From cce8a6c59ba5062594dc8665c7faa1f04ec96491 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Wed, 8 May 2024 06:20:13 +0200 Subject: Merging debian version 4.19.289-2. Signed-off-by: Daniel Baumann --- debian/changelog | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) (limited to 'debian/changelog') diff --git a/debian/changelog b/debian/changelog index 8e667a8fc..1381a45e7 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,25 @@ +linux (4.19.289-2) buster-security; urgency=high + + * [x86] Add mitigations for Gather Data Sampling (GDS) (CVE-2022-40982) + - init: Provide arch_cpu_finalize_init() + - x86/cpu: Switch to arch_cpu_finalize_init() + - ARM: cpu: Switch to arch_cpu_finalize_init() + - init: Remove check_bugs() leftovers + - init: Invoke arch_cpu_finalize_init() earlier + - init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() + - x86/fpu: Remove cpuinfo argument from init functions + - x86/fpu: Mark init functions __init + - x86/fpu: Move FPU initialization into arch_cpu_finalize_init() + - x86/speculation: Add Gather Data Sampling mitigation + - x86/speculation: Add force option to GDS mitigation + - x86/speculation: Add Kconfig option for GDS + - KVM: Add GDS_NO support to KVM + - x86/xen: Fix secondary processors' FPU initialization + - Documentation/x86: Fix backwards on/off logic about YMM support + * [x86] cpu: Avoid ABI change for GDS mitigations + + -- Ben Hutchings Tue, 08 Aug 2023 04:35:25 +0200 + linux (4.19.289-1progress5u1) engywuck-security; urgency=high * Uploading to engywuck-security, remaining changes: -- cgit v1.2.3