-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 09 Jun 2020 18:50:00 +0100 Source: linux-signed-i386 Architecture: source Version: 5.6.14+2 Distribution: sid Urgency: medium Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Ben Hutchings <benh@debian.org> Changes: linux-signed-i386 (5.6.14+2) unstable; urgency=medium . * Sign kernel from linux 5.6.14-2 . [ Vagrant Cascadian ] * [arm64] Add pwm-sun4i to fb-modules udeb. . [ Salvatore Bonaccorso ] * kernel/relay.c: handle alloc_percpu returning NULL in relay_open (CVE-2019-19462) * fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (CVE-2020-10732) * mm: Fix mremap not considering huge pmd devmap (CVE-2020-10757) . [ Ben Hutchings ] * [x86] Add support for mitigation of Special Register Buffer Data Sampling (SRBDS) (CVE-2020-0543): - x86/cpu: Add 'table' argument to cpu_matches() - x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation - x86/speculation: Add SRBDS vulnerability and mitigation documentation - x86/speculation: Add Ivy Bridge to affected list * [x86] speculation: Do not match steppings, to avoid an ABI change Checksums-Sha1: 8ddabe764f144363cf718668dd0a0b34e70445df 13925 linux-signed-i386_5.6.14+2.dsc dd0ef6e939a313c91245c77f54279020e1724e97 3204704 linux-signed-i386_5.6.14+2.tar.xz Checksums-Sha256: 48bd346f3ab1c2a25d873d2c18584ed0864c611c8b26b93d6e24d98926b2a37e 13925 linux-signed-i386_5.6.14+2.dsc f712983300246b7d5507c19f43f90c8a38244a5cd5fea72e4b2c2a37c5369317 3204704 linux-signed-i386_5.6.14+2.tar.xz Files: 2391b102e6e1f7f516ff1071cea5a834 13925 kernel optional linux-signed-i386_5.6.14+2.dsc 0d7592401f98fe4bd4310d64b76d82e0 3204704 kernel optional linux-signed-i386_5.6.14+2.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE8nXL3e4u3Tgu6Vp6qgZoiu+K+NUFAl7gsTEACgkQqgZoiu+K +NUc5w//eMETw/Ahx/EfBNHHcJ21nWwWcM1rGUCUW5IFV4Q6SBChzZoRoXmbOuQi v4T5fpibqV4ccnTIGLa7oWVNvJQPEItB/9iL5hD61FlV9C44syLEzZNdvGfbaEDP HefgGJ+DO1V74j0bk67TlNUz+PM/oojARYBBkS0OuOh80jAfLJDlneQVQh1TrEUT 97T1aT5RLLLMFH8zExxe30mqN8EvRDJNojl1IaIYZNwxVT4SVcwRHtg79no8IMIX 6S6tQT1C3i4CJUrUVSsV/XEzDY9FxnieZCWkKgAQ4CYag5dLbpP+v8jeHrKMxG3n 58rJ0CWTqWXC6J2wV14A9pZl3qqscXzWfS4Q1BJCseZLkpCUW+X6gUZJsKLdmyww WSHsaLkaqYP+Go3UjjLdU45ymzKLdcWP1mHac65+PmnnTDs7hHFEglZ+cAJLRJaP bLDYssZ1M8BgLykjFThu8qLw7qVtEY7PVry5/h54pRbqO3DtTDYG3PqAWjg0l0EA fXjWfph1SmfaVp7qPLEx8xiFp2ltXl6oipqM0cWBtRFe66ou+AvCmBGoZvKabUar AQoGh4uoOv1aCBGc/JCiXfbiv/zYjqYIq7OmSm5h69oxz/FcfvinPOvrvhnSeyp9 MJQNBthZQwo4gNo45z9NctwUYwMN7DrrHM+NRNTgQ5i60QKAtek= =vTbN -----END PGP SIGNATURE-----