This bug was fixed in the package linux-oracle-6.2 - 6.2.0-1014.14~22.04.1
--------------- linux-oracle-6.2 (6.2.0-1014.14~22.04.1) jammy; urgency=medium
* jammy/linux-oracle-6.2: 6.2.0-1014.14~22.04.1 -proposed tracker (LP: #2038221)
* CVE-2023-42755 - [Config] oracle-6.2: Mark cls_rsv[p,p6] gone
[ Ubuntu: 6.2.0-1014.14 ]
* lunar/linux-oracle: 6.2.0-1014.14 -proposed tracker (LP: #2038222) * CVE-2023-42755 - [Config] oracle: Mark cls_rsv[p,p6] gone * lunar/linux: 6.2.0-35.35 -proposed tracker (LP: #2038229) * Packaging resync (LP: #1786013) - [Packaging] update helper scripts * CVE-2023-4244 - netfilter: nf_tables: don't skip expired elements during walk - netfilter: nf_tables: integrate pipapo into commit protocol - netfilter: nft_set_rbtree: fix overlap expiration walk - netfilter: nf_tables: adapt set backend to use GC transaction API - netfilter: nft_set_hash: mark set element as dead when deleting from packet path - netfilter: nf_tables: drop map element references from preparation phase - netfilter: nf_tables: GC transaction API to avoid race with control plane - netfilter: nf_tables: remove busy mark and gc batch API - netfilter: nf_tables: don't fail inserts if duplicate has expired - netfilter: nf_tables: fix kdoc warnings after gc rework - netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path - netfilter: nf_tables: GC transaction race with netns dismantle - netfilter: nf_tables: GC transaction race with abort path - netfilter: nf_tables: use correct lock to protect gc_list - netfilter: nf_tables: defer gc run if previous batch is still pending - netfilter: nft_dynset: disallow object maps - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction * CVE-2023-5197 - netfilter: nf_tables: skip bound chain in netns release path - netfilter: nf_tables: disallow rule removal from chain binding * CVE-2023-4921 - net: sched: sch_qfq: Fix UAF in qfq_dequeue() * CVE-2023-4881 - netfilter: nftables: exthdr: fix 4-byte stack OOB write * CVE-2023-4623 - net/sched: sch_hfsc: Ensure inner classes have fsc curve * CVE-2023-4622 - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). * CVE-2023-42756 - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP * CVE-2023-42755 - net/sched: Retire rsvp classifier - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6 * CVE-2023-42753 - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c * CVE-2023-42752 - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU - net: add SKB_HEAD_ALIGN() helper - net: remove osize variable in __alloc_skb() - net: factorize code in kmalloc_reserve() - net: deal with integer overflows in kmalloc_reserve() * CVE-2023-34319 - xen/netback: Fix buffer overrun triggered by unusual packet
-- Stefan Bader <email address hidden> Fri, 06 Oct 2023 11:52:44 +0200
This bug was fixed in the package linux-oracle-6.2 - 6.2.0-1014. 14~22.04. 1
--------------- 1014.14~ 22.04.1) jammy; urgency=medium
linux-oracle-6.2 (6.2.0-
* jammy/linux- oracle- 6.2: 6.2.0-1014. 14~22.04. 1 -proposed tracker
(LP: #2038221)
* CVE-2023-42755
- [Config] oracle-6.2: Mark cls_rsv[p,p6] gone
[ Ubuntu: 6.2.0-1014.14 ]
* lunar/linux-oracle: 6.2.0-1014.14 -proposed tracker (LP: #2038222) sendpage( ). HASH_WITH_ NET0 macro for set_hash_ netportnet. c
* CVE-2023-42755
- [Config] oracle: Mark cls_rsv[p,p6] gone
* lunar/linux: 6.2.0-35.35 -proposed tracker (LP: #2038229)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* CVE-2023-4244
- netfilter: nf_tables: don't skip expired elements during walk
- netfilter: nf_tables: integrate pipapo into commit protocol
- netfilter: nft_set_rbtree: fix overlap expiration walk
- netfilter: nf_tables: adapt set backend to use GC transaction API
- netfilter: nft_set_hash: mark set element as dead when deleting from packet
path
- netfilter: nf_tables: drop map element references from preparation phase
- netfilter: nf_tables: GC transaction API to avoid race with control plane
- netfilter: nf_tables: remove busy mark and gc batch API
- netfilter: nf_tables: don't fail inserts if duplicate has expired
- netfilter: nf_tables: fix kdoc warnings after gc rework
- netfilter: nf_tables: fix GC transaction races with netns and netlink event
exit path
- netfilter: nf_tables: GC transaction race with netns dismantle
- netfilter: nf_tables: GC transaction race with abort path
- netfilter: nf_tables: use correct lock to protect gc_list
- netfilter: nf_tables: defer gc run if previous batch is still pending
- netfilter: nft_dynset: disallow object maps
- netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
* CVE-2023-5197
- netfilter: nf_tables: skip bound chain in netns release path
- netfilter: nf_tables: disallow rule removal from chain binding
* CVE-2023-4921
- net: sched: sch_qfq: Fix UAF in qfq_dequeue()
* CVE-2023-4881
- netfilter: nftables: exthdr: fix 4-byte stack OOB write
* CVE-2023-4623
- net/sched: sch_hfsc: Ensure inner classes have fsc curve
* CVE-2023-4622
- af_unix: Fix null-ptr-deref in unix_stream_
* CVE-2023-42756
- netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
* CVE-2023-42755
- net/sched: Retire rsvp classifier
- [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
* CVE-2023-42753
- netfilter: ipset: add the missing IP_SET_
ip_
* CVE-2023-42752
- igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
- net: add SKB_HEAD_ALIGN() helper
- net: remove osize variable in __alloc_skb()
- net: factorize code in kmalloc_reserve()
- net: deal with integer overflows in kmalloc_reserve()
* CVE-2023-34319
- xen/netback: Fix buffer overrun triggered by unusual packet
-- Stefan Bader <email address hidden> Fri, 06 Oct 2023 11:52:44 +0200