• linux-signed-arm64_5.10.179+3_source.changes ACCEPTED into oldstable-pr

    From Debian FTP Masters@21:1/5 to All on Sun Jul 30 13:10:01 2023
    Thank you for your contribution to Debian.

    Mapping oldstable-security to oldstable-proposed-updates.

    Accepted:

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Fri, 28 Jul 2023 00:17:15 +0200
    Source: linux-signed-arm64
    Architecture: source
    Version: 5.10.179+3
    Distribution: bullseye-security
    Urgency: high
    Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
    Changed-By: Salvatore Bonaccorso <carnil@debian.org>
    Changes:
    linux-signed-arm64 (5.10.179+3) bullseye-security; urgency=high
    .
    * Sign kernel from linux 5.10.179-3
    .
    [ Salvatore Bonaccorso ]
    * [x86] microcode/AMD: Load late on both threads too
    * [x86] cpu/amd: Move the errata checking functionality up
    * [x86] cpu/amd: Add a Zenbleed fix (CVE-2023-20593)
    * netfilter: nftables: statify nft_parse_register()
    * netfilter: nf_tables: validate registers coming from userspace.
    * netfilter: nf_tables: hold mutex on netns pre_exit path
    * netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
    (CVE-2023-3390)
    * Ignore ABI changes for nft_parse_register (dropped with 08a01c11a5bb
    ("netfilter: nftables: statify nft_parse_register()"))
    .
    [ Ben Hutchings ]
    * netfilter: nf_tables: fix chain binding transaction logic (CVE-2023-3610) Checksums-Sha1:
    02f895b2d3b73f5742bd066005e26cffb142da42 7340 linux-signed-arm64_5.10.179+3.dsc
    41711998a34a8e50fbcb40741233695e5e5bd20b 2591432 linux-signed-arm64_5.10.179+3.tar.xz
    Checksums-Sha256:
    764dbfe718a2fc973f0d56940731a1ede7b6bf6088b751a7497bf6757d2e08a1 7340 linux-signed-arm64_5.10.179+3.dsc
    10c62f8ddc56a32af9a05fe451c6f6246f058a6cf3e5bda95c7f3cbcf37306b4 2591432 linux-signed-arm64_5.10.179+3.tar.xz
    Files:
    ca193e40074ca598ccc24e5b5bc22c8d 7340 kernel optional linux-signed-arm64_5.10.179+3.dsc
    e50b94149de2f246b300690342d5b23f 2591432 kernel optional linux-signed-arm64_5.10.179+3.tar.xz

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEfKFfvHEI+gkU+E+di0FRiLdONzYFAmTFKWsACgkQi0FRiLdO NzYYyA//eJitmW6U6dOWNH7eeHx52SFSzkd6gxQMisfgPjPsGXmVniQHH9oDsHun zBJG9mHbhH2Z+Y+HLjzOxsr1qjddEkRp+bRJOLt2m1JCDjTzcGlvjLp6V2Fr2bqF ExAdP4zC43V5XM6573UYekh0wAWtLlaDAtu2/SrcrypxGlvqemhMjJGYS8Kwg3gu qP2ePj7b2rJJQoNOw0wFDZhg+XDhIzhFASCI0NoV90jV/4elU9YKKmrLAqHitPNJ sr2WkfdZ81oDVfQeEEEY1Gcadwmvasuyzdt5AZ2wEn6mvblp7owl/maWkdFQsH13 fFD+WTmAVnp2YRyYysZWyF3b5nOfApQDacKXnksKM8nJ//MWRxOFmqn4Ktp57Tis o7vV+IS7tpkvcyWCBSzWsitG5mvWWZvgoIAGtgc+OgG0CxRZAnuqKKIvazeDJpie I+DuFK0G+YaPIbsjX8Sht491J1jDoH5UT20yLOzZUYrl9k1amokdQ5ae/FIL2tBM du+swOs3z6JTJSrymGrj5kVSV+peRkzzNbn1yXrnFVxe9dSli9EnUS2rbDxsdPRs vnm31qqCA8hpPqztmhlcIzPYwiWzLFgteo+c2+7K1nexYzn0Z8Dsbt3Rx47GjYFF b63mU3Yajk9l/j929JOXtQ+DaM1pjSMd0+klzFbofHVpzgjzeyQ=
    =B41X
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Debian FTP Masters@21:1/5 to All on Tue Aug 1 00:10:01 2023
    Thank you for your contribution to Debian.



    Accepted:

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Fri, 28 Jul 2023 00:17:15 +0200
    Source: linux-signed-arm64
    Architecture: source
    Version: 5.10.179+3
    Distribution: bullseye-security
    Urgency: high
    Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
    Changed-By: Salvatore Bonaccorso <carnil@debian.org>
    Changes:
    linux-signed-arm64 (5.10.179+3) bullseye-security; urgency=high
    .
    * Sign kernel from linux 5.10.179-3
    .
    [ Salvatore Bonaccorso ]
    * [x86] microcode/AMD: Load late on both threads too
    * [x86] cpu/amd: Move the errata checking functionality up
    * [x86] cpu/amd: Add a Zenbleed fix (CVE-2023-20593)
    * netfilter: nftables: statify nft_parse_register()
    * netfilter: nf_tables: validate registers coming from userspace.
    * netfilter: nf_tables: hold mutex on netns pre_exit path
    * netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
    (CVE-2023-3390)
    * Ignore ABI changes for nft_parse_register (dropped with 08a01c11a5bb
    ("netfilter: nftables: statify nft_parse_register()"))
    .
    [ Ben Hutchings ]
    * netfilter: nf_tables: fix chain binding transaction logic (CVE-2023-3610) Checksums-Sha1:
    02f895b2d3b73f5742bd066005e26cffb142da42 7340 linux-signed-arm64_5.10.179+3.dsc
    41711998a34a8e50fbcb40741233695e5e5bd20b 2591432 linux-signed-arm64_5.10.179+3.tar.xz
    Checksums-Sha256:
    764dbfe718a2fc973f0d56940731a1ede7b6bf6088b751a7497bf6757d2e08a1 7340 linux-signed-arm64_5.10.179+3.dsc
    10c62f8ddc56a32af9a05fe451c6f6246f058a6cf3e5bda95c7f3cbcf37306b4 2591432 linux-signed-arm64_5.10.179+3.tar.xz
    Files:
    ca193e40074ca598ccc24e5b5bc22c8d 7340 kernel optional linux-signed-arm64_5.10.179+3.dsc
    e50b94149de2f246b300690342d5b23f 2591432 kernel optional linux-signed-arm64_5.10.179+3.tar.xz

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEfKFfvHEI+gkU+E+di0FRiLdONzYFAmTFKWsACgkQi0FRiLdO NzYYyA//eJitmW6U6dOWNH7eeHx52SFSzkd6gxQMisfgPjPsGXmVniQHH9oDsHun zBJG9mHbhH2Z+Y+HLjzOxsr1qjddEkRp+bRJOLt2m1JCDjTzcGlvjLp6V2Fr2bqF ExAdP4zC43V5XM6573UYekh0wAWtLlaDAtu2/SrcrypxGlvqemhMjJGYS8Kwg3gu qP2ePj7b2rJJQoNOw0wFDZhg+XDhIzhFASCI0NoV90jV/4elU9YKKmrLAqHitPNJ sr2WkfdZ81oDVfQeEEEY1Gcadwmvasuyzdt5AZ2wEn6mvblp7owl/maWkdFQsH13 fFD+WTmAVnp2YRyYysZWyF3b5nOfApQDacKXnksKM8nJ//MWRxOFmqn4Ktp57Tis o7vV+IS7tpkvcyWCBSzWsitG5mvWWZvgoIAGtgc+OgG0CxRZAnuqKKIvazeDJpie I+DuFK0G+YaPIbsjX8Sht491J1jDoH5UT20yLOzZUYrl9k1amokdQ5ae/FIL2tBM du+swOs3z6JTJSrymGrj5kVSV+peRkzzNbn1yXrnFVxe9dSli9EnUS2rbDxsdPRs vnm31qqCA8hpPqztmhlcIzPYwiWzLFgteo+c2+7K1nexYzn0Z8Dsbt3Rx47GjYFF b63mU3Yajk9l/j929JOXtQ+DaM1pjSMd0+klzFbofHVpzgjzeyQ=
    =B41X
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)