Package "linux-aws-edge"

 linux-aws-edge (4.15.0-1028.29~16.04.1) xenial; urgency=medium
 .
   * linux-aws-edge: 4.15.0-1028.29~16.04.1 -proposed tracker (LP: #1804071)
 .
   * Improve AWS hibernation performance (LP: #1803613)
     - SAUCE: [aws] PM / hibernate: Speed up hibernation by batching requests
 .
   * Restore request-based mode to xen-blkfront for AWS kernels (LP: #1801305)
     - SAUCE: xen/manage: keep track of the on-going suspend mode
     - SAUCE: xen/manage: introduce helper function to know the on-going suspend
       mode
     - SAUCE: xenbus: add freeze/thaw/restore callbacks support
     - SAUCE: xen-blkfront: add callbacks for PM suspend and hibernation
     - SAUCE: xen-blkfront: resurrect request-based mode
     - SAUCE: xen-blkfront: Fixed blkfront_restore to remove a call to negotiate_mq
 .
   [ Ubuntu: 4.15.0-42.45 ]
 .
   * linux: 4.15.0-42.45 -proposed tracker (LP: #1803592)
   * [FEAT] Guest-dedicated Crypto Adapters (LP: #1787405)
     - KVM: s390: reset crypto attributes for all vcpus
     - KVM: s390: vsie: simulate VCPU SIE entry/exit
     - KVM: s390: introduce and use KVM_REQ_VSIE_RESTART
     - KVM: s390: refactor crypto initialization
     - s390: vfio-ap: base implementation of VFIO AP device driver
     - s390: vfio-ap: register matrix device with VFIO mdev framework
     - s390: vfio-ap: sysfs interfaces to configure adapters
     - s390: vfio-ap: sysfs interfaces to configure domains
     - s390: vfio-ap: sysfs interfaces to configure control domains
     - s390: vfio-ap: sysfs interface to view matrix mdev matrix
     - KVM: s390: interface to clear CRYCB masks
     - s390: vfio-ap: implement mediated device open callback
     - s390: vfio-ap: implement VFIO_DEVICE_GET_INFO ioctl
     - s390: vfio-ap: zeroize the AP queues
     - s390: vfio-ap: implement VFIO_DEVICE_RESET ioctl
     - KVM: s390: Clear Crypto Control Block when using vSIE
     - KVM: s390: vsie: Do the CRYCB validation first
     - KVM: s390: vsie: Make use of CRYCB FORMAT2 clear
     - KVM: s390: vsie: Allow CRYCB FORMAT-2
     - KVM: s390: vsie: allow CRYCB FORMAT-1
     - KVM: s390: vsie: allow CRYCB FORMAT-0
     - KVM: s390: vsie: allow guest FORMAT-0 CRYCB on host FORMAT-1
     - KVM: s390: vsie: allow guest FORMAT-1 CRYCB on host FORMAT-2
     - KVM: s390: vsie: allow guest FORMAT-0 CRYCB on host FORMAT-2
     - KVM: s390: device attrs to enable/disable AP interpretation
     - KVM: s390: CPU model support for AP virtualization
     - s390: doc: detailed specifications for AP virtualization
     - KVM: s390: fix locking for crypto setting error path
     - KVM: s390: Tracing APCB changes
     - s390: vfio-ap: setup APCB mask using KVM dedicated function
     - s390/zcrypt: Add ZAPQ inline function.
     - s390/zcrypt: Review inline assembler constraints.
     - s390/zcrypt: Integrate ap_asm.h into include/asm/ap.h.
     - s390/zcrypt: fix ap_instructions_available() returncodes
     - s390/zcrypt: remove VLA usage from the AP bus
     - s390/zcrypt: Remove deprecated ioctls.
     - s390/zcrypt: Remove deprecated zcrypt proc interface.
     - s390/zcrypt: Support up to 256 crypto adapters.
     - [Config:] Enable CONFIG_S390_AP_IOMMU and set CONFIG_VFIO_AP to module.
   * Bypass of mount visibility through userns + mount propagation (LP: #1789161)
     - mount: Retest MNT_LOCKED in do_umount
     - mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts
   * CVE-2018-18955: nested user namespaces with more than five extents
     incorrectly grant privileges over inode (LP: #1801924) // CVE-2018-18955
     - userns: also map extents in the reverse map to kernel IDs
   * kdump fail due to an IRQ storm (LP: #1797990)
     - SAUCE: x86/PCI: Export find_cap() to be used in early PCI code
     - SAUCE: x86/quirks: Add parameter to clear MSIs early on boot
     - SAUCE: x86/quirks: Scan all busses for early PCI quirks
 .
   [ Ubuntu: 4.15.0-40.43 ]
 .
   * linux: 4.15.0-40.43 -proposed tracker (LP: #1802554)
   * crash in ENA driver on removing an interface (LP: #1802341)
     - SAUCE: net: ena: fix crash during ena_remove()
   * Ubuntu 18.04.1 - [s390x] Kernel panic while stressing network bonding
     (LP: #1797367)
     - s390/qeth: don't keep track of MAC address's cast type
     - s390/qeth: consolidate qeth MAC address helpers
     - s390/qeth: avoid using is_multicast_ether_addr_64bits on (u8 *)[6]
     - s390/qeth: remove outdated portname debug msg
     - s390/qeth: reduce hard-coded access to ccw channels
     - s390/qeth: sanitize strings in debug messages
   * [18.04 FEAT] zcrypt DD: introduce APQN tags to support deterministic driver
     binding (LP: #1799184)
     - s390/zcrypt: code beautify
     - s390/zcrypt: AP bus support for alternate driver(s)
     - s390/zcrypt: hex string mask improvements for apmask and aqmask.
     - s390/zcrypt: remove unused functions and declarations
     - s390/zcrypt: Show load of cards and queues in sysfs
   * [GLK/CLX] Enhanced IBRS (LP: #1786139)
     - x86/speculation: Remove SPECTRE_V2_IBRS in enum spectre_v2_mitigation
     - x86/speculation: Support Enhanced IBRS on future CPUs
   * Allow signed kernels to be kexec'ed under lockdown (LP: #1798441)
     - Fix kexec forbidding kernels signed with keys in the secondary keyring to
       boot
   * Overlayfs in user namespace leaks directory content of inaccessible
     directories (LP: #1793458) // CVE-2018-6559
     - SAUCE: overlayfs: ensure mounter privileges when reading directories
   * Update ENA driver to version 2.0.1K (LP: #1798182)
     - net: ena: remove ndo_poll_controller
     - net: ena: fix warning in rmmod caused by double iounmap
     - net: ena: fix rare bug when failed restart/resume is followed by driver
       removal
     - net: ena: fix NULL dereference due to untimely napi initialization
     - net: ena: fix auto casting to boolean
     - net: ena: minor performance improvement
     - net: ena: complete host info to match latest ENA spec
     - net: ena: introduce Low Latency

 linux-aws-edge (4.15.0-1027.28~16.04.1) xenial; urgency=medium
 .
   * Update ENA driver to version 2.0.1K (LP: #1798182)
     - net: ena: remove ndo_poll_controller
     - net: ena: fix warning in rmmod caused by double iounmap
     - net: ena: fix rare bug when failed restart/resume is followed by driver
       removal
     - net: ena: fix NULL dereference due to untimely napi initialization
     - net: ena: fix auto casting to boolean
     - net: ena: minor performance improvement
     - net: ena: complete host info to match latest ENA spec
     - net: ena: introduce Low Latency Queues data structures according to ENA spec
     - net: ena: add functions for handling Low Latency Queues in ena_com
     - net: ena: add functions for handling Low Latency Queues in ena_netdev
     - net: ena: use CSUM_CHECKED device indication to report skb's checksum status
     - net: ena: explicit casting and initialization, and clearer error handling
     - net: ena: limit refill Rx threshold to 256 to avoid latency issues
     - net: ena: change rx copybreak default to reduce kernel memory pressure
     - net: ena: remove redundant parameter in ena_com_admin_init()
     - net: ena: update driver version to 2.0.1
     - net: ena: fix indentations in ena_defs for better readability
     - net: ena: Fix Kconfig dependency on X86
     - net: ena: enable Low Latency Queues
     - net: ena: fix compilation error in xtensa architecture