033.34~14.04.2_amd64.ddeb
 91286248f79087652e5433c216713211 1886 devel optional linux-tools-4.15.0-1033-azure_4.15.0-1033.34~14.04.2_amd64.deb
 b99868dc2d9281fe8b512ffdc2737875 1812 devel optional linux-cloud-tools-4.15.0-1033-azure_4.15.0-1033.34~14.04.2_amd64.deb
 4bfea278d8e713dadd9edf387ca9b1d3 7689456 raw-signing - linux-azure_4.15.0-1033.34~14.04.2_amd64.tar.gz


More information about the Trusty-changes mailing list