diff --git a/config.tar.bz2 b/config.tar.bz2 index d52f6b27..36989df2 100644 --- a/config.tar.bz2 +++ b/config.tar.bz2 @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:743f169dc5023035af8df3d94f23d730764e9671a7c98263fed1f0e82d7ae1b2 -size 244518 +oid sha256:4dabf64d9d2dabaf26d9c21fa00686a6fb1b03bc0126ba2186fbe0d4ac8925f6 +size 244435 diff --git a/dtb-aarch64.changes b/dtb-aarch64.changes index cb99b403..79e9c1dc 100644 --- a/dtb-aarch64.changes +++ b/dtb-aarch64.changes @@ -1,3 +1,20 @@ +------------------------------------------------------------------- +Tue Feb 25 11:27:18 CET 2020 - jroedel@suse.de + +- KVM: nVMX: Check IO instruction VM-exit conditions + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Refactor IO bitmap checks into helper function + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Don't emulate instructions in guest mode + (CVE-2020-2732 bsc#1163971). +- commit c225901 + +------------------------------------------------------------------- +Mon Feb 24 13:39:50 CET 2020 - msuchanek@suse.de + +- Enable CONFIG_BLK_DEV_SR_VENDOR (boo#1164632). +- commit 517bced + ------------------------------------------------------------------- Mon Feb 24 10:02:29 CET 2020 - jslaby@suse.cz @@ -9383,6 +9400,12 @@ Wed Sep 25 11:53:05 CEST 2019 - fvogt@suse.com - Previously that was only enabled on armv6/armv7 - commit 4940602 +------------------------------------------------------------------- +Tue Sep 24 15:57:36 CEST 2019 - hare@suse.de + +- Compile nvme.ko as module (bsc#1150846, bsc#1150850, bsc#1161889) +- commit 3e12ff1 + ------------------------------------------------------------------- Sat Sep 21 15:21:27 CEST 2019 - jslaby@suse.cz diff --git a/dtb-aarch64.spec b/dtb-aarch64.spec index 9db025af..4177895c 100644 --- a/dtb-aarch64.spec +++ b/dtb-aarch64.spec @@ -31,7 +31,7 @@ Name: dtb-aarch64 Version: 5.5.6 %if 0%{?is_kotd} -Release: .g4a830b1 +Release: .gc225901 %else Release: 0 %endif diff --git a/dtb-armv6l.changes b/dtb-armv6l.changes index cb99b403..79e9c1dc 100644 --- a/dtb-armv6l.changes +++ b/dtb-armv6l.changes @@ -1,3 +1,20 @@ +------------------------------------------------------------------- +Tue Feb 25 11:27:18 CET 2020 - jroedel@suse.de + +- KVM: nVMX: Check IO instruction VM-exit conditions + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Refactor IO bitmap checks into helper function + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Don't emulate instructions in guest mode + (CVE-2020-2732 bsc#1163971). +- commit c225901 + +------------------------------------------------------------------- +Mon Feb 24 13:39:50 CET 2020 - msuchanek@suse.de + +- Enable CONFIG_BLK_DEV_SR_VENDOR (boo#1164632). +- commit 517bced + ------------------------------------------------------------------- Mon Feb 24 10:02:29 CET 2020 - jslaby@suse.cz @@ -9383,6 +9400,12 @@ Wed Sep 25 11:53:05 CEST 2019 - fvogt@suse.com - Previously that was only enabled on armv6/armv7 - commit 4940602 +------------------------------------------------------------------- +Tue Sep 24 15:57:36 CEST 2019 - hare@suse.de + +- Compile nvme.ko as module (bsc#1150846, bsc#1150850, bsc#1161889) +- commit 3e12ff1 + ------------------------------------------------------------------- Sat Sep 21 15:21:27 CEST 2019 - jslaby@suse.cz diff --git a/dtb-armv6l.spec b/dtb-armv6l.spec index 55b653da..02149283 100644 --- a/dtb-armv6l.spec +++ b/dtb-armv6l.spec @@ -31,7 +31,7 @@ Name: dtb-armv6l Version: 5.5.6 %if 0%{?is_kotd} -Release: .g4a830b1 +Release: .gc225901 %else Release: 0 %endif diff --git a/dtb-armv7l.changes b/dtb-armv7l.changes index cb99b403..79e9c1dc 100644 --- a/dtb-armv7l.changes +++ b/dtb-armv7l.changes @@ -1,3 +1,20 @@ +------------------------------------------------------------------- +Tue Feb 25 11:27:18 CET 2020 - jroedel@suse.de + +- KVM: nVMX: Check IO instruction VM-exit conditions + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Refactor IO bitmap checks into helper function + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Don't emulate instructions in guest mode + (CVE-2020-2732 bsc#1163971). +- commit c225901 + +------------------------------------------------------------------- +Mon Feb 24 13:39:50 CET 2020 - msuchanek@suse.de + +- Enable CONFIG_BLK_DEV_SR_VENDOR (boo#1164632). +- commit 517bced + ------------------------------------------------------------------- Mon Feb 24 10:02:29 CET 2020 - jslaby@suse.cz @@ -9383,6 +9400,12 @@ Wed Sep 25 11:53:05 CEST 2019 - fvogt@suse.com - Previously that was only enabled on armv6/armv7 - commit 4940602 +------------------------------------------------------------------- +Tue Sep 24 15:57:36 CEST 2019 - hare@suse.de + +- Compile nvme.ko as module (bsc#1150846, bsc#1150850, bsc#1161889) +- commit 3e12ff1 + ------------------------------------------------------------------- Sat Sep 21 15:21:27 CEST 2019 - jslaby@suse.cz diff --git a/dtb-armv7l.spec b/dtb-armv7l.spec index 6f4154f7..199edb24 100644 --- a/dtb-armv7l.spec +++ b/dtb-armv7l.spec @@ -31,7 +31,7 @@ Name: dtb-armv7l Version: 5.5.6 %if 0%{?is_kotd} -Release: .g4a830b1 +Release: .gc225901 %else Release: 0 %endif diff --git a/kernel-64kb.changes b/kernel-64kb.changes index cb99b403..79e9c1dc 100644 --- a/kernel-64kb.changes +++ b/kernel-64kb.changes @@ -1,3 +1,20 @@ +------------------------------------------------------------------- +Tue Feb 25 11:27:18 CET 2020 - jroedel@suse.de + +- KVM: nVMX: Check IO instruction VM-exit conditions + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Refactor IO bitmap checks into helper function + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Don't emulate instructions in guest mode + (CVE-2020-2732 bsc#1163971). +- commit c225901 + +------------------------------------------------------------------- +Mon Feb 24 13:39:50 CET 2020 - msuchanek@suse.de + +- Enable CONFIG_BLK_DEV_SR_VENDOR (boo#1164632). +- commit 517bced + ------------------------------------------------------------------- Mon Feb 24 10:02:29 CET 2020 - jslaby@suse.cz @@ -9383,6 +9400,12 @@ Wed Sep 25 11:53:05 CEST 2019 - fvogt@suse.com - Previously that was only enabled on armv6/armv7 - commit 4940602 +------------------------------------------------------------------- +Tue Sep 24 15:57:36 CEST 2019 - hare@suse.de + +- Compile nvme.ko as module (bsc#1150846, bsc#1150850, bsc#1161889) +- commit 3e12ff1 + ------------------------------------------------------------------- Sat Sep 21 15:21:27 CEST 2019 - jslaby@suse.cz diff --git a/kernel-64kb.spec b/kernel-64kb.spec index e0265d04..a83c40cb 100644 --- a/kernel-64kb.spec +++ b/kernel-64kb.spec @@ -67,7 +67,7 @@ License: GPL-2.0 Group: System/Kernel Version: 5.5.6 %if 0%{?is_kotd} -Release: .g4a830b1 +Release: .gc225901 %else Release: 0 %endif @@ -174,10 +174,10 @@ Conflicts: hyper-v < 4 Conflicts: libc.so.6()(64bit) %endif Provides: kernel = %version-%source_rel -Provides: kernel-%build_flavor-base-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca -Provides: kernel-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca +Provides: kernel-%build_flavor-base-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 +Provides: kernel-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 # END COMMON DEPS -Provides: %name-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca +Provides: %name-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 %obsolete_rebuilds %name Source0: http://www.kernel.org/pub/linux/kernel/v5.x/linux-%srcversion.tar.xz Source2: source-post.sh diff --git a/kernel-debug.changes b/kernel-debug.changes index cb99b403..79e9c1dc 100644 --- a/kernel-debug.changes +++ b/kernel-debug.changes @@ -1,3 +1,20 @@ +------------------------------------------------------------------- +Tue Feb 25 11:27:18 CET 2020 - jroedel@suse.de + +- KVM: nVMX: Check IO instruction VM-exit conditions + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Refactor IO bitmap checks into helper function + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Don't emulate instructions in guest mode + (CVE-2020-2732 bsc#1163971). +- commit c225901 + +------------------------------------------------------------------- +Mon Feb 24 13:39:50 CET 2020 - msuchanek@suse.de + +- Enable CONFIG_BLK_DEV_SR_VENDOR (boo#1164632). +- commit 517bced + ------------------------------------------------------------------- Mon Feb 24 10:02:29 CET 2020 - jslaby@suse.cz @@ -9383,6 +9400,12 @@ Wed Sep 25 11:53:05 CEST 2019 - fvogt@suse.com - Previously that was only enabled on armv6/armv7 - commit 4940602 +------------------------------------------------------------------- +Tue Sep 24 15:57:36 CEST 2019 - hare@suse.de + +- Compile nvme.ko as module (bsc#1150846, bsc#1150850, bsc#1161889) +- commit 3e12ff1 + ------------------------------------------------------------------- Sat Sep 21 15:21:27 CEST 2019 - jslaby@suse.cz diff --git a/kernel-debug.spec b/kernel-debug.spec index e8a58dd5..b41a3cd8 100644 --- a/kernel-debug.spec +++ b/kernel-debug.spec @@ -67,7 +67,7 @@ License: GPL-2.0 Group: System/Kernel Version: 5.5.6 %if 0%{?is_kotd} -Release: .g4a830b1 +Release: .gc225901 %else Release: 0 %endif @@ -174,10 +174,10 @@ Conflicts: hyper-v < 4 Conflicts: libc.so.6()(64bit) %endif Provides: kernel = %version-%source_rel -Provides: kernel-%build_flavor-base-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca -Provides: kernel-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca +Provides: kernel-%build_flavor-base-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 +Provides: kernel-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 # END COMMON DEPS -Provides: %name-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca +Provides: %name-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 %ifarch ppc64 Provides: kernel-kdump = 2.6.28 Obsoletes: kernel-kdump <= 2.6.28 diff --git a/kernel-default.changes b/kernel-default.changes index cb99b403..79e9c1dc 100644 --- a/kernel-default.changes +++ b/kernel-default.changes @@ -1,3 +1,20 @@ +------------------------------------------------------------------- +Tue Feb 25 11:27:18 CET 2020 - jroedel@suse.de + +- KVM: nVMX: Check IO instruction VM-exit conditions + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Refactor IO bitmap checks into helper function + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Don't emulate instructions in guest mode + (CVE-2020-2732 bsc#1163971). +- commit c225901 + +------------------------------------------------------------------- +Mon Feb 24 13:39:50 CET 2020 - msuchanek@suse.de + +- Enable CONFIG_BLK_DEV_SR_VENDOR (boo#1164632). +- commit 517bced + ------------------------------------------------------------------- Mon Feb 24 10:02:29 CET 2020 - jslaby@suse.cz @@ -9383,6 +9400,12 @@ Wed Sep 25 11:53:05 CEST 2019 - fvogt@suse.com - Previously that was only enabled on armv6/armv7 - commit 4940602 +------------------------------------------------------------------- +Tue Sep 24 15:57:36 CEST 2019 - hare@suse.de + +- Compile nvme.ko as module (bsc#1150846, bsc#1150850, bsc#1161889) +- commit 3e12ff1 + ------------------------------------------------------------------- Sat Sep 21 15:21:27 CEST 2019 - jslaby@suse.cz diff --git a/kernel-default.spec b/kernel-default.spec index da09825d..d52c6f3f 100644 --- a/kernel-default.spec +++ b/kernel-default.spec @@ -67,7 +67,7 @@ License: GPL-2.0 Group: System/Kernel Version: 5.5.6 %if 0%{?is_kotd} -Release: .g4a830b1 +Release: .gc225901 %else Release: 0 %endif @@ -174,10 +174,10 @@ Conflicts: hyper-v < 4 Conflicts: libc.so.6()(64bit) %endif Provides: kernel = %version-%source_rel -Provides: kernel-%build_flavor-base-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca -Provides: kernel-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca +Provides: kernel-%build_flavor-base-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 +Provides: kernel-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 # END COMMON DEPS -Provides: %name-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca +Provides: %name-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 %ifarch %ix86 Provides: kernel-smp = 2.6.17 Obsoletes: kernel-smp <= 2.6.17 diff --git a/kernel-docs.changes b/kernel-docs.changes index cb99b403..79e9c1dc 100644 --- a/kernel-docs.changes +++ b/kernel-docs.changes @@ -1,3 +1,20 @@ +------------------------------------------------------------------- +Tue Feb 25 11:27:18 CET 2020 - jroedel@suse.de + +- KVM: nVMX: Check IO instruction VM-exit conditions + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Refactor IO bitmap checks into helper function + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Don't emulate instructions in guest mode + (CVE-2020-2732 bsc#1163971). +- commit c225901 + +------------------------------------------------------------------- +Mon Feb 24 13:39:50 CET 2020 - msuchanek@suse.de + +- Enable CONFIG_BLK_DEV_SR_VENDOR (boo#1164632). +- commit 517bced + ------------------------------------------------------------------- Mon Feb 24 10:02:29 CET 2020 - jslaby@suse.cz @@ -9383,6 +9400,12 @@ Wed Sep 25 11:53:05 CEST 2019 - fvogt@suse.com - Previously that was only enabled on armv6/armv7 - commit 4940602 +------------------------------------------------------------------- +Tue Sep 24 15:57:36 CEST 2019 - hare@suse.de + +- Compile nvme.ko as module (bsc#1150846, bsc#1150850, bsc#1161889) +- commit 3e12ff1 + ------------------------------------------------------------------- Sat Sep 21 15:21:27 CEST 2019 - jslaby@suse.cz diff --git a/kernel-docs.spec b/kernel-docs.spec index f4a049bb..1c02c864 100644 --- a/kernel-docs.spec +++ b/kernel-docs.spec @@ -33,7 +33,7 @@ License: GPL-2.0 Group: Documentation/Man Version: 5.5.6 %if 0%{?is_kotd} -Release: .g4a830b1 +Release: .gc225901 %else Release: 0 %endif @@ -63,7 +63,7 @@ BuildRequires: texlive-zapfding %endif Url: http://www.kernel.org/ Provides: %name = %version-%source_rel -Provides: %name-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca +Provides: %name-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 BuildArch: noarch BuildRoot: %{_tmppath}/%{name}-%{version}-build Source0: http://www.kernel.org/pub/linux/kernel/v5.x/linux-%srcversion.tar.xz diff --git a/kernel-kvmsmall.changes b/kernel-kvmsmall.changes index cb99b403..79e9c1dc 100644 --- a/kernel-kvmsmall.changes +++ b/kernel-kvmsmall.changes @@ -1,3 +1,20 @@ +------------------------------------------------------------------- +Tue Feb 25 11:27:18 CET 2020 - jroedel@suse.de + +- KVM: nVMX: Check IO instruction VM-exit conditions + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Refactor IO bitmap checks into helper function + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Don't emulate instructions in guest mode + (CVE-2020-2732 bsc#1163971). +- commit c225901 + +------------------------------------------------------------------- +Mon Feb 24 13:39:50 CET 2020 - msuchanek@suse.de + +- Enable CONFIG_BLK_DEV_SR_VENDOR (boo#1164632). +- commit 517bced + ------------------------------------------------------------------- Mon Feb 24 10:02:29 CET 2020 - jslaby@suse.cz @@ -9383,6 +9400,12 @@ Wed Sep 25 11:53:05 CEST 2019 - fvogt@suse.com - Previously that was only enabled on armv6/armv7 - commit 4940602 +------------------------------------------------------------------- +Tue Sep 24 15:57:36 CEST 2019 - hare@suse.de + +- Compile nvme.ko as module (bsc#1150846, bsc#1150850, bsc#1161889) +- commit 3e12ff1 + ------------------------------------------------------------------- Sat Sep 21 15:21:27 CEST 2019 - jslaby@suse.cz diff --git a/kernel-kvmsmall.spec b/kernel-kvmsmall.spec index 3563511e..4ca20a8a 100644 --- a/kernel-kvmsmall.spec +++ b/kernel-kvmsmall.spec @@ -67,7 +67,7 @@ License: GPL-2.0 Group: System/Kernel Version: 5.5.6 %if 0%{?is_kotd} -Release: .g4a830b1 +Release: .gc225901 %else Release: 0 %endif @@ -174,10 +174,10 @@ Conflicts: hyper-v < 4 Conflicts: libc.so.6()(64bit) %endif Provides: kernel = %version-%source_rel -Provides: kernel-%build_flavor-base-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca -Provides: kernel-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca +Provides: kernel-%build_flavor-base-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 +Provides: kernel-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 # END COMMON DEPS -Provides: %name-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca +Provides: %name-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 %obsolete_rebuilds %name Source0: http://www.kernel.org/pub/linux/kernel/v5.x/linux-%srcversion.tar.xz Source2: source-post.sh diff --git a/kernel-lpae.changes b/kernel-lpae.changes index cb99b403..79e9c1dc 100644 --- a/kernel-lpae.changes +++ b/kernel-lpae.changes @@ -1,3 +1,20 @@ +------------------------------------------------------------------- +Tue Feb 25 11:27:18 CET 2020 - jroedel@suse.de + +- KVM: nVMX: Check IO instruction VM-exit conditions + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Refactor IO bitmap checks into helper function + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Don't emulate instructions in guest mode + (CVE-2020-2732 bsc#1163971). +- commit c225901 + +------------------------------------------------------------------- +Mon Feb 24 13:39:50 CET 2020 - msuchanek@suse.de + +- Enable CONFIG_BLK_DEV_SR_VENDOR (boo#1164632). +- commit 517bced + ------------------------------------------------------------------- Mon Feb 24 10:02:29 CET 2020 - jslaby@suse.cz @@ -9383,6 +9400,12 @@ Wed Sep 25 11:53:05 CEST 2019 - fvogt@suse.com - Previously that was only enabled on armv6/armv7 - commit 4940602 +------------------------------------------------------------------- +Tue Sep 24 15:57:36 CEST 2019 - hare@suse.de + +- Compile nvme.ko as module (bsc#1150846, bsc#1150850, bsc#1161889) +- commit 3e12ff1 + ------------------------------------------------------------------- Sat Sep 21 15:21:27 CEST 2019 - jslaby@suse.cz diff --git a/kernel-lpae.spec b/kernel-lpae.spec index d14b2df2..1259c5dd 100644 --- a/kernel-lpae.spec +++ b/kernel-lpae.spec @@ -67,7 +67,7 @@ License: GPL-2.0 Group: System/Kernel Version: 5.5.6 %if 0%{?is_kotd} -Release: .g4a830b1 +Release: .gc225901 %else Release: 0 %endif @@ -174,10 +174,10 @@ Conflicts: hyper-v < 4 Conflicts: libc.so.6()(64bit) %endif Provides: kernel = %version-%source_rel -Provides: kernel-%build_flavor-base-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca -Provides: kernel-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca +Provides: kernel-%build_flavor-base-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 +Provides: kernel-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 # END COMMON DEPS -Provides: %name-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca +Provides: %name-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 %obsolete_rebuilds %name Source0: http://www.kernel.org/pub/linux/kernel/v5.x/linux-%srcversion.tar.xz Source2: source-post.sh diff --git a/kernel-obs-build.changes b/kernel-obs-build.changes index cb99b403..79e9c1dc 100644 --- a/kernel-obs-build.changes +++ b/kernel-obs-build.changes @@ -1,3 +1,20 @@ +------------------------------------------------------------------- +Tue Feb 25 11:27:18 CET 2020 - jroedel@suse.de + +- KVM: nVMX: Check IO instruction VM-exit conditions + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Refactor IO bitmap checks into helper function + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Don't emulate instructions in guest mode + (CVE-2020-2732 bsc#1163971). +- commit c225901 + +------------------------------------------------------------------- +Mon Feb 24 13:39:50 CET 2020 - msuchanek@suse.de + +- Enable CONFIG_BLK_DEV_SR_VENDOR (boo#1164632). +- commit 517bced + ------------------------------------------------------------------- Mon Feb 24 10:02:29 CET 2020 - jslaby@suse.cz @@ -9383,6 +9400,12 @@ Wed Sep 25 11:53:05 CEST 2019 - fvogt@suse.com - Previously that was only enabled on armv6/armv7 - commit 4940602 +------------------------------------------------------------------- +Tue Sep 24 15:57:36 CEST 2019 - hare@suse.de + +- Compile nvme.ko as module (bsc#1150846, bsc#1150850, bsc#1161889) +- commit 3e12ff1 + ------------------------------------------------------------------- Sat Sep 21 15:21:27 CEST 2019 - jslaby@suse.cz diff --git a/kernel-obs-build.spec b/kernel-obs-build.spec index 504e619c..d39c5cad 100644 --- a/kernel-obs-build.spec +++ b/kernel-obs-build.spec @@ -45,7 +45,7 @@ BuildRequires: util-linux %endif %endif %endif -BuildRequires: kernel%kernel_flavor-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca +BuildRequires: kernel%kernel_flavor-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 %if 0%{?rhel_version} BuildRequires: kernel @@ -66,7 +66,7 @@ License: GPL-2.0 Group: SLES Version: 5.5.6 %if 0%{?is_kotd} -Release: .g4a830b1 +Release: .gc225901 %else Release: 0 %endif diff --git a/kernel-obs-qa.changes b/kernel-obs-qa.changes index cb99b403..79e9c1dc 100644 --- a/kernel-obs-qa.changes +++ b/kernel-obs-qa.changes @@ -1,3 +1,20 @@ +------------------------------------------------------------------- +Tue Feb 25 11:27:18 CET 2020 - jroedel@suse.de + +- KVM: nVMX: Check IO instruction VM-exit conditions + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Refactor IO bitmap checks into helper function + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Don't emulate instructions in guest mode + (CVE-2020-2732 bsc#1163971). +- commit c225901 + +------------------------------------------------------------------- +Mon Feb 24 13:39:50 CET 2020 - msuchanek@suse.de + +- Enable CONFIG_BLK_DEV_SR_VENDOR (boo#1164632). +- commit 517bced + ------------------------------------------------------------------- Mon Feb 24 10:02:29 CET 2020 - jslaby@suse.cz @@ -9383,6 +9400,12 @@ Wed Sep 25 11:53:05 CEST 2019 - fvogt@suse.com - Previously that was only enabled on armv6/armv7 - commit 4940602 +------------------------------------------------------------------- +Tue Sep 24 15:57:36 CEST 2019 - hare@suse.de + +- Compile nvme.ko as module (bsc#1150846, bsc#1150850, bsc#1161889) +- commit 3e12ff1 + ------------------------------------------------------------------- Sat Sep 21 15:21:27 CEST 2019 - jslaby@suse.cz diff --git a/kernel-obs-qa.spec b/kernel-obs-qa.spec index 9074025c..3782a423 100644 --- a/kernel-obs-qa.spec +++ b/kernel-obs-qa.spec @@ -38,7 +38,7 @@ License: GPL-2.0 Group: SLES Version: 5.5.6 %if 0%{?is_kotd} -Release: .g4a830b1 +Release: .gc225901 %else Release: 0 %endif diff --git a/kernel-pae.changes b/kernel-pae.changes index cb99b403..79e9c1dc 100644 --- a/kernel-pae.changes +++ b/kernel-pae.changes @@ -1,3 +1,20 @@ +------------------------------------------------------------------- +Tue Feb 25 11:27:18 CET 2020 - jroedel@suse.de + +- KVM: nVMX: Check IO instruction VM-exit conditions + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Refactor IO bitmap checks into helper function + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Don't emulate instructions in guest mode + (CVE-2020-2732 bsc#1163971). +- commit c225901 + +------------------------------------------------------------------- +Mon Feb 24 13:39:50 CET 2020 - msuchanek@suse.de + +- Enable CONFIG_BLK_DEV_SR_VENDOR (boo#1164632). +- commit 517bced + ------------------------------------------------------------------- Mon Feb 24 10:02:29 CET 2020 - jslaby@suse.cz @@ -9383,6 +9400,12 @@ Wed Sep 25 11:53:05 CEST 2019 - fvogt@suse.com - Previously that was only enabled on armv6/armv7 - commit 4940602 +------------------------------------------------------------------- +Tue Sep 24 15:57:36 CEST 2019 - hare@suse.de + +- Compile nvme.ko as module (bsc#1150846, bsc#1150850, bsc#1161889) +- commit 3e12ff1 + ------------------------------------------------------------------- Sat Sep 21 15:21:27 CEST 2019 - jslaby@suse.cz diff --git a/kernel-pae.spec b/kernel-pae.spec index 4ebec59d..428b625c 100644 --- a/kernel-pae.spec +++ b/kernel-pae.spec @@ -67,7 +67,7 @@ License: GPL-2.0 Group: System/Kernel Version: 5.5.6 %if 0%{?is_kotd} -Release: .g4a830b1 +Release: .gc225901 %else Release: 0 %endif @@ -174,10 +174,10 @@ Conflicts: hyper-v < 4 Conflicts: libc.so.6()(64bit) %endif Provides: kernel = %version-%source_rel -Provides: kernel-%build_flavor-base-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca -Provides: kernel-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca +Provides: kernel-%build_flavor-base-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 +Provides: kernel-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 # END COMMON DEPS -Provides: %name-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca +Provides: %name-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 %ifarch %ix86 Provides: kernel-bigsmp = 2.6.17 Obsoletes: kernel-bigsmp <= 2.6.17 diff --git a/kernel-source.changes b/kernel-source.changes index cb99b403..79e9c1dc 100644 --- a/kernel-source.changes +++ b/kernel-source.changes @@ -1,3 +1,20 @@ +------------------------------------------------------------------- +Tue Feb 25 11:27:18 CET 2020 - jroedel@suse.de + +- KVM: nVMX: Check IO instruction VM-exit conditions + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Refactor IO bitmap checks into helper function + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Don't emulate instructions in guest mode + (CVE-2020-2732 bsc#1163971). +- commit c225901 + +------------------------------------------------------------------- +Mon Feb 24 13:39:50 CET 2020 - msuchanek@suse.de + +- Enable CONFIG_BLK_DEV_SR_VENDOR (boo#1164632). +- commit 517bced + ------------------------------------------------------------------- Mon Feb 24 10:02:29 CET 2020 - jslaby@suse.cz @@ -9383,6 +9400,12 @@ Wed Sep 25 11:53:05 CEST 2019 - fvogt@suse.com - Previously that was only enabled on armv6/armv7 - commit 4940602 +------------------------------------------------------------------- +Tue Sep 24 15:57:36 CEST 2019 - hare@suse.de + +- Compile nvme.ko as module (bsc#1150846, bsc#1150850, bsc#1161889) +- commit 3e12ff1 + ------------------------------------------------------------------- Sat Sep 21 15:21:27 CEST 2019 - jslaby@suse.cz diff --git a/kernel-source.spec b/kernel-source.spec index 584551e0..2cdae2b4 100644 --- a/kernel-source.spec +++ b/kernel-source.spec @@ -32,7 +32,7 @@ License: GPL-2.0 Group: Development/Sources Version: 5.5.6 %if 0%{?is_kotd} -Release: .g4a830b1 +Release: .gc225901 %else Release: 0 %endif @@ -43,7 +43,7 @@ BuildRequires: fdupes BuildRequires: sed Requires(post): coreutils sed Provides: %name = %version-%source_rel -Provides: %name-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca +Provides: %name-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 Provides: linux Provides: multiversion(kernel) Source0: http://www.kernel.org/pub/linux/kernel/v5.x/linux-%srcversion.tar.xz diff --git a/kernel-syms.changes b/kernel-syms.changes index cb99b403..79e9c1dc 100644 --- a/kernel-syms.changes +++ b/kernel-syms.changes @@ -1,3 +1,20 @@ +------------------------------------------------------------------- +Tue Feb 25 11:27:18 CET 2020 - jroedel@suse.de + +- KVM: nVMX: Check IO instruction VM-exit conditions + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Refactor IO bitmap checks into helper function + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Don't emulate instructions in guest mode + (CVE-2020-2732 bsc#1163971). +- commit c225901 + +------------------------------------------------------------------- +Mon Feb 24 13:39:50 CET 2020 - msuchanek@suse.de + +- Enable CONFIG_BLK_DEV_SR_VENDOR (boo#1164632). +- commit 517bced + ------------------------------------------------------------------- Mon Feb 24 10:02:29 CET 2020 - jslaby@suse.cz @@ -9383,6 +9400,12 @@ Wed Sep 25 11:53:05 CEST 2019 - fvogt@suse.com - Previously that was only enabled on armv6/armv7 - commit 4940602 +------------------------------------------------------------------- +Tue Sep 24 15:57:36 CEST 2019 - hare@suse.de + +- Compile nvme.ko as module (bsc#1150846, bsc#1150850, bsc#1161889) +- commit 3e12ff1 + ------------------------------------------------------------------- Sat Sep 21 15:21:27 CEST 2019 - jslaby@suse.cz diff --git a/kernel-syms.spec b/kernel-syms.spec index a7d2c33f..17c0d0dd 100644 --- a/kernel-syms.spec +++ b/kernel-syms.spec @@ -27,7 +27,7 @@ Group: Development/Sources Version: 5.5.6 %if %using_buildservice %if 0%{?is_kotd} -Release: .g4a830b1 +Release: .gc225901 %else Release: 0 %endif @@ -52,7 +52,7 @@ Requires: kernel-pae-devel = %version-%source_rel %endif Requires: pesign-obs-integration Provides: %name = %version-%source_rel -Provides: %name-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca +Provides: %name-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 Provides: multiversion(kernel) Source: README.KSYMS Requires: kernel-devel%variant = %version-%source_rel diff --git a/kernel-vanilla.changes b/kernel-vanilla.changes index cb99b403..79e9c1dc 100644 --- a/kernel-vanilla.changes +++ b/kernel-vanilla.changes @@ -1,3 +1,20 @@ +------------------------------------------------------------------- +Tue Feb 25 11:27:18 CET 2020 - jroedel@suse.de + +- KVM: nVMX: Check IO instruction VM-exit conditions + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Refactor IO bitmap checks into helper function + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Don't emulate instructions in guest mode + (CVE-2020-2732 bsc#1163971). +- commit c225901 + +------------------------------------------------------------------- +Mon Feb 24 13:39:50 CET 2020 - msuchanek@suse.de + +- Enable CONFIG_BLK_DEV_SR_VENDOR (boo#1164632). +- commit 517bced + ------------------------------------------------------------------- Mon Feb 24 10:02:29 CET 2020 - jslaby@suse.cz @@ -9383,6 +9400,12 @@ Wed Sep 25 11:53:05 CEST 2019 - fvogt@suse.com - Previously that was only enabled on armv6/armv7 - commit 4940602 +------------------------------------------------------------------- +Tue Sep 24 15:57:36 CEST 2019 - hare@suse.de + +- Compile nvme.ko as module (bsc#1150846, bsc#1150850, bsc#1161889) +- commit 3e12ff1 + ------------------------------------------------------------------- Sat Sep 21 15:21:27 CEST 2019 - jslaby@suse.cz diff --git a/kernel-vanilla.spec b/kernel-vanilla.spec index cde52531..7074a5b8 100644 --- a/kernel-vanilla.spec +++ b/kernel-vanilla.spec @@ -67,7 +67,7 @@ License: GPL-2.0 Group: System/Kernel Version: 5.5.6 %if 0%{?is_kotd} -Release: .g4a830b1 +Release: .gc225901 %else Release: 0 %endif @@ -174,10 +174,10 @@ Conflicts: hyper-v < 4 Conflicts: libc.so.6()(64bit) %endif Provides: kernel = %version-%source_rel -Provides: kernel-%build_flavor-base-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca -Provides: kernel-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca +Provides: kernel-%build_flavor-base-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 +Provides: kernel-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 # END COMMON DEPS -Provides: %name-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca +Provides: %name-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 %obsolete_rebuilds %name Source0: http://www.kernel.org/pub/linux/kernel/v5.x/linux-%srcversion.tar.xz Source2: source-post.sh diff --git a/kernel-zfcpdump.changes b/kernel-zfcpdump.changes index cb99b403..79e9c1dc 100644 --- a/kernel-zfcpdump.changes +++ b/kernel-zfcpdump.changes @@ -1,3 +1,20 @@ +------------------------------------------------------------------- +Tue Feb 25 11:27:18 CET 2020 - jroedel@suse.de + +- KVM: nVMX: Check IO instruction VM-exit conditions + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Refactor IO bitmap checks into helper function + (CVE-2020-2732 bsc#1163971). +- KVM: nVMX: Don't emulate instructions in guest mode + (CVE-2020-2732 bsc#1163971). +- commit c225901 + +------------------------------------------------------------------- +Mon Feb 24 13:39:50 CET 2020 - msuchanek@suse.de + +- Enable CONFIG_BLK_DEV_SR_VENDOR (boo#1164632). +- commit 517bced + ------------------------------------------------------------------- Mon Feb 24 10:02:29 CET 2020 - jslaby@suse.cz @@ -9383,6 +9400,12 @@ Wed Sep 25 11:53:05 CEST 2019 - fvogt@suse.com - Previously that was only enabled on armv6/armv7 - commit 4940602 +------------------------------------------------------------------- +Tue Sep 24 15:57:36 CEST 2019 - hare@suse.de + +- Compile nvme.ko as module (bsc#1150846, bsc#1150850, bsc#1161889) +- commit 3e12ff1 + ------------------------------------------------------------------- Sat Sep 21 15:21:27 CEST 2019 - jslaby@suse.cz diff --git a/kernel-zfcpdump.spec b/kernel-zfcpdump.spec index 68969d81..205784c5 100644 --- a/kernel-zfcpdump.spec +++ b/kernel-zfcpdump.spec @@ -67,7 +67,7 @@ License: GPL-2.0 Group: System/Kernel Version: 5.5.6 %if 0%{?is_kotd} -Release: .g4a830b1 +Release: .gc225901 %else Release: 0 %endif @@ -174,10 +174,10 @@ Conflicts: hyper-v < 4 Conflicts: libc.so.6()(64bit) %endif Provides: kernel = %version-%source_rel -Provides: kernel-%build_flavor-base-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca -Provides: kernel-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca +Provides: kernel-%build_flavor-base-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 +Provides: kernel-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 # END COMMON DEPS -Provides: %name-srchash-4a830b16604db6d70acd1ba41c4d0b0fe1b8acca +Provides: %name-srchash-c225901394cef9494b43bb56806ad8b8d2f29088 %obsolete_rebuilds %name Source0: http://www.kernel.org/pub/linux/kernel/v5.x/linux-%srcversion.tar.xz Source2: source-post.sh diff --git a/patches.suse.tar.bz2 b/patches.suse.tar.bz2 index 09b3f51a..992dbc21 100644 --- a/patches.suse.tar.bz2 +++ b/patches.suse.tar.bz2 @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:2c386bd0c45af2cfbaa800dbf8dbae278db46b63799a3d9af38bfa6250030a12 -size 71138 +oid sha256:bf8a3aac940744209d7117b6388a68be367ea8f14bc32617ba18a1bf3a49e37f +size 73010 diff --git a/series.conf b/series.conf index 32772e92..fc0a277e 100644 --- a/series.conf +++ b/series.conf @@ -1198,6 +1198,11 @@ patches.suse/0001-usb-Add-Xen-pvUSB-protocol-description.patch patches.suse/0002-usb-Introduce-Xen-pvUSB-frontend-xen-hcd.patch + # bsc#1163971, CVE-2020-2732 + patches.suse/kvm-nvmx-don-t-emulate-instructions-in-guest-mode + patches.suse/kvm-nvmx-refactor-io-bitmap-checks-into-helper-function + patches.suse/kvm-nvmx-check-io-instruction-vm-exit-conditions + ######################################################## # Other core patches ######################################################## diff --git a/source-timestamp b/source-timestamp index 02426235..84273aaf 100644 --- a/source-timestamp +++ b/source-timestamp @@ -1,3 +1,3 @@ -2020-02-24 09:02:31 +0000 -GIT Revision: 4a830b16604db6d70acd1ba41c4d0b0fe1b8acca +2020-02-25 10:27:21 +0000 +GIT Revision: c225901394cef9494b43bb56806ad8b8d2f29088 GIT Branch: stable