Import Debian changes 5.4.0-1112.121

linux-aws (5.4.0-1112.121) focal; urgency=medium * focal/linux-aws: 5.4.0-1112.121 -proposed tracker (LP: #2038126) * CVE-2023-42755 - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6 [ Ubuntu: 5.4.0-165.182 ] * focal/linux: 5.4.0-165.182 -proposed tracker (LP: #2038163) * CVE-2023-42756 - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP * CVE-2023-4623 - net/sched: sch_hfsc: Ensure inner classes have fsc curve * CVE-2023-42755 - net/sched: Retire rsvp classifier - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6 * CVE-2023-42753 - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c * CVE-2023-34319 - xen/netback: Fix buffer overrun triggered by unusual packet * CVE-2023-4921 - net: sched: sch_qfq: Fix UAF in qfq_dequeue() * CVE-2023-42752 - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU * CVE-2023-4881 - netfilter: nftables: exthdr: fix 4-byte stack OOB write * CVE-2023-4622 - af_unix: Fix null-ptr-deref in unix_stream_sendpage().
balabit-deps · Oct 21, 2023 · c98537f · c98537f
1 parent 1ad835b
commit c98537f
Show file tree

Hide file tree

Showing 72 changed files with 56,211 additions and 56,131 deletions.
diff --git a/debian.aws/abi/5.4.0-1110.119/abiname b/debian.aws/abi/5.4.0-1110.119/abiname
diff --git a/debian.aws/abi/5.4.0-1111.120/abiname b/debian.aws/abi/5.4.0-1111.120/abiname
@@ -0,0 +1 @@
+1111
diff --git a/debian.aws/abi/5.4.0-1110.119/amd64/aws → debian.aws/abi/5.4.0-1111.120/amd64/aws b/debian.aws/abi/5.4.0-1110.119/amd64/aws → debian.aws/abi/5.4.0-1111.120/amd64/aws
diff --git a/...aws/abi/5.4.0-1110.119/amd64/aws.compiler → ...aws/abi/5.4.0-1111.120/amd64/aws.compiler b/...aws/abi/5.4.0-1110.119/amd64/aws.compiler → ...aws/abi/5.4.0-1111.120/amd64/aws.compiler
diff --git a/....aws/abi/5.4.0-1110.119/amd64/aws.modules → ....aws/abi/5.4.0-1111.120/amd64/aws.modules b/....aws/abi/5.4.0-1110.119/amd64/aws.modules → ....aws/abi/5.4.0-1111.120/amd64/aws.modules
@@ -531,8 +531,6 @@ cls_flower
 cls_fw
 cls_matchall
 cls_route
-cls_rsvp
-cls_rsvp6
 cls_u32
 cm109
 cm32181

diff --git a/...ws/abi/5.4.0-1110.119/amd64/aws.retpoline → ...ws/abi/5.4.0-1111.120/amd64/aws.retpoline b/...ws/abi/5.4.0-1110.119/amd64/aws.retpoline → ...ws/abi/5.4.0-1111.120/amd64/aws.retpoline
diff --git a/debian.aws/abi/5.4.0-1110.119/arm64/aws → debian.aws/abi/5.4.0-1111.120/arm64/aws b/debian.aws/abi/5.4.0-1110.119/arm64/aws → debian.aws/abi/5.4.0-1111.120/arm64/aws
diff --git a/...aws/abi/5.4.0-1110.119/arm64/aws.compiler → ...aws/abi/5.4.0-1111.120/arm64/aws.compiler b/...aws/abi/5.4.0-1110.119/arm64/aws.compiler → ...aws/abi/5.4.0-1111.120/arm64/aws.compiler
diff --git a/....aws/abi/5.4.0-1110.119/arm64/aws.modules → ....aws/abi/5.4.0-1111.120/arm64/aws.modules b/....aws/abi/5.4.0-1110.119/arm64/aws.modules → ....aws/abi/5.4.0-1111.120/arm64/aws.modules
@@ -749,8 +749,6 @@ cls_flower
 cls_fw
 cls_matchall
 cls_route
-cls_rsvp
-cls_rsvp6
 cls_u32
 cm109
 cm32181

diff --git a/...ws/abi/5.4.0-1110.119/arm64/aws.retpoline → ...ws/abi/5.4.0-1111.120/arm64/aws.retpoline b/...ws/abi/5.4.0-1110.119/arm64/aws.retpoline → ...ws/abi/5.4.0-1111.120/arm64/aws.retpoline
diff --git a/debian.aws/abi/5.4.0-1110.119/fwinfo → debian.aws/abi/5.4.0-1111.120/fwinfo b/debian.aws/abi/5.4.0-1110.119/fwinfo → debian.aws/abi/5.4.0-1111.120/fwinfo
diff --git a/debian.aws/changelog b/debian.aws/changelog
@@ -1,3 +1,36 @@
+linux-aws (5.4.0-1112.121) focal; urgency=medium
+
+  * focal/linux-aws: 5.4.0-1112.121 -proposed tracker (LP: #2038126)
+
+  * CVE-2023-42755
+    - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
+
+  [ Ubuntu: 5.4.0-165.182 ]
+
+  * focal/linux: 5.4.0-165.182 -proposed tracker (LP: #2038163)
+  * CVE-2023-42756
+    - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
+  * CVE-2023-4623
+    - net/sched: sch_hfsc: Ensure inner classes have fsc curve
+  * CVE-2023-42755
+    - net/sched: Retire rsvp classifier
+    - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
+  * CVE-2023-42753
+    - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
+      ip_set_hash_netportnet.c
+  * CVE-2023-34319
+    - xen/netback: Fix buffer overrun triggered by unusual packet
+  * CVE-2023-4921
+    - net: sched: sch_qfq: Fix UAF in qfq_dequeue()
+  * CVE-2023-42752
+    - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
+  * CVE-2023-4881
+    - netfilter: nftables: exthdr: fix 4-byte stack OOB write
+  * CVE-2023-4622
+    - af_unix: Fix null-ptr-deref in unix_stream_sendpage().
+
+ -- Kuba Pawlak <kuba.pawlak@canonical.com>  Thu, 05 Oct 2023 13:18:46 +0200
+
 linux-aws (5.4.0-1111.120) focal; urgency=medium
 
   * focal/linux-aws: 5.4.0-1111.120 -proposed tracker (LP: #2033830)

diff --git a/debian.aws/config/config.common.ubuntu b/debian.aws/config/config.common.ubuntu
@@ -5427,8 +5427,6 @@ CONFIG_NET_CLS_FLOWER=m
 CONFIG_NET_CLS_FW=m
 CONFIG_NET_CLS_MATCHALL=m
 CONFIG_NET_CLS_ROUTE4=m
-CONFIG_NET_CLS_RSVP=m
-CONFIG_NET_CLS_RSVP6=m
 CONFIG_NET_CLS_U32=m
 CONFIG_NET_CORE=y
 CONFIG_NET_DEVLINK=y

diff --git a/debian.aws/reconstruct b/debian.aws/reconstruct
@@ -53,6 +53,9 @@ rm -f 'net/decnet/netfilter/Kconfig'
 rm -f 'net/decnet/netfilter/Makefile'
 rm -f 'net/decnet/netfilter/dn_rtmsg.c'
 rm -f 'net/decnet/sysctl_net_decnet.c'
+rm -f 'net/sched/cls_rsvp.c'
+rm -f 'net/sched/cls_rsvp.h'
+rm -f 'net/sched/cls_rsvp6.c'
 rm -f 'net/sched/cls_tcindex.c'
 rm -f 'tools/build/feature/test-libpython-version.c'
 rm -f 'tools/testing/selftests/net/fib_tests.sh'

diff --git a/debian.aws/tracking-bug b/debian.aws/tracking-bug
@@ -1 +1 @@
-2033830 2023.09.04-1
+2038126 s2023.09.04-1
diff --git a/debian.master/abi/5.4.0-162.179/abiname b/debian.master/abi/5.4.0-162.179/abiname
diff --git a/debian.master/abi/5.4.0-162.179/amd64/generic.compiler b/debian.master/abi/5.4.0-162.179/amd64/generic.compiler
diff --git a/debian.master/abi/5.4.0-162.179/amd64/lowlatency.compiler b/debian.master/abi/5.4.0-162.179/amd64/lowlatency.compiler
diff --git a/debian.master/abi/5.4.0-162.179/arm64/generic.compiler b/debian.master/abi/5.4.0-162.179/arm64/generic.compiler
diff --git a/debian.master/abi/5.4.0-162.179/armhf/generic-lpae.compiler b/debian.master/abi/5.4.0-162.179/armhf/generic-lpae.compiler
diff --git a/debian.master/abi/5.4.0-162.179/armhf/generic.compiler b/debian.master/abi/5.4.0-162.179/armhf/generic.compiler
diff --git a/debian.master/abi/5.4.0-162.179/ppc64el/generic.compiler b/debian.master/abi/5.4.0-162.179/ppc64el/generic.compiler
diff --git a/debian.master/abi/5.4.0-162.179/s390x/generic.compiler b/debian.master/abi/5.4.0-162.179/s390x/generic.compiler
diff --git a/debian.master/abi/5.4.0-164.181/abiname b/debian.master/abi/5.4.0-164.181/abiname
@@ -0,0 +1 @@
+164
diff --git a/...an.master/abi/5.4.0-162.179/amd64/generic → ...an.master/abi/5.4.0-164.181/amd64/generic b/...an.master/abi/5.4.0-162.179/amd64/generic → ...an.master/abi/5.4.0-164.181/amd64/generic
diff --git a/debian.master/abi/5.4.0-164.181/amd64/generic.compiler b/debian.master/abi/5.4.0-164.181/amd64/generic.compiler
@@ -0,0 +1 @@
+GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0
diff --git a/...r/abi/5.4.0-162.179/amd64/generic.modules → ...r/abi/5.4.0-164.181/amd64/generic.modules b/...r/abi/5.4.0-162.179/amd64/generic.modules → ...r/abi/5.4.0-164.181/amd64/generic.modules
@@ -751,8 +751,6 @@ cls_flower
 cls_fw
 cls_matchall
 cls_route
-cls_rsvp
-cls_rsvp6
 cls_u32
 cm109
 cm32181

diff --git a/...abi/5.4.0-162.179/amd64/generic.retpoline → ...abi/5.4.0-164.181/amd64/generic.retpoline b/...abi/5.4.0-162.179/amd64/generic.retpoline → ...abi/5.4.0-164.181/amd64/generic.retpoline
diff --git a/...master/abi/5.4.0-162.179/amd64/lowlatency → ...master/abi/5.4.0-164.181/amd64/lowlatency b/...master/abi/5.4.0-162.179/amd64/lowlatency → ...master/abi/5.4.0-164.181/amd64/lowlatency
diff --git a/debian.master/abi/5.4.0-164.181/amd64/lowlatency.compiler b/debian.master/abi/5.4.0-164.181/amd64/lowlatency.compiler
@@ -0,0 +1 @@
+GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0
diff --git a/...bi/5.4.0-162.179/amd64/lowlatency.modules → ...bi/5.4.0-164.181/amd64/lowlatency.modules b/...bi/5.4.0-162.179/amd64/lowlatency.modules → ...bi/5.4.0-164.181/amd64/lowlatency.modules
@@ -752,8 +752,6 @@ cls_flower
 cls_fw
 cls_matchall
 cls_route
-cls_rsvp
-cls_rsvp6
 cls_u32
 cm109
 cm32181

diff --git a/.../5.4.0-162.179/amd64/lowlatency.retpoline → .../5.4.0-164.181/amd64/lowlatency.retpoline b/.../5.4.0-162.179/amd64/lowlatency.retpoline → .../5.4.0-164.181/amd64/lowlatency.retpoline
diff --git a/...an.master/abi/5.4.0-162.179/arm64/generic → ...an.master/abi/5.4.0-164.181/arm64/generic b/...an.master/abi/5.4.0-162.179/arm64/generic → ...an.master/abi/5.4.0-164.181/arm64/generic
diff --git a/debian.master/abi/5.4.0-164.181/arm64/generic.compiler b/debian.master/abi/5.4.0-164.181/arm64/generic.compiler
@@ -0,0 +1 @@
+GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0
diff --git a/...r/abi/5.4.0-162.179/arm64/generic.modules → ...r/abi/5.4.0-164.181/arm64/generic.modules b/...r/abi/5.4.0-162.179/arm64/generic.modules → ...r/abi/5.4.0-164.181/arm64/generic.modules
@@ -795,8 +795,6 @@ cls_flower
 cls_fw
 cls_matchall
 cls_route
-cls_rsvp
-cls_rsvp6
 cls_u32
 cm109
 cm32181

diff --git a/...abi/5.4.0-162.179/arm64/generic.retpoline → ...abi/5.4.0-164.181/arm64/generic.retpoline b/...abi/5.4.0-162.179/arm64/generic.retpoline → ...abi/5.4.0-164.181/arm64/generic.retpoline
diff --git a/...an.master/abi/5.4.0-162.179/armhf/generic → ...an.master/abi/5.4.0-164.181/armhf/generic b/...an.master/abi/5.4.0-162.179/armhf/generic → ...an.master/abi/5.4.0-164.181/armhf/generic
diff --git a/...ster/abi/5.4.0-162.179/armhf/generic-lpae → ...ster/abi/5.4.0-164.181/armhf/generic-lpae b/...ster/abi/5.4.0-162.179/armhf/generic-lpae → ...ster/abi/5.4.0-164.181/armhf/generic-lpae
diff --git a/debian.master/abi/5.4.0-164.181/armhf/generic-lpae.compiler b/debian.master/abi/5.4.0-164.181/armhf/generic-lpae.compiler
@@ -0,0 +1 @@
+GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0
diff --git a/.../5.4.0-162.179/armhf/generic-lpae.modules → .../5.4.0-164.181/armhf/generic-lpae.modules b/.../5.4.0-162.179/armhf/generic-lpae.modules → .../5.4.0-164.181/armhf/generic-lpae.modules
@@ -761,8 +761,6 @@ cls_flower
 cls_fw
 cls_matchall
 cls_route
-cls_rsvp
-cls_rsvp6
 cls_u32
 cm109
 cm32181

diff --git a/....4.0-162.179/armhf/generic-lpae.retpoline → ....4.0-164.181/armhf/generic-lpae.retpoline b/....4.0-162.179/armhf/generic-lpae.retpoline → ....4.0-164.181/armhf/generic-lpae.retpoline
diff --git a/debian.master/abi/5.4.0-164.181/armhf/generic.compiler b/debian.master/abi/5.4.0-164.181/armhf/generic.compiler
@@ -0,0 +1 @@
+GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0
diff --git a/...r/abi/5.4.0-162.179/armhf/generic.modules → ...r/abi/5.4.0-164.181/armhf/generic.modules b/...r/abi/5.4.0-162.179/armhf/generic.modules → ...r/abi/5.4.0-164.181/armhf/generic.modules
@@ -766,8 +766,6 @@ cls_flower
 cls_fw
 cls_matchall
 cls_route
-cls_rsvp
-cls_rsvp6
 cls_u32
 cm109
 cm32181

diff --git a/...abi/5.4.0-162.179/armhf/generic.retpoline → ...abi/5.4.0-164.181/armhf/generic.retpoline b/...abi/5.4.0-162.179/armhf/generic.retpoline → ...abi/5.4.0-164.181/armhf/generic.retpoline
diff --git a/debian.master/abi/5.4.0-162.179/fwinfo → debian.master/abi/5.4.0-164.181/fwinfo b/debian.master/abi/5.4.0-162.179/fwinfo → debian.master/abi/5.4.0-164.181/fwinfo
diff --git a/....master/abi/5.4.0-162.179/ppc64el/generic → ....master/abi/5.4.0-164.181/ppc64el/generic b/....master/abi/5.4.0-162.179/ppc64el/generic → ....master/abi/5.4.0-164.181/ppc64el/generic
diff --git a/debian.master/abi/5.4.0-164.181/ppc64el/generic.compiler b/debian.master/abi/5.4.0-164.181/ppc64el/generic.compiler
@@ -0,0 +1 @@
+GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0
diff --git a/...abi/5.4.0-162.179/ppc64el/generic.modules → ...abi/5.4.0-164.181/ppc64el/generic.modules b/...abi/5.4.0-162.179/ppc64el/generic.modules → ...abi/5.4.0-164.181/ppc64el/generic.modules
@@ -682,8 +682,6 @@ cls_flower
 cls_fw
 cls_matchall
 cls_route
-cls_rsvp
-cls_rsvp6
 cls_u32
 cm109
 cm32181

diff --git a/...i/5.4.0-162.179/ppc64el/generic.retpoline → ...i/5.4.0-164.181/ppc64el/generic.retpoline b/...i/5.4.0-162.179/ppc64el/generic.retpoline → ...i/5.4.0-164.181/ppc64el/generic.retpoline
diff --git a/...an.master/abi/5.4.0-162.179/s390x/generic → ...an.master/abi/5.4.0-164.181/s390x/generic b/...an.master/abi/5.4.0-162.179/s390x/generic → ...an.master/abi/5.4.0-164.181/s390x/generic
diff --git a/debian.master/abi/5.4.0-164.181/s390x/generic.compiler b/debian.master/abi/5.4.0-164.181/s390x/generic.compiler
@@ -0,0 +1 @@
+GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0
diff --git a/...r/abi/5.4.0-162.179/s390x/generic.modules → ...r/abi/5.4.0-164.181/s390x/generic.modules b/...r/abi/5.4.0-162.179/s390x/generic.modules → ...r/abi/5.4.0-164.181/s390x/generic.modules
@@ -106,8 +106,6 @@ cls_flower
 cls_fw
 cls_matchall
 cls_route
-cls_rsvp
-cls_rsvp6
 cls_u32
 cmac
 coda

diff --git a/...abi/5.4.0-162.179/s390x/generic.retpoline → ...abi/5.4.0-164.181/s390x/generic.retpoline b/...abi/5.4.0-162.179/s390x/generic.retpoline → ...abi/5.4.0-164.181/s390x/generic.retpoline
diff --git a/debian.master/changelog b/debian.master/changelog
@@ -1,3 +1,38 @@
+linux (5.4.0-165.182) focal; urgency=medium
+
+  * focal/linux: 5.4.0-165.182 -proposed tracker (LP: #2038163)
+
+  * CVE-2023-42756
+    - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
+
+  * CVE-2023-4623
+    - net/sched: sch_hfsc: Ensure inner classes have fsc curve
+
+  * CVE-2023-42755
+    - net/sched: Retire rsvp classifier
+    - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
+
+  * CVE-2023-42753
+    - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
+      ip_set_hash_netportnet.c
+
+  * CVE-2023-34319
+    - xen/netback: Fix buffer overrun triggered by unusual packet
+
+  * CVE-2023-4921
+    - net: sched: sch_qfq: Fix UAF in qfq_dequeue()
+
+  * CVE-2023-42752
+    - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
+
+  * CVE-2023-4881
+    - netfilter: nftables: exthdr: fix 4-byte stack OOB write
+
+  * CVE-2023-4622
+    - af_unix: Fix null-ptr-deref in unix_stream_sendpage().
+
+ -- Thadeu Lima de Souza Cascardo <cascardo@canonical.com>  Mon, 02 Oct 2023 15:13:29 -0300
+
 linux (5.4.0-164.181) focal; urgency=medium
 
   * focal/linux: 5.4.0-164.181 -proposed tracker (LP: #2033867)

diff --git a/debian.master/config/annotations b/debian.master/config/annotations
@@ -11765,8 +11765,6 @@ CONFIG_NET_CLS_FW                               policy<{'amd64': 'm', 'arm64': '
 CONFIG_NET_CLS_U32                              policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'i386': 'm', 'ppc64el': 'm', 's390x': 'm'}>
 CONFIG_CLS_U32_PERF                             policy<{'amd64': 'n', 'arm64': 'n', 'armhf': 'n', 'i386': 'n', 'ppc64el': 'n', 's390x': 'n'}>
 CONFIG_CLS_U32_MARK                             policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'i386': 'y', 'ppc64el': 'y', 's390x': 'y'}>
-CONFIG_NET_CLS_RSVP                             policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'i386': 'm', 'ppc64el': 'm', 's390x': 'm'}>
-CONFIG_NET_CLS_RSVP6                            policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'i386': 'm', 'ppc64el': 'm', 's390x': 'm'}>
 CONFIG_NET_CLS_FLOW                             policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'i386': 'm', 'ppc64el': 'm', 's390x': 'm'}>
 CONFIG_NET_CLS_CGROUP                           policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'i386': 'm', 'ppc64el': 'm', 's390x': 'm'}>
 CONFIG_NET_CLS_BPF                              policy<{'amd64': 'm', 'arm64': 'm', 'armhf': 'm', 'i386': 'm', 'ppc64el': 'm', 's390x': 'm'}>

diff --git a/debian.master/config/config.common.ubuntu b/debian.master/config/config.common.ubuntu
@@ -6272,8 +6272,6 @@ CONFIG_NET_CLS_FLOWER=m
 CONFIG_NET_CLS_FW=m
 CONFIG_NET_CLS_MATCHALL=m
 CONFIG_NET_CLS_ROUTE4=m
-CONFIG_NET_CLS_RSVP=m
-CONFIG_NET_CLS_RSVP6=m
 CONFIG_NET_CLS_U32=m
 CONFIG_NET_CORE=y
 CONFIG_NET_DEVLINK=y

diff --git a/debian.master/reconstruct b/debian.master/reconstruct
@@ -53,6 +53,9 @@ rm -f 'net/decnet/netfilter/Kconfig'
 rm -f 'net/decnet/netfilter/Makefile'
 rm -f 'net/decnet/netfilter/dn_rtmsg.c'
 rm -f 'net/decnet/sysctl_net_decnet.c'
+rm -f 'net/sched/cls_rsvp.c'
+rm -f 'net/sched/cls_rsvp.h'
+rm -f 'net/sched/cls_rsvp6.c'
 rm -f 'net/sched/cls_tcindex.c'
 rm -f 'tools/build/feature/test-libpython-version.c'
 chmod +x 'debian/cloud-tools/hv_get_dhcp_info'

diff --git a/debian.master/tracking-bug b/debian.master/tracking-bug
@@ -1 +1 @@
-2033867 2023.09.04-1
+2038163 s2023.09.04-1
diff --git a/debian/changelog b/debian/changelog
@@ -1,3 +1,36 @@
+linux-aws (5.4.0-1112.121) focal; urgency=medium
+
+  * focal/linux-aws: 5.4.0-1112.121 -proposed tracker (LP: #2038126)
+
+  * CVE-2023-42755
+    - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
+
+  [ Ubuntu: 5.4.0-165.182 ]
+
+  * focal/linux: 5.4.0-165.182 -proposed tracker (LP: #2038163)
+  * CVE-2023-42756
+    - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
+  * CVE-2023-4623
+    - net/sched: sch_hfsc: Ensure inner classes have fsc curve
+  * CVE-2023-42755
+    - net/sched: Retire rsvp classifier
+    - [Config] remove NET_CLS_RSVP and NET_CLS_RSVP6
+  * CVE-2023-42753
+    - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for
+      ip_set_hash_netportnet.c
+  * CVE-2023-34319
+    - xen/netback: Fix buffer overrun triggered by unusual packet
+  * CVE-2023-4921
+    - net: sched: sch_qfq: Fix UAF in qfq_dequeue()
+  * CVE-2023-42752
+    - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
+  * CVE-2023-4881
+    - netfilter: nftables: exthdr: fix 4-byte stack OOB write
+  * CVE-2023-4622
+    - af_unix: Fix null-ptr-deref in unix_stream_sendpage().
+
+ -- Kuba Pawlak <kuba.pawlak@canonical.com>  Thu, 05 Oct 2023 13:18:46 +0200
+
 linux-aws (5.4.0-1111.120) focal; urgency=medium
 
   * focal/linux-aws: 5.4.0-1111.120 -proposed tracker (LP: #2033830)