Linux repositories inspector

linux-aws-cloud-tools-4.4.0-1065 - Linux kernel version specific cloud tools for version 4.4.0-1065

This package provides the architecture dependant parts for kernel version locked tools for cloud tools for version 4.4.0-1065 on 64 bit x86.
You probably want to install linux-cloud-tools-4.4.0-1065-<flavour>.
4.4.0
Ubuntu iconUbuntu 16.04 LTS
DistributionVersionSincePackageInstalledPackager
Ubuntu iconUbuntu 16.04 LTS xenial-security/maindeb4.4.0-1065.75Jan 1286 kiB218 kiB
Ubuntu iconUbuntu 16.04 LTS xenial-updates/maindeb4.4.0-1065.75Jan 1286 kiB218 kiB

Latest updates

Ubuntu 16.04 LTS icon

Ubuntu 16.04 LTS xenial-updates/main: Version 4.4.0-1065.75 reintroduced

Oct 02
Ubuntu: 4.4.0-133.159
  • CVE-2018-5390
    • tcp: avoid collapses in tcp_prune_queue() if possible
    • tcp: detect malicious patterns in tcp_collapse_ofo_queue()
  • CVE-2018-5391
    • Revert "net: increase fragment memory usage limits"
  • CVE-2018-3620 // CVE-2018-3646
    • KVM: x86: introduce linear_{read,write}_system
    • KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and kvm_write_guest_virt_system
    • kvm: x86: use correct privilege level for sgdt/sidt/fxsave/fxrstor access
    • x86/speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT
    • x86/speculation/l1tf: Change order of offset/type in swap entry
    • x86/speculation/l1tf: Protect swap entries against L1TF
    • x86/mm: Simplify p[g4um]d_page() macros
    • x86/speculation/l1tf: Protect PROT_NONE PTEs against speculation
    • x86/speculation/l1tf: Make sure the first page is always reserved
    • SAUCE: x86/cpu: Add Knights Mill/Gemini Lake
    • x86/speculation/l1tf: Add sysfs reporting for l1tf
    • x86/speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings
    • x86/speculation/l1tf: Limit swap file size to MAX_PA/2
    • x86/smp: Provide topology_is_primary_thread()
    • x86/topology: Provide topology_smt_supported()
    • cpu/hotplug: Split do_cpu_down()
    • x86/topology: Add topology_max_smt_threads()
    • cpu/hotplug: Provide knobs to control SMT
    • x86/CPU: Modify detect_extended_topology() to return result
    • x86/cpu: Remove the pointless CPU printout
    • x86/cpu/AMD: Remove the pointless detect_ht() call
    • x86/cpu/common: Provide detect_ht_early()
    • x86/cpu/topology: Provide detect_extended_topology_early()
    • x86/cpu/intel: Evaluate smp_num_siblings early
    • x86/cpu/AMD: Evaluate smp_num_siblings early
    • x86/apic: Ignore secondary threads if nosmt=force
    • x86/speculation/l1tf: Extend 64bit swap file size limit
    • x86/CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings
    • x86/cpufeatures: Add detection of L1D cache flush support.
    • x86/speculation/l1tf: Protect PAE swap entries against L1TF
    • x86/speculation/l1tf: Fix up pte->pfn conversion for PAE
    • Revert "x86/apic: Ignore secondary threads if nosmt=force"
    • SAUCE: x86/mce: register mce notifier earlier
    • cpu/hotplug: Boot HT siblings at least once
    • KVM: x86: Introducing kvm_x86_ops VM init/destroy hooks
    • x86/KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present.
    • x86/KVM/VMX: Add module argument for L1TF mitigation
    • x86/KVM/VMX: Add L1D flush algorithm
    • x86/KVM/VMX: Add L1D MSR based flush
    • x86/KVM/VMX: Add L1D flush logic
    • x86/KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers
    • x86/KVM/VMX: Add find_msr() helper function
    • x86/KVM/VMX: Seperate the VMX AUTOLOAD guest/host number accounting.
    • x86/KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs
    • x86/KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required
    • cpu/hotplug: Online siblings when SMT control is turned on
    • x86/litf: Introduce vmx status variable
    • x86/kvm: Drop L1TF MSR list approach
    • x86/l1tf: Handle EPT disabled state proper
    • x86/kvm: Move l1tf setup function
    • x86/kvm: Add static key for flush always
    • x86/kvm: Serialize L1D flush parameter setter
    • x86/kvm: Allow runtime control of L1D flush
    • cpu/hotplug: Expose SMT control init function
    • cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early
    • x86/bugs, kvm: Introduce boot-time control of L1TF mitigations
    • Documentation: Add section about CPU vulnerabilities
    • x86/speculation/l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures
    • x86/KVM/VMX: Initialize the vmx_l1d_flush_pages' content
    • Documentation/l1tf: Fix typos
    • cpu/hotplug: detect SMT disabled by BIOS
    • x86/KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush()
    • x86/KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond'
    • x86/KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush()
    • x86/irq: Demote irq_cpustat_t::__softirq_pending to u16
    • x86/KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d
    • x86: Don't include linux/irq.h from asm/hardirq.h
    • x86/apic: Order irq_enter/exit() calls correctly vs. ack_APIC_irq()
    • x86/irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d
    • x86/KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr()
    • Documentation/l1tf: Remove Yonah processors from not vulnerable list
    • x86/speculation: Simplify sysfs report of VMX L1TF vulnerability
    • x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry
    • KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES
    • KVM: x86: Add a framework for supporting MSR-based features
    • KVM: X86: Introduce kvm_get_msr_feature()
    • KVM: VMX: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR
    • KVM: VMX: Tell the nested hypervisor to skip L1D flush on vmentry
    • cpu/hotplug: Fix SMT supported evaluation
    • x86/speculation/l1tf: Invert all not present mappings
    • x86/speculation/l1tf: Make pmd/pud_mknotpresent() invert
    • x86/mm/pat: Ensure cpa->pfn only contains page frame numbers
    • SAUCE: Add pfn_pud() and pud_mkhuge()
    • x86/mm/pat: Make set_memory_np() L1TF safe
Ubuntu 16.04 LTS icon

Ubuntu 16.04 LTS xenial-updates/main: Version 4.4.0-1065.75 removed

Oct 02
Ubuntu 16.04 LTS icon

Ubuntu 16.04 LTS xenial-updates/main: Version 4.4.0-1065.75 reintroduced

Aug 15
Ubuntu: 4.4.0-133.159
  • CVE-2018-5390
    • tcp: avoid collapses in tcp_prune_queue() if possible
    • tcp: detect malicious patterns in tcp_collapse_ofo_queue()
  • CVE-2018-5391
    • Revert "net: increase fragment memory usage limits"
  • CVE-2018-3620 // CVE-2018-3646
    • KVM: x86: introduce linear_{read,write}_system
    • KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and kvm_write_guest_virt_system
    • kvm: x86: use correct privilege level for sgdt/sidt/fxsave/fxrstor access
    • x86/speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT
    • x86/speculation/l1tf: Change order of offset/type in swap entry
    • x86/speculation/l1tf: Protect swap entries against L1TF
    • x86/mm: Simplify p[g4um]d_page() macros
    • x86/speculation/l1tf: Protect PROT_NONE PTEs against speculation
    • x86/speculation/l1tf: Make sure the first page is always reserved
    • SAUCE: x86/cpu: Add Knights Mill/Gemini Lake
    • x86/speculation/l1tf: Add sysfs reporting for l1tf
    • x86/speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings
    • x86/speculation/l1tf: Limit swap file size to MAX_PA/2
    • x86/smp: Provide topology_is_primary_thread()
    • x86/topology: Provide topology_smt_supported()
    • cpu/hotplug: Split do_cpu_down()
    • x86/topology: Add topology_max_smt_threads()
    • cpu/hotplug: Provide knobs to control SMT
    • x86/CPU: Modify detect_extended_topology() to return result
    • x86/cpu: Remove the pointless CPU printout
    • x86/cpu/AMD: Remove the pointless detect_ht() call
    • x86/cpu/common: Provide detect_ht_early()
    • x86/cpu/topology: Provide detect_extended_topology_early()
    • x86/cpu/intel: Evaluate smp_num_siblings early
    • x86/cpu/AMD: Evaluate smp_num_siblings early
    • x86/apic: Ignore secondary threads if nosmt=force
    • x86/speculation/l1tf: Extend 64bit swap file size limit
    • x86/CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings
    • x86/cpufeatures: Add detection of L1D cache flush support.
    • x86/speculation/l1tf: Protect PAE swap entries against L1TF
    • x86/speculation/l1tf: Fix up pte->pfn conversion for PAE
    • Revert "x86/apic: Ignore secondary threads if nosmt=force"
    • SAUCE: x86/mce: register mce notifier earlier
    • cpu/hotplug: Boot HT siblings at least once
    • KVM: x86: Introducing kvm_x86_ops VM init/destroy hooks
    • x86/KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present.
    • x86/KVM/VMX: Add module argument for L1TF mitigation
    • x86/KVM/VMX: Add L1D flush algorithm
    • x86/KVM/VMX: Add L1D MSR based flush
    • x86/KVM/VMX: Add L1D flush logic
    • x86/KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers
    • x86/KVM/VMX: Add find_msr() helper function
    • x86/KVM/VMX: Seperate the VMX AUTOLOAD guest/host number accounting.
    • x86/KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs
    • x86/KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required
    • cpu/hotplug: Online siblings when SMT control is turned on
    • x86/litf: Introduce vmx status variable
    • x86/kvm: Drop L1TF MSR list approach
    • x86/l1tf: Handle EPT disabled state proper
    • x86/kvm: Move l1tf setup function
    • x86/kvm: Add static key for flush always
    • x86/kvm: Serialize L1D flush parameter setter
    • x86/kvm: Allow runtime control of L1D flush
    • cpu/hotplug: Expose SMT control init function
    • cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early
    • x86/bugs, kvm: Introduce boot-time control of L1TF mitigations
    • Documentation: Add section about CPU vulnerabilities
    • x86/speculation/l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures
    • x86/KVM/VMX: Initialize the vmx_l1d_flush_pages' content
    • Documentation/l1tf: Fix typos
    • cpu/hotplug: detect SMT disabled by BIOS
    • x86/KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush()
    • x86/KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond'
    • x86/KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush()
    • x86/irq: Demote irq_cpustat_t::__softirq_pending to u16
    • x86/KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d
    • x86: Don't include linux/irq.h from asm/hardirq.h
    • x86/apic: Order irq_enter/exit() calls correctly vs. ack_APIC_irq()
    • x86/irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d
    • x86/KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr()
    • Documentation/l1tf: Remove Yonah processors from not vulnerable list
    • x86/speculation: Simplify sysfs report of VMX L1TF vulnerability
    • x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry
    • KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES
    • KVM: x86: Add a framework for supporting MSR-based features
    • KVM: X86: Introduce kvm_get_msr_feature()
    • KVM: VMX: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR
    • KVM: VMX: Tell the nested hypervisor to skip L1D flush on vmentry
    • cpu/hotplug: Fix SMT supported evaluation
    • x86/speculation/l1tf: Invert all not present mappings
    • x86/speculation/l1tf: Make pmd/pud_mknotpresent() invert
    • x86/mm/pat: Ensure cpa->pfn only contains page frame numbers
    • SAUCE: Add pfn_pud() and pud_mkhuge()
    • x86/mm/pat: Make set_memory_np() L1TF safe
Ubuntu 16.04 LTS icon

Ubuntu 16.04 LTS xenial-updates/main: Version 4.4.0-1065.75 removed

Aug 15
Ubuntu 16.04 LTS icon

Ubuntu 16.04 LTS xenial-security/main: Version 4.4.0-1065.75 reintroduced

Aug 02
Ubuntu: 4.4.0-133.159
  • CVE-2018-5390
    • tcp: avoid collapses in tcp_prune_queue() if possible
    • tcp: detect malicious patterns in tcp_collapse_ofo_queue()
  • CVE-2018-5391
    • Revert "net: increase fragment memory usage limits"
  • CVE-2018-3620 // CVE-2018-3646
    • KVM: x86: introduce linear_{read,write}_system
    • KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and kvm_write_guest_virt_system
    • kvm: x86: use correct privilege level for sgdt/sidt/fxsave/fxrstor access
    • x86/speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT
    • x86/speculation/l1tf: Change order of offset/type in swap entry
    • x86/speculation/l1tf: Protect swap entries against L1TF
    • x86/mm: Simplify p[g4um]d_page() macros
    • x86/speculation/l1tf: Protect PROT_NONE PTEs against speculation
    • x86/speculation/l1tf: Make sure the first page is always reserved
    • SAUCE: x86/cpu: Add Knights Mill/Gemini Lake
    • x86/speculation/l1tf: Add sysfs reporting for l1tf
    • x86/speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings
    • x86/speculation/l1tf: Limit swap file size to MAX_PA/2
    • x86/smp: Provide topology_is_primary_thread()
    • x86/topology: Provide topology_smt_supported()
    • cpu/hotplug: Split do_cpu_down()
    • x86/topology: Add topology_max_smt_threads()
    • cpu/hotplug: Provide knobs to control SMT
    • x86/CPU: Modify detect_extended_topology() to return result
    • x86/cpu: Remove the pointless CPU printout
    • x86/cpu/AMD: Remove the pointless detect_ht() call
    • x86/cpu/common: Provide detect_ht_early()
    • x86/cpu/topology: Provide detect_extended_topology_early()
    • x86/cpu/intel: Evaluate smp_num_siblings early
    • x86/cpu/AMD: Evaluate smp_num_siblings early
    • x86/apic: Ignore secondary threads if nosmt=force
    • x86/speculation/l1tf: Extend 64bit swap file size limit
    • x86/CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings
    • x86/cpufeatures: Add detection of L1D cache flush support.
    • x86/speculation/l1tf: Protect PAE swap entries against L1TF
    • x86/speculation/l1tf: Fix up pte->pfn conversion for PAE
    • Revert "x86/apic: Ignore secondary threads if nosmt=force"
    • SAUCE: x86/mce: register mce notifier earlier
    • cpu/hotplug: Boot HT siblings at least once
    • KVM: x86: Introducing kvm_x86_ops VM init/destroy hooks
    • x86/KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present.
    • x86/KVM/VMX: Add module argument for L1TF mitigation
    • x86/KVM/VMX: Add L1D flush algorithm
    • x86/KVM/VMX: Add L1D MSR based flush
    • x86/KVM/VMX: Add L1D flush logic
    • x86/KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers
    • x86/KVM/VMX: Add find_msr() helper function
    • x86/KVM/VMX: Seperate the VMX AUTOLOAD guest/host number accounting.
    • x86/KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs
    • x86/KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required
    • cpu/hotplug: Online siblings when SMT control is turned on
    • x86/litf: Introduce vmx status variable
    • x86/kvm: Drop L1TF MSR list approach
    • x86/l1tf: Handle EPT disabled state proper
    • x86/kvm: Move l1tf setup function
    • x86/kvm: Add static key for flush always
    • x86/kvm: Serialize L1D flush parameter setter
    • x86/kvm: Allow runtime control of L1D flush
    • cpu/hotplug: Expose SMT control init function
    • cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early
    • x86/bugs, kvm: Introduce boot-time control of L1TF mitigations
    • Documentation: Add section about CPU vulnerabilities
    • x86/speculation/l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures
    • x86/KVM/VMX: Initialize the vmx_l1d_flush_pages' content
    • Documentation/l1tf: Fix typos
    • cpu/hotplug: detect SMT disabled by BIOS
    • x86/KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush()
    • x86/KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond'
    • x86/KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush()
    • x86/irq: Demote irq_cpustat_t::__softirq_pending to u16
    • x86/KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d
    • x86: Don't include linux/irq.h from asm/hardirq.h
    • x86/apic: Order irq_enter/exit() calls correctly vs. ack_APIC_irq()
    • x86/irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d
    • x86/KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr()
    • Documentation/l1tf: Remove Yonah processors from not vulnerable list
    • x86/speculation: Simplify sysfs report of VMX L1TF vulnerability
    • x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry
    • KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES
    • KVM: x86: Add a framework for supporting MSR-based features
    • KVM: X86: Introduce kvm_get_msr_feature()
    • KVM: VMX: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR
    • KVM: VMX: Tell the nested hypervisor to skip L1D flush on vmentry
    • cpu/hotplug: Fix SMT supported evaluation
    • x86/speculation/l1tf: Invert all not present mappings
    • x86/speculation/l1tf: Make pmd/pud_mknotpresent() invert
    • x86/mm/pat: Ensure cpa->pfn only contains page frame numbers
    • SAUCE: Add pfn_pud() and pud_mkhuge()
    • x86/mm/pat: Make set_memory_np() L1TF safe
Ubuntu 16.04 LTS icon

Ubuntu 16.04 LTS xenial-updates/main: Version 4.4.0-1065.75 reintroduced

Aug 02
Ubuntu: 4.4.0-133.159
  • CVE-2018-5390
    • tcp: avoid collapses in tcp_prune_queue() if possible
    • tcp: detect malicious patterns in tcp_collapse_ofo_queue()
  • CVE-2018-5391
    • Revert "net: increase fragment memory usage limits"
  • CVE-2018-3620 // CVE-2018-3646
    • KVM: x86: introduce linear_{read,write}_system
    • KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and kvm_write_guest_virt_system
    • kvm: x86: use correct privilege level for sgdt/sidt/fxsave/fxrstor access
    • x86/speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT
    • x86/speculation/l1tf: Change order of offset/type in swap entry
    • x86/speculation/l1tf: Protect swap entries against L1TF
    • x86/mm: Simplify p[g4um]d_page() macros
    • x86/speculation/l1tf: Protect PROT_NONE PTEs against speculation
    • x86/speculation/l1tf: Make sure the first page is always reserved
    • SAUCE: x86/cpu: Add Knights Mill/Gemini Lake
    • x86/speculation/l1tf: Add sysfs reporting for l1tf
    • x86/speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings
    • x86/speculation/l1tf: Limit swap file size to MAX_PA/2
    • x86/smp: Provide topology_is_primary_thread()
    • x86/topology: Provide topology_smt_supported()
    • cpu/hotplug: Split do_cpu_down()
    • x86/topology: Add topology_max_smt_threads()
    • cpu/hotplug: Provide knobs to control SMT
    • x86/CPU: Modify detect_extended_topology() to return result
    • x86/cpu: Remove the pointless CPU printout
    • x86/cpu/AMD: Remove the pointless detect_ht() call
    • x86/cpu/common: Provide detect_ht_early()
    • x86/cpu/topology: Provide detect_extended_topology_early()
    • x86/cpu/intel: Evaluate smp_num_siblings early
    • x86/cpu/AMD: Evaluate smp_num_siblings early
    • x86/apic: Ignore secondary threads if nosmt=force
    • x86/speculation/l1tf: Extend 64bit swap file size limit
    • x86/CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings
    • x86/cpufeatures: Add detection of L1D cache flush support.
    • x86/speculation/l1tf: Protect PAE swap entries against L1TF
    • x86/speculation/l1tf: Fix up pte->pfn conversion for PAE
    • Revert "x86/apic: Ignore secondary threads if nosmt=force"
    • SAUCE: x86/mce: register mce notifier earlier
    • cpu/hotplug: Boot HT siblings at least once
    • KVM: x86: Introducing kvm_x86_ops VM init/destroy hooks
    • x86/KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present.
    • x86/KVM/VMX: Add module argument for L1TF mitigation
    • x86/KVM/VMX: Add L1D flush algorithm
    • x86/KVM/VMX: Add L1D MSR based flush
    • x86/KVM/VMX: Add L1D flush logic
    • x86/KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers
    • x86/KVM/VMX: Add find_msr() helper function
    • x86/KVM/VMX: Seperate the VMX AUTOLOAD guest/host number accounting.
    • x86/KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs
    • x86/KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required
    • cpu/hotplug: Online siblings when SMT control is turned on
    • x86/litf: Introduce vmx status variable
    • x86/kvm: Drop L1TF MSR list approach
    • x86/l1tf: Handle EPT disabled state proper
    • x86/kvm: Move l1tf setup function
    • x86/kvm: Add static key for flush always
    • x86/kvm: Serialize L1D flush parameter setter
    • x86/kvm: Allow runtime control of L1D flush
    • cpu/hotplug: Expose SMT control init function
    • cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early
    • x86/bugs, kvm: Introduce boot-time control of L1TF mitigations
    • Documentation: Add section about CPU vulnerabilities
    • x86/speculation/l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures
    • x86/KVM/VMX: Initialize the vmx_l1d_flush_pages' content
    • Documentation/l1tf: Fix typos
    • cpu/hotplug: detect SMT disabled by BIOS
    • x86/KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush()
    • x86/KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond'
    • x86/KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush()
    • x86/irq: Demote irq_cpustat_t::__softirq_pending to u16
    • x86/KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d
    • x86: Don't include linux/irq.h from asm/hardirq.h
    • x86/apic: Order irq_enter/exit() calls correctly vs. ack_APIC_irq()
    • x86/irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d
    • x86/KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr()
    • Documentation/l1tf: Remove Yonah processors from not vulnerable list
    • x86/speculation: Simplify sysfs report of VMX L1TF vulnerability
    • x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry
    • KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES
    • KVM: x86: Add a framework for supporting MSR-based features
    • KVM: X86: Introduce kvm_get_msr_feature()
    • KVM: VMX: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR
    • KVM: VMX: Tell the nested hypervisor to skip L1D flush on vmentry
    • cpu/hotplug: Fix SMT supported evaluation
    • x86/speculation/l1tf: Invert all not present mappings
    • x86/speculation/l1tf: Make pmd/pud_mknotpresent() invert
    • x86/mm/pat: Ensure cpa->pfn only contains page frame numbers
    • SAUCE: Add pfn_pud() and pud_mkhuge()
    • x86/mm/pat: Make set_memory_np() L1TF safe
Ubuntu 16.04 LTS icon

Ubuntu 16.04 LTS xenial-security/main: Version 4.4.0-1065.75 removed

Aug 02
Ubuntu 16.04 LTS icon

Ubuntu 16.04 LTS xenial-updates/main: Version 4.4.0-1065.75 removed

Aug 02
Ubuntu 16.04 LTS icon

Ubuntu 16.04 LTS xenial-updates/main: Version 4.4.0-1065.75 introduced

Jan 12
Ubuntu: 4.4.0-133.159
  • CVE-2018-5390
    • tcp: avoid collapses in tcp_prune_queue() if possible
    • tcp: detect malicious patterns in tcp_collapse_ofo_queue()
  • CVE-2018-5391
    • Revert "net: increase fragment memory usage limits"
  • CVE-2018-3620 // CVE-2018-3646
    • KVM: x86: introduce linear_{read,write}_system
    • KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and kvm_write_guest_virt_system
    • kvm: x86: use correct privilege level for sgdt/sidt/fxsave/fxrstor access
    • x86/speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT
    • x86/speculation/l1tf: Change order of offset/type in swap entry
    • x86/speculation/l1tf: Protect swap entries against L1TF
    • x86/mm: Simplify p[g4um]d_page() macros
    • x86/speculation/l1tf: Protect PROT_NONE PTEs against speculation
    • x86/speculation/l1tf: Make sure the first page is always reserved
    • SAUCE: x86/cpu: Add Knights Mill/Gemini Lake
    • x86/speculation/l1tf: Add sysfs reporting for l1tf
    • x86/speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings
    • x86/speculation/l1tf: Limit swap file size to MAX_PA/2
    • x86/smp: Provide topology_is_primary_thread()
    • x86/topology: Provide topology_smt_supported()
    • cpu/hotplug: Split do_cpu_down()
    • x86/topology: Add topology_max_smt_threads()
    • cpu/hotplug: Provide knobs to control SMT
    • x86/CPU: Modify detect_extended_topology() to return result
    • x86/cpu: Remove the pointless CPU printout
    • x86/cpu/AMD: Remove the pointless detect_ht() call
    • x86/cpu/common: Provide detect_ht_early()
    • x86/cpu/topology: Provide detect_extended_topology_early()
    • x86/cpu/intel: Evaluate smp_num_siblings early
    • x86/cpu/AMD: Evaluate smp_num_siblings early
    • x86/apic: Ignore secondary threads if nosmt=force
    • x86/speculation/l1tf: Extend 64bit swap file size limit
    • x86/CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings
    • x86/cpufeatures: Add detection of L1D cache flush support.
    • x86/speculation/l1tf: Protect PAE swap entries against L1TF
    • x86/speculation/l1tf: Fix up pte->pfn conversion for PAE
    • Revert "x86/apic: Ignore secondary threads if nosmt=force"
    • SAUCE: x86/mce: register mce notifier earlier
    • cpu/hotplug: Boot HT siblings at least once
    • KVM: x86: Introducing kvm_x86_ops VM init/destroy hooks
    • x86/KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present.
    • x86/KVM/VMX: Add module argument for L1TF mitigation
    • x86/KVM/VMX: Add L1D flush algorithm
    • x86/KVM/VMX: Add L1D MSR based flush
    • x86/KVM/VMX: Add L1D flush logic
    • x86/KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers
    • x86/KVM/VMX: Add find_msr() helper function
    • x86/KVM/VMX: Seperate the VMX AUTOLOAD guest/host number accounting.
    • x86/KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs
    • x86/KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required
    • cpu/hotplug: Online siblings when SMT control is turned on
    • x86/litf: Introduce vmx status variable
    • x86/kvm: Drop L1TF MSR list approach
    • x86/l1tf: Handle EPT disabled state proper
    • x86/kvm: Move l1tf setup function
    • x86/kvm: Add static key for flush always
    • x86/kvm: Serialize L1D flush parameter setter
    • x86/kvm: Allow runtime control of L1D flush
    • cpu/hotplug: Expose SMT control init function
    • cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early
    • x86/bugs, kvm: Introduce boot-time control of L1TF mitigations
    • Documentation: Add section about CPU vulnerabilities
    • x86/speculation/l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures
    • x86/KVM/VMX: Initialize the vmx_l1d_flush_pages' content
    • Documentation/l1tf: Fix typos
    • cpu/hotplug: detect SMT disabled by BIOS
    • x86/KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush()
    • x86/KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond'
    • x86/KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush()
    • x86/irq: Demote irq_cpustat_t::__softirq_pending to u16
    • x86/KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d
    • x86: Don't include linux/irq.h from asm/hardirq.h
    • x86/apic: Order irq_enter/exit() calls correctly vs. ack_APIC_irq()
    • x86/irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d
    • x86/KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr()
    • Documentation/l1tf: Remove Yonah processors from not vulnerable list
    • x86/speculation: Simplify sysfs report of VMX L1TF vulnerability
    • x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry
    • KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES
    • KVM: x86: Add a framework for supporting MSR-based features
    • KVM: X86: Introduce kvm_get_msr_feature()
    • KVM: VMX: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR
    • KVM: VMX: Tell the nested hypervisor to skip L1D flush on vmentry
    • cpu/hotplug: Fix SMT supported evaluation
    • x86/speculation/l1tf: Invert all not present mappings
    • x86/speculation/l1tf: Make pmd/pud_mknotpresent() invert
    • x86/mm/pat: Ensure cpa->pfn only contains page frame numbers
    • SAUCE: Add pfn_pud() and pud_mkhuge()
    • x86/mm/pat: Make set_memory_np() L1TF safe
Ubuntu 16.04 LTS icon

Ubuntu 16.04 LTS xenial-security/main: Version 4.4.0-1065.75 introduced

Jan 12
Ubuntu: 4.4.0-133.159
  • CVE-2018-5390
    • tcp: avoid collapses in tcp_prune_queue() if possible
    • tcp: detect malicious patterns in tcp_collapse_ofo_queue()
  • CVE-2018-5391
    • Revert "net: increase fragment memory usage limits"
  • CVE-2018-3620 // CVE-2018-3646
    • KVM: x86: introduce linear_{read,write}_system
    • KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and kvm_write_guest_virt_system
    • kvm: x86: use correct privilege level for sgdt/sidt/fxsave/fxrstor access
    • x86/speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT
    • x86/speculation/l1tf: Change order of offset/type in swap entry
    • x86/speculation/l1tf: Protect swap entries against L1TF
    • x86/mm: Simplify p[g4um]d_page() macros
    • x86/speculation/l1tf: Protect PROT_NONE PTEs against speculation
    • x86/speculation/l1tf: Make sure the first page is always reserved
    • SAUCE: x86/cpu: Add Knights Mill/Gemini Lake
    • x86/speculation/l1tf: Add sysfs reporting for l1tf
    • x86/speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings
    • x86/speculation/l1tf: Limit swap file size to MAX_PA/2
    • x86/smp: Provide topology_is_primary_thread()
    • x86/topology: Provide topology_smt_supported()
    • cpu/hotplug: Split do_cpu_down()
    • x86/topology: Add topology_max_smt_threads()
    • cpu/hotplug: Provide knobs to control SMT
    • x86/CPU: Modify detect_extended_topology() to return result
    • x86/cpu: Remove the pointless CPU printout
    • x86/cpu/AMD: Remove the pointless detect_ht() call
    • x86/cpu/common: Provide detect_ht_early()
    • x86/cpu/topology: Provide detect_extended_topology_early()
    • x86/cpu/intel: Evaluate smp_num_siblings early
    • x86/cpu/AMD: Evaluate smp_num_siblings early
    • x86/apic: Ignore secondary threads if nosmt=force
    • x86/speculation/l1tf: Extend 64bit swap file size limit
    • x86/CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings
    • x86/cpufeatures: Add detection of L1D cache flush support.
    • x86/speculation/l1tf: Protect PAE swap entries against L1TF
    • x86/speculation/l1tf: Fix up pte->pfn conversion for PAE
    • Revert "x86/apic: Ignore secondary threads if nosmt=force"
    • SAUCE: x86/mce: register mce notifier earlier
    • cpu/hotplug: Boot HT siblings at least once
    • KVM: x86: Introducing kvm_x86_ops VM init/destroy hooks
    • x86/KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present.
    • x86/KVM/VMX: Add module argument for L1TF mitigation
    • x86/KVM/VMX: Add L1D flush algorithm
    • x86/KVM/VMX: Add L1D MSR based flush
    • x86/KVM/VMX: Add L1D flush logic
    • x86/KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers
    • x86/KVM/VMX: Add find_msr() helper function
    • x86/KVM/VMX: Seperate the VMX AUTOLOAD guest/host number accounting.
    • x86/KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs
    • x86/KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required
    • cpu/hotplug: Online siblings when SMT control is turned on
    • x86/litf: Introduce vmx status variable
    • x86/kvm: Drop L1TF MSR list approach
    • x86/l1tf: Handle EPT disabled state proper
    • x86/kvm: Move l1tf setup function
    • x86/kvm: Add static key for flush always
    • x86/kvm: Serialize L1D flush parameter setter
    • x86/kvm: Allow runtime control of L1D flush
    • cpu/hotplug: Expose SMT control init function
    • cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early
    • x86/bugs, kvm: Introduce boot-time control of L1TF mitigations
    • Documentation: Add section about CPU vulnerabilities
    • x86/speculation/l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures
    • x86/KVM/VMX: Initialize the vmx_l1d_flush_pages' content
    • Documentation/l1tf: Fix typos
    • cpu/hotplug: detect SMT disabled by BIOS
    • x86/KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush()
    • x86/KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond'
    • x86/KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush()
    • x86/irq: Demote irq_cpustat_t::__softirq_pending to u16
    • x86/KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d
    • x86: Don't include linux/irq.h from asm/hardirq.h
    • x86/apic: Order irq_enter/exit() calls correctly vs. ack_APIC_irq()
    • x86/irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d
    • x86/KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr()
    • Documentation/l1tf: Remove Yonah processors from not vulnerable list
    • x86/speculation: Simplify sysfs report of VMX L1TF vulnerability
    • x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry
    • KVM/VMX: Emulate MSR_IA32_ARCH_CAPABILITIES
    • KVM: x86: Add a framework for supporting MSR-based features
    • KVM: X86: Introduce kvm_get_msr_feature()
    • KVM: VMX: support MSR_IA32_ARCH_CAPABILITIES as a feature MSR
    • KVM: VMX: Tell the nested hypervisor to skip L1D flush on vmentry
    • cpu/hotplug: Fix SMT supported evaluation
    • x86/speculation/l1tf: Invert all not present mappings
    • x86/speculation/l1tf: Make pmd/pud_mknotpresent() invert
    • x86/mm/pat: Ensure cpa->pfn only contains page frame numbers
    • SAUCE: Add pfn_pud() and pud_mkhuge()
    • x86/mm/pat: Make set_memory_np() L1TF safe

Related packages

linux - The Linux kernel and modules
linux-aws - Complete Linux kernel for Amazon Web Services (AWS) systems.
⇧ Top