lunar/linux-gcp: 6.2.0-1018.20 -proposed tracker
Bug Description
This bug will contain status and test results related to a kernel source (or snap) as stated in the title.
For an explanation of the tasks and the associated workflow see:
https:/
-- swm properties --
built:
from: 94a7d8a423baa6f5
route-entry: 1
delta:
promote-
flag:
boot-
bugs-spammed: true
proposed-
proposed-
stream-
issue: KSRU-9993
kernel-
packages:
generate: linux-generate-gcp
lrg: linux-restricte
lrm: linux-restricte
lrs: linux-restricte
main: linux-gcp
meta: linux-meta-gcp
signed: linux-signed-gcp
phase: Testing
phase-changed: Thursday, 12. October 2023 12:32 UTC
reason:
automated-
prerequisite-
nvidia-
nvidia-
missing
regression-
security-signoff: Stalled -s waiting for signoff
synthetic:
:promote-
trackers:
jammy/
variant: debs
versions:
lrm: 6.2.0-1018.20
main: 6.2.0-1018.20
meta: 6.2.0.1018.18
signed: 6.2.0-1018.20
~~:
clamps:
new-review: 94a7d8a423baa6f5
promote-
self: 6.2.0-1018.20
sru-review: 94a7d8a423baa6f5
| tags: | added: kernel-release-tracking-bug-live |
| description: | updated |
| tags: | added: kernel-sru-cycle-2023.10.02-1 |
| description: | updated |
| tags: | added: kernel-sru-derivative-of-2038076 |
| Changed in kernel-sru-workflow: | |
| status: | New → Confirmed |
| importance: | Undecided → Medium |
| Changed in linux-gcp (Ubuntu Lunar): | |
| importance: | Undecided → Medium |
| Changed in kernel-sru-workflow: | |
| status: | Confirmed → Triaged |
| description: | updated |
| Changed in kernel-sru-workflow: | |
| status: | Triaged → In Progress |
| tags: | added: kernel-jira-issue-ksru-9993 |
| description: | updated |
| summary: |
- lunar/linux-gcp: <version to be filled> -proposed tracker + lunar/linux-gcp: 6.2.0-1017.19 -proposed tracker |
| description: | updated |
| description: | updated |
| summary: |
- lunar/linux-gcp: 6.2.0-1017.19 -proposed tracker + lunar/linux-gcp: <version to be filled> -proposed tracker |
| description: | updated |
| summary: |
- lunar/linux-gcp: <version to be filled> -proposed tracker + lunar/linux-gcp: 6.2.0-1018.20 -proposed tracker |
| description: | updated |
| tags: | added: kernel-jira-in-review |
| description: | updated |
| tags: | removed: kernel-jira-in-review |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| description: | updated |
| Launchpad Janitor (janitor) wrote | #1 |
| Changed in linux-gcp (Ubuntu Lunar): | |
| status: | New → Fix Released |
| description: | updated |
This bug was fixed in the package linux-gcp - 6.2.0-1017.19
---------------
linux-gcp (6.2.0-1017.19) lunar; urgency=medium
* lunar/linux-gcp: 6.2.0-1017.19 -proposed tracker (LP: #2038064)
* CVE-2023-42755
- [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
* SEV_SNP failure to init (LP: #2037316)
- x86/sev-es: Allow copy_from_
- x86/sev-es: Only set x86_virt_bits to correct value
[ Ubuntu: 6.2.0-35.35 ]
* lunar/linux: 6.2.0-35.35 -proposed tracker (LP: #2038229)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* CVE-2023-4244
- netfilter: nf_tables: don't skip expired elements during walk
- netfilter: nf_tables: integrate pipapo into commit protocol
- netfilter: nft_set_rbtree: fix overlap expiration walk
- netfilter: nf_tables: adapt set backend to use GC transaction API
- netfilter: nft_set_hash: mark set element as dead when deleting from packet
path
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nf_tables: GC transaction API to avoid race with control plane
- netfilter: nf_tables: remove busy mark and gc batch API
- netfilter: nf_tables: don't fail inserts if duplicate has expired
- netfilter: nf_tables: fix kdoc warnings after gc rework
- netfilter: nf_tables: fix GC transaction races with netns and netlink event
exit path
- netfilter: nf_tables: GC transaction race with netns dismantle
- netfilter: nf_tables: GC transaction race with abort path
- netfilter: nf_tables: use correct lock to protect gc_list
- netfilter: nf_tables: defer gc run if previous batch is still pending
- netfilter: nft_dynset: disallow object maps
- netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
* CVE-2023-5197
- netfilter: nf_tables: skip bound chain in netns release path
- netfilter: nf_tables: disallow rule removal from chain binding
* CVE-2023-4921
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
* CVE-2023-4881
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
* CVE-2023-4623
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
* CVE-2023-4622
- af_unix: Fix null-ptr-deref in unix_stream_
* CVE-2023-42756
- netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
* CVE-2023-42755
- net/sched: Retire rsvp classifier
- [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
* CVE-2023-42753
- netfilter: ipset: add the missing IP_SET_
ip_
* CVE-2023-42752
- igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
- net: add SKB_HEAD_ALIGN() helper
- net: remove osize variable in __alloc_skb()
- net: factorize code in kmalloc_reserve()
- net: deal with integer overflows in kmalloc_reserve()
* CVE-2023-34319
- xen/netback: Fix buffer overrun triggered by unusual packet
-- John Cabaj <email address hidden> Thu, 05 Oct 2023 21:59:43 -0500