Format: 1.8 Date: Thu, 03 Mar 2022 08:52:36 +0100 Source: linux-aws-5.4 Binary: linux-aws-5.4-headers-5.4.0-1068 linux-aws-5.4-tools-5.4.0-1068 linux-aws-5.4-cloud-tools-5.4.0-1068 linux-image-unsigned-5.4.0-1068-aws linux-modules-5.4.0-1068-aws linux-modules-extra-5.4.0-1068-aws linux-headers-5.4.0-1068-aws linux-image-unsigned-5.4.0-1068-aws-dbgsym linux-tools-5.4.0-1068-aws linux-cloud-tools-5.4.0-1068-aws linux-buildinfo-5.4.0-1068-aws Architecture: arm64 arm64_translations Version: 5.4.0-1068.72~18.04.1 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Juerg Haefliger Description: linux-aws-5.4-cloud-tools-5.4.0-1068 - Linux kernel version specific cloud tools for version 5.4.0-1068 linux-aws-5.4-headers-5.4.0-1068 - Header files related to Linux kernel version 5.4.0 linux-aws-5.4-tools-5.4.0-1068 - Linux kernel version specific tools for version 5.4.0-1068 linux-buildinfo-5.4.0-1068-aws - Linux kernel buildinfo for version 5.4.0 on ARMv8 SMP linux-cloud-tools-5.4.0-1068-aws - Linux kernel version specific cloud tools for version 5.4.0-1068 linux-headers-5.4.0-1068-aws - Linux kernel headers for version 5.4.0 on ARMv8 SMP linux-image-unsigned-5.4.0-1068-aws - Linux kernel image for version 5.4.0 on ARMv8 SMP linux-image-unsigned-5.4.0-1068-aws-dbgsym - Linux kernel debug image for version 5.4.0 on ARMv8 SMP linux-modules-5.4.0-1068-aws - Linux kernel extra modules for version 5.4.0 on ARMv8 SMP linux-modules-extra-5.4.0-1068-aws - Linux kernel extra modules for version 5.4.0 on ARMv8 SMP linux-tools-5.4.0-1068-aws - Linux kernel version specific tools for version 5.4.0-1068 Launchpad-Bugs-Fixed: 1786013 1961338 Changes: linux-aws-5.4 (5.4.0-1068.72~18.04.1) bionic; urgency=medium . [ Ubuntu: 5.4.0-1068.72 ] . * CVE-2022-23960 - SAUCE: arm64: fix build error in cpu_errata * Packaging resync (LP: #1786013) - [Packaging] resync getabis * Miscellaneous Ubuntu changes - [Config] update configs and annotations with security options * CVE-2022-23960 - arm64: Add part number for Arm Cortex-A77 - arm64: Add Neoverse-N2, Cortex-A710 CPU part definition - arm64: Add Cortex-X2 CPU part definition - arm64: add ID_AA64ISAR2_EL1 sys register - SAUCE: arm64: entry.S: Add ventry overflow sanity checks - SAUCE: arm64: entry: Make the trampoline cleanup optional - SAUCE: arm64: entry: Free up another register on kpti's tramp_exit path - SAUCE: arm64: entry: Move the trampoline data page before the text page - SAUCE: arm64: entry: Allow tramp_alias to access symbols after the 4K boundary - SAUCE: arm64: entry: Don't assume tramp_vectors is the start of the vectors - SAUCE: arm64: entry: Move trampoline macros out of ifdef'd section - SAUCE: arm64: entry: Make the kpti trampoline's kpti sequence optional - SAUCE: arm64: entry: Allow the trampoline text to occupy multiple pages - SAUCE: arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations - SAUCE: arm64: entry: Add vectors that have the bhb mitigation sequences - SAUCE: arm64: entry: Add macro for reading symbol addresses from the trampoline - SAUCE: arm64: Add percpu vectors for EL1 - SAUCE: arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 - SAUCE: KVM: arm64: Add templates for BHB mitigation sequences - SAUCE: arm64: Mitigate spectre style branch history side channels - SAUCE: KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated - SAUCE: arm64: Use the clearbhb instruction in mitigations - [Config]: set CONFIG_MITIGATE_SPECTRE_BRANCH_HISTORY=y * CVE-2022-25636 - netfilter: nf_tables_offload: incorrect flow offload action array size * CVE-2022-0001 - x86/speculation: Merge one test in spectre_v2_user_select_mitigation() - x86,bugs: Unconditionally allow spectre_v2=retpoline,amd - SAUCE: x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE - SAUCE: x86/speculation: Add eIBRS + Retpoline options - SAUCE: Documentation/hw-vuln: Update spectre doc * Disable unprivileged BPF by default (LP: #1961338) - bpf: Add kconfig knob for disabling unpriv bpf by default - [Config] set CONFIG_BPF_UNPRIV_DEFAULT_OFF=y Checksums-Sha1: ea476707b38fbe220fe0863ec150019b585ffd2c 79872 linux-aws-5.4-cloud-tools-5.4.0-1068_5.4.0-1068.72~18.04.1_arm64.deb 836456a9ede466647c91648e8c176d5d3a186afa 4396148 linux-aws-5.4-tools-5.4.0-1068_5.4.0-1068.72~18.04.1_arm64.deb 07937ebbb585fcf0d7f0be99203e20bc553ca24d 14065 linux-aws-5.4_5.4.0-1068.72~18.04.1_arm64.buildinfo 9f99480f1e95aab05d91ca97dd8cc0621f69f5ae 12119337 linux-aws-5.4_5.4.0-1068.72~18.04.1_arm64.tar.gz 763af5d7e617fbdb5fe3910d2a7e2f2545d3c548 28346 linux-aws-5.4_5.4.0-1068.72~18.04.1_arm64_translations.tar.gz 57148bc160e5f65f6b6f3dc01a1b0e36995904c0 404032 linux-buildinfo-5.4.0-1068-aws_5.4.0-1068.72~18.04.1_arm64.deb 38477faa3268c81891bd2321dd26461194d544a3 1884 linux-cloud-tools-5.4.0-1068-aws_5.4.0-1068.72~18.04.1_arm64.deb 76c7f7d74996944b546eaa94a9e4efabf7d9d2c4 955660 linux-headers-5.4.0-1068-aws_5.4.0-1068.72~18.04.1_arm64.deb fd0b5f0d1391400415a587554f723d4f83eb39a1 799170340 linux-image-unsigned-5.4.0-1068-aws-dbgsym_5.4.0-1068.72~18.04.1_arm64.ddeb 98346fa69b8d5488721533eaf5fbb48e4e0d3513 11980084 linux-image-unsigned-5.4.0-1068-aws_5.4.0-1068.72~18.04.1_arm64.deb 779682219fac9be17760f37b470c066c1c986d6b 14040524 linux-modules-5.4.0-1068-aws_5.4.0-1068.72~18.04.1_arm64.deb 86f0cdb937e0e75b58b57e39937efff7ec91d8f6 36848944 linux-modules-extra-5.4.0-1068-aws_5.4.0-1068.72~18.04.1_arm64.deb d82d8521e80590c4a3dddb623ab712651207d01d 1952 linux-tools-5.4.0-1068-aws_5.4.0-1068.72~18.04.1_arm64.deb Checksums-Sha256: 8a7b3c4c51d1d8ebe286b31c5b24a8cf724873151d320dc776fa26342c756a32 79872 linux-aws-5.4-cloud-tools-5.4.0-1068_5.4.0-1068.72~18.04.1_arm64.deb 648eac1b3605162767b408e0ea01d5fb57513c120a991593f9efa54d2dec148b 4396148 linux-aws-5.4-tools-5.4.0-1068_5.4.0-1068.72~18.04.1_arm64.deb 556fa02d1c09d35613b1ff345cc9fccbc3bb973147d75b515ee64a8ccc88dfe6 14065 linux-aws-5.4_5.4.0-1068.72~18.04.1_arm64.buildinfo fc48d5d9e48d476ed5b7c9603282400d8e9777b138d8ee3d0caab12e54bb919f 12119337 linux-aws-5.4_5.4.0-1068.72~18.04.1_arm64.tar.gz a59c11df87ede7718f07bc152cb995f4fcf94fcf243c73dfea35b145c1a08034 28346 linux-aws-5.4_5.4.0-1068.72~18.04.1_arm64_translations.tar.gz 9b66b02fb38a4d75e42f6b2a256e079b2b723dde20bbec5364b866469514d010 404032 linux-buildinfo-5.4.0-1068-aws_5.4.0-1068.72~18.04.1_arm64.deb d622cea10c99fc7bca857590f1b1e33013afe612e01d23bbdc7e3e758e6703ae 1884 linux-cloud-tools-5.4.0-1068-aws_5.4.0-1068.72~18.04.1_arm64.deb fb0fd18f55a1b7e78c639e393933825bd15589d922b17f7c80debbc4b057bbeb 955660 linux-headers-5.4.0-1068-aws_5.4.0-1068.72~18.04.1_arm64.deb 38d55e1843ce39ed2bbbaa5bc3b8c7a260dd0c2a8d8ca423c471a38d961806f8 799170340 linux-image-unsigned-5.4.0-1068-aws-dbgsym_5.4.0-1068.72~18.04.1_arm64.ddeb be71d885a9517291617253ef5a6314c28d627b2faca3c35b901a905e93e5472c 11980084 linux-image-unsigned-5.4.0-1068-aws_5.4.0-1068.72~18.04.1_arm64.deb a2ba7630df02faca85c6d383bbb71c8edaa954cc7f96e41a7fc7462a6076e23e 14040524 linux-modules-5.4.0-1068-aws_5.4.0-1068.72~18.04.1_arm64.deb 7f61b225bba0d322c9129aeae544bf5bd98fe65382bcd523f2071ab64039439b 36848944 linux-modules-extra-5.4.0-1068-aws_5.4.0-1068.72~18.04.1_arm64.deb 0a62d70f62aea81d2a3d757a3801f010afb829934f60ede0a45217057b478c7a 1952 linux-tools-5.4.0-1068-aws_5.4.0-1068.72~18.04.1_arm64.deb Files: a9141d147b361abe0228bc17ef2dd80c 79872 devel optional linux-aws-5.4-cloud-tools-5.4.0-1068_5.4.0-1068.72~18.04.1_arm64.deb c9a94e63c516123f5c701b14b3c583d2 4396148 devel optional linux-aws-5.4-tools-5.4.0-1068_5.4.0-1068.72~18.04.1_arm64.deb 8fd0c1137c4aff37077cb2424e9e616e 14065 devel optional linux-aws-5.4_5.4.0-1068.72~18.04.1_arm64.buildinfo d8bc80f9ac384750617985c87eb76fe2 12119337 raw-signing - linux-aws-5.4_5.4.0-1068.72~18.04.1_arm64.tar.gz fab2b3d9f8745c82e715da24d620c151 28346 raw-translations - linux-aws-5.4_5.4.0-1068.72~18.04.1_arm64_translations.tar.gz 9abacaa5dfe320fec61b37c3652714b4 404032 kernel optional linux-buildinfo-5.4.0-1068-aws_5.4.0-1068.72~18.04.1_arm64.deb b6e51cb7fe465978319f9e8dfb3f8a56 1884 devel optional linux-cloud-tools-5.4.0-1068-aws_5.4.0-1068.72~18.04.1_arm64.deb 2e995d0b33701eaf382756a7b7a6bc2d 955660 devel optional linux-headers-5.4.0-1068-aws_5.4.0-1068.72~18.04.1_arm64.deb e6df08a5dae025c28c945da4bda46c81 799170340 devel optional linux-image-unsigned-5.4.0-1068-aws-dbgsym_5.4.0-1068.72~18.04.1_arm64.ddeb a3220ee8c60ca7bc98ed3d438eedc2f2 11980084 kernel optional linux-image-unsigned-5.4.0-1068-aws_5.4.0-1068.72~18.04.1_arm64.deb 1e56edebe12888e6c567be9ee7522a21 14040524 kernel optional linux-modules-5.4.0-1068-aws_5.4.0-1068.72~18.04.1_arm64.deb 3022388c895ed94ecd23568639887e5f 36848944 kernel optional linux-modules-extra-5.4.0-1068-aws_5.4.0-1068.72~18.04.1_arm64.deb e0c0c3e951b20f121dc9532b7dc28239 1952 devel optional linux-tools-5.4.0-1068-aws_5.4.0-1068.72~18.04.1_arm64.deb