-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 27 Apr 2020 07:05:39 +0200 Source: linux Architecture: source Version: 4.19.98-1+deb10u1 Distribution: buster-security Urgency: high Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Changes: linux (4.19.98-1+deb10u1) buster-security; urgency=high . * [x86] KVM: nVMX: Don't emulate instructions in guest mode (CVE-2020-2732) * do_last(): fetch directory ->i_mode and ->i_uid before it's too late (CVE-2020-8428) * vfs: fix do_last() regression * vhost: Check docket sk_family instead of call getname (CVE-2020-10942) * mm: mempolicy: require at least one nodeid for MPOL_PREFERRED (CVE-2020-11565) * [s390x] mm: fix page table upgrade vs 2ndary address mode accesses (CVE-2020-11884) Checksums-Sha1: d8659a99f36ff5d4bca498d2ce02e46c5e755d0a 189311 linux_4.19.98-1+deb10u1.dsc e56a1ac026763704a643f51d9448110ea03138a2 107435812 linux_4.19.98.orig.tar.xz 9d44faeb7f5317517c8573ed5c8033fdd1fceb32 3238304 linux_4.19.98-1+deb10u1.debian.tar.xz 8546ce6b8ac78c66d1aeda879d300c8e777c3288 47530 linux_4.19.98-1+deb10u1_source.buildinfo Checksums-Sha256: bc7a6a3dc791bd322e6b7ef3fa26a8f40364796b33069dbcb397c1e49896805e 189311 linux_4.19.98-1+deb10u1.dsc 272bb85b0c443ebd2b7437084a75c0efa2c875357bd6b19d7eae019a01b61193 107435812 linux_4.19.98.orig.tar.xz b8a48537ce0376c5f165e14313c6c4999e653ed6eb54ca03d95ac506aaf550f5 3238304 linux_4.19.98-1+deb10u1.debian.tar.xz 995962cda2ee87f25ab53ea5421db4216f761180fb60f787f570d0aeb34cb750 47530 linux_4.19.98-1+deb10u1_source.buildinfo Files: e6a58398eddc7cdd6c6745cdaa5c1853 189311 kernel optional linux_4.19.98-1+deb10u1.dsc b95a19e80bc4d8f983befc4d8679cf86 107435812 kernel optional linux_4.19.98.orig.tar.xz 3228165224dc8f31fd19d484775fb635 3238304 kernel optional linux_4.19.98-1+deb10u1.debian.tar.xz 41059ee50097d8f4d0626f6f04ea28f4 47530 kernel optional linux_4.19.98-1+deb10u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAl6mdqRfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89E1qMP/3Tq+bjoA8HggRmgwoIpmj167zp9V5p3 OxJK+H6lrNi/0/vl54IQBYELkVUJPlztWAqV1jYK0se6l6g0Hc2nMGX0u6p/z6+Z mEu8pVfZiwFtaZ3/k7HFWvbzBbvz9rl8yrU7FjqVFIGhdhQmm44DyCHEW9yUEjIE dw/snjyfxcF4gwEIvFEWkHGdiWEhbG7i1zb+dxqdD7xDaxoB+yEOqU9FIQuzwzXT vTJQRuOCUlgurGSbXFRdHV2LBCy36dtHkGWgTRx7exN1RoElCveuuMB4WPmpfaj/ ei7SeC9QyNQQginf25BSlv8JM7tbN1P+fpuDAwKOPDeEZ85zQzOf380/gr820Sgr mbg4jF4/yyv2lTzWDteZBO1VTzkh3HJTSE++/UoPANJQbc7pqXWKArE0j2+Jmdkp KfKmndS0x949isWuXV+TrYljKUfLa/W88A6i0shoSxfBqUBuXmFvkui5K7AurPkN /Pf4nKIuh586t+rV6A+dqx1l3JXK2LdMtMOLBS76XpB+Lfgs6WNpvSxJCWjIRxvT xZ5GWdFEnfe3QhgDGpC8iLGnuWfLjQTVaj1UZa2CLuEsBHXH2007+CWb2S82Hnq/ B9vOadq38DxC0zqEBKlC9tTIIuoWQ1fITHIaMORgEUNgWpW1wv7Jb8MSYCrqgSgv dK4tekodeLau =vwJi -----END PGP SIGNATURE-----