Format: 1.8
Date: Fri, 22 Apr 2022 13:26:03 -0500
Source: linux-aws
Binary: linux-aws-headers-4.15.0-1128 linux-aws-tools-4.15.0-1128 linux-aws-cloud-tools-4.15.0-1128 linux-image-unsigned-4.15.0-1128-aws linux-modules-4.15.0-1128-aws linux-modules-extra-4.15.0-1128-aws linux-headers-4.15.0-1128-aws linux-image-unsigned-4.15.0-1128-aws-dbgsym linux-tools-4.15.0-1128-aws linux-cloud-tools-4.15.0-1128-aws linux-udebs-aws linux-buildinfo-4.15.0-1128-aws
Architecture: arm64 arm64_translations
Version: 4.15.0-1128.137
Distribution: bionic
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-arm64-028.buildd>
Changed-By: Ian May <ian.may@canonical.com>
Description:
 linux-aws-cloud-tools-4.15.0-1128 - Linux kernel version specific cloud tools for version 4.15.0-1128
 linux-aws-headers-4.15.0-1128 - Header files related to Linux kernel version 4.15.0
 linux-aws-tools-4.15.0-1128 - Linux kernel version specific tools for version 4.15.0-1128
 linux-buildinfo-4.15.0-1128-aws - Linux kernel buildinfo for version 4.15.0 on ARMv8 SMP
 linux-cloud-tools-4.15.0-1128-aws - Linux kernel version specific cloud tools for version 4.15.0-1128
 linux-headers-4.15.0-1128-aws - Linux kernel headers for version 4.15.0 on ARMv8 SMP
 linux-image-unsigned-4.15.0-1128-aws - Linux kernel image for version 4.15.0 on ARMv8 SMP
 linux-image-unsigned-4.15.0-1128-aws-dbgsym - Linux kernel debug image for version 4.15.0 on ARMv8 SMP
 linux-modules-4.15.0-1128-aws - Linux kernel extra modules for version 4.15.0 on ARMv8 SMP
 linux-modules-extra-4.15.0-1128-aws - Linux kernel extra modules for version 4.15.0 on ARMv8 SMP
 linux-tools-4.15.0-1128-aws - Linux kernel version specific tools for version 4.15.0-1128
 linux-udebs-aws - Metapackage depending on kernel udebs (udeb)
Launchpad-Bugs-Fixed: 1956315 1967013 1968016 1968340 1968774 1968932 1969061 1969083
Changes:
 linux-aws (4.15.0-1128.137) bionic; urgency=medium
 .
   * bionic/linux-aws: 4.15.0-1128.137 -proposed tracker (LP: #1969061)
 .
   * Bionic update: upstream stable patchset 2022-04-13 (LP: #1968932)
     - [Config] aws: updateconfigs for HARDEN_BRANCH_HISTORY
 .
   [ Ubuntu: 4.15.0-177.186 ]
 .
   * bionic/linux: 4.15.0-177.186 -proposed tracker (LP: #1969083)
   * Bionic update: upstream stable patchset 2022-04-13 (LP: #1968932)
     - cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug
     - vhost/vsock: don't check owner in vhost_vsock_stop() while releasing
     - parisc/unaligned: Fix fldd and fstd unaligned handlers on 32-bit kernel
     - parisc/unaligned: Fix ldw() and stw() unalignment handlers
     - sr9700: sanity check for packet length
     - USB: zaurus: support another broken Zaurus
     - ping: remove pr_err from ping_lookup
     - net: __pskb_pull_tail() & pskb_carve_frag_list() drop_monitor friends
     - gso: do not skip outer ip header in case of ipip and net_failover
     - openvswitch: Fix setting ipv6 fields causing hw csum failure
     - drm/edid: Always set RGB444
     - net/mlx5e: Fix wrong return value on ioctl EEPROM query failure
     - configfs: fix a race in configfs_{,un}register_subsystem()
     - RDMA/ib_srp: Fix a deadlock
     - iio: adc: men_z188_adc: Fix a resource leak in an error handling path
     - ata: pata_hpt37x: disable primary channel on HPT371
     - Revert "USB: serial: ch341: add new Product ID for CH341A"
     - usb: gadget: rndis: add spinlock for rndis response list
     - tracefs: Set the group ownership in apply_options() not parse_options()
     - USB: serial: option: add support for DW5829e
     - USB: serial: option: add Telit LE910R1 compositions
     - usb: dwc3: gadget: Let the interrupt handler disable bottom halves.
     - xhci: re-initialize the HC during resume if HCE was set
     - xhci: Prevent futile URB re-submissions due to incorrect return value.
     - tty: n_gsm: fix encoding of control signal octet bit DV
     - tty: n_gsm: fix proper link termination after failed open
     - Revert "drm/nouveau/pmu/gm200-: avoid touching PMU outside of
       DEVINIT/PREOS/ACR"
     - memblock: use kfree() to release kmalloced memblock regions
     - fget: clarify and improve __fget_files() implementation
     - gpio: tegra186: Fix chip_data type confusion
     - tracing: Have traceon and traceoff trigger honor the instance
     - mac80211_hwsim: report NOACK frames in tx_status
     - mac80211_hwsim: initialize ieee80211_tx_info at hw_scan_work
     - i2c: bcm2835: Avoid clock stretching timeouts
     - Input: clear BTN_RIGHT/MIDDLE on buttonpads
     - cifs: fix double free race when mount fails in cifs_get_root()
     - dmaengine: shdma: Fix runtime PM imbalance on error
     - i2c: cadence: allow COMPILE_TEST
     - i2c: qup: allow COMPILE_TEST
     - net: usb: cdc_mbim: avoid altsetting toggling for Telit FN990
     - usb: gadget: don't release an existing dev->buf
     - usb: gadget: clear related members when goto fail
     - ata: pata_hpt37x: fix PCI clock detection
     - ALSA: intel_hdmi: Fix reference to PCM buffer address
     - ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
     - xfrm: fix MTU regression
     - netfilter: fix use-after-free in __nf_register_net_hook()
     - xfrm: enforce validity of offload input flags
     - netfilter: nf_queue: don't assume sk is full socket
     - netfilter: nf_queue: fix possible use-after-free
     - batman-adv: Request iflink once in batadv-on-batadv check
     - batman-adv: Request iflink once in batadv_get_real_netdevice
     - batman-adv: Don't expect inter-netns unique iflink indices
     - net: dcb: flush lingering app table entries for unregistered devices
     - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error generated by client
     - net/smc: fix unexpected SMC_CLC_DECL_ERR_REGRMB error cause by server
     - mac80211: fix forwarded mesh frames AC & queue selection
     - net: stmmac: fix return value of __setup handler
     - net: sxgbe: fix return value of __setup handler
     - net: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()
     - efivars: Respect "block" flag in efivar_entry_set_safe()
     - can: gs_usb: change active_channels's type from atomic_t to u8
     - ARM: 9182/1: mmu: fix returns from early_param() and __setup() functions
     - soc: fsl: qe: Check of ioremap return value
     - net: chelsio: cxgb3: check the return value of pci_find_capability()
     - nl80211: Handle nla_memdup failures in handle_nan_filter
     - Input: elan_i2c - move regulator_[en|dis]able() out of
       elan_[en|dis]able_power()
     - Input: elan_i2c - fix regulator enable count imbalance after suspend/resume
     - HID: add mapping for KEY_ALL_APPLICATIONS
     - memfd: fix F_SEAL_WRITE after shmem huge page allocated
     - net: dcb: disable softirqs in dcbnl_flush_dev()
     - hamradio: fix macro redefine warning
     - arm/arm64: Provide a wrapper for SMCCC 1.1 calls
     - arm/arm64: smccc/psci: add arm_smccc_1_1_get_conduit()
     - ARM: report Spectre v2 status through sysfs
     - ARM: early traps initialisation
     - ARM: use LOADADDR() to get load address of sections
     - [Config] updateconfigs for HARDEN_BRANCH_HISTORY
     - ARM: Spectre-BHB workaround
     - ARM: include unprivileged BPF status in Spectre V2 reporting
     - ARM: fix build error when BPF_SYSCALL is disabled
     - ARM: fix co-processor register typo
     - ARM: Do not use NOCROSSREFS directive with ld.lld
     - ARM: fix build warning in proc-v7-bugs.c
     - xen/xenbus: don't let xenbus_grant_ring() remove grants in error case
     - xen/grant-table: add gnttab_try_end_foreign_access()
     - xen/blkfront: don't use gnttab_query_foreign_access() for mapped status
     - xen/netfront: don't use gnttab_query_foreign_access() for mapped status
     - xen/scsifront: don't use gnttab_query_foreign_access() for mapped status
     - xen/gntalloc: don't use gnttab_query_foreign_access()
     - xen: remove gnttab_query_foreign_access()
     - xen/9p: use alloc/free_pages_exact()
     - xen/gnttab: fix gnttab_end_foreign_access() without page specified
     - xen/netfront: react properly to failing gnttab_end_foreign_access_ref()
   * ip6gre driver does not hold device reference (LP: #1968340)
     - ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
   * LRMv6: add multi-architecture support (LP: #1968774)
     - [Packaging] resync dkms-build{,--nvidia-N}
   * Use kernel-testing repo from launchpad for ADT tests (LP: #1968016)
     - [Debian] Use kernel-testing repo from launchpad
   * vmx_ldtr_test in ubuntu_kvm_unit_tests failed (FAIL: Expected 0 for L1 LDTR
     selector (got 50)) (LP: #1956315)
     - KVM: nVMX: Set LDTR to its architecturally defined value on nested VM-Exit
   * Bionic update: upstream stable patchset 2022-03-29 (LP: #1967013)
     - moxart: fix potential use-after-free on remove path
     - x86/mm, mm/hwpoison: Fix the unmap kernel 1:1 pages check condition
     - integrity: check the return value of audit_log_start()
     - ima: Remove ima_policy file before directory
     - ima: Allow template selection with ima_template[_fmt]= after ima_hash=
     - mmc: sdhci-of-esdhc: Check for error num after setting mask
     - net: phy: marvell: Fix MDI-x polarity setting in 88e1118-compatible PHYs
     - NFS: Fix initialisation of nfs_client cl_flags field
     - NFSD: Clamp WRITE offsets
     - NFSv4 only print the label when its queried
     - nfs: nfs4clinet: check the return value of kstrdup()
     - NFSv4.1: Fix uninitialised variable in devicenotify
     - NFSv4 remove zero number of fs_locations entries error check
     - NFSv4 expose nfs_parse_server_name function
     - scsi: target: iscsi: Make sure the np under each tpg is unique
     - usb: dwc2: gadget: don't try to disable ep0 in dwc2_hsotg_suspend
     - net: stmmac: dwmac-sun8i: use return val of readl_poll_timeout()
     - Revert "net: axienet: Wait for PhyRstCmplt after core reset"
     - ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group
     - ARM: dts: meson: Fix the UART compatible strings
     - staging: fbtft: Fix error path in fbtft_driver_module_init()
     - ARM: dts: imx6qdl-udoo: Properly describe the SD card detect
     - usb: f_fs: Fix use-after-free for epfile
     - bonding: pair enable_port with slave_arr_updates
     - ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path
     - net: do not keep the dst cache when uncloning an skb dst and its metadata
     - net: fix a memleak when uncloning an skb dst and its metadata
     - tipc: rate limit warning for received illegal binding update
     - net: amd-xgbe: disable interrupts during pci removal
     - vt_ioctl: fix array_index_nospec in vt_setactivate
     - vt_ioctl: add array_index_nospec to VT_ACTIVATE
     - n_tty: wake up poll(POLLRDNORM) on receiving data
     - usb: ulpi: Move of_node_put to ulpi_dev_release
     - usb: ulpi: Call of_node_put correctly
     - usb: dwc3: gadget: Prevent core from processing stale TRBs
     - USB: gadget: validate interface OS descriptor requests
     - usb: gadget: rndis: check size of RNDIS_MSG_SET command
     - USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320
     - USB: serial: option: add ZTE MF286D modem
     - USB: serial: ch341: add support for GW Instek USB2.0-Serial devices
     - USB: serial: cp210x: add NCR Retail IO box id
     - USB: serial: cp210x: add CPI Bulk Coin Recycler id
     - seccomp: Invalidate seccomp mode to catch death failures
     - hwmon: (dell-smm) Speed up setting of fan speed
     - perf: Fix list corruption in perf_cgroup_switch()
     - net: bridge: fix stale eth hdr pointer in br_dev_xmit
     - Makefile.extrawarn: Move -Wunaligned-access to W=1
     - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup
     - serial: parisc: GSC: fix build when IOSAPIC is not set
     - parisc: Fix data TLB miss in sba_unmap_sg
     - parisc: Fix sglist access in ccio-dma.c
     - btrfs: send: in case of IO error log it
     - net: ieee802154: at86rf230: Stop leaking skb's
     - selftests/zram: Skip max_comp_streams interface on newer kernel
     - selftests/zram01.sh: Fix compression ratio calculation
     - selftests/zram: Adapt the situation that /dev/zram0 is being used
     - ax25: improve the incomplete fix to avoid UAF and NPD bugs
     - vfs: make freeze_super abort when sync_filesystem returns error
     - quota: make dquot_quota_sync return errors from ->sync_fs
     - Revert "module, async: async_synchronize_full() on module init iff async is
       used"
     - iwlwifi: fix use-after-free
     - drm/radeon: Fix backlight control on iMac 12,1
     - xfrm: Don't accidentally set RTO_ONLINK in decode_session4()
     - taskstats: Cleanup the use of task->exit_code
     - vsock: remove vsock from connected table when connect is interrupted by a
       signal
     - iwlwifi: pcie: fix locking when "HW not ready"
     - iwlwifi: pcie: gen2: fix locking when "HW not ready"
     - net: ieee802154: ca8210: Fix lifs/sifs periods
     - ping: fix the dif and sdif check in ping_lookup
     - drop_monitor: fix data-race in dropmon_net_event / trace_napi_poll_hit
     - bonding: fix data-races around agg_select_timer
     - libsubcmd: Fix use-after-free for realloc(..., 0)
     - ALSA: hda: Fix regression on forced probe mask option
     - ALSA: hda: Fix missing codec probe on Shenker Dock 15
     - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw()
     - ASoC: ops: Fix stereo change notifications in snd_soc_put_volsw_range()
     - powerpc/lib/sstep: fix 'ptesync' build error
     - NFS: LOOKUP_DIRECTORY is also ok with symlinks
     - EDAC: Fix calculation of returned address and next offset in
       edac_align_ptr()
     - net: sched: limit TC_ACT_REPEAT loops
     - dmaengine: sh: rcar-dmac: Check for error num after setting mask
     - i2c: brcmstb: fix support for DSL and CM variants
     - mtd: rawnand: brcmnand: Refactored code to introduce helper functions
     - mtd: rawnand: brcmnand: Fixed incorrect sub-page ECC status
     - KVM: x86/pmu: Use AMD64_RAW_EVENT_MASK for PERF_TYPE_RAW
     - NFS: Do not report writeback errors in nfs_getattr()
     - ARM: OMAP2+: hwmod: Add of_node_put() before break
     - ata: libata-core: Disable TRIM on M88V29
     - tracing: Fix tp_printk option related with tp_printk_stop_on_boot
     - net: usb: qmi_wwan: Add support for Dell DW5829e
     - net: macb: Align the dma and coherent dma masks
     - net: dsa: lan9303: fix reset on probe
   * CVE-2022-27223
     - USB: gadget: validate endpoint index for xilinx udc
   * CVE-2022-26490
     - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION
   * CVE-2021-26401
     - x86/speculation: Use generic retpoline by default on AMD
     - x86/speculation: Update link to AMD speculation whitepaper
     - x86/speculation: Warn about Spectre v2 LFENCE mitigation
     - x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT
   * CVE-2022-0001
     - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation
       reporting
Checksums-Sha1:
 395c34feffb707caceb7e2cb4fb5469085d32218 48220 linux-aws-cloud-tools-4.15.0-1128_4.15.0-1128.137_arm64.deb
 e1aab4cc23f1fd70fca5b87658d1408a085acb23 3984984 linux-aws-tools-4.15.0-1128_4.15.0-1128.137_arm64.deb
 b1c9bc64b5f8a5229fc9cb5e198ee9712290de3a 13790 linux-aws_4.15.0-1128.137_arm64.buildinfo
 54f7a1c5226ae9c719d41fe226becd6d0e7f6dd7 8507219 linux-aws_4.15.0-1128.137_arm64.tar.gz
 823a26622779d393a4e5f3ddeb6700f34d4213f8 24386 linux-aws_4.15.0-1128.137_arm64_translations.tar.gz
 68f945504370b44807c071a6b60c17d498d81dd2 349716 linux-buildinfo-4.15.0-1128-aws_4.15.0-1128.137_arm64.deb
 7f1b28f620fe63d2e9bf5ca77426e23a3c1f1060 1868 linux-cloud-tools-4.15.0-1128-aws_4.15.0-1128.137_arm64.deb
 8a71da233f7474442a80431ac9ad63d42bdf8d6a 861540 linux-headers-4.15.0-1128-aws_4.15.0-1128.137_arm64.deb
 5813eab51413714efcc2f722c4b69a0c0ba81973 638143480 linux-image-unsigned-4.15.0-1128-aws-dbgsym_4.15.0-1128.137_arm64.ddeb
 ed429f2ae1f1394e6ac41d66b76553c9f9502ecc 8388476 linux-image-unsigned-4.15.0-1128-aws_4.15.0-1128.137_arm64.deb
 4e10cffd920291574b424d72e42c9e908b4ed126 12271124 linux-modules-4.15.0-1128-aws_4.15.0-1128.137_arm64.deb
 1adb226616143d43901e7e406425b725a96d7d10 30588080 linux-modules-extra-4.15.0-1128-aws_4.15.0-1128.137_arm64.deb
 13d51dac636700bfd0ba9db447933a7d7f005f12 1900 linux-tools-4.15.0-1128-aws_4.15.0-1128.137_arm64.deb
Checksums-Sha256:
 fd7cff3ccb5ec203cda774dc28655f24ceab33e78d5ea33d876bed69ad300fe9 48220 linux-aws-cloud-tools-4.15.0-1128_4.15.0-1128.137_arm64.deb
 b8e789d851a05390fd9009c17018f1f90a2bd745fff797a4bcb7aa705dfa5532 3984984 linux-aws-tools-4.15.0-1128_4.15.0-1128.137_arm64.deb
 d6d093f7702ba5f3673026344bc905a2fc4bf5f3d45f2eae5bf29d9f0b25115c 13790 linux-aws_4.15.0-1128.137_arm64.buildinfo
 96c1680c8602fc075598c35cdbefa481c04a6ec41d7350d22638b865b8845db7 8507219 linux-aws_4.15.0-1128.137_arm64.tar.gz
 18628c671a1aef375f937c829b3edafb27df9d9712b8f9f9fdec33712792eb83 24386 linux-aws_4.15.0-1128.137_arm64_translations.tar.gz
 787951e31df311849db0b9b7d483b78dadd4ca2a9eba280aaba3beeb381abe87 349716 linux-buildinfo-4.15.0-1128-aws_4.15.0-1128.137_arm64.deb
 466f0e2d91810c8f7e1a71885abfc54dd3e00fab5bd791e21c6adab2e5663dd6 1868 linux-cloud-tools-4.15.0-1128-aws_4.15.0-1128.137_arm64.deb
 295257861d96f62b12456da3e6fbd6bde85d7baff5117c5463f789a730be59c0 861540 linux-headers-4.15.0-1128-aws_4.15.0-1128.137_arm64.deb
 337ef668b13f60dbcf111c1bbb7103e4579dfe6a93439a3b4725a29f1d2e1063 638143480 linux-image-unsigned-4.15.0-1128-aws-dbgsym_4.15.0-1128.137_arm64.ddeb
 74bf2d3f02909eac28e2b2cc313cebb243e88b7c4e978488b15b57d32a8479f6 8388476 linux-image-unsigned-4.15.0-1128-aws_4.15.0-1128.137_arm64.deb
 1be36ca11b8ed45f81e0823d361dfd2066e4644229f2719e4bcbd12b041b9eef 12271124 linux-modules-4.15.0-1128-aws_4.15.0-1128.137_arm64.deb
 914e3149f031bfac9795d10934a54b1d617345769ac5cb2d3339b26df43ce8f0 30588080 linux-modules-extra-4.15.0-1128-aws_4.15.0-1128.137_arm64.deb
 3bf9bffb76d91c61b98f3bd3a3e4447036e4497d30731de1cec26324088fa43e 1900 linux-tools-4.15.0-1128-aws_4.15.0-1128.137_arm64.deb
Files:
 e95d58063d0af1b674c5376e3b515ab5 48220 devel optional linux-aws-cloud-tools-4.15.0-1128_4.15.0-1128.137_arm64.deb
 7c406282fe77d67021a514ff4990f585 3984984 devel optional linux-aws-tools-4.15.0-1128_4.15.0-1128.137_arm64.deb
 9c2ee978bbc59ba80912496b5e867bf6 13790 devel optional linux-aws_4.15.0-1128.137_arm64.buildinfo
 3b58531a8cb7deb72b57eeb32c6964bb 8507219 raw-signing - linux-aws_4.15.0-1128.137_arm64.tar.gz
 96402b04853ecf6fb08bb3bccf54aa02 24386 raw-translations - linux-aws_4.15.0-1128.137_arm64_translations.tar.gz
 1871ab46cb2af9d84cabc20e0c9983e2 349716 kernel optional linux-buildinfo-4.15.0-1128-aws_4.15.0-1128.137_arm64.deb
 bd54ba6bafa9ac4cd3e4c353a7b465b3 1868 devel optional linux-cloud-tools-4.15.0-1128-aws_4.15.0-1128.137_arm64.deb
 8ca2c59e0a24a1c8c82ed7fbfbff363e 861540 devel optional linux-headers-4.15.0-1128-aws_4.15.0-1128.137_arm64.deb
 e6d59e0888829825dbc968ff1636f7e3 638143480 devel optional linux-image-unsigned-4.15.0-1128-aws-dbgsym_4.15.0-1128.137_arm64.ddeb
 27350113b66672dc92f33593f0c61401 8388476 kernel optional linux-image-unsigned-4.15.0-1128-aws_4.15.0-1128.137_arm64.deb
 c120f52443d783984cc651829da08307 12271124 kernel optional linux-modules-4.15.0-1128-aws_4.15.0-1128.137_arm64.deb
 b5dfa01ad3cd413e49520a09a7036179 30588080 kernel optional linux-modules-extra-4.15.0-1128-aws_4.15.0-1128.137_arm64.deb
 11894552d594019632e5bd0877ed691f 1900 devel optional linux-tools-4.15.0-1128-aws_4.15.0-1128.137_arm64.deb