~paelzer/ubuntu/+source/qemu:fix-1832622-ppc-spectre-bionic

Branch merges

Propose for merging

Merged into ubuntu/+source/qemu:ubuntu/bionic-devel at revision 32e74e3f62c3f5c94e3f90b8fad0a2f4472e2f92

Rafael David Tinoco (community): Approve on 2019-06-26

Canonical Server packageset reviewers: Pending requested 2019-06-13

git-ubuntu developers: Pending requested 2019-06-13

Diff: 629 lines (+589/-0)

6 files modified

debian/changelog (+7/-0)
debian/patches/series (+4/-0)
debian/patches/ubuntu/lp-1832622-0001-target-ppc-Factor-out-the-parsing-in-kvmppc_get_cpu_.patch (+101/-0)
debian/patches/ubuntu/lp-1832622-0002-target-ppc-spapr-Add-workaround-option-to-SPAPR_CAP_.patch (+159/-0)
debian/patches/ubuntu/lp-1832622-0003-ppc-spapr-caps-Change-migration-macro-to-take-full-s.patch (+79/-0)
debian/patches/ubuntu/lp-1832622-0004-target-ppc-spapr-Add-SPAPR_CAP_CCF_ASSIST.patch (+239/-0)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related charm recipes

32e74e3... by Christian Ehrhardt  on 2019-06-13

changelog: count cache flush Spectre v2 mitigation for ppc64 (LP: #1832622)

Signed-off-by: Christian Ehrhardt <email address hidden>

55acddd... by Christian Ehrhardt  on 2019-06-13

d/p/ubuntu/lp-1832622-*: count cache flush Spectre v2 mitigation for ppc64 (LP: #1832622)

Signed-off-by: Christian Ehrhardt <email address hidden>

14149f3... by Christian Ehrhardt  on 2019-05-22

Import patches-unapplied version 1:2.11+dfsg-1ubuntu7.15 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 4a24a0f6ea511f4bdf1c7b0ea1040e9f0d58991f

New changelog entries:
  * d/p/ubuntu/define-ubuntu-machine-types.patch: fix wily machine type being
    broken since 2.11 due to 2.3/2.4 version mismatch in its definition to
    fix migrations from old machines (LP: #1829868).
  * d/p/ubuntu/lp-1830704-s390x-cpumodel-ignore-csske-for-expansion.patch
    toleration for future machines (LP: #1830704

4a24a0f... by Balint Reczey on 2019-05-23

Import patches-unapplied version 1:2.11+dfsg-1ubuntu7.14 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: ac956a6f203d9a9e9edb108e78ea02edd27d5bc2

New changelog entries:
  * Add qemu-guest-agent Breaks: for unattended-upgrades versions not being
    able to install it to avoid qemu-guest-agent blocking other security
    updates. (LP: #1823872)

ac956a6... by Steve Beattie on 2019-05-09

Import patches-unapplied version 1:2.11+dfsg-1ubuntu7.13 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: a8424635eca42ba153068dda7532c4caa5ae7a6f

New changelog entries:
  * SECURITY UPDATE: Add support for exposing md-clear functionality
    to guests
    - d/p/ubuntu/enable-md-clear.patch
    - CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
  * SECURITY UPDATE: heap overflow when loading device tree blob
    - d/p/ubuntu/CVE-2018-20815.patch: specify how large the buffer to
      copy the device tree blob into is.
    - CVE-2018-20815
  * SECURITY UPDATE: information leak in SLiRP
    - d/p/ubuntu/CVE-2019-9824.patch: check sscanf result when
      emulating ident.
    - CVE-2019-9824

a842463... by Marc Deslauriers on 2019-03-25

Import patches-unapplied version 1:2.11+dfsg-1ubuntu7.12 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 4f01ec452483d37706b1dc717fcdcb5d283eb61d

New changelog entries:
  [ Marc Deslauriers ]
  * SECURITY UPDATE: TOCTTOU in MTP
    - debian/patches/CVE-2018-16872.patch: use O_NOFOLLOW and O_CLOEXEC in
      hw/usb/dev-mtp.c.
    - CVE-2018-16872
  * SECURITY UPDATE: race during file renaming in v9fs_wstat
    - debian/patches/CVE-2018-19489.patch: add locks to hw/9pfs/9p.c.
    - CVE-2018-19489
  * SECURITY UPDATE: out-of-bounds read via i2 commands
    - debian/patches/CVE-2019-3812.patch: add bounds check to
      hw/i2c/i2c-ddc.c.
    - CVE-2019-3812
  * SECURITY UPDATE: heap based buffer overflow in slirp
    - debian/patches/CVE-2019-6778.patch: check data length while emulating
      ident function in slirp/tcp_subr.c.
    - CVE-2019-6778
  [ Christian Ehrhardt ]
  * fix crash when performing block pull on partial cluster (LP: #1818264)
    - d/p/ubuntu/lp-1818264-block-Fix-copy-on-read-crash-with-partial.patch
  * qemu-guest-agent: fix path of fsfreeze-hook (LP: #1820291)
    - d/qemu-guest-agent.install: use correct path for fsfreeze-hook
    - d/qemu-guest-agent.pre{rm|inst}/.postrm: special handling for
      mv_conffile since the new path is a directory in the old package
      version which can not be handled by mv_conffile

4f01ec4... by Christian Ehrhardt  on 2019-01-31

Import patches-unapplied version 1:2.11+dfsg-1ubuntu7.10 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 83afeb127eb388ba6f314bc66072a71848a760e0

New changelog entries:
  * d/p/ubuntu/lp-1806104-spapr_pci-Remove-unhelpful-pagesize-warning.patch:
    remove misleading page size warning on qemu-system-ppc64 (LP: #1806104)
  * d/p/ubuntu/lp-1812384-s390x-Return-specification-exception.patch: ensure
    a proper exception on unknown diag 308 subcodes
    (LP: #1812384)
  * d/p/ubuntu/lp-1809083-*: fix backward migration on ppc64el (LP: #1809083)

83afeb1... by Christian Ehrhardt  on 2018-11-15

Import patches-unapplied version 1:2.11+dfsg-1ubuntu7.9 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 95e35f20586fa620ed0843acb8759deeb629a3db

New changelog entries:
  * debian/patches/ubuntu/lp1787405-*: Support guest dedicated Crypto
    Adapters on s390x (LP: #1787405)

95e35f2... by Marc Deslauriers on 2018-11-21

Import patches-unapplied version 1:2.11+dfsg-1ubuntu7.8 to ubuntu/bionic-security

Imported using git-ubuntu import.

Changelog parent: 28d5083a64da5a48e6719c674eb90fc5e81e31c0

New changelog entries:
  * SECURITY UPDATE: integer overflow in NE2000 NIC emulation
    - debian/patches/CVE-2018-10839.patch: use proper type in
      hw/net/ne2000.c.
    - CVE-2018-10839
  * SECURITY UPDATE: buffer overflow via incoming fragmented datagrams
    - debian/patches/CVE-2018-11806.patch: correct size computation in
      slirp/mbuf.c, slirp/mbuf.h.
    - CVE-2018-11806
  * SECURITY UPDATE: integer overflow via crafted QMP command
    - debian/patches/CVE-2018-12617.patch: check bytes count read by
      guest-file-read in qga/commands-posix.c.
    - CVE-2018-12617
  * SECURITY UPDATE: OOB heap buffer r/w access in NVM Express Controller
    - debian/patches/CVE-2018-16847.patch: check size in hw/block/nvme.c.
    - CVE-2018-16847
  * SECURITY UPDATE: buffer overflow in rtl8139
    - debian/patches/CVE-2018-17958.patch: use proper type in
      hw/net/rtl8139.c.
    - CVE-2018-17958
  * SECURITY UPDATE: buffer overflow in pcnet
    - debian/patches/CVE-2018-17962.patch: use proper type in
      hw/net/pcnet.c.
    - CVE-2018-17962
  * SECURITY UPDATE: DoS via large packet sizes
    - debian/patches/CVE-2018-17963.patch: check size in net/net.c.
    - CVE-2018-17963
  * SECURITY UPDATE: DoS in lsi53c895a
    - debian/patches/CVE-2018-18849.patch: check message length value is
      valid in hw/scsi/lsi53c895a.c.
    - CVE-2018-18849
  * SECURITY UPDATE: Out-of-bounds r/w stack access in ppc64
    - debian/patches/CVE-2018-18954.patch: check size before data buffer
      access in hw/ppc/pnv_lpc.c.
    - CVE-2018-18954
  * SECURITY UPDATE: race condition in 9p
    - debian/patches/CVE-2018-19364-1.patch: use write lock in
      hw/9pfs/cofile.c.
    - debian/patches/CVE-2018-19364-2.patch: use write lock in
      hw/9pfs/9p.c.
    - CVE-2018-19364

28d5083... by Christian Ehrhardt  on 2018-09-25

Import patches-unapplied version 1:2.11+dfsg-1ubuntu7.7 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: df5fc9c2dfa5d960764bc294109f4b31caf9ec71

New changelog entries:
  * Update pxe netboot images for KVM s390x to qemu 3.0 level (LP: #1790901)
    The SLOF source pieces in src:qemu are only used for s390x netboot,
    which are independent ROMs (no linking). All other binaries out of this
    are part of src:slof and independent.
    - d/p/ubuntu/lp-1790901-partial-SLOF-for-s390x-netboot-2.11-to-3.0.patch
    - d/p/ubuntu/lp-1790901-0*: backport s390x pxelinux netboot capabilities
      and related fixes