Latest Changelogs for all releases

  linux-restricted-signatures-aws (5.4.0-1126.136) focal; urgency=medium

  * Main version: 5.4.0-1126.136

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/tracking-bug -- resync from main package

 -- Philip Cox <email address hidden> Fri, 10 May 2024 10:56:43 -0400

  linux-restricted-modules-aws (5.4.0-1126.136) focal; urgency=medium

  * Main version: 5.4.0-1126.136

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/tracking-bug -- resync from main package

 -- Philip Cox <email address hidden> Fri, 10 May 2024 10:56:43 -0400

  s390-tools-signed (2.29.0-0ubuntu2.2) mantic; urgency=medium

  * Rebuild against 2.29.0-0ubuntu2.2 (LP: #2059303)

 -- Frank Heimes <email address hidden> Mon, 15 Apr 2024 20:13:31 +0200

  linux-restricted-signatures-nvidia-6.8 (6.8.0-1006.6~22.04.2+1) jammy; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/dkms-versions -- update to remove 390 and 450-server

 -- Jacob Martin <email address hidden> Mon, 06 May 2024 16:27:05 -0500

  linux-signed-nvidia-6.8 (6.8.0-1006.6~22.04.2) jammy; urgency=medium

  * Main version: 6.8.0-1006.6~22.04.2

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/tracking-bug -- resync from main package

 -- Ian May <email address hidden> Wed, 01 May 2024 12:34:20 -0500

  linux-restricted-signatures-lowlatency-hwe-6.5 (6.5.0-35.35.1~22.04.1) jammy; urgency=medium

  * Main version: 6.5.0-35.35.1~22.04.1

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/tracking-bug -- resync from main package

 -- Roxana Nicolescu <email address hidden> Tue, 07 May 2024 12:17:27 +0200

  linux-restricted-modules-lowlatency-hwe-6.5 (6.5.0-35.35.1~22.04.1) jammy; urgency=medium

  * Main version: 6.5.0-35.35.1~22.04.1

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/tracking-bug -- resync from main package

  linux-nvidia-tegra-igx-modules-signed (5.15.0-1012.12+1) jammy; urgency=medium

  * Master version: 5.15.0-1012.12+1

 -- Jacob Martin <email address hidden> Wed, 08 May 2024 09:34:44 -0500

  linux-signed-lowlatency-hwe-6.5 (6.5.0-35.35.1~22.04.1) jammy; urgency=medium

  * Main version: 6.5.0-35.35.1~22.04.1

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/tracking-bug -- resync from main package

  linux-meta-lowlatency-hwe-6.5 (6.5.0.35.35.1~22.04.1) jammy; urgency=medium

  * Bump ABI 6.5.0-35.35.1~22.04

  linux-lowlatency-hwe-6.5 (6.5.0-35.35.1~22.04.1) jammy; urgency=medium

  * jammy/linux-lowlatency-hwe-6.5: 6.5.0-35.35.1~22.04.1 -proposed tracker
    (LP: #2063566)

  [ Ubuntu: 6.5.0-35.35.1 ]

  * mantic/linux-lowlatency: 6.5.0-35.35.1 -proposed tracker (LP: #2063567)
  * mantic/linux: 6.5.0-35.35 -proposed tracker (LP: #2063581)
  * cifs: Copying file to same directory results in page fault (LP: #2060919)
    - SAUCE: Revert "cifs: fix flushing folio regression for 6.1 backport"
  * CVE-2024-26805
    - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
  * CVE-2024-26801
    - Bluetooth: Avoid potential use-after-free in hci_error_reset
  * CVE-2024-26704
    - ext4: fix double-free of blocks due to wrong extents moved_len
  * CVE-2023-52601
    - jfs: fix array-index-out-of-bounds in dbAdjTree
  * CVE-2024-26635
    - llc: Drop support for ETH_P_TR_802_2.
  * CVE-2024-26622
    - tomoyo: fix UAF write bug in tomoyo_write_control()
  * CVE-2024-26614
    - tcp: make sure init the accept_queue's spinlocks once
    - ipv6: init the accept_queue's spinlocks in inet6_create
  * CVE-2024-52615
    - hwrng: core - Fix page fault dead lock on mmap-ed hwrng
  * CVE-2024-52602
    - jfs: fix slab-out-of-bounds Read in dtSearch
  * CVE-2023-47233
    - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
  * CVE-2024-2201
    - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file
    - x86/syscall: Don't force use of indirect calls for system calls
    - x86/bhi: Add support for clearing branch history at syscall entry
    - x86/bhi: Define SPEC_CTRL_BHI_DIS_S
    - x86/bhi: Enumerate Branch History Injection (BHI) bug
    - x86/bhi: Add BHI mitigation knob
    - x86/bhi: Mitigate KVM by default
    - KVM: x86: Add BHI_NO
    - [Config] Set CONFIG_BHI to enabled (auto)

 -- Roxana Nicolescu <email address hidden> Tue, 07 May 2024 12:05:01 +0200

  dotnet8 (8.0.105-8.0.5-0ubuntu1~24.04.1) noble-security; urgency=medium

  * New upstream release
  * SECURITY UPDATE: stack buffer overflow
    - CVE-2024-30045: a stack based buffer overflow in the .NET Double Parse
      routine allows for remote code execution.
  * SECURITY UPDATE: resource dead-lock
    - CVE-2024-30046: a dead-lock in Http2OutputProducer.Stop() results in a
      denial of service.
  * debian/patches/0001-fix-clang18-build.patch: refreshed patch to remove
    new upstream inclusions.

 -- Ian Constantin <email address hidden> Thu, 09 May 2024 17:16:30 +0300

  dotnet7 (7.0.119-0ubuntu1~23.10.1) mantic-security; urgency=medium

  * New upstream release
  * SECURITY UPDATE: stack buffer overflow
    - CVE-2024-30045: a stack based buffer overflow in the .NET Double Parse
      routine allows for remote code execution.
  * SECURITY UPDATE: resource dead-lock
    - CVE-2024-30046: a dead-lock in Http2OutputProducer.Stop() results in a
      denial of service.

 -- Ian Constantin <email address hidden> Thu, 09 May 2024 15:47:33 +0300

  dotnet8 (8.0.105-8.0.5-0ubuntu1~23.10.1) mantic-security; urgency=medium

  * New upstream release
  * SECURITY UPDATE: stack buffer overflow
    - CVE-2024-30045: a stack based buffer overflow in the .NET Double Parse
      routine allows for remote code execution.
  * SECURITY UPDATE: resource dead-lock
    - CVE-2024-30046: a dead-lock in Http2OutputProducer.Stop() results in a
      denial of service.

 -- Ian Constantin <email address hidden> Thu, 09 May 2024 17:16:34 +0300

  dotnet7 (7.0.119-0ubuntu1~22.04.1) jammy-security; urgency=medium

  * New upstream release
  * SECURITY UPDATE: stack buffer overflow
    - CVE-2024-30045: a stack based buffer overflow in the .NET Double Parse
      routine allows for remote code execution.
  * SECURITY UPDATE: resource dead-lock
    - CVE-2024-30046: a dead-lock in Http2OutputProducer.Stop() results in a
      denial of service.

 -- Ian Constantin <email address hidden> Thu, 09 May 2024 15:47:29 +0300