group.of.nepali.translators team mailing list archive

[Launchpad Bug Tracker <1908264@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package linux-gcp - 5.8.0-1031.32

---------------
linux-gcp (5.8.0-1031.32) groovy; urgency=medium

  [ Ubuntu: 5.8.0-53.60 ]

  * CVE-2021-3491
    - io_uring: fix provide_buffers sign extension
    - io_uring: fix overflows checks in provide buffers
    - SAUCE: proc: Avoid mixing integer types in mem_rw()
    - SAUCE: io_uring: truncate lengths larger than MAX_RW_COUNT on provide
      buffers
  * CVE-2021-3490
    - bpf: Fix a verifier failure with xor
    - SAUCE: bpf: verifier: fix ALU32 bounds tracking with bitwise ops
  * CVE-2021-3489
    - SAUCE: bpf: ringbuf: deny reserve of buffers larger than ringbuf
    - SAUCE: bpf: prevent writable memory-mapping of read-only ringbuf pages

 -- Stefan Bader <stefan.bader@xxxxxxxxxxxxx>  Thu, 06 May 2021 10:32:39
+0200

** Changed in: linux-gcp (Ubuntu Groovy)
       Status: Fix Committed => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-3489

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-3490

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-3491

** Changed in: linux-oracle (Ubuntu Groovy)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1908264

Title:
  Disable Atari partition support for cloud kernels

Status in linux-aws package in Ubuntu:
  In Progress
Status in linux-azure package in Ubuntu:
  Fix Released
Status in linux-azure-4.15 package in Ubuntu:
  Invalid
Status in linux-gcp package in Ubuntu:
  New
Status in linux-gke package in Ubuntu:
  New
Status in linux-gkeop package in Ubuntu:
  New
Status in linux-oracle package in Ubuntu:
  New
Status in linux-aws source package in Xenial:
  Fix Committed
Status in linux-azure source package in Xenial:
  Fix Released
Status in linux-azure-4.15 source package in Xenial:
  Invalid
Status in linux-aws source package in Bionic:
  Fix Released
Status in linux-azure source package in Bionic:
  Invalid
Status in linux-azure-4.15 source package in Bionic:
  Fix Released
Status in linux-gcp source package in Bionic:
  Fix Committed
Status in linux-oracle source package in Bionic:
  Fix Released
Status in linux-aws source package in Focal:
  Fix Released
Status in linux-azure source package in Focal:
  Fix Released
Status in linux-azure-4.15 source package in Focal:
  Invalid
Status in linux-gcp source package in Focal:
  Fix Released
Status in linux-gke source package in Focal:
  Fix Released
Status in linux-gkeop source package in Focal:
  Fix Released
Status in linux-oracle source package in Focal:
  Fix Released
Status in linux-aws source package in Groovy:
  Fix Committed
Status in linux-azure source package in Groovy:
  Fix Released
Status in linux-azure-4.15 source package in Groovy:
  Invalid
Status in linux-gcp source package in Groovy:
  Fix Released
Status in linux-oracle source package in Groovy:
  Fix Released
Status in linux-aws source package in Hirsute:
  In Progress
Status in linux-azure source package in Hirsute:
  Fix Released
Status in linux-azure-4.15 source package in Hirsute:
  Invalid
Status in linux-gcp source package in Hirsute:
  New
Status in linux-oracle source package in Hirsute:
  New

Bug description:
  [Impact]
  Atari partition tables have very broad specifications, and can spontaneously show up on uncleared disks with "garbage" data. There have been reports of misinterpreted AHDI partition tables before (see [0] and [1]), usually as an unintended side-effect of using non-zeroed disks. Users of this specific partition scheme are unlikely to be on AWS instances, so we should disable them.

  [0] https://lore.kernel.org/linux-block/1467736712-11825-1-git-send-email-krisman@xxxxxxxxxxxxxxxxxx/
  [1] https://mail-index.netbsd.org/port-atari/1995/11/19/0001.html

  [Test Case]
  Ensure that CONFIG_ATARI_PARTITION is not set in /boot/config-$(uname -r)

  [Fix]
  Unset CONFIG_ATARI_PARTITION in debian.aws/config/config.common.ubuntu

  [Regression Potential]
  There could be unexpected dependencies on Atari partitions that are impacted by this change. Considering Atari hardware hasn't been produced in a long time, and is unlikely to be used in AWS instances, the regression potential should be very low.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-aws/+bug/1908264/+subscriptions