-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 09 Jun 2020 18:50:00 +0100 Source: linux-signed-arm64 Architecture: source Version: 5.6.14+2 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Ben Hutchings <benh@debian.org> Changes: linux-signed-arm64 (5.6.14+2) unstable; urgency=medium . * Sign kernel from linux 5.6.14-2 . [ Vagrant Cascadian ] * [arm64] Add pwm-sun4i to fb-modules udeb. . [ Salvatore Bonaccorso ] * kernel/relay.c: handle alloc_percpu returning NULL in relay_open (CVE-2019-19462) * fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (CVE-2020-10732) * mm: Fix mremap not considering huge pmd devmap (CVE-2020-10757) . [ Ben Hutchings ] * [x86] Add support for mitigation of Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543): - x86/cpu: Add 'table' argument to cpu_matches() - x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation - x86/speculation: Add SRBDS vulnerability and mitigation documentation - x86/speculation: Add Ivy Bridge to affected list * [x86] speculation: Do not match steppings, to avoid an ABI change Checksums-Sha1: 52e0ee87e9141f4369afab6e8ce2aa89d3a35d56 7142 linux-signed-arm64_5.6.14+2.dsc 0d740d99c4669ca0f2e6fe8b433bcbe23eea0b0b 2044392 linux-signed-arm64_5.6.14+2.tar.xz Checksums-Sha256: 8ab26bd3f003230e6be864a8ab7ffdc328603bd2d233749f4d0cc79d36f2da29 7142 linux-signed-arm64_5.6.14+2.dsc 472ab6b4514fa5b7300b3bb6b28acb3a42a0af083c7dd54292a22e84f3a11f0e 2044392 linux-signed-arm64_5.6.14+2.tar.xz Files: 9f62ff076316f3ee690ca8111a87548e 7142 kernel optional linux-signed-arm64_5.6.14+2.dsc 8024fec80f3028a59f718e17d06581da 2044392 kernel optional linux-signed-arm64_5.6.14+2.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8nXL3e4u3Tgu6Vp6qgZoiu+K+NUFAl7gpIAACgkQqgZoiu+K +NWKjA//XkHN9m/rAYmJTWbmNOnW1cTonXBw3GGC0QyX5ap5dladQlwLL3SoykxA wL6XLMEA6HEVVd8epv3cUdVaNjVPonhUT6PifZ1f5uKV9tkP7EeiroXIrCkgyzUv VBMi8JqAxjfDu4Tbeu82HgAG7RucyYow1juqkpYTt+djQ0pSBV0iaWbIS7uxfSTu gKgvddjm+dXNtEOkwlpxUN4mWsoEHMEvMj0NYIzoVr6tKgi58prp8is/0rOCs+B6 eExaIQN05BXqgiejnxJeOZh80pg9tacnYszMtuZ+BYAtH/7HzJowtFSHnpxBSzsH EFLYxyH+PytbDfcOrqYqDbnfXJzk8K9YUjKFefTnNkXZJaDqixYuYIt1DALyiIyP aVrJnG8XOillEyWZIE46niuWa7/D31RsNgJv4Fw3KDQcOsiwEti3tmCDp63kfJmZ nNtNSde9m8xF6shzKZ0/kxD9D+THxOGXsCFS7sMm/XKvv+BdSLUGvbcOZ6DRuC3J 8Qt2SG7c3LiOH/pKvav1vzANKK2XYe3iR+VYnkqGwqHYvmlqh2OxedeDI4xmkIIC wHfcsGQimdispZ/j8Qgy3H61HBBaxN2ggvck6bCj0fqOnE0XbJ+RUSTMdqbuiV1s LnjaBjpfAMp6vtIqusEmaMAOdd3aIqRWl0BYf6cCm44IOjpIKrY= =kxNx -----END PGP SIGNATURE-----