v2303.2.0

Security fixes:

• Fix Intel CPU disclosure of memory to user process. Complete mitigation requires manually disabling TSX or SMT on affected processors. (CVE-2019-11135, TAA)
• Fix Intel CPU denial of service by a malicious guest VM (CVE-2018-12207)

Bug fixes:

• Fix CFS scheduler throttling highly-threaded I/O-bound applications (#2623)

Updates:

• intel-microcode 20191115
• Linux 4.19.84

v2247.7.0

Security fixes:

• Fix Intel CPU disclosure of memory to user process. Complete mitigation requires manually disabling TSX or SMT on affected processors. (CVE-2019-11135, TAA)
• Fix Intel CPU denial of service by a malicious guest VM (CVE-2018-12207)

Bug fixes:

• Fix CFS scheduler throttling highly-threaded I/O-bound applications (#2623)

Updates:

• intel-microcode 20191115
• Linux 4.19.84

v2317.0.1

Bug fixes:

• Fix CFS scheduler throttling highly-threaded I/O-bound applications (#2623)
• Fix time zone for Brazil (#2627)

Updates:

• Linux 4.19.81
• timezone-data 2019c

v2303.1.1

Bug fixes:

• Fix time zone for Brazil (#2627)

Updates:

• Linux 4.19.81
• timezone-data 2019c

v2247.6.0

Bug fixes:

• Fix time zone for Brazil (#2627)

Updates:

• timezone-data 2019c

v2303.0.0

Changes:

• Pin rkt to Go 1.12

Updates:

• Go 1.12.10
• Go 1.13.2
• Linux 4.19.80

v2296.0.0

Security fixes:

• Fix sudo allowing a user to run commands as root if configured to permit the user to run commands as everyone other than root (CVE-2019-14287)

Bug fixes:

• Fix kernel crash with CephFS mounts, introduced in 2275.0.0 (#2616)

Updates:

• etcd 3.3.17
• etcdctl 3.3.17
• Go 1.12.9
• Linux 4.19.79
• sudo 1.8.28

v2275.2.0

Updates:

• Linux 4.19.79

v2247.5.0

No changes for stable promotion

v2275.1.0

Bug fixes:

• Fix kernel crash with CephFS mounts, introduced in 2275.0.0 (#2616)

Updates:

• Linux 4.19.78