Univention Bugzilla – Bug 47987
linux: Multiple issues (4.3)
Last modified: 2018-10-17 14:57:22 CEST
New Debian linux 4.9.110-3+deb9u6 fixes: This update addresses the following issues: * net: xen: Linux netback driver OOB access in hash handling (XSA-270) (CVE-2018-15471) * Privilege escalation on arm64 via KVM hypervisor (CVE-2018-18021)
--- mirror/ftp/4.3/unmaintained/component/4.3-2-errata/source/linux_4.9.110-3+deb9u5.dsc +++ apt/ucs_4.3-0-errata4.3-2/source/linux_4.9.110-3+deb9u6.dsc @@ -1,3 +1,12 @@ +4.9.110-3+deb9u6 [Mon, 08 Oct 2018 08:05:17 +0200] Salvatore Bonaccorso <carnil@debian.org>: + + * [arm64] KVM: Tighten guest core register access from userspace + (CVE-2018-18021) + * [arm64] KVM: Sanitize PSTATE.M when being set from userspace + (CVE-2018-18021) + * xen-netback: fix input validation in xenvif_set_hash_mapping() + (CVE-2018-15471) + 4.9.110-3+deb9u5 [Sun, 30 Sep 2018 17:37:51 +0100] Ben Hutchings <ben@decadent.org.uk>: [ Salvatore Bonaccorso ] <http://10.200.17.11/4.3-2/#5024331900872185435>
[4.3-2] 1821dde738 Bug #47987: Update to linux-4.9.110-3+deb9u6 .../debian/changelog | 6 ++++++ .../univention-kernel-image-signed/debian/control | 4 ++-- .../vmlinuz-4.9.0-8-amd64.efi.signed | Bin 4241008 -> 4241008 bytes 3 files changed, 8 insertions(+), 2 deletions(-) Package: univention-kernel-image-signed Version: 4.0.0-8A~4.3.0.201810161534 Branch: ucs_4.3-0 Scope: errata4.3-2 [4.3-2] a92cd0dc49 Bug #47987: univention-kernel-image-signed 4.0.0-8A~4.3.0.201810161534 doc/errata/staging/linux.yaml | 1 + doc/errata/staging/univention-kernel-image-signed.yaml | 16 ++++++++++++++++ 2 files changed, 17 insertions(+)
--- mirror/ftp/4.3/unmaintained/component/4.3-2-errata/source/univention-kernel-image-signed_4.0.0-7A~4.3.0.201810021026.dsc +++ apt/ucs_4.3-0-errata4.3-2/source/univention-kernel-image-signed_4.0.0-8A~4.3.0.201810161534.dsc @@ -1,6 +1,10 @@ -4.0.0-7A~4.3.0.201810021026 [Tue, 02 Oct 2018 10:26:48 +0200] Univention builddaemon <buildd@univention.de>: +4.0.0-8A~4.3.0.201810161534 [Tue, 16 Oct 2018 15:34:43 +0200] Univention builddaemon <buildd@univention.de>: * UCS auto build. No patches were applied to the original source package + +4.0.0-8 [Tue, 16 Oct 2018 15:29:22 +0200] Philipp Hahn <hahn@univention.de>: + + * Bug #47987: Update to linux-4.9.110-3+deb9u6 4.0.0-7 [Tue, 02 Oct 2018 10:21:51 +0200] Philipp Hahn <hahn@univention.de>: <http://10.200.17.11/4.3-2/#7877262333273084132>
--- mirror/ftp/4.3/unmaintained/component/4.3-2-errata/source/linux_4.9.110-3+deb9u5.dsc +++ apt/ucs_4.3-0-errata4.3-2/source/linux_4.9.110-3+deb9u6.dsc @@ -1,3 +1,12 @@ +4.9.110-3+deb9u6 [Mon, 08 Oct 2018 08:05:17 +0200] Salvatore Bonaccorso <carnil@debian.org>: + + * [arm64] KVM: Tighten guest core register access from userspace + (CVE-2018-18021) + * [arm64] KVM: Sanitize PSTATE.M when being set from userspace + (CVE-2018-18021) + * xen-netback: fix input validation in xenvif_set_hash_mapping() + (CVE-2018-15471) + 4.9.110-3+deb9u5 [Sun, 30 Sep 2018 17:37:51 +0100] Ben Hutchings <ben@decadent.org.uk>: [ Salvatore Bonaccorso ] <http://10.200.17.11/4.3-2/#7877262333273084132>
OK: amd64 @ kvm+SeaBIOS OK: amd64 @ kvm+OVMF+SB OK: amd64 @ xen16 OK: diff <(./linux-dmesg-norm 4.9.0-8-amd64.4.9.110-3+deb9u5) <(./linux-dmesg-norm 4.9.0-8-amd64.4.9.110-3+deb9u6) OK: yaml OK: announce_errata OK: patch OK: piuparts [4.3-2] a92cd0dc49 Bug #47987: univention-kernel-image-signed 4.0.0-8A~4.3.0.201810161534 doc/errata/staging/linux.yaml | 1 + 1 file changed, 1 insertion(+) [4.3-2] 04792ae07f Bug #47987: linux 4.9.110-3+deb9u6 doc/errata/staging/linux.yaml | 15 +++++++++++++++ 1 file changed, 15 insertions(+)
<http://errata.software-univention.de/ucs/4.3/273.html> <http://errata.software-univention.de/ucs/4.3/274.html>