Format: 1.8
Date: Tue, 03 Oct 2023 08:50:55 -0300
Source: linux
Binary: linux-libc-dev
Built-For-Profiles: noudeb
Architecture: riscv64 riscv64_translations
Version: 6.2.0-35.35
Distribution: lunar
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@riscv64-qemu-lgw01-078.buildd>
Changed-By: Thadeu Lima de Souza Cascardo <cascardo@canonical.com>
Description:
 linux-libc-dev - Linux Kernel Headers for development
Launchpad-Bugs-Fixed: 1786013 2038229
Changes:
 linux (6.2.0-35.35) lunar; urgency=medium
 .
   * lunar/linux: 6.2.0-35.35 -proposed tracker (LP: #2038229)
 .
   * Packaging resync (LP: #1786013)
     - [Packaging] update helper scripts
 .
   * CVE-2023-4244
     - netfilter: nf_tables: don't skip expired elements during walk
     - netfilter: nf_tables: integrate pipapo into commit protocol
     - netfilter: nft_set_rbtree: fix overlap expiration walk
     - netfilter: nf_tables: adapt set backend to use GC transaction API
     - netfilter: nft_set_hash: mark set element as dead when deleting from packet
       path
     - netfilter: nf_tables: drop map element references from preparation phase
     - netfilter: nf_tables: GC transaction API to avoid race with control plane
     - netfilter: nf_tables: remove busy mark and gc batch API
     - netfilter: nf_tables: don't fail inserts if duplicate has expired
     - netfilter: nf_tables: fix kdoc warnings after gc rework
     - netfilter: nf_tables: fix GC transaction races with netns and netlink event
       exit path
     - netfilter: nf_tables: GC transaction race with netns dismantle
     - netfilter: nf_tables: GC transaction race with abort path
     - netfilter: nf_tables: use correct lock to protect gc_list
     - netfilter: nf_tables: defer gc run if previous batch is still pending
     - netfilter: nft_dynset: disallow object maps
     - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
 .
   * CVE-2023-5197
     - netfilter: nf_tables: skip bound chain in netns release path
     - netfilter: nf_tables: disallow rule removal from chain binding
 .
   * CVE-2023-4921
     - net: sched: sch_qfq: Fix UAF in qfq_dequeue()
 .
   * CVE-2023-4881
     - netfilter: nftables: exthdr: fix 4-byte stack OOB write
 .
   * CVE-2023-4623
     - net/sched: sch_hfsc: Ensure inner classes have fsc curve
 .
   * CVE-2023-4622
     - af_unix: Fix null-ptr-deref in unix_stream_sendpage().
 .
   * CVE-2023-42756
     - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
 .
   * CVE-2023-42755
     - net/sched: Retire rsvp classifier
     - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
 .
   * CVE-2023-42753
     - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
       ip_set_hash_netportnet.c
 .
   * CVE-2023-42752
     - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
     - net: add SKB_HEAD_ALIGN() helper
     - net: remove osize variable in __alloc_skb()
     - net: factorize code in kmalloc_reserve()
     - net: deal with integer overflows in kmalloc_reserve()
 .
   * CVE-2023-34319
     - xen/netback: Fix buffer overrun triggered by unusual packet
Checksums-Sha1:
 a4368e51ba41f74550a20132a5d81ee902196501 1556466 linux-libc-dev_6.2.0-35.35_riscv64.deb
 a10f0de3392cff0ace7b548641c86c0767c61670 8781 linux_6.2.0-35.35_riscv64.buildinfo
 b373d9c44d8ef8e022658f441218bcf22bc81025 25711 linux_6.2.0-35.35_riscv64_translations.tar.gz
Checksums-Sha256:
 f525c13077c827699a143e5f8b00b2ec8d96f80ad4080de3ad2e7ee85ba5c4b5 1556466 linux-libc-dev_6.2.0-35.35_riscv64.deb
 b2c3f3a58b3084ccb45f66f3970d113a9c6ca350223d6418758bd6c6715817ad 8781 linux_6.2.0-35.35_riscv64.buildinfo
 5091211f9d15b1e7441e578abd7bf571c49fbb4934c4cc07b1a1cc9722cfc499 25711 linux_6.2.0-35.35_riscv64_translations.tar.gz
Files:
 fb1c23961a3cf817d98c7d6bd0a41eaa 1556466 devel optional linux-libc-dev_6.2.0-35.35_riscv64.deb
 25d26b25b0ca5a27e8ba20c2eb313370 8781 devel optional linux_6.2.0-35.35_riscv64.buildinfo
 67ceb851d5757ef782c57234e69cd83a 25711 raw-translations - linux_6.2.0-35.35_riscv64_translations.tar.gz
Ubuntu-Compatible-Signing: ubuntu/4 pro/3