UBUNTU: Ubuntu-4.4.0-168.197

Signed-off-by: Stefan Bader <stefan.bader@canonical.com>

debian.master/changelog

-linux (4.4.0-168.197) UNRELEASED; urgency=medium
-
-  CHANGELOG: Do not edit directly. Autogenerated at release.
-  CHANGELOG: Use the printchanges target to see the curent changes.
-  CHANGELOG: Use the insertchanges target to create the final log.
-
- -- Stefan Bader <stefan.bader@canonical.com>  Wed, 06 Nov 2019 09:39:11 +0100
+linux (4.4.0-168.197) xenial; urgency=medium
+
+  * CVE-2018-12207
+    - KVM: x86: MMU: Encapsulate the type of rmap-chain head in a new struct
+    - KVM: x86: MMU: Consolidate quickly_check_mmio_pf() and is_mmio_page_fault()
+    - KVM: x86: MMU: Move handle_mmio_page_fault() call to kvm_mmu_page_fault()
+    - KVM: MMU: rename has_wrprotected_page to mmu_gfn_lpage_is_disallowed
+    - KVM: MMU: introduce kvm_mmu_gfn_{allow,disallow}_lpage
+    - KVM: x86: MMU: Make mmu_set_spte() return emulate value
+    - KVM: x86: MMU: Move initialization of parent_ptes out from
+      kvm_mmu_alloc_page()
+    - KVM: x86: MMU: always set accessed bit in shadow PTEs
+    - KVM: x86: MMU: Move parent_pte handling from kvm_mmu_get_page() to
+      link_shadow_page()
+    - KVM: x86: MMU: Remove unused parameter parent_pte from kvm_mmu_get_page()
+    - KVM: x86: simplify ept_misconfig
+    - KVM: x86: extend usage of RET_MMIO_PF_* constants
+    - KVM: MMU: drop vcpu param in gpte_access
+    - kvm: Convert kvm_lock to a mutex
+    - kvm: x86: Do not release the page inside mmu_set_spte()
+    - KVM: x86: make FNAME(fetch) and __direct_map more similar
+    - KVM: x86: remove now unneeded hugepage gfn adjustment
+    - KVM: x86: change kvm_mmu_page_get_gfn BUG_ON to WARN_ON
+    - KVM: x86: add tracepoints around __direct_map and FNAME(fetch)
+    - SAUCE: KVM: vmx, svm: always run with EFER.NXE=1 when shadow paging is
+      active
+    - SAUCE: x86: Add ITLB_MULTIHIT bug infrastructure
+    - SAUCE: kvm: mmu: ITLB_MULTIHIT mitigation
+    - SAUCE: kvm: Add helper function for creating VM worker threads
+    - SAUCE: kvm: x86: mmu: Recovery of shattered NX large pages
+    - SAUCE: cpu/speculation: Uninline and export CPU mitigations helpers
+    - SAUCE: kvm: x86: mmu: Apply global mitigations knob to ITLB_MULTIHIT
+
+  * CVE-2019-11135
+    - KVM: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts
+    - KVM: x86: use Intel speculation bugs and features as derived in generic x86
+      code
+    - x86/msr: Add the IA32_TSX_CTRL MSR
+    - x86/cpu: Add a helper function x86_read_arch_cap_msr()
+    - x86/cpu: Add a "tsx=" cmdline option with TSX disabled by default
+    - x86/speculation/taa: Add mitigation for TSX Async Abort
+    - x86/speculation/taa: Add sysfs reporting for TSX Async Abort
+    - kvm/x86: Export MDS_NO=0 to guests when TSX is enabled
+    - x86/tsx: Add "auto" option to the tsx= cmdline parameter
+    - x86/speculation/taa: Add documentation for TSX Async Abort
+    - x86/tsx: Add config options to set tsx=on|off|auto
+    - SAUCE: x86/speculation/taa: Call tsx_init()
+    - SAUCE: x86/cpu: Include cpu header from bugs.c
+    - [Config] Disable TSX by default when possible
+
+  * CVE-2019-0154
+    - SAUCE: i915_bpo: drm/i915: Lower RM timeout to avoid DSI hard hangs
+    - SAUCE: i915_bpo: drm/i915/gen8+: Add RC6 CTX corruption WA
+    - SAUCE: drm/i915/gen8+: Add RC6 CTX corruption WA
+
+  * CVE-2019-0155
+    - SAUCE: i915_bpo: drm/i915/gtt: Add read only pages to gen8_pte_encode
+    - SAUCE: i915_bpo: drm/i915/gtt: Read-only pages for insert_entries on bdw+
+    - SAUCE: i915_bpo: drm/i915/gtt: Disable read-only support under GVT
+    - SAUCE: i915_bpo: drm/i915: Rename gen7 cmdparser tables
+    - SAUCE: i915_bpo: drm/i915: Disable Secure Batches for gen6+
+    - SAUCE: i915_bpo: drm/i915/cmdparser: Use binary search for faster register
+      lookup
+    - SAUCE: i915_bpo: drm/i915/cmdparser: Check reg_table_count before
+      derefencing.
+    - SAUCE: i915_bpo: drm/i915: Remove Master tables from cmdparser
+    - SAUCE: i915_bpo: drm/i915: Add support for mandatory cmdparsing
+    - SAUCE: i915_bpo: drm/i915: Support ro ppgtt mapped cmdparser shadow buffers
+    - SAUCE: i915_bpo: drm/i915: Allow parsing of unsized batches
+    - SAUCE: i915_bpo: drm/i915: Add gen9 BCS cmdparsing
+    - SAUCE: i915_bpo: drm/i915/cmdparser: Add support for backward jumps
+    - SAUCE: i915_bpo: drm/i915/cmdparser: Ignore Length operands during command
+      matching
+
+ -- Stefan Bader <stefan.bader@canonical.com>  Wed, 06 Nov 2019 09:50:06 +0100
 
 linux (4.4.0-167.196) xenial; urgency=medium