Format: 1.8 Date: Thu, 05 Oct 2023 21:59:43 -0500 Source: linux-gcp Binary: linux-buildinfo-6.2.0-1017-gcp linux-gcp-headers-6.2.0-1017 linux-gcp-tools-6.2.0-1017 linux-headers-6.2.0-1017-gcp linux-image-unsigned-6.2.0-1017-gcp linux-modules-6.2.0-1017-gcp linux-modules-extra-6.2.0-1017-gcp linux-tools-6.2.0-1017-gcp Built-For-Profiles: noudeb Architecture: arm64 arm64_translations Version: 6.2.0-1017.19 Distribution: lunar Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: John Cabaj Description: linux-buildinfo-6.2.0-1017-gcp - Linux kernel buildinfo for version 6.2.0 on ARMv8 SMP linux-gcp-headers-6.2.0-1017 - Header files related to Linux kernel version 6.2.0 linux-gcp-tools-6.2.0-1017 - Linux kernel version specific tools for version 6.2.0-1017 linux-headers-6.2.0-1017-gcp - Linux kernel headers for version 6.2.0 on ARMv8 SMP linux-image-unsigned-6.2.0-1017-gcp - Linux kernel image for version 6.2.0 on ARMv8 SMP linux-modules-6.2.0-1017-gcp - Linux kernel extra modules for version 6.2.0 on ARMv8 SMP linux-modules-extra-6.2.0-1017-gcp - Linux kernel extra modules for version 6.2.0 on ARMv8 SMP linux-tools-6.2.0-1017-gcp - Linux kernel version specific tools for version 6.2.0-1017 Launchpad-Bugs-Fixed: 1786013 2037316 2038064 2038229 Changes: linux-gcp (6.2.0-1017.19) lunar; urgency=medium . * lunar/linux-gcp: 6.2.0-1017.19 -proposed tracker (LP: #2038064) . * CVE-2023-42755 - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6 . * SEV_SNP failure to init (LP: #2037316) - x86/sev-es: Allow copy_from_kernel_nofault in earlier boot - x86/sev-es: Only set x86_virt_bits to correct value . [ Ubuntu: 6.2.0-35.35 ] . * lunar/linux: 6.2.0-35.35 -proposed tracker (LP: #2038229) * Packaging resync (LP: #1786013) - [Packaging] update helper scripts * CVE-2023-4244 - netfilter: nf_tables: don't skip expired elements during walk - netfilter: nf_tables: integrate pipapo into commit protocol - netfilter: nft_set_rbtree: fix overlap expiration walk - netfilter: nf_tables: adapt set backend to use GC transaction API - netfilter: nft_set_hash: mark set element as dead when deleting from packet path - netfilter: nf_tables: drop map element references from preparation phase - netfilter: nf_tables: GC transaction API to avoid race with control plane - netfilter: nf_tables: remove busy mark and gc batch API - netfilter: nf_tables: don't fail inserts if duplicate has expired - netfilter: nf_tables: fix kdoc warnings after gc rework - netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path - netfilter: nf_tables: GC transaction race with netns dismantle - netfilter: nf_tables: GC transaction race with abort path - netfilter: nf_tables: use correct lock to protect gc_list - netfilter: nf_tables: defer gc run if previous batch is still pending - netfilter: nft_dynset: disallow object maps - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction * CVE-2023-5197 - netfilter: nf_tables: skip bound chain in netns release path - netfilter: nf_tables: disallow rule removal from chain binding * CVE-2023-4921 - net: sched: sch_qfq: Fix UAF in qfq_dequeue() * CVE-2023-4881 - netfilter: nftables: exthdr: fix 4-byte stack OOB write * CVE-2023-4623 - net/sched: sch_hfsc: Ensure inner classes have fsc curve * CVE-2023-4622 - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). * CVE-2023-42756 - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP * CVE-2023-42755 - net/sched: Retire rsvp classifier - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6 * CVE-2023-42753 - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c * CVE-2023-42752 - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU - net: add SKB_HEAD_ALIGN() helper - net: remove osize variable in __alloc_skb() - net: factorize code in kmalloc_reserve() - net: deal with integer overflows in kmalloc_reserve() * CVE-2023-34319 - xen/netback: Fix buffer overrun triggered by unusual packet Checksums-Sha1: c9a5406f1f08e637e7f54f9526a324d35404ad19 875648 linux-buildinfo-6.2.0-1017-gcp_6.2.0-1017.19_arm64.deb 95fa32ff4c42d5a3d77a1811a8857492a218050f 13331250 linux-gcp-headers-6.2.0-1017_6.2.0-1017.19_arm64.deb e3461af4ff08b9847d4826c8ca538fd4e3897759 7041108 linux-gcp-tools-6.2.0-1017_6.2.0-1017.19_arm64.deb 7c2dc0203da5a446f6fc7e4a439eef230a632ece 11501 linux-gcp_6.2.0-1017.19_arm64.buildinfo 4c78ca8372633b38de5993a75f65c3b47eebd7a8 192 linux-gcp_6.2.0-1017.19_arm64.tar.gz cb2ed76561c89267d47b6b1af020d93563724f4b 45455 linux-gcp_6.2.0-1017.19_arm64_translations.tar.gz 827be793b54a11a1b83d74587ab5cd7d411fdfcd 3156512 linux-headers-6.2.0-1017-gcp_6.2.0-1017.19_arm64.deb bbe597d0a9c15a185bb6d18f4039c005cd3744b0 1172423852 linux-image-unsigned-6.2.0-1017-gcp-dbgsym_6.2.0-1017.19_arm64.ddeb 1a2c06866f804a38624c3724c6f8f07e0ad323c7 17356992 linux-image-unsigned-6.2.0-1017-gcp_6.2.0-1017.19_arm64.deb 026634a83ed3e6f2369c965dbf8c5f325138c010 20879870 linux-modules-6.2.0-1017-gcp_6.2.0-1017.19_arm64.deb dad34f8d9219e4b9e8151dbcbb10fc39ffb7357a 73481856 linux-modules-extra-6.2.0-1017-gcp_6.2.0-1017.19_arm64.deb c4317af865abf0eaae4667d49d320688844ec42f 1704 linux-tools-6.2.0-1017-gcp_6.2.0-1017.19_arm64.deb Checksums-Sha256: 744bc7226002edbdb49854f1d0c7b73d570b6d2574645c95c14b00bc15d2cc69 875648 linux-buildinfo-6.2.0-1017-gcp_6.2.0-1017.19_arm64.deb 244e2c01633a9d26a3972e9c1b298a8525180b46f4de028f534a6250f92587f4 13331250 linux-gcp-headers-6.2.0-1017_6.2.0-1017.19_arm64.deb 4df2c6f09fb732869136fa66b1cda789695ff021df034bf5e59e9ff6df42b221 7041108 linux-gcp-tools-6.2.0-1017_6.2.0-1017.19_arm64.deb 3816f807e0c9736bcdff6654c0815839bf5dc13701652e79346d21bac1e12ce2 11501 linux-gcp_6.2.0-1017.19_arm64.buildinfo f04f8abcff59c3be13013b7ebd300158e9d63925e315ad9d0e1ce84ec3945176 192 linux-gcp_6.2.0-1017.19_arm64.tar.gz 2affe5faf00ed27f2f0290339aa81e9d21e58fce69605b55e6cad878457fd6ad 45455 linux-gcp_6.2.0-1017.19_arm64_translations.tar.gz 50e7bedb9fcbc0517f72b6906403056e0da503352d8cfd3aa0e21f57a4138d3f 3156512 linux-headers-6.2.0-1017-gcp_6.2.0-1017.19_arm64.deb f212e094cb285f4c6021f50e53bc0eee2d6ee6431c66402648c06a1fd64c15c0 1172423852 linux-image-unsigned-6.2.0-1017-gcp-dbgsym_6.2.0-1017.19_arm64.ddeb 95986d6ba3bae4cb22b7a997ae39928c5f717923e8b356e9b98a350d9cb6e7aa 17356992 linux-image-unsigned-6.2.0-1017-gcp_6.2.0-1017.19_arm64.deb bac44e486a8c1db97bbdd24562d1c4989360ec6fb343b474b188b2a55b0656a3 20879870 linux-modules-6.2.0-1017-gcp_6.2.0-1017.19_arm64.deb 1790e2c3a54a2b2a3fd7f51646a5143ccf7e4016d08026691fd846dd51e9f250 73481856 linux-modules-extra-6.2.0-1017-gcp_6.2.0-1017.19_arm64.deb 2ef8ce1c88fe17a7d38153d678fc56406df5b01ee3efa9f2457f79b8c9c93ac2 1704 linux-tools-6.2.0-1017-gcp_6.2.0-1017.19_arm64.deb Files: 63d54d9b3b1a2c7313dee5789feedd34 875648 kernel optional linux-buildinfo-6.2.0-1017-gcp_6.2.0-1017.19_arm64.deb e3c17b4b464a75561f4e8ee55a384d7e 13331250 devel optional linux-gcp-headers-6.2.0-1017_6.2.0-1017.19_arm64.deb c960c90714c4526bd77277cd96f6f80b 7041108 devel optional linux-gcp-tools-6.2.0-1017_6.2.0-1017.19_arm64.deb f4739925bf560e8130df5ab70a7637c1 11501 devel optional linux-gcp_6.2.0-1017.19_arm64.buildinfo 2ce4b97c81e0e30cc1fb0f64fb4b4f68 192 raw-signing - linux-gcp_6.2.0-1017.19_arm64.tar.gz 1071a7217692282f6eef0749f46fa576 45455 raw-translations - linux-gcp_6.2.0-1017.19_arm64_translations.tar.gz fc1933b6bc2d95e513599b18a552822c 3156512 devel optional linux-headers-6.2.0-1017-gcp_6.2.0-1017.19_arm64.deb 900b947f40c1aaa93e29ea5b6a56739a 1172423852 devel optional linux-image-unsigned-6.2.0-1017-gcp-dbgsym_6.2.0-1017.19_arm64.ddeb 9f97e9525d893de54b4483bbcd9815ec 17356992 kernel optional linux-image-unsigned-6.2.0-1017-gcp_6.2.0-1017.19_arm64.deb eae9a5bf979a73cbec595acbb6aea789 20879870 kernel optional linux-modules-6.2.0-1017-gcp_6.2.0-1017.19_arm64.deb 5dec4b12b0d05366a9bbde2fe7e94849 73481856 kernel optional linux-modules-extra-6.2.0-1017-gcp_6.2.0-1017.19_arm64.deb 1ce97d0f7a8d7615d0f6f863448464d9 1704 devel optional linux-tools-6.2.0-1017-gcp_6.2.0-1017.19_arm64.deb Ubuntu-Compatible-Signing: ubuntu/4 pro/3