[ubuntu/xenial-proposed] linux-aws-hwe 4.15.0-1078.82~16.04.1 (Accepted)

2020-07-08 Thread Andy Whitcroft
linux-aws-hwe (4.15.0-1078.82~16.04.1) xenial; urgency=medium

  * xenial/linux-aws-hwe: 4.15.0-1078.82~16.04.1 -proposed tracker
(LP: #1885794)

  [ Ubuntu: 4.15.0-1078.82 ]

  * bionic/linux-aws: 4.15.0-1078.82 -proposed tracker (LP: #1885795)
  * Build and ship a signed wireguard.ko (LP: #1861284)
- [Config] aws: wireguard -- enable on all architectures
  * bionic/linux: 4.15.0-110.111 -proposed tracker (LP: #1885814)
  * Packaging resync (LP: #1786013)
- update dkms package versions
  * CVE-2020-11935
- SAUCE: aufs: do not call i_readcount_inc()
- SAUCE: aufs: bugfix, IMA i_readcount
  * CVE-2020-10757
- mm: Fix mremap not considering huge pmd devmap
  * Update lockdown patches (LP: #1884159)
- efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN
- efi: Restrict efivar_ssdt_load when the kernel is locked down
- powerpc/xmon: add read-only mode
- powerpc/xmon: Restrict when kernel is locked down
- [Config] CONFIG_XMON_DEFAULT_RO_MODE=y
- SAUCE: acpi: disallow loading configfs acpi tables when locked down
  * seccomp_bpf fails on powerpc (LP: #1885757)
- SAUCE: selftests/seccomp: fix ptrace tests on powerpc
  * Introduce the new NVIDIA 418-server and 440-server series, and update the
current NVIDIA drivers (LP: #1881137)
- [packaging] add signed modules for the 418-server and the 440-server
  flavours

  [ Ubuntu: 4.15.0-1077.81 ]

  * Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
- update dkms package versions
  * Build and ship a signed wireguard.ko (LP: #1861284)
- [Packaging] wireguard -- add support for building signed .ko
  * CVE-2019-16089
- SAUCE: nbd_genl_status: null check for nla_nest_start
  * CVE-2019-19642
- kernel/relay.c: handle alloc_percpu returning NULL in relay_open
  * CVE-2019-12380
- efi/x86/Add missing error handling to old_memmap 1:1 mapping code
  * CVE-2019-19039 // CVE-2019-19377
- btrfs: sink flush_fn to extent_write_cache_pages
- btrfs: extent_io: Move the BUG_ON() in flush_write_bio() one level up
- btrfs: Don't submit any btree write bio if the fs has errors
  * CVE-2019-19036
- btrfs: volumes: Use more straightforward way to calculate map length
- btrfs: tree-checker: Try to detect missing INODE_ITEM
- Btrfs: tree-checker: detect file extent items with overlapping ranges
- Btrfs: make tree checker detect checksum items with overlapping ranges
- btrfs: harden agaist duplicate fsid on scanned devices
- Btrfs: fix missing data checksums after replaying a log tree
- btrfs: reloc: fix reloc root leak and NULL pointer dereference
- btrfs: Validate child tree block's level and first key
- btrfs: Detect unbalanced tree with empty leaf before crashing btree
  operations
  * CVE-2019-19318
- btrfs: tree-checker: Replace root parameter with fs_info
- btrfs: tree-checker: Check level for leaves and nodes
- btrfs: tree-checker: get fs_info from eb in generic_err
- btrfs: tree-checker: get fs_info from eb in file_extent_err
- btrfs: tree-checker: get fs_info from eb in check_csum_item
- btrfs: tree-checker: get fs_info from eb in dir_item_err
- btrfs: tree-checker: get fs_info from eb in check_dir_item
- btrfs: tree-checker: get fs_info from eb in block_group_err
- btrfs: tree-checker: get fs_info from eb in check_block_group_item
- btrfs: tree-checker: get fs_info from eb in check_extent_data_item
- btrfs: tree-checker: get fs_info from eb in check_leaf_item
- btrfs: tree-checker: get fs_info from eb in check_leaf
- btrfs: tree-checker: get fs_info from eb in chunk_err
- btrfs: tree-checker: get fs_info from eb in dev_item_err
- btrfs: tree-checker: get fs_info from eb in check_dev_item
- btrfs: tree-checker: get fs_info from eb in check_inode_item
- btrfs: tree-checker: Add ROOT_ITEM check
- btrfs: tree-checker: Add EXTENT_ITEM and METADATA_ITEM check
- btrfs: tree-checker: Add simple keyed refs check
- btrfs: tree-checker: Add EXTENT_DATA_REF check
- btrfs: tree-checker: Fix wrong check on max devid
- Btrfs: fix selftests failure due to uninitialized i_mode in test inodes
  * CVE-2019-19813 // CVE-2019-19816
- btrfs: Refactor parameter of BTRFS_MAX_DEVS() from root to fs_info
- btrfs: Move btrfs_check_chunk_valid() to tree-check.[ch] and export it
- btrfs: tree-checker: Make chunk item checker messages more readable
- btrfs: tree-checker: Make btrfs_check_chunk_valid() return EUCLEAN instead
  of EIO
- btrfs: tree-checker: Check chunk item at tree block read time
- btrfs: tree-checker: Verify dev item
- btrfs: tree-checker: Enhance chunk checker to validate chunk profile
- btrfs: tree-checker: Verify inode item
- btrfs: inode: Verify inode mode to avoid NULL pointer dereference
  * CVE-2020-0543
- UBUNTU/SAUCE: x86/speculation/srbds: do not try to turn mitigation off 
when
  not 

[ubuntu/xenial-proposed] linux-meta-aws-hwe 4.15.0.1078.75 (Accepted)

2020-07-08 Thread Andy Whitcroft
linux-meta-aws-hwe (4.15.0.1078.75) xenial; urgency=medium

  * Bump ABI 4.15.0-1078

Date: 2020-07-07 09:51:55.365233+00:00
Changed-By: Sultan Alsawaf 
Signed-By: Andy Whitcroft 
https://launchpad.net/ubuntu/+source/linux-meta-aws-hwe/4.15.0.1078.75
Sorry, changesfile not available.-- 
Xenial-changes mailing list
Xenial-changes@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/xenial-changes


[ubuntu/xenial-updates] thunderbird 1:68.10.0+build1-0ubuntu0.16.04.1 (Accepted)

2020-07-08 Thread Ubuntu Archive Robot
thunderbird (1:68.10.0+build1-0ubuntu0.16.04.1) xenial; urgency=medium

  * New upstream stable release (68.10.0build1)

thunderbird (1:68.9.0+build1-0ubuntu0.16.04.1) xenial; urgency=medium

  * New upstream stable release (68.9.0build1)

thunderbird (1:68.8.1+build1-0ubuntu0.16.04.1) xenial; urgency=medium

  * New upstream stable release (68.8.1build1)

Date: 2020-07-01 14:08:22.977152+00:00
Changed-By: Olivier Tilloy 
Signed-By: Ubuntu Archive Robot 

https://launchpad.net/ubuntu/+source/thunderbird/1:68.10.0+build1-0ubuntu0.16.04.1
Sorry, changesfile not available.-- 
Xenial-changes mailing list
Xenial-changes@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/xenial-changes


[ubuntu/xenial-security] thunderbird 1:68.10.0+build1-0ubuntu0.16.04.1 (Accepted)

2020-07-08 Thread Chris Coulson
thunderbird (1:68.10.0+build1-0ubuntu0.16.04.1) xenial; urgency=medium

  * New upstream stable release (68.10.0build1)

thunderbird (1:68.9.0+build1-0ubuntu0.16.04.1) xenial; urgency=medium

  * New upstream stable release (68.9.0build1)

thunderbird (1:68.8.1+build1-0ubuntu0.16.04.1) xenial; urgency=medium

  * New upstream stable release (68.8.1build1)

Date: 2020-07-01 14:08:22.977152+00:00
Changed-By: Olivier Tilloy 
Signed-By: Chris Coulson 
https://launchpad.net/ubuntu/+source/thunderbird/1:68.10.0+build1-0ubuntu0.16.04.1
Sorry, changesfile not available.-- 
Xenial-changes mailing list
Xenial-changes@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/xenial-changes


[ubuntu/xenial-proposed] linux-oracle_4.15.0-1049.53~16.04.1_amd64.tar.gz - (Accepted)

2020-07-08 Thread Ian May
linux-oracle (4.15.0-1049.53~16.04.1) xenial; urgency=medium

  * xenial/linux-oracle: 4.15.0-1049.53~16.04.1 -proposed tracker (LP: #1885809)

  [ Ubuntu: 4.15.0-1049.53 ]

  * bionic/linux-oracle: 4.15.0-1049.53 -proposed tracker (LP: #1885810)
  * Build and ship a signed wireguard.ko (LP: #1861284)
- [Config] oracle: wireguard -- enable on all architectures
  * bionic/linux: 4.15.0-110.111 -proposed tracker (LP: #1885814)
  * Packaging resync (LP: #1786013)
- update dkms package versions
  * CVE-2020-11935
- SAUCE: aufs: do not call i_readcount_inc()
- SAUCE: aufs: bugfix, IMA i_readcount
  * CVE-2020-10757
- mm: Fix mremap not considering huge pmd devmap
  * Update lockdown patches (LP: #1884159)
- efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN
- efi: Restrict efivar_ssdt_load when the kernel is locked down
- powerpc/xmon: add read-only mode
- powerpc/xmon: Restrict when kernel is locked down
- [Config] CONFIG_XMON_DEFAULT_RO_MODE=y
- SAUCE: acpi: disallow loading configfs acpi tables when locked down
  * seccomp_bpf fails on powerpc (LP: #1885757)
- SAUCE: selftests/seccomp: fix ptrace tests on powerpc
  * Introduce the new NVIDIA 418-server and 440-server series, and update the
current NVIDIA drivers (LP: #1881137)
- [packaging] add signed modules for the 418-server and the 440-server
  flavours

  [ Ubuntu: 4.15.0-1048.52 ]

  * Build and ship a signed wireguard.ko (LP: #1861284)
- [Config] oracle: wireguard -- enable on all architectures
  * Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
- update dkms package versions
  * Build and ship a signed wireguard.ko (LP: #1861284)
- [Packaging] wireguard -- add support for building signed .ko
  * CVE-2019-16089
- SAUCE: nbd_genl_status: null check for nla_nest_start
  * CVE-2019-19642
- kernel/relay.c: handle alloc_percpu returning NULL in relay_open
  * CVE-2019-12380
- efi/x86/Add missing error handling to old_memmap 1:1 mapping code
  * CVE-2019-19039 // CVE-2019-19377
- btrfs: sink flush_fn to extent_write_cache_pages
- btrfs: extent_io: Move the BUG_ON() in flush_write_bio() one level up
- btrfs: Don't submit any btree write bio if the fs has errors
  * CVE-2019-19036
- btrfs: volumes: Use more straightforward way to calculate map length
- btrfs: tree-checker: Try to detect missing INODE_ITEM
- Btrfs: tree-checker: detect file extent items with overlapping ranges
- Btrfs: make tree checker detect checksum items with overlapping ranges
- btrfs: harden agaist duplicate fsid on scanned devices
- Btrfs: fix missing data checksums after replaying a log tree
- btrfs: reloc: fix reloc root leak and NULL pointer dereference
- btrfs: Validate child tree block's level and first key
- btrfs: Detect unbalanced tree with empty leaf before crashing btree
  operations
  * CVE-2019-19318
- btrfs: tree-checker: Replace root parameter with fs_info
- btrfs: tree-checker: Check level for leaves and nodes
- btrfs: tree-checker: get fs_info from eb in generic_err
- btrfs: tree-checker: get fs_info from eb in file_extent_err
- btrfs: tree-checker: get fs_info from eb in check_csum_item
- btrfs: tree-checker: get fs_info from eb in dir_item_err
- btrfs: tree-checker: get fs_info from eb in check_dir_item
- btrfs: tree-checker: get fs_info from eb in block_group_err
- btrfs: tree-checker: get fs_info from eb in check_block_group_item
- btrfs: tree-checker: get fs_info from eb in check_extent_data_item
- btrfs: tree-checker: get fs_info from eb in check_leaf_item
- btrfs: tree-checker: get fs_info from eb in check_leaf
- btrfs: tree-checker: get fs_info from eb in chunk_err
- btrfs: tree-checker: get fs_info from eb in dev_item_err
- btrfs: tree-checker: get fs_info from eb in check_dev_item
- btrfs: tree-checker: get fs_info from eb in check_inode_item
- btrfs: tree-checker: Add ROOT_ITEM check
- btrfs: tree-checker: Add EXTENT_ITEM and METADATA_ITEM check
- btrfs: tree-checker: Add simple keyed refs check
- btrfs: tree-checker: Add EXTENT_DATA_REF check
- btrfs: tree-checker: Fix wrong check on max devid
- Btrfs: fix selftests failure due to uninitialized i_mode in test inodes
  * CVE-2019-19813 // CVE-2019-19816
- btrfs: Refactor parameter of BTRFS_MAX_DEVS() from root to fs_info
- btrfs: Move btrfs_check_chunk_valid() to tree-check.[ch] and export it
- btrfs: tree-checker: Make chunk item checker messages more readable
- btrfs: tree-checker: Make btrfs_check_chunk_valid() return EUCLEAN instead
  of EIO
- btrfs: tree-checker: Check chunk item at tree block read time
- btrfs: tree-checker: Verify dev item
- btrfs: tree-checker: Enhance chunk checker to validate chunk profile
- btrfs: tree-checker: Verify inode item
- btrfs: inode: Verify inode mode to avoid NULL pointer 

[ubuntu/xenial-proposed] linux-signed-oracle 4.15.0-1049.53~16.04.1 (Accepted)

2020-07-08 Thread Łukasz Zemczak
linux-signed-oracle (4.15.0-1049.53~16.04.1) xenial; urgency=medium

  * Master version: 4.15.0-1049.53~16.04.1

Date: 2020-07-07 16:17:39.844901+00:00
Changed-By: Ian 
Signed-By: Łukasz Zemczak 
https://launchpad.net/ubuntu/+source/linux-signed-oracle/4.15.0-1049.53~16.04.1
Sorry, changesfile not available.-- 
Xenial-changes mailing list
Xenial-changes@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/xenial-changes


[ubuntu/xenial-proposed] linux-oracle 4.15.0-1049.53~16.04.1 (Accepted)

2020-07-08 Thread Łukasz Zemczak
linux-oracle (4.15.0-1049.53~16.04.1) xenial; urgency=medium

  * xenial/linux-oracle: 4.15.0-1049.53~16.04.1 -proposed tracker (LP: #1885809)

  [ Ubuntu: 4.15.0-1049.53 ]

  * bionic/linux-oracle: 4.15.0-1049.53 -proposed tracker (LP: #1885810)
  * Build and ship a signed wireguard.ko (LP: #1861284)
- [Config] oracle: wireguard -- enable on all architectures
  * bionic/linux: 4.15.0-110.111 -proposed tracker (LP: #1885814)
  * Packaging resync (LP: #1786013)
- update dkms package versions
  * CVE-2020-11935
- SAUCE: aufs: do not call i_readcount_inc()
- SAUCE: aufs: bugfix, IMA i_readcount
  * CVE-2020-10757
- mm: Fix mremap not considering huge pmd devmap
  * Update lockdown patches (LP: #1884159)
- efi/efi_test: Lock down /dev/efi_test and require CAP_SYS_ADMIN
- efi: Restrict efivar_ssdt_load when the kernel is locked down
- powerpc/xmon: add read-only mode
- powerpc/xmon: Restrict when kernel is locked down
- [Config] CONFIG_XMON_DEFAULT_RO_MODE=y
- SAUCE: acpi: disallow loading configfs acpi tables when locked down
  * seccomp_bpf fails on powerpc (LP: #1885757)
- SAUCE: selftests/seccomp: fix ptrace tests on powerpc
  * Introduce the new NVIDIA 418-server and 440-server series, and update the
current NVIDIA drivers (LP: #1881137)
- [packaging] add signed modules for the 418-server and the 440-server
  flavours

  [ Ubuntu: 4.15.0-1048.52 ]

  * Build and ship a signed wireguard.ko (LP: #1861284)
- [Config] oracle: wireguard -- enable on all architectures
  * Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
- update dkms package versions
  * Build and ship a signed wireguard.ko (LP: #1861284)
- [Packaging] wireguard -- add support for building signed .ko
  * CVE-2019-16089
- SAUCE: nbd_genl_status: null check for nla_nest_start
  * CVE-2019-19642
- kernel/relay.c: handle alloc_percpu returning NULL in relay_open
  * CVE-2019-12380
- efi/x86/Add missing error handling to old_memmap 1:1 mapping code
  * CVE-2019-19039 // CVE-2019-19377
- btrfs: sink flush_fn to extent_write_cache_pages
- btrfs: extent_io: Move the BUG_ON() in flush_write_bio() one level up
- btrfs: Don't submit any btree write bio if the fs has errors
  * CVE-2019-19036
- btrfs: volumes: Use more straightforward way to calculate map length
- btrfs: tree-checker: Try to detect missing INODE_ITEM
- Btrfs: tree-checker: detect file extent items with overlapping ranges
- Btrfs: make tree checker detect checksum items with overlapping ranges
- btrfs: harden agaist duplicate fsid on scanned devices
- Btrfs: fix missing data checksums after replaying a log tree
- btrfs: reloc: fix reloc root leak and NULL pointer dereference
- btrfs: Validate child tree block's level and first key
- btrfs: Detect unbalanced tree with empty leaf before crashing btree
  operations
  * CVE-2019-19318
- btrfs: tree-checker: Replace root parameter with fs_info
- btrfs: tree-checker: Check level for leaves and nodes
- btrfs: tree-checker: get fs_info from eb in generic_err
- btrfs: tree-checker: get fs_info from eb in file_extent_err
- btrfs: tree-checker: get fs_info from eb in check_csum_item
- btrfs: tree-checker: get fs_info from eb in dir_item_err
- btrfs: tree-checker: get fs_info from eb in check_dir_item
- btrfs: tree-checker: get fs_info from eb in block_group_err
- btrfs: tree-checker: get fs_info from eb in check_block_group_item
- btrfs: tree-checker: get fs_info from eb in check_extent_data_item
- btrfs: tree-checker: get fs_info from eb in check_leaf_item
- btrfs: tree-checker: get fs_info from eb in check_leaf
- btrfs: tree-checker: get fs_info from eb in chunk_err
- btrfs: tree-checker: get fs_info from eb in dev_item_err
- btrfs: tree-checker: get fs_info from eb in check_dev_item
- btrfs: tree-checker: get fs_info from eb in check_inode_item
- btrfs: tree-checker: Add ROOT_ITEM check
- btrfs: tree-checker: Add EXTENT_ITEM and METADATA_ITEM check
- btrfs: tree-checker: Add simple keyed refs check
- btrfs: tree-checker: Add EXTENT_DATA_REF check
- btrfs: tree-checker: Fix wrong check on max devid
- Btrfs: fix selftests failure due to uninitialized i_mode in test inodes
  * CVE-2019-19813 // CVE-2019-19816
- btrfs: Refactor parameter of BTRFS_MAX_DEVS() from root to fs_info
- btrfs: Move btrfs_check_chunk_valid() to tree-check.[ch] and export it
- btrfs: tree-checker: Make chunk item checker messages more readable
- btrfs: tree-checker: Make btrfs_check_chunk_valid() return EUCLEAN instead
  of EIO
- btrfs: tree-checker: Check chunk item at tree block read time
- btrfs: tree-checker: Verify dev item
- btrfs: tree-checker: Enhance chunk checker to validate chunk profile
- btrfs: tree-checker: Verify inode item
- btrfs: inode: Verify inode mode to avoid NULL pointer 

[ubuntu/xenial-proposed] linux-meta-oracle 4.15.0.1049.40 (Accepted)

2020-07-08 Thread Łukasz Zemczak
linux-meta-oracle (4.15.0.1049.40) xenial; urgency=medium

  * Bump ABI 4.15.0-1049

Date: 2020-07-07 16:17:37.801507+00:00
Changed-By: Ian 
Signed-By: Łukasz Zemczak 
https://launchpad.net/ubuntu/+source/linux-meta-oracle/4.15.0.1049.40
Sorry, changesfile not available.-- 
Xenial-changes mailing list
Xenial-changes@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/xenial-changes