jammy/linux-oem-5.17: 5.17.0-1035.36 -proposed tracker

[Thadeu Lima de Souza Cascardo]

This bug will contain status and test results related to a kernel source (or snap) as stated in the title.

For an explanation of the tasks and the associated workflow see:
  https://wiki.ubuntu.com/Kernel/kernel-sru-workflow

-- swm properties --
built:
  from: fb8a17d008720892
  route-entry: 2
delta:
  promote-to-proposed: [lrm, lrs, main, meta, signed, lrg, generate]
  promote-to-security: []
  promote-to-updates: [lrm, lrs, main, meta, signed]
flag:
  boot-testing-requested: true
  proposed-announcement-sent: true
  proposed-testing-requested: true
  stream-from-cycle: true
issue: KSRU-8436
packages:
  generate: linux-generate-oem-5.17
  lrg: linux-restricted-generate-oem-5.17
  lrm: linux-restricted-modules-oem-5.17
  lrs: linux-restricted-signatures-oem-5.17
  main: linux-oem-5.17
  meta: linux-meta-oem-5.17
  signed: linux-signed-oem-5.17
phase: Complete
phase-changed: Monday, 24. July 2023 21:09 UTC
reason: {}
synthetic:
  :promote-to-as-proposed: Invalid
variant: debs
versions:
  lrm: 5.17.0-1035.36
  main: 5.17.0-1035.36
  meta: 5.17.0.1035.33
  signed: 5.17.0-1035.36
~~:
  clamps:
    new-review: fb8a17d008720892
    promote-to-proposed: fb8a17d008720892
    self: 5.17.0-1035.36
    sru-review: fb8a17d008720892

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-oem-5.17 - 5.17.0-1035.36

---------------
linux-oem-5.17 (5.17.0-1035.36) jammy; urgency=medium

  * jammy/linux-oem-5.17: 5.17.0-1035.36 -proposed tracker (LP: #2026457)

  * CVE-2023-2860
    - ipv6: sr: fix out-of-bounds read when setting HMAC data.

  * CVE-2023-35001
    - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval

  * CVE-2023-31248
    - netfilter: nf_tables: do not ignore genmask when looking up chain by id

  * Packaging resync (LP: #1786013)
    - [Packaging] resync update-dkms-versions helper
    - [Packaging] update annotations scripts

  * CVE-2022-2663
    - netfilter: nf_conntrack_irc: Fix forged IP logic
    - netfilter: nf_conntrack_irc: Tighten matching on DCC message

  * CVE-2022-47929
    - net: sched: disallow noqueue for qdisc classes

  * CVE-2022-3635
    - atm: idt77252: fix use-after-free bugs caused by tst_timer

 -- Manuel Diewald <email address hidden> Wed, 12 Jul 2023 11:30:23 +0200

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

All tasks have been completed and the bug is being closed