-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 12 May 2023 06:08:40 +0200 Source: linux Binary: linux-doc linux-doc-5.10 linux-headers-5.10.0-23-common linux-headers-5.10.0-23-common-rt linux-source linux-source-5.10 linux-support-5.10.0-23 Architecture: all Version: 5.10.179-1 Distribution: bullseye-security Urgency: high Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Salvatore Bonaccorso Description: linux-doc - Linux kernel specific documentation (meta-package) linux-doc-5.10 - Linux kernel specific documentation for version 5.10 linux-headers-5.10.0-23-common - Common header files for Linux 5.10.0-23 linux-headers-5.10.0-23-common-rt - Common header files for Linux 5.10.0-23-rt linux-source - Linux kernel source (meta-package) linux-source-5.10 - Linux kernel source for version 5.10 with Debian patches linux-support-5.10.0-23 - Support files for Linux 5.10 Closes: 1035779 Changes: linux (5.10.179-1) bullseye-security; urgency=high . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.179 - [arm64] dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node - netfilter: br_netfilter: fix recent physdev match breakage - [arm64,armhf] regulator: fan53555: Explicitly include bits header - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (CVE-2023-31436) - virtio_net: bugfix overflow inside xdp_linearize_page() - sfc: Split STATE_READY in to STATE_NET_DOWN and STATE_NET_UP. - sfc: Fix use-after-free due to selftest_work - netfilter: nf_tables: fix ifdef to also consider nf_tables=m - i40e: fix accessing vsi->active_filters without holding lock - i40e: fix i40e_setup_misc_vector() error handling - mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() - net: rpl: fix rpl header size calculation - bpf: Fix incorrect verifier pruning due to missing register precision taints - e1000e: Disable TSO on i219-LM card to increase speed - f2fs: Fix f2fs_truncate_partial_nodes ftrace event - Input: i8042 - add quirk for Fujitsu Lifebook A574/H - scsi: megaraid_sas: Fix fw_crash_buffer_show() - scsi: core: Improve scsi_vpd_inquiry() checks - [s390x] ptrace: fix PTRACE_GET_LAST_BREAK error handling - nvme-tcp: fix a possible UAF when failing to allocate an io queue - xen/netback: use same error messages for same errors - xfs: drop submit side trans alloc for append ioends - iio: light: tsl2772: fix reading proximity-diodes from device tree - nilfs2: initialize unused bytes in segment summary blocks - memstick: fix memory leak if card device is never registered - kernel/sys.c: fix and improve control flow in __sys_setres[ug]id() - mm/khugepaged: check again on anon uffd-wp during isolation - sched/uclamp: Make task_fits_capacity() use util_fits_cpu() - sched/uclamp: Fix fits_capacity() check in feec() - sched/uclamp: Make select_idle_capacity() use util_fits_cpu() - sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() - sched/uclamp: Make cpu_overutilized() use util_fits_cpu() - sched/uclamp: Cater for uclamp in find_energy_efficient_cpu()'s early exit condition - sched/fair: Detect capacity inversion - sched/fair: Consider capacity inversion in util_fits_cpu() - sched/uclamp: Fix a uninitialized variable warnings - sched/fair: Fixes for capacity inversion detection - virtiofs: clean up error handling in virtio_fs_get_tree() - virtiofs: split requests that exceed virtqueue size - fuse: check s_root when destroying sb - fuse: fix attr version comparison in fuse_read_update_size() - fuse: always revalidate rename target dentry - fuse: fix deadlock between atomic O_TRUNC and page invalidation - Revert "ext4: fix use-after-free in ext4_xattr_set_entry" - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() - ext4: fix use-after-free in ext4_xattr_set_entry - udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM). - tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct(). - inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy(). - dccp: Call inet6_destroy_sock() via sk->sk_destruct(). - sctp: Call inet6_destroy_sock() via sk->sk_destruct(). - [arm64,armhf] pwm: meson: Explicitly set .polarity in .get_state() - ASN.1: Fix check for strdup() success . [ Salvatore Bonaccorso ] * netfilter: nf_tables: deactivate anonymous set from preparation phase (CVE-2023-32233) * [rt] Refresh "sched/hotplug: Ensure only per-cpu kthreads run during hotplug" * Bump ABI to 23 * ovl: fail on invalid uid/gid mapping at copy up (CVE-2023-0386) * [x86] KVM: x86: hyper-v: Avoid calling kvm_make_vcpus_request_mask() with vcpu_mask==NULL (Closes: #1035779) Checksums-Sha1: 45b04a914567ade44da89bd7f31c03a25ed608f4 30351212 linux-doc-5.10_5.10.179-1_all.deb 1dc3efb1d4e3bedf27057b784b30cdda158c52e6 1104 linux-doc_5.10.179-1_all.deb f186a58efb70d4f10a10b834845e4e827f9eb2da 7440184 linux-headers-5.10.0-23-common-rt_5.10.179-1_all.deb 534413baf04b12c269d548eee8d4591e705cc664 9104864 linux-headers-5.10.0-23-common_5.10.179-1_all.deb b9d33b7c1bf53f0525c2106472d4e94d0a99c5fa 121324492 linux-source-5.10_5.10.179-1_all.deb 6c2b069afa44ea6f18bb0be9c83dd6eac258f537 1100 linux-source_5.10.179-1_all.deb d84cb49c67906ef6c0ec9ddd330219d7be563106 634392 linux-support-5.10.0-23_5.10.179-1_all.deb 87ae0893e7c1c54188adc85e4ab8f106534e8722 12560 linux_5.10.179-1_all-buildd.buildinfo Checksums-Sha256: 417546732eae1874cd443fd151db3ceb42d6827c31e6abef39cc6beaa03b6d5c 30351212 linux-doc-5.10_5.10.179-1_all.deb 2e3662a0821653ecfda915bcefb373ac8ec1237a0f3f1c8d0f82ee7a18040dfb 1104 linux-doc_5.10.179-1_all.deb cf1cbaf947166a5abc60fa17dae403064361a00f37e6577d6aaf64249689cd13 7440184 linux-headers-5.10.0-23-common-rt_5.10.179-1_all.deb 3cdaef8b5c05fed446f006653ff420dd7c6bc9bc6b621bb3281faa67939ffd32 9104864 linux-headers-5.10.0-23-common_5.10.179-1_all.deb 10f999c45f2e47cab5164e95190d8ac94105c23c7d5869e0329edb835d3a831f 121324492 linux-source-5.10_5.10.179-1_all.deb 6546438330f115af5c83d813b6032c790cb2506266008b965d2e1c0fe481c56d 1100 linux-source_5.10.179-1_all.deb 68ff402424e2cd1225e7325b70c08f9bf8ce99c820cb6f5d652bd109639c7957 634392 linux-support-5.10.0-23_5.10.179-1_all.deb e8005fc38e2d60a83d2322082f283476dcfeb4f855603cb4a55d0407eb165bd7 12560 linux_5.10.179-1_all-buildd.buildinfo Files: f2b2ac032be97eb53b6ce374b822deb5 30351212 doc optional linux-doc-5.10_5.10.179-1_all.deb 6a334bf00142544c6ca30d28eb893650 1104 doc optional linux-doc_5.10.179-1_all.deb 2b763a0ae086cf8095cd5aa1ad16e82b 7440184 kernel optional linux-headers-5.10.0-23-common-rt_5.10.179-1_all.deb b15931ac75704caa091a02e27ebb550d 9104864 kernel optional linux-headers-5.10.0-23-common_5.10.179-1_all.deb f17da253312abd1d955184ddd6eeba51 121324492 kernel optional linux-source-5.10_5.10.179-1_all.deb 946e3392007823c6df3a8b4b6c14b44b 1100 kernel optional linux-source_5.10.179-1_all.deb cfbe193616d8d9653b847a1fff66ebd0 634392 devel optional linux-support-5.10.0-23_5.10.179-1_all.deb 5c3fcd063bc9db42fab6c28cf033f21c 12560 kernel optional linux_5.10.179-1_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEzW1K1578DQd6MDTQEbLkkg2OS0oFAmRd5goACgkQEbLkkg2O S0qjrg//VyhkVSWFS8ui02c6/82UjJYCxG1JuD/BjginhG/ZD3JwkH9pPYa4H8MY OhKrL21h84XeJltadPTTkGfb9dUQAQY8isqBFtuli3Eh8AApb8tHW96kq31R1M9t z7Xpgdevt3cu1MvcU2VQdF/UFPpiVRh2xGlHXRWV6rcq2+6b0HkQqdwv0nLuicRZ Q9P7dm5TyVmUhsYjmP8U05mAIqrxzlhNvStpfEUaE/Le/QKVUx+XjNLYk38yNSaT YQhecybg26/bW/kHhxpiNfmwK0Xqm3VzMty223AbD+ECVFDdBjDvcepUT0pqKTrZ 5dd+9bdK46jadek/uMTq+69tZrX0X8dYaMFcfDSYLYElUvWSWNFRGwVlvNv3TcNS e+4WKcKIVTsJi4uJ3SG133FXZvfRZsZaMmrzzp+uHlPC2/LcWYfSquNAI7QU5X3B w7843NFTZTPJWFMp3duvfZaDpVL/lsGKpwoez8RMC62UbgtPbNsLvu1kdu4X9rD6 bkyM4FsAh81g+iamJhwg6z8lLoxi7TZkhpXEIUI8mIT+D2H74ozXNitBvWK/qHUK I8OtJIkDxEpr8jC6x0G6ijNNOTGaxYb178dnon5womenNR2BmoHSf9lIjvsNKjo8 ZuXzrwZNQJInHWG4yjJPqtRqrcSux5BYP9zmadydrEAmmuC5mPw= =nr1o -----END PGP SIGNATURE-----