This bug was fixed in the package linux-kvm - 4.4.0-1039.45 --------------- linux-kvm (4.4.0-1039.45) xenial; urgency=medium
* linux-kvm: 4.4.0-1039.45 -proposed tracker (LP: #1806578) [ Ubuntu: 4.4.0-141.167 ] * linux: 4.4.0-141.167 -proposed tracker (LP: #1806569) * Redpine: firmware assert upon assoc timeout (LP: #1804360) - SAUCE: Redpine: fix for firmware assert upon assoc timeout * CVE-2018-12896 - posix-timers: Sanitize overrun handling * CVE-2017-5753 - ALSA: opl3: Hardening for potential Spectre v1 - ALSA: asihpi: Hardening for potential Spectre v1 - ALSA: hdspm: Hardening for potential Spectre v1 - ALSA: rme9652: Hardening for potential Spectre v1 - ALSA: control: Hardening for potential Spectre v1 - usbip: vhci_sysfs: fix potential Spectre v1 - libahci: Fix possible Spectre-v1 pmp indexing in ahci_led_store() * CVE-2018-18710 - cdrom: fix improper type cast, which can leat to information leak. * CVE-2018-18690 - xfs: don't fail when converting shortform attr to long form during ATTR_REPLACE * CVE-2017-18174 - pinctrl: Add devm_ apis for pinctrl_{register, unregister} - pinctrl: amd: Use devm_pinctrl_register() for pinctrl registration -- Khalid Elmously <khalid.elmou...@canonical.com> Thu, 06 Dec 2018 02:50:39 +0000 ** Changed in: linux-kvm (Ubuntu Xenial) Status: Confirmed => Fix Released ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-18174 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2017-5753 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-12896 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-18690 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-18710 ** Changed in: linux-kvm (Ubuntu Xenial) Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux-kvm in Ubuntu. https://bugs.launchpad.net/bugs/1806578 Title: linux-kvm: 4.4.0-1039.45 -proposed tracker Status in Kernel SRU Workflow: In Progress Status in Kernel SRU Workflow automated-testing series: Fix Released Status in Kernel SRU Workflow certification-testing series: Invalid Status in Kernel SRU Workflow prepare-package series: Fix Released Status in Kernel SRU Workflow prepare-package-meta series: Fix Released Status in Kernel SRU Workflow promote-to-proposed series: Fix Released Status in Kernel SRU Workflow promote-to-security series: In Progress Status in Kernel SRU Workflow promote-to-updates series: In Progress Status in Kernel SRU Workflow regression-testing series: Fix Released Status in Kernel SRU Workflow security-signoff series: Fix Released Status in Kernel SRU Workflow upload-to-ppa series: New Status in Kernel SRU Workflow verification-testing series: Fix Released Status in linux-kvm package in Ubuntu: Invalid Status in linux-kvm source package in Xenial: Fix Released Bug description: This bug is for tracking the <version to be filled> upload package. This bug will contain status and testing results related to that upload. For an explanation of the tasks and the associated workflow see: https://wiki.ubuntu.com/Kernel/kernel-sru-workflow -- swm properties -- boot-testing-requested: true kernel-stable-master-bug: 1806569 phase: Promoted to proposed phase-changed: Thursday, 06. December 2018 15:10 UTC proposed-announcement-sent: true proposed-testing-requested: true reason: promote-to-security: Pending -- ready to copy promote-to-updates: Pending -- ready to copy To manage notifications about this bug go to: https://bugs.launchpad.net/kernel-sru-workflow/+bug/1806578/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp