focal/linux-bluefield: 5.4.0-1073.79 -proposed tracker

[Thadeu Lima de Souza Cascardo]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
built:
  from: 70644a14156a73de
  route-entry: 2
delta:
  promote-to-proposed: [main, meta, signed, generate]
  promote-to-security: []
  promote-to-updates: [main, meta, signed]
flag:
  bugs-spammed: true
  proposed-announcement-sent: true
issue: KSRU-10024
kernel-stable-master-bug: 2038163
packages:
  generate: linux-generate-bluefield
  main: linux-bluefield
  meta: linux-meta-bluefield
  signed: linux-signed-bluefield
phase: Complete
phase-changed: Thursday, 19. October 2023 13:48 UTC
reason: {}
synthetic:
  :promote-to-as-proposed: Invalid
variant: debs
versions:
  main: 5.4.0-1073.79
  meta: 5.4.0.1073.68
  signed: 5.4.0-1073.79
~~:
  announce:
    swm-transition-crankable: 2023-10-04 12:26:17.975054
  clamps:
    new-review: 70644a14156a73de
    promote-to-proposed: 70644a14156a73de
    self: 5.4.0-1073.79
    sru-review: 70644a14156a73de

[Bartlomiej Zolnierkiewicz (bzolnier)]

Stakeholder has agreed to release this kernel with the Canonical internal testing so I'm marking Stakeholder-signoff as 'Fix Released'

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-bluefield - 5.4.0-1073.79

---------------
linux-bluefield (5.4.0-1073.79) focal; urgency=medium

  * focal/linux-bluefield: 5.4.0-1073.79 -proposed tracker (LP: #2038130)

  * CVE-2023-42755
    - [Config] bluefield: remove NET_CLS_RSVP and NET_CLS_RSVP6

  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts

  * CVE-2023-4004
    - netfilter: nft_set_pipapo: fix improper element removal

  [ Ubuntu: 5.4.0-165.182 ]

  * focal/linux: 5.4.0-165.182 -proposed tracker (LP: #2038163)
  * CVE-2023-42756
    - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
  * CVE-2023-4623
    - net/sched: sch_hfsc: Ensure inner classes have fsc curve
  * CVE-2023-42755
    - net/sched: Retire rsvp classifier
    - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
  * CVE-2023-42753
    - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
      ip_set_hash_netportnet.c
  * CVE-2023-34319
    - xen/netback: Fix buffer overrun triggered by unusual packet
  * CVE-2023-4921
    - net: sched: sch_qfq: Fix UAF in qfq_dequeue()
  * CVE-2023-42752
    - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
  * CVE-2023-4881
    - netfilter: nftables: exthdr: fix 4-byte stack OOB write
  * CVE-2023-4622
    - af_unix: Fix null-ptr-deref in unix_stream_sendpage().

 -- Bartlomiej Zolnierkiewicz <email address hidden> Wed, 04 Oct 2023 16:48:36 +0200

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

All tasks have been completed and the bug is being closed