This bug was fixed in the package linux-gcp-5.15 -
5.15.0-1045.53~20.04.2
---------------
linux-gcp-5.15 (5.15.0-1045.53~20.04.2) focal; urgency=medium
* focal/linux-gcp-5.15: 5.15.0-1045.53~20.04.2 -proposed tracker
(LP: #2038176)
* CVE-2023-42755
- [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
[ Ubuntu: 5.15.0-1045.53 ]
* jammy/linux-gcp: 5.15.0-1045.53 -proposed tracker (LP: #2038177)
* CVE-2023-42755
- [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
* jammy/linux: 5.15.0-87.97 -proposed tracker (LP: #2038209)
* CVE-2023-4623
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
* CVE-2023-42755
- net/sched: Retire rsvp classifier
- [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
* CVE-2023-34319
- xen/netback: Fix buffer overrun triggered by unusual packet
* CVE-2023-4921
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
* CVE-2023-42752
- igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
* CVE-2023-4622
- af_unix: Fix null-ptr-deref in unix_stream_sendpage().
* CVE-2023-4244
- netfilter: nft_set_rbtree: fix overlap expiration walk
- netfilter: nf_tables: don't skip expired elements during walk
- netfilter: nf_tables: adapt set backend to use GC transaction API
- netfilter: nft_set_hash: mark set element as dead when deleting from
packet
path
- netfilter: nf_tables: GC transaction API to avoid race with control plane
- netfilter: nf_tables: remove busy mark and gc batch API
- netfilter: nf_tables: don't fail inserts if duplicate has expired
- netfilter: nf_tables: fix kdoc warnings after gc rework
- netfilter: nf_tables: fix GC transaction races with netns and netlink
event
exit path
- netfilter: nf_tables: GC transaction race with netns dismantle
- netfilter: nf_tables: GC transaction race with abort path
- netfilter: nf_tables: use correct lock to protect gc_list
- netfilter: nf_tables: defer gc run if previous batch is still pending
- netfilter: nft_dynset: disallow object maps
- netfilter: nft_set_rbtree: skip sync GC for new elements in this
transaction
* CVE-2023-42756
- netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
* CVE-2023-42753
- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
ip_set_hash_netportnet.c
* CVE-2023-5197
- netfilter: nf_tables: skip bound chain in netns release path
- netfilter: nf_tables: disallow rule removal from chain binding
* CVE-2023-4881
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
-- Agathe Porte <agathe.po...@canonical.com> Mon, 16 Oct 2023 12:13:29
+0200
** Changed in: linux-gcp-5.15 (Ubuntu Focal)
Status: New => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-34319
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-4244
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-42752
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-42753
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-42755
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-42756
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-4622
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-4623
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-4881
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-4921
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-5197
--
You received this bug notification because you are a member of hardware-
certification-users, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/2038176
Title:
focal/linux-gcp-5.15: 5.15.0-1045.53~20.04.2 -proposed tracker
Status in canonical-signing-jobs task00 series:
Fix Released
Status in Kernel SRU Workflow:
In Progress
Status in Kernel SRU Workflow automated-testing series:
Invalid
Status in Kernel SRU Workflow boot-testing series:
Fix Released
Status in Kernel SRU Workflow certification-testing series:
Invalid
Status in Kernel SRU Workflow new-review series:
Fix Released
Status in Kernel SRU Workflow prepare-package series:
Fix Released
Status in Kernel SRU Workflow prepare-package-generate series:
Fix Released
Status in Kernel SRU Workflow prepare-package-lrg series:
Fix Released
Status in Kernel SRU Workflow prepare-package-lrm series:
Fix Released
Status in Kernel SRU Workflow prepare-package-lrs series:
Fix Released
Status in Kernel SRU Workflow prepare-package-meta series:
Fix Released
Status in Kernel SRU Workflow prepare-package-signed series:
Fix Released
Status in Kernel SRU Workflow promote-signing-to-proposed series:
Invalid
Status in Kernel SRU Workflow promote-to-proposed series:
Fix Released
Status in Kernel SRU Workflow promote-to-security series:
New
Status in Kernel SRU Workflow promote-to-updates series:
In Progress
Status in Kernel SRU Workflow regression-testing series:
Fix Released
Status in Kernel SRU Workflow security-signoff series:
Fix Released
Status in Kernel SRU Workflow sru-review series:
Fix Released
Status in Kernel SRU Workflow verification-testing series:
Fix Released
Status in linux-gcp-5.15 source package in Focal:
Fix Released
Bug description:
This bug will contain status and test results related to a kernel
source (or snap) as stated in the title.
For an explanation of the tasks and the associated workflow see:
https://wiki.ubuntu.com/Kernel/kernel-sru-workflow
-- swm properties --
built:
from: 5ab2a5d86e4120f2
route-entry: 2
delta:
promote-to-proposed: [lrm, lrs, main, meta, signed, lrg, generate]
promote-to-updates: [lrm, lrs, main, meta, signed]
flag:
boot-testing-requested: true
bugs-spammed: true
proposed-announcement-sent: true
proposed-testing-requested: true
issue: KSRU-10068
kernel-stable-master-bug: 2038177
packages:
generate: linux-generate-gcp-5.15
lrg: linux-restricted-generate-gcp-5.15
lrm: linux-restricted-modules-gcp-5.15
lrs: linux-restricted-signatures-gcp-5.15
main: linux-gcp-5.15
meta: linux-meta-gcp-5.15
signed: linux-signed-gcp-5.15
phase: Promote to Updates
phase-changed: Monday, 23. October 2023 12:45 UTC
reason:
promote-to-updates: Ongoing -- packages not yet published
synthetic:
:promote-to-as-proposed: Invalid
variant: debs
versions:
lrm: 5.15.0-1045.53~20.04.2
main: 5.15.0-1045.53~20.04.2
meta: 5.15.0.1045.53~20.04.1
signed: 5.15.0-1045.53~20.04.2
~~:
announce:
swm-transition-crankable: 2023-10-08 21:40:45.164893
clamps:
new-review: 5ab2a5d86e4120f2
promote-to-proposed: 5ab2a5d86e4120f2
self: 5.15.0-1045.53~20.04.2
sru-review: 5ab2a5d86e4120f2
To manage notifications about this bug go to:
https://bugs.launchpad.net/canonical-signing-jobs/task00/+bug/2038176/+subscriptions
--
Mailing list: https://launchpad.net/~canonical-hw-cert
Post to : canonical-hw-cert@lists.launchpad.net
Unsubscribe : https://launchpad.net/~canonical-hw-cert
More help : https://help.launchpad.net/ListHelp
