focal/linux-azure: 5.4.0-1112.118 -proposed tracker

[Thadeu Lima de Souza Cascardo]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
built:
  from: ffbba7b6449826b1
  route-entry: 2
delta:
  promote-to-proposed: [lrm, lrs, main, meta, signed, lrg, generate]
  promote-to-security: []
  promote-to-updates: [lrm, lrs, main, meta, signed]
flag:
  boot-testing-requested: true
  proposed-announcement-sent: true
  proposed-testing-requested: true
issue: KSRU-8289
kernel-stable-master-bug: 2026401
packages:
  generate: linux-generate-azure
  lrg: linux-restricted-generate-azure
  lrm: linux-restricted-modules-azure
  lrs: linux-restricted-signatures-azure
  main: linux-azure
  meta: linux-meta-azure
  signed: linux-signed-azure
phase: Complete
phase-changed: Monday, 24. July 2023 21:07 UTC
reason: {}
synthetic:
  :promote-to-as-proposed: Invalid
trackers:
  bionic/linux-azure-5.4: bug 2026366
  focal/linux-azure-fips: bug 2026365
variant: debs
versions:
  lrm: 5.4.0-1112.118
  main: 5.4.0-1112.118
  meta: 5.4.0.1112.105
  signed: 5.4.0-1112.118
~~:
  clamps:
    new-review: ffbba7b6449826b1
    promote-to-proposed: ffbba7b6449826b1
    self: 5.4.0-1112.118
    sru-review: ffbba7b6449826b1

[Tim Gardner (timg-tpi)]

VT: All cloud specific bugs verified. Tagging as passed.

[Tim Gardner (timg-tpi)]

Stakeholder signoff: Security release, tagging as Fix Released.

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-azure - 5.4.0-1112.118

---------------
linux-azure (5.4.0-1112.118) focal; urgency=medium

  * focal/linux-azure: 5.4.0-1112.118 -proposed tracker (LP: #2026367)

  [ Ubuntu: 5.4.0-155.172 ]

  * focal/linux: 5.4.0-155.172 -proposed tracker (LP: #2026401)
  * CVE-2023-3390
    - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
  * CVE-2023-35001
    - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  * CVE-2023-32629
    - ovl: adhere to the vfs_ vs. ovl_do_ conventions for xattrs
  * CVE-2023-3090
    - ipvlan:Fix out-of-bounds caused by unclear skb->cb
  * Packaging resync (LP: #1786013)
    - [Packaging] resync update-dkms-versions helper

linux-azure (5.4.0-1111.117) focal; urgency=medium

  * focal/linux-azure: 5.4.0-1111.117 -proposed tracker (LP: #2024073)

  * Packaging resync (LP: #1786013)
    - [Packaging] resync update-dkms-versions helper

  [ Ubuntu: 5.4.0-153.170 ]

  * focal/linux: 5.4.0-153.170 -proposed tracker (LP: #2024108)
  * cls_flower: off-by-one in fl_set_geneve_opt (LP: #2023577)
    - net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
  * Some INVLPG implementations can leave Global translations unflushed when
    PCIDs are enabled (LP: #2023220)
    - x86/mm: Avoid incomplete Global INVLPG flushes

  [ Ubuntu: 5.4.0-152.169 ]

  * focal/linux: 5.4.0-152.169 -proposed tracker (LP: #2023070)
  * Focal update: v5.4.236 upstream stable release (LP: #2020390)
    - wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext"
  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log
    - [Packaging] resync getabis

linux-azure (5.4.0-1110.116) focal; urgency=medium

  * focal/linux-azure: 5.4.0-1110.116 -proposed tracker (LP: #2019349)

  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log
    - [Packaging] resync getabis
    - debian/dkms-versions -- update from kernel-versions (main/2023.04.17)

  * Azure: keys: Do not cache key in task struct if key is requested from kernel
    thread (LP: #2017801)
    - keys: Do not cache key in task struct if key is requested from kernel thread

  [ Ubuntu: 5.4.0-151.168 ]

  * focal/linux: 5.4.0-151.168 -proposed tracker (LP: #2019375)
  * Packaging resync (LP: #1786013)
    - [Packaging] update helper scripts
    - debian/dkms-versions -- update from kernel-versions (main/2023.05.15)
  * CVE-2023-32233
    - netfilter: nf_tables: deactivate anonymous set from preparation phase
  * CVE-2023-2612
    - SAUCE: shiftfs: prevent lock unbalance in shiftfs_create_object()
  * CVE-2023-31436
    - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg
  * CVE-2023-1380
    - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  * Focal update: Focal update: v5.4.235 upstream stable release (LP: #2017706)
    - HID: asus: Remove check for same LED brightness on set
    - HID: asus: use spinlock to protect concurrent accesses
    - HID: asus: use spinlock to safely schedule workers
    - ARM: OMAP2+: Fix memory leak in realtime_counter_init()
    - arm64: dts: qcom: qcs404: use symbol names for PCIe resets
    - ARM...

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

All tasks have been completed and the bug is being closed