group.of.nepali.translators team mailing list archive

[Launchpad Bug Tracker <1867820@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package linux-azure - 5.4.0-1008.8

---------------
linux-azure (5.4.0-1008.8) focal; urgency=medium

  [ Ubuntu: 5.4.0-21.25 ]

  * CVE-2020-8835
    - SAUCE: bpf: undo incorrect __reg_bound_offset32 handling

 -- Thadeu Lima de Souza Cascardo <cascardo@xxxxxxxxxxxxx>  Fri, 27 Mar
2020 17:57:04 -0300

** Changed in: linux-azure (Ubuntu Focal)
       Status: New => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-8835

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1867820

Title:
  linux-azure: Update SGX version and udev rules

Status in linux-azure package in Ubuntu:
  Fix Released
Status in linux-base package in Ubuntu:
  Fix Released
Status in linux-azure source package in Trusty:
  Invalid
Status in linux-base source package in Trusty:
  Invalid
Status in linux-azure source package in Xenial:
  Fix Released
Status in linux-base source package in Xenial:
  Fix Released
Status in linux-azure source package in Bionic:
  Fix Released
Status in linux-base source package in Bionic:
  Fix Released
Status in linux-azure source package in Eoan:
  Fix Released
Status in linux-base source package in Eoan:
  Fix Released
Status in linux-azure source package in Focal:
  Fix Released
Status in linux-base source package in Focal:
  Fix Released

Bug description:
  [Impact]

  We will use the official Intel's DCAP git repository to keep SGX up-
  to-date. We need to update the driver included to the linux-azure
  kernels to the version located at:

  https://github.com/intel/SGXDataCenterAttestationPrimitives/tree/LD_1.22/driver/linux

  Including the provided udev rules.

  [Test Case]

  The driver should continue to work normally. The main difference
  should be the permissions and groups for the /dev/sgx (0666) and
  /dev/sgx_prv (0660 with sgx_prc group).

  
  [Regression Potential] 

  The regression potential is low since the functional changes are not
  meaningful and the permissions are less restrictive.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-azure/+bug/1867820/+subscriptions