Tuxcare Errata System 0.0.1 5.10 2026-07-24T14:35:08 Ubuntu 16.04 LTS * SECURITY UPDATE: Unsafe exiting internalEntityParser - debian/patches/CVE-2022-40674.patch: Ensure raw tagnames are safe exiting internalEntityParser - CVE-2022-40674 * tests were activated * some leaks fixed: - debian/patches/fix-leak-xmlparse.patch: tidy up attribute prefix bindings on error (fixes #17) - debian/patches/fix-tests-leak.patch: free the external entity parser in external_entity_loader_set_encoding() - debian/patches/fix-tests-leak2.patch: free the content model in dummy_element_decl_handler() - debian/patches/dispose-test-stuff.patch: removes some of the memory leaks discovered by AddressSanitizer in the test suite (Issue #23) Critical TuxCare License Agreement CVE-2022-40674 Ubuntu 16.04 LTS * SECURITY UPDATE: degrade resolver performance - debian/patches/CVE-2022-2795.patch: adds limits in fctx_getaddresses to avoid spending excessive amounts of time on processing large delegations in resolver code in lib/dns/resolver.c. - CVE-2022-2795 * SECURITY UPDATE: memory leak - debian/patches/CVE-2022-38177.patch: avoid return DST_RET when there is a signature length mismatch in lib/dns/opensslecdsa_link.c. - CVE-2022-38177 Important TuxCare License Agreement CVE-2022-38177 CVE-2022-2795 Ubuntu 16.04 LTS * SECURITY_UPDATE: Using freed memory when autocmd changes mark - debian/patches/CVE-2022-3256.patch: Copy the mark before editing another buffer - CVE-2022-3256 Important TuxCare License Agreement CVE-2022-3134 CVE-2022-2946 CVE-2022-3234 CVE-2022-3256 CVE-2022-3099 CVE-2022-3037 Ubuntu 16.04 LTS * SECURITY UPDATE: Buffer overrun from integer overflow - debian/patches/CVE-2021-32027.patch: Prevent integer overflows in array subscripting calculations - CVE-2021-32027 Important TuxCare License Agreement CVE-2021-32027 Ubuntu 16.04 LTS * SECURITY UPDATE: segfault in sqlite3ExprCodeTarget - debian/patches/CVE-2020-13435.patch: tries to prevent a recurrence of problems. - CVE-2020-13425 Important TuxCare License Agreement CVE-2020-13435 CVE-2020-35525 Ubuntu 16.04 LTS * SECURITY UPDATE: buffer-over-read in SSPI and SMB authentication - debian/patches/CVE-2022-41318.patch: improve debugs and checks sequence to clarify cases and ensure that all are handled correctly in lib/ntlmauth/ntlmauth.cc - CVE-2022-41318 Important TuxCare License Agreement CVE-2022-41318 Ubuntu 16.04 LTS * SECURITY UPDATE: Buffer underflow with unexpected :finally - debian/patches/CVE-2022-3296.patch: Check CSF_TRY can be found - CVE-2022-3296 * SECURITY UPDATE: Using negative array index with negative width window - debian/patches/CVE-2022-3324.patch: Make sure the window width does not become negative - CVE-2022-3324 * Fix Makefile: - debian/patches/fix-tests.patch: add some tests Important TuxCare License Agreement CVE-2022-3296 CVE-2022-3324 Ubuntu 16.04 LTS * SECURITY UPDATE: Exposed sensitive information - debian/patches/CVE-2022-2806.patch: filter out all password keys in sos/report/plugins/ovirt.py - CVE-2022-2806 Moderate TuxCare License Agreement CVE-2022-2806 Ubuntu 16.04 LTS * SECURITY UPDATE: integer overflow - debian/patches/CVE-2017-17122-pre1.patch: change bfd_get_size/bfd_get_file_size to ufile_ptr. - debian/patches/CVE-2017-17122.patch: stop objdump from attempting to allocate a huge chunk of memory when parsing relocs in a corrupt file. - CVE-2017-17122 * SECURITY UPDATE: out-of-bounds read - debian/patches/CVE-2019-1010204.patch: check start parameter before computing number of bytes to read. - CVE-2019-1010204 Important TuxCare License Agreement CVE-2019-1010204 CVE-2017-17122 Ubuntu 16.04 LTS * SECURITY UPDATE: Privileged arbitrary SQL function execution - debian/patches/CVE-2022-1552-1.patch: Make relation-enumerating operations be security-restricted operations - debian/patches/CVE-2022-1552-2.patch: In REFRESH MATERIALIZED VIEW, set user ID before running user code - CVE-2022-1552 Important TuxCare License Agreement CVE-2022-1552 Ubuntu 16.04 LTS * SECURITY UPDATE: Fix overeager DTD destruction - debian/patches/CVE-2022-43680: Fix heap use-after-free after overeager destruction of a shared DTD in function XML_ExternalEntityParserCreate in out-of-memory situations - CVE-2022-43680 Important TuxCare License Agreement CVE-2022-43680 Ubuntu 16.04 LTS * SECURITY UPDATE: Possible cross-site scripting vulnerability in libxml2 - debian/patches/CVE-2016-3709.patch: Revert commit 960f0e27 that has some problems - CVE-2016-3709 * Fix parser termination from "Double hyphen within comment" error Moderate TuxCare License Agreement CVE-2016-3709 Ubuntu 16.04 LTS * SECURITY UPDATE: POST following PUT confusion - debian/patches/CVE-2022-32221.patch: when POST is set, reset the 'upload' field - CVE-2022-32221 Moderate TuxCare License Agreement CVE-2022-32221 Ubuntu 16.04 LTS * SECURITY UPDATE: After user deletion in MongoDB Server the improper invalidation of authorization sessions allows an authenticated user's session to persist and become conflated with new accounts, if those accounts reuse the names of deleted ones - debian/patches/CVE-2019-2386.patch: Validate unique User ID on UserCache hit - CVE-2019-2386 Important TuxCare License Agreement CVE-2019-2386 Ubuntu 16.04 LTS * SECURITY UPDATE: Signature verification bypass - debian/patches/fixes/CVE-2020-16156.patch: recognize CANNOT_VERIFY signature verification type, add two new failure modes based on 'cpan_path' and improve interaction with external 'gpg' executable. - CVE-2020-16156 Important TuxCare License Agreement CVE-2020-16156 Ubuntu 16.04 LTS * SECURITY UPDATE: array-bounds overflow if billions of bytes are used in a string argument to a C API - debian/patches/CVE-2022-35737.patch: increase the size of loop variables in the printf() implementation to avoid overflow. - CVE-2022-35737 Important TuxCare License Agreement CVE-2022-35737 Ubuntu 16.04 LTS * SECURITY UPDATE: memory corruption and disclosure in MP4 streaming module - debian/patches/CVE-2022-41741-CVE-2022-41742.patch: disable duplicated atoms and ensure that (the most of them) appeared once in a container. - CVE-2022-41741 - CVE-2022-41742 Important TuxCare License Agreement CVE-2022-41741 CVE-2022-41742 Ubuntu 16.04 LTS * SECURITY UPDATE: Update to 5.7.40 to fix security issues - CVE-2022-21589, CVE-2022-21592, CVE-2022-21608, CVE-2022-21617 Moderate TuxCare License Agreement CVE-2022-21592 CVE-2022-21617 CVE-2022-21589 CVE-2022-21608 Ubuntu 16.04 LTS * SECURITY UPDATE: Uncontrolled resource consumption - debian/patches/CVE-2022-45061-v2.7.patch: Fix quadratic time idna decoding - CVE-2022-45061 * Make tests to be compatible with expat 2.1.0 from tuxcare.els: - debian/patches/expat-regression-v2.7.patch: Make test suite support Expat >=2.4.5 Important TuxCare License Agreement CVE-2022-45061 Ubuntu 16.04 LTS * SECURITY UPDATE: Use-after-free in access control-related hash tables - debian/patches/CVE-2020-35512.patch: use reference counting for DBusUserInfo and DBusGroupInfo structures. - CVE-2020-35512 * SECURITY UPDATE: Crash or incorrect parsing a signature with wrongly nested '()' and '{}' - debian/patches/CVE-2022-42010.patch: add extra checking for brackets. - CVE-2022-42010 * SECURITY UPDATE: Out-of-bounds accesses during processing of arrays made up of an integer number of items - debian/patches/CVE-2022-42011.patch: validate length of arrays of fixed-length items. - CVE-2022-42011 * SECURITY UPDATE: Crash when message type and the pointer into its contents goes out of sync - debian/patches/CVE-2022-42012.patch: byte-swap Unix fd indexes if needed. - CVE-2022-42012 Important TuxCare License Agreement CVE-2020-35512 CVE-2022-42011 CVE-2022-42010 CVE-2022-42012 Ubuntu 16.04 LTS * SECURITY UPDATE: Uncontrolled resource consumption - debian/patches/CVE-2022-45061.patch: Fix quadratic time idna decoding - CVE-2022-45061 * Fix the tests: Certificates were expired - debian/patches/update-test-certs-and-keys.patch: Update test certs and keys Important TuxCare License Agreement CVE-2022-45061 Ubuntu 16.04 LTS * SECURITY UPDATE: option refcount overflow - debian/patches/CVE-2022-2928.patch: fix work with reference counter 'refcount' - CVE-2022-2928 * SECURITY UPDATE: DHCP memory leak - debian/patches/CVE-2022-2929.patch: free memory when incorrect 'fqdn' labels are used - CVE-2022-2929 Important TuxCare License Agreement CVE-2022-2928 CVE-2022-2929 Ubuntu 16.04 LTS * SECURITY UPDATE: possible RCE when using OSC 50 sequence - debian/patches/CVE-2022-45063.patch: Improve error recovery when setting a bitmap font for the VT100 window, e.g., in case OSC 50 failed, restoring the most recent valid font so that a subsequent OSC 50 reports this correctly. - CVE-2022-45063 - debian/patches/extra_safety_to_string_comparison_functions.patch: Add NULL pointer checks in x_strcasecmp() and x_strncasecmp() to help with error recovery for a missing font. Critical TuxCare License Agreement CVE-2022-45063 Ubuntu 16.04 LTS * Backport upstream releases 8u352 to 16.04 LTS * Security fixes in 8u352: - JDK-8282252: Improve BigInteger/Decimal validation - JDK-8285662: Better permission resolution - JDK-8286511: Improve macro allocation - JDK-8286519: Better memory handling - JDK-8286526, CVE-2022-21619: Improve NTLM support - JDK-8286533, CVE-2022-21626: Key X509 usages - JDK-8286910, CVE-2022-21624: Improve JNDI lookups - JDK-8286918, CVE-2022-21628: Better HttpServer service - JDK-8288508: Enhance ECDSA usage * Drop applied patch pr88.diff Moderate TuxCare License Agreement CVE-2022-21624 CVE-2022-21626 CVE-2022-21619 CVE-2022-21628 Ubuntu 16.04 LTS * SECURITY UPDATE: Use After Free in vim - debian/patches/CVE-2022-3352.patch: Disallow deleting the current buffer to avoid using freed memory - CVE-2022-3352 * SECURITY UPDATE: Crash when matching buffer with invalid pattern - debian/patches/CVE-2022-1674.patch: Check for NULL regprog - CVE-2022-1674 * SECURITY UPDATE: Using NULL regexp program - debian/patches/CVE-2022-1725.patch: Check for regexp program becoming NULL in more places - CVE-2022-1725 * Fix: CI crashes when running out of memory, NULL pointer dereference - debian/patches/fix-addstate.patch: Apply 'maxmempattern' also to new regexp engine, check NULL pointers inside addstate() function Important TuxCare License Agreement CVE-2022-1674 CVE-2022-3352 CVE-2022-1725 Ubuntu 16.04 LTS * SECURITY UPDATE: Race condition when copying and removing directory trees - debian/patches/CVE-2013-4235.patch: fix races in chown_tree(), remove_tree() and copy_tree() - CVE-2013-4235 Moderate TuxCare License Agreement CVE-2013-4235 Ubuntu 16.04 LTS * SECURITY UPDATE: Integer overflows with XML_PARSE_HUGE - debian/patches/CVE-2022-40303.patch: Impose size limits when XML_PARSE_HUGE is set and add length checks to core parser functions - CVE-2022-40303 * SECURITY UPDATE: Dict corruption caused by entity reference cycles - debian/patches/CVE-2022-40304.patch: Stop storing entity content, orig, ExternalID and SystemID in a dict since these values are unlikely to occur multiple times in a document, so they shouldn't have been stored in a dict in the first place - CVE-2022-40304 Important TuxCare License Agreement CVE-2022-40304 CVE-2022-40303 Ubuntu 16.04 LTS * SECURITY UPDATE: Integer overflow - debian/patches/CVE-2021-20224.patch: fix outside the range of representable values of type 'unsigned char' - CVE-2021-20224 * Fix internal test system: - debian/patches/fix-validation-suite.patch: fix validate suite - debian/patches/fix-improper-image-header-xbm.patch: fix 'improper image header' for XBM tests * debian/rules: - fix several install issues - script termination when a subcommand fails Moderate TuxCare License Agreement CVE-2021-20224 Ubuntu 16.04 LTS * SECURITY UPDATE: degrade resolver performance and possibly DoS - debian/patches/CVE-2016-2775.patch: fix possible infinite loop in lwresd due to a long query name - CVE-2016-2775 * SECURITY UPDATE: improper restriction of zone size limit - debian/patches/CVE-2016-6170.patch: allow the maximum number of records in a zone to be specified - CVE-2016-6170 Moderate TuxCare License Agreement CVE-2016-6170 CVE-2016-2775 Ubuntu 16.04 LTS * SECURITY UPDATE: heap-based buffer overflow - debian/patches/CVE-2022-38533.patch: fix possibly heap-based buffer overflow in bfd/coffcode.h. - CVE-2022-38533 Moderate TuxCare License Agreement CVE-2022-38533 Ubuntu 16.04 LTS * SECURITY UPDATE: The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escaping and is, therefore, vulnerable to XSS. - debian/patches/CVE-2019-0221.patch: Escape debug output to aid readability - CVE-2019-0221 Moderate TuxCare License Agreement CVE-2019-0221 Ubuntu 16.04 LTS * SECURITY UPDATE: With a Visual block a put command column may go negative - debian/patches/CVE-2022-3520.patch: Check that the column does not become negative - CVE-2022-3520 * SECURITY UPDATE: Invalid memory access in substitute with function that goes to another file - debian/patches/CVE-2022-4141.patch: Check for text locked in CTRL-W gf - CVE-2022-4141 Critical TuxCare License Agreement CVE-2022-3520 CVE-2022-4141 Ubuntu 16.04 LTS * SECURITY UPDATE: A man-in-the-middle attacker can inject false responses - debian/patches/CVE-2021-23222.patch: libpq: reject extraneous data after SSL or GSS encryption handshake - CVE-2021-23222 Moderate TuxCare License Agreement CVE-2021-23222 Ubuntu 16.04 LTS * SECURITY UPDATE: Using freed memory after SpellFileMissing autocmd uses bwipe - debian/patches/CVE-2022-4292.patch: Bail out if the window no longer exists - CVE-2022-4292 Important TuxCare License Agreement CVE-2022-4292 Ubuntu 16.04 LTS * SECURITY UPDATE: Dummy buffer ends up in a window - debian/patches/CVE-2022-3591.patch: Disallow navigating to a dummy buffer - CVE-2022-3591 Important TuxCare License Agreement CVE-2022-3591 Ubuntu 16.04 LTS * SECURITY UPDATE: buffer overrun in EUC-KR conversion module - debian/patches/any/CVE-2019-25013: skip two bytes when told to skip over the unknown designation, potentially running over the buffer end - CVE-2019-25013 * SECURITY UPDATE: hang in the iconv program - debian/patches/any/CVE-2020-27618: adjust the converter to accept redundant shift sequences in IBM1364, IBM1371, IBM1388, IBM1390 and IBM1399 character sets - CVE-2020-27618 Moderate TuxCare License Agreement CVE-2020-27618 CVE-2019-25013 Ubuntu 16.04 LTS * SECURITY UPDATE: Extended partition loop in MBR partition table leads to DoS - debian/patches/CVE-2016-5011-1.patch: ignore MBR extended partition at zero offset - debian/patches/CVE-2016-5011-2.patch: avoid non-empty recursion in EBR - CVE-2016-5011 Moderate TuxCare License Agreement CVE-2016-5011 Ubuntu 16.04 LTS * SECURITY UPDATE: integer overflows that may lead to remote code execution - debian/patches/CVE-2022-42898.patch: add several tests to prevent integer overflow in pac parsing - CVE-2022-42898 Important TuxCare License Agreement CVE-2022-42898 Ubuntu 16.04 LTS * SECURITY UPDATE: Integer overflows - debian/patches/CVE-2022-42898.patch: fix integer overflows in PAC parsing - CVE-2022-42898 Important TuxCare License Agreement CVE-2022-42898 Ubuntu 16.04 LTS * SECURITY UPDATE: Out-of-bounds read in function build_stl_str_hl - debian/patches/CVE-2023-0049: Stop reading from buffer at "%0" - CVE-2023-0049 Important TuxCare License Agreement CVE-2023-0049 Ubuntu 16.04 LTS * SECURITY UPDATE: access denial bypass in pam_access.so - debian/patches-applied/CVE-2022-28321.patch: properly use getnameinfo() and getaddrinfo() to handle hostnames in access.conf, add freeaddrinfo() to avoid memory leaks on return from network_netmask_match() as well - CVE-2022-28321 Critical TuxCare License Agreement CVE-2022-28321 Ubuntu 16.04 LTS * SECURITY UPDATE: possible HTTP request smuggling in the mod_proxy_ajp - debian/patches/CVE-2022-36760.patch: ensure connection closure for an invalid Transfer-Encoding header, to prevent HTTP request smuggling attack with an AJP proxy - CVE-2022-36760 Critical TuxCare License Agreement CVE-2022-36760 Ubuntu 16.04 LTS * SECURITY UPDATE: Reading past the end of a line when formatting text - debian/patches/CVE-2023-0433: Check for not going over the end of the line - CVE-2023-0433 Important TuxCare License Agreement CVE-2023-0433 Ubuntu 16.04 LTS * SECURITY UPDATE: heap-based buffer overflows in Heimdal ARC4 and DES3 - debian/patches/CVE-2022-3437.patch: add extra NULL pointer and buffer boundaries checks, fix undefined behaviour and input data length calculations, remove accidentally duplicated code in arcfour.c - CVE-2022-3437 Moderate TuxCare License Agreement CVE-2022-3437 Ubuntu 16.04 LTS * SECURITY UPDATE: Update to 5.7.41 to fix security issues - CVE-2023-21840 Moderate TuxCare License Agreement CVE-2023-21840 Ubuntu 16.04 LTS * SECURITY UPDATE: Possible KDC crash processing malformed S4U2Self request - debian/patches/CVE-2018-20217.patch: ignore password attributes for S4U2Self requests - CVE-2018-20217 Moderate TuxCare License Agreement CVE-2018-20217 Ubuntu 16.04 LTS * SECURITY UPDATE: mod_proxy may trigger HTTP response splitting - debian/patches/CVE-2022-37436.patch: fail on bad header - CVE-2022-37436 Moderate TuxCare License Agreement CVE-2022-37436 Ubuntu 16.04 LTS * SECURITY UPDATE: edit a file not permitted by the security policy - debian/patches/CVE-2023-22809.patch: do not permit editor arguments to include "--" - CVE-2023-22809 Important TuxCare License Agreement CVE-2023-22809 Ubuntu 16.04 LTS * SECURITY UPDATE: Use-after-free following BIO_new_NDEF - debian/patches/CVE-2023-0215.patch: fix a UAF resulting from a bug in BIO_new_NDEF in crypto/asn1/bio_ndef.c - CVE-2023-0215 * SECURITY UPDATE: X.400 address type confusion in X.509 GeneralName - debian/patches/CVE-2023-0286.patch: fix GENERAL_NAME_cmp for x400Address in crypto/x509/v3_genn.c - CVE-2023-0286 Important TuxCare License Agreement CVE-2023-0215 CVE-2023-0286 Ubuntu 16.04 LTS * SECURITY UPDATE: Under certain circumstances the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially causing failures of these instructions to go unreported. This could potentially lead to less randomness in random number generation. - debian/patches/0010-cve-2017-11671.diff: moves expansion out of the link. - CVE-2017-11671 Moderate TuxCare License Agreement CVE-2017-11671 Ubuntu 16.04 LTS * SECURITY UPDATE: out-of-bounds write caused by integer overflow - debian/patches/CVE-2022-41903.patch: use 'size_t' instead of 'int' to track the string lengths and so allow >2GB input sizes. - CVE-2022-41903 - t-mark-submodule-clean-test-as-known-failure.patch: mark submodule clean test as known failure and so pass 'make test'. * SECURITY UPDATE: possible cross-protocol requests - debian/patches/CVE-2021-40330.patch: forbid newlines in host and path. - CVE-2021-40330 * SECURITY UPDATE: out-of-bounds write and possible RCE caused by integer overflow - debian/patches/CVE-2022-39260.patch: reject too long command line strings in split_cmdline(). - CVE-2022-39260 * SECURITY UPDATE: out-of-bounds write when reading an unreasonably large .gitattributes file - debian/patches/CVE-2021-23521.patch: implement line and overall size checks for .gitattributes files. - CVE-2021-23521 * SECURITY UPDATE: possible write outside of the repository's working directory - debian/patches/CVE-2023-23946.patch: prevent git-apply from writing behind newly created symbolic links. - CVE-2023-23946 Critical TuxCare License Agreement CVE-2022-23521 CVE-2022-41903 CVE-2021-40330 CVE-2023-23946 CVE-2022-39260 Ubuntu 16.04 LTS * SECURITY UPDATE: Within the lg_init() function, if several allocations succeed but then one fails, an uninitialized pointer would have been freed despite never being allocated. - debian/patches/CVE-2022-34480.patch: avoid using uninitialized pointer - CVE-2022-34480 Important TuxCare License Agreement CVE-2022-34480 Ubuntu 16.04 LTS * SECURITY UPDATE: Invalid validation of BCrypt hashes - debian/patches/CVE-2023-0567.patch: Remove "PHP Hack" to fix validation of malformed BCrypt hashes - CVE-2023-0567 * SECURITY UPDATE: Unauthorized data access or modification - debian/patches/CVE-2023-0568.patch: Fix array overrun when appending slash to paths - CVE-2023-0568 * SECURITY UPDATE: DoS vulnerability when parsing multipart request body - debian/patches/CVE-2023-0662.patch: Introduce max_multipart_body_parts INI and fix repeated warning for file uploads limit exciding - CVE-2023-0662 Critical TuxCare License Agreement CVE-2023-0568 CVE-2023-0662 CVE-2023-0567 Ubuntu 16.04 LTS * SECURITY UPDATE: memory leak in read_header - debian/patches/CVE-2021-20193.patch: Don't return directly from the loop. Instead set the status and break. Return the status. - CVE-2021-20193.patch * SECURITY UPDATE: a heap buffer overflow - debian/patches/CVE-2022-48303.patch: Check for the end of field after leading byte (0x80 or 0xff) of base-256 encoded header value. - CVE-2022-48303.patch * improve debian/rules to build the project by root Important TuxCare License Agreement CVE-2022-48303 Ubuntu 16.04 LTS * SECURITY UPDATE: Improper input validation - debian/patches/CVE-2023-24329-v2.7.patch: Prevent urllib.parse.urlparse from accepting schemes that don't begin with an alphabetical ASCII character - CVE-2023-24329 Important TuxCare License Agreement CVE-2023-24329 Ubuntu 16.04 LTS * SECURITY UPDATE: urllib.parse.urlparse does not enforce that a scheme must begin with an ASCII-character - debian/patches/CVE-2023-24329.patch: Prevent urllib.parse.urlparse from accepting schemes that don't begin with an alphabetical ASCII character - CVE-2023-24329 Important TuxCare License Agreement CVE-2023-24329 Ubuntu 16.04 LTS * SECURITY UPDATE: Illegal memory access when using virtual editing - debian/patches/CVE-2023-1175: Make sure "startspaces" is not negative - CVE-2023-1175 Important TuxCare License Agreement CVE-2023-1175 Ubuntu 16.04 LTS * SECURITY UPDATE: HTTP Proxy deny use-after-free - debian/patches/CVE-2022-43552.patch: + smb/telnet: do not free the protocol struct in *_done(). + conn: don't free easy handle data in handler->disconnect. - CVE-2022-43552 Moderate TuxCare License Agreement CVE-2022-43552 Ubuntu 16.04 LTS * SECURITY UPDATE: New microcode data file 2023-02-14 - New microcodes: sig 0x000606c1, pf_mask 0x10, 2022-09-23, rev 0x1000211, size 289792 sig 0x000806f4, pf_mask 0x10, 2022-12-19, rev 0x2c000170, size 600064 sig 0x000806f4, pf_mask 0x87, 2022-12-27, rev 0x2b000181, size 561152 sig 0x000806f5, pf_mask 0x10, 2022-12-19, rev 0x2c000170, size 600064 sig 0x000806f5, pf_mask 0x87, 2022-12-27, rev 0x2b000181, size 561152 sig 0x000806f6, pf_mask 0x10, 2022-12-19, rev 0x2c000170, size 600064 sig 0x000806f6, pf_mask 0x87, 2022-12-27, rev 0x2b000181, size 561152 sig 0x000806f7, pf_mask 0x87, 2022-12-27, rev 0x2b000181, size 561152 sig 0x000806f8, pf_mask 0x10, 2022-12-19, rev 0x2c000170, size 600064 sig 0x000806f8, pf_mask 0x87, 2022-12-27, rev 0x2b000181, size 561152 sig 0x000b0671, pf_mask 0x32, 2022-12-19, rev 0x0112, size 207872 sig 0x000b06a2, pf_mask 0xc0, 2022-12-08, rev 0x410e, size 212992 sig 0x000b06a3, pf_mask 0xc0, 2022-12-08, rev 0x410e, size 212992 - Updated microcodes: sig 0x00050653, pf_mask 0x97, 2022-08-30, rev 0x1000161, size 36864 sig 0x00050654, pf_mask 0xb7, 2022-03-08, rev 0x2006e05, size 44032 sig 0x00050656, pf_mask 0xbf, 2022-08-26, rev 0x4003303, size 37888 sig 0x00050657, pf_mask 0xbf, 2022-08-26, rev 0x5003303, size 37888 sig 0x0005065b, pf_mask 0xbf, 2022-08-26, rev 0x7002503, size 29696 sig 0x000606a6, pf_mask 0x87, 2022-10-09, rev 0xd000389, size 296960 sig 0x000706a1, pf_mask 0x01, 2022-09-16, rev 0x003e, size 75776 sig 0x000706a8, pf_mask 0x01, 2022-09-20, rev 0x0022, size 76800 sig 0x000706e5, pf_mask 0x80, 2022-08-31, rev 0x00b8, size 113664 sig 0x000806a1, pf_mask 0x10, 2022-09-07, rev 0x0032, size 34816 sig 0x000806c1, pf_mask 0x80, 2022-06-28, rev 0x00a6, size 110592 sig 0x000806c2, pf_mask 0xc2, 2022-03-19, rev 0x0028, size 97280 sig 0x000806d1, pf_mask 0xc2, 2022-06-28, rev 0x0042, size 102400 sig 0x000806ec, pf_mask 0x94, 2022-07-31, rev 0x00f4, size 105472 sig 0x00090661, pf_mask 0x01, 2022-07-15, rev 0x0017, size 20480 sig 0x00090672, pf_mask 0x07, 2023-01-04, rev 0x002c, size 219136 sig 0x00090675, pf_mask 0x07, 2023-01-04, rev 0x002c, size 219136 sig 0x000906a3, pf_mask 0x80, 2023-01-11, rev 0x0429, size 218112 sig 0x000906a4, pf_mask 0x80, 2023-01-11, rev 0x0429, size 218112 sig 0x000906c0, pf_mask 0x01, 2022-09-02, rev 0x24000024, size 20480 sig 0x000906ed, pf_mask 0x22, 2022-07-31, rev 0x00f4, size 104448 sig 0x000a0652, pf_mask 0x20, 2022-07-31, rev 0x00f4, size 96256 sig 0x000a0653, pf_mask 0x22, 2022-07-31, rev 0x00f4, size 97280 sig 0x000a0655, pf_mask 0x22, 2022-07-31, rev 0x00f4, size 96256 sig 0x000a0660, pf_mask 0x80, 2022-07-31, rev 0x00f4, size 97280 sig 0x000a0661, pf_mask 0x80, 2022-07-31, rev 0x00f4, size 96256 sig 0x000a0671, pf_mask 0x02, 2022-08-31, rev 0x0057, size 103424 sig 0x000b06f2, pf_mask 0x07, 2023-01-04, rev 0x002c, size 219136 sig 0x000b06f5, pf_mask 0x07, 2023-01-04, rev 0x002c, size 219136 - CVE-2022-38090, INTEL-SA-00767 - CVE-2022-33196, INTEL-SA-00738 - CVE-2022-21216, INTEL-SA-00700 - CVE-2022-21233, INTEL-SA-00657 - CVE-2022-0005, INTEL-SA-00614 - CVE-2022-33972, INTEL-SA-00730 * source: update symlinks to reflect id of the latest release, 20230214 Moderate TuxCare License Agreement CVE-2022-21216 CVE-2022-38090 CVE-2022-33196 CVE-2022-33972 Ubuntu 16.04 LTS * SECURITY UPDATE: AD DC can be forced to issue rc4-hmac Kerberos tickets - debian/patches/CVE-2022-45141.patch: fix session key selection algorithm for selecting the ticket in strongest-to-weakest order, thus allowing the target server to select better encryption - CVE-2022-45141 Critical TuxCare License Agreement CVE-2022-45141 Ubuntu 16.04 LTS * SECURITY UPDATE: buffer overrun vulnerability in format_timespan() - debian/patches/CVE-2022-3821.patch: fix buffer-over-run - CVE-2022-3821 * SECURITY UPDATE: a local privelege escalation for some sudo configs was not blocked adequately - debian/patches/CVE-2023-26604.patch: use only less as a pager and restrict its functionality (e.g stop running external shell) unless environment variable SYSTEMD_PAGERSECURE is defined - CVE-2023-26604 Important TuxCare License Agreement CVE-2022-3821 CVE-2023-26604 Ubuntu 16.04 LTS * SECURITY UPDATE: Accessing invalid memory with put in Visual block mode - debian/patches/CVE-2023-1170: Adjust the cursor column if needed - CVE-2023-1170 Moderate TuxCare License Agreement CVE-2023-1170 Ubuntu 16.04 LTS * SECURITY UPDATE: proxy configuration may trigger HTTP request smuggling attack - debian/patches/CVE-2023-25690.patch: don't forward invalid query strings - CVE-2023-25690 Critical TuxCare License Agreement CVE-2023-25690 Ubuntu 16.04 LTS * SECURITY UPDATE: Denial of service - debian/patches/CVE-2022-31628.patch: Fix potential infinite recursion in phar wrapper when using quine gzip file - CVE-2022-31628 * SECURITY UPDATE: Cookie injection - debian/patches/CVE-2022-31629.patch: Add cookie integrity validation - CVE-2022-31629 * SECURITY UPDATE: Integer overflow - debian/patches/CVE-2022-31631.patch: Fix integer overflow that could cause PDO::quote() to return an improperly quoted string - CVE-2022-31631 Moderate TuxCare License Agreement CVE-2022-31631 CVE-2022-31629 CVE-2022-31628 Ubuntu 16.04 LTS * SECURITY UPDATE: No check if the return value of XCreateGC() is NULL - debian/patches/CVE-2022-47024: Only use the return value when it is not NULL. - CVE-2022-47024 Important TuxCare License Agreement CVE-2022-47024 Ubuntu 16.04 LTS * SECURITY UPDATE: When cloning a repository with `--local`, Git relies on either making a hardlink or copy to every file in the "objects" directory of the source repository. As a result, malformed repository containing symbolic links pointing at the sensitive information on the victim's machine could be copied - debian/patches/CVE-2022-39253.patch: prevent copying symbolic links - debian/patches/tests-for-CVE-2022-39253.patch: tests - CVE-2022-39253 Moderate TuxCare License Agreement CVE-2022-39253 Ubuntu 16.04 LTS * SECURITY UPDATE: stack-based buffer overread in FUSE xlator - debian/patches/CVE-2022-26253.patch: access the graph->id only while event is associated specific to FUSE xlator. - CVE-2022-26253 Important TuxCare License Agreement CVE-2023-26253 Ubuntu 16.04 LTS * SECURITY UPDATE: An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled - debian/patches/CVE-2023-0767.patch: improve handling of unknown PKCS#12 safe bag types - CVE-2023-0767 Important TuxCare License Agreement CVE-2023-0767 Ubuntu 16.04 LTS * SECURITY UPDATE: Telnet option IAC injection - debian/patches/CVE-2023-27533.patch: only accept option arguments in ascii to avoid embedded telnet negotiation commands - CVE-2023-27533 * SECURITY UPDATE: FTP too eager connection reuse - debian/patches/CVE-2023-27535.patch: add more conditions for connection reuse - CVE-2023-27535 * SECURITY UPDATE: GSS delegation too eager connection re-use - debian/patches/CVE-2023-27536.patch: only reuse connections with same GSS delegation - CVE-2023-27536 Critical TuxCare License Agreement CVE-2023-27535 CVE-2023-27536 CVE-2023-27533 Ubuntu 16.04 LTS * SECURITY UPDATE: possible DoS and information disclosure - debian/patches/CVE-2022-44267-44268.patch: fix parsing of some keys - CVE-2022-44267 - CVE-2022-44268 * Fix some leaks: - debian/patches/fix-leaks.patch: fix memory leaks - debian/patches/fix-leaks2.patch: fix memory leaks * Fix reading out of the bound: - debian/patches/fix-reading-out-of-bound.patch Moderate TuxCare License Agreement CVE-2022-44268 CVE-2022-44267 Ubuntu 16.04 LTS * SECURITY UPDATE: Null dereference - debian/patches/CVE-2023-28484.patch: Fix null-pointer-deref in xmlSchemaFixupComplexType - CVE-2023-28484 * SECURITY UPDATE: Fix a null pointer dereference - debian/patches/fix-null-ptr-deref.patch: use XML_SCHEMAS_ANYTYPE instead of a null pointer - CVE-2023-28484 * SECURITY UPDATE: Logic or memory errors - debian/patches/CVE-2023-29469.patch: check whether namelen is less than or equal to zero - CVE-2023-29469 * Add test suite - debian/patches/enable-building-tests.patch: enable building tests - debian/patches/fix-testapi.patch: fix buffer overflow in tests Moderate TuxCare License Agreement CVE-2023-28484 CVE-2023-29469 Ubuntu 16.04 LTS * SECURITY UPDATE: Excessive resource use verifying X.509 policy constraints - debian/patches/CVE-2023-0464.patch: Limit X.509 certificate tree size to avoid exponential use of computational resources - CVE-2023-0464 * SECURITY UPDATE: Incorrecly documented X509_VERIFY_PARAM_add0_policy() - debian/patches/CVE-2023-0466.patch: Align documentation with actual implementation - CVE-2023-0466 * SECURITY UPDATE: Double locking in X.509 policy cache handling - debian/patches/CVE-2022-3996.patch: Revert previously introduced redundant flag setting and so avoid locking at all - CVE-2022-3996 Important TuxCare License Agreement CVE-2022-3996 CVE-2023-0466 CVE-2023-0464 Ubuntu 16.04 LTS * SECURITY UPDATE: By feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents (corresponding to the rejected hunk(s) from the given patch) - debian/patches/CVE-2023-25652.patch: removing a link instead of writing into - CVE-2023-25652 * SECURITY UPDATE: A specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit a bug in `config.c::git_config_rename_section_in_file()` that can lead to a remote code execution - debian/patches/CVE-2023-29007.patch: restrict the config file line length to parse it whole either as a section or as a parameter - CVE-2023-29007 Important TuxCare License Agreement CVE-2023-29007 CVE-2023-25652 Ubuntu 16.04 LTS * SECURITY UPDATE: Update to 5.7.42 to fix security issues - CVE-2023-21912, CVE-2023-21980 Important TuxCare License Agreement CVE-2023-21912 CVE-2023-21980 Ubuntu 16.04 LTS * SECURITY UPDATE: an overflow of 64-bit value used to a memory allocation - debian/patches/CVE-2022-39377.patch: check an overflow and exit if it be - CVE-2022-39377 Important TuxCare License Agreement CVE-2022-39377 Ubuntu 16.04 LTS * SECURITY UPDATE: a possible overflow because of an incomplete fix of CVE-2022-39377 - debian/patches/CVE-2023-33204.patch: check an overflow and exit if it be - CVE-2023-33204 Important TuxCare License Agreement CVE-2023-33204 Ubuntu 16.04 LTS * SECURITY UPDATE: Crash when expanding "~" in substitute causes very long text - debian/patches/CVE-2023-2610.patch: Limit the text length to MAXCOL - CVE-2023-2610 Important TuxCare License Agreement CVE-2023-2610 Ubuntu 16.04 LTS * SECURITY UPDATE: NULL pointer dereference in get_register() - debian/patches/CVE-2023-2609.patch: Check "y_array" is not NULL - CVE-2023-2609 Important TuxCare License Agreement CVE-2023-2609 Ubuntu 16.04 LTS * SECURITY UPDATE: possible MITM attack - debian/patches/fixes/CVE-2023-31484.patch: fix missing SSL verification - CVE-2023-31484 Important TuxCare License Agreement CVE-2023-31484 Ubuntu 16.04 LTS * SECURITY UPDATE: Potential denial of service in OBJ_obj2txt translation - debian/patches/CVE-2023-2650.patch: Restrict size that OBJ_obj2txt() will translate to canonical numeric text form is added, based on RFC 2578 - CVE-2023-2650 Important TuxCare License Agreement CVE-2023-2650 Ubuntu 16.04 LTS * SECURITY UPDATE: buffer overflow allows for signature spoofing - debian/patches/CVE-2022-34903.patch: always use a break to terminate the escape detection loop. - CVE-2022-34903 Moderate TuxCare License Agreement CVE-2022-34903 Ubuntu 16.04 LTS * SECURITY UPDATE: fixing the existing CVE-2017-12450 patches that were incorrectly ported from upstream - debian/patches/CVE-2017-12450-1.patch: fix address violation errors - debian/patches/CVE-2017-12450-2.patch: import patches from mainline to fix minor binutils bugs - CVE-2017-12450 * SECURITY UPDATE: heap-based buffer overflow - debian/patches/CVE-2023-25584.patch: lack of bounds checking in vms-alpha.c - CVE-2023-25584 * SECURITY UPDATE: segmentation fault due to uninitialized - debian/patches/CVE-2023-25585.patch: field file_table of struct module is uninitialized - CVE-2023-25585 * SECURITY UPDATE: segmentation fault due to uninitialized - debian/patches/CVE-2023-25588.patch: field `the_bfd` of `asymbol` is uninitialised - CVE-2023-25588 * Fix memory leaks and buffer overflow in vms-alpha.c - debian/patches/vms-alpha-buffer-overflow-fix.patch: fix heap-based buffer overflow in build_module_list in vms-alpha.c - debian/patches/vms-alpha-memory-leaks-fix.patch: fix memory leaks and buffer overflow in vms-alpha.c Moderate TuxCare License Agreement CVE-2023-25588 CVE-2023-25585 CVE-2023-25584 Ubuntu 16.04 LTS * SECURITY UPDATE: More POST-after-PUT confusion - debian/patches/CVE-2023-28322.patch: fix mess in upload/method handling - CVE-2023-28322 Low TuxCare License Agreement CVE-2023-28322 Ubuntu 16.04 LTS * SECURITY UPDATE: Response injection (buffering) during MTA SMTP sending - debian/patches/CVE-2021-38371.patch: Enforce STARTTLS sync point, client side in src/transports/smtp.c - CVE-2021-38371 Important TuxCare License Agreement CVE-2021-38371 Ubuntu 16.04 LTS * SECURITY UPDATE: Integer overflow in _libcap_strdup() - debian/patches/CVE-2023-2603.patch: enhance libcap's internal strdup code to limit the processing of long strings - CVE-2023-2603 Important TuxCare License Agreement CVE-2023-2603 Ubuntu 16.04 LTS * SECURITY UPDATE: mod_lua may denial of service in r:parsebody(0) - debian/patches/CVE-2022-29404.patch: use a liberal default limit for LimitRequestBody of 1GB to prevent a denial of service caused by a malicious lua script request - CVE-2022-29404 Important TuxCare License Agreement CVE-2022-29404 Ubuntu 16.04 LTS * SECURITY UPDATE: a heap buffer overflow vulnerability - debian/patches/CVE-2023-32324.patch: fix _cups_strlcpy() to exit immideately if a length of the source string is zero - CVE-2023-32324 Moderate TuxCare License Agreement CVE-2023-32324 Ubuntu 16.04 LTS * Backport upstream releases 8u372 to 16.04 LTS * CVEs fixed in 8u372: - CVE-2023-21930: Improper connection handling during TLS handshake - CVE-2023-21937: Missing string checks for NULL characters - CVE-2023-21938: Incorrect handling of NULL characters in ProcessBuilder - CVE-2023-21939: Swing HTML parsing issue - CVE-2023-21954: Incorrect enqueue of references in garbage collector - CVE-2023-21967: Certificate validation issue in TLS session negotiation - CVE-2023-21968: Missing check for slash characters in URI-to-path conversion * CVEs fixed in 8u362: - CVE-2023-21830: Improper restrictions in CORBA deserialization - CVE-2023-21843: Soundbank URL remote loading * debian/rules: remove IcedTeaPlugin.so reference (LP: #2016396) * debian/JB-jre-headless.postinst.in: trigger ca-certificates-java after jre is set up * Drop applied jdk8u-get-datetime-string.patch Important TuxCare License Agreement CVE-2023-21968 CVE-2023-21937 CVE-2023-21967 CVE-2023-21938 CVE-2023-21954 CVE-2023-21843 CVE-2023-21930 CVE-2023-21830 CVE-2023-21939 Ubuntu 16.04 LTS * SECURITY UPDATE: undefined behaviors of casting double to size_t in svg, mvg and other coders (recurring bugs of CVE-2022-32546) - debian/patches/CVE-2023-34151.patch: properly cast double to size_t - CVE-2023-34151 Moderate TuxCare License Agreement CVE-2023-34151 Ubuntu 16.04 LTS * SECURITY UPDATE: control characters are not escaped - debian/patches/CVE-2023-2848x.patch: escape control chars - CVE-2023-28486 - CVE-2023-28487 Moderate TuxCare License Agreement CVE-2023-28487 CVE-2023-28486 Ubuntu 16.04 LTS * SECURITY UPDATE: null pointer dereference in ber_memalloc_x() - debian/patches/CVE-2023-2953.patch: added check for strdup failure in ldif_open_url, ldap_url_parsehosts. - CVE-2023-2953 Important TuxCare License Agreement CVE-2023-2953 Ubuntu 16.04 LTS * SECURITY UPDATE: insecure default TLS configuration in HTTP::Tiny module - debian/patches/CVE-2023-31486.patch: add verify_SSL=>1 to HTTP::Tiny default configuration - CVE-2023-31486 Important TuxCare License Agreement CVE-2023-31486 Ubuntu 16.04 LTS * SECURITY UPDATE: urllib.parse space handling CVE-2023-24329 appears unfixed - debian/patches/CVE-2023-24329-2-v2.7.patch: Start stripping C0 control and space chars in `urlsplit` - debian/patches/CVE-2023-24329-v2.7.patch: Fix test_attributes_bad_scheme to check for non-ascii symbol as first character of url - CVE-2023-24329 Important TuxCare License Agreement CVE-2023-24329 Ubuntu 16.04 LTS * SECURITY UPDATE: urllib.parse space handling CVE-2023-24329 appears unfixed - debian/patches/CVE-2023-24329-2.patch: Start stripping C0 control and space chars in `urlsplit` - CVE-2023-24329 Important TuxCare License Agreement CVE-2023-24329 Ubuntu 16.04 LTS * SECURITY UPDATE: use-after-free bug - debian/patches/CVE-2023-34241.patch: Log result of httpGetHostname BEFORE closing the connection - CVE-2023-34241 Important TuxCare License Agreement CVE-2023-34241 Ubuntu 16.04 LTS * SECURITY UPDATE: cache size limit exceeding may cause Denial of Service - debian/patches/CVE-2023-2828.patch: prevents the cache going over the configured memory limit (`max-cache-size`) - CVE-2023-2828 Important TuxCare License Agreement CVE-2023-2828 Ubuntu 16.04 LTS * SECURITY UPDATE: infinite loop vulnerability in mdssvc RPC service for Spotlight - debian/patches/CVE-2023-34966.patch: prevents an infinite loop by preventing subcount less than 1. Add test for addressed CVE. - CVE-2023-34966 Important TuxCare License Agreement CVE-2023-34966 Ubuntu 16.04 LTS * SECURITY UPDATE: helper programs can dlopen()/dlclose() any libraries from /usr/lib - debian/patches/CVE-2023-38408-Ensure-FIDO-PKCS11-libraries-contain-expect.patch: checks libraries before dlopen - debian/patches/CVE-2023-38408-Separate-ssh-pkcs11-helpers-for-each-p11-mo.patch: separate ssh-pkcs11-helpers for each p11 module - CVE-2023-38408 Critical TuxCare License Agreement CVE-2023-38408 Ubuntu 16.04 LTS * New microcode update packages from AMD upstream up to 2023-07-19: + New Microcodes for 17h family: sig 0x00800f82, sig 0x00830f10, sig 0x008a0f00; + New Microcodes for 19h family: sig 0x00a00f10, sig 0x00a00f11, sig 0x00a00f12; + Updated microcodes of 17h family: sig 0x00800f12; * SECURITY UPDATE: ZenBleed issue for some CPUs: - CPUs firmware updated up to 2023-07-19 - CVE-2023-20593 Moderate TuxCare License Agreement CVE-2023-20593 Ubuntu 16.04 LTS * SECURITY UPDATE: Fix buffer overflow - debian/patch/CVE-2018-7409: fix unicode_to_ansi_copy(), don't include NUL-terminator in length in unicode_to_ansi_alloc(), make sure that the error handling doesn't overrun the buffer - CVE-2018-7409 Critical TuxCare License Agreement CVE-2018-7409 Ubuntu 16.04 LTS * SECURITY UPDATE: privilege escalation through runtar SUID program - debian/patches/CVE-2022-37705.patch: filter tar options - CVE-2022-37705 * SECURITY UPDATE: privilege escalation through runtar SUID program - debian/patches/CVE-2023-30577.patch: introduce tar option allow list - CVE-2023-30577 Important TuxCare License Agreement CVE-2023-30577 CVE-2022-37705 Ubuntu 16.04 LTS * SECURITY UPDATE: external entity loading in XML without enabling it - debian/patches/php-7.1-CVE-2023-3823.patch: sanitize libxml2 globals before parsing. - CVE-2023-3823 * SECURITY UPDATE: buffer mismanagement in phar_dir_read() - debian/patches/php-upstream-CVE-2023-3824.patch: fix buffer mismanagement in phar_dir_read() - CVE-2023-3824 Critical TuxCare License Agreement CVE-2023-3824 CVE-2023-3823 Ubuntu 16.04 LTS * SECURITY UPDATE: New microcode data file 2023-08-08 - Updated microcodes: sig 0x00050653, pf_mask 0x97, 2023-03-23, rev 0x1000181, size 36864 sig 0x00050654, pf_mask 0xb7, 2023-03-06, rev 0x2007006, size 44032 sig 0x00050656, pf_mask 0xbf, 2023-03-17, rev 0x4003604, size 38912 sig 0x00050657, pf_mask 0xbf, 2023-03-17, rev 0x5003604, size 38912 sig 0x0005065b, pf_mask 0xbf, 2023-03-21, rev 0x7002703, size 30720 sig 0x000606a6, pf_mask 0x87, 2023-03-30, rev 0xd0003a5, size 297984 sig 0x000706e5, pf_mask 0x80, 2023-02-26, rev 0x00bc, size 113664 sig 0x000806c1, pf_mask 0x80, 2023-02-27, rev 0x00ac, size 111616 sig 0x000806c2, pf_mask 0xc2, 2023-02-27, rev 0x002c, size 98304 sig 0x000806d1, pf_mask 0xc2, 2023-02-27, rev 0x0046, size 103424 sig 0x000806e9, pf_mask 0x10, 2023-02-23, rev 0x00f4, size 105472 sig 0x000806e9, pf_mask 0xc0, 2023-02-22, rev 0x00f4, size 106496 sig 0x000806ea, pf_mask 0xc0, 2023-02-23, rev 0x00f4, size 105472 sig 0x000806eb, pf_mask 0xd0, 2023-02-23, rev 0x00f4, size 106496 sig 0x000806ec, pf_mask 0x94, 2023-02-26, rev 0x00f8, size 106496 sig 0x000806f4, pf_mask 0x10, 2023-05-15, rev 0x2c000271, size 605184 sig 0x000806f4, pf_mask 0x87, 2023-05-09, rev 0x2b0004b1, size 572416 sig 0x000806f5, pf_mask 0x10, 2023-05-15, rev 0x2c000271, size 605184 sig 0x000806f5, pf_mask 0x87, 2023-05-09, rev 0x2b0004b1, size 572416 sig 0x000806f6, pf_mask 0x10, 2023-05-15, rev 0x2c000271, size 605184 sig 0x000806f6, pf_mask 0x87, 2023-05-09, rev 0x2b0004b1, size 572416 sig 0x000806f7, pf_mask 0x87, 2023-05-09, rev 0x2b0004b1, size 572416 sig 0x000806f8, pf_mask 0x10, 2023-05-15, rev 0x2c000271, size 605184 sig 0x000806f8, pf_mask 0x87, 2023-05-09, rev 0x2b0004b1, size 572416 sig 0x00090672, pf_mask 0x07, 2023-04-18, rev 0x002e, size 220160 sig 0x00090675, pf_mask 0x07, 2023-04-18, rev 0x002e, size 220160 sig 0x000906a3, pf_mask 0x80, 2023-04-18, rev 0x042c, size 219136 sig 0x000906a4, pf_mask 0x80, 2023-04-18, rev 0x042c, size 219136 sig 0x000906e9, pf_mask 0x2a, 2023-02-23, rev 0x00f4, size 108544 sig 0x000906ea, pf_mask 0x22, 2023-02-23, rev 0x00f4, size 104448 sig 0x000906eb, pf_mask 0x02, 2023-02-23, rev 0x00f4, size 106496 sig 0x000906ec, pf_mask 0x22, 2023-02-23, rev 0x00f4, size 105472 sig 0x000906ed, pf_mask 0x22, 2023-02-27, rev 0x00fa, size 106496 sig 0x000a0652, pf_mask 0x20, 2023-02-23, rev 0x00f8, size 97280 sig 0x000a0653, pf_mask 0x22, 2023-02-23, rev 0x00f8, size 97280 sig 0x000a0655, pf_mask 0x22, 2023-02-23, rev 0x00f8, size 97280 sig 0x000a0660, pf_mask 0x80, 2023-02-23, rev 0x00f8, size 97280 sig 0x000a0661, pf_mask 0x80, 2023-02-23, rev 0x00f8, size 96256 sig 0x000a0671, pf_mask 0x02, 2023-02-26, rev 0x0059, size 104448 sig 0x000b0671, pf_mask 0x32, 2023-06-06, rev 0x0119, size 210944 sig 0x000b06a2, pf_mask 0xe0, 2023-06-06, rev 0x4119, size 216064 sig 0x000b06a3, pf_mask 0xe0, 2023-06-06, rev 0x4119, size 216064 sig 0x000b06e0, pf_mask 0x11, 2023-04-12, rev 0x0011, size 136192 sig 0x000b06f2, pf_mask 0x07, 2023-04-18, rev 0x002e, size 220160 sig 0x000b06f5, pf_mask 0x07, 2023-04-18, rev 0x002e, size 220160 - CVE-2022-40982, INTEL-SA-00828 - CVE-2023-23908, INTEL-SA-00836 - CVE-2022-41804, INTEL-SA-00837 * source: update symlinks to reflect id of the latest release, 20230808 Moderate TuxCare License Agreement CVE-2022-40982 CVE-2022-41804 CVE-2023-23908 Ubuntu 16.04 LTS * SECURITY UPDATE: Checking excessively long DH keys or parameters may be very slow. Where the key or parameters that are being checked have been obtained from an untrusted source this may lead to a Denial of Service. - debian/patches/CVE-2023-3817.patch: Add a prior check and process only a correct DH keys - CVE-2023-3817 Moderate TuxCare License Agreement CVE-2023-3817 Ubuntu 16.04 LTS * SECURITY UPDATE: unlikely stack overflow vulnerability - debian/patches/CVE-2022-48174.patch: break if a number string containing invalid characters - CVE-2022-48174 Critical TuxCare License Agreement CVE-2022-48174 Ubuntu 16.04 LTS * New microcode update packages from AMD upstream up to 2023-08-08: + New Microcodes for 19h family: sig 0x00a10f11, sig 0x00a10f12, sig 0x00aa0f01, sig 0x00aa0f02; * SECURITY UPDATE: A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result to potential information disclosure. - CPUs firmware updated up to 2023-08-08 - CVE-2023-20569 - CVE-2023-20593 Important TuxCare License Agreement CVE-2023-20593 CVE-2023-20569 Ubuntu 16.04 LTS * SECURITY UPDATE: segmentation fault in objdump.c compare_symbols - debian/patches/CVE-2022-47695.patch: test symbol flags to exclude section and synthetic symbols before attempting to check flavour - CVE-2022-47695 Important TuxCare License Agreement CVE-2021-46174 CVE-2022-44840 CVE-2022-47695 Ubuntu 16.04 LTS * CVE-2022-40433: Segmentation fault in ciMethodBlocks::make_block_at(int) Important TuxCare License Agreement CVE-2022-40433 Ubuntu 16.04 LTS * SECURITY UPDATE: XML vulnerabilities in plist files - debian/patches/CVE-2022-48565.patch: Reject XML entity declarations in plist files - CVE-2022-48565 Critical TuxCare License Agreement CVE-2022-48565 Ubuntu 16.04 LTS * SECURITY UPDATE: DoS in case of malicious entity directives - debian/patches/CVE-2022-48565.patch: Reject XML entity declarations in plist files - CVE-2022-48565 Critical TuxCare License Agreement CVE-2022-48565 Ubuntu 16.04 LTS * SECURITY UPDATE: Use-after-free in do_ecmd() - debian/patches/CVE-2023-4733.patch: Verify oldwin pointer after reset_VIsual() - CVE-2023-4733 * SECURITY UPDATE: Potential OOB write in do_addsub() - debian/patches/CVE-2023-4735.patch: Don't overflow buf2, check size in for loop() - CVE-2023-4735 Important TuxCare License Agreement CVE-2023-4735 CVE-2023-4733 Ubuntu 16.04 LTS * SECURITY UPDATE: Extension script @substitutions@ within quoting allow SQL injection - debian/patches/CVE-2023-39417.patch: filter each substitution through quote_identifier() - CVE-2023-39417 Important TuxCare License Agreement CVE-2023-39417 Ubuntu 16.04 LTS * SECURITY UPDATE: An executable file with some well-known name like zip, gzip, and so on can be started from a current directory during some plugin is opening apropriate file that has a one of the extensions .zip, .gzip, .rb, and etc. This issue is effective only if the PATH environment variable has a ./ (dot) as one element in the path list - debian/patches/CVE-2023-4736.patch: avoid starting executable from a current directory for some plugins - CVE-2023-4736 Important TuxCare License Agreement CVE-2023-4781 CVE-2023-4751 CVE-2023-4736 CVE-2023-4752 Ubuntu 16.04 LTS * SECURITY UPDATE: a heap buffer overflow triggered in display_debug_section() at binutils/readelf.c - debian/patches/CVE-2022-45703.patch: combine sanity checks, calculate element counts, not word counts, fix typo - CVE-2022-45703 Important TuxCare License Agreement CVE-2022-45703 Ubuntu 16.04 LTS * SECURITY UPDATE: An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory. - debian/patches/CVE-2020-22218.patch: doing total_num zero length check. - CVE-2020-22218 Important TuxCare License Agreement CVE-2020-22218 Ubuntu 16.04 LTS * SECURITY UPDATE: uninitialized-heap vulnerability in function tic4x_print_cond in file opcodes/tic4x-dis.c - debian/patches/CVE-2020-35342.patch: Init all of condtable - CVE-2020-35342 * SECURITY UPDATE: a memory consumption issue in get_data function in binutils/nm.c - debian/patches/CVE-2020-19724.patch: Free dyn_syms - CVE-2020-19724 * SECURITY UPDATE: a memory leak when process microblaze-dis.c - debian/patches/CVE-2020-21490.patch: Use strbuf rather than strdup of local temp - CVE-2020-21490 * SECURITY UPDATE: an issue relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service - debian/patches/CVE-2020-19726.patch: Fix parsing a corrupt PE format file - CVE-2020-19726 Important TuxCare License Agreement CVE-2020-35342 CVE-2020-19724 CVE-2020-19726 CVE-2020-21490 Ubuntu 16.04 LTS * SECURITY UPDATE: a memory leak that allows remote attackers to perform a denial of service via the "identify -help" command - debian/patches/CVE-2022-48541.patch: added missing calls to destroy methods - CVE-2022-48541 Important TuxCare License Agreement CVE-2022-48541 Ubuntu 16.04 LTS * SECURITY UPDATE: denial of service - debian/patches/CVE-2022-48571.patch: fix the crash when receiving multi-packet uploads in UDP - CVE-2022-48571 Important TuxCare License Agreement CVE-2022-48571 Ubuntu 16.04 LTS * SECURITY UPDATE: a heap-based buffer overflow - debian/patches/CVE-2018-25009.patch: add additional check to avoid read over the header - CVE-2018-25009 * SECURITY UPDATE: a heap-based buffer overflow - debian/patches/CVE-2018-25010.patch: limit the filter size to not exceed the image dimensions - CVE-2018-25010 * SECURITY UPDATE: fail on multiple image chunks - debian/patches/CVE-2018-25011.patch: only 1 image chunk allowed - CVE-2018-25011 * SECURITY UPDATE: a heap-based buffer overflow - debian/patches/CVE-2018-25013_4.patch: wait for all threads to be done in DecodeRemaining. - CVE-2018-25013 - CVE-2018-25014 * SECURITY UPDATE: a heap-based buffer overflow - debian/patches/CVE-2020-36328.patch: fix invalid check for buffer size - CVE-2020-36328 * SECURITY UPDATE: a use-after-free was found due to a thread being killed too early - debian/patches/CVE-2020-36329.patch: fix for thread race heap-use-after-free - CVE-2020-36329 * SECURITY UPDATE: an out-of-bounds read - debian/patches/CVE-2020-36330.patch: fix riff size checks - CVE-2020-36330 * SECURITY UPDATE: an out-of-bounds read - debian/patches/CVE-2020-36331.patch: validate chunk_size - CVE-2020-36331 * SECURITY UPDATE: a use after free/double free - debian/patches/CVE-2023-1999.patch: clear result->bw on error - CVE-2023-1999 Critical TuxCare License Agreement CVE-2018-25009 CVE-2020-36330 CVE-2018-25011 CVE-2020-36331 CVE-2023-1999 CVE-2018-25010 CVE-2020-36328 CVE-2020-36329 CVE-2018-25014 CVE-2018-25013 Ubuntu 16.04 LTS * SECURITY UPDATE: use-after-free in heapq - debian/patches/CVE-2022-48560.patch: Fix posible crash in heapq with custom comparison operators - CVE-2022-48560 Important TuxCare License Agreement CVE-2022-48560 Ubuntu 16.04 LTS * SECURITY UPDATE: A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly - debian/patches/CVE-2023-3341.patch: Named and rndc do not need a lot of recursion so the depth is set to 10. - CVE-2023-3341 Important TuxCare License Agreement CVE-2023-3341 Ubuntu 16.04 LTS * SECURITY UPDATE: сookie injection with none file - debian/patches/CVE-2023-38546.patch: remove unnecessary struct fields in lib/cookie.c - CVE-2023-38546 Moderate TuxCare License Agreement CVE-2023-38546 Ubuntu 16.04 LTS * SECURITY UPDATE: Multiple security issues - debian/patches/CVE-2023-42114.patch: fix possible OOB read in SPA authenticator - CVE-2023-42114 - debian/patches/CVE-2023-42116.patch: fix possible OOB write in SPA authenticator - CVE-2023-42116 Important TuxCare License Agreement CVE-2023-42116 CVE-2023-42114 Ubuntu 16.04 LTS * SECURITY UPDATE: Constant-time-defeating optimisations issue - debian/patches/CVE-2022-48566.patch: Make compare_digest more constant-time - CVE-2022-48566 Moderate TuxCare License Agreement CVE-2022-48566 Ubuntu 16.04 LTS * SECURITY UPDATE: Constant-time-defeating optimisations issue - debian/patches/CVE-2022-48566.patch: Make compare_digest more constant-time - CVE-2022-48566 Moderate TuxCare License Agreement CVE-2022-48566 Ubuntu 16.04 LTS * SECURITY UPDATE: heap-based buffer overflow - debian/patches/CVE-2023-4504.patch: check for end of buffer if there is an escaped character - CVE-2023-4504 Important TuxCare License Agreement CVE-2023-4504 Ubuntu 16.04 LTS * SECURITY UPDATE: GVariant security issues - debian/patches/CVE-2023-29499-x-CVE-2023-32665/*.patch: fix multiple GVariant serialization issues - CVE-2023-29499, CVE-2023-32611, CVE-2023-32636, CVE-2023-32643, CVE-2023-32665 * debian/patches/fix-g_test_bug-assertion.patch: Fix g_test_bug assertion in gvariant test * debian/patches/libglib2.0-0.symbols: Add new symbols Important TuxCare License Agreement CVE-2023-32636 CVE-2023-32665 CVE-2023-32611 CVE-2023-32643 CVE-2023-29499 Ubuntu 16.04 LTS * SECURITY UPDATE: The HTTP/2 protocol allows a denial of service because request cancellation can reset many streams quickly - debian/patches/CVE-2023-44487.patch: HTTP/2 - per-iteration stream handling limit. - CVE-2023-44487 Important TuxCare License Agreement CVE-2023-44487 Ubuntu 16.04 LTS * SECURITY UPDATE: bgpd/bgp_packet.c can read the initial byte of the ORF header in an ahead-of-stream situation - debian/patches/CVE-2023-41360.patch: don't read the first byte of ORF header if we are ahead of stream. - CVE-2023-41360 * SECURITY UPDATE: bgpd/bgp_packet.c processes NLRIs if the attribute length is zero - debian/patches/CVE-2023-41358.patch: do not process NLRIs if the attribute length is zero - CVE-2023-41358 * Fix documentation pdf generation Critical TuxCare License Agreement CVE-2023-41358 CVE-2023-41360 Ubuntu 16.04 LTS * SECURITY UPDATE: Reject overflows of zip header fields in minizip - debian/patches/CVE-2023-45853.patch: Check length of comment, filename and extra field in zipOpenNewFileInZip4_64 - CVE-2023-45853 Critical TuxCare License Agreement CVE-2023-45853 Ubuntu 16.04 LTS * SECURITY UPDATE: Assign a serial number for messages from the driver - debian/patches/CVE-2023-34969.patch: Fix assertion failure when a monitor is active and a message from the driver cannot be delivered. - CVE-2020-34969 Moderate TuxCare License Agreement CVE-2023-34969 Ubuntu 16.04 LTS * SECURITY UPDATE: a fix of buffer-overflow in trunc_string() - debian/patches/CVE-2023-5344.patch - CVE-2023-5344 * SECURITY UPDATE: segfault in exmode - debian/patches/CVE-2023-5441.patch - CVE-2023-5441 Important TuxCare License Agreement CVE-2023-5441 CVE-2023-5344 Ubuntu 16.04 LTS * SECURITY UPDATE: mod_macro buffer over-read - debian/patches/CVE-2023-31122.patch: use our own strncmp function in mod_macro - CVE-2023-31122 Important TuxCare License Agreement CVE-2023-31122 Ubuntu 16.04 LTS * SECURITY UPDATE: memory leak in stab_demangle_v3_arg - debian/patches/CVE-2022-47007.patch: free dt on failure path - CVE-2022-47007 * SECURITY UPDATE: memory leak in make_tempdir - debian/patches/CVE-2022-47008.patch: free template on all failure paths - CVE-2022-47008 * SECURITY UPDATE: memory leak in pr_function_type - debian/patches/CVE-2022-47010.patch: free "s" on failure path - CVE-2022-47010 * SECURITY UPDATE: memory leak in parse_stab_struct_fields - debian/patches/CVE-2022-47011.patch: free "fields" on failure path - CVE-2022-47011 Moderate TuxCare License Agreement CVE-2022-47010 CVE-2022-47007 CVE-2022-47008 CVE-2022-47011 Ubuntu 16.04 LTS * SECURITY UPDATE: fix an attempt to allocate an unreasonably large amount of memory when parsing a corrupt ELF file - debian/patches/CVE-2022-48063.patch: Check for excessively large sections - CVE-2022-48063 Moderate TuxCare License Agreement CVE-2022-48063 Ubuntu 16.04 LTS * SECURITY UPDATE: a heap-based overflow - debian/patches/CVE-2023-0288.patch: prevent the cursor from moving to line zero - CVE-2023-0288 * SECURITY UPDATE: an out-of-bounds write - debian/patches/CVE-2023-0054.patch: check the return value of vim_regsub() - CVE-2023-0054 Important TuxCare License Agreement CVE-2023-0054 CVE-2023-0288 Ubuntu 16.04 LTS * SECURITY UPDATE: An unauthenticated user may be able to access recently printed documents. The config file /etc/cups/cupsd.conf should be edited manually in case the cups has been already installed in the system: the <Limit Send-Document> and <Limit CUPS-Get-Document> sections should be changed according to the patch. - debian/patches/CVE-2023-32360.patch: Require authentication for CUPS-Get-Document. - CVE-2023-32360 Moderate TuxCare License Agreement CVE-2023-32360 Ubuntu 16.04 LTS * SECURITY UPDATE: possible weak randomness in nonce value - debian/patches/php-7.0-CVE-2023-3247.patch: Fix missing randomness check for SOAP HTTP Digest Moderate TuxCare License Agreement CVE-2023-3247 Ubuntu 16.04 LTS * SECURITY UPDATE: Remote code execution because of improper neutralization of special elements - debian/patches/CVE-2023-42117.patch: fix string_is_ip_address() - CVE-2023-42117 * SECURITY UPDATE: dnsdb out-of-bounds read information disclosure - debian/patches/CVE-2023-42119.patch: harden dnsdb against crafted DNS responses - CVE-2023-42119 Important TuxCare License Agreement CVE-2023-42117 CVE-2023-42119 Ubuntu 16.04 LTS * SECURITY UPDATE: Remote authenticated user can trigger a kadmind crash - debian/patches/CVE-2023-36054.patch: ensure array count consistency in kadm5 RPC - CVE-2023-36054 Moderate TuxCare License Agreement CVE-2023-36054 Ubuntu 16.04 LTS * SECURITY UPDATE: denial of service in HTTP Digest Authentication - debian/patches/CVE-2023-46847.patch: fix stack buffer overflow when parsing Digest Authorization - CVE-2023-46847 Important TuxCare License Agreement CVE-2023-46847 Ubuntu 16.04 LTS * Backport upstream releases 8u382 to 16.04 LTS * CVEs fixed in 8u382: - CVE-2023-22045: OpenJDK incorrectly handled array accesses. - CVE-2023-22049: OpenJDK incorrectly sanitized URIs strings. Low TuxCare License Agreement CVE-2023-22045 CVE-2023-22049 Ubuntu 16.04 LTS * SECURITY UPDATE: Denial of service could be encountered if a DH key or DH parameters check experience long delays. - debian/patches/CVE-2023-3446.patch: Adds check to prevent the testing of an excessively large modulus in DH_check(). - CVE-2023-3446 Moderate TuxCare License Agreement CVE-2023-3446 Ubuntu 16.04 LTS * SECURITY UPDATE: open socket out of the dedicated directory - debian/patches/CVE-2023-3961.patch: prevents a traversal out the dedicated directory - CVE-2023-3961 Critical TuxCare License Agreement CVE-2023-3961 Ubuntu 16.04 LTS * CVE-2020-12321 - linux-firmware: Update firmware file for Intel Bluetooth 9260 - linux-firmware: Update firmware file for Intel Bluetooth 9560 Important TuxCare License Agreement CVE-2020-12321 Ubuntu 16.04 LTS * SECURITY UPDATE: integer overflow in the TLV parser - debian/patches/CVE-2022-3515.patch: detect a possible overflow directly in the TLV parser - CVE-2022-3515 * SECURITY UPDATE: integer overflow in the CRL signature parser - debian/patches/CVE-2022-47629.patch: fix an integer overflow in the CRL signature parser - CVE-2022-47629 * Enable internal tests Critical TuxCare License Agreement CVE-2022-3515 CVE-2022-47629 Ubuntu 16.04 LTS * SECURITY UPDATE: Ability to write almost unlimited amounts of unfiltered data into the process heap - debian/patches/CVE-2023-4016.patch: ps: fix possible buffer overflow in -C option. - CVE-2023-4016 Moderate TuxCare License Agreement CVE-2023-4016 Ubuntu 16.04 LTS * SECURITY UPDATE: TLS handshake bypass - debian/patches/CVE-2023-40217.patch: Check for & avoid the ssl pre-close flaw. Update SSL tests - CVE-2023-40217 Moderate TuxCare License Agreement CVE-2023-40217 Ubuntu 16.04 LTS * SECURITY UPDATE: New microcode data file 2023-11-14 - Updated microcodes: sig 0x000606a6, pf_mask 0x87, 2023-09-01, rev 0xd0003b9, size 299008 sig 0x000606c1, pf_mask 0x10, 2023-09-08, rev 0x1000268, size 290816 sig 0x000706e5, pf_mask 0x80, 2023-09-03, rev 0x00c2, size 113664 sig 0x000806c1, pf_mask 0x80, 2023-09-07, rev 0x00b4, size 111616 sig 0x000806c2, pf_mask 0xc2, 2023-09-07, rev 0x0034, size 98304 sig 0x000806d1, pf_mask 0xc2, 2023-09-07, rev 0x004e, size 104448 sig 0x000806f4, pf_mask 0x10, 2023-06-26, rev 0x2c000290, size 605184 sig 0x000806f4, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416 sig 0x000806f5, pf_mask 0x10, 2023-06-26, rev 0x2c000290, size 605184 sig 0x000806f5, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416 sig 0x000806f6, pf_mask 0x10, 2023-06-26, rev 0x2c000290, size 605184 sig 0x000806f6, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416 sig 0x000806f7, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416 sig 0x000806f8, pf_mask 0x10, 2023-06-26, rev 0x2c000290, size 605184 sig 0x000806f8, pf_mask 0x87, 2023-06-16, rev 0x2b0004d0, size 572416 sig 0x00090672, pf_mask 0x07, 2023-06-07, rev 0x0032, size 222208 sig 0x00090675, pf_mask 0x07, 2023-06-07, rev 0x0032, size 222208 sig 0x000906a3, pf_mask 0x80, 2023-06-07, rev 0x0430, size 220160 sig 0x000906a4, pf_mask 0x40, 2023-05-05, rev 0x0005, size 117760 sig 0x000906a4, pf_mask 0x80, 2023-06-07, rev 0x0430, size 220160 sig 0x000a0671, pf_mask 0x02, 2023-09-03, rev 0x005d, size 104448 sig 0x000b0671, pf_mask 0x32, 2023-08-29, rev 0x011d, size 210944 sig 0x000b06a2, pf_mask 0xe0, 2023-08-30, rev 0x411c, size 216064 sig 0x000b06a3, pf_mask 0xe0, 2023-08-30, rev 0x411c, size 216064 sig 0x000b06e0, pf_mask 0x11, 2023-06-26, rev 0x0012, size 136192 sig 0x000b06f2, pf_mask 0x07, 2023-06-07, rev 0x0032, size 222208 sig 0x000b06f5, pf_mask 0x07, 2023-06-07, rev 0x0032, size 222208 - CVE-2023-23583, INTEL-SA-00950 * source: update symlinks to reflect id of the latest release, 20231114 Important TuxCare License Agreement CVE-2023-23583 Ubuntu 16.04 LTS * SECURITY UPDATE: Denial of Service attack against Squid’s Gopher gateway due to a NULL pointer dereference bug - debian/patches/CVE-2023-46728.patch: remove support for Gopher protocol - CVE-2023-46728 Important TuxCare License Agreement CVE-2023-46728 Ubuntu 16.04 LTS * SECURITY UPDATE: Posible crash in heapq with custom comparison operators - debian/patches/CVE-2022-48560.patch: Disallow releasing heap items during a comparison callback - CVE-2022-48560 Important TuxCare License Agreement CVE-2022-48560 Ubuntu 16.04 LTS * SECURITY UPDATE: Update to 5.7.44 to fix security issues - CVE-2023-22053, CVE-2023-22084, CVE-2023-22015, CVE-2023-22026, CVE-2023-22028 Moderate TuxCare License Agreement CVE-2023-22028 CVE-2023-22026 CVE-2023-22015 CVE-2023-22084 CVE-2023-22053 Ubuntu 16.04 LTS * SECURITY UPDATE: Accepting '#' as part of the URI component might allow remote attackers to obtain sensitive information or have unspecified other impact - debian/patches/CVE-2023-45539.patch: h1: do not accept '#' as part of the URI component; h2: reject more chars from the :path pseudo header - CVE-2023-45539 Important TuxCare License Agreement CVE-2023-45539 Ubuntu 16.04 LTS * SECURITY UPDATE: Buffer OverRead in RFC 1123 date/time - debian/patches/CVE-2023-49285.patch: Fix date parsing in RFC 1123 - CVE-2023-49285 * SECURITY UPDATE: Denial of Service attack against Helper process management - debian/patches/CVE-2023-49286.patch: Add exit without asserting when helper process startup fails - CVE-2023-49286 Important TuxCare License Agreement CVE-2023-49285 CVE-2023-49286 Ubuntu 16.04 LTS * SECURITY UPDATE: potential DoS attack via CPU and RAM exhaustion - debian/patches/CVE-2022-48564.patch: Improve validation of Plist files that prevent DoS when processing malformed Apple Property List files in binary format - CVE-2022-48564 * SECURITY UPDATE: TLS handshake bypass - debian/patches/CVE-2023-40217.patch: Check for & avoid the ssl pre-close flaw. Update SSL tests - CVE-2023-40217 Moderate TuxCare License Agreement CVE-2023-40217 CVE-2022-48564 Ubuntu 16.04 LTS * SECURITY UPDATE: possible OS command injection - debian/patches/CVE-2023-51385.patch: ban user/hostnames with most shell metacharacters in command line - CVE-2023-51385 Critical TuxCare License Agreement CVE-2023-51385 Ubuntu 16.04 LTS * Backport upstream releases 8u392 to 16.04 LTS * CVEs fixed in 8u392: - CVE-2023-22067: IOR deserialization issue in CORBA - CVE-2023-22081: Certificate path validation issue * Drop applied CVE-2022-40433.patch (changes are already in the sources) Moderate TuxCare License Agreement CVE-2023-22081 CVE-2023-22067 Ubuntu 16.04 LTS * SECURITY UPDATE: use-after-free in win_close() - debian/patches/CVE-2023-48231.patch: check window is valid, before accessing it - CVE-2023-48231 * SECURITY UPDATE: overflow with count for :s command - debian/patches/CVE-2023-48233.patch: abort the :s command if the count is too large - CVE-2023-48233 * SECURITY UPDATE: overflow in nv_z_get_count - debian/patches/CVE-2023-48234.patch: break out, if count is too large - CVE-2023-48234 * SECURITY UPDATE: overflow in ex address parsing - debian/patches/CVE-2023-48235.patch: verify that lnum is positive, before substracting from LONG_MAX - CVE-2023-48235 * SECURITY UPDATE: overflow in get_number - debian/patches/CVE-2023-48236.patch: return 0 when the count gets too large - CVE-2023-48236 * SECURITY UPDATE: overflow in shift_line - debian/patches/CVE-2023-48237.patch: allow a max indent of INT_MAX - CVE-2023-48237 * SECURITY UPDATE: overflow in :history - debian/patches/CVE-2023-46246.patch: check that value fits into int - CVE-2023-46246 * SECURITY UPDATE: recursive command line loop may cause a crash - debian/patches/CVE-2022-1771.patch: limit recursion of getcmdline() - CVE-2022-1771 Moderate TuxCare License Agreement CVE-2023-48237 CVE-2023-48235 CVE-2023-48234 CVE-2023-48231 CVE-2023-48236 CVE-2023-48233 CVE-2023-46246 CVE-2022-1771 Ubuntu 16.04 LTS * SECURITY UPDATE: Denial of Service in HTTP Request parsing - debian/patches/CVE-2023-50269.patch: Limit the number of allowed X-Forwarded-For hops - CVE-2023-50269 Important TuxCare License Agreement CVE-2023-50269 Ubuntu 16.04 LTS * SECURITY UPDATE: denial of service attack - debian/patches/CVE-2023-39804.patch: Fix handling of extended header prefixes. - CVE-2023-39804.patch Low TuxCare License Agreement CVE-2023-39804 Ubuntu 16.04 LTS * SECURITY UPDATE: it's possible to remove the initial messages on the secure channel without causing a MAC failure - debian/patches/CVE-2023-48795.patch: implement "strict key exchange" in ssh and sshd - CVE-2023-48795 Moderate TuxCare License Agreement CVE-2023-48795 Ubuntu 16.04 LTS * SECURITY UPDATE: A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. - debian/patches/CVE-2023-5869.patch: Detect integer overflow while computing new array dimensions. - CVE-2023-5869 Important TuxCare License Agreement CVE-2023-5869 Ubuntu 16.04 LTS * SECURITY UPDATE: Use-after-free in xmlValidatePopElement() - debian/patches/CVE-2024-25062.patch: Fix use-after-free if XML Reader when used with DTD validation and XInclude expansion - CVE-2024-25062 Important TuxCare License Agreement CVE-2024-25062 Ubuntu 16.04 LTS * SECURITY UPDATE: KeyTrap denial of service vulnerability - debian/patches/CVE-2023-50387-20230-50868.patch: Fix DNSSEC verification complexity issue by updating verification function signatures. - debian/patches/CVE-2023-50387-fix-1.patch: Allow the original CVE-2023-50387 patch to work if multiple threads support is disabled. - debian/patches/CVE-2023-50387-fix-2.patch: Fix a leak. - CVE-2023-50387 - CVE-2023-50868 Important TuxCare License Agreement CVE-2023-50868 CVE-2023-50387 Ubuntu 16.04 LTS * SECURITY UPDATE: SMTP smuggling because of <LF>.<CR><LF> support - debian/patches/CVE-2023-51766.patch: reject "dot, LF" as ending data phase. Testcase for "smtp smuggling". - CVE-2023-51766 Moderate TuxCare License Agreement CVE-2023-51766 Ubuntu 16.04 LTS * SECURITY UPDATE: A flaw fixed when the getaddrinfo function may access memory that has been freed, resulting in an application crash - debian/patches/any/CVE-2023-4806.patch: fix the flaw - CVE-2023-4806 * SECURITY UPDATE: In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash - debian/patches/any/CVE-2023-4813.patch: fix the flaw - CVE-2023-4813 Moderate TuxCare License Agreement CVE-2023-4806 CVE-2023-4813 Ubuntu 16.04 LTS * SECURITY UPDATE: ProxyCommand/ProxyJump features allow injection of malicious code through hostname - debian/patches/CVE-2023-6004-pre1.patch: move common parser functions to config_parser.c - debian/patches/CVE-2023-6004-pre2.patch: prevent possible segmentation fault - debian/patches/CVE-2023-6004-02.patch: allow multiple '@' in usernames - debian/patches/CVE-2023-6004-03.patch: simplify the hostname parsing in ssh_options_set - debian/patches/CVE-2023-6004-04.patch: add function to check allowed characters of a hostname - debian/patches/CVE-2023-6004-05.patch: add test for ssh_check_hostname_syntax - debian/patches/CVE-2023-6004-06.patch: check for valid syntax of a hostname if it is a domain name - debian/patches/CVE-2023-6004-07.patch: add test for proxycommand injection - debian/patches/CVE-2023-6004-08.patch: add test for ssh_is_ipaddr - debian/patches/CVE-2023-6004-09.patch: add ipv6 link-local check for an ip address - debian/patches/CVE-2023-6004-10.patch: add tests for ipv6 link-local - debian/patches/CVE-2023-6004-regression1.patch: fix regression in IPv6 addresses in hostname parsing - debian/patches/CVE-2023-6004-regression2.patch: increase test coverage for IPv6 address parsing as hostnames - CVE-2023-6004 * SECURITY UPDATE: Unchecked return values for digests may cause DoS - debian/patches/CVE-2023-6918-1.patch: systematically check return values when calculating digests - debian/patches/CVE-2023-6918-2.patch: detect context init failures - debian/patches/CVE-2023-6918-3.patch: code coverage for ssh_get_pubkey_hash() - CVE-2023-6918 Moderate TuxCare License Agreement CVE-2023-6918 Ubuntu 16.04 LTS * SECURITY UPDATE: Heap use-after-free flaw in coders/bmp.c in ImageMagick - debian/patches/CVE-2023-5341.patch: Check BMP file size to fix ImproperImageHeader caused by poc provided by Hardik Shah of Vehere (Dawn Treaders team) - CVE-2023-5341 Moderate TuxCare License Agreement CVE-2023-5341 Ubuntu 16.04 LTS * SECURITY UPDATE: Denial of service could be encountered when generating excessively long DH keys or checking excessively long DH keys or parameters. - debian/patches/CVE-2023-5678.patch: Make DH_check_pub_key() and DH_generate_key() safer yet. - CVE-2023-5678. Moderate TuxCare License Agreement CVE-2023-5678 Ubuntu 16.04 LTS * SECURITY UPDATE: Denial of Service attack against HTTP header parsing - debian/patches/CVE-2024-25617.patch: Improve handling of expanding HTTP header values - CVE-2024-25617 Important TuxCare License Agreement CVE-2024-25617 Ubuntu 16.04 LTS * SECURITY UPDATE: stack-buffer-overflow in option callback func - debian/patches/CVE-2024-22667.patch: pass size of errbuf down the call stack, use snprintf() instead of sprintf() - CVE-2024-22667 Important TuxCare License Agreement CVE-2024-22667 Ubuntu 16.04 LTS * SECURITY UPDATE: Improper cookie domain verification allows malicious HTTP server to set 'super cookies' in package - debian/control: Build-Depends: add libpsl-dev - debian/patches/CVE-2023-46218.patch: Lowercase domain names before PSL checks to ensure proper comparison - CVE-2023-46218 Moderate TuxCare License Agreement CVE-2023-46218 Ubuntu 16.04 LTS * SECURITY UPDATE: Potential Denial of Service via processing maliciously formatted PKCS12 file - debian/patches/CVE-2024-0727.patch: Fix decode error causing NULL pointer in PKCS12_unpack_p7data, PKCS12_unpack_p7encdata, PKCS12_unpack_authsafes, SMIME_write_PKCS7, pkcs12_gen_mac and newpass_p12 functions - CVE-2024-0727 Moderate TuxCare License Agreement CVE-2024-0727 Ubuntu 16.04 LTS * SECURITY UPDATE: Execution of arbitrary SQL functions as the command issuer because of late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY - debian/patches/CVE-2024-0985.patch: run REFRESH MATERIALIZED VIEW CONCURRENTLY in right security context - CVE-2024-0985 Important TuxCare License Agreement CVE-2024-0985 Ubuntu 16.04 LTS * SECURITY UPDATE: denial of service (blocked login process) via mkfifo - debian/patches-applied/CVE-2024-22365.patch: pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations - CVE-2024-22365 Moderate TuxCare License Agreement CVE-2024-22365 Ubuntu 16.04 LTS * SECURITY UPDATE: http2: push headers better cleanup - debian/patches/CVE-2024-2398.patch: provide common cleanup method for push headers - CVE-2024-2398 Important TuxCare License Agreement CVE-2024-2398 Ubuntu 16.04 LTS * SECURITY UPDATE: Fix incompatible pointer-to-integer types - debian/patch/CVE-2024-1013.patch: PostgreSQL driver: Fix incompatible pointer-to-integer types. This change is required to avoid a build failure with GCC 14. - CVE-2024-1013 Important TuxCare License Agreement CVE-2024-1013 Ubuntu 16.04 LTS * SECURITY UPDATE: shell-quote filenames when invoking LESSCLOSE. - debian/patches/CVE-2022-48624.patch: Fix close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE. - CVE-2022-48624 Important TuxCare License Agreement CVE-2022-48624 Ubuntu 16.04 LTS * SECURITY UPDATE: improper handling of user input vulnerability - debian/patches/CVE-2024-3096.patch: Disallow null character in bcrypt password to prevent password_verify from erroneously returning true - CVE-2024-3096 Moderate TuxCare License Agreement CVE-2024-3096 Ubuntu 16.04 LTS * SECURITY UPDATE: possible insecure cookie abuse - debian/patches/php-7.3-CVE-2024-2756.patch: fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix - CVE-2024-2756 Moderate TuxCare License Agreement CVE-2024-2756 Ubuntu 16.04 LTS * SECURITY UPDATE: quoting is mishandled in filename.c. - debian/patches/CVE-2024-32487.patch: Fix bug when viewing a file whose name contains a newline. - CVE-2024-32487 Important TuxCare License Agreement CVE-2024-32487 Ubuntu 16.04 LTS * SECURITY UPDATE: Denial of Service attack against HTTP header parsing - debian/patches/CVE-2023-49288.patch: fix unintentional freeing in TRACE request handler - CVE-2023-49288 Important TuxCare License Agreement CVE-2023-49288 Ubuntu 16.04 LTS * SECURITY UPDATE: buffer overflow in iconv() function when converting to ISO-2022-CN-EXT character set - debian/patches/any/CVE-2024-2961.patch: fix out-of-bound writes in ISO-2022-CN-EXT escape sequences - CVE-2024-2961 Important TuxCare License Agreement CVE-2024-2961 Ubuntu 16.04 LTS * SECURITY UPDATE: Ability to write almost unlimited amounts of unfiltered data into the process heap - debian/patches/CVE-2023-4016-2.patch: ps: extended fix of the CVE-2023-4016 - fix possible buffer overflow in -C option. - CVE-2023-4016 Low TuxCare License Agreement CVE-2023-4016 Ubuntu 16.04 LTS * SECURITY UPDATE: filter bypass in filter_var FILTER_VALIDATE_URL - debian/patches/CVE-2024-5458.patch: Fix validation of ipv6 hostname to check all conditions and extract condition to separate function - CVE-2024-5458 Moderate TuxCare License Agreement CVE-2024-5458 Ubuntu 16.04 LTS * SECURITY UPDATE: tack-based buffer overflow in netgroup cache - debian/patches/any/CVE-2024-33599.patch: fix buffer overflow in netgroup cache - CVE-2024-33599 Important TuxCare License Agreement CVE-2024-33599 Ubuntu 16.04 LTS * SECURITY UPDATE: eval() on content received via HTTP in test suite - debian/patches/CVE-2020-27619.patch: No longer call eval() on content received via HTTP in the CJK codec tests - CVE-2020-27619 Critical TuxCare License Agreement CVE-2020-27619 Ubuntu 16.04 LTS * SECURITY UPDATE: stack buffer overflow in ada_decode - debian/patches/CVE-2023-39128.patch: Fix stack buffer overflow - CVE-2023-39128 * SECURITY UPDATE: stack buffer overflow - debian/patches/CVE-2023-39129.patch: Verify COFF symbol stringtab offset and fix problem with 32bit architecture build - CVE-2023-39129 * SECURITY UPDATE: heap buffer overflow - debian/patches/CVE-2023-39130.patch: bfd IO functions give warnings - CVE-2023-39130 Moderate TuxCare License Agreement CVE-2023-39130 CVE-2023-39128 CVE-2023-39129 Ubuntu 16.04 LTS * SECURITY UPDATE: New microcode data file 2024-05-14 - New microcodes: sig 0x000a06a4, pf_mask 0xe6, 2024-01-03, rev 0x001c, size 136192 sig 0x000b06a8, pf_mask 0xe0, 2023-12-07, rev 0x4121, size 220160 sig 0x000c06f1, pf_mask 0x87, 2024-02-05, rev 0x21000230, size 552960 sig 0x000c06f2, pf_mask 0x87, 2024-02-05, rev 0x21000230, size 552960 - Updated microcodes: sig 0x00050653, pf_mask 0x97, 2023-07-28, rev 0x1000191, size 36864 sig 0x00050656, pf_mask 0xbf, 2023-07-28, rev 0x4003605, size 38912 sig 0x00050657, pf_mask 0xbf, 2023-07-28, rev 0x5003605, size 37888 sig 0x0005065b, pf_mask 0xbf, 2023-08-03, rev 0x7002802, size 30720 sig 0x00050665, pf_mask 0x10, 2023-08-03, rev 0xe000015, size 23552 sig 0x000506f1, pf_mask 0x01, 2023-10-05, rev 0x003e, size 11264 sig 0x000606a6, pf_mask 0x87, 2023-09-14, rev 0xd0003d1, size 307200 sig 0x000606c1, pf_mask 0x10, 2023-12-05, rev 0x1000290, size 299008 sig 0x000706a1, pf_mask 0x01, 2023-08-25, rev 0x0040, size 76800 sig 0x000706a8, pf_mask 0x01, 2023-08-25, rev 0x0024, size 76800 sig 0x000706e5, pf_mask 0x80, 2023-09-14, rev 0x00c4, size 114688 sig 0x000806c1, pf_mask 0x80, 2023-09-13, rev 0x00b6, size 111616 sig 0x000806c2, pf_mask 0xc2, 2023-09-13, rev 0x0036, size 98304 sig 0x000806d1, pf_mask 0xc2, 2023-09-13, rev 0x0050, size 104448 sig 0x000806ec, pf_mask 0x94, 2023-07-16, rev 0x00fa, size 106496 sig 0x000806f4, pf_mask 0x10, 2024-02-05, rev 0x2c000390, size 614400 sig 0x000806f4, pf_mask 0x87, 2024-02-05, rev 0x2b0005c0, size 581632 sig 0x000806f5, pf_mask 0x10, 2024-02-05, rev 0x2c000390, size 614400 sig 0x000806f5, pf_mask 0x87, 2024-02-05, rev 0x2b0005c0, size 581632 sig 0x000806f6, pf_mask 0x10, 2024-02-05, rev 0x2c000390, size 614400 sig 0x000806f6, pf_mask 0x87, 2024-02-05, rev 0x2b0005c0, size 581632 sig 0x000806f7, pf_mask 0x87, 2024-02-05, rev 0x2b0005c0, size 581632 sig 0x000806f8, pf_mask 0x10, 2024-02-05, rev 0x2c000390, size 614400 sig 0x000806f8, pf_mask 0x87, 2024-02-05, rev 0x2b0005c0, size 581632 sig 0x00090661, pf_mask 0x01, 2023-09-26, rev 0x0019, size 20480 sig 0x00090672, pf_mask 0x07, 2023-12-05, rev 0x0035, size 224256 sig 0x00090675, pf_mask 0x07, 2023-12-05, rev 0x0035, size 224256 sig 0x000906a3, pf_mask 0x80, 2023-12-05, rev 0x0433, size 222208 sig 0x000906a4, pf_mask 0x40, 2023-12-07, rev 0x0007, size 119808 sig 0x000906a4, pf_mask 0x80, 2023-12-05, rev 0x0433, size 222208 sig 0x000906c0, pf_mask 0x01, 2023-09-26, rev 0x24000026, size 20480 sig 0x000906e9, pf_mask 0x2a, 2023-09-28, rev 0x00f8, size 108544 sig 0x000906ea, pf_mask 0x22, 2023-07-26, rev 0x00f6, size 105472 sig 0x000906ec, pf_mask 0x22, 2023-07-26, rev 0x00f6, size 106496 sig 0x000906ed, pf_mask 0x22, 2023-07-27, rev 0x00fc, size 106496 sig 0x000a0652, pf_mask 0x20, 2023-07-16, rev 0x00fa, size 97280 sig 0x000a0653, pf_mask 0x22, 2023-07-16, rev 0x00fa, size 97280 sig 0x000a0655, pf_mask 0x22, 2023-07-16, rev 0x00fa, size 97280 sig 0x000a0660, pf_mask 0x80, 2023-07-16, rev 0x00fa, size 97280 sig 0x000a0661, pf_mask 0x80, 2023-07-16, rev 0x00fa, size 96256 sig 0x000a0671, pf_mask 0x02, 2023-09-14, rev 0x005e, size 108544 sig 0x000b0671, pf_mask 0x32, 2024-01-25, rev 0x0123, size 215040 sig 0x000b06a2, pf_mask 0xe0, 2023-12-07, rev 0x4121, size 220160 sig 0x000b06a3, pf_mask 0xe0, 2023-12-07, rev 0x4121, size 220160 sig 0x000b06e0, pf_mask 0x11, 2023-12-07, rev 0x0017, size 138240 sig 0x000b06f2, pf_mask 0x07, 2023-12-05, rev 0x0035, size 224256 sig 0x000b06f5, pf_mask 0x07, 2023-12-05, rev 0x0035, size 224256 * source: update symlinks to reflect id of the latest release, 20240514 Important TuxCare License Agreement CVE-2023-45745 CVE-2023-45733 CVE-2023-46103 CVE-2023-39368 CVE-2023-47855 CVE-2023-22655 CVE-2023-28746 CVE-2023-38575 CVE-2023-43490 Ubuntu 16.04 LTS * SECURITY UPDATE: Regular Expression Denial of Service - debian/patches/CVE-2021-3733.patch: Fix ReDoS vulnerability in AbstractBasicAuthHandler class of Lib/urllib2.py - CVE-2021-3733 Moderate TuxCare License Agreement CVE-2021-3733 Ubuntu 16.04 LTS * SECURITY UPDATE: Insecure behavior with semicolons in URI userinfo - debian/patches/CVE-2024-38428.patch: Properly re-implement userinfo parsing (rfc2396) to fix outdated RFC implementation - CVE-2024-38428 Critical TuxCare License Agreement CVE-2024-38428 Ubuntu 16.04 LTS * SECURITY UPDATE: exploit “quoted-overlap” zip-bombs with a high compression ratio - debian/patches/CVE-2024-0450.patch: Protect zipfile from "quoted-overlap" zipbomb - CVE-2024-0450 * replace TLSv1 by TLSv1.2 since TLSv1 is not supported in the following tests: - Lib/test/test_ftplib.py - Lib/test/test_httplib.py - Lib/test/test_poplib.py - Lib/test/test_ssl.py - Lib/test/test_urllib2_localnet.py Moderate TuxCare License Agreement CVE-2024-0450 Ubuntu 16.04 LTS * SECURITY UPDATE: still vulnerable to CVE-2020-9484 with a configuration edge case - debian/patches/CVE-2021-25329.patch: use java.nio.file.Path for consistent sub-directory checking - CVE-2021-25329 * SECURITY UPDATE: time-of-check to time-of-use vulnerability introduced by the CVE-2020-9484 fix - debian/patches/CVE-2022-23181.patch: make calculation of session storage location more robust - CVE-2022-23181 * Internal tests: - debian/rules: fail the build if some of the tests have failed - debian/patches/skipping-tests-incompatible-with-firewall.patch: backport from ubuntu18 els - debian/patches/dont-test-unsupported-ciphers.patch: skip testing of unsupported ciphers - debian/patches/skip-tests-error-and-unstable.patch: skip tests that fail with error and unstable ones Important TuxCare License Agreement CVE-2022-23181 CVE-2021-25329 Ubuntu 16.04 LTS * SECURITY UPDATE: null pointer dereference in mod_proxy - debian/patches/CVE-2024-38477.patch: prevent crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38477 Critical TuxCare License Agreement CVE-2024-38475 CVE-2024-38477 CVE-2024-38474 CVE-2024-40725 CVE-2023-38709 CVE-2024-27316 CVE-2024-24795 CVE-2024-39884 CVE-2024-38476 Ubuntu 16.04 LTS * SECURITY UPDATE: Memory Corruption via Out-of-bounds Write in ESI variables assignment - debian/patches/CVE-2024-37894.patch: fix incorrect type declaration in TrieNode.cc to prevent potential type conversion issues - CVE-2024-37894 Moderate TuxCare License Agreement CVE-2024-37894 Ubuntu 16.04 LTS * SECURITY UPDATE: Client can exhaust resolver CPU resources by sending a stream of SIG(0) signed requests - debian/patches/CVE-2024-1975.patch: Remove support for SIG(0) message verification. - CVE-2024-1975 Important TuxCare License Agreement CVE-2024-1975 Ubuntu 16.04 LTS * SECURITY UPDATE: Potential arbitrary code execution - debian/patches/CVE-2024-32004.patch: Enhance ownership checks to detect dubious local repositories during cloning, warning users of potential risks. This change affects multiple Git commands to improve overall security. - CVE-2024-32004 Important TuxCare License Agreement CVE-2024-32004 Ubuntu 16.04 LTS * SECURITY UPDATE: Heap Buffer Overflow in ASN.1 Parser - debian/patches/CVE-2024-7264.patch: Clean up GTime2str function to handle optional fractional seconds properly. Fix GTime2str() issues and add unit tests to verify correct behaviour - CVE-2024-7264 Moderate TuxCare License Agreement CVE-2024-7264 Ubuntu 16.04 LTS * SECURITY UPDATE: Avoid integer overflow on 32 bits systems - debian/patches/CVE-2024-45491.patch: fix dtdCopy in xmlparse.c - CVE-2024-45491 * SECURITY UPDATE: Avoid integer overflow on 32 bits systems - debian/patches/CVE-2024-45492.patch: fix nextScaffoldPart in xmlparse.c - CVE-2024-45492 Critical TuxCare License Agreement CVE-2024-45490 CVE-2024-45491 CVE-2024-45492 Ubuntu 16.04 LTS * SECURITY UPDATE: fix GSS vulnerabilities - debian/patches/CVE-2021-37370.patch: prevent modification of Extra Count field in GSS krb5 wrap CFX wrap token to avoid appearing truncated to application header - debian/patches/CVE-2021-37371.patch: fix invalid memory reads during GSS message token handling - CVE-2024-37370 - CVE-2024-37371 Critical TuxCare License Agreement CVE-2024-37370 CVE-2024-37371 Ubuntu 16.04 LTS * SECURITY UPDATE: Regular expressions that allowed excessive backtracking during tarfile - debian/patches/CVE-2024-6232.patch: fix regexp handling in tarfile - CVE-2024-6232 * SECURITY UPDATE: Algorithm with quadratic complexity using excess CPU resources while parsing the cookie value - debian/patches/CVE-2024-7592.patch: fix algorithm with quadratic complexity - CVE-2024-7592 Important TuxCare License Agreement CVE-2024-7592 CVE-2024-6232 Ubuntu 16.04 LTS * SECURITY UPDATE: allocation of resources without limits or throttling - debian/patches/CVE-2024-1737-1: introduced new configurable limits that prevent the loading (into zones or into cache) of DNS resource records (RRs) that exceed them - debian/patches/CVE-2024-1737-2: add environment variable DNS_RDATASET_MAX_RECORDS, DNS_RBTDB_MAX_RTYPES to override hardcoded limits DDNS_RDATASET_MAX_RECORDS and DDNS_RBTDB_MAX_RTYPES. Add masterformat tests for testing RRsets. Important TuxCare License Agreement CVE-2024-1737 Ubuntu 16.04 LTS * SECURITY UPDATE: TOCTOU race condition in pg_dump - debian/patches/CVE-2024-7348.patch: Fix TOCTOU race condition in pg_dump. - CVE-2024-7348 Important TuxCare License Agreement CVE-2024-7348 Ubuntu 16.04 LTS * New microcode update packages from AMD upstream up to 2024-08-11: - Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F10(ver:0x0A00107A), cpuid:0x00A10F12(ver:0x0A101248), cpuid:0x00AA0F02(ver:0x0AA00215), cpuid:0x00A00F12(ver:0x0A001238), cpuid:0x00A10F11(ver:0x0A101148), cpuid:0x00A00F11(ver:0x0A0011D5); - Update AMD CPU microcode for processor family 0x17: cpuid:0x00800F12(ver:0x0800126F), cpuid:0x00830F10(ver:0x0830107C); * SECURITY UPDATE: Fix improper validation in a model-specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution. - CVE-2023-31315 Important TuxCare License Agreement CVE-2023-31315 Ubuntu 16.04 LTS * New microcode update packages from upstream up to 2024-08-13: - Updated microcodes: sig 0x00050657, pf_mask 0xbf, 2024-03-01, rev 0x5003707, size 39936 sig 0x0005065b, pf_mask 0xbf, 2024-04-01, rev 0x7002904, size 30720 sig 0x000606a6, pf_mask 0x87, 2024-04-01, rev 0xd0003e7, size 308224 sig 0x000606c1, pf_mask 0x10, 2024-04-03, rev 0x10002b0, size 300032 sig 0x000706a1, pf_mask 0x01, 2024-04-19, rev 0x0042, size 76800 sig 0x000706e5, pf_mask 0x80, 2024-02-15, rev 0x00c6, size 114688 sig 0x000806c1, pf_mask 0x80, 2024-02-15, rev 0x00b8, size 112640 sig 0x000806c2, pf_mask 0xc2, 2024-02-15, rev 0x0038, size 99328 sig 0x000806d1, pf_mask 0xc2, 2024-02-15, rev 0x0052, size 104448 sig 0x000806e9, pf_mask 0x10, 2024-02-01, rev 0x00f6, size 106496 sig 0x000806e9, pf_mask 0xc0, 2024-02-01, rev 0x00f6, size 106496 sig 0x000806ea, pf_mask 0xc0, 2024-02-01, rev 0x00f6, size 105472 sig 0x000806eb, pf_mask 0xd0, 2024-02-01, rev 0x00f6, size 106496 sig 0x000806ec, pf_mask 0x94, 2024-02-05, rev 0x00fc, size 106496 sig 0x00090661, pf_mask 0x01, 2024-04-05, rev 0x001a, size 20480 sig 0x000906ea, pf_mask 0x22, 2024-02-01, rev 0x00f8, size 105472 sig 0x000906eb, pf_mask 0x02, 2024-02-01, rev 0x00f6, size 106496 sig 0x000906ec, pf_mask 0x22, 2024-02-01, rev 0x00f8, size 106496 sig 0x000906ed, pf_mask 0x22, 2024-02-05, rev 0x0100, size 106496 sig 0x000a0652, pf_mask 0x20, 2024-02-01, rev 0x00fc, size 97280 sig 0x000a0653, pf_mask 0x22, 2024-02-01, rev 0x00fc, size 98304 sig 0x000a0655, pf_mask 0x22, 2024-02-01, rev 0x00fc, size 97280 sig 0x000a0660, pf_mask 0x80, 2024-02-01, rev 0x00fe, size 97280 sig 0x000a0661, pf_mask 0x80, 2024-02-01, rev 0x00fc, size 97280 sig 0x000a0671, pf_mask 0x02, 2024-03-07, rev 0x0062, size 108544 sig 0x000a06a4, pf_mask 0xe6, 2024-04-15, rev 0x001e, size 137216 * SECURITY UPDATE: - CVE-2024-24980, INTEL-SA-01100 - CVE-2024-25939, INTEL-SA-01118 - CVE-2023-42667, INTEL-SA-01038 - CVE-2023-49141, INTEL-SA-01046 - CVE-2024-24853, INTEL-SA-01083 Low TuxCare License Agreement CVE-2023-49141 CVE-2024-24980 CVE-2024-25939 CVE-2024-24853 CVE-2023-42667 Ubuntu 16.04 LTS * New microcode update packages from upstream up to 2024-09-10: - Updated microcodes: sig 0x00090672, pf_mask 0x07, 2024-02-22, rev 0x0036, size 224256 sig 0x00090675, pf_mask 0x07, 2024-02-22, rev 0x0036, size 224256 sig 0x000906a3, pf_mask 0x80, 2024-02-22, rev 0x0434, size 222208 sig 0x000906a4, pf_mask 0x80, 2024-02-22, rev 0x0434, size 222208 sig 0x000a06a4, pf_mask 0xe6, 2024-06-17, rev 0x001f, size 137216 sig 0x000b0671, pf_mask 0x32, 2024-07-18, rev 0x0129, size 215040 sig 0x000b06a2, pf_mask 0xe0, 2024-02-22, rev 0x4122, size 220160 sig 0x000b06a3, pf_mask 0xe0, 2024-02-22, rev 0x4122, size 220160 sig 0x000b06a8, pf_mask 0xe0, 2024-02-22, rev 0x4122, size 220160 sig 0x000b06e0, pf_mask 0x19, 2024-03-25, rev 0x001a, size 138240 sig 0x000b06f2, pf_mask 0x07, 2024-02-22, rev 0x0036, size 224256 sig 0x000b06f5, pf_mask 0x07, 2024-02-22, rev 0x0036, size 224256 * SECURITY UPDATE: - CVE-2024-24968, INTEL-SA-01097 - CVE-2024-23984, INTEL-SA-01103 Moderate TuxCare License Agreement CVE-2024-23984 CVE-2024-24968 Ubuntu 16.04 LTS * SECURITY UPDATE: prevent heap-buffer overflow in typeahead buffer flushing - debian/patches/CVE-2024-43802.patch: fix heap-buffer-overflow in ins_typebuf() by validating enough space left when flushing typeahead buffer - CVE-2024-43802 Moderate TuxCare License Agreement CVE-2024-43802 Ubuntu 16.04 LTS * SECURITY UPDATE: security vulnerability in package - debian/patches/CVE-2024-8927.patch: Fix bypass of cgi.force_redirect configuration - CVE-2024-8927 Important TuxCare License Agreement CVE-2024-8927 Ubuntu 16.04 LTS * SECURITY UPDATE: Incorrect parsing of email addresses containing special characters - debian/patches/CVE-2023-27043.patch: Fix email address parsing errors by adding optional 'strict' parameter to getaddresses() and parseaddr() functions - CVE-2023-27043 Moderate TuxCare License Agreement CVE-2023-27043 Ubuntu 16.04 LTS * SECURITY UPDATE: Incorrect parsing of email addresses containing special characters - debian/patches/CVE-2023-27043.patch: Fix email address parsing errors by adding optional 'strict' parameter to getaddresses() and parseaddr() functions - debian/patches/fix-urllib2-test.patch: Fix error in test_issue16464() by rewriting it with a local HTTP server instead of an external resource - CVE-2023-27043 Moderate TuxCare License Agreement CVE-2023-27043 Ubuntu 16.04 LTS * SECURITY UPDATE: use-after-free in alist_add() - debian/patches/CVE-2024-43374.patch: lock the current window so that the reference to the argument list remains valid - CVE-2024-43374 Low TuxCare License Agreement CVE-2024-43374 Ubuntu 16.04 LTS * SECURITY UPDATE: prevent erroneous parsing - debian/patches/CVE-2024-8925.patch: limit multipart/form-data boundaries size to prevent erroneous parsing - CVE-2024-8925 Moderate TuxCare License Agreement CVE-2024-8925 Ubuntu 16.04 LTS * SECURITY UPDATE: mp4 module allows buffer underread and unordered chunks - debian/patches/CVE-2024-7347.patch: fix buffer underread while updating stsz atom and reject unordered chunks - CVE-2023-7347 Moderate TuxCare License Agreement CVE-2024-7347 Ubuntu 16.04 LTS * SECURITY UPDATE: Integer overflow vulnerability in gem-private.h - debian/patches/CVE-2020-27773.patch: fix gamma calculation to prevent division by zero in ConvertLuvToXYZ function - CVE-2020-27773 * SECURITY UPDATE: Undefined behaviour in quantum.h - debian/patches/CVE-2020-27775.patch: fix PowEvaluateOperator to handle negative pixel values correctly - CVE-2020-27775 Low TuxCare License Agreement CVE-2020-27773 CVE-2020-27775 Ubuntu 16.04 LTS * SECURITY UPDATE: Potential overflow in IntensityCompare() function in quantize.c - debian/patches/CVE-2020-27754.patch: fix pixel intensity comparison in quantize.c to avoid integer overflow - debian/patches/CVE-2020-27759.patch: fix IntensityCompare function to correctly calculate intensity difference - CVE-2020-27754 - CVE-2002-27759 Low TuxCare License Agreement CVE-2020-27759 CVE-2020-27754 Ubuntu 16.04 LTS * SECURITY UPDATE: Integer overflow vulnerability in bmp.c - debian/patches/CVE-2020-27772.patch: fix integer overflow causing incorrect color primary values in BMP image encoding - CVE-2020-27772 - debian/patches/fix-cast-to-ssize_t-always-resulting-in-zero.patch: Fix cast to ssize_t always resulting in zero with bounds checking and fallback Low TuxCare License Agreement CVE-2020-27772 Ubuntu 16.04 LTS * SECURITY UPDATE: Division by zero vulnerability - debian/patches/CVE-2020-27763.patch: Fix window function scaling in resize.c to avoid division on every filter call - CVE-2020-27763 Low TuxCare License Agreement CVE-2020-27763 Ubuntu 16.04 LTS * SECURITY UPDATE: When performing a local clone of a repository we end up either copying or hardlinking the source repository into the target repository. - debian/patches/CVE-2024-32020.patch: builtin/clone: refuse local clones of unsafe repositories - CVE-2024-32020 Low TuxCare License Agreement CVE-2024-32020 Ubuntu 16.04 LTS * SECURITY UPDATE: Fix race condition when hardlinking file from the source repository into the destination file in the target repository. - debian/patches/CVE-2024-32021.patch: builtin/clone: abort when hardlinked source and target file differ - CVE-2024-32021 Low TuxCare License Agreement CVE-2024-32021 Ubuntu 16.04 LTS * SECURITY UPDATE: Improper type casting in calculation in palm.c could lead to undefined behavior in processing input file - debian/patches/CVE-2020-27761.patch: fix color calculation issue that caused incorrect output when writing PALM images - CVE-2020-27761 * SECURITY UPDATE: Negative Quantum value handling issue in quantum-private.h - debian/patches/CVE-2020-27757.patch: fix improper handling of negative Quantum values - CVE-2020-27757 * SECURITY UPDATE: Excessive shifting overflow in quantum-export.c - debian/patches/CVE-2020-27751.patch: fix shift exponent being too large for 64-bit type in scaling function - CVE-2020-27751 * SECURITY UPDATE: Unsigned int type range issue at quantum-private.h - debian/patches/CVE-2020-27768.patch: fix incorrect checking of Quantum in quantum-private.h scaling functions - CVE-2020-27768 * SECURITY UPDATE: Unsigned char overflow in RestoreMSCWarning() - debian/patches/CVE-2020-27771.patch: fix incorrect casting of GetPixelIndex causing overflow - CVE-2020-27771 Low TuxCare License Agreement CVE-2020-27757 CVE-2020-27768 CVE-2020-27751 CVE-2020-27771 CVE-2020-27761 Ubuntu 16.04 LTS * SECURITY UPDATE: Memory leak due to incorrect image depth size check - debian/patches/CVE-2020-27755.patch: Fix image depth not supported error by setting depth to 8 if it is 0 and to maximum size if it exceeds limit - CVE-2020-27755 Low TuxCare License Agreement CVE-2020-27755 Ubuntu 16.04 LTS * SECURITY UPDATE: gettext machinery might get auto-initialized using an unintended locale directory - debian/patches/CVE-2023-25815.patch: avoid using gettext if the locale dir is not present - CVE-2023-25815 Low TuxCare License Agreement CVE-2023-25815 Ubuntu 16.04 LTS * SECURITY UPDATE: Undefined behavior in the form of values outside the range of type unsigned long - debian/patches/CVE-2020-27764-and-CVE-2020-27776.patch: Fix outside the range of representable values of type unsigned long - CVE-2020-27764 - CVE-2020-27776 * SECURITY UPDATE: Integer overflow in magick/histogram.c - debian/patches/CVE-2020-25666.patch: Fix integer overflow in HistogramCompare in magick/histogram.c - CVE-2020-25666 Low TuxCare License Agreement CVE-2020-27764 CVE-2020-25666 CVE-2020-27776 Ubuntu 16.04 LTS * SECURITY UPDATE: Buffer overflow - debian/patches/CVE-2024-52533.patch: Fix a single byte buffer overflow in connect messages in gsocks4aproxy - CVE-2024-52533 Important TuxCare License Agreement CVE-2024-52533 Ubuntu 16.04 LTS * SECURITY UPDATE: Division by zero vulnerability in segment.c - debian/patches/CVE-2020-27765.patch: Fix average_tau calculation by multiplying instead of dividing by number_nodes in OptimalTau function to prevent incorrect segmentation output - CVE-2020-27765 Low TuxCare License Agreement CVE-2020-27765 Ubuntu 16.04 LTS * Update to 8u432-ga fixing a number of CVEs - CVE-2024-20918: missing array range check in C1 compiler leads to out-of-bounds access - CVE-2024-20919: unverified bytecode execution because of the flaw in JVM class file verifier - CVE-2024-20921: optimization issue of loop range check in IfNode and LoopNode - CVE-2024-20926: execution of arbitrary Java code in Nashorn - CVE-2024-20945: private keys for digital signatures leak to logs - CVE-2024-20952: RSA padding problem, TLS timing side-channel attack - CVE-2024-21011: extended Exception message causing a crash - CVE-2024-21068: Integer overflow in address generation by the C1 compiler - CVE-2024-21085: excessive memory allocation in Pack200 - CVE-2024-21094: "exceeded _node_regs array" C2 compilation error - CVE-2024-21131: UTF8 size overflow - CVE-2024-21138: infinite loop vunlerability in SymbolTable - CVE-2024-21140: int overflow/underflow in Range Check Elimination - CVE-2024-21144: invalid header validation leads to Pack200 excessive loading time - CVE-2024-21145: out-of-bounds access in MaskFill - CVE-2024-21147: out-of-bounds array index in Range Check Elimination - CVE-2024-21208: improper handling of maxHeaderSize in HTTP client - CVE-2024-21210: integer overflow in array indexing in SuperWord - CVE-2024-21217: out-of-memory because of unbounded allocation in MessageFormat - CVE-2024-21235: incorrect range check because of integer conversion error in LoopNode * Update patches - debian/patches/zero-sh.diff Important TuxCare License Agreement CVE-2024-21210 CVE-2024-21145 CVE-2024-21140 CVE-2024-20945 CVE-2024-20921 CVE-2024-20919 CVE-2024-20918 CVE-2024-21235 CVE-2024-21217 CVE-2024-21208 CVE-2024-21147 CVE-2024-21138 CVE-2024-21131 CVE-2024-21144 CVE-2024-21094 CVE-2024-21085 CVE-2024-21068 CVE-2024-21011 CVE-2024-20926 CVE-2024-20952 Ubuntu 16.04 LTS * SECURITY UPDATE: Undefined behavior due to values outside range in quantum.h - debian/patches/CVE-2020-27767.patch: Fix quantum.h to include float.h to handle min and max values for Quantum type - debian/patches/CVE-2020-27767-1.patch: Fix ClampToQuantum function to handle negative values correctly and prevent buffer overflow in quantum- import.c - CVE-2020-27767 Low TuxCare License Agreement CVE-2020-27767 CVE-2020-27769 Ubuntu 16.04 LTS * SECURITY UPDATE: Fix DoS by a trusted server by disable ESI - CVE-2024-45802 Important TuxCare License Agreement CVE-2024-45802 Ubuntu 16.04 LTS * SECURITY UPDATE: The HTTP header parsers in HAProxy may accept empty header field names - debian/patches/CVE-2023-25725.patch: prevent empty header field names - CVE-2023-25725 Critical TuxCare License Agreement CVE-2023-25725 Ubuntu 16.04 LTS * SECURITY UPDATE: Prevent running the Python interpreter with an attacker-controlled PYTHONPATH environment variable - debian/patches/CVE-2024-48990-CVE-2024-48991.patch: do not set PYTHONPATH environment variable to prevent a LPE and prevent race condition on /proc/$PID/exec evaluation - CVE-2024-48990 - CVE-2024-48991 * SECURITY UPDATE: Prevent running the Ruby interpreter with an attacker-controlled RUBYLIB environment variable - debian/patches/CVE-2024-48992.patch: do not set RUBYLIB environment variable to prevent a LPE - CVE-2024-48992 * SECURITY UPDATE: Prevent running the Ruby interpreter with an attacker-controlled RUBYLIB environment variable - debian/patches/CVE-2024-11003.patch, debian/control: drop usage of Module::ScanDeps to prevent LPE - CVE-2024-11003 Moderate TuxCare License Agreement CVE-2024-48990 CVE-2024-48992 CVE-2024-48991 CVE-2024-11003 CVE-2024-10224 Ubuntu 16.04 LTS * SECURITY UPDATE: Improper newline quoting in email module header serialization - debian/patches/CVE-2024-6923.patch: Encode newlines in headers and verify headers to be sound - CVE-2024-6923 Moderate TuxCare License Agreement CVE-2024-6923 Ubuntu 16.04 LTS * SECURITY UPDATE: improper sanitization of URIs leading to HTTP request smuggling - debian/patches/CVE-2024-11234.patch: Fix HTTP wrapper full URI path to disallow CR or LF characters - CVE-2024-11234 Important TuxCare License Agreement CVE-2024-11234 Ubuntu 16.04 LTS * CVE-2022-38076 - linux-firmware: Update for Intel Dual Band Wireless AC 3168 - linux-firmware: Upadte for Intel Wireless 7265 (Rev D) Family - linux-firmware: Update for Intel Dual Band Wireless AC 3165 - linux-firmware: Update for Intel Wireless AC 9560 - linux-firmware: Update for Intel Wireless AC 9462 - linux-firmware: Update for Intel Wireless AC 9461 - linux-firmware: Update for Intel Wireless AC 9260 Important TuxCare License Agreement CVE-2022-38076 Ubuntu 16.04 LTS * SECURITY UPDATE: Crash in XML_ResumeParser function - debian/patches/CVE-2024-50602.patch: Refuse to stop/suspend an unstarted parser (XML_ERROR_NOT_STARTED). Fix XML_StopParser to be explicit about XML_PARSING and handle default case. Cover XML_StopParser's new handling of status XML_INITIALIZED, Fix crash with NULL pointer dereference in normal_updatePosition - CVE-2024-50602 Moderate TuxCare License Agreement CVE-2024-50602 Ubuntu 16.04 LTS * SECURITY UPDATE: Out-of-bounds read in quoted-printable decoder - debian/patches/CVE-2024-11233.patch: Fix buffer handling in convert.quoted-printable-decode filter to prevent one-byte out-of-bounds read - CVE-2024-11233 Important TuxCare License Agreement CVE-2024-11233 Ubuntu 16.04 LTS * New microcode update packages from upstream up to 2024-11-12: - Updated microcodes: sig 0x000806f4, pf_mask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x000806f5, pf_mask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x000806f6, pf_mask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x000806f7, pf_mask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x000806f8, pf_mask 0x87, 2024-06-20, rev 0x2b000603, size 588800 sig 0x00090672, pf_mask 0x07, 2024-05-29, rev 0x0037, size 224256 sig 0x00090675, pf_mask 0x07, 2024-05-29, rev 0x0037, size 224256 sig 0x000906a3, pf_mask 0x80, 2024-06-03, rev 0x0435, size 223232 sig 0x000906a4, pf_mask 0x80, 2024-06-03, rev 0x0435, size 223232 sig 0x000a06a4, pf_mask 0xe6, 2024-08-02, rev 0x0020, size 138240 sig 0x000b0671, pf_mask 0x32, 2024-08-29, rev 0x012b, size 211968 sig 0x000b06a2, pf_mask 0xe0, 2024-05-29, rev 0x4123, size 220160 sig 0x000b06a3, pf_mask 0xe0, 2024-05-29, rev 0x4123, size 220160 sig 0x000b06a8, pf_mask 0xe0, 2024-05-29, rev 0x4123, size 220160 sig 0x000b06f2, pf_mask 0x07, 2024-05-29, rev 0x0037, size 224256 sig 0x000b06f5, pf_mask 0x07, 2024-05-29, rev 0x0037, size 224256 sig 0x000c06f1, pf_mask 0x87, 2024-06-20, rev 0x21000283, size 560128 sig 0x000c06f2, pf_mask 0x87, 2024-06-20, rev 0x21000283, size 560128 * SECURITY UPDATE: - CVE-2024-21853, INTEL-SA-01101 - CVE-2024-23918, CVE-2024-21820, INTEL-SA-01079 - CVE-2024-24968, INTEL-SA-01097 - CVE-2024-23984, INTEL-SA-01103 Low TuxCare License Agreement CVE-2024-21820 CVE-2024-21853 CVE-2024-23918 Ubuntu 16.04 LTS * SECURITY UPDATE: fix use-after-free vulnerability in buffer closing - debian/patches/CVE-2024-47814.patch: Fix use-after-free issue when closing a buffer by checking for deletions before editing - CVE-2024-47814 Low TuxCare License Agreement CVE-2024-47814 Ubuntu 16.04 LTS * SECURITY UPDATE: possible information leak via checksum comparison - debian/patches/CVE-2024-12085.patch: fix issue with checksum length manipulation leading to uninitialized memory leak - CVE-2024-12085 Important TuxCare License Agreement CVE-2024-12085 Ubuntu 16.04 LTS * SECURITY UPDATE: race condition during rsync's handling of symbolic links - debian/patches/CVE-2024-12747.patch: prevent symlink race preventing a normal file from being replaced by a symlink - CVE-2024-12747 * debian/rules, debian/patches/series: use series file to manage patches * debian/patches/ssh-6-option.diff make it compatible with Quilt Moderate TuxCare License Agreement CVE-2024-12747 Ubuntu 16.04 LTS * SECURITY UPDATE: possible information leak via checksum comparison - debian/patches/CVE-2024-12086.patch: fix info leak when connecting to malicious server - CVE-2024-12086 * SECURITY UPDATE: arbitraty file write via inproper symlink verification - debian/patches/CVE-2024-12087.patch: fix writing malicious files to arbitrary locations when using '--inc-recursive' option - CVE-2024-12087 * SECURITY UPDATE: arbitraty file write when using '--safe-links' option - debian/patches/CVE-2024-12088.patch: properly verify if a symbolic link destination contains another symbolic link within it when using the '--safe-links' option - CVE-2024-12088 Moderate TuxCare License Agreement CVE-2024-12088 CVE-2024-12087 CVE-2024-12086 Ubuntu 16.04 LTS * SECURITY UPDATE: Generate and verify message MACs in libkrad - debian/patches/CVE-2024-3596.patch: implement support for Message-Authenticator in libkrad - CVE-2024-3596 * debian/control: add package Recommends to krb5-doc Critical TuxCare License Agreement CVE-2024-3596 Ubuntu 16.04 LTS * SECURITY UPDATE: Regular expressions that allowed excessive backtracking during tarfile header parsing - debian/patches/CVE-2024-6232.patch: Fix header parsing vulnerability that could lead to ReDoS - CVE-2024-6923 Important TuxCare License Agreement CVE-2024-6232 Ubuntu 16.04 LTS * SECURITY UPDATE: insufficient space allocation in assert() function leading to buffer overflow - debian/patches/any/CVE-2025-0395.patch: Fix underallocation of abort_msg_s struct to store the length of the message string - CVE-2025-0395 Moderate TuxCare License Agreement CVE-2025-0395 Ubuntu 16.04 LTS * SECURITY UPDATE: Ability to modify permissions with privileged programs - debian/patches/CVE-2023-6597.patch: Prevent tempfile.TemporaryDirectory class dereference symlinks - CVE-2023-6597 Important TuxCare License Agreement CVE-2023-6597 Ubuntu 16.04 LTS * SECURITY UPDATE: PPD injection issues - debian/patches/CVE-2024-47175.patch: sanitize make and model, PPDize preset and template names in cups/ppd-cache.c - CVE-2024-47175 Important TuxCare License Agreement CVE-2024-47175 Ubuntu 16.04 LTS * New microcode update packages from upstream up to 2025-02-11: - New microcodes: sig 0x000a06f3, pf_mask 0x01, 2024-11-22, rev 0x3000330, size 1533952 sig 0x000b0674, pf_mask 0x32, 2024-09-25, rev 0x012c, size 211968 sig 0x000b06f6, pf_mask 0x07, 2024-08-01, rev 0x0038, size 225280 sig 0x000b06f7, pf_mask 0x07, 2024-08-01, rev 0x0038, size 225280 - Updated microcodes: sig 0x000606a6, pf_mask 0x87, 2024-08-02, rev 0xd0003f5, size 308224 sig 0x000606c1, pf_mask 0x10, 2024-08-08, rev 0x10002c0, size 300032 sig 0x000806f4, pf_mask 0x10, 2024-07-30, rev 0x2c0003e0, size 622592 sig 0x000806f4, pf_mask 0x87, 2024-07-30, rev 0x2b000620, size 589824 sig 0x000806f5, pf_mask 0x10, 2024-07-30, rev 0x2c0003e0, size 622592 sig 0x000806f5, pf_mask 0x87, 2024-07-30, rev 0x2b000620, size 589824 sig 0x000806f6, pf_mask 0x10, 2024-07-30, rev 0x2c0003e0, size 622592 sig 0x000806f6, pf_mask 0x87, 2024-07-30, rev 0x2b000620, size 589824 sig 0x000806f7, pf_mask 0x87, 2024-07-30, rev 0x2b000620, size 589824 sig 0x000806f8, pf_mask 0x10, 2024-07-30, rev 0x2c0003e0, size 622592 sig 0x000806f8, pf_mask 0x87, 2024-07-30, rev 0x2b000620, size 589824 sig 0x00090672, pf_mask 0x07, 2024-08-01, rev 0x0038, size 225280 sig 0x00090675, pf_mask 0x07, 2024-08-01, rev 0x0038, size 225280 sig 0x000906a3, pf_mask 0x80, 2024-08-01, rev 0x0436, size 223232 sig 0x000906a4, pf_mask 0x40, 2024-07-29, rev 0x0009, size 119808 sig 0x000906a4, pf_mask 0x80, 2024-08-01, rev 0x0436, size 223232 sig 0x000906ea, pf_mask 0x22, 2024-07-28, rev 0x00fa, size 105472 sig 0x000906ed, pf_mask 0x22, 2024-07-31, rev 0x0102, size 106496 sig 0x000a0671, pf_mask 0x02, 2024-08-01, rev 0x0063, size 108544 sig 0x000b0671, pf_mask 0x32, 2024-09-25, rev 0x012c, size 211968 sig 0x000b06a2, pf_mask 0xe0, 2024-07-31, rev 0x4124, size 220160 sig 0x000b06a3, pf_mask 0xe0, 2024-07-31, rev 0x4124, size 220160 sig 0x000b06a8, pf_mask 0xe0, 2024-07-31, rev 0x4124, size 220160 sig 0x000b06e0, pf_mask 0x19, 2024-09-06, rev 0x001c, size 138240 sig 0x000b06f2, pf_mask 0x07, 2024-08-01, rev 0x0038, size 225280 sig 0x000b06f5, pf_mask 0x07, 2024-08-01, rev 0x0038, size 225280 sig 0x000c06f1, pf_mask 0x87, 2024-07-30, rev 0x21000291, size 560128 sig 0x000c06f2, pf_mask 0x87, 2024-07-30, rev 0x21000291, size 560128 * SECURITY UPDATE: - CVE-2024-31068 (INTEL-SA-01166) - CVE-2024-36293 (INTEL-SA-01213) - CVE-2024-39279 (INTEL-SA-01139) Moderate TuxCare License Agreement CVE-2024-39279 CVE-2024-31068 CVE-2024-36293 Ubuntu 16.04 LTS * SECURITY UPDATE: buffer over-read in xmlHTMLPrintFileContext - debian/patches/CVE-2024-34459.patch: Fix buffer overread with `xmllint --htmlout` by adding a missing bounds check - CVE-2024-34459 * SECURITY UPDATE: use-after-free vulnerability in xinclude.c - debian/patches/CVE-2022-49043.patch: Fix use-after-free in xmlXIncludeAddNode, free URI after reporting the error to avoid use-after-free - CVE-2022-49043 * SECURITY UPDATE: stack-based buffer overflow in xmlSnprintfElements in valid.c - debian/patches/CVE-2025-24928.patch: Fix stack-buffer-overflow in xmlSnprintfElements caused by improperly calculating qname length - CVE-2025-24928 * SECURITY UPDATE: NULL pointer dereference in xmlPatMatch in pattern.c - debian/patches/CVE-2025-27113.patch: Fix compilation of explicit child axis to generate XML_OP_ELEM like the case without an axis - CVE-2025-27113 * SECURITY UPDATE: use-after-free vulnerability in XML schema processing - debian/patches/CVE-2024-56171.patch: Fix use-after-free after xmlSchemaItemListAdd in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables - CVE-2024-56171 Important TuxCare License Agreement CVE-2022-49043 CVE-2025-24928 CVE-2024-56171 CVE-2024-34459 CVE-2025-27113 Ubuntu 16.04 LTS * SECURITY UPDATE: Improper validation of bracketed hosts in urllib - debian/patches/CVE-2024-11168.patch: add checks to ensure that bracketed hosts found by urlsplit are of IPv6 or IPvFuture format - CVE-2024-11168 * SECURITY UPDATE: Incomplete validation of bracketed hosts in urllib - debian/patches/CVE-2025-0938.patch: disallow square brackets (`[` and `]`) in domain names for parsed URLs - CVE-2025-0938 * SECURITY UPDATE: Incorrent information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private” in ipaddress module - debian/patches/CVE-2024-4032.patch: fix "private" (non-global) IP address ranges - CVE-2024-4032 Moderate TuxCare License Agreement CVE-2025-0938 CVE-2024-11168 CVE-2024-4032 Ubuntu 16.04 LTS * SECURITY UPDATE: stack-based buffer overflow via manipulation of argument - debian/patches/CVE-2025-0840.patch: Fix stack-buffer-overflow at objdump disassemble_bytes by restricting insn_width to range 1-49 - CVE-2025-0840 Important TuxCare License Agreement CVE-2025-0840 Ubuntu 16.04 LTS * SECURITY UPDATE: Incorrect path quoting in venv allows command injection - debian/patches/CVE-2024-9287.patch: Quote template strings in venv activation - CVE-2024-9287 Important TuxCare License Agreement CVE-2024-9287 Ubuntu 16.04 LTS * SECURITY UPDATE: PostgreSQL libpq incorrect neutralization of quoting syntax allows SQL injection - debian/patches/CVE-2025-1094.patch: Add full encoding validation in libpq data-quoting functions. - CVE-2025-1094 Important TuxCare License Agreement CVE-2025-1094 Ubuntu 16.04 LTS * SECURITY UPDATE: it's possible machine-in-the-middle attack vulnerability caused by a malicious machine impersonating a legitimate server - debian/patches/CVE-2025-26465.patch: Correct error code handling - CVE-2025-26465 Moderate TuxCare License Agreement CVE-2025-26465 Ubuntu 16.04 LTS * SECURITY UPDATE: Possible inject of arbitrary data into third-party executables or plug-ins - debian/patches/CVE-2017-12166.patch: Fix an out-of-bounds issue preventing potential stack overflow - CVE-2017-12166 * UPDATE CERTIFICATES: Renew sample keys - debian/patches/sample-keys-renew.patch: Renew sample keys for 10 years Critical TuxCare License Agreement CVE-2017-12166 Ubuntu 16.04 LTS * SECURITY UPDATE: improper verification of key fingerprints in apt_key module - debian/patches/CVE-2016-8614.patch: fix use of long key IDs for delete, check for key_id presence and fix key_id length for verification. Fix reversed order of return values in parse_key_id function - CVE-2016-8614 Important TuxCare License Agreement CVE-2016-8614 Ubuntu 16.04 LTS * SECURITY UPDATE: security vulnerability in logging credentials at DEBUG level - debian/patches/CVE-2019-14846.patch: Fix plugins leaking boto credentials to logs by switching logging level to INFO - CVE-2019-14846 Important TuxCare License Agreement CVE-2019-14846 Ubuntu 16.04 LTS * SECURITY UPDATE: insufficiently random password generation vulnerability - debian/patches/CVE-2020-10729.patch: Fix issue with caching Jinja2 expressions, only cache results of single variable names - CVE-2020-10729 Important TuxCare License Agreement CVE-2020-10729 CVE-2019-14904 Ubuntu 16.04 LTS * SECURITY UPDATE: Improper PUSH_REPLY sanitization allows attackers to inject arbitrary data into third-party executables - debian/patches/CVE-2024-5594.patch: Properly handle null bytes and invalid characters in control - CVE-2024-5594 Low TuxCare License Agreement CVE-2024-5594 Ubuntu 16.04 LTS * SECURITY UPDATE: Quadratic complexity, resulting in excess CPU while parsing - debian/patches/CVE-2024-7592.patch: fix quadratic complexity in parsing "-quoted cookie values with backslashes - CVE-2024-7592 Important TuxCare License Agreement CVE-2024-7592 Ubuntu 16.04 LTS * SECURITY UPDATE: insecure password handling in svn module - debian/patches/CVE-2020-1739.patch: Update subversion module to provide password securely with --password-from-stdin option to prevent leaking in case of outdated svn versions - CVE-2020-1739 Low TuxCare License Agreement CVE-2020-1739 Ubuntu 16.04 LTS * SECURITY UPDATE: incomplete tracking of row security allows unauthorized access to data - debian/patches/CVE-2024-10976.patch: Ensure cached plans to be correctly marked as dependent on role to fix the issue of neglected marking which could lead to incorrect row visibility. - CVE-2024-10976 * SECURITY UPDATE: server error message leakage - debian/patches/CVE-2024-10977.patch: Discard error messages received during SSL and GSS negotiation to prevent arbitrary bytes written to the client's terminal - CVE-2024-10977 Moderate TuxCare License Agreement CVE-2024-10977 CVE-2024-10976 Ubuntu 16.04 LTS * SECURITY UPDATE: Externally controlled reference to resources. - debian/patches/CVE-2024-10979.patch: Remove magic property of ENV in ./src/pl/plperl/plc_trusted.pl. Add get_environ to ./src/test/regress/regress.c. - CVE-2024-10979 Important TuxCare License Agreement CVE-2024-10979 CVE-2024-10978 Ubuntu 16.04 LTS * SECURITY UPDATE: sensitive data leakage through User module - debian/patches/CVE-2018-16837.patch: do not pass ssh_key_passphrase on cmdline, fix passphrase being passed on command line - CVE-2018-16837 Critical TuxCare License Agreement CVE-2018-16837 CVE-2016-9587 CVE-2017-7481 Ubuntu 16.04 LTS * SECURITY UPDATE: Out-of-bounds memory access in Python API bindings - debian/patches/CVE-2025-32414.patch: Limit character reads and reserve buffer space for UTF-8 encoding to prevent overflow - CVE-2025-32414 * SECURITY UPDATE: Heap buffer under-read in XML schema validation - debian/patches/CVE-2025-32415.patch: Fix heap buffer overflow in xmlSchemaIDCFillNodeTables - CVE-2025-32415 Important TuxCare License Agreement CVE-2025-32414 CVE-2025-32415 Ubuntu 16.04 LTS * SECURITY UPDATE: template Injection Vulnerability - debian/patches/CVE-2021-3583.patch: fix unsafe preservation across newlines to ensure always having unsafe - CVE-2021-3583 Important TuxCare License Agreement CVE-2018-10875 CVE-2021-3583 CVE-2020-1733 CVE-2020-10744 Ubuntu 16.04 LTS * SECURITY UPDATE: password prompt vulnerability from template expansion - debian/patches/CVE-2019-10206.patch: prevent templating of passwords from prompt to avoid special characters triggering it incorrectly - CVE-2019-10206 - debian/patches/CVE-2019-14856.patch: fix incomplete CVE-2019-10206 patch - CVE-2019-14856 Moderate TuxCare License Agreement CVE-2019-10206 Ubuntu 16.04 LTS * Update to 8u452-ga fixing a number of CVEs - CVE-2025-21587: better TLS connection support - CVE-2025-30691: improve compiler transformations - CVE-2025-30698: enhance Buffered Image handling - Release notes: https://mail.openjdk.org/pipermail/jdk8u-dev/2025-April/019989.html Important TuxCare License Agreement CVE-2025-30691 CVE-2025-30698 CVE-2025-21587 Ubuntu 16.04 LTS * SECURITY UPDATE: security vulnerability addressed - debian/patches/CVE-2025-48384.patch: quote values containing CR character to prevent unintended behavior - CVE-2025-48384 Important TuxCare License Agreement CVE-2025-48384 Ubuntu 16.04 LTS * SECURITY UPDATE: memory vulnerabilities in schematron - debian/patches/CVE-2025-49794_CVE-2025-49796.patch: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements and memory corruption issue triggered by processing sch:name elements in input XML file - CVE-2025-49794 - CVE-2025-49796 Critical TuxCare License Agreement CVE-2025-49796 CVE-2025-49794 Ubuntu 16.04 LTS * SECURITY UPDATE: unauthorized command execution on remote hosts - debian/patches/CVE-2025-32462.patch: restrict user from setting remote host for command unless listing privileges - CVE-2025-32462 Important TuxCare License Agreement CVE-2025-32462 Ubuntu 16.04 LTS * SECURITY UPDATE: aggregate term exceeding column count vulnerability - debian/patches/CVE-2025-6965.patch: fix a potential memory corruption if the number of aggregate terms in a query exceeds the maximum number of columns - CVE-2025-6965 Critical TuxCare License Agreement CVE-2025-6965 Ubuntu 16.04 LTS * New microcode update packages from upstream up to 2025-05-12: - New microcodes: sig 0x000a06d1, pf_mask 0x20, 2025-02-07, rev 0xa0000d1, size 1635328 sig 0x000a06d1, pf_mask 0x95, 2025-02-07, rev 0x10003a2, size 1664000 sig 0x000b0650, pf_mask 0x80, 2025-03-18, rev 0x000a, size 136192 sig 0x000b06d1, pf_mask 0x80, 2025-03-18, rev 0x011f, size 79872 sig 0x000c0652, pf_mask 0x82, 2025-03-20, rev 0x0118, size 90112 sig 0x000c0662, pf_mask 0x82, 2025-03-20, rev 0x0118, size 90112 sig 0x000c0664, pf_mask 0x82, 2025-03-20, rev 0x0118, size 90112 sig 0x000c06a2, pf_mask 0x82, 2025-03-20, rev 0x0118, size 90112 - Updated microcodes: sig 0x00050657, pf_mask 0xbf, 2024-12-12, rev 0x5003901, size 39936 sig 0x0005065b, pf_mask 0xbf, 2024-12-12, rev 0x7002b01, size 30720 sig 0x000606a6, pf_mask 0x87, 2025-01-07, rev 0xd000404, size 309248 sig 0x000606c1, pf_mask 0x10, 2025-01-07, rev 0x10002d0, size 300032 sig 0x000706a8, pf_mask 0x01, 2024-12-05, rev 0x0026, size 76800 sig 0x000706e5, pf_mask 0x80, 2025-01-07, rev 0x00ca, size 115712 sig 0x000806c1, pf_mask 0x80, 2024-12-01, rev 0x00bc, size 112640 sig 0x000806c2, pf_mask 0xc2, 2024-12-01, rev 0x003c, size 99328 sig 0x000806d1, pf_mask 0xc2, 2024-12-11, rev 0x0056, size 105472 sig 0x000806ec, pf_mask 0x94, 2024-11-17, rev 0x0100, size 106496 sig 0x000806f4, pf_mask 0x10, 2025-01-28, rev 0x2c0003f7, size 624640 sig 0x000806f4, pf_mask 0x87, 2025-01-28, rev 0x2b000639, size 591872 sig 0x000806f5, pf_mask 0x10, 2025-01-28, rev 0x2c0003f7, size 624640 sig 0x000806f5, pf_mask 0x87, 2025-01-28, rev 0x2b000639, size 591872 sig 0x000806f6, pf_mask 0x10, 2025-01-28, rev 0x2c0003f7, size 624640 sig 0x000806f6, pf_mask 0x87, 2025-01-28, rev 0x2b000639, size 591872 sig 0x000806f7, pf_mask 0x87, 2025-01-28, rev 0x2b000639, size 591872 sig 0x000806f8, pf_mask 0x10, 2025-01-28, rev 0x2c0003f7, size 624640 sig 0x000806f8, pf_mask 0x87, 2025-01-28, rev 0x2b000639, size 591872 sig 0x00090672, pf_mask 0x07, 2024-12-12, rev 0x003a, size 226304 sig 0x00090675, pf_mask 0x07, 2024-12-12, rev 0x003a, size 226304 sig 0x000906a3, pf_mask 0x80, 2024-12-12, rev 0x0437, size 224256 sig 0x000906a4, pf_mask 0x40, 2024-12-06, rev 0x000a, size 119808 sig 0x000906a4, pf_mask 0x80, 2024-12-12, rev 0x0437, size 224256 sig 0x000906ed, pf_mask 0x22, 2024-11-14, rev 0x0104, size 106496 sig 0x000a0652, pf_mask 0x20, 2024-11-14, rev 0x0100, size 97280 sig 0x000a0653, pf_mask 0x22, 2024-11-14, rev 0x0100, size 98304 sig 0x000a0655, pf_mask 0x22, 2024-11-14, rev 0x0100, size 97280 sig 0x000a0660, pf_mask 0x80, 2024-11-14, rev 0x0102, size 98304 sig 0x000a0661, pf_mask 0x80, 2024-11-14, rev 0x0100, size 97280 sig 0x000a0671, pf_mask 0x02, 2024-12-01, rev 0x0064, size 108544 sig 0x000a06a4, pf_mask 0xe6, 2025-02-13, rev 0x0024, size 140288 sig 0x000a06f3, pf_mask 0x01, 2025-02-10, rev 0x3000341, size 1542144 sig 0x000b0671, pf_mask 0x32, 2025-03-17, rev 0x012f, size 219136 sig 0x000b0674, pf_mask 0x32, 2025-03-17, rev 0x012f, size 219136 sig 0x000b06a2, pf_mask 0xe0, 2025-01-15, rev 0x4128, size 224256 sig 0x000b06a3, pf_mask 0xe0, 2025-01-15, rev 0x4128, size 224256 sig 0x000b06a8, pf_mask 0xe0, 2025-01-15, rev 0x4128, size 224256 sig 0x000b06e0, pf_mask 0x19, 2024-12-06, rev 0x001d, size 139264 sig 0x000b06f2, pf_mask 0x07, 2024-12-12, rev 0x003a, size 226304 sig 0x000b06f5, pf_mask 0x07, 2024-12-12, rev 0x003a, size 226304 sig 0x000b06f6, pf_mask 0x07, 2024-12-12, rev 0x003a, size 226304 sig 0x000b06f7, pf_mask 0x07, 2024-12-12, rev 0x003a, size 226304 sig 0x000c06f1, pf_mask 0x87, 2025-03-14, rev 0x210002a9, size 563200 sig 0x000c06f2, pf_mask 0x87, 2025-03-14, rev 0x210002a9, size 563200 - Removed microcodes: sig 0x00050656, pf_mask 0xbf, 2023-07-28, rev 0x4003605, size 3891 * SECURITY UPDATE: - CVE-2024-28956, INTEL-SA-01153 - CVE-2025-20054, INTEL-SA-01244 - CVE-2025-20103, INTEL-SA-01244 - CVE-2024-43420, INTEL-SA-01247 - CVE-2024-45332, INTEL-SA-01247 - CVE-2025-20623, INTEL-SA-01247 - CVE-2025-20012, INTEL-SA-01322 - CVE-2025-24495, INTEL-SA-01322 Moderate TuxCare License Agreement CVE-2024-28956 CVE-2024-43420 CVE-2025-20054 CVE-2025-20103 CVE-2025-20623 CVE-2025-24495 CVE-2024-45332 CVE-2025-20012 Ubuntu 16.04 LTS * SECURITY UPDATE: potential file creation/truncation when cloning untrusted repository in gitk - debian/patches/CVE-2025-27613_CVE-2025-27614_CVE-2025-46835.patch: improve dark mode support, remove hard-coded colors in ttext calls and use colors from the theme for text widgets via Text.Background and Text.Foreground - CVE-2025-27613 * SECURITY UPDATE: security vulnerability allowing arbitrary script execution - debian/patches/CVE-2025-27613_CVE-2025-27614_CVE-2025-46835.patch: Fix hard-coded colors in ttext widgets to use theme colors - CVE-2025-27614 * SECURITY UPDATE: security issue with untrusted repository cloning and file editing - debian/patches/CVE-2025-27613_CVE-2025-27614_CVE-2025-46835.patch: validate directory names to prevent file overwrite attacks - CVE-2025-46835 Moderate TuxCare License Agreement CVE-2025-46835 CVE-2025-27613 CVE-2025-27614 Ubuntu 16.04 LTS * SECURITY UPDATE: security vulnerability in package - debian/patches/CVE-2025-48386.patch: fix buffer overflow in wcsncat() caused by off-by-one error and length not accounted for in wcsncat() calls - CVE-2025-48386 Moderate TuxCare License Agreement CVE-2025-48386 Ubuntu 16.04 LTS * OpenJDK 8u462 release - CVE-2025-30749: Java 2D heap corruption, code execution/DoS - CVE-2025-30754: JSSE TLS handshake flaw, weakened encryption - CVE-2025-30761: nashorn sandbox bypass, code execution - CVE-2025-50059: HTTP client header bug, data leak - CVE-2025-50106: Glyph rendering memory bug, crash/code exec - Release notes: https://mail.openjdk.org/pipermail/jdk8u-dev/2025-July/020263.html Important TuxCare License Agreement CVE-2025-50106 CVE-2025-30754 CVE-2025-30749 CVE-2025-30761 CVE-2025-50059 Ubuntu 16.04 LTS * SECURITY UPDATE: prevent spoofing vulnerability in GSSAPI-protected messages using RC4-HMAC-MD5 due to weaknesses in MD5 checksum design - debian/patches/CVE-2025-3576: don't issue session keys with deprecated enctypes. Updates tests. - CVE-2025-3576 Moderate TuxCare License Agreement CVE-2025-3576 Ubuntu 16.04 LTS * SECURITY UPDATE: denial of service via sqlite3_db_config argument values - debian/patches/CVE-2025-29088.patch: harden the SQLITE_DBCONFIG_LOOKASIDE interface against misuse, such as described in forum post 48f365daec Enhancements to the SQLITE_DBCONFIG_LOOKASIDE documentation - CVE-2025-29088 Moderate TuxCare License Agreement CVE-2025-29088 Ubuntu 16.04 LTS * SECURITY UPDATE: fix use-after-free vulnerability in buffer closing - debian/patches/CVE-2025-26603.patch: Fix heap use-after-free in str_to_reg() - CVE-2025-26603 Moderate TuxCare License Agreement CVE-2025-26603 Ubuntu 16.04 LTS * SECURITY UPDATE: mod_ssl TLS upgrade attack - debian/patches/CVE-2025-49812.patch: remove antiquated 'SSLEngine optional' TLS upgrade in modules/ssl/ssl_engine_config.c, modules/ssl/ssl_engine_init.c, modules/ssl/ssl_engine_kernel.c, modules/ssl/ssl_private.h. - CVE-2025-49812 Important TuxCare License Agreement CVE-2025-49812 CVE-2024-47252 Ubuntu 16.04 LTS * SECURITY UPDATE: stack-based buffer overflow via integer overflows in buffer size calculations in xmlBuildQName function - debian/patches/CVE-2025-6021.patch: Fix integer overflow in xmlBuildQName that affects memory safety - CVE-2025-6021 Important TuxCare License Agreement CVE-2025-6021 Ubuntu 16.04 LTS * SECURITY UPDATE: heap-based buffer overflow in copy_section function - debian/patches/CVE-2025-7545.patch: Don't extend output section size beyond input section size to fix section contents from being copied - CVE-2025-7545 Important TuxCare License Agreement CVE-2025-7545 Ubuntu 16.04 LTS * SECURITY UPDATE: misinterpretation of HTTP response headers - debian/patches/CVE-2025-1217.patch: adds HTTP header folding support for HTTP wrapper response headers in ext/standard/http_fopen_wrapper.c - CVE-2025-1217 * SECURITY UPDATE: insufficient HTTP header validation - debian/patches/CVE-2025-1734.patch: adds logic to fail invalid HTTP headers in ext/standard/http_fopen_wrapper.c - CVE-2025-1734 * SECURITY UPDATE: http redirect location truncation - debian/patches/CVE-2025-1861.patch: converts the allocation of location to be on heap instead of stack and errors if the location length is greater than 8086 bytes in ext/standard/http_fopen_wrapper.c - CVE-2025-1861 * SECURITY UPDATE: insufficient HTTP header validation - debian/patches/CVE-2025-1736.patch: updates the http user header check for crlf in ext/standard/http_fopen_wrapper.c - CVE-2025-1736 Critical TuxCare License Agreement CVE-2025-1217 CVE-2025-1861 CVE-2025-1734 CVE-2025-1736 Ubuntu 16.04 LTS * SECURITY UPDATE: Disable URN protocol access to prevent potential security vulnerabilities - debian/patches/CVE-2025-54574.patch: Add ACL rules to deny URN protocol access by default - CVE-2025-54574 Critical TuxCare License Agreement CVE-2025-54574 Ubuntu 16.04 LTS * SECURITY UPDATE: heap buffer overflow in InterpretImageFilename function - debian/patches/CVE-2025-53014.patch: Correct out of bounds read of a single byte in InterpretImageFilename function - CVE-2025-53014 Critical TuxCare License Agreement CVE-2025-53014 Ubuntu 16.04 LTS * SECURITY UPDATE: access control bypass by trusted clients via TLS 1.3 session resumption - debian/patches/CVE-2025-23048.patch: update SNI validation to fix compatibility issue - CVE-2025-23048 Important TuxCare License Agreement CVE-2025-23048 Ubuntu 16.04 LTS * SECURITY UPDATE: inadequate validation in pgsql and pdo_pgsql functions - debian/patches/CVE-2025-1735.patch: Add error checks for escape function in pgsql and pdo_pgsql extensions to prevent potential security issues - CVE-2025-1735 Important TuxCare License Agreement CVE-2025-1735 Ubuntu 16.04 LTS * SECURITY UPDATE: defect in TarFile module leading to infinite loop and deadlock - debian/patches/CVE-2025-8194.patch: Validate archives to ensure member offsets are non-negative - CVE-2025-8194 Important TuxCare License Agreement CVE-2025-8194 Ubuntu 16.04 LTS * SECURITY UPDATE: Overwrite a local file - debian/patches/CVE-2023-30630.patch: Prevent --dump-bin from overwriting local files to address privilege escalation vulnerability - CVE-2023-30630 Important TuxCare License Agreement CVE-2023-30630 Ubuntu 16.04 LTS * SECURITY UPDATE: memory corruption vulnerability in attribute type flags - debian/patches/CVE-2025-7425.patch: fix heap-use-after-free in xmlFreeID caused by `atype` corruption - CVE-2025-7425 Important TuxCare License Agreement CVE-2025-7425 Ubuntu 16.04 LTS * SECURITY UPDATE: stack overflow via multiple consecutive %d format specifiers in filename template - debian/patches/CVE-2025-53101.patch: Fix InterpretImageFilename function by adjusting the offset to prevent potential buffer overflow - CVE-2025-53101 Critical TuxCare License Agreement CVE-2025-53101 Ubuntu 16.04 LTS * SECURITY UPDATE: out-of-bounds read in sftp_handle function - debian/patches/CVE-2025-5318.patch: fix possible buffer overrun issue in sftpserver.c by changing conditional from val > SFTP_HANDLES to val >= SFTP_HANDLES - CVE-2025-5318 Important TuxCare License Agreement CVE-2025-5318 Ubuntu 16.04 LTS * SECURITY UPDATE: heap out-of-bounds write in BlobStream (WriteBlob) - debian/patches/CVE-2025-57807.patch: enforce extent ≥ offset + length when forward-seeking before writes in MagickCore/blob.c - CVE-2025-57807 Critical TuxCare License Agreement CVE-2025-57807 Ubuntu 16.04 LTS * SECURITY UPDATE: disable kpasswd port to mitigate vulnerabilities - debian/patches/CVE-2022-2031_CVE-2022-32744.patch: add kpasswd port = 0 to disable kpasswd service as a workaround for CVE-2022-32744 and CVE-2022-2031 - kpasswd is not a critical protocol for AD DC in most installations - CVE-2022-32744, CVE-2022-2031 Important TuxCare License Agreement CVE-2022-2031 CVE-2022-32744 Ubuntu 16.04 LTS * SECURITY UPDATE: double-free when exporting SAN otherName - debian/patches/CVE-2025-32988.patch: fix double-free triggered when exporting certificates with multiple SAN otherName entries. - CVE-2025-32988 * SECURITY UPDATE: 1-byte heap write in certtool template parsing - debian/patches/CVE-2025-32990.patch: prevent 1-byte heap overwrite caused by malformed certificate template input in certtool. - CVE-2025-32990 Important TuxCare License Agreement CVE-2025-32988 CVE-2025-32990 Ubuntu 16.04 LTS * SECURITY UPDATE: authentication bypass vulnerability - debian/patches/CVE-2025-58060.patch: block authentication using alternate method in scheduler/auth.c - CVE-2025-58060 Important TuxCare License Agreement CVE-2025-58060 Ubuntu 16.04 LTS * SECURITY UPDATE: memory leak when specifying multiple %d format specifiers in filename template - debian/patches/CVE-2025-53019.patch: Fix memory leak when entering StreamImage multiple times - CVE-2025-53019 Important TuxCare License Agreement CVE-2025-53019 Ubuntu 16.04 LTS * SECURITY UPDATE: IPP extension tag parsing vulnerability - debian/patches/CVE-2025-58364.patch: fix handling of extension tag in ipp_read_io() - CVE-2025-58364 Moderate TuxCare License Agreement CVE-2025-58364 Ubuntu 16.04 LTS * SECURITY UPDATE: geometry string with only ":" triggers crash leading to denial of service - debian/patches/CVE-2025-55212.patch: Fix invalid width and height checks in ThumbnailImage by adding MagickSafeReciprocal method - CVE-2025-55212 Important TuxCare License Agreement CVE-2025-55212 Ubuntu 16.04 LTS * SECURITY UPDATE: fix privilege escalation in pam_namespace - debian/patches-applied/CVE-2025-6020-pre.patch: prerequisite changes - debian/patches-applied/CVE-2025-6020.patch: enforce proper handling of instance directory symlinks to prevent mounting arbitrary paths - CVE-2025-6020 Important TuxCare License Agreement CVE-2025-6020 Ubuntu 16.04 LTS * SECURITY UPDATE: fix NULL pointer dereference in SOAP with huge QName - debian/patches/CVE-2025-6491.patch: Add safeguard in ext/soap/soap.c to handle invalid XML node names produced by libxml2 with extremely large namespace prefixes - CVE-2025-6491 Moderate TuxCare License Agreement CVE-2025-6491 Ubuntu 16.04 LTS * SECURITY UPDATE: uncontrolled recursion causing stack overflow via crafted XPath expressions - debian/patches/CVE-2025-9714-*.patch: Add comprehensive XPath DoS protection including operation limits, recursion depth controls, and proper handling of recursive invocations to prevent stack overflows and resource exhaustion - CVE-2025-9714 Moderate TuxCare License Agreement CVE-2025-9714 Ubuntu 16.04 LTS * SECURITY UPDATE: heap-based buffer overflow in function _bfd_elf_gc_mark_rsec - debian/patches/CVE-2025-1176.patch: prevent illegal memory access when indexing into the sym_hashes array of the elf bfd cookie structure - CVE-2025-1176 Moderate TuxCare License Agreement CVE-2025-1176 Ubuntu 16.04 LTS * SECURITY UPDATE: 32-bit integer overflow in BMP encoder allows attacker- controlled heap corruption - debian/patches/CVE-2025-57803.patch: Fix buffer overflow issue in BMP decoder caused by insufficient memory allocation - CVE-2025-57803 Important TuxCare License Agreement CVE-2025-55154 CVE-2025-55298 CVE-2025-57803 Ubuntu 16.04 LTS * SECURITY UPDATE: improper handling of association groups can lead to use- after-free vulnerability - debian/patches/CVE-2021-3738.patch: Fix routines for preparing service before handling CVE-2021-3738 - debian/patches/CVE-2021-3738-1.patch: Fix DsBindAssocGroupAdmin to use admin credentials for DsBind - CVE-2021-3738 Important TuxCare License Agreement CVE-2021-3738 Ubuntu 16.04 LTS * SECURITY UPDATE: memory corruption in bfd_set_format function - debian/patches/CVE-2025-1153.patch: Fix heap/memory corruption in bfd_set_format of format.c - CVE-2025-1153 Moderate TuxCare License Agreement CVE-2025-1153 Ubuntu 16.04 LTS * SECURITY UPDATE: segmentation fault in silent Ex mode due to scrolling function vulnerability - debian/patches/CVE-2025-24014.patch: Fix segfault in win_line() by checking that ScreenLines is not NULL in gui_do_scroll() - CVE-2025-24014 Moderate TuxCare License Agreement CVE-2025-24014 Ubuntu 16.04 LTS * SECURITY UPDATE: information disclosure in error handling - debian/patches/CVE-2025-62168.patch: Fix bug where proxy auth data was visible to scripts by redacting credentials from error page code expansion output and email links - CVE-2025-62168 Important TuxCare License Agreement CVE-2025-62168 Ubuntu 16.04 LTS * SECURITY UPDATE: integer overflow vulnerability in BMP decoder on 32-bit systems - debian/patches/CVE-2025-62171.patch: add extra check to fix issue on 32-bit systems - CVE-2025-62171 Important TuxCare License Agreement CVE-2025-62171 Ubuntu 16.04 LTS * SECURITY UPDATE: insecure regex patterns for interpreter detection - debian/patches/CVE-2022-30688.patch: prevent local privilege escalation by anchoring interpreter regex patterns - CVE-2022-30688 Important TuxCare License Agreement CVE-2022-30688 Ubuntu 16.04 LTS * SECURITY UPDATE: remove abort call in debug format printing code - debian/patches/CVE-2025-11839.patch: remove call to abort in the debug format printing code, allowing display of fuzzed input files to complete without triggering an abort - CVE-2025-11839 * SECURITY UPDATE: fix SEGV in vfinfo - debian/patches/CVE-2025-11840.patch: prevent segmentation fault by checking for NULL name in reloc howto structure in coff_slurp_reloc_table - CVE-2025-11840 Moderate TuxCare License Agreement CVE-2025-11840 CVE-2025-11839 Ubuntu 16.04 LTS * OpenJDK 8u472 release - CVE-2025-53057: fix unauthorized remote data-modification - CVE-2025-53066: fix unauthorized remote data access - CVE-2025-61748: fix limited remote unauthorized data modification - Release notes: https://mail.openjdk.org/pipermail/jdk8u-dev/2025-October/thread.html Moderate TuxCare License Agreement CVE-2025-53066 CVE-2025-53057 Ubuntu 16.04 LTS * SECURITY UPDATE: debug_information memory leak in process_debug_info - debian/patches/CVE-2025-8225.patch: prevent memory leak by checking alloc_num_debug_info_entries instead of num_debug_info_entries to determine whether debug_information has been allocated - CVE-2025-8225 Low TuxCare License Agreement CVE-2025-8225 Ubuntu 16.04 LTS * SECURITY UPDATE: Heap buffer overflow in array_merge() - debian/patches/CVE-2025-14178.patch: add validation to check if total element count exceeds HT_MAX_SIZE before allocation. - CVE-2025-14178 Low TuxCare License Agreement CVE-2025-14178 Ubuntu 16.04 LTS * SECURITY UPDATE: Heap-based buffer overflow in elf_swap_shdr function - debian/patches/CVE-2025-11083.patch: Avoid a linker crash by rejecting corrupt section headers in linker input files. Changed elf_swap_shdr_in to return bfd_boolean and validate section sizes against file size to detect and reject corrupt headers - CVE-2025-11083 Important TuxCare License Agreement CVE-2025-11083 Ubuntu 16.04 LTS * SECURITY UPDATE: Possible DoS attack caused by a slow client communication - debian/patches/CVE-2025-58436.patch: fix unresponsive cupsd process caused by a slow client - CVE-2025-58436 Moderate TuxCare License Agreement CVE-2025-58436 Ubuntu 16.04 LTS * SECURITY UPDATE: Carriage Return characters in credential protocol - debian/patches/CVE-2024-52006.patch: fix to disallow Carriage Return characters in the credential protocol by default to prevent vulnerabilities when credential helpers interpret bare Carriage Returns as newlines - CVE-2024-52006 Important TuxCare License Agreement CVE-2024-52006 Ubuntu 16.04 LTS * SECURITY UPDATE: memory corruption in armor parser - debian/patches/CVE-2025-68973.patch: Fix faulty double increment in armor_filter function. - CVE-2025-68973 Important TuxCare License Agreement CVE-2025-68973 Ubuntu 16.04 LTS * SECURITY UPDATE: Confusing users into sending their passwords to sites under the attacker’s control using crafted URLs - debian/patches/CVE-2024-50349.patch: also encode <host>[:<port>] in credential_format(), sanitize the user prompt - CVE-2024-50349 Moderate TuxCare License Agreement CVE-2024-50349 Ubuntu 16.04 LTS * SECURITY UPDATE: DoS by providing specially crafted PKCS#7 data for signature verification - debian/patches/CVE-2026-22796.patch: ensure ASN1 types are checked before use - CVE-2026-22796 Moderate TuxCare License Agreement CVE-2026-22796 Ubuntu 16.04 LTS * SECURITY UPDATE: XML_ExternalEntityParserCreate failure to copy the encoding handler data can cause a NULL dereference (CWE-476) from external entities that declare use of an unknown encoding. The expected impact is denial of service. - debian/patches/CVE-2026-24515.patch: Make XML_ExternalEntityParserCreate copy unknown encoding handler user data - CVE-2026-24515 Low TuxCare License Agreement CVE-2026-24515 Ubuntu 16.04 LTS * SECURITY UPDATE: out of bounds write vulnerability in XBM decoder - debian/patches/CVE-2026-23876.patch: add overflow checks to prevent out of bounds write in coders/xbm.c - CVE-2026-23876 Critical TuxCare License Agreement CVE-2026-23876 Ubuntu 16.04 LTS * SECURITY UPDATE: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference - debian/patches/CVE-2025-69421.patch: Check oct argument for NULL - CVE-2025-69421 Important TuxCare License Agreement CVE-2025-69421 Ubuntu 16.04 LTS * SECURITY UPDATE: Possible memory corruption in the armor parser - debian/patches/CVE-2025-68973.patch: fix faulty double increment - CVE-2025-68973 Important TuxCare License Agreement CVE-2025-68973 Ubuntu 16.04 LTS * SECURITY UPDATE: Malicious SVG file resulted in a DoS attack - debian/patches/CVE-2025-68618.patch: fix DOS when processing a specially crafted malicious SVG file - CVE-2025-68618 * SECURITY UPDATE: WriteSVGImage function, using an int variable to store number_attributes caused an integer overflow and trigger a DoS attack - debian/patches/CVE-2025-69204.patch: fix DOS due to integer overflow during image processing of a specially crafted SVG image - CVE-2025-69204 Important TuxCare License Agreement CVE-2025-69204 CVE-2025-68618 Ubuntu 16.04 LTS * SECURITY UPDATE: defect in imaplib module, when passed a user-controlled command, commands can be injected using newlines - debian/patches/CVE-2025-15366.patch: Fix command injection by rejecting commands containing control characters - CVE-2025-15366 Important TuxCare License Agreement CVE-2025-15366 Ubuntu 16.04 LTS * SECURITY UPDATE: defect in poplib module, when passed a user-controlled command, commands can be injected using newlines - debian/patches/CVE-2025-15367.patch: Fix command injection by rejecting commands containing control characters - CVE-2025-15367 Important TuxCare License Agreement CVE-2025-15367 Ubuntu 16.04 LTS * OpenJDK 8u482 release + CVE-2026-21945: enhance Certificate Checking + CVE-2026-21932: enhance Handling of URIs + CVE-2026-21933: improve HttpServer Request handling + CVE-2026-21925: improve JMX connections - Release notes: https://mail.openjdk.org/pipermail/jdk8u-dev/2026-January/020959.html * d/p/hotspot-libpath-*.diff: Refresh patches. * d/p/uabs-*.diff: Drop patches applied upstream. Important TuxCare License Agreement CVE-2026-21925 CVE-2026-21933 CVE-2026-21945 CVE-2026-21932 Ubuntu 16.04 LTS * SECURITY UPDATE: Buffer underflow in GVariant parser leads to heap corruption - debian/patches/CVE-2025-14087_14512.patch: Fix integer overflows in GVariant text format parser when processing input longer than INT_MAX - CVE-2025-14087 * SECURITY UPDATE: Integer overflow in escape_byte_string() leads to heap buffer overflow - debian/patches/CVE-2025-14087_14512.patch: Fix integer overflow in escape_byte_string() for byte strings with many invalid characters - CVE-2025-14512 Critical TuxCare License Agreement CVE-2025-14512 CVE-2025-13601 CVE-2025-14087 Ubuntu 16.04 LTS * SECURITY UPDATE: out-of-bounds read vulnerability - debian/patches/CVE-2026-26284.patch: Fix incorrect loop initialization in delta decoding; prevent out-of-bounds read caused by starting table scan at invalid index. - CVE-2026-26284 * SECURITY UPDATE: out-of-bounds heap write on 32-bit systems - debian/patches/CVE-2026-25897.patch: Add size-calculating heap overflow sanity check and validate row padding addition to prevent out-of-bounds heap write on 32-bit systems caused by integer overflow in pixel buffer length computation. - CVE-2026-25897 Critical TuxCare License Agreement CVE-2026-25897 CVE-2026-26284 Ubuntu 16.04 LTS * SECURITY UPDATE: Buffer overflow in netbeans special_keys() handling - debian/patches/CVE-2026-26269.patch: limit writing to max KEYBUFLEN bytes - CVE-2026-26269 Important TuxCare License Agreement CVE-2026-26269 Ubuntu 16.04 LTS * SECURITY UPDATE: command injection via improper NetBIOS name validation in shell hook handling (CVE) - debian/patches/CVE-2025-10230-1.patch: Validate NetBIOS names before passing them to hook shell command, rejecting characters outside alphanumeric, dot, underscore, or hyphen. Prevent command injection caused by untrusted names containing shell metacharacters. - debian/patches/CVE-2025-10230-2.patch: Add selftest verifying WINS hook skip invocation for registered names containing shell metacharacters; issue stem from unsafe name handling allowing hook execution with untrusted, potentially command-injecting name strings. - CVE-2025-10230 Critical TuxCare License Agreement CVE-2025-10230 Ubuntu 16.04 LTS * SECURITY UPDATE: denial-of-service via division-by-zero in image loading - debian/patches/CVE-2026-25799.patch: Fix sampling-factor validation by replacing incorrect AND with OR in horizontal/vertical axis checks and prevent acceptance of invalid sampling caused by flawed boolean logic. - CVE-2026-25799 * SECURITY UPDATE: Null pointer dereference in ClonePixelCacheRepository resulting in denial-of-service - debian/patches/CVE-2026-25798.patch: Add overflow sanity check in OpenPixelCache and reset cache storage class and length before throwing on allocation failure - CVE-2026-25798 * SECURITY UPDATE: memory leak in ReadSTEGANOImage that can be exploited for denial-of-service - debian/patches/CVE-2026-25796.patch: free watermark object on three early-return paths - CVE-2026-25796 * SECURITY UPDATE: a crafted profile contain invalid IPTC data may cause an infinite loop when writing it with `IPTCTEXT` - debian/patches/CVE-2026-26066.patch: replace `c=0` with `c=ReadBlobByte(ifile)` in formatIPTC so the loop advances past an unrecognised tag instead of spinning forever - CVE-2026-26066 Important TuxCare License Agreement CVE-2026-25799 CVE-2026-25796 CVE-2026-25798 CVE-2026-26066 Ubuntu 16.04 LTS * SECURITY UPDATE: nULL pointer dereference and crash during image read when temporary file creation fails - debian/patches/CVE-2026-25795.patch: Destroy read_info after copying filename and avoid NULL pointer dereference in ReadSFWImage; cause: incorrect order of operations when temporary file creation fails. - CVE-2026-25795 Important TuxCare License Agreement CVE-2026-25795 Ubuntu 16.04 LTS * SECURITY UPDATE: heap information disclosure in PSD handler - debian/patches/CVE-2026-24481.patch: zero-initialize pixel buffer in ReadPSDChannelZip to prevent heap info leak when ZIP-compressed layer data decompresses to fewer bytes than expected - CVE-2026-24481 Low TuxCare License Agreement CVE-2026-24481 Ubuntu 16.04 LTS * SECURITY UPDATE: remote out-of-bounds read in SFTP extension name handler - debian/patches/CVE-2026-3731.patch: Fix out-of-bound read from sftp extensions; correct index comparison from '>' to '>=' and prevent access past extension count. - CVE-2026-3731 Important TuxCare License Agreement CVE-2026-3731 Ubuntu 16.04 LTS * SECURITY UPDATE: integer overflow in doContent tag buffer reallocation. - debian/patches/CVE-2026-25210.patch: add overflow check for tag buffer reallocation - CVE-2026-25210 Important TuxCare License Agreement CVE-2026-25210 Ubuntu 16.04 LTS * SECURITY UPDATE: global buffer overflow read via negative pixel index in UIL and XPM image encoders - debian/patches/CVE-2026-25898.patch: clamp negative pixel index values to zero in WriteUILImage, WritePICONImage, and WriteXPMImage before using them as array subscripts into the Cixel table. - CVE-2026-25898 Critical TuxCare License Agreement CVE-2026-25986 CVE-2026-25987 CVE-2026-25898 Ubuntu 16.04 LTS * SECURITY UPDATE: stack buffer overflow in msl.c (attribute handling), path traversal bypass of security policy, XSS in HTML coder output, and MSL attribute overflow - debian/patches/CVE-2026-25797_CVE-2026-25965_CVE-2026-25968_CVE-2026-25982.patch: Fix memory leaks, stack overflows, integer overflows and out‑of‑bounds reads; add bounds checks, validate DCM entry sizes, sanitize PostScript filenames, canonicalize paths and free resources; escape user-controlled strings written as raw HTML in the HTML coder; cause was unsafe header and filename parsing, incorrect assumptions about byte counts, path resolution, unnormalized path matching allowing policy bypass, and unescaped HTML output enabling cross-site scripting. - CVE-2026-25797 - CVE-2026-25965 - CVE-2026-25968 - CVE-2026-25982 * SECURITY UPDATE: null pointer dereference in msl.c (repage/roll handlers) - debian/patches/CVE-2026-25983.patch: move image null‑checks before accessing image attributes in the repage and roll MSL tag handlers; cause was dereferencing the image pointer for page geometry and dimensions before verifying the image was defined. - CVE-2026-25983 * SECURITY UPDATE: infinite recursion via crafted MSL/SVG/MVG files - debian/patches/CVE-2026-25971.patch: add global Splay tree guards in MSL and SVG coders to detect and reject recursive image references; block dangerous protocols (ftp, http, mvg, vid) in DrawPrimitive; cause was unbounded recursion through nested image reads. - CVE-2026-25971 * SECURITY UPDATE: null pointer dereference in msl.c (comment/label handlers) - debian/patches/CVE-2026-23952.patch: add image null-checks before accessing image properties in the comment and label MSL end-element handlers; cause was dereferencing the image pointer for DeleteImageProperty before verifying the image was defined. - CVE-2026-23952 * SECURITY UPDATE: MSLPushImage return value not captured - debian/patches/CVE-2026-25988.patch: change MSLPushImage to return the new image index and capture the return value in the MSL image tag handler; cause was the local index variable not being updated after pushing a new image onto the stack. - CVE-2026-25988 Critical TuxCare License Agreement CVE-2026-25968 CVE-2026-23952 CVE-2026-25971 CVE-2026-25797 CVE-2026-25988 CVE-2026-25983 CVE-2026-25965 CVE-2026-25982 Ubuntu 16.04 LTS * SECURITY UPDATE: Heap buffer overflow in helpfile option handling - debian/patches/CVE-2026-25749.patch: use vim_strncpy with MAXPATHL bound instead of unbounded STRCPY in get_tagfname() - CVE-2026-25749 Important TuxCare License Agreement CVE-2026-28417 CVE-2026-25749 CVE-2026-28421 Ubuntu 16.04 LTS * SECURITY UPDATE: heap overflow in PNG encoder from large profile - debian/patches/CVE-2026-30883.patch: add overflow check in Magick_png_write_raw_profile to reject profiles with length that would overflow allocated_length arithmetic - CVE-2026-30883 Important TuxCare License Agreement CVE-2026-30883 Ubuntu 16.04 LTS * SECURITY UPDATE: memory corruption and denial-of-service via malicious SIXEL images - debian/patches/CVE-2026-25970.patch: Correct misspelled position variables and adjust variable types; fix out-of-bounds write caused by incorrect bounds checks and signed/unsigned type misuse. - CVE-2026-25970 Important TuxCare License Agreement CVE-2026-25970 Ubuntu 16.04 LTS * SECURITY UPDATE: denial-of-service from nested multi-layer MVG-to-SVG conversions - debian/patches/CVE-2026-24484.patch: Throw VectorGraphicsNestedTooDeeply when vector-graphics nesting reaches MagickMaxRecursionDepth; fix crashes caused by unbounded nesting of graphic-context elements. - debian/patches/CVE-2026-24484-1.patch: Add recursion-depth check and throw exception for excessively nested vector graphics; mitigate crash/resource exhaustion caused by missing bounds check allowing unbounded nesting. - CVE-2026-24484 Moderate TuxCare License Agreement CVE-2026-24484 Ubuntu 16.04 LTS * SECURITY UPDATE: denial of service via use-after-free in ICP - debian/patches/CVE-2026-33526.patch: remove duplicate rfc1738_escape call in icpGetRequest that invalidated the previously escaped URL pointer - CVE-2026-33526 * SECURITY UPDATE: denial of service via use-after-free in ICP request handling - debian/patches/CVE-2026-32748.patch: return HttpRequestPointer and move icpAccessAllowed into icpGetRequest to fix HttpRequest lifetime for ICP v3 queries - CVE-2026-32748 Important TuxCare License Agreement CVE-2026-33526 CVE-2026-32748 Ubuntu 16.04 LTS * SECURITY UPDATE: fix heap buffer overflow in _bfd_elf_parse_eh_frame - debian/patches/CVE-2025-11082.patch: fix heap buffer overflow in _bfd_elf_parse_eh_frame - CVE-2025-11082 * SECURITY UPDATE: fix NULL deref in elf_gc_sweep with empty groups - debian/patches/CVE-2025-5244.patch: fix NULL deref in elf_gc_sweep with empty groups - CVE-2025-5244 * SECURITY UPDATE: fix SEGV in debug_type_samep - debian/patches/CVE-2025-5245.patch: fix SEGV in debug_type_samep - CVE-2025-5245 * SECURITY UPDATE: fix out-of-bounds reads in xcoff_link_add_symbols - debian/patches/CVE-2026-3441.patch: properly bounds check XTY_LD x_scnlen index and sanity check r_symndx before using it to index sym hashes in xcoff_link_add_symbols - CVE-2026-3441 - CVE-2026-3442 Important TuxCare License Agreement CVE-2026-3442 CVE-2025-11082 CVE-2025-5244 CVE-2026-3441 CVE-2025-5245 Ubuntu 16.04 LTS * SECURITY UPDATE: heap read past bounds in sftp_parse_longname from malicious SFTP longname field - debian/patches/CVE-2026-0968.patch: validate longname pointer and longname_field; bound string walks at NUL; fail if field not found - CVE-2026-0968 Low TuxCare License Agreement CVE-2026-0968 Ubuntu 16.04 LTS * SECURITY UPDATE: buffer overflow when ELF section size is invalid - debian/patches/CVE-2019-1010180.patch: reject ELF sections whose recorded size exceeds the file size - CVE-2019-1010180 Important TuxCare License Agreement CVE-2019-1010180 Ubuntu 16.04 LTS * SECURITY UPDATE: Integer overflow leading to out-of-bounds write when SSH_MSG_CHANNEL_REQUEST packets with exit signal messages are parsed. - debian/patches/CVE-2019-3857.patch: check namelen + 1 does not overflow before allocation in exit-signal handling. - CVE-2019-3857 * SECURITY UPDATE: Integer overflow in bounds check in SSH_MSG_DISCONNECT packet parsing enabling out-of-bounds read. - debian/patches/CVE-2019-17498.patch: harden bounds checking in SSH_MSG_DISCONNECT, SSH_MSG_DEBUG, and SSH_MSG_GLOBAL_REQUEST handlers to prevent unsigned integer underflow and overflow. - CVE-2019-17498 Critical TuxCare License Agreement CVE-2019-3859 CVE-2019-3857 CVE-2019-3862 CVE-2019-17498 CVE-2019-3860 CVE-2019-3861 CVE-2019-3858 Ubuntu 16.04 LTS * SECURITY UPDATE: use-after-free in oniguruma onig_new_deluxe() - debian/patches/CVE-2019-13224.patch: reject mismatched encodings in ext/mbstring/oniguruma/regext.c so onig_new_deluxe() returns ONIGERR_NOT_SUPPORTED_ENCODING_COMBINATION instead of calling the buggy conv_encoding() path. - CVE-2019-13224 * SECURITY UPDATE: heap buffer over-read in oniguruma str_lower_case_match - debian/patches/CVE-2019-19246.patch: add bounds check (t >= tend) inside the lowlen loop of str_lower_case_match in ext/mbstring/oniguruma/regexec.c before dereferencing t. - CVE-2019-19246 Critical TuxCare License Agreement CVE-2019-13224 CVE-2019-19246 Ubuntu 16.04 LTS * SECURITY UPDATE: integer overflow in transport read allowing out-of-bounds write via crafted SSH packet - debian/patches/CVE-2019-3855.patch: add packet_length bounds check against LIBSSH2_PACKET_MAXPAYLOAD in transport read - CVE-2019-3855 * SECURITY UPDATE: integer overflow in keyboard-interactive handling allowing out-of-bounds write via crafted num-prompts value - debian/patches/CVE-2019-3856.patch: cap num_prompts at 100 to prevent excessive allocation in keyboard-interactive auth - CVE-2019-3856 * SECURITY UPDATE: integer overflow in keyboard-interactive response allowing out-of-bounds write via crafted response lengths - debian/patches/CVE-2019-3863.patch: add SIZE_MAX overflow check in keyboard-interactive response packet length calculation - CVE-2019-3863 * SECURITY UPDATE: out-of-bounds memory access in kex exchange when reading malformed data in diffie_hellman_sha1/sha256 - debian/patches/CVE-2019-13115.patch: add _libssh2_copy_string() bounds-checked helper and use it in kex DH group exchange - CVE-2019-13115 Important TuxCare License Agreement CVE-2019-13115 CVE-2019-3856 CVE-2019-3855 CVE-2019-3863 Ubuntu 16.04 LTS * SECURITY UPDATE: arbitrary code execution via PPD keyword injection - debian/patches/CVE-2026-34980.patch: filter control characters from option values and allowlist PPD keywords merged from CUPSD_LOG_PPD messages in scheduler/job.c - CVE-2026-34980 Important TuxCare License Agreement CVE-2026-34980 Ubuntu 16.04 LTS * SECURITY UPDATE: Command injection via newline in glob() - debian/patches/CVE-2026-33412.patch: add '\n' to SHELL_SPECIAL in src/os_unix.c so newlines in glob() patterns are shell-escaped before mch_expand_wildcards() hands the string to the user's shell - CVE-2026-33412 Important TuxCare License Agreement CVE-2026-33412 Ubuntu 16.04 LTS * SECURITY UPDATE: out-of-bounds heap write in VIFF encoder due to integer truncation on 32-bit builds - debian/patches/CVE-2026-33900.patch: add overflow check in WriteVIFFImage to reject packets values that truncate when cast to size_t, preventing a heap write beyond the allocated buffer - CVE-2026-33900 * SECURITY UPDATE: out-of-bounds read in -sample operation via user supplied sample:offset artifact - debian/patches/CVE-2026-33905.patch: rewrite SampleImage to compute per-pixel x/y offsets inside the inner loop and fetch one virtual pixel at a time, so out-of-range offsets no longer index past the bounds of the source scan line; restores the PseudoClass/CMYK index-queue guard accidentally dropped in the original fix - CVE-2026-33905 Important TuxCare License Agreement CVE-2026-33900 CVE-2026-33905 Ubuntu 16.04 LTS * SECURITY UPDATE: NULL dereference in CMS RSA-OAEP decryption when the optional pSourceFunc parameters field is omitted from a KeyTransportRecipientInfo, leading to a denial of service. - debian/patches/CVE-2026-28390.patch: check plab->parameter for NULL before accessing its type field in rsa_cms_decrypt() - CVE-2026-28390 Important TuxCare License Agreement CVE-2026-28390 Ubuntu 16.04 LTS * SECURITY UPDATE: denial of service via crafted WebSocket frame with a 64-bit payload length whose most significant bit is set. The extended payload length read in WsFrameBase.processRemainingHeader() was assembled into a Java long without validation. With bit 63 set the value became negative, which the consumer then used as a loop bound, causing an infinite loop and exhausting CPU on the server thread. Affects Apache Tomcat 7.0.0 to 7.0.104, 8.5.0 to 8.5.56, 9.0.0.M1 to 9.0.36, and 10.0.0-M1 to 10.0.0-M6. - debian/patches/CVE-2020-13935.patch: validate the 64-bit payload length in processRemainingHeader() and reject frames with a negative value by throwing a WsIOException carrying a PROTOCOL_ERROR close reason; add the wsFrame.payloadMsbInvalid message to LocalStrings.properties. Also fold the companion fix 4c04982870 to apply the same validation to the legacy org/apache/catalina/websocket/WsFrame parser (still packaged in catalina.jar via WebSocketServlet), and the regression follow-up 34d19fbe24 in WsFrameBase.byteArrayToLong() (0xFF -> 0xFFL) that prevents silent corruption of payload lengths >= 4 bytes from int-shift promotion. Additionally fold b517002093 to apply the same 0xFF -> 0xFFL fix to the parallel helper Conversions.byteArrayToLong() in java/org/apache/catalina/util/Conversions.java, which is the helper used by the legacy WsFrame parser; without it the new < 0 check in the legacy parser would falsely reject legitimate large frames. Backport of upstream commits f9f75c14, 34d19fbe24, 4c04982870 and b517002093 (https://github.com/apache/tomcat/commit/f9f75c14 https://github.com/apache/tomcat/commit/34d19fbe24 https://github.com/apache/tomcat/commit/4c04982870 https://github.com/apache/tomcat/commit/b517002093) - CVE-2020-13935 Important TuxCare License Agreement CVE-2019-17563 CVE-2018-1336 CVE-2020-13935 CVE-2018-8034 Ubuntu 16.04 LTS * SECURITY UPDATE: stack buffer overflow in MNG/JNG encoder — missing NULL check after ImageToBlob() in WriteOneJNGImage could propagate a NULL blob pointer into later stack buffer operations (GHSA-7h7q-j33q-hvpf). - debian/patches/CVE-2026-28690.patch: bail out of WriteOneJNGImage when ImageToBlob() returns NULL, destroying jpeg_image and jpeg_image_info before returning MagickFalse (upstream e6e874875e48dd9838acca3bd22c14a4d2f1b3ca) - CVE-2026-28690 Important TuxCare License Agreement CVE-2026-28688 CVE-2026-33900 CVE-2026-28690 CVE-2026-33905 Ubuntu 16.04 LTS * SECURITY UPDATE: scp setuid/setgid bit handling - debian/patches/CVE-2026-35385.patch: when downloading files as root in legacy (-O) mode and without the -p (preserve modes) flag, mask out setuid/setgid bits in scp(1) sink(). - CVE-2026-35385 Important TuxCare License Agreement CVE-2026-35385 Ubuntu 16.04 LTS * SECURITY UPDATE: webbrowser.open accepts URLs with leading dashes - debian/patches/CVE-2026-4519-CVE-2026-4786.patch: reject URLs whose lstrip starts with '-' in Lib/webbrowser.py; also fix bypass via %action substitution in UnixBrowser.open(). - CVE-2026-4519 - CVE-2026-4786 Important TuxCare License Agreement CVE-2026-4519 Ubuntu 16.04 LTS * SECURITY UPDATE: privilege escalation on glusterd nodes via the CLI RPC program being exposed on the TCP listener when management-plane SSL is enabled, allowing a TLS-authenticated client outside the trusted storage pool to issue privileged volume-management commands via gluster --remote-host - debian/patches/CVE-2018-10841.patch: drop gd_inet_programs[1] = &gd_svc_cli_prog rebinding in glusterd init() so the trusted-pool CLI program remains bound to the TCP listener and the full CLI RPC program continues to be served only over the local UNIX domain socket - CVE-2018-10841 Important TuxCare License Agreement CVE-2018-10841 Ubuntu 16.04 LTS * SECURITY UPDATE: incorrect matching of authorized_keys principals="..." option when a certificate principal name contains a comma character - debian/patches/CVE-2026-35414.patch: split principal_list on commas and exact-match each entry instead of passing it to match_list() - CVE-2026-35414 Important TuxCare License Agreement CVE-2026-35414 Ubuntu 16.04 LTS * SECURITY UPDATE: Command injection in netbeans interface - debian/patches/CVE-2026-39881.patch: add nb_is_safe_string() in src/netbeans.c and validate typeName, fg and bg in defineAnnoType and key tokens in special_keys() against an allowlist before they reach coloncmd()/do_map(), preventing a malicious netbeans server from injecting Ex commands via '|' - CVE-2026-39881 Important TuxCare License Agreement CVE-2026-39881 Ubuntu 16.04 LTS * Fix build process: - debian/keystores/ca-cert.pem, ca.jks: regenerate self-signed test CA using the existing ca-key.pem (previous CA valid only until 21.03.2025). New validity: 21.04.2026 to 18.04.2036. - debian/keystores/localhost-cert.pem, localhost.jks, localhost-copy1.jks: re-issue against the new CA to keep the chain consistent. Existing localhost-key.pem is preserved. - debian/keystores/user1-cert.pem, user1.jks: re-issue against the new CA using the existing user1-key.pem (previous cert valid only until 21.03.2025). - debian/keystores/updating-certs.txt: refresh the procedure notes with current serials and expiry dates. * SECURITY UPDATE: Insecure default configuration of the CORS filter allowed cross-origin requests with credentials from any origin. The default settings enabled supportsCredentials alongside a wildcard allowedOrigins. Affects Apache Tomcat 7.0.41 to 7.0.88. - debian/patches/CVE-2018-8014.patch: Change default allowedOrigins to empty and default supportsCredentials to false in the CORS filter, reject the unsafe combination of supportsCredentials=true with allowedOrigins=* at configuration time, and simplify the handleSimpleCORS logic accordingly. Backport of upstream commit d83a76732e. Note: applications relying on the previous permissive defaults must configure the filter explicitly. - CVE-2018-8014 Critical TuxCare License Agreement CVE-2018-8014 Ubuntu 16.04 LTS * SECURITY UPDATE: tarfile DoS via negative member offsets - debian/patches/CVE-2025-8194.patch: validate that member offsets are non-negative in Lib/tarfile.py. - CVE-2025-8194 * SECURITY UPDATE: webbrowser.open accepts URLs with leading dashes - debian/patches/CVE-2026-4519-CVE-2026-4786.patch: reject URLs whose lstrip starts with '-' in Lib/webbrowser.py; also fix bypass via %action substitution in UnixBrowser.open(). - CVE-2026-4519 - CVE-2026-4786 Important TuxCare License Agreement CVE-2025-8194 CVE-2026-4519 Ubuntu 16.04 LTS * SECURITY UPDATE: domain user can become root on a domain member by renaming a machine account - debian/patches/CVE-2020-25717.patch: backport the el6/ol6 8-commit subset (samba 3.6.23 precedent); introduce the new "min domain uid" smb.conf parameter (default 1000) and enforce it in check_account() so a domain logon resolving to a uid below the threshold is rejected with NT_STATUS_INVALID_TOKEN, drop the DOMAIN\user to user prefix-stripping fallback in smb_getpwnam(), stop autocreating local users from check_account() and from the kerberos guest fallback by passing create=false, drop the !winbind_ping() branch in create_local_token() so a missing winbindd no longer silently switches the unix-token computation, and require a PAC in any domain mode (DC or member) inside gensec_generate_session_info_pac() returning NT_STATUS_NO_IMPERSONATION_TOKEN otherwise (the gensec hunk is the jointly tagged CVE-2020-25717+CVE-2020-25719 commit, so this update also delivers the member-server portion of CVE-2020-25719; the DC-side portion of CVE-2020-25719 is tracked separately under ELSCVE-104393) - CVE-2020-25717 * SECURITY UPDATE: privileged attribute escalation and structural objectclass change in active directory ldap server - debian/patches/CVE-2020-25722.patch: in source4/dsdb/samdb/ldb_modules/objectclass.c, capture the current structural objectclass at the start of objectclass_do_mod and reject any modify that would change it; in source4/dsdb/samdb/ldb_modules/samldb.c, factor the domain ntSecurityDescriptor lookup into samldb_get_domain_secdesc() and add samldb_check_sensitive_attributes() invoked from samldb_add() and samldb_modify() to refuse non-system writes to sidHistory, gate msDS-SecondaryKrbTgtNumber on the DS-Install-Replica extended right, and gate msDS-AllowedToDelegateTo on SePrivEnableDelegation - CVE-2020-25722 Important TuxCare License Agreement CVE-2020-25722 CVE-2020-25717 Ubuntu 16.04 LTS * SECURITY UPDATE: heap buffer underflow in ssh_get_hexa() on zero-length or NULL input, remotely reachable via GSSAPI authentication logging - debian/patches/CVE-2026-0966.patch: reject NULL/zero-length input in ssh_get_hexa() in src/dh.c - CVE-2026-0966: fix heap buffer underflow in ssh_get_hexa() Important TuxCare License Agreement CVE-2026-0966 Ubuntu 16.04 LTS * SECURITY UPDATE: Crash via malformed DNS response on musl libc systems - debian/patches/CVE-2026-40684.patch: handle musl libc dn_expand backslash-decimal escape oddity in string_copy_dnsdomain - CVE-2026-40684 Critical TuxCare License Agreement CVE-2026-40684 CVE-2026-40687 Ubuntu 16.04 LTS * SECURITY UPDATE: fix heap buffer over-read in raw pixel coders when -extract dimensions exceed -size dimensions - debian/patches/CVE-2026-25576.patch: fix heap buffer over-read in raw pixel coders when -extract dimensions exceed -size dimensions - CVE-2026-25576 Moderate TuxCare License Agreement CVE-2026-25576 Ubuntu 16.04 LTS * SECURITY UPDATE: TOCTOU race condition in cap_set_file() - debian/patches/CVE-2026-4878.patch: open the target file and operate on /proc/self/fd/N so the inode is locked between the regular-file check and the xattr update - CVE-2026-4878 Important TuxCare License Agreement CVE-2026-4878 Ubuntu 16.04 LTS * SECURITY UPDATE: fix integer overflow in username_len bounds checks across userauth_list, userauth_password and password change paths in src/userauth.c - debian/patches/CVE-2026-7598.patch: fix integer overflow in username_len bounds checks across userauth_list, userauth_password and password change paths in src/userauth.c - CVE-2026-7598 Critical TuxCare License Agreement CVE-2026-7598 Ubuntu 16.04 LTS * SECURITY UPDATE: XSS in PHP-FPM status endpoint - debian/patches/CVE-2026-6735.patch: HTML-encode proc.request_uri and tighten query_string entity flags in sapi/fpm/fpm/fpm_status.c. - CVE-2026-6735 Moderate TuxCare License Agreement CVE-2026-6735 Ubuntu 16.04 LTS * SECURITY UPDATE: fix out-of-bounds read in urldecode() via signed-char to ctype.h (GHSA-m8rr-4c36-8gq4) - debian/patches/CVE-2026-7258.patch: fix out-of-bounds read in urldecode() via signed-char to ctype.h (GHSA-m8rr-4c36-8gq4) - CVE-2026-7258 * SECURITY UPDATE: fix stale SOAP_GLOBAL ref_map pointer with Apache Map (GHSA-85c2-q967-79q5) - debian/patches/CVE-2026-6722.patch: fix stale SOAP_GLOBAL ref_map pointer with Apache Map (GHSA-85c2-q967-79q5) - CVE-2026-6722 * SECURITY UPDATE: fix broken Apache map value NULL check in soap encoder (GHSA-hmxp-6pc4-f3vv) - debian/patches/CVE-2026-7262.patch: fix broken Apache map value NULL check in soap encoder (GHSA-hmxp-6pc4-f3vv) - CVE-2026-7262 * SECURITY UPDATE: fix signed integer overflow of char array offset in metaphone (GHSA-96wq-48vp-hh57) - debian/patches/CVE-2026-7568.patch: fix signed integer overflow of char array offset in metaphone (GHSA-96wq-48vp-hh57) - CVE-2026-7568 * SECURITY UPDATE: fix use-after-free after SOAP header parsing failure with SOAP_PERSISTENCE_SESSION (GHSA-m33r-qmcv-p97q) - debian/patches/CVE-2026-7261.patch: fix use-after-free after SOAP header parsing failure with SOAP_PERSISTENCE_SESSION (GHSA-m33r-qmcv-p97q) - CVE-2026-7261 * SECURITY UPDATE: fix SQL injection in pdo_firebird quoter via NUL bytes in quoted strings (GHSA-w476-322c-wpvm) - debian/patches/CVE-2025-14179.patch: fix SQL injection in pdo_firebird quoter via NUL bytes in quoted strings (GHSA-w476-322c-wpvm) - CVE-2025-14179 Critical TuxCare License Agreement CVE-2026-7262 CVE-2025-14179 CVE-2026-7258 CVE-2026-7568 CVE-2026-7261 CVE-2026-6722 Ubuntu 16.04 LTS * SECURITY UPDATE: NULL pointer dereference in check_delta_base() when a delta CRL is processed without the required CRL Number extension and X509_V_FLAG_USE_DELTAS is enabled, leading to a denial of service. - debian/patches/CVE-2026-28388.patch: add NULL check for delta->crl_number before ASN1_INTEGER_cmp() in check_delta_base() - CVE-2026-28388 * SECURITY UPDATE: NULL pointer dereference in dh_cms_set_shared_info() and ecdh_cms_set_shared_info() when a CMS EnvelopedData message uses KeyAgreeRecipientInfo with a KeyEncryptionAlgorithmIdentifier whose optional parameter field is omitted, leading to a denial of service. - debian/patches/CVE-2026-28389.patch: check alg->parameter for NULL before accessing its type field in dh_cms_set_shared_info() and ecdh_cms_set_shared_info() - CVE-2026-28389 Important TuxCare License Agreement CVE-2026-28389 CVE-2026-28388 Ubuntu 16.04 LTS * SECURITY UPDATE: mod_proxy_ajp heap buffer over-read in ajp_msg_get_string - debian/patches/CVE-2026-34032.patch: add buffer checks in modules/proxy/ajp_msg.c. - CVE-2026-34032 * SECURITY UPDATE: AJP getter functions off-by-one out-of-bounds reads - debian/patches/CVE-2026-33857.patch: fix length checks in AJP msg_get functions in modules/proxy/ajp_msg.c. - CVE-2026-33857 * SECURITY UPDATE: mod_proxy_ajp heap over-read in ajp_parse_data - debian/patches/CVE-2026-34059.patch: fix message length check in modules/proxy/ajp_header.c. - CVE-2026-34059 * SECURITY UPDATE: mod_authn_socache crash in caching forward proxy - debian/patches/CVE-2026-33007.patch: validate URL earlier in modules/aaa/mod_authn_socache.c. - CVE-2026-33007 * SECURITY UPDATE: HTTP response splitting via malicious backend status line - debian/patches/CVE-2026-33523.patch: scan outgoing status line for newlines and controls in modules/http/http_filters.c. - CVE-2026-33523 * SECURITY UPDATE: mod_rewrite elevation of privileges via ap_expr in .htaccess - debian/patches/CVE-2026-24072.patch: use AP_EXPR_FLAG_RESTRICTED in htaccess context in modules/mappers/mod_rewrite.c and modules/metadata/mod_setenvif.c. mod_proxy_fcgi hunk omitted — ProxyFCGISetEnvIf was added in 2.4.26, after this source. - CVE-2026-24072 * SECURITY UPDATE: mod_auth_digest timing attack allowing Digest auth bypass - debian/patches/CVE-2026-33006.patch: use a constant-time comparison helper for nonce hash and digest checks, add VALID_NONCE validation and MD5_DIGEST_LEN length check in get_digest_rec, in modules/aaa/mod_auth_digest.c. Inline ap_crypto_equals_const_time() replaces apr_crypto_equals (added in apr-util 1.6, not in xenial's apr-util 1.5.4); the upstream apr-util version bump and the apr_crypto.h include are omitted accordingly. - CVE-2026-33006 * SECURITY UPDATE: mod_proxy_ajp ajp_msg_check_header bounds-check fix - debian/patches/CVE-2026-28780.patch: tighten the upper-bound check in ajp_msg_check_header() to reserve AJP_HEADER_LEN bytes of headroom in modules/proxy/ajp_msg.c (companion to CVE-2026-33857/34032). - CVE-2026-28780 Important TuxCare License Agreement CVE-2026-34059 CVE-2026-33006 CVE-2026-24072 CVE-2026-33523 CVE-2026-33857 CVE-2026-34032 CVE-2026-28780 CVE-2026-33007 Ubuntu 16.04 LTS * SECURITY UPDATE: fix heap buffer overrun in ngx_http_rewrite_module when rewrite is followed by set/if/rewrite with unnamed PCRE captures - debian/patches/CVE-2026-42945.patch: fix heap buffer overrun in ngx_http_rewrite_module when rewrite is followed by set/if/rewrite with unnamed PCRE captures - CVE-2026-42945 Important TuxCare License Agreement CVE-2026-42945 Ubuntu 16.04 LTS * SECURITY UPDATE: fix stack buffer overflow in XTileImage when loading malicious MIFF in display tool - debian/patches/CVE-2026-42050.patch: fix stack buffer overflow in XTileImage when loading malicious MIFF in display tool - CVE-2026-42050 Low TuxCare License Agreement CVE-2026-42050 Ubuntu 16.04 LTS * SECURITY UPDATE: fix quadratic complexity in attribute name collision check - debian/patches/CVE-2026-45186.patch: fix quadratic complexity in attribute name collision check - CVE-2026-45186 Important TuxCare License Agreement CVE-2026-45186 Ubuntu 16.04 LTS * SECURITY UPDATE: nameConstraints case-sensitive comparison bypass - debian/patches/CVE-2026-3833.patch: perform case-insensitive comparison of dNSName and rfc822Name domain labels in X.509 nameConstraints processing, fixing excludedSubtrees / permittedSubtrees bypass via letter-casing in the SAN. - CVE-2026-3833 Important TuxCare License Agreement CVE-2026-3833 Ubuntu 16.04 LTS * SECURITY UPDATE: libcurl may reuse the wrong connection for SMB(S) transfers, leading to access of an unintended SMB share with the same credentials. - debian/patches/CVE-2026-5773.patch: disable connection reuse for SMB(S) in lib/url.c by returning early from ConnectionExists() when the requested protocol is SMB or SMBS. - CVE-2026-5773 * test46-bump-cookie-expiry.patch: bump the hard-coded cookie expiry timestamp in tests/data/test46 from 2025-02-10 to 2099-01-01 so the cookie-jar test no longer fails on systems whose wall clock has advanced past February 2025. Important TuxCare License Agreement CVE-2026-5773 Ubuntu 16.04 LTS * SECURITY UPDATE: integer overflow in compressed-token decoder - debian/patches/CVE-2026-43618.patch: cap rx_token at MAX_TOKEN_INDEX and reject over-long simple_recv_token literal chunks to prevent remote memory disclosure via crafted compressed stream - CVE-2026-43618 Important TuxCare License Agreement CVE-2026-43618 Ubuntu 16.04 LTS * SECURITY UPDATE: Insufficient validation of filenames against control characters in repositories served via mod_dav_svn - debian/patches/CVE-2024-46901.patch: fix mod_dav_svn denial-of-service via control characters in paths Moderate TuxCare License Agreement CVE-2024-46901 Ubuntu 16.04 LTS * SECURITY UPDATE: fix shell-injection in netrw via crafted sftp:// and file:// URLs by escaping the tempfile name and restricting the filename-suffix regex to word characters (runtime/autoload/netrw.vim, upstream patch 9.2.0383) - debian/patches/CVE-2026-42307.patch: fix shell-injection in netrw via crafted sftp:// and file:// URLs by escaping the tempfile name and restricting the filename-suffix regex to word characters (runtime/autoload/netrw.vim, upstream patch 9.2.0383) - CVE-2026-42307 Low TuxCare License Agreement CVE-2026-42307 Ubuntu 16.04 LTS * SECURITY UPDATE: daemon-no-chroot TOCTOU symlink race - debian/patches/CVE-2026-29518.patch: track per-module chroot in am_chrooted and use_secure_symlinks; route the sender's read-path open, the receiver's basis-file open, mkstemp, and inplace write through secure_relative_open() / secure_mkstemp() - CVE-2026-29518 Important TuxCare License Agreement CVE-2026-29518 Ubuntu 16.04 LTS * SECURITY UPDATE: fix heap buffer overflow in ngx_http_rewrite_module with overlapping captures - debian/patches/CVE-2026-9256.patch: fix heap buffer overflow in ngx_http_rewrite_module with overlapping captures - CVE-2026-9256 Low TuxCare License Agreement CVE-2026-9256 Ubuntu 16.04 LTS * SECURITY UPDATE: postgresql May-2026 CVE batch - debian/patches/CVE-2026-6473.patch: integer overflow fixes across multiple vulnerable sites: formatting.c size calculations (mul_size), intarray/ltxtquery findoprnd() left-offset overflow with int16 check, ltree lquery numvar/totallen overflow with PG_UINT16_MAX check, ts_headline option length overflow with per-option ERRCODE_INVALID_PARAMETER_VALUE checks, array_agg accumArrayResultArr() nitems overflow with MaxArraySize check, and hstore_plperl/hstore_plpython palloc overflow via mul_size(). - debian/patches/CVE-2026-6474.patch: guard pg_strftime() callers and ensure null-terminated output on overflow; split timeofday() pg_strftime so the %Z timezone string is never embedded as a format string in subsequent snprintf(). - debian/patches/CVE-2026-6475.patch: prevent path traversal in pg_rewind via path_is_safe_for_extraction() helper. - debian/patches/CVE-2026-6477.patch: harden PQfn()/pqFunctionCall3 against server-controlled buffer overruns in libpq large-object interface (lo_read, lo_lseek64 and lo_tell64 callers). - debian/patches/CVE-2026-6478.patch: add timingsafe_bcmp() helper and apply it in MD5/RADIUS/plain auth paths to prevent timing-channel leaks (SCRAM not in 9.5). - debian/patches/CVE-2026-6479.patch: fix unbounded recursive handling of SSL negotiation in ProcessStartupPacket() (convert recursive call to goto-retry loop). - debian/patches/CVE-2026-6637.patch: switch refint contrib check_foreign_key to StringInfo and quote_literal_cstr() to prevent SQL injection and stack buffer overruns. - CVE-2026-6473 - CVE-2026-6474 - CVE-2026-6475 - CVE-2026-6477 - CVE-2026-6478 - CVE-2026-6479 - CVE-2026-6637 * debian/patches/fix-regress-tzdata-LMT.patch: refresh src/test/regress expected output for date, timestamptz and horology tests so they match the LMT abbreviation emitted by current tzdata for pre-1883 dates. Low TuxCare License Agreement CVE-2026-6637 CVE-2026-6473 CVE-2026-6474 CVE-2026-6479 CVE-2026-6477 CVE-2026-6478 CVE-2026-6475 Ubuntu 16.04 LTS * SECURITY UPDATE: add case sensitive attribute to LockOutRealm - debian/patches/CVE-2026-43513.patch: add case sensitive attribute to LockOutRealm - CVE-2026-43513 * SECURITY UPDATE: fix the handling of invalid users with DIGEST authentication - debian/patches/CVE-2026-43512.patch: fix the handling of invalid users with DIGEST authentication - CVE-2026-43512 * SECURITY UPDATE: switch AJP secret comparison to a constant time algorithm - debian/patches/CVE-2026-43514.patch: switch AJP secret comparison to a constant time algorithm - CVE-2026-43514 * SECURITY UPDATE: ensure RealmBase finds all matching extension based constraints - debian/patches/CVE-2026-43515.patch: ensure RealmBase finds all matching extension based constraints - CVE-2026-43515 * SECURITY UPDATE: add a configurable limit for WebDAV XML request bodies - debian/patches/CVE-2026-41284.patch: add a configurable limit for WebDAV XML request bodies - CVE-2026-41284 Low TuxCare License Agreement CVE-2026-43514 CVE-2026-43512 CVE-2026-41284 CVE-2026-43515 CVE-2026-43513 Ubuntu 16.04 LTS * SECURITY UPDATE: GSS-API resource leak triggered by multi-round TKEY - debian/patches/CVE-2026-3039.patch: reject GSS_S_CONTINUE_NEEDED in dst_gssapi_acceptctx() and release the partial security context and gouttoken so they don't accumulate per malicious TKEY query. - CVE-2026-3039 Important TuxCare License Agreement CVE-2026-3039 Ubuntu 16.04 LTS * SECURITY UPDATE: command injection in tar plugin Vimuntar() - debian/patches/CVE-2026-46483.patch: pass shellescape(tartail, 1) instead of shellescape(tartail) in the two :!gunzip / :!gzip -d lines of runtime/autoload/tar.vim::tar#Vimuntar() so Vim's special characters (!, %, #) are escaped before the filename reaches the shell; matches upstream patch 9.2.0479 - CVE-2026-46483 Important TuxCare License Agreement CVE-2026-46483 Ubuntu 16.04 LTS * SECURITY UPDATE: use-after-free in receive_xattr() - debian/patches/CVE-2026-41035.patch: replace stale local 'count' with temp_xattr.count in the qsort call inside receive_xattr(), so the sort uses the live size of the rebuilt xattr items list; victim must run rsync with -X / --xattrs - CVE-2026-41035 Important TuxCare License Agreement CVE-2026-41035 Ubuntu 16.04 LTS * SECURITY UPDATE: heap buffer overflow in regex compilation (32-bit) - debian/patches/fixes/CVE-2026-8376.patch: add SSize_t overflow check before SvGROW in Perl_study_chunk() - CVE-2026-8376 Critical TuxCare License Agreement CVE-2026-8376 Ubuntu 16.04 LTS * SECURITY UPDATE: insufficient entropy in XML hash-flooding protection - debian/patches/CVE-2026-41080.patch: backport SipHash-2-4 keyed hashing with a 16-byte salt and add XML_SetHashSalt16Bytes (libexpat PR #1183). - CVE-2026-41080 Low TuxCare License Agreement CVE-2026-41080 Ubuntu 16.04 LTS * SECURITY UPDATE: insufficient entropy in pyexpat/_elementtree hash-flooding protection (CVE-2026-7210) - debian/patches/CVE-2026-7210.patch: bind XML_SetHashSalt16Bytes as a weak symbol to seed the parser with 16 bytes of entropy when hash randomization is enabled; falls back to the legacy XML_SetHashSalt when unavailable. - CVE-2026-7210 Critical TuxCare License Agreement CVE-2026-7210 Ubuntu 16.04 LTS * SECURITY UPDATE: insufficient entropy in pyexpat/_elementtree hash-flooding protection (CVE-2026-7210) - debian/patches/CVE-2026-7210.patch: bind XML_SetHashSalt16Bytes as a weak symbol to seed the parser with 16 bytes of entropy; falls back to the legacy 8-byte XML_SetHashSalt when libexpat lacks the symbol. - CVE-2026-7210 Critical TuxCare License Agreement CVE-2026-7210 Ubuntu 16.04 LTS * SECURITY UPDATE: detect premature plain text response from SSL upstream (TLS plaintext injection) - debian/patches/CVE-2026-1642.patch: detect premature plain text response from SSL upstream (TLS plaintext injection) - CVE-2026-1642 * SECURITY UPDATE: fix NULL pointer dereference clearing s->passwd in mail auth http requests - debian/patches/CVE-2026-27651.patch: fix NULL pointer dereference clearing s->passwd in mail auth http requests - CVE-2026-27651 * SECURITY UPDATE: destination length validation for WebDAV COPY and MOVE (heap buffer overflow) - debian/patches/CVE-2026-27654.patch: destination length validation for WebDAV COPY and MOVE (heap buffer overflow) - CVE-2026-27654 * SECURITY UPDATE: fix integer overflow on 32-bit platforms in ngx_http_mp4_module - debian/patches/CVE-2026-27784.patch: fix integer overflow on 32-bit platforms in ngx_http_mp4_module - CVE-2026-27784 * SECURITY UPDATE: avoid zero size buffers in ngx_http_mp4_module output (out-of-bounds access) - debian/patches/CVE-2026-32647.patch: avoid zero size buffers in ngx_http_mp4_module output (out-of-bounds access) - CVE-2026-32647 * SECURITY UPDATE: reject unsafe characters in URIs and headers set via the Lua API (HTTP response splitting) - debian/modules/nginx-lua/src/ngx_http_lua_util.c, debian/modules/nginx-lua/src/ngx_http_lua_util.h, debian/modules/nginx-lua/src/ngx_http_lua_uri.c, debian/modules/nginx-lua/src/ngx_http_lua_headers_in.c, debian/modules/nginx-lua/src/ngx_http_lua_headers_out.c, debian/modules/nginx-lua/src/ngx_http_lua_control.c: validate arguments of the Lua APIs that mutate a URI or a request/response header so control characters raise an error instead of being silently truncated. - CVE-2020-36309 Important TuxCare License Agreement CVE-2020-36309 CVE-2026-27654 CVE-2026-1642 CVE-2026-32647 CVE-2026-27651 CVE-2026-27784 Ubuntu 16.04 LTS * SECURITY UPDATE: command injection via backticks in tag files - debian/patches/CVE-2026-41411.patch: disallow backticks in tag filenames before attempting wildcard expansion in expand_tag_fname() (src/tag.c), preventing arbitrary shell command execution via a malicious tags file; matches upstream patch 9.2.0357 - CVE-2026-41411 Important TuxCare License Agreement CVE-2026-41411 Ubuntu 16.04 LTS * SECURITY UPDATE: C stack overflow (DoS) in pyexpat when parsing deeply nested DTD content models - debian/patches/CVE-2026-4224.patch: guard conv_content_model() in Modules/pyexpat.c with Py_EnterRecursiveCall/Py_LeaveRecursiveCall to bound recursion when a registered ElementDeclHandler converts a deeply nested content model. - CVE-2026-4224 * SECURITY UPDATE: HTTP header injection via control characters in cookies - debian/patches/CVE-2026-0672.patch: add _has_control_character() and reject control characters in Morsel.__setitem__()/setdefault()/set() and BaseCookie.output() in Lib/http/cookies.py. - CVE-2026-0672 * SECURITY UPDATE: incomplete fix for CVE-2026-0672 (control characters in cookies via additional Morsel paths) - debian/patches/CVE-2026-3644.patch: reject control characters in Morsel.update(), Morsel.__setstate__() and Morsel.js_output() in Lib/http/cookies.py. - CVE-2026-3644 * SECURITY UPDATE: tarfile member type confusion (regular file parsed as directory) via GNU long name/link headers - debian/patches/CVE-2025-13462.patch: skip the AREGTYPE->DIRTYPE normalization while reading GNU LONGNAME/LONGLINK and PAX follow-up headers (dircheck=False) in Lib/tarfile.py. - CVE-2025-13462 Critical TuxCare License Agreement CVE-2025-13462 CVE-2026-3644 CVE-2026-4224 CVE-2026-0672 Ubuntu 16.04 LTS * SECURITY UPDATE: Heap buffer overflow in ASN1_mbstring_ncopy() where the destination length for BMPSTRING and UNIVERSALSTRING output is computed by a signed left shift that can overflow int, producing an undersized allocation followed by out-of-bounds writes for oversized attacker-controlled inputs reaching ASN1_mbstring_copy() or ASN1_mbstring_ncopy() directly. - debian/patches/CVE-2026-7383.patch: reject oversized inputs before the shifts and in out_utf8() in crypto/asn1/a_mbstr.c. - CVE-2026-7383 * SECURITY UPDATE: Out-of-bounds read in kek_unwrap_key() check-byte validation when a CMS PasswordRecipientInfo uses a KEK cipher with a block size smaller than 4 octets, making the decrypted buffer smaller than the seven octets the check-byte test reads. - debian/patches/CVE-2026-9076.patch: reject blocklen < 4 and oversized inlen in kek_unwrap_key() in crypto/cms/cms_pwri.c. - CVE-2026-9076 * SECURITY UPDATE: Heap buffer over-read in ASN.1 content parsing: the long content length is truncated to int when asn1_d2i_ex_primitive() calls asn1_ex_c2i(), so ASN1_STRING_set() could be called with an inconsistent length. - debian/patches/CVE-2026-34180.patch: reject content lengths not representable as int before calling asn1_ex_c2i() in crypto/asn1/tasn_dec.c (signature kept, asn1_ex_c2i() is public API in 1.0.2). - CVE-2026-34180 * SECURITY UPDATE: NULL pointer dereference when processing CMS PasswordRecipientInfo with the optional keyDerivationAlgorithm field absent, allowing a denial of service via crafted CMS messages. - debian/patches/CVE-2026-42766.patch: fail cleanly when keyDerivationAlgorithm is missing in crypto/cms/cms_pwri.c. - CVE-2026-42766 * SECURITY UPDATE: Use-after-free in PKCS7_verify() where the cleanup path can free the caller-owned indata BIO via BIO_free_all() when verifying a crafted PKCS#7 structure with an empty digestAlgorithms SET, leading to crashes, heap corruption or potentially remote code execution. - debian/patches/CVE-2026-45447.patch: free the BIO chain explicitly, stopping at the caller-owned indata, in crypto/pkcs7/pk7_smime.c. - CVE-2026-45447 Critical TuxCare License Agreement CVE-2026-7383 CVE-2026-34180 CVE-2026-9076 CVE-2026-45447 CVE-2026-42766 Ubuntu 16.04 LTS * SECURITY UPDATE: code injection in the netrw plugin via the mf (mark file) command: s:NetrwMarkFile() embedded the marked filename into a filter() expression by string concatenation, so a crafted filename containing vimscript (e.g. nested execute()) was evaluated when the user marked it in a netrw listing. - debian/patches/CVE-2026-43961.patch: reference the filename variable directly in the filter() expression instead of concatenating it, in runtime/autoload/netrw.vim; matches upstream patch 9.2.0480. - CVE-2026-43961 Moderate TuxCare License Agreement CVE-2026-43961 Ubuntu 16.04 LTS * SECURITY UPDATE: C stack overflow (DoS) in pyexpat when parsing deeply nested DTD content models - debian/patches/CVE-2026-4224.patch: guard conv_content_model() in Modules/pyexpat.c with Py_EnterRecursiveCall/Py_LeaveRecursiveCall to bound recursion when a registered ElementDeclHandler converts a deeply nested content model. - CVE-2026-4224 * SECURITY UPDATE: HTTP header injection via control characters in cookies - debian/patches/CVE-2026-0672.patch: reject control characters in Morsel.__setitem__()/set(), add a validating Morsel.setdefault() override, and guard BaseCookie.output() in Lib/Cookie.py. - CVE-2026-0672 * SECURITY UPDATE: incomplete fix for CVE-2026-0672 (control characters in cookies via additional Morsel paths) - debian/patches/CVE-2026-3644.patch: add a validating Morsel.update() override and reject control characters in Morsel.js_output() in Lib/Cookie.py. - CVE-2026-3644 * SECURITY UPDATE: tarfile member type confusion (regular file parsed as directory) via GNU long name/link headers - debian/patches/CVE-2025-13462.patch: skip the AREGTYPE->DIRTYPE normalization while reading GNU LONGNAME/LONGLINK and PAX follow-up headers (dircheck=False) in Lib/tarfile.py. - CVE-2025-13462 Important TuxCare License Agreement CVE-2025-13462 CVE-2026-3644 CVE-2026-4224 CVE-2026-0672 Ubuntu 16.04 LTS * SECURITY UPDATE: privilege escalation via mailer on privilege-drop failure - debian/patches/CVE-2026-35535.patch: make a setuid/setgid/setgroups failure during the privilege drop before running the mailer fatal - CVE-2026-35535 Important TuxCare License Agreement CVE-2026-35535 Ubuntu 16.04 LTS * SECURITY UPDATE: remote command execution via unescaped %u in the "check password script" (samr password validation) - debian/patches/CVE-2026-4408.patch: reject invalid/dangerous account names, mask and single-quote the username before %u substitution, export SAMBA_CPS_ACCOUNT_NAME, and restrict _samr_ValidatePassword to DCs - CVE-2026-4408 Critical TuxCare License Agreement CVE-2026-4408 Ubuntu 16.04 LTS * SECURITY UPDATE: code injection in the netrw plugin via directory history serialization: s:NetrwBookHistSave() wrote each directory history entry into the generated .netrwhist script by concatenating the raw value inside single quotes, so a directory name containing a single quote and vimscript was evaluated when the history file was sourced. - debian/patches/CVE-2026-47162.patch: quote the value with string() so the history entry is emitted as a safe vimscript string literal, in runtime/autoload/netrw.vim; matches upstream patch 9.2.0495. - CVE-2026-47162 Important TuxCare License Agreement CVE-2026-47162 Ubuntu 16.04 LTS * SECURITY UPDATE: off-by-one out-of-bounds read in the meta (8BIM/IPTC) decoder - debian/patches/CVE-2026-45358.patch: bound tag_length against the remaining extent in GetIPTCStream in coders/meta.c - CVE-2026-45358 * SECURITY UPDATE: missing dimension check in the DCM decoder - debian/patches/CVE-2026-49218.patch: reject images decoded with zero rows or columns in coders/dcm.c - CVE-2026-49218 * SECURITY UPDATE: NULL pointer dereference in the distort operation - debian/patches/CVE-2026-53463.patch: require at least one argument before reading arguments[0] in GenerateCoefficients in magick/distort.c - CVE-2026-53463 Important TuxCare License Agreement CVE-2026-53463 CVE-2026-45358 CVE-2026-49218 Ubuntu 16.04 LTS * SECURITY UPDATE: mod_xml2enc heap-based buffer overflow via xml2StartParse with untrusted content - debian/patches/CVE-2026-42536.patch: mod_xml2enc heap-based buffer overflow via xml2StartParse with untrusted content - CVE-2026-42536 * SECURITY UPDATE: mod_proxy_ftp cross-site scripting in HTML directory list generation - debian/patches/CVE-2026-29170.patch: mod_proxy_ftp cross-site scripting in HTML directory list generation - CVE-2026-29170 * SECURITY UPDATE: mod_ldap use-after-free in per-directory configuration - debian/patches/CVE-2026-29167.patch: mod_ldap use-after-free in per-directory configuration - CVE-2026-29167 * SECURITY UPDATE: mod_dav_fs path handling allows direct manipulation of trusted DAV property databases - debian/patches/CVE-2026-42535.patch: mod_dav_fs path handling allows direct manipulation of trusted DAV property databases - CVE-2026-42535 * SECURITY UPDATE: mod_proxy_html buffer overflow allowing attack by an untrusted backend - debian/patches/CVE-2026-34355.patch: mod_proxy_html buffer overflow allowing attack by an untrusted backend - CVE-2026-34355 Critical TuxCare License Agreement CVE-2026-34355 CVE-2026-42536 CVE-2026-29170 CVE-2026-42535 CVE-2026-29167 Ubuntu 16.04 LTS * SECURITY UPDATE: NULL pointer dereference in mod_dav_lock indirect-lock refresh - debian/patches/CVE-2026-29169.patch: replace all six dp-> reads in the indirect-lock branch of dav_generic_refresh_locks() with the resolved dp_scan->... values in modules/dav/lock/locks.c so a crafted WebDAV LOCK refresh against a resource that only inherits an indirect lock from a parent no longer dereferences NULL via dp->locktoken / dp->f.scope / dp->owner. Upstream fix 225dc070adba11040b774cf641e1d8bc79941643 (SVN r1933354). - CVE-2026-29169 Important TuxCare License Agreement CVE-2026-29169 Ubuntu 16.04 LTS * SECURITY UPDATE: excessive memory allocation or over-read in scgi and uwsgi status line parsing - debian/patches/CVE-2026-42946.patch: excessive memory allocation or over-read in scgi and uwsgi status line parsing - CVE-2026-42946 Important TuxCare License Agreement CVE-2026-42946 Ubuntu 16.04 LTS * SECURITY UPDATE: mod_proxy_ftp infinite loop in Retry-After parsing - debian/patches/CVE-2026-44186.patch: advance secs_str in the digit-scan loop in modules/proxy/mod_proxy_ftp.c. - CVE-2026-44186 * SECURITY UPDATE: mod_ssl OCSP request corruption on short socket write - debian/patches/CVE-2026-44185.patch: advance the write buffer by the bytes actually sent (wlen) in modules/ssl/ssl_util_ocsp.c. - CVE-2026-44185 * SECURITY UPDATE: ap_regname unbounded capture-group allocation (DoS) - debian/patches/CVE-2026-44631.patch: read capture index bytes as unsigned and reject captures > 1024 in server/util_pcre.c, and treat a negative ap_regname() return as an error in server/core.c and modules/proxy/mod_proxy.c. - CVE-2026-44631 * SECURITY UPDATE: ap_expr file functions exposable from .htaccess - debian/patches/CVE-2026-44119.patch: restrict file functions/tests centrally in ap_expr_parse_cmd_mi() via a new AP_EXPR_FLAG_RESTRICTED_FILE_FUNC flag in include/ap_expr.h and server/util_expr_eval.c, dropping the per-module restriction in modules/mappers/mod_rewrite.c and modules/metadata/mod_setenvif.c. - CVE-2026-44119 Important TuxCare License Agreement CVE-2026-44185 CVE-2026-44186 CVE-2026-44119 CVE-2026-44631 Ubuntu 16.04 LTS * SECURITY UPDATE: arbitrary code execution in the python and python3 omni-completion plugins: Completer.evalsource() executed import and from statements harvested from the current buffer through Python's import machinery, and because the buffer's directory is on sys.path, opening a hostile .py file alongside a sibling package ran attacker controlled code on omni-completion. - debian/patches/CVE-2026-52858.patch: skip execution of buffer level import/from statements unless the user opts in by setting g:pythoncomplete_allow_import, and re-import the vim module inside evalsource() so the opt-in is honoured, in runtime/autoload/python3complete.vim and runtime/autoload/pythoncomplete.vim; matches upstream patches 9.2.0561 and 9.2.0568. - CVE-2026-52858 * SECURITY UPDATE: arbitrary code execution in the python and python3 omni-completion plugins: the completion code reconstructed function and class definitions from the current buffer and ran them through exec(), and because Python evaluates parameter default values, parameter annotations and class base expressions at definition time, a hostile buffer could execute attacker controlled expressions via crafted def/class headers; the g:pythoncomplete_allow_import mitigation did not cover this path. - debian/patches/CVE-2026-52860.patch: strip default values and annotations from reconstructed function parameter lists and whitelist class base lists to dotted names before the generated source reaches exec(), in runtime/autoload/python3complete.vim and runtime/autoload/pythoncomplete.vim; matches upstream patch 9.2.0597. - CVE-2026-52860 Important TuxCare License Agreement CVE-2026-52858 CVE-2026-52860 Ubuntu 16.04 LTS * SECURITY UPDATE: heap over-write, file-descriptor hijack race, and heap over-read in the distributed pixel cache server - debian/patches/CVE-2026-46692-46693-47166.patch: bound the requested region against the pixel cache extent before reading or writing pixels and indexes, and hand each connection a private heap-allocated socket to a detached handler thread in magick/distribute-cache.c - CVE-2026-46692 - CVE-2026-46693 - CVE-2026-47166 * SECURITY UPDATE: heap buffer over-write of a single byte in the JP2 encoder via crafted jp2:quality / jp2:rate options - debian/patches/CVE-2026-46559.patch: bound the jp2:quality and jp2:rate parse loops by the tcp_distoratio/tcp_rates array extent in WriteJP2Image() in coders/jp2.c (defense-in-depth; the JP2 coder is not compiled in this build) - CVE-2026-46559 Critical TuxCare License Agreement CVE-2026-46559 CVE-2026-47166 CVE-2026-46693 CVE-2026-46692 Ubuntu 16.04 LTS * SECURITY UPDATE: out-of-bounds write parsing a crafted spell file: tree_count_words() and sug_filltree() descended the word trie without bounding the recursion depth, so a deeply nested trie wrote past the ends of their MAXWLEN-sized arridx[], curi[] and wordcount[] arrays. - debian/patches/CVE-2026-55693.patch: only descend while depth < MAXWLEN - 1 in both trie walkers, in src/spell.c; matches upstream patch 9.2.0653. - CVE-2026-55693 * SECURITY UPDATE: stack out-of-bounds write in dump_prefixes() when dumping spell prefixes (:spelldump): the word trie was descended without bounding the recursion depth, overflowing the MAXWLEN-sized prefix[], arridx[] and curi[] arrays. - debian/patches/CVE-2026-55892.patch: only descend while depth < MAXWLEN - 1, in src/spell.c; matches upstream patch 9.2.0662. - CVE-2026-55892 * SECURITY UPDATE: out-of-bounds write in soundfold(): the single-byte branch of spell_soundfold_sofo() wrote one result byte per input byte into the MAXWLEN-sized res[] buffer with no bound, so a long word overflowed it. - debian/patches/CVE-2026-57455.patch: stop the translation loop once ri reaches MAXWLEN - 1, in src/spell.c; matches upstream patch 9.2.0698. - CVE-2026-57455 * SECURITY UPDATE: arbitrary code execution in the python and python3 omni-completion plugins: reconstructed class/function definitions ran through exec() embedded buffer-supplied docstrings inside a triple- quoted Python string literal, so a docstring containing a closing triple-quote broke out of the literal and executed attacker code. - debian/patches/CVE-2026-57456.patch: quote docstrings with repr() instead of triple-quoting, in runtime/autoload/python3complete.vim and pythoncomplete.vim; matches upstream patch 9.2.0699. - CVE-2026-57456 Important TuxCare License Agreement CVE-2026-57456 CVE-2026-55892 CVE-2026-57455 CVE-2026-55693 Ubuntu 16.04 LTS * SECURITY UPDATE: fix the handling of invalid users with DIGEST authentication - debian/patches/CVE-2026-43512.patch: short-cut the null password case in RealmBase.getDigest() - CVE-2026-43512 * SECURITY UPDATE: account lockout bypass via username case variation - debian/patches/CVE-2026-43513.patch: add case sensitive attribute to LockOutRealm and normalise usernames before tracking failures - CVE-2026-43513 * SECURITY UPDATE: authorization bypass with extension-based method constraints - debian/patches/CVE-2026-43515.patch: ensure RealmBase finds all matching extension based constraints - CVE-2026-43515 Moderate TuxCare License Agreement CVE-2026-43512 CVE-2026-43515 CVE-2026-43513 Ubuntu 16.04 LTS * SECURITY UPDATE: buffer overflow in xmlcatalog --shell interactive mode - debian/patches/CVE-2026-11979.patch: add overflow checks for large commands, args and argv in usershell() in xmlcatalog.c - CVE-2026-11979 Important TuxCare License Agreement CVE-2026-11979 Ubuntu 16.04 LTS * SECURITY UPDATE: state confusion in the D-Bus introspection XML parser - debian/patches/CVE-2026-58016.patch: reject a <node> element nested inside a non-<node> parent in g_dbus_node_info_new_for_xml() - CVE-2026-58016 * SECURITY UPDATE: one-byte heap under-read on an empty key-file value - debian/patches/CVE-2026-58014.patch: skip the trailing-separator check when the value length is 0 in g_key_file_get_locale_string_list() - CVE-2026-58014 * SECURITY UPDATE: DBUS_COOKIE_SHA1 client-side path traversal - debian/patches/CVE-2026-58015.patch: validate the server-supplied cookie_context before building the keyring path - CVE-2026-58015 Critical TuxCare License Agreement CVE-2026-58015 CVE-2026-58014 CVE-2026-58016 Ubuntu 16.04 LTS * SECURITY UPDATE: heap buffer overflow in the MVG decoder when parsing crafted push clip-path/gradient/pattern blocks - debian/patches/CVE-2026-33901.patch: heap buffer overflow in the MVG decoder when parsing crafted push clip-path/gradient/pattern blocks - CVE-2026-33901 * SECURITY UPDATE: stack exhaustion (DoS) via unbounded recursion in DestroyXMLTree when freeing deeply nested XML - debian/patches/CVE-2026-33908.patch: stack exhaustion (DoS) via unbounded recursion in DestroyXMLTree when freeing deeply nested XML - CVE-2026-33908 Important TuxCare License Agreement CVE-2026-33901 CVE-2026-33908 Ubuntu 16.04 LTS * SECURITY UPDATE: libcurl could reuse a connection for a STARTTLS transfer despite a mismatched TLS configuration. - debian/patches/CVE-2026-8286.patch: add an SSL-config match check before reusing a connection for a clear-text protocol that requests TLS, in lib/url.c. - CVE-2026-8286 * SECURITY UPDATE: a trailing-dot cookie domain could bypass the Public Suffix List check and set a super-cookie. - debian/patches/CVE-2026-8924.patch: trim trailing dots from the domains before the PSL check in lib/cookie.c. - CVE-2026-8924 * SECURITY UPDATE: libcurl could send proxy Digest credentials to the wrong proxy when the proxy is selected from environment variables on a reused handle. - debian/patches/CVE-2026-8927.patch: clear the proxy Digest state when the environment proxy changes, in lib/url.c and lib/urldata.h. - CVE-2026-8927 Moderate TuxCare License Agreement CVE-2026-8924 CVE-2026-8927 CVE-2026-8286 Ubuntu 16.04 LTS * SECURITY UPDATE: fix heap buffer overflow in xcoff_link_add_symbols - debian/patches/CVE-2026-6846.patch: size reloc_info array by max target_index in xcoff_link_add_symbols - CVE-2026-6846 Important TuxCare License Agreement CVE-2026-6846 Ubuntu 16.04 LTS * SECURITY UPDATE: authentication bypass in JNDIRealm with GSSAPI - debian/patches/CVE-2026-55957.patch: don't reuse GSSAPI SASL auth when validating user credentials in java/org/apache/catalina/realm/JNDIRealm.java - CVE-2026-55957 * SECURITY UPDATE: default servlet security constraint method bypass - debian/patches/CVE-2026-55956.patch: honour per-method constraints mapped to "/" in java/org/apache/catalina/realm/RealmBase.java - CVE-2026-55956 Important TuxCare License Agreement CVE-2026-55956 CVE-2026-55957 Ubuntu 16.04 LTS * SECURITY UPDATE: uninitialized pointer dereference in the JBIG decoder - debian/patches/CVE-2026-28691.patch: bail out when the JBIG decode loop ends with a status other than JBG_EOK in coders/jbig.c - CVE-2026-28691 * SECURITY UPDATE: integer overflow in the DIB coder leading to out-of-bounds read/write - debian/patches/CVE-2026-28693.patch: guard the bytes_per_line/length computations against overflow in coders/dib.c - CVE-2026-28693 Important TuxCare License Agreement CVE-2026-46523 CVE-2026-46520 CVE-2026-28691 CVE-2026-46522 CVE-2026-42326 CVE-2026-45624 CVE-2026-46521 CVE-2026-45031 CVE-2026-28693 CVE-2026-45664 Ubuntu 16.04 LTS * OpenJDK 8u492 release + CVE-2026-22007: enhance crypto algorithm support + CVE-2026-22013: improve Kerberos credentialing + CVE-2026-22016: enhance Path Factories Redux + CVE-2026-22018: enhance Zip file reading + CVE-2026-22021: enhance certificate chain validation + CVE-2026-23865: update FreeType to 2.14.2 + CVE-2026-34268: enhance key generation - Release notes: https://mail.openjdk.org/pipermail/jdk8u-dev/2026-April/thread.html * d/p/pass-extra-flags.diff, d/p/jdk-target-arch-define.diff: Refresh patches. Important TuxCare License Agreement CVE-2026-22016 Ubuntu 16.04 LTS * SECURITY UPDATE: global buffer overflow in LZH decompression - debian/patches/CVE-2026-41992.patch: clear shared decode tables in read_c_len() in unlzh.c. - CVE-2026-41992 Important TuxCare License Agreement CVE-2026-41992 Ubuntu 16.04 LTS * SECURITY UPDATE: off-by-one out-of-bounds read in GVariant normal-form checking - debian/patches/CVE-2026-58010.patch: fix an off-by-one offset comparison in gvs_tuple_is_normal() - CVE-2026-58010 * SECURITY UPDATE: out-of-range GDateTime creation leading to out-of-bounds reads in getter functions - debian/patches/CVE-2026-58011.patch: add missing range validation to g_date_time_add_full() - CVE-2026-58011 * SECURITY UPDATE: buffer over-read in g_regex_replace() case-change substitutions under G_REGEX_RAW - debian/patches/CVE-2026-58012.patch: operate on bytes instead of UTF-8 characters when changing case of raw-mode matches - CVE-2026-58012 * SECURITY UPDATE: memcmp() buffer over-read in g_io_channel_read_line() with multi-byte line terminators - debian/patches/CVE-2026-58013.patch: check the remaining buffer length against the line terminator length before memcmp() - CVE-2026-58013 Important TuxCare License Agreement CVE-2026-58010 CVE-2026-58012 CVE-2026-58013 CVE-2026-58011 Ubuntu 16.04 LTS * SECURITY UPDATE: authentication bypass in JNDIRealm with GSSAPI - debian/patches/CVE-2026-55957.patch: don't reuse GSSAPI SASL auth when validating user credentials in java/org/apache/catalina/realm/JNDIRealm.java - CVE-2026-55957 * SECURITY UPDATE: default servlet security constraint method bypass - debian/patches/CVE-2026-55956.patch: honour per-method constraints mapped to "/" in java/org/apache/catalina/realm/RealmBase.java - CVE-2026-55956 Important TuxCare License Agreement CVE-2026-55956 CVE-2026-55957 Ubuntu 16.04 LTS * SECURITY UPDATE: cross-origin Digest authentication state leak - debian/patches/CVE-2026-11856.patch: flush the cached Digest state in lib/http_digest.c, lib/urldata.h and lib/curl_sasl.c when the origin or credentials it was created for change on a reused handle, so an Authorization/Proxy-Authorization header is not sent to a different origin. - CVE-2026-11856 Moderate TuxCare License Agreement CVE-2026-11856 Ubuntu 16.04 LTS * SECURITY UPDATE: heap buffer overflow in DTLS handshake reassembly - debian/patches/CVE-2026-33846.patch: add length-consistency and array bounds checks in merge_handshake_packet in lib/gnutls_buffers.c to reject DTLS fragments with mismatching or oversized claimed length - CVE-2026-33846 * SECURITY UPDATE: denial of service via non-conforming qsort comparator - debian/patches/CVE-2026-42009.patch: return 0 for equal sequence numbers in handshake_compare in lib/gnutls_buffers.c so DTLS packet ordering follows the qsort strict-weak-ordering contract - CVE-2026-42009 Important TuxCare License Agreement CVE-2026-42009 Ubuntu 16.04 LTS * SECURITY UPDATE: potential SSRF via unsafe mod_rewrite substitution - debian/patches/CVE-2024-39573.patch: re-add the stripped per-directory prefix (or an implicit '/') to the substituted URI before it can be mistaken for a scheme:// proxy URL, in modules/mappers/mod_rewrite.c. - CVE-2024-39573 * SECURITY UPDATE: SSI #exec cmd query string passed to shell via mod_cgid - debian/patches/CVE-2025-58098.patch: do not pass r->args to create_argv() for SSI requests in modules/generators/mod_cgid.c. - CVE-2025-58098 Important TuxCare License Agreement CVE-2024-39573 CVE-2025-58098 Ubuntu 16.04 LTS * SECURITY UPDATE: heap corruption in MIFF reader via stale image->depth - debian/patches/CVE-2025-43965.patch: refresh image->depth from quantum_info->depth after SetQuantumFormat in coders/miff.c - CVE-2025-43965 Important TuxCare License Agreement CVE-2025-43965 Ubuntu 16.04 LTS * SECURITY UPDATE: potential multiplication overflow in the publickey subsystem leading to a heap buffer overflow on 32-bit platforms - debian/patches/CVE-2026-58050.patch: cap the publickey attribute count at 1024, and zero-initialise the freshly (re)allocated list entry before parsing to avoid a free of uninitialised memory on the new bounds-check error path, in libssh2_publickey_list_fetch() in src/publickey.c - CVE-2026-58050 Important TuxCare License Agreement CVE-2026-58050 Ubuntu 16.04 LTS * SECURITY UPDATE: integer/heap buffer overflow in html_quote_string() - debian/patches/CVE-2026-58472.patch: count required buffer size with size_t and abort on overflow in src/convert.c - CVE-2026-58472 Important TuxCare License Agreement CVE-2026-58472 Ubuntu 16.04 LTS * SECURITY UPDATE: off-by-one out-of-bounds read in morphology kernel validation - debian/patches/CVE-2026-56361.patch: reject a User Defined kernel origin equal to the kernel width/height in magick/morphology.c - CVE-2026-56361 * SECURITY UPDATE: memory leak in coders that write raw pixel data - debian/patches/CVE-2026-56368.patch: free quantum_info on the OpenBlob failure paths in coders/bgr.c, cmyk.c, rgb.c and ycbcr.c - CVE-2026-56368 Important TuxCare License Agreement CVE-2026-56361 CVE-2026-56368 Ubuntu 16.04 LTS * SECURITY UPDATE: memory leak in the VIFF encoder - debian/patches/CVE-2026-61870.patch: relinquish the pixel_info virtual memory before the colormap-allocation-failure abort in WriteVIFFImage (coders/viff.c) - CVE-2026-61870 Important TuxCare License Agreement CVE-2026-61870 Ubuntu 16.04 LTS * SECURITY UPDATE: CPU denial-of-service in the html.parser module via repeated unterminated markup declarations (quadratic complexity in the incremental HTMLParser) - debian/patches/CVE-2026-15308.patch: accumulate pending data in feed() and parse on a doubling threshold instead of rescanning the whole unparsed buffer each call, in Lib/html/parser.py - CVE-2026-15308 Important TuxCare License Agreement CVE-2026-15308 Ubuntu 16.04 LTS * SECURITY UPDATE: CN fallback not precluded by URI SAN - debian/patches/CVE-2026-42012.patch: treat a URI subject alternative name as precluding the fallback to Common Name hostname matching, per RFC 6125 6.4.4, in lib/x509/hostname-verify.c. - CVE-2026-42012 * SECURITY UPDATE: CN/DN fallback not precluded by oversized SAN - debian/patches/CVE-2026-42013.patch: keep the CN (hostname) and DN-email fallbacks disabled when a subject alternative name is oversized instead of silently ignoring it, per RFC 6125 6.4.4, in lib/x509/hostname-verify.c and lib/x509/email-verify.c. - CVE-2026-42013 * SECURITY UPDATE: PKCS#12 bag out-of-bounds write - debian/patches/CVE-2026-42015.patch: fix an off-by-one in the PKCS#12 bag element bounds check that allowed writing past the 32-element array, in lib/x509/pkcs12_bag.c. - CVE-2026-42015 Important TuxCare License Agreement CVE-2026-42013 CVE-2026-42012 CVE-2026-42015 Ubuntu 16.04 LTS * SECURITY UPDATE: regex trie 16-bit next-offset overflow (GH#23388) - debian/patches/fixes/CVE-2026-13221.patch: do not build a trie when the branch-to-tail delta would overflow the 16-bit next-offset field in S_study_chunk() in regcomp.c - CVE-2026-13221 * SECURITY UPDATE: integer overflow in pack/unpack structure sizing - debian/patches/fixes/CVE-2026-57432.patch: add I32 overflow check before the size accumulation in S_measure_struct() in pp_pack.c - CVE-2026-57432 Critical TuxCare License Agreement CVE-2026-57432 CVE-2026-13221 Ubuntu 16.04 LTS * SECURITY UPDATE: heap buffer overflow and info-leak via regex map capture variables - debian/patches/CVE-2026-42533.patch: add script engine buffer-overrun protection - CVE-2026-42533 Low TuxCare License Agreement CVE-2026-42533 Ubuntu 16.04 LTS * CVE-2022-42703 - mm/rmap.c: don't reuse anon_vma if we just want a copy - mm: rmap: explicitly reset vma->anon_vma in unlink_anon_vmas() - mm, rmap: handle anon_vma_prepare() common case inline - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse * CVE-2022-3565 - mISDN: fix use-after-free bugs in l1oip timer handlers * CVE-2022-43750 - usb: mon: make mmapped memory read only * CVE-2022-3566 - tcp: Fix data races around icsk->icsk_af_ops. * CVE-2022-3567 - ipv6: annotate some data-races around sk->sk_prot - ipv6: Fix data races around sk->sk_prot. * CVE-2022-3621 - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() * CVE-2022-3564 - Bluetooth: remove unneeded variable in l2cap_stream_rx - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu * CVE-2022-3524 - tcp/udp: Fix memory leak in ipv6_renew_options(). * CVE-2022-3635 - atm: idt77252: fix use-after-free bugs caused by tst_timer * CVE-2022-40768 - scsi: stex: Properly zero out the passthrough command structure * CVE-2022-3239 - media: em28xx: initialize refcount before kref_get * CVE-2022-3649 - nilfs2: fix use-after-free bug of struct nilfs_root * CVE-2022-3594 - r8152: Rate limit overflow messages Critical TuxCare License Agreement CVE-2022-3594 CVE-2022-43750 CVE-2022-3524 CVE-2022-3565 CVE-2022-3621 CVE-2022-40768 CVE-2022-3564 CVE-2022-3635 CVE-2022-3649 CVE-2022-3567 CVE-2022-3566 CVE-2022-3239 CVE-2022-42703 Ubuntu 16.04 LTS * CVE-2022-1198 - drivers: hamradio: 6pack: fix UAF bug caused by mod_timer() * Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717) // CVE-2020-36516 - ipv4: avoid using shared IP generator for connected sockets * CVE-2022-36879 - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() * CVE-2022-3061 - video: fbdev: i740fb: Error out if 'pixclock' equals zero * CVE-2022-1516 - net/x25: Fix null-ptr-deref caused by x25_disconnect * CVE-2022-1205 - ax25: Fix NULL pointer dereferences in ax25 timers - ax25: Fix UAF bugs in ax25 timers * CVE-2022-2318 - net: rose: fix UAF bugs caused by timer handler * CVE-2022-1195 - hamradio: defer 6pack kfree after unregister_netdev - hamradio: defer ax25 kfree after unregister_netdev - hamradio: improve the incomplete fix to avoid NPD * CVE-2022-0494 - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern * CVE-2021-26401 - x86/speculation: Use generic retpoline by default on AMD * Bionic update: upstream stable patchset 2022-10-18 (LP: #1993349) // CVE-2022-39188 - mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() * Bionic update: upstream stable patchset 2022-10-06 (LP: #1992112) // CVE-2022-39188 - mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() * CVE-2022-45934 - Bluetooth: L2CAP: Fix u8 overflow * Bionic update: upstream stable patchset 2022-06-21 (LP: #1979355) // CVE-2022-2991 - lightnvm: disable the subsystem * Bionic update: upstream stable patchset 2021-11-02 (LP: #1949512) // CVE-2021-4203 - af_unix: fix races in sk_peer_pid and sk_peer_cred accesses * Bionic update: upstream stable patchset 2022-04-26 (LP: #1970479) // CVE-2021-3772 - sctp: fix the processing for INIT chunk - sctp: fix the processing for INIT_ACK chunk * Bionic update: upstream stable patchset 2021-12-03 (LP: #1953202) // CVE-2021-3772 - sctp: use init_tag from inithdr for ABORT chunk - sctp: fix the processing for COOKIE_ECHO chunk - sctp: add vtag check in sctp_sf_violation - sctp: add vtag check in sctp_sf_do_8_5_1_E_sa - sctp: add vtag check in sctp_sf_ootb * CVE-2022-3303 - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC * Bionic update: upstream stable patchset 2022-09-21 (LP: #1990434) // CVE-2022-1462 - tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() - tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() * CVE-2022-1462 - tty: fix deadlock caused by calling printk() under tty_port->lock * Bionic update: upstream stable patchset 2020-11-10 (LP: #1903768) // CVE-2022-1462 - pty: do tty_flip_buffer_push without port->lock in pty_write * Bionic update: upstream stable patchset 2019-02-08 (LP: #1815234) // CVE-2022-1462 - tty: Fix data race in tty_insert_flip_string_fixed_flag * Bionic update: upstream stable patchset 2022-10-18 (LP: #1993349) // CVE-2022-4662 - USB: core: Prevent nested device-reset calls * Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717) // CVE-2022-0617 - udf: Restore i_lenAlloc when inode expansion fails - udf: Fix NULL ptr deref when converting from inline format * Bionic update: upstream stable patchset 2022-04-26 (LP: #1970479) // CVE-2022-1016 - netfilter: nf_tables: initialize registers in nft_do_chain() * Bionic update: upstream stable patchset 2022-05-17 (LP: #1973831) // CVE-2022-2380 - video: fbdev: sm712fb: Fix crash in smtcfb_read() * Bionic update: upstream stable patchset 2022-05-17 (LP: #1973831) // CVE-2022-3111 - power: supply: wm8350-power: Add missing free in free_charger_irq * CVE-2022-3628 - wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() * Bionic update: upstream stable patchset 2021-08-27 (LP: #1941916) // CVE-2021-3732 - ovl: prevent private clone if bind mount is not allowed * Bionic update: upstream stable patchset 2021-12-13 (LP: #1954703) // CVE-2021-45868 - quota: check block number when reading the block in quota file * Bionic update: upstream stable patchset 2021-04-30 (LP: #1926808) // CVE-2021-3659 - net: mac802154: Fix general protection fault * Bionic update: upstream stable patchset 2023-03-03 (LP: #2009237) // CVE-2023-1074 - sctp: fail if no bound addresses can be used for a given scope * Bionic update: upstream stable patchset 2022-09-23 (LP: #1990698) // CVE-2023-1095 - netfilter: nf_tables: fix null deref due to zeroed list head * CVE-2023-1118 - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() * Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE-2023-26607 - ntfs: fix out-of-bounds read in ntfs_attr_find() * Bionic update: upstream stable patchset 2022-09-23 (LP: #1990698) - ntfs: fix use-after-free in ntfs_ucsncmp() * CVE-2022-20572 - dm verity: set DM_TARGET_IMMUTABLE feature flag * CVE-2022-3903 - USB: add usb_control_msg_send() and usb_control_msg_recv() - USB: correct API of usb_control_msg_send/recv - USB: move snd_usb_pipe_sanity_check into the USB core - media: mceusb: Use new usb_control_msg_*() routines * Bionic update: upstream stable patchset 2022-02-11 (LP: #1960681) - media: mceusb: fix control-message timeouts * Bionic update: upstream stable patchset 2022-04-26 (LP: #1970479) // CVE-2021-4149 - btrfs: unlock newly allocated extent buffer after error * Bionic update: upstream stable patchset 2022-01-11 (LP: #1957113) // CVE-2022-20132 - HID: wacom: fix problems when device is not a valid USB device - HID: check for valid USB device for many HID drivers * Bionic update: upstream stable patchset 2022-01-11 (LP: #1957113) - HID: add hid_is_usb() function to make it simpler for USB detection * Bionic update: upstream stable patchset 2022-01-14 (LP: #1957957) // CVE-2021-28713 - xen/console: harden hvc_xen against event channel storms * CVE-2021-28712 - xen/netfront: harden netfront against event channel storms * CVE-2021-28711 - xen/blkfront: harden blkfront against event channel storms * CVE-2023-26545 - net: mpls: fix stale pointer if allocation fails during device rename * Bionic update: upstream stable patchset 2022-06-21 (LP: #1979355) // CVE-2022-1975 - NFC: netlink: fix sleep in atomic bug when firmware download timeout * Bionic update: upstream stable patchset 2022-07-25 (LP: #1982782) // CVE-2022-1974 - NFC: NULL out the dev->rfkill to prevent UAF * CVE-2022-1974 - nfc: replace improper check device_is_registered() in netlink related functions * Bionic update: upstream stable patchset 2022-05-17 (LP: #1973831) // CVE-2022-1011 - fuse: fix pipe buffer lifetime for direct_io * Bionic update: upstream stable patchset 2022-03-29 (LP: #1967013) // CVE-2022-0487 - moxart: fix potential use-after-free on remove path * CVE-2021-3669 - ipc: replace costly bailout check in sysvipc_find_ipc() * Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403) // CVE-2022-41218 is assigned to those bugs above. // CVE-2023-1118 - media: dvb-core: Fix UAF due to refcount races at releasing * Bionic update: upstream stable patchset 2021-08-03 (LP: #1938824) // CVE-2023-28772 - seq_buf: Fix overflow in seq_buf_putmem_hex() * Bionic update: upstream stable patchset 2021-02-10 (LP: #1915328) // CVE-2023-1390 - tipc: fix NULL deref in tipc_link_xmit() * Bionic update: upstream stable patchset 2022-11-15 (LP: #1996650) // CVE-2022-41850 - HID: roccat: Fix use-after-free in roccat_read() * Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403) // CVE-2023-23455 - net: sched: atm: dont intepret cls results when asked to drop * Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403) // CVE-2022-47929 - net: sched: disallow noqueue for qdisc classes * Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403) // CVE-2022-3424 - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os * Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403) // CVE-2023-0394 - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames * Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403) // CVE-2022-36280 - drm/vmwgfx: Validate the box size for the snooped cursor * Bionic update: upstream stable patchset 2022-11-15 (LP: #1996650) // CVE-2022-41849 - fbdev: smscufx: Fix use-after-free in ufx_ops_open() * Miscellaneous Ubuntu changes - Config update * Miscellaneous upstream changes - media: dvb: dmx: fixed coding style issues of spacing - NFC: reorder the logic in nfc_{un,}register_device - xen/blkfront: separate per ring information out of device info - xen/blkfront: pseudo support for multi hardware queues/rings - xen/blkfront: split per device io_lock - xen/io: use virt_xxx barriers - xen: sync include/xen/interface/io/ring.h with Xen's newest version - xen/netfront: read response from backend only once - xen/netfront: don't read data from request on the ring page - xen/netfront: disentangle tx_skb_freelist - xen/netfront: don't trust the backend response data blindly - HID: introduce hid_is_using_ll_driver - clone_private_mount() doesn't need to touch namespace_sem - lightnvm: NVM should depend on HAS_DMA Important TuxCare License Agreement CVE-2021-4149 CVE-2023-1390 CVE-2021-28713 CVE-2022-2991 CVE-2022-41850 CVE-2022-3628 CVE-2022-20572 CVE-2022-3303 CVE-2022-47929 CVE-2023-23455 CVE-2023-26545 CVE-2022-1205 CVE-2022-1462 CVE-2022-1011 CVE-2022-4662 CVE-2022-41849 CVE-2022-1016 CVE-2022-1516 CVE-2022-3061 CVE-2022-39188 CVE-2023-28772 CVE-2021-3659 CVE-2022-36280 CVE-2022-41218 CVE-2022-1198 CVE-2023-1074 CVE-2021-4203 CVE-2022-0617 CVE-2022-2380 CVE-2022-20132 CVE-2022-1195 CVE-2020-36516 CVE-2021-28711 CVE-2023-1095 CVE-2021-28712 CVE-2022-2318 CVE-2021-3669 CVE-2022-0487 CVE-2022-0494 CVE-2022-3111 CVE-2023-1118 CVE-2022-45934 CVE-2021-3732 CVE-2022-36879 CVE-2022-1975 CVE-2022-42895 CVE-2022-3424 CVE-2021-3772 CVE-2023-0394 CVE-2023-26607 CVE-2021-26401 CVE-2022-1974 CVE-2021-45868 CVE-2022-3903 Ubuntu 16.04 LTS * Bionic update: upstream stable patchset 2022-09-12 (LP: #1989374) // CVE-2022-1012 - tcp: use different parts of the port_offset for index and offset - tcp: add small random increments to the source port - tcp: dynamically allocate the perturb table used by source ports - tcp: increase source port perturb table to 2^16 - tcp: drop the hash_32() part from the index calculation * Bionic update: upstream stable patchset 2022-09-12 (LP: #1989374) - tcp: add some entropy in __inet_hash_connect() * Bionic update: upstream stable patchset 2022-07-06 (LP: #1980879) // CVE-2022-1012 - tcp: resalt the secret every 10 seconds - secure_seq: use the 64 bits of the siphash for port offset calculation * Bionic update: upstream stable patchset 2022-07-06 (LP: #1980879) - tcp: change source port randomizarion at connect() time * Miscellaneous upstream changes - Revert "tcp: drop the hash_32() part from the index calculation" - Revert "tcp: increase source port perturb table to 2^16" - Revert "tcp: dynamically allocate the perturb table used by source ports" - Revert "tcp: add small random increments to the source port" - Revert "tcp: resalt the secret every 10 seconds" - Revert "tcp: use different parts of the port_offset for index and offset" - Revert "secure_seq: use the 64 bits of the siphash for port offset calculation" - Revert "tcp: change source port randomizarion at connect() time" - Revert "secure_seq: use SipHash in place of MD5" - Revert "tcp: allow to turn tcp timestamp randomization off" - Revert "tcp/dccp: better use of ephemeral ports in connect()" - tcp/dccp: better use of ephemeral ports in connect() - tcp: randomize tcp timestamp offsets for each connection - tcp: allow to turn tcp timestamp randomization off - secure_seq: use SipHash in place of MD5 Important TuxCare License Agreement CVE-2022-24448 CVE-2023-1073 CVE-2022-1048 CVE-2022-26966 CVE-2022-20369 CVE-2023-30456 CVE-2023-31436 CVE-2023-1829 CVE-2023-1670 CVE-2023-1989 CVE-2022-43945 CVE-2022-3586 CVE-2022-1012 CVE-2021-4028 CVE-2023-2248 CVE-2023-1513 CVE-2023-28328 CVE-2023-2007 Ubuntu 16.04 LTS * CVE-2023-32233 // CVE-url: https://ubuntu.com/security/CVE-2023-32233 - netfilter: nf_tables: add nft_set_is_anonymous() helper - netfilter: nf_tables: split set destruction in deactivate and destroy phase - netfilter: nf_tables: unbind set in rule from commit path - netfilter: nf_tables: fix set double-free in abort path - netfilter: nf_tables: bogus EBUSY when deleting set after flush - netfilter: nf_tables: use-after-free in failing rule with bound set - netfilter: nf_tables: deactivate anonymous set from preparation phase * Bionic update: upstream stable patchset 2018-12-12 (LP: #1808185) // CVE- url: https://ubuntu.com/security/CVE-2023-32233 - netfilter: nf_tables: bogus EBUSY in chain deletions * CVE-url: https://ubuntu.com/security/CVE-2023-32233 - netfilter: nf_tables: release objects on netns destruction - netfilter: nf_tables: destroy basechain and rules on netdevice removal - netfilter: nft_hash: support deletion of inactive elements - netfilter: nf_tables: remove check against removal of inactive objects - netfilter: nfnetlink: pass down netns pointer to call() and call_rcu() - netfilter: nf_tables: introduce nft_setelem_parse_flags() helper - netfilter: nft_rbtree: introduce nft_rbtree_interval_end() helper - netfilter: nft_rbtree: allow adjacent intervals with dynamic updates - netfilter: nf_tables: parse element flags from nft_del_setelem() - netfilter: nf_tables: reject loops from set element jump to chain - netfilter: nf_tables: fix wrong destroy anonymous sets if binding fails - netfilter: nf_tables: add generic macros to check for generation mask - netfilter: nf_tables: add generation mask to tables - netfilter: nf_tables: add generation mask to chains - netfilter: nf_tables: add generation mask to sets - netfilter: nf_tables: get rid of NFT_BASECHAIN_DISABLED - netlink: add NLM_F_NONREC flag for deletion requests - netfilter: nf_tables: add support for inverted logic in nft_lookup - netfilter: nf_tables: get rid of possible_net_t from set and basechain - netfilter: nf_tables: simplify the basic expressions' init routine - netfilter: nf_tables: fix *leak* when expr clone fail - netfilter: nf_tables: missing sanitization in data from userspace - netfilter: nf_tables: revisit chain/object refcounting from elements * CVE-2023-1380 // CVE-url: https://ubuntu.com/security/CVE-2023-1380 - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() * CVE-url: https://ubuntu.com/security/CVE-2023-2124 - xfs: verify buffer contents when we skip log replay * Bionic update: upstream stable patchset 2023-04-05 (LP: #2015399) // CVE- url: https://ubuntu.com/security/CVE-2023-32269 - netrom: Fix use-after-free caused by accept on already connected socket * Bionic update: upstream stable patchset 2023-04-05 (LP: #2015399) // CVE- url: https://ubuntu.com/security/CVE-2023-2162 - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress Important TuxCare License Agreement CVE-2023-32269 CVE-2023-2124 CVE-2023-32233 CVE-2023-1380 CVE-2023-2162 Ubuntu 16.04 LTS * Bionic update: upstream stable patchset 2021-11-12 (LP: #1950816) // CVE- url: https://ubuntu.com/security/CVE-2021-20321 - ovl: fix missing negative dentry check in ovl_rename() * CVE-url: https://ubuntu.com/security/CVE-2021-20321 - ovl: cleanup unused var in rename2 * Jammy update: v5.15.93 upstream stable release (LP: #2012665) // CVE-url: https://ubuntu.com/security/CVE-2023-3161 - fbcon: Check font dimension limits * CVE-url: https://ubuntu.com/security/CVE-2021-3753 - vt_kdsetmode: extend console locking * Jammy update: v5.15.75 upstream stable release (LP: #1996825) // CVE-url: https://ubuntu.com/security/CVE-2022-1184 - ext4: fix check for block being out of directory size * Jammy update: v5.15.61 upstream stable release (LP: #1990162) // CVE-url: https://ubuntu.com/security/CVE-2022-1184 - ext4: check if directory block is within i_size * Jammy update: v5.15.104 upstream stable release (LP: #2023225) // CVE-url: https://ubuntu.com/security/CVE-2023-1990 - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition * CVE-url: https://ubuntu.com/security/CVE-2023-3090 - ipvlan:Fix out-of-bounds caused by unclear skb->cb * Jammy update: v5.15.63 upstream stable release (LP: #1990564) // CVE-url: https://ubuntu.com/security/CVE-2023-3111 - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() * CVE-url: https://ubuntu.com/security/CVE-2023-3111 - Btrfs: fill relocation block rsv after allocation - btrfs: check return value of btrfs_commit_transaction in relocation * CVE-url: https://ubuntu.com/security/CVE-2023-3141 - memstick: r592: Fix UAF bug in r592_remove due to race condition * CVE-url: https://ubuntu.com/security/CVE-2023-3212 - gfs2: Don't deref jdesc in evict * CVE-url: https://ubuntu.com/security/CVE-2023-3268 - kernel/relay.c: fix read_pos error when multiple readers - relayfs: fix out-of-bounds access in relay_file_read * CVE-url: https://ubuntu.com/security/CVE-2023-3390 - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE * CVE-url: https://ubuntu.com/security/CVE-2023-35824 - media: dm1105: Fix use after free bug in dm1105_remove due to race condition Important TuxCare License Agreement CVE-2023-3161 CVE-2023-3090 CVE-2023-35824 CVE-2021-20321 CVE-2023-3141 CVE-2023-1990 CVE-2022-1184 CVE-2021-3753 CVE-2023-3212 CVE-2023-3111 CVE-2023-3268 CVE-2023-3390 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2023-4128 - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after- free - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after- free - net/sched: cls_route: No longer copy tcf_result on update to avoid use- after-free * CVE-url: https://ubuntu.com/security/CVE-2023-40283 - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb * Jammy update: v5.15.42 upstream stable release (LP: #1981375) // CVE-url: https://ubuntu.com/security/CVE-2023-4387 - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() * CVE-2023-20593 // CVE-url: https://ubuntu.com/security/CVE-2023-20593 - x86/cpu/amd: Move the errata checking functionality up - x86/cpu/amd: Add a Zenbleed fix * CVE-2023-35001 // CVE-url: https://ubuntu.com/security/CVE-2023-35001 - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval * Bionic update: upstream stable patchset 2023-04-05 (LP: #2015399) // CVE- url: https://ubuntu.com/security/CVE-2023-3567 - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF * CVE-url: https://ubuntu.com/security/CVE-2023-0458 - prlimit: do_prlimit needs to have a speculation check * CVE-url: https://ubuntu.com/security/CVE-2023-2513 - ext4: fix use-after-free in ext4_xattr_set_entry * Jammy update: v5.15.61 upstream stable release (LP: #1990162) // CVE-url: https://ubuntu.com/security/CVE-2023-2513 - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h * CVE-url: https://ubuntu.com/security/CVE-2023-3159 - firewire: fix potential uaf in outbound_phy_packet_callback() * Jammy update: v5.15.106 upstream stable release (LP: #2023233) // CVE-url: https://ubuntu.com/security/CVE-2023-1611 - btrfs: fix race between quota disable and quota assign ioctls * CVE-url: https://ubuntu.com/security/CVE-2023-3611 - net/sched: sch_qfq: account for stab overhead in qfq_enqueue * CVE-2023-3776 // CVE-url: https://ubuntu.com/security/CVE-2023-3776 - net/sched: cls_fw: Fix improper refcount update leads to use-after-free Important TuxCare License Agreement CVE-2023-35001 CVE-2023-2513 CVE-2023-3776 CVE-2023-4387 CVE-2023-4128 CVE-2023-0458 CVE-2023-3611 CVE-2023-3159 CVE-2023-3567 CVE-2023-4206 CVE-2023-1611 CVE-2023-40283 CVE-2023-4207 CVE-2023-20593 CVE-2023-4208 Ubuntu 16.04 LTS * Jammy update: v5.15.86 upstream stable release (LP: #2005113) // CVE-url: https://ubuntu.com/security/CVE-2022-3606 - libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() * Jammy update: v5.15.87 upstream stable release (LP: #2007441) // CVE-url: https://ubuntu.com/security/CVE-2023-23454 - net: sched: cbq: dont intepret cls results when asked to drop * Jammy update: v5.15.76 upstream stable release (LP: #1997113) // CVE-url: https://ubuntu.com/security/CVE-2023-0590 - net: sched: fix race condition in qdisc_graft() * Jammy update: v5.15.91 upstream stable release (LP: #2011467) // CVE-url: https://ubuntu.com/security/CVE-2022-4129 - l2tp: Serialize access to sk_user_data with sk_callback_lock * Jammy update: v5.15.105 upstream stable release (LP: #2023230) // CVE-url: https://ubuntu.com/security/CVE-2023-30772 - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition * Jammy update: v5.15.105 upstream stable release (LP: #2023230) // CVE-url: https://ubuntu.com/security/CVE-2023-2194 - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() * CVE-2023-31084 // CVE-2023-31084 was assigned to this bug. // CVE-url: https://ubuntu.com/security/CVE-2023-31084 - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() * Jammy update: v5.15.99 upstream stable release (LP: #2018438) // CVE-url: https://ubuntu.com/security/CVE-2023-2985 - fs: hfsplus: fix UAF issue in hfsplus_put_super * Jammy update: v5.15.111 upstream stable release (LP: #2025095) // CVE-url: https://ubuntu.com/security/CVE-2023-2269 - dm ioctl: fix nested locking in table_clear() to remove deadlock concern Moderate TuxCare License Agreement CVE-2023-2985 CVE-2023-30772 CVE-2023-23454 CVE-2023-2194 CVE-2023-0590 CVE-2022-3606 CVE-2023-31084 CVE-2023-2269 CVE-2022-4129 Ubuntu 16.04 LTS * Bionic update: upstream stable patchset 2022-12-01 (LP: #1998542) // CVE-2022-26373 - x86/speculation: Add RSB VM Exit protections * Bionic update: upstream stable patchset 2022-12-01 (LP: #1998542) - Revert "x86/cpu: Add a steppings field to struct x86_cpu_id" - x86/cpufeature: Add facility to check for min microcode revisions - x86/cpufeature: Fix various quality problems in the <asm/cpu_device_hd.h> header - x86/devicetable: Move x86 specific macro out of generic code - x86/cpu: Add consistent CPU match macros - x86/cpu: Add a steppings field to struct x86_cpu_id - x86/cpufeatures: Move RETPOLINE flags to word 11 - x86/bugs: Report AMD retbleed vulnerability - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value - x86/entry: Add kernel IBRS implementation - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS - x86/speculation: Add LFENCE to RSB fill sequence - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS - x86/speculation: Fill RSB on vmexit for IBRS - x86/cpu/amd: Enumerate BTC_NO - x86/speculation: Disable RRSBA behavior - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts * Bionic update: upstream stable patchset 2022-12-01 (LP: #1998542) // CVE-2022-29901 - x86/bugs: Optimize SPEC_CTRL MSR writes - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() - x86/bugs: Report Intel retbleed vulnerability - entel_idle: Disable IBRS during long idle - x86/speculation: Change FILL_RETURN_BUFFER to work with objtool - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n - x86/speculation: Fix firmware entry SPEC_CTRL handling - x86/speculation: Fix SPEC_CTRL write on SMT state change - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit - x86/speculation: Remove x86_spec_ctrl_mask - x86/common: Stamp out the stepping madness - x86/bugs: Add Cannon lake to RETBleed affected CPU list - x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current * Bionic update: upstream stable patchset 2022-12-01 (LP: #1998542) // CVE-2022-29900 - x86/bugs: Add AMD retbleed= boot parameter * Bionic update: upstream stable patchset 2022-10-06 (LP: #1992112) - x86/bugs: Add "unknown" reporting for MMIO Stale Data * CVE-2021-26401 - x86/speculation: Warn about Spectre v2 LFENCE mitigation - x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT * CVE-2022-0001 - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting * Bionic update: upstream stable patchset 2019-10-07 (LP: #1847155) - x86/cpu: Add Tiger Lake to Intel family * CVE-url: https://ubuntu.com/security/CVE-2023-4622 - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). * CVE-url: https://ubuntu.com/security/CVE-2022-45919 - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 * Miscellaneous upstream changes - Revert "x86/enter: Use IBRS on syscall and interrupts" Important TuxCare License Agreement CVE-2022-29900 CVE-2022-26373 CVE-2023-4622 CVE-2022-29901 CVE-2022-0001 CVE-2022-45919 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2023-42753 - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c * CVE-2022-40982 // CVE-url: https://ubuntu.com/security/CVE-2022-40982 - init: Provide arch_cpu_finalize_init() - x86/cpu: Switch to arch_cpu_finalize_init() - init: Remove check_bugs() leftovers - x86/speculation: Add Gather Data Sampling mitigation - x86/speculation: Add force option to GDS mitigation - x86/speculation: Add Kconfig option for GDS - KVM: Add GDS_NO support to KVM * CVE-url: https://ubuntu.com/security/CVE-2022-40982 - x86/cpu: Move arch_smt_update() to a neutral place * Bionic update: upstream stable patchset 2019-07-23 (LP: #1837664) // CVE- url: https://ubuntu.com/security/CVE-2022-40982 - cpu/hotplug: Fix "SMT disabled by BIOS" detection for KVM * Jammy update: v5.15.94 upstream stable release (LP: #2012673) // CVE-url: https://ubuntu.com/security/CVE-2022-40982 - x86/speculation: Identify processors vulnerable to SMT RSB predictions * CVE-2023-20588 // CVE-url: https://ubuntu.com/security/CVE-2023-20588 - x86/bugs: Increase the x86 bugs vector size to two u32s - x86/CPU/AMD: Do not leak quotient data after a division by 0 - x86/CPU/AMD: Fix the DIV(0) initial fix attempt * CVE-2023-3863 // CVE-url: https://ubuntu.com/security/CVE-2023-3863 - nfc: llcp: simplify llcp_sock_connect() error paths - net: nfc: Fix use-after-free caused by nfc_llcp_find_local * Jammy update: v5.15.46 upstream stable release (LP: #1981864) // CVE-url: https://ubuntu.com/security/CVE-2023-4385 - fs: jfs: fix possible NULL pointer dereference in dbFree() * Jammy update: v5.15.42 upstream stable release (LP: #1981375) // CVE-url: https://ubuntu.com/security/CVE-2023-4459 - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() * CVE-url: https://ubuntu.com/security/CVE-2023-4921 - net: sched: sch_qfq: Fix UAF in qfq_dequeue() * Miscellaneous Ubuntu changes - [Config] CONFIG_GDS_FORCE_MITIGATION=n Important TuxCare License Agreement CVE-2023-4459 CVE-2022-40982 CVE-2023-42753 CVE-2023-4921 CVE-2023-4385 CVE-2023-20588 CVE-2023-3863 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2023-42755 - net/sched: Retire rsvp classifier * CVE-url: https://ubuntu.com/security/CVE-2023-39194 - net: xfrm: Fix xfrm_address_filter OOB read * CVE-url: https://ubuntu.com/security/CVE-2023-39192 - netfilter: xt_u32: validate user space input * CVE-url: https://ubuntu.com/security/CVE-2023-39193 - netfilter: xt_sctp: validate the flag_info count * CVE-url: https://ubuntu.com/security/CVE-2023-42754 - ipv4: fix null-deref in ipv4_link_failure * CVE-url: https://ubuntu.com/security/CVE-2023-3338 - [Config] updateconfigs for DECNET * Jammy update: v5.15.118 upstream stable release (LP: #2030239) // CVE-url: https://ubuntu.com/security/CVE-2023-3338 - Remove DECnet support from kernel * CVE-2023-1206 // CVE-url: https://ubuntu.com/security/CVE-2023-1206 - tcp: Reduce chance of collisions in inet6_hashfn(). * Miscellaneous Ubuntu changes - [Config] updateconfigs for NET_CLS_RSVP Moderate TuxCare License Agreement CVE-2023-42755 CVE-2023-1206 CVE-2023-42754 CVE-2023-39192 CVE-2023-3338 CVE-2023-39194 CVE-2023-39193 Ubuntu 16.04 LTS * CVE-2023-42752 // CVE-url: https://ubuntu.com/security/CVE-2023-42752 - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU * CVE-2023-4623 // CVE-url: https://ubuntu.com/security/CVE-2023-4623 - net/sched: sch_hfsc: Ensure inner classes have fsc curve * CVE-2023-34319 // CVE-url: https://ubuntu.com/security/CVE-2023-34319 - xen/netback: Fix buffer overrun triggered by unusual packet * CVE-2023-4881 // CVE-url: https://ubuntu.com/security/CVE-2023-4881 - netfilter: nftables: exthdr: fix 4-byte stack OOB write * CVE-2023-31083 // CVE-url: https://ubuntu.com/security/CVE-2023-31083 - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO * CVE-2023-3772 // CVE-url: https://ubuntu.com/security/CVE-2023-3772 - xfrm: add NULL check in xfrm_update_ae_params Important TuxCare License Agreement CVE-2023-34319 CVE-2023-4623 CVE-2023-42752 CVE-2023-52628 CVE-2023-31083 CVE-2023-4881 CVE-2023-3772 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2023-45871 - igb: Limit maximum frame Rx based on MTU - igb: Only sync size of expected frame in ethtool testing - igb: Add support for ethtool private flag to allow use of legacy Rx - igb: Add support for using order 1 pages to receive large frames - igb: set max size RX buffer when store bad packet is enabled * CVE-2023-31085 // CVE-url: https://ubuntu.com/security/CVE-2023-31085 - ubi: Refuse attaching if mtd's erasesize is 0 * CVE-2023-5717 // CVE-url: https://ubuntu.com/security/CVE-2023-5717 - perf: Disallow mis-matched inherited group reads * Bionic update: upstream stable patchset 2022-09-23 (LP: #1990698) // CVE- url: https://ubuntu.com/security/CVE-2022-3629 - vsock: Fix memory leak in vsock_connect() * Jammy update: v5.15.99 upstream stable release (LP: #2018438) // CVE-url: https://ubuntu.com/security/CVE-2023-1077 - sched/rt: pick_next_rt_entity(): check list_entry * CVE-url: https://ubuntu.com/security/CVE-2023-1077 - sched/debug: Add SCHED_WARN_ON() * CVE-url: https://ubuntu.com/security/CVE-2023-45863 - kobject: Fix slab-out-of-bounds in fill_kobj_path() * Jammy update: v5.15.100 upstream stable release (LP: #2020387) // CVE-url: https://ubuntu.com/security/CVE-2023-45862 - USB: ene_usb6250: Allocate enough memory for full object * CVE-url: https://ubuntu.com/security/CVE-2023-39189 - netfilter: nfnetlink_osf: avoid OOB read Critical TuxCare License Agreement CVE-2023-45871 CVE-2023-45863 CVE-2023-31085 CVE-2023-1077 CVE-2022-3629 CVE-2023-45862 CVE-2023-5717 CVE-2023-39189 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2023-7192 - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() * CVE-url: https://ubuntu.com/security/CVE-2023-6610 - smb: client: fix potential OOB in smb2_dump_detail() * CVE-url: https://ubuntu.com/security/CVE-2023-6606 - smb: client: fix OOB in smbCalcSize() * CVE-url: https://ubuntu.com/security/CVE-2023-6546 - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux * CVE-url: https://ubuntu.com/security/CVE-2023-6932 - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet * CVE-url: https://ubuntu.com/security/CVE-2023-6931 - perf: Fix perf_event_validate_size() - perf: Fix perf_event_validate_size() lockdep splat Important TuxCare License Agreement CVE-2023-6606 CVE-2023-6931 CVE-2023-6932 CVE-2023-6546 CVE-2023-7192 CVE-2023-6610 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2022-36402 - drm/vmwgfx: Add support for SVGA3dCmdDefineGBSurface_v3 - drm/vmwgfx: Add SM4_1 flag - drm/vmwgfx: Add CAP2 support in vmwgfx - drm/vmwgfx: Bump version patchlevel and date - drm/vmwgfx: Expose SM4_1 param to user space - drm/vmwgfx: Update the device headers - drm/vmwgfx: Fix shader stage validation * CVE-url: https://ubuntu.com/security/CVE-2023-6040 - netfilter: nf_tables: Reject tables of unsupported family * CVE-2023-4244 // CVE-url: https://ubuntu.com/security/CVE-2023-4244 - netfilter: nf_tables: don't skip expired elements during walk - netfilter: nf_tables: GC transaction API to avoid race with control plane - netfilter: nf_tables: adapt set backend to use GC transaction API - netfilter: nf_tables: remove busy mark and gc batch API - netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path - netfilter: nf_tables: GC transaction race with netns dismantle - netfilter: nf_tables: GC transaction race with abort path * CVE-url: https://ubuntu.com/security/CVE-2023-4244 - netfilter: nf_tables: pass ctx to nf_tables_expr_destroy() - netfilter: nf_tables: use net_generic infra for transaction data - netfilter: nftables: add nft_pernet() helper function - netfilter: nftables: rename set element data activation/deactivation functions - netfilter: nf_tables: fix chain dependency validation - netfilter: nf_tables: place all set backends in one single module - netfilter: nf_tables: make sets built-in * Bionic update: upstream stable patchset 2022-07-06 (LP: #1980879) // CVE- url: https://ubuntu.com/security/CVE-2022-48619 - Input: add bounds checking to input_set_capability() * CVE-url: https://ubuntu.com/security/CVE-2023-51780 - atm: Fix Use-After-Free in do_vcc_ioctl * CVE-url: https://ubuntu.com/security/CVE-2023-51782 - net/rose: Fix Use-After-Free in rose_ioctl * CVE-url: https://ubuntu.com/security/CVE-2023-51781 - appletalk: Fix Use-After-Free in atalk_ioctl * CVE-url: https://ubuntu.com/security/CVE-2023-0597 - random32: add noise from network and scheduling activity * CVE-2023-51779 // CVE-url: https://ubuntu.com/security/CVE-2023-51779 - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg * Jammy update: v5.15.135 upstream stable release (LP: #2045809) // CVE-url: https://ubuntu.com/security/CVE-2023-34324 - xen/events: replace evtchn_rwlock with RCU * kernel crash : net_sched race condition in tcindex_destroy() (LP: #1825942) // CVE-url: https://ubuntu.com/security/CVE-2023-34324 - RCU, workqueue: Implement rcu_work * Miscellaneous Ubuntu changes - [Config] updateconfigs for CONFIG_NFT_SET_RBTREE CONFIG_NFT_SET_HASH CONFIG_NFT_SET_BITMAP * Miscellaneous upstream changes - drm/vmwgfx: Use enum to represent graphics context capabilities Important TuxCare License Agreement CVE-2023-34324 CVE-2023-51779 CVE-2023-0597 CVE-2022-48619 CVE-2023-51780 CVE-2022-36402 CVE-2023-51782 CVE-2023-6040 CVE-2023-4244 CVE-2023-51781 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2023-52449 - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier * Bionic update: upstream stable patchset 2018-08-29 (LP: #1789666) // CVE- url: https://ubuntu.com/security/CVE-2022-20567 - l2tp: fix refcount leakage on PPPoL2TP sockets * Bionic update to 4.15.8 stable release (LP: #1755179) // CVE-url: https://ubuntu.com/security/CVE-2022-20567 - l2tp: don't use inet_shutdown on ppp session destroy - l2tp: fix race in pppol2tp_release with session object destroy * CVE-url: https://ubuntu.com/security/CVE-2023-39197 - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one * CVE-url: https://ubuntu.com/security/CVE-2023-34256 - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum * CVE-url: https://ubuntu.com/security/CVE-2024-24855 - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() * CVE-url: https://ubuntu.com/security/CVE-2023-52445 - media: pvrusb2: fix use after free on context disconnection * CVE-url: https://ubuntu.com/security/CVE-2023-52444 - f2fs: fix to avoid dirent corruption * CVE-url: https://ubuntu.com/security/CVE-2023-52443 - apparmor: avoid crash when parsed profile name is empty * CVE-url: https://ubuntu.com/security/CVE-2024-24860 - Bluetooth: Move {min,max}_key_size debugfs into hci_debugfs_create_le - Bluetooth: Fix atomicity violation in {min,max}_key_size_set * Bionic update: upstream stable patchset 2019-07-29 (LP: #1838349) // CVE- url: https://ubuntu.com/security/CVE-2024-24860 - Bluetooth: Fix debugfs NULL pointer dereference Important TuxCare License Agreement CVE-2023-52449 CVE-2024-24855 CVE-2023-52443 CVE-2023-52444 CVE-2023-39197 CVE-2023-52445 CVE-2023-34256 CVE-2024-24860 CVE-2022-20567 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2024-23307 - md/raid5: fix atomicity violation in raid5_cache_count * CVE-url: https://ubuntu.com/security/CVE-2021-46932 - Input: appletouch - initialize work before device registration * CVE-url: https://ubuntu.com/security/CVE-2021-46936 - net: fix use-after-free in tw_timer_handler * Bionic update: upstream stable patchset 2021-06-01 (LP: #1930472) // CVE- url: https://ubuntu.com/security/CVE-2021-46939 - tracing: Restructure trace_clock_global() to never block * CVE-url: https://ubuntu.com/security/CVE-2021-46933 - usb: gadget: f_fs: Clear ffs_eventfd in ffs_data_clear. * Bionic update: upstream stable patchset 2022-01-27 (LP: #1959335) // CVE- url: https://ubuntu.com/security/CVE-2021-46924 - NFC: st21nfca: Fix memory leak in device probe and remove * CVE-url: https://ubuntu.com/security/CVE-2023-52469 - drivers/amd/pm: fix a use-after-free in kv_parse_power_table * CVE-url: https://ubuntu.com/security/CVE-2024-26633 - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() * CVE-url: https://ubuntu.com/security/CVE-2023-52340 - net: add a route cache full diagnostic message - net/dst: use a smaller percpu_counter batch for dst entries accounting - ipv6: remove max_size check inline with ipv4 * CVE-url: https://ubuntu.com/security/CVE-2023-52436 - f2fs: explicitly null-terminate the xattr list * CVE-url: https://ubuntu.com/security/CVE-2023-52470 - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() * CVE-url: https://ubuntu.com/security/CVE-2022-45884 - media: dvbdev: convert DVB device types into an enum - media: dvbdev: remove double-unlock - media: media/dvb: Use kmemdup rather than duplicating its implementation - media: dvbdev: Fix memleak in dvb_register_device - media: dvbdev: fix error logic at dvb_register_device() - media: dvb-core: Fix use-after-free due to race at dvb_register_device() Important TuxCare License Agreement CVE-2024-23307 CVE-2021-46924 CVE-2023-52470 CVE-2021-46933 CVE-2024-26633 CVE-2021-46932 CVE-2023-52436 CVE-2021-46939 CVE-2021-46936 CVE-2023-52469 CVE-2023-52340 CVE-2022-45884 Ubuntu 16.04 LTS * Jammy update: v5.15.81 upstream stable release (LP: #2003130) // CVE-url: https://ubuntu.com/security/CVE-2023-1382 - tipc: set con sock in tipc_conn_alloc - tipc: add an extra conn_get in tipc_conn_alloc * CVE-url: https://ubuntu.com/security/CVE-2023-1998 - x86/speculation: Allow enabling STIBP with legacy IBRS * CVE-url: https://ubuntu.com/security/CVE-2021-47193 - scsi: pm80xx: Tie the interrupt name to the module instance - scsi: pm80xx: Deal with kexec reboots - scsi: pm80xx: Increase number of supported queues - scsi: pm80xx: Remove DMA memory allocation for ccb and device structures - scsi: pm80xx: Increase the number of outstanding I/O supported to 1024 - scsi: pm80xx: Fix memory leak during rmmod * CVE-url: https://ubuntu.com/security/CVE-2021-47198 - scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine - scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine * Bionic update: upstream stable patchset 2021-12-13 (LP: #1954703) // CVE- url: https://ubuntu.com/security/CVE-2021-47194 - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type * CVE-url: https://ubuntu.com/security/CVE-2023-52458 - block: add check that partition length needs to be aligned with block size * CVE-url: https://ubuntu.com/security/CVE-2023-52600 - jfs: fix uaf in jfs_evict_inode * Bionic update: upstream stable patchset 2021-06-01 (LP: #1930472) // CVE- url: https://ubuntu.com/security/CVE-2021-46955 - openvswitch: fix stack OOB read while fragmenting IPv4 packets * Bionic update: upstream stable patchset 2021-06-01 (LP: #1930472) // CVE- url: https://ubuntu.com/security/CVE-2021-46966 - ACPI: custom_method: fix potential use-after-free issue * Bionic update: upstream stable patchset 2022-09-23 (LP: #1990698) // CVE- url: https://ubuntu.com/security/CVE-2019-25162 - i2c: Fix a potential use after free * CVE-url: https://ubuntu.com/security/CVE-2023-24023 - Bluetooth: Add debug setting for changing minimum encryption key size - Bluetooth: Add more enc key size check * CVE-url: https://ubuntu.com/security/CVE-2023-52603 - UBSAN: array-index-out-of-bounds in dtSplitRoot * Bionic update: upstream stable patchset 2021-07-14 (LP: #1936231) // CVE- url: https://ubuntu.com/security/CVE-2021-46906 - HID: usbhid: fix info leak in hid_submit_ctrl * Bionic update: upstream stable patchset 2021-05-25 (LP: #1929603) // CVE- url: https://ubuntu.com/security/CVE-2021-46905 - net: hso: fix NULL-deref on disconnect regression * Bionic update: upstream stable patchset 2021-04-30 (LP: #1926808) // CVE- url: https://ubuntu.com/security/CVE-2021-46904 - net: hso: fix null-ptr-deref during tty device unregistration * CVE-url: https://ubuntu.com/security/CVE-2024-26600 - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP Important TuxCare License Agreement CVE-2023-52458 CVE-2021-46905 CVE-2021-47193 CVE-2023-52603 CVE-2021-47194 CVE-2021-46966 CVE-2021-46906 CVE-2023-1998 CVE-2023-24023 CVE-2023-52600 CVE-2024-26600 CVE-2019-25162 CVE-2021-46955 CVE-2021-46904 CVE-2023-1382 CVE-2021-47198 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2023-47233 - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach * CVE-url: https://ubuntu.com/security/CVE-2023-52601 - jfs: Fix memleak in dbAdjCtl * CVE-url: https://ubuntu.com/security/CVE-2024-26801 - Bluetooth: Avoid potential use-after-free in hci_error_reset * CVE-url: https://ubuntu.com/security/CVE-2024-26805 - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter * CVE-url: https://ubuntu.com/security/CVE-2023-52566 - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() * CVE-url: https://ubuntu.com/security/CVE-2024-26622 - tomoyo: fix UAF write bug in tomoyo_write_control() * CVE-url: https://ubuntu.com/security/CVE-2024-26614 - tcp: make sure init the accept_queue's spinlocks once - ipv6: init the accept_queue's spinlocks in inet6_create * CVE-url: https://ubuntu.com/security/CVE-2023-52530 - wifi: mac80211: fix potential key use-after-free * CVE-url: https://ubuntu.com/security/CVE-2023-52524 - net: nfc: llcp: Add lock when modifying device list * CVE-url: https://ubuntu.com/security/CVE-2021-47173 - misc/uss720: fix memory leak in uss720_probe * Bionic update: upstream stable patchset 2021-07-14 (LP: #1936231) // CVE- url: https://ubuntu.com/security/CVE-2021-47171 - net: usb: fix possible use-after-free in smsc75xx_bind * Bionic update: upstream stable patchset 2021-06-11 (LP: #1931740) // CVE- url: https://ubuntu.com/security/CVE-2021-47171 - net: usb: fix memory leak in smsc75xx_bind * CVE-url: https://ubuntu.com/security/CVE-2024-26910 - timers: Get rid of del_singleshot_timer_sync() * CVE-url: https://ubuntu.com/security/CVE-2023-52595 - rt2x00: clear IV's on start to fix AP mode regression - wifi: rt2x00: restart beacon queue when hardware reset * CVE-url: https://ubuntu.com/security/CVE-2024-26696 - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() * CVE-url: https://ubuntu.com/security/CVE-2024-26685 - nilfs2: fix potential bug in end_buffer_async_write * CVE-url: https://ubuntu.com/security/CVE-2024-26625 - llc: call sock_orphan() at release time * CVE-url: https://ubuntu.com/security/CVE-2023-52615 - hwrng: core - Fix page fault dead lock on mmap-ed hwrng * CVE-url: https://ubuntu.com/security/CVE-2023-52486 - drm: Don't unref the same fb many times by mistake due to deadlock handling * CVE-url: https://ubuntu.com/security/CVE-2024-26697 - nilfs2: fix data corruption in dsync block recovery for small block sizes * CVE-url: https://ubuntu.com/security/CVE-2024-26679 - inet: read sk->sk_family once in inet_recv_error() * CVE-url: https://ubuntu.com/security/CVE-2023-52622 - ext4: remove unnecessary check from alloc_flex_gd() - ext4: avoid online resizing failures due to oversized flex bg * CVE-url: https://ubuntu.com/security/CVE-2024-26635 - llc: Drop support for ETH_P_TR_802_2. * CVE-url: https://ubuntu.com/security/CVE-2023-52594 - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() * CVE-url: https://ubuntu.com/security/CVE-2024-26720 - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again * CVE-url: https://ubuntu.com/security/CVE-2024-26825 - nfc: nci: free rx_data_reassembly skb on NCI device cleanup * CVE-url: https://ubuntu.com/security/CVE-2024-26671 - blk-mq: fix IO hang from sbitmap wakeup race * CVE-url: https://ubuntu.com/security/CVE-2024-26675 - ppp_async: limit MRU to 64K * CVE-url: https://ubuntu.com/security/CVE-2023-52602 - jfs: fix slab-out-of-bounds Read in dtSearch * CVE-url: https://ubuntu.com/security/CVE-2024-26704 - ext4: fix double-free of blocks due to wrong extents moved_len * CVE-url: https://ubuntu.com/security/CVE-2023-52619 - linux/kernel.h: Add ALIGN_DOWN macro - pstore: Make ramoops_init_przs generic for other prz arrays - pstore/ram: Fix crash when setting number of cpus to an odd number * CVE-url: https://ubuntu.com/security/CVE-2024-26636 - llc: make llc_ui_sendmsg() more robust against bonding changes * CVE-url: https://ubuntu.com/security/CVE-2023-52587 - IB/ipoib: Fix mcast list locking * CVE-url: https://ubuntu.com/security/CVE-2023-52601 // CVE-url: https://ubuntu.com/security/CVE-2023-52604 - jfs: fix array-index-out-of-bounds in dbAdjTree * CVE-url: https://ubuntu.com/security/CVE-2023-52604 - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree * CVE-url: https://ubuntu.com/security/CVE-2023-52599 - jfs: fix array-index-out-of-bounds in diNewExt * Bionic update: upstream stable patchset 2022-11-15 (LP: #1996650) // CVE- url: https://ubuntu.com/security/CVE-2022-48659 - mm/slub: fix to return errno if kmalloc() fails * CVE-url: https://ubuntu.com/security/CVE-2024-26884 - bpf: Fix hashtab overflow check on 32-bit arches * CVE-url: https://ubuntu.com/security/CVE-2024-26882 - net: add atomic_long_t to net_device_stats fields - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() * Bionic update: upstream stable patchset 2019-07-19 (LP: #1837257) // CVE- url: https://ubuntu.com/security/CVE-2024-26882 - ip: validate header length on virtual device xmit * CVE-url: https://ubuntu.com/security/CVE-2024-26908 - x86/xen: Add some null pointer checking to smp.c * CVE-url: https://ubuntu.com/security/CVE-2024-26904 - btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve * CVE-url: https://ubuntu.com/security/CVE-2024-26903 - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security * CVE-url: https://ubuntu.com/security/CVE-2024-26901 - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak * CVE-url: https://ubuntu.com/security/CVE-2024-26898 - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts Important TuxCare License Agreement CVE-2023-52622 CVE-2024-26625 CVE-2024-26636 CVE-2023-52604 CVE-2024-26882 CVE-2024-26622 CVE-2024-26704 CVE-2023-52524 CVE-2024-26614 CVE-2023-52594 CVE-2024-26908 CVE-2024-26679 CVE-2024-26884 CVE-2023-6270 CVE-2024-22099 CVE-2024-26801 CVE-2024-26696 CVE-2022-48659 CVE-2024-26901 CVE-2021-47173 CVE-2024-26635 CVE-2023-52601 CVE-2023-52619 CVE-2024-26904 CVE-2024-35811 CVE-2023-52486 CVE-2024-26685 CVE-2024-26903 CVE-2023-52615 CVE-2024-26671 CVE-2024-26697 CVE-2024-26720 CVE-2021-47171 CVE-2023-52595 CVE-2024-26825 CVE-2023-52530 CVE-2024-26675 CVE-2023-52602 CVE-2024-26910 CVE-2023-52599 CVE-2023-52566 CVE-2024-26805 CVE-2023-52587 CVE-2024-26898 CVE-2023-47233 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2024-26929 - scsi: qla2xxx: Fix double free of fcport * CVE-url: https://ubuntu.com/security/CVE-2024-35997 - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up * CVE-url: https://ubuntu.com/security/CVE-2023-52752 - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() * CVE-url: https://ubuntu.com/security/CVE-2024-27013 - tun: limit printing rate when illegal packet received by tun dev * CVE-url: https://ubuntu.com/security/CVE-2023-52809 - scsi: libfc: Fixup disc_mutex handling - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() * CVE-url: https://ubuntu.com/security/CVE-2024-26934 - USB: core: Fix deadlock in usb_deauthorize_interface() * CVE-url: https://ubuntu.com/security/CVE-2024-35978 - Bluetooth: Fix memory leak in hci_req_sync_complete() * CVE-url: https://ubuntu.com/security/CVE-2023-52806 - ALSA: hda: Fix possible null-ptr-deref when assigning a stream * CVE-url: https://ubuntu.com/security/CVE-2024-35984 - i2c: smbus: fix NULL function pointer dereference * CVE-url: https://ubuntu.com/security/CVE-2023-52817 - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL * CVE-url: https://ubuntu.com/security/CVE-2024-27020 - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() * CVE-url: https://ubuntu.com/security/CVE-2024-35982 - batman-adv: Avoid infinite loop trying to resize local TT Important TuxCare License Agreement CVE-2024-27020 CVE-2023-52817 CVE-2023-52752 CVE-2024-27013 CVE-2024-35984 CVE-2024-26934 CVE-2023-52806 CVE-2024-35978 CVE-2024-35982 CVE-2023-52809 CVE-2024-26929 CVE-2024-35997 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2024-26777 - fbdev: sis: Error out if pixclock equals zero * CVE-url: https://ubuntu.com/security/CVE-2021-47542 - net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings() * CVE-url: https://ubuntu.com/security/CVE-2021-47518 - nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done * CVE-url: https://ubuntu.com/security/CVE-2024-36902 - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() * CVE-url: https://ubuntu.com/security/CVE-2024-36901 - ipv6: prevent NULL dereference in ip6_output() * CVE-url: https://ubuntu.com/security/CVE-2021-47571 - staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() * CVE-url: https://ubuntu.com/security/CVE-2021-47521 - can: sja1000: fix use after free in ems_pcmcia_add_card() * CVE-url: https://ubuntu.com/security/CVE-2021-47520 - can: pch_can: pch_can_rx_normal: fix use after free * CVE-url: https://ubuntu.com/security/CVE-2024-27405 - usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call - usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs - usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call * CVE-url: https://ubuntu.com/security/CVE-2024-26764 - aio: remove an outdated BUG_ON and comment in aio_complete - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio * Bionic update: upstream stable patchset 2020-09-16 (LP: #1895873) // CVE- url: https://ubuntu.com/security/CVE-2024-27405 - USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb() * CVE-url: https://ubuntu.com/security/CVE-2024-26840 - cachefiles: fix memory leak in cachefiles_add_cache() * CVE-url: https://ubuntu.com/security/CVE-2024-26779 - wifi: mac80211: fix race condition on enabling fast-xmit * CVE-url: https://ubuntu.com/security/CVE-2024-26772 - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() * CVE-url: https://ubuntu.com/security/CVE-2024-26845 - scsi: target: core: Add TMF to tmr_list handling * CVE-url: https://ubuntu.com/security/CVE-2024-26804 - net: ip_tunnel: prevent perpetual headroom growth * CVE-url: https://ubuntu.com/security/CVE-2024-27410 - wifi: nl80211: reject iftype change with mesh ID change * CVE-url: https://ubuntu.com/security/CVE-2024-26839 - IB/hfi1: Fix a memleak in init_credit_return * CVE-url: https://ubuntu.com/security/CVE-2024-26773 - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() * CVE-url: https://ubuntu.com/security/CVE-2024-26778 - fbdev: savage: Error out if pixclock equals zero * CVE-url: https://ubuntu.com/security/CVE-2024-26733 - arp: Prevent overflow in arp_req_get(). * CVE-url: https://ubuntu.com/security/CVE-2024-26791 - btrfs: dev-replace: properly validate device names Important TuxCare License Agreement CVE-2024-26840 CVE-2024-26764 CVE-2024-26733 CVE-2024-26804 CVE-2024-26777 CVE-2021-47518 CVE-2024-26779 CVE-2024-26791 CVE-2024-36901 CVE-2024-26772 CVE-2024-26845 CVE-2024-26778 CVE-2021-47521 CVE-2021-47542 CVE-2024-27410 CVE-2021-47520 CVE-2021-47571 CVE-2024-26839 CVE-2024-36902 CVE-2024-26773 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2024-2201 - x86/cpufeatures: Add CPUID_LNX_5 to track recently added Linux-defined word - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file - x86/bhi: Add support for clearing branch history at syscall entry - x86/bhi: Define SPEC_CTRL_BHI_DIS_S - x86/bhi: Enumerate Branch History Injection (BHI) bug - x86/bhi: Add BHI mitigation knob - x86/bhi: Mitigate KVM by default - x86/bugs: Fix BHI documentation - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' - x86/bugs: Fix BHI handling of RRSBA - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation - x86/bugs: Fix BHI retpoline check * CVE-url: https://ubuntu.com/security/CVE-2024-26642 - netfilter: nf_tables: disallow anonymous set with timeout flag * CVE-url: https://ubuntu.com/security/CVE-2021-33631 - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' * CVE-url: https://ubuntu.com/security/CVE-2021-47545 - perf hists: Properly release format fields - perf hist: Fix memory leak of a perf_hpp_fmt * Miscellaneous upstream changes - media: xc4000: Fix atomicity violation in xc4000_get_frequency - updateconfigs for CONFIG_BHI_{AUTO|OFF|ON} Important TuxCare License Agreement CVE-2024-26642 CVE-2024-2201 CVE-2021-47545 CVE-2024-24861 CVE-2021-33631 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2024-26810 - vfio/pci: Lock external INTx masking ops * CVE-url: https://ubuntu.com/security/CVE-2024-38587 - speakup: Fix sizeof() vs ARRAY_SIZE() bug * CVE-url: https://ubuntu.com/security/CVE-2024-39493 - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak * CVE-url: https://ubuntu.com/security/CVE-2024-38381 - nfc: nci: Fix uninit-value in nci_rx_work * CVE-url: https://ubuntu.com/security/CVE-2023-52620 - netfilter: nf_tables: disallow timeout for anonymous sets * CVE-url: https://ubuntu.com/security/CVE-2024-35805 - dm snapshot: fix lockup in dm_exception_table_exit * CVE-url: https://ubuntu.com/security/CVE-2024-26923 - af_unix: Fix garbage collector racing against connect() * CVE-url: https://ubuntu.com/security/CVE-2024-35969 - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr * CVE-url: https://ubuntu.com/security/CVE-2024-26863 - hsr: Fix uninit-value access in hsr_get_node() * CVE-url: https://ubuntu.com/security/CVE-2024-26993 - fs: sysfs: Fix reference leak in sysfs_break_active_protection() * CVE-url: https://ubuntu.com/security/CVE-2024-27388 - SUNRPC: fix some memleaks in gssx_dec_option_array * CVE-url: https://ubuntu.com/security/CVE-2024-35886 - ipv6: Fix infinite recursion in fib6_dump_done(). * CVE-url: https://ubuntu.com/security/CVE-2024-35809 - PCI/PM: Drain runtime-idle callbacks before driver removal * CVE-url: https://ubuntu.com/security/CVE-2024-26875 - media: pvrusb2: fix uaf in pvr2_context_set_notify * CVE-url: https://ubuntu.com/security/CVE-2024-26851 - netfilter: nf_conntrack_h323: Add protection for bmp length out of range * CVE-url: https://ubuntu.com/security/CVE-2024-35915 - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet * CVE-url: https://ubuntu.com/security/CVE-2024-26999 - serial/pmac_zilog: Remove flawed mitigation for rx irq flood * CVE-url: https://ubuntu.com/security/CVE-2023-52699 - sysv: don't call sb_bread() with pointers_lock held * CVE-url: https://ubuntu.com/security/CVE-2024-35828 - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() * CVE-url: https://ubuntu.com/security/CVE-2024-27001 - comedi: vmk80xx: fix incomplete endpoint checking * CVE-url: https://ubuntu.com/security/CVE-2024-27008 - drm: nv04: Fix out of bounds access * CVE-url: https://ubuntu.com/security/CVE-2024-35935 - btrfs: send: handle path ref underflow in header iterate_inode_ref() * CVE-url: https://ubuntu.com/security/CVE-2024-27059 - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command * CVE-url: https://ubuntu.com/security/CVE-2024-26974 - crypto: qat - resolve race condition during AER recovery * CVE-url: https://ubuntu.com/security/CVE-2024-26965 - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays * CVE-url: https://ubuntu.com/security/CVE-2024-26931 - scsi: qla2xxx: Fix command flush on cable pull * CVE-url: https://ubuntu.com/security/CVE-2024-35910 - mptcp: add sk_stop_timer_sync helper * CVE-url: https://ubuntu.com/security/CVE-2024-35944 - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() * CVE-url: https://ubuntu.com/security/CVE-2024-35830 - media: tc358743: register v4l2 async device only after successful setup * CVE-url: https://ubuntu.com/security/CVE-2024-26956 - nilfs2: fix failure to detect DAT corruption in btree and direct mappings * CVE-url: https://ubuntu.com/security/CVE-2024-35807 - ext4: fix corruption during on-line resize * CVE-url: https://ubuntu.com/security/CVE-2024-26813 - vfio/platform: Create persistent IRQ handlers * CVE-url: https://ubuntu.com/security/CVE-2023-52644 - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled * CVE-url: https://ubuntu.com/security/CVE-2024-26966 - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays * CVE-url: https://ubuntu.com/security/CVE-2024-27073 - media: ttpci: fix two memleaks in budget_av_attach * CVE-url: https://ubuntu.com/security/CVE-2023-52880 - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc * CVE-url: https://ubuntu.com/security/CVE-2023-52650 - drm/tegra: dsi: Add missing check for of_find_device_by_node * CVE-url: https://ubuntu.com/security/CVE-2024-35933 - Bluetooth: btintel: Fix null ptr deref in btintel_read_version * CVE-url: https://ubuntu.com/security/CVE-2024-35930 - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() * CVE-url: https://ubuntu.com/security/CVE-2024-27419 - netrom: Fix data-races around sysctl_net_busy_read * CVE-url: https://ubuntu.com/security/CVE-2024-27074 - media: go7007: fix a memleak in go7007_load_encoder * CVE-url: https://ubuntu.com/security/CVE-2024-26859 - net/bnx2x: Prevent access to a freed page in page_pool * CVE-url: https://ubuntu.com/security/CVE-2024-26973 - fat: fix uninitialized field in nostale filehandles * CVE-url: https://ubuntu.com/security/CVE-2024-27436 - ALSA: usb-audio: Stop parsing channels bits when all channels are found. * CVE-url: https://ubuntu.com/security/CVE-2024-35936 - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() * CVE-url: https://ubuntu.com/security/CVE-2024-35821 - ubifs: Set page uptodate in the correct place * CVE-url: https://ubuntu.com/security/CVE-2024-27075 - media: dvb-frontends: avoid stack overflow warnings with clang * CVE-url: https://ubuntu.com/security/CVE-2024-26651 - sr9800: Add check for usbnet_get_endpoints * CVE-url: https://ubuntu.com/security/CVE-2024-27043 - media: edia: dvbdev: fix a use-after-free * CVE-url: https://ubuntu.com/security/CVE-2024-26976 - KVM: Always flush async #PF workqueue when vCPU is being destroyed * CVE-url: https://ubuntu.com/security/CVE-2024-27000 - serial: mxs-auart: add spinlock around changing cts state * CVE-url: https://ubuntu.com/security/CVE-2024-35815 - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion * CVE-url: https://ubuntu.com/security/CVE-2024-26894 - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() * CVE-url: https://ubuntu.com/security/CVE-2024-35922 - fbmon: prevent division by zero in fb_videomode_from_videomode() * CVE-url: https://ubuntu.com/security/CVE-2024-24857 // CVE-url: https://ubuntu.com/security/CVE-2024-24858 // CVE-url: https://ubuntu.com/security/CVE-2024-24859 - Bluetooth: Fix TOCTOU in HCI debugfs implementation * CVE-url: https://ubuntu.com/security/CVE-2024-27078 - media: v4l2-tpg: fix some memleaks in tpg_alloc * CVE-url: https://ubuntu.com/security/CVE-2024-26981 - nilfs2: fix OOB in nilfs_set_de_type * CVE-url: https://ubuntu.com/security/CVE-2024-26816 - x86, relocs: Ignore relocations in .notes section * CVE-url: https://ubuntu.com/security/CVE-2024-26880 - dm: call the resume method on internal suspend * CVE-url: https://ubuntu.com/security/CVE-2024-26994 - speakup: Avoid crash on very long word * CVE-url: https://ubuntu.com/security/CVE-2024-27437 - genirq: Warn when IRQ_NOAUTOEN is used with shared interrupts - genirq: Add IRQF_NO_AUTOEN for request_irq/nmi() - vfio/pci: Disable auto-enable of exclusive INTx IRQ * CVE-url: https://ubuntu.com/security/CVE-2024-26955 - nilfs2: prevent kernel bug at submit_bh_wbc() * CVE-url: https://ubuntu.com/security/CVE-2024-26643 - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout * CVE-url: https://ubuntu.com/security/CVE-2024-26886 - Bluetooth: af_bluetooth: Fix deadlock Important TuxCare License Agreement CVE-2024-27001 CVE-2024-35910 CVE-2023-52650 CVE-2024-26966 CVE-2024-35933 CVE-2024-35805 CVE-2024-26810 CVE-2024-26813 CVE-2024-35807 CVE-2024-27000 CVE-2024-26974 CVE-2024-26965 CVE-2024-27073 CVE-2024-38587 CVE-2024-26976 CVE-2024-39493 CVE-2024-26956 CVE-2024-26816 CVE-2024-26923 CVE-2024-27388 CVE-2024-27075 CVE-2024-26880 CVE-2024-26859 CVE-2024-35886 CVE-2024-26886 CVE-2024-35922 CVE-2024-26875 CVE-2024-26981 CVE-2024-35815 CVE-2024-27059 CVE-2024-26955 CVE-2024-26993 CVE-2024-27437 CVE-2024-26894 CVE-2024-26999 CVE-2024-35936 CVE-2024-27074 CVE-2024-35828 CVE-2024-26643 CVE-2024-35915 CVE-2024-26994 CVE-2024-38381 CVE-2024-35809 CVE-2024-27436 CVE-2024-27043 CVE-2024-35944 CVE-2024-26863 CVE-2023-52699 CVE-2024-27008 CVE-2024-35935 CVE-2023-52620 CVE-2024-35830 CVE-2024-35821 CVE-2024-26931 CVE-2023-52880 CVE-2024-35969 CVE-2024-24858 CVE-2024-24857 CVE-2024-27078 CVE-2024-26851 CVE-2024-24859 CVE-2024-27419 CVE-2023-52644 CVE-2024-35930 CVE-2024-26651 CVE-2024-26973 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2024-25739 - ubi: Check for too small LEB size in VTBL code * Bionic update: upstream stable patchset 2021-06-01 (LP: #1930472) // CVE- url: https://ubuntu.com/security/CVE-2021-46960 - cifs: Return correct error code from smb2_get_enc_key * CVE-url: https://ubuntu.com/security/CVE-2024-36016 - tty: n_gsm: fix frame reception handling - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() * CVE-url: https://ubuntu.com/security/CVE-2024-39494 - ima: Fix use-after-free on a dentry's dname.name * CVE-url: https://ubuntu.com/security/ - ima: fix ima_d_path() possible race with rename * CVE-url: https://ubuntu.com/security/CVE-2024-40902 - jfs: xattr: fix buffer overflow for invalid xattr * CVE-url: https://ubuntu.com/security/CVE-2022-48863 - mISDN: Fix memory leak in dsp_pipeline_build() * CVE-url: https://ubuntu.com/security/CVE-2022-48850 - net-sysfs: add check for netdevice being present to speed_show * Bionic update: upstream stable patchset 2022-04-26 (LP: #1970479) // CVE- url: https://ubuntu.com/security/CVE-2022-48860 - ethernet: Fix error handling in xemaclite_of_probe * Bionic update: upstream stable patchset 2022-04-26 (LP: #1970479) // CVE- url: https://ubuntu.com/security/CVE-2022-48857 - NFC: port100: fix use-after-free in port100_send_complete * Bionic update: upstream stable patchset 2022-04-26 (LP: #1970479) // CVE- url: https://ubuntu.com/security/CVE-2022-48851 - staging: gdm724x: fix use after free in gdm_lte_rx() * CVE-url: https://ubuntu.com/security/CVE-2024-26654 - ALSA: sh: aica: Remove deprecated create_workqueue - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs * CVE-url: https://ubuntu.com/security/CVE-2024-26857 - geneve: move geneve device lookup before iptunnel_pull_header - geneve: make sure to pull inner header in geneve_rx() * CVE-url: https://ubuntu.com/security/CVE-2024-26687 - xen/events: close evtchn after mapping cleanup * CVE-url: https://ubuntu.com/security//CVE-2024-35825 - usb: gadget: ncm: Fix handling of zero block length packets * CVE-url: https://ubuntu.com/security/CVE-2024-27405 // CVE-url: https://ubuntu.com/security/CVE-2024-35825 - usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs * CVE-url: https://ubuntu.com/security/CVE-2022-48627 - vt: fix memory overlapping when deleting chars in the buffer * CVE-url: https://ubuntu.com/security/CVE-2024-35950 - drm/client: Fully protect modes[] with dev->mode_config.mutex * Bionic update: upstream stable patchset 2022-09-14 (LP: #1989625) // CVE- url: https://ubuntu.com/security/CVE-2022-33742 - xen/blkfront: force data bouncing when backend is untrusted * CVE-url: https://ubuntu.com/security/CVE-2022-33742 - xen: introduce xenbus_read_unsigned() Important TuxCare License Agreement CVE-2022-48851 CVE-2024-25739 CVE-2024-27405 CVE-2022-48860 CVE-2022-33742 CVE-2024-26857 CVE-2021-46960 CVE-2024-36016 CVE-2024-40902 CVE-2024-26654 CVE-2024-39494 CVE-2024-26687 CVE-2022-48863 CVE-2024-35825 CVE-2022-48850 CVE-2024-35950 CVE-2022-48627 CVE-2022-48857 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2024-42068 - bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro() * CVE-url: https://ubuntu.com/security/CVE-2024-42079 - gfs2: Fix NULL pointer dereference in gfs2_log_flush * CVE-url: https://ubuntu.com/security/CVE-2024-42226 - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB * CVE-url: https://ubuntu.com/security/CVE-2022-48790 - nvme: introduce a controller state machine - nvme: move namespace scanning to core - nvme: move AER handling to common code - nvme: fix a possible use-after-free in controller reset during load - nvme-pci: fix multiple ctrl removal scheduling * CVE-url: https://ubuntu.com/security/CVE-2024-42236 - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() * CVE-url: https://ubuntu.com/security/CVE-2024-41095 - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes * CVE-url: https://ubuntu.com/security/CVE-2024-41098 - ata: libata-core: Fix null pointer dereference on error * CVE-url: https://ubuntu.com/security/CVE-2024-42244 - tty: Define ASYNC_ replacement bits - tty: Replace ASYNC_CTS_FLOW bit and update atomically - tty: Remove ASYNC_CLOSING - tty: mxser: Remove ASYNC_CLOSING - isdn: Remove ASYNC_CLOSING - tty: Replace TTY_IO_ERROR bit tests with tty_io_error() - tty: Replace ASYNC_NORMAL_ACTIVE bit and update atomically - tty: Replace ASYNC_CHECK_CD and update atomically - tty: Replace ASYNC_SUSPENDED bit and update atomically - tty: Replace ASYNC_INITIALIZED bit and update atomically - USB: serial: mos7840: fix crash on resume * CVE-url: https://ubuntu.com/security/CVE-2024-41089 - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes * CVE-url: https://ubuntu.com/security/CVE-2024-42232 - libceph: fix race between delayed_work() and ceph_monc_stop() * Bionic update: upstream stable patchset 2022-03-29 (LP: #1967013) // CVE- url: https://ubuntu.com/security/CVE-2022-48809 - net: fix a memleak when uncloning an skb dst and its metadata * CVE-url: https://ubuntu.com/security/CVE-2024-42153 - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr * CVE-url: https://ubuntu.com/security/CVE-2022-48791 - scsi: pm80xx: Fix TMF task completion race condition - scsi: pm8001: Fix use-after-free for aborted TMF sas_task * CVE-url: https://ubuntu.com/security/CVE-2022-48792 - scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task * CVE-url: https://ubuntu.com/security/CVE-2024-42154 - tcp_metrics: validate source addr length * CVE-url: https://ubuntu.com/security/CVE-2024-38570 - gfs2: Rename sd_{ glock => kill }_wait - gfs2: Fix potential glock use-after-free on unmount * CVE-url: https://ubuntu.com/security/CVE-2024-38583 - timers: Use del_timer_sync() even on UP - timers: Rename del_timer_sync() to timer_delete_sync() - timers: Rename del_timer() to timer_delete() - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode - timers: Add shutdown mechanism to the internal functions - timers: Provide timer_shutdown[_sync]() - nilfs2: fix use-after-free of timer for log writer thread - nilfs2: fix unexpected freezing of nilfs_segctor_sync() - nilfs2: fix potential hang in nilfs_detach_log_writer() * CVE-url: https://ubuntu.com/security/CVE-2024-42070 - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers * CVE-url: https://ubuntu.com/security/CVE-2024-42228 - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc Critical TuxCare License Agreement CVE-2024-42153 CVE-2022-48790 CVE-2022-48809 CVE-2024-38570 CVE-2024-42228 CVE-2022-48792 CVE-2024-42070 CVE-2022-48791 CVE-2024-41089 CVE-2024-42232 CVE-2024-42154 CVE-2024-41095 CVE-2024-38583 CVE-2024-42244 CVE-2024-41098 CVE-2024-42226 CVE-2024-42236 CVE-2024-42068 CVE-2024-42079 CVE-2024-38582 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2024-36939 - NFS: Cleanup - add nfs_clients_exit to mirror nfs_clients_init - nfs: expose /proc/net/sunrpc/nfs in net namespaces - sunrpc: add a struct rpc_stats arg to rpc_create_args - nfs: make the rpc_stat per net namespace - nfs: Handle error of rpc_proc_register() in nfs_net_init(). * CVE-url: https://ubuntu.com/security/CVE-2024-38600 - ALSA: Fix deadlocks with kctl removals at disconnection * CVE-url: https://ubuntu.com/security/CVE-2024-36270 - netfilter: tproxy: bail out if IP has been disabled on the device * CVE-url: https://ubuntu.com/security/CVE-2024-38659 - enic: Validate length of nl attributes in enic_set_vf_port * CVE-url: https://ubuntu.com/security/CVE-2024-38560 - scsi: bfa: Ensure the copied buf is NUL terminated * CVE-url: https://ubuntu.com/security/CVE-2024-36941 - wifi: nl80211: don't free NULL coalescing rule * CVE-url: https://ubuntu.com/security/CVE-2024-27401 - firewire: nosy: ensure user_length is taken into account when fetching packet contents * CVE-url: https://ubuntu.com/security/CVE-2024-36964 - fs/9p: only translate RWX permissions for plain 9P2000 * CVE-url: https://ubuntu.com/security/CVE-2024-38601 - ring-buffer: Fix a race between readers and resize checks * CVE-url: https://ubuntu.com/security/CVE-2024-39475 - fbdev: savage: Handle err return when savagefb_check_var failed * CVE-url: https://ubuntu.com/security/CVE-2024-38578 - ecryptfs: Fix buffer size for tag 66 packet * CVE-url: https://ubuntu.com/security/CVE-2024-36950 - firewire: ohci: mask bus reset interrupts between ISR and bottom half * CVE-url: https://ubuntu.com/security/CVE-2024-38589 - netrom: fix possible dead-lock in nr_rt_ioctl() * CVE-url: https://ubuntu.com/security/CVE-2024-38627 - stm class: Fix a double free in stm_register_device() * CVE-url: https://ubuntu.com/security/CVE-2024-36905 - tcp: suppress too verbose messages in tcp_send_ack() - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets * CVE-url: https://ubuntu.com/security/CVE-2024-33621 - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound * CVE-url: https://ubuntu.com/security/CVE-2024-38567 - wifi: carl9170: add a proper sanity check for endpoints * CVE-url: https://ubuntu.com/security/CVE-2024-39301 - net/9p: fix uninit-value in p9_client_rpc() * CVE-url: https://ubuntu.com/security/CVE-2024-36919 - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload * CVE-url: https://ubuntu.com/security/CVE-2024-36934 - new helper: memdup_user_nul() - bna: ensure the copied buf is NUL terminated * CVE-url: https://ubuntu.com/security/CVE-2024-38558 - net: openvswitch: fix overwriting ct original tuple for ICMPv6 * CVE-url: https://ubuntu.com/security/CVE-2024-38565 - USB: core: Add routines for endpoint checks in old drivers - wifi: ar5523: enable proper endpoint verification * CVE-url: https://ubuntu.com/security/CVE-2024-38621 - media: stk1160: fix bounds checking in stk1160_copy_video() * CVE-url: https://ubuntu.com/security/CVE-2024-35947 - dyndbg: fix old BUG_ON in >control parser * CVE-url: https://ubuntu.com/security/CVE-2024-27399 - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout * CVE-url: https://ubuntu.com/security/CVE-2024-38618 - ALSA: timer: Simplify timer hw resolution calls - ALSA: timer: Set lower bound of start tick time * CVE-url: https://ubuntu.com/security/CVE-2024-36286 - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() * CVE-url: https://ubuntu.com/security/CVE-2024-38607 - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" * CVE-url: https://ubuntu.com/security/CVE-2024-37356 - params: lift param_set_uint_minmax to common code - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). * CVE-url: https://ubuntu.com/security/CVE-2024-36886 - tipc: fix UAF in error path * CVE-url: https://ubuntu.com/security/CVE-2024-38613 - m68k: Fix spinlock race in kernel thread creation * CVE-url: https://ubuntu.com/security/CVE-2024-38599 - jffs2: prevent xattr node from overflowing the eraseblock * CVE-url: https://ubuntu.com/security/CVE-2024-38633 - serial: core: Provide port lock wrappers - serial: max3100: Update uart_driver_registered on driver removal * CVE-url: https://ubuntu.com/security/CVE-2024-39292 - um: Add winch to winch_handlers before registering winch IRQ * CVE-url: https://ubuntu.com/security/CVE-2024-38634 - serial: max3100: Lock port->lock when calling uart_handle_cts_change() * CVE-url: https://ubuntu.com/security/CVE-2024-36883 - net: fix out-of-bounds access in ops_init * CVE-url: https://ubuntu.com/security/CVE-2024-39480 - kdb: Fix buffer overflow during tab-complete * CVE-url: https://ubuntu.com/security/CVE-2024-36960 - drm/vmwgfx: Fix invalid reads in fence signaled events * CVE-url: https://ubuntu.com/security/CVE-2024-36946 - phonet: fix rtm_phonet_notify() skb allocation Important TuxCare License Agreement CVE-2024-27401 CVE-2024-38567 CVE-2024-38618 CVE-2024-36950 CVE-2024-36270 CVE-2024-36946 CVE-2024-38607 CVE-2024-38600 CVE-2024-38599 CVE-2024-38578 CVE-2024-38627 CVE-2024-36939 CVE-2024-36941 CVE-2024-38565 CVE-2024-38560 CVE-2024-38633 CVE-2024-36964 CVE-2024-36286 CVE-2024-39480 CVE-2024-38621 CVE-2024-35947 CVE-2024-38589 CVE-2024-36883 CVE-2024-39475 CVE-2024-27399 CVE-2024-38613 CVE-2024-33621 CVE-2024-38558 CVE-2024-39292 CVE-2024-36905 CVE-2024-39301 CVE-2024-38634 CVE-2024-36934 CVE-2024-38601 CVE-2024-36886 CVE-2024-36960 CVE-2024-38659 CVE-2024-36919 CVE-2024-37356 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2024-39487 - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() * CVE-url: https://ubuntu.com/security/CVE-2023-52760 - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc * CVE-url: https://ubuntu.com/security/CVE-2023-52629 - sh: push-switch: Reorder cleanup operations to avoid use-after-free bug * CVE-url: https://ubuntu.com/security/CVE-2024-39484 - mmc: davinci: Don't strip remove function when driver is builtin * Miscellaneous upstream changes - fixup! blk-mq: fix IO hang from sbitmap wakeup race - fixup! scsi: qla2xxx: Fix double free of fcport Important TuxCare License Agreement CVE-2024-39484 CVE-2023-52629 CVE-2023-52760 CVE-2024-39487 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2024-26752 - l2tp: pass correct message length to ip6_append_data * CVE-url: https://ubuntu.com/security/CVE-2023-52527 - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() * CVE-url: https://ubuntu.com/security/CVE-2024-43882 - exec: Fix ToCToU between perm check and set-uid/gid usage * CVE-url: https://ubuntu.com/security/CVE-2022-48943 - KVM: x86/mmu: make apf token non-zero to fix bug * CVE-url: https://ubuntu.com/security/CVE-2024-38630 - watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger * CVE-url: https://ubuntu.com/security/CVE-2024-44987 - ipv6: prevent UAF in ip6_send_skb() * Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717) // CVE- url: https://ubuntu.com/security/CVE-2022-48742 - rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() * CVE-url: https://ubuntu.com/security/CVE-2024-44940 - fou: remove warn in gue_gro_receive on unsupported protocol * CVE-url: https://ubuntu.com/security/CVE-2024-41059 - hfsplus: fix uninit-value in copy_name * Bionic update: upstream stable patchset 2022-01-14 (LP: #1957957) // CVE- url: https://ubuntu.com/security/CVE-2021-47576 - scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() * CVE-url: https://ubuntu.com/security/CVE-2024-46673 - scsi: aacraid: Fix double-free on probe failure * CVE-url: https://ubuntu.com/security/CVE-2024-42271 - net/iucv: fix use after free in iucv_sock_close() * Bionic update: upstream stable patchset 2022-04-13 (LP: #1968932) // CVE- url: https://ubuntu.com/security/CVE-2022-48919 - cifs: fix double free race when mount fails in cifs_get_root() * CVE-url: https://ubuntu.com/security/CVE-2024-43858 - jfs: Fix array-index-out-of-bounds in diFree * CVE-url: https://ubuntu.com/security/CVE-2024-41071 - wifi: mac80211: Avoid address calculations via out of bounds array indexing * CVE-url: https://ubuntu.com/security/CVE-2024-42301 - dev/parport: fix the array out-of-bounds risk * CVE-url: https://ubuntu.com/security/CVE-2024-46674 - usb: dwc3: st: fix probed platform device ref count on probe error path * CVE-url: https://ubuntu.com/security/CVE-2024-43900 - media: xc2028: avoid use-after-free in load_firmware_cb() * CVE-url: https://ubuntu.com/security/CVE-2024-42284 - tipc: Return non-zero value from tipc_udp_addr2str() on error * Bionic update: upstream stable patchset 2022-01-14 (LP: #1957957) // CVE- url: https://ubuntu.com/security/CVE-2021-47589 - igbvf: fix double free in `igbvf_probe` * Bionic update: upstream stable patchset 2022-01-14 (LP: #1957957) // CVE- url: https://ubuntu.com/security/CVE-2021-47600 - dm btree remove: fix use after free in rebalance_children() * CVE-url: https://ubuntu.com/security/CVE-2024-44998 - atm: idt77252: prevent use after free in dequeue_rx() * CVE-url: https://ubuntu.com/security/CVE-2024-42280 - mISDN: Fix a use after free in hfcmulti_tx() * CVE-url: https://ubuntu.com/security/CVE-2024-42094 - net/iucv: Avoid explicit cpumask var allocation on stack * CVE-url: https://ubuntu.com/security/CVE-2024-39499 - vmci: prevent speculation leaks by sanitizing event in event_deliver() * CVE-url: https://ubuntu.com/security/CVE-2024-42105 - nilfs2: fix inode number range checks * CVE-url: https://ubuntu.com/security/CVE-2024-40988 - drm/radeon: fix UBSAN warning in kv_dpm.c * CVE-url: https://ubuntu.com/security/CVE-2024-40916 - drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found * CVE-url: https://ubuntu.com/security/CVE-2024-40904 - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages * CVE-url: https://ubuntu.com/security/CVE-2024-42106 - inet_diag: Initialize pad field in struct inet_diag_req_v2 * CVE-url: https://ubuntu.com/security/CVE-2024-42145 - IB/core: Implement a limit on UMAD receive List * CVE-url: https://ubuntu.com/security/CVE-2024-40932 - drm/exynos/vidi: fix memory leak in .get_modes() * CVE-url: https://ubuntu.com/security/CVE-2024-41006 - netrom: Fix a memory leak in nr_heartbeat_expiry() * CVE-url: https://ubuntu.com/security/CVE-2024-40943 - ocfs2: fix races between hole punching and AIO+DIO * CVE-url: https://ubuntu.com/security/CVE-2024-36894 - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete * CVE-url: https://ubuntu.com/security/CVE-2024-42115 - jffs2: Fix potential illegal address access in jffs2_free_inode * CVE-url: https://ubuntu.com/security/CVE-2024-41035 - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor * CVE-url: https://ubuntu.com/security/CVE-2024-41097 - usb: atm: cxacru: fix endpoint checking in cxacru_bind() * CVE-url: https://ubuntu.com/security/CVE-2024-39501 - drivers: core: synchronize really_probe() and dev_uevent() * CVE-url: https://ubuntu.com/security/CVE-2024-40984 - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." * CVE-url: https://ubuntu.com/security/CVE-2024-40987 - drm/amdgpu: fix UBSAN warning in kv_dpm.c * CVE-url: https://ubuntu.com/security/CVE-2024-42097 - ALSA: emux: improve patch ioctl data validation * CVE-url: https://ubuntu.com/security/CVE-2024-42090 - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER * CVE-url: https://ubuntu.com/security/CVE-2024-40942 - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects * CVE-url: https://ubuntu.com/security/CVE-2024-40981 - batman-adv: bypass empty buckets in batadv_purge_orig_ref() * CVE-url: https://ubuntu.com/security/CVE-2024-40959 - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() * CVE-url: https://ubuntu.com/security/CVE-2024-42089 - ASoC: fsl-asoc-card: set priv->pdev before using it * CVE-url: https://ubuntu.com/security/CVE-2024-42101 - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes * CVE-url: https://ubuntu.com/security/CVE-2024-40980 - drop_monitor: replace spin_lock by raw_spin_lock * CVE-url: https://ubuntu.com/security/CVE-2024-42084 - ftruncate: pass a signed offset * CVE-url: https://ubuntu.com/security/CVE-2024-42096 - x86: stop playing stack games in profile_pc() * CVE-url: https://ubuntu.com/security/CVE-2024-38619 - usb-storage: alauda: Check whether the media is initialized * CVE-url: https://ubuntu.com/security/CVE-2024-42102 - mm: avoid overflows in dirty throttling logic * CVE-url: https://ubuntu.com/security/CVE-2024-41044 - ppp: reject claimed-as-LCP but actually malformed packets * Bionic update: upstream stable patchset 2022-02-11 (LP: #1960681) // CVE- url: https://ubuntu.com/security/CVE-2024-41044 - ppp: ensure minimum packet size in ppp_write() * CVE-url: https://ubuntu.com/security/CVE-2024-40905 - ipv6: fix possible race in __fib6_drop_pcpu_from() * CVE-url: https://ubuntu.com/security/CVE-2023-52803 - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries * CVE-url: https://ubuntu.com/security/CVE-2024-42104 - nilfs2: add missing check for inode numbers on directory entries * CVE-url: https://ubuntu.com/security/CVE-2024-42148 - bnx2x: Fix multiple UBSAN array-index-out-of-bounds * CVE-url: https://ubuntu.com/security/CVE-2024-41046 - net: ethernet: lantiq_etop: fix double free in detach * CVE-url: https://ubuntu.com/security/CVE-2024-38538 - net: bridge: xmit: make sure we have at least eth header len bytes Important TuxCare License Agreement CVE-2024-38630 CVE-2024-40943 CVE-2024-38619 CVE-2021-47600 CVE-2024-42148 CVE-2024-42280 CVE-2024-42284 CVE-2024-40905 CVE-2024-42102 CVE-2024-46674 CVE-2024-39499 CVE-2024-40980 CVE-2024-40959 CVE-2024-40932 CVE-2024-42096 CVE-2022-48943 CVE-2024-44998 CVE-2022-48742 CVE-2023-52527 CVE-2024-40904 CVE-2024-42115 CVE-2024-40942 CVE-2024-41059 CVE-2024-44940 CVE-2021-47589 CVE-2024-42271 CVE-2024-40988 CVE-2024-40916 CVE-2024-43900 CVE-2024-40981 CVE-2024-46673 CVE-2024-42090 CVE-2024-44987 CVE-2024-42105 CVE-2024-26752 CVE-2024-40987 CVE-2024-41035 CVE-2024-42106 CVE-2023-52803 CVE-2024-42084 CVE-2024-42101 CVE-2024-41046 CVE-2024-39501 CVE-2024-42094 CVE-2024-38538 CVE-2021-47576 CVE-2024-43882 CVE-2024-42301 CVE-2024-36894 CVE-2024-43858 CVE-2024-42145 CVE-2024-41044 CVE-2024-41071 CVE-2024-42097 CVE-2024-42089 CVE-2024-41097 CVE-2024-42104 CVE-2022-48919 CVE-2024-40984 CVE-2024-41006 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2024-38588 - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() - ftrace: Fix possible use-after-free issue in ftrace_location() * CVE-url: https://ubuntu.com/security/CVE-2024-46744 - Squashfs: sanity check symbolic link size * CVE-url: https://ubuntu.com/security/CVE-2022-48733 - btrfs: fix use-after-free after failure to create a snapshot * CVE-url: https://ubuntu.com/security/CVE-2024-44942 - f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC * CVE-url: https://ubuntu.com/security/CVE-2024-46731 - drm/amd/pm: fix the Out-of-bounds read warning * CVE-url: https://ubuntu.com/security/CVE-2024-46759 - hwmon: (adc128d818) Fix underflows seen when writing limit attributes * CVE-url: https://ubuntu.com/security/CVE-2024-46743 - of/irq: Prevent device address out-of-bounds read in interrupt map walk * CVE-url: https://ubuntu.com/security/CVE-2024-46738 - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() * CVE-url: https://ubuntu.com/security/CVE-2024-46800 - sch/netem: fix use after free in netem_dequeue * CVE-url: https://ubuntu.com/security/CVE-2024-46757 - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes * CVE-url: https://ubuntu.com/security/CVE-2024-46758 - hwmon: (lm95234) Fix underflows seen when writing limit attributes * CVE-url: https://ubuntu.com/security/CVE-2024-46756 - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes * CVE-url: https://ubuntu.com/security/CVE-2024-40912 - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() * CVE-url: https://ubuntu.com/security/CVE-2024-46723 - drm/amdgpu: fix ucode out-of-bounds read warning * CVE-url: https://ubuntu.com/security/CVE-2024-46722 - drm/amdgpu: fix mc_data out-of-bounds read warning * Bionic update: upstream stable patchset 2022-04-26 (LP: #1970479) // CVE- url: https://ubuntu.com/security/CVE-2022-48838 - usb: gadget: Fix use-after-free bug by not setting udc->dev.driver * CVE-url: https://ubuntu.com/security/CVE-2021-47188 - scsi: ufs: core: Improve SCSI abort handling * Bionic update: upstream stable patchset 2022-04-26 (LP: #1970479) // CVE- url: https://ubuntu.com/security/CVE-2022-48836 - Input: aiptek - properly check endpoint type * CVE-url: https://ubuntu.com/security/CVE-2024-26677 - rxrpc: Fix delayed ACKs to not set the reference serial number * Bionic update: upstream stable patchset 2021-12-13 (LP: #1954703) // CVE- url: https://ubuntu.com/security/CVE-2021-47181 - usb: musb: tusb6010: check return value after calling platform_get_resource() Important TuxCare License Agreement CVE-2022-48836 CVE-2024-46758 CVE-2021-47181 CVE-2024-46723 CVE-2024-46738 CVE-2022-48733 CVE-2022-48838 CVE-2024-46800 CVE-2024-46744 CVE-2024-46756 CVE-2024-40912 CVE-2024-46757 CVE-2024-38588 CVE-2024-46759 CVE-2021-47188 CVE-2024-46731 CVE-2024-46722 CVE-2024-46743 CVE-2024-26677 CVE-2024-44942 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2024-42265 - protect the fetch of ->fd[fd] in do_dup2() from mispredictions * CVE-url: https://ubuntu.com/security/CVE-2024-47669 - nilfs2: fix state management in error path of log writing function * CVE-url: https://ubuntu.com/security/CVE-2023-52918 - media: pci: cx23885: check cx23885_vdev_init() return * CVE-url: https://ubuntu.com/security/CVE-2024-46750 - PCI: Add missing bridge lock to pci_bus_lock() * CVE-url: https://ubuntu.com/security/CVE-2024-46676 - nfc: pn533: Add poll mod list filling check * CVE-url: https://ubuntu.com/security/CVE-2024-46755 - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() * CVE-url: https://ubuntu.com/security/CVE-2024-46721 - apparmor: fix possible NULL pointer dereference * CVE-url: https://ubuntu.com/security/CVE-2024-44947 - fuse: Initialize beyond-EOF page contents before setting uptodate * CVE-url: https://ubuntu.com/security/CVE-2024-46675 - usb: dwc3: core: Prevent USB core invalid event buffer address access * CVE-url: https://ubuntu.com/security/CVE-2024-43893 - serial: core: check uartclk for zero to avoid divide by zero * CVE-url: https://ubuntu.com/security/CVE-2024-45021 - memcg_write_event_control(): fix a user-triggerable oops * CVE-url: https://ubuntu.com/security/CVE-2024-41012 - filelock: Remove locks reliably when fcntl/close race is detected * CVE-url: https://ubuntu.com/security/CVE-2024-42310 - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes * CVE-url: https://ubuntu.com/security/CVE-2024-42311 - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() * CVE-url: https://ubuntu.com/security/CVE-2024-45028 - mmc: mmc_test: Fix NULL dereference on allocation failure * CVE-url: https://ubuntu.com/security/CVE-2024-43914 - md/raid5: avoid BUG_ON() while continue reshape after reassembling * CVE-url: https://ubuntu.com/security/CVE-2024-43856 - dma: fix call order in dmam_free_coherent * CVE-url: https://ubuntu.com/security/CVE-2024-43884 - Bluetooth: MGMT: Add error handling to pair_device() * CVE-url: https://ubuntu.com/security/CVE-2024-42309 - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes * CVE-url: https://ubuntu.com/security/CVE-2024-50044 - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change * CVE-url: https://ubuntu.com/security/CVE-2024-49967 - ext4: no need to continue when the number of entries is 1 * Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE- url: https://ubuntu.com/security/CVE-2022-49015 - net: hsr: Fix potential use-after-free * CVE-url: https://ubuntu.com/security/CVE-2024-50033 - slip: make slhc_remember() more robust against malicious packets * CVE-url: https://ubuntu.com/security/CVE-2024-47670 - ocfs2: add bounds checking to ocfs2_xattr_find_entry() * CVE-url: https://ubuntu.com/security/CVE-2024-49950 - Bluetooth: L2CAP: Fix uaf in l2cap_connect * CVE-url: https://ubuntu.com/security/CVE-2024-49883 - ext4: aovid use-after-free in ext4_ext_insert_extent() * Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE- url: https://ubuntu.com/security/CVE-2022-48960 - net: hisilicon: Fix potential use-after-free in hix5hd2_rx() * CVE-url: https://ubuntu.com/security/CVE-2024-47745 - mm: call the security_mmap_file() LSM hook in remap_file_pages() * CVE-url: https://ubuntu.com/security/CVE-2024-49860 - ACPI: sysfs: validate return type of _STR method * CVE-url: https://ubuntu.com/security/CVE-2024-49882 - ext4: fix double brelse() the buffer of the extents path * CVE-url: https://ubuntu.com/security/CVE-2024-49995 - tipc: guard against string buffer overrun * CVE-url: https://ubuntu.com/security/CVE-2024-47723 - jfs: fix out-of-bounds in dbNextAG() and diAlloc() * Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE- url: https://ubuntu.com/security/CVE-2022-48988 - memcg: fix possible use-after-free in memcg_write_event_control() * CVE-url: https://ubuntu.com/security/CVE-2024-50073 - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux * CVE-url: https://ubuntu.com/security/CVE-2024-50055 - driver core: bus: Fix double free in driver API bus_register() * Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE- url: https://ubuntu.com/security/CVE-2022-49029 - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails * Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403) // CVE- url: https://ubuntu.com/security/CVE-2022-48948 - usb: gadget: uvc: Prevent buffer overflow in setup handler * CVE-url: https://ubuntu.com/security/CVE-2024-47698 - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error * CVE-url: https://ubuntu.com/security/CVE-2022-49026 - e100: Fix possible use after free in e100_xmit_prepare * Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE- url: https://ubuntu.com/security/CVE-2022-48967 - NFC: nci: Bounds check struct nfc_target arrays * CVE-url: https://ubuntu.com/security/CVE-2024-47742 - firmware_loader: Block path traversal * CVE-url: https://ubuntu.com/security/CVE-2024-50035 - ppp: fix ppp_async_encode() illegal access * CVE-url: https://ubuntu.com/security/CVE-2024-47757 - nilfs2: fix potential oob read in nilfs_btree_check_delete() * CVE-url: https://ubuntu.com/security/CVE-2024-49884 - ext4: avoid ext4_error()'s caused by ENOMEM in the truncate path - ext4: fix slab-use-after-free in ext4_split_extent_at() * CVE-url: https://ubuntu.com/security/CVE-2022-49006 - tracing: Only have rmmod clear buffers that its events were active in - tracing: Free buffers when a used dynamic event is removed * CVE-url: https://ubuntu.com/security/CVE-2024-49903 - jfs: Fix uaf in dbFreeBits * CVE-url: https://ubuntu.com/security/CVE-2024-47701 - ext4: avoid OOB when system.data xattr changes underneath the filesystem * CVE-url: https://ubuntu.com/security/CVE-2024-49889 - ext4: avoid use-after-free in ext4_ext_show_leaf() * CVE-url: https://ubuntu.com/security/CVE-2024-49900 - jfs: Fix uninit-value access of new_ea in ea_buffer * CVE-url: https://ubuntu.com/security/CVE-2024-47697 - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error * CVE-url: https://ubuntu.com/security/CVE-2022-48951 - ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() * CVE-url: https://ubuntu.com/security/CVE-2024-43839 - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures * CVE-url: https://ubuntu.com/security/CVE-2024-47659 - smack: tcp: ipv4, fix incorrect labeling * CVE-url: https://ubuntu.com/security/CVE-2024-47685 - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() * CVE-url: https://ubuntu.com/security/CVE-2024-38602 - ax25: Fix reference count leak issues of ax25_dev * CVE-url: https://ubuntu.com/security/CVE-2024-26641 - net: Fix unwanted sign extension in netdev_stats_to_stats64() * CVE-url: https://ubuntu.com/security/CVE-2024-42223 - media: dvb-frontends: tda10048: Fix integer overflow * CVE-url: https://ubuntu.com/security/CVE-2021-3759 - memcg: enable accounting of ipc resources * CVE-url: https://ubuntu.com/security/CVE-2024-38632 - vfio/pci: fix potential memory leak in vfio_intx_enable() * CVE-url: https://ubuntu.com/security/CVE-2024-46840 - btrfs: clean up our handling of refs == 0 in snapshot delete * CVE-url: https://ubuntu.com/security/CVE-2024-44954 - ALSA: line6: Fix racy access to midibuf * CVE-url: https://ubuntu.com/security/CVE-2024-45003 - vfs: Don't evict inode under the inode lru traversing context * CVE-url: https://ubuntu.com/security/CVE-2024-46841 - btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() * CVE-url: https://ubuntu.com/security/CVE-2024-44950 - serial: sc16is7xx: fix invalid FIFO access with special register set * CVE-url: https://ubuntu.com/security/CVE-2024-26812 - Revert "kernfs: do not account ino_ida allocations to memcg" - Revert "gfp: add __GFP_NOACCOUNT" - memcg: only account kmem allocations marked as __GFP_ACCOUNT - vfio: Introduce interface to flush virqfd inject workqueue - vfio/pci: Create persistent INTx handler * CVE-url: https://ubuntu.com/security/CVE-2023-52528 - usbnet/smsc75xx: silence uninitialized variable warning - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg * CVE-url: https://ubuntu.com/security/CVE-2024-42229 - crypto: aead,cipher - zeroize key buffer after use Critical TuxCare License Agreement CVE-2024-44950 CVE-2024-49860 CVE-2024-43839 CVE-2024-43856 CVE-2024-42265 CVE-2024-43893 CVE-2024-43884 CVE-2024-49889 CVE-2024-50033 CVE-2024-50044 CVE-2024-46755 CVE-2024-49967 CVE-2024-49903 CVE-2024-47669 CVE-2022-49026 CVE-2024-46721 CVE-2024-45003 CVE-2024-47757 CVE-2024-47723 CVE-2024-49995 CVE-2022-49006 CVE-2021-3759 CVE-2024-47745 CVE-2024-26641 CVE-2024-43914 CVE-2024-49883 CVE-2022-49029 CVE-2024-44954 CVE-2024-47742 CVE-2024-41012 CVE-2023-52528 CVE-2022-49015 CVE-2024-47670 CVE-2024-47697 CVE-2022-48967 CVE-2022-48960 CVE-2022-48948 CVE-2024-49882 CVE-2024-49884 CVE-2024-47698 CVE-2024-50035 CVE-2024-50073 CVE-2024-49950 CVE-2024-26812 CVE-2024-42310 CVE-2024-44947 CVE-2024-46841 CVE-2024-42309 CVE-2024-46676 CVE-2024-47685 CVE-2022-48951 CVE-2024-47659 CVE-2024-46750 CVE-2024-45028 CVE-2024-50055 CVE-2024-46840 CVE-2024-42229 CVE-2023-52918 CVE-2024-38602 CVE-2024-47701 CVE-2024-49900 CVE-2024-42223 CVE-2024-42311 CVE-2024-45021 CVE-2024-46675 CVE-2024-38632 CVE-2022-48988 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2023-52614 - time: Introduce jiffies64_to_msecs() - PM / devfreq: Modify the indentation of trans_stat sysfs for readability - PM / devfreq: Do not show statistics if it's not ready. - PM / devfreq: Fix buffer overflow in trans_stat_show * Bionic update: upstream stable patchset 2019-12-20 (LP: #1857158) // CVE- url: https://ubuntu.com/security/CVE-2023-52614 - PM / devfreq: Lock devfreq in trans_stat_show * CVE-url: https://ubuntu.com/security/CVE-2024-42240 - x86/bhi: Avoid warning in #DB handler due to BHI mitigation * CVE-url: https://ubuntu.com/security/CVE-2023-52578 - net: bridge: use DEV_STATS_INC() * CVE-url: https://ubuntu.com/security/CVE-2022-48938 - CDC-NCM: avoid overflow in sanity checking * CVE-url: https://ubuntu.com/security/CVE-2024-43854 - block: initialize integrity buffer to zero before writing it to media * CVE-url: https://ubuntu.com/security/CVE-2024-38596 - net: sock: move ->sk_shutdown out of bitfields. - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg * CVE-url: https://ubuntu.com/security/CVE-2024-35877 - mm: introduce page_needs_cow_for_dma() for deciding whether cow - x86/mm/pat: fix VM_PAT handling in COW mappings * CVE-url: https://ubuntu.com/security/CVE-2023-52502 - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() * CVE-url: https://ubuntu.com/security/CVE-2024-45025 - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE * CVE-url: https://ubuntu.com/security/CVE-2024-26668 - netfilter: nft_limit: allow to invert matching criteria - netfilter: limit: use per-rule spinlock to improve the scalability - netfilter: nf_tables: Fix nft limit burst handling - netfilter: nft_limit: reject configurations that cause integer overflow * Bionic update: upstream stable patchset 2019-07-23 (LP: #1837664) // CVE- url: https://ubuntu.com/security/CVE-2024-26668 - compiler.h: enable builtin overflow checkers and add fallback code * Bionic update: upstream stable patchset 2018-12-12 (LP: #1808185) // CVE- url: https://ubuntu.com/security/CVE-2024-26668 - netfilter: nft_limit: fix packet ratelimiting * CVE-url: https://ubuntu.com/security/CVE-2024-27397 - netfilter: nf_tables: use timestamp to check for set element timeout - netfilter: nf_tables: annotate data-races around element expiration - netfilter: nf_tables: support timeouts larger than 23 days * CVE-url: https://ubuntu.com/security/CVE-2024-50036 - net: do not delay dst_entries_add() in dst_release() * CVE-url: https://ubuntu.com/security/CVE-2024-50067 - uprobe: avoid out-of-bounds memory access of fetching args * Miscellaneous Ubuntu changes - [Packaging]: keep only amd64 architecture * Miscellaneous upstream changes - getabis: use ESM version of debian.master/etc/getabis Important TuxCare License Agreement CVE-2024-43854 CVE-2024-50067 CVE-2023-52502 CVE-2024-42240 CVE-2024-35877 CVE-2024-27397 CVE-2023-52578 CVE-2024-45025 CVE-2024-50036 CVE-2022-48938 CVE-2023-52614 CVE-2024-26668 CVE-2024-38596 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2021-47466 - mm, slub: fix potential memoryleak in kmem_cache_open() * CVE-url: https://ubuntu.com/security/CVE-2024-36968 - Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() * Bionic update: upstream stable patchset 2021-06-23 (LP: #1933375) // CVE- url: https://ubuntu.com/security/CVE-2021-47118 - pid: take a reference when initializing `cad_pid` * Bionic update: upstream stable patchset 2022-01-25 (LP: #1959033) // CVE- url: https://ubuntu.com/security/CVE-2021-47086 - phonet/pep: refuse to enable an unbound pipe * CVE-url: https://ubuntu.com/security/CVE-2023-52507 - nfc: nci: assert requested protocol is valid * CVE-url: https://ubuntu.com/security/CVE-2024-44944 - netfilter: ctnetlink: use helper function to calculate expect ID * CVE-url: https://ubuntu.com/security/CVE-2024-35861 - smb: client: fix potential UAF in cifs_debug_files_proc_show() - smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect() * CVE-url: https://ubuntu.com/security/CVE-2024-35863 - smb: client: fix potential UAF in smb2_is_valid_oplock_break() * CVE-url: https://ubuntu.com/security/CVE-2024-35864 - smb: client: fix potential UAF in smb2_is_valid_lease_break() * CVE-url: https://ubuntu.com/security/CVE-2024-35867 - smb: client: fix potential UAF in cifs_stats_proc_show() * CVE-url: https://ubuntu.com/security/CVE-2024-35868 - smb: client: fix potential UAF in cifs_stats_proc_write() * CVE-url: https://ubuntu.com/security/CVE-2024-35896 - netfilter: validate user input for expected length * Bionic update: upstream stable patchset 2022-10-18 (LP: #1993349) // CVE- url: https://ubuntu.com/security/CVE-2022-48695 - scsi: mpt3sas: Fix use-after-free warning * Bionic update: upstream stable patchset 2021-08-03 (LP: #1938824) // CVE- url: https://ubuntu.com/security/CVE-2021-47321 - watchdog: Fix possible use-after-free by calling del_timer_sync() * Bionic update: upstream stable patchset 2021-08-13 (LP: #1939913) // CVE- url: https://ubuntu.com/security/CVE-2021-47310 - net: ti: fix UAF in tlan_remove_one * CVE-url: https://ubuntu.com/security/CVE-2024-27010 - net/sched: Fix mirred deadlock on device recursion * Bionic update: upstream stable patchset 2021-08-03 (LP: #1938824) // CVE- url: https://ubuntu.com/security/CVE-2021-47353 - udf: Fix NULL pointer dereference in udf_symlink function * CVE-url: https://ubuntu.com/security/CVE-2024-26961 - mac802154: fix llsec key resources release in mac802154_llsec_key_del * CVE-url: https://ubuntu.com/security/CVE-2024-26958 - NFS: Allow multiple commit requests in flight per file - NFS: Fix up commit deadlocks - nfs: fix UAF in direct writes * CVE-url: https://ubuntu.com/security/CVE-2024-50115 - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory * CVE-url: https://ubuntu.com/security/CVE-2024-50148 - Bluetooth: bnep: fix wild-memory-access in proto_unregister * CVE-url: https://ubuntu.com/security/CVE-2024-40910 - ax25: Fix refcount imbalance on inbound connections * CVE-url: https://ubuntu.com/security/CVE-2024-53057 - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT * CVE-url: https://ubuntu.com/security/CVE-2024-36952 - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up * CVE-url: https://ubuntu.com/security/CVE-2024-50142 - xfrm: validate new SA's prefixlen using SA family when sel.family is unset * CVE-url: https://ubuntu.com/security/CVE-2024-50256 - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() * CVE-url: https://ubuntu.com/security/CVE-2021-47501 - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc * CVE-url: https://ubuntu.com/security/CVE-2023-52574 - team: fix null-ptr-deref when team device type is changed * Bionic update: upstream stable patchset 2021-06-01 (LP: #1930472) // CVE- url: https://ubuntu.com/security/CVE-2021-47055 - mtd: require write permissions for locking and badblock ioctls * CVE-url: https://ubuntu.com/security/CVE-2023-52477 - usb: hub: Guard against accesses to uninitialized BOS descriptors * CVE-url: https://ubuntu.com/security/CVE-2023-52475 - Input: powermate - fix use-after-free in powermate_config_complete * CVE-url: https://ubuntu.com/security/CVE-2023-52531 - wifi: iwlwifi: mvm: Fix a memory corruption issue Important TuxCare License Agreement CVE-2024-35863 CVE-2024-26958 CVE-2024-35861 CVE-2021-47118 CVE-2021-47466 CVE-2023-52507 CVE-2024-35867 CVE-2023-52475 CVE-2021-47321 CVE-2024-35864 CVE-2021-47353 CVE-2024-50142 CVE-2021-47310 CVE-2024-35896 CVE-2023-52574 CVE-2024-53057 CVE-2024-50115 CVE-2023-52477 CVE-2024-26961 CVE-2021-47086 CVE-2024-36968 CVE-2024-50148 CVE-2024-27010 CVE-2024-44944 CVE-2024-50256 CVE-2023-52531 CVE-2021-47055 CVE-2022-48695 CVE-2024-40910 CVE-2024-35868 CVE-2024-26928 CVE-2021-47501 CVE-2024-36952 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2024-38553/CVE-2024-38597 - netpoll: make ndo_poll_controller() optional - bonding: use netpoll_poll_dev() helper - netpoll: do not test NAPI_STATE_SCHED in poll_one_napi() * CVE-url: https://ubuntu.com/security/CVE-2024-38597 - eth: sungem: remove .ndo_poll_controller to avoid deadlocks * CVE-url: https://ubuntu.com/security/CVE-2024-38553 - net: fec: remove .ndo_poll_controller to avoid deadlocks * CVE-url: https://ubuntu.com/security/CVE-2024-41066 - ibmvnic: Add tx check to prevent skb leak * CVE-url: https://ubuntu.com/security/CVE-2024-40982 - ssb: Fix potential NULL pointer dereference in ssb_device_uevent() * CVE-url: https://ubuntu.com/security/CVE-2024-50154 - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). * CVE-url: https://ubuntu.com/security/CVE-2024-56595 - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree * CVE-url: https://ubuntu.com/security/CVE-2024-57896 - btrfs: fix hang during unmount when stopping a space reclaim worker - btrfs: wait for fixup workers before stopping cleaner kthread during umount - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount * CVE-url: https://ubuntu.com/security/CVE-2024-56598 - jfs: array-index-out-of-bounds fix in dtReadFirst * CVE-url: https://ubuntu.com/security/CVE-2024-56596 - jfs: fix array-index-out-of-bounds in jfs_readdir * Bionic update: upstream stable patchset 2022-01-25 (LP: #1959033) // CVE- url: https://ubuntu.com/security/CVE-2021-47485 - IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields * CVE-url: https://ubuntu.com/security/CVE-2024-56602 - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() * CVE-url: https://ubuntu.com/security/CVE-2024-56601 - net: inet: do not leave a dangling sk pointer in inet_create() * CVE-url: https://ubuntu.com/security/CVE-2024-56600 - sock: struct proto hash function may error - net: inet6: do not leave a dangling sk pointer in inet6_create() * CVE-url: https://ubuntu.com/security/CVE-2023-52818 - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 * CVE-url: https://ubuntu.com/security/CVE-2024-35887 - ax25: fix use-after-free bugs caused by ax25_ds_del_timer * Bionic update: upstream stable patchset 2021-11-02 (LP: #1949512) // CVE- url: https://ubuntu.com/security/CVE-2021-47404 - HID: betop: fix slab-out-of-bounds Write in betop_probe * Bionic update: upstream stable patchset 2021-07-14 (LP: #1936231) // CVE- url: https://ubuntu.com/security/CVE-2021-47254 - gfs2: Fix use-after-free in gfs2_glock_shrink_scan * Bionic update: upstream stable patchset 2022-01-14 (LP: #1957957) // CVE- url: https://ubuntu.com/security/CVE-2021-47506 - nfsd: fix use-after-free due to delegation race * CVE-url: https://ubuntu.com/security/CVE-2024-56606 - af_packet: avoid erroring out after sock_init_data() in packet_create() * CVE-url: https://ubuntu.com/security/CVE-2024-53141 - netfilter: ipset: add missing range check in bitmap_ip_uadt * Bionic update: upstream stable patchset 2021-07-14 (LP: #1936231) // CVE- url: https://ubuntu.com/security/CVE-2021-47280 - drm: Fix use-after-free read in drm_getunique() * Bionic update: upstream stable patchset 2021-07-14 (LP: #1936231) // CVE- url: https://ubuntu.com/security/CVE-2021-47235 - net: ethernet: fix potential use-after-free in ec_bhf_remove * Bionic update: upstream stable patchset 2021-08-13 (LP: #1939913) // CVE- url: https://ubuntu.com/security/CVE-2021-47309 - net: validate lwtstate->data before returning from skb_tunnel_info() * Bionic update: upstream stable patchset 2022-01-06 (LP: #1956614) // CVE- url: https://ubuntu.com/security/CVE-2021-47549 - sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl * CVE-url: https://ubuntu.com/security/CVE-2024-53165 - sh: intc: Fix use-after-free bug in register_intc_controller() * CVE-url: https://ubuntu.com/security/CVE-2024-56603 - net: af_can: do not leave a dangling sk pointer in can_create() * CVE-url: https://ubuntu.com/security/CVE-2024-53173 - NFSv4.0: Fix a use-after-free problem in the asynchronous open() * Bionic update: upstream stable patchset 2022-01-11 (LP: #1957113) // CVE- url: https://ubuntu.com/security/CVE-2021-47500 - iio: mma8452: Fix trigger reference couting * CVE-url: https://ubuntu.com/security/CVE-2024-26996 - usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error * Bionic update: upstream stable patchset 2021-12-03 (LP: #1953202) // CVE- url: https://ubuntu.com/security/CVE-2021-47483 - regmap: Fix possible double-free in regcache_rbtree_exit() * CVE-url: https://ubuntu.com/security/CVE-2024-56650 - netfilter: x_tables: fix LED ID check in led_tg_check() * CVE-url: https://ubuntu.com/security/CVE-2024-53227 - scsi: bfa: Fix use-after-free in bfad_im_module_exit() * CVE-url: https://ubuntu.com/security/CVE-2024-53155 - ocfs2: fix uninitialized value in ocfs2_file_read_iter() * CVE-url: https://ubuntu.com/security/CVE-2024-56605 - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() * CVE-url: https://ubuntu.com/security/CVE-2024-53156 - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() * CVE-url: https://ubuntu.com/security/CVE-2023-52741 - cifs: Fix use-after-free in rdata->read_into_pages() * CVE-url: https://ubuntu.com/security/CVE-2024-56759 - btrfs: fix use-after-free when COWing tree bock and tracing is enabled * CVE-url: https://ubuntu.com/security/CVE-2024-56604 - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() * CVE-url: https://ubuntu.com/security/CVE-2024-53142 - initramfs: avoid filename buffer overrun * CVE-url: https://ubuntu.com/security/CVE-2024-56631 - scsi: sg: Fix slab-use-after-free read in sg_release() * Bionic update: upstream stable patchset 2021-08-03 (LP: #1938824) // CVE- url: https://ubuntu.com/security/CVE-2021-47334 - misc/libmasm/module: Fix two use after free in ibmasm_init_one * Bionic update: upstream stable patchset 2021-08-03 (LP: #1938824) // CVE- url: https://ubuntu.com/security/CVE-2021-47355 - atm: nicstar: Fix possible use-after-free in nicstar_cleanup() * Bionic update: upstream stable patchset 2021-07-14 (LP: #1936231) // CVE- url: https://ubuntu.com/security/CVE-2021-47245 - netfilter: synproxy: Fix out of bounds when parsing TCP options * CVE-url: https://ubuntu.com/security/CVE-2021-47191 - scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() * Bionic update: upstream stable patchset 2021-08-13 (LP: #1939913) // CVE- url: https://ubuntu.com/security/CVE-2021-47288 - media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() * CVE-url: https://ubuntu.com/security/CVE-2023-52478 - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect * CVE-url: https://ubuntu.com/security/CVE-2024-36924 - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() * CVE-url: https://ubuntu.com/security/CVE-2023-52476 - perf/x86/lbr: Filter vsyscall addresses * CVE-url: https://ubuntu.com/security/CVE-2023-52488 - regmap: Add regmap_noinc_read API - regmap: Add regmap_noinc_write API - serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO Important TuxCare License Agreement CVE-2021-47506 CVE-2023-52741 CVE-2024-53227 CVE-2021-47549 CVE-2021-47235 CVE-2024-53165 CVE-2021-47483 CVE-2023-52476 CVE-2024-38553 CVE-2021-47404 CVE-2021-47334 CVE-2024-26996 CVE-2021-47500 CVE-2024-56600 CVE-2023-52478 CVE-2021-47280 CVE-2024-56606 CVE-2024-56605 CVE-2021-47485 CVE-2024-53141 CVE-2024-38597 CVE-2023-52488 CVE-2021-47309 CVE-2024-56650 CVE-2024-35887 CVE-2021-47355 CVE-2024-36924 CVE-2024-56596 CVE-2024-53156 CVE-2021-47245 CVE-2024-41066 CVE-2024-56601 CVE-2024-50154 CVE-2024-56759 CVE-2021-47191 CVE-2024-56603 CVE-2024-56602 CVE-2023-52818 CVE-2024-53142 CVE-2021-47254 CVE-2024-40982 CVE-2024-56631 CVE-2024-53155 CVE-2024-53173 CVE-2024-56595 CVE-2024-56598 CVE-2024-56604 CVE-2021-47288 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2024-53104 - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format Important TuxCare License Agreement CVE-2024-53104 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2023-52522 - net: fix possible store tearing in neigh_periodic_work() * CVE-url: https://ubuntu.com/security/CVE-2024-40911 - wifi: cfg80211: Lock wiphy in cfg80211_get_station * CVE-url: https://ubuntu.com/security/CVE-2024-43863 - drm/vmwgfx: Fix a deadlock in dma buf fence polling * CVE-url: https://ubuntu.com/security/CVE-2024-44931 - gpio: prevent potential speculation leaks in gpio_device_get_desc() * CVE-url: https://ubuntu.com/security/CVE-2024-50229 - nilfs2: fix potential deadlock with newly created symlinks * CVE-url: https://ubuntu.com/security/CVE-2024-50171 - net: systemport: fix potential memory leak in bcm_sysport_xmit() * CVE-url: https://ubuntu.com/security/CVE-2024-50233 - staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() * CVE-url: https://ubuntu.com/security/CVE-2024-44938 - jfs: Fix shift-out-of-bounds in dbDiscardAG * CVE-url: https://ubuntu.com/security/CVE-2024-50117 - drm/amd: Guard against bad data for ATIF ACPI method * CVE-url: https://ubuntu.com/security/CVE-2024-49902 - jfs: check if leafidx greater than num leaves per dmap tree * CVE-url: https://ubuntu.com/security/CVE-2023-52799 - jfs: fix array-index-out-of-bounds in dbFindLeaf * CVE-url: https://ubuntu.com/security/CVE-2024-41063 - Bluetooth: fix power_on vs close race - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() * CVE-url: https://ubuntu.com/security/CVE-2024-50267 - USB: serial: io_edgeport: fix use after free in debug printk * CVE-url: https://ubuntu.com/security/CVE-2024-50230 - nilfs2: fix kernel bug due to missing clearing of checked flag * CVE-url: https://ubuntu.com/security/CVE-2024-50302 - HID: core: zero-initialize the report buffer * CVE-url: https://ubuntu.com/security/CVE-2024-50180 - fbdev: sisfb: Fix strbuf array overflow * CVE-url: https://ubuntu.com/security/CVE-2024-50278 - dm cache: fix out-of-bounds access to the dirty bitset when resizing - dm cache: fix potential out-of-bounds access on the first resume * CVE-url: https://ubuntu.com/security/CVE-2024-50234 - wifi: iwlegacy: Clear stale interrupts before resuming device * CVE-url: https://ubuntu.com/security/CVE-2024-50301 - security/keys: fix slab-out-of-bounds in key_task_permission * CVE-url: https://ubuntu.com/security/CVE-2024-50143 - overflow: Add __must_check attribute to check_*() helpers - compiler.h: drop fallback overflow checkers - overflow: Allow mixed type arguments - udf: fix uninit-value use in udf_get_fileshortad * Bionic update: upstream stable patchset 2020-11-10 (LP: #1903768) // CVE- url: https://ubuntu.com/security/CVE-2024-50143 - overflow: Include header file with SIZE_MAX declaration * Bionic update: upstream stable patchset 2020-09-16 (LP: #1895873) // CVE- url: https://ubuntu.com/security/CVE-2024-50143 - overflow.h: Add allocation size calculation helpers * Bionic update: upstream stable patchset 2020-05-07 (LP: #1877461) // CVE- url: https://ubuntu.com/security/CVE-2024-50143 - overflow.h: Add arithmetic shift helper * CVE-url: https://ubuntu.com/security/CVE-2024-53061 - media: s5p-jpeg: prevent buffer overflows * CVE-url: https://ubuntu.com/security/CVE-2024-47809 - dlm: fix possible lkb_resource null dereference * CVE-url: https://ubuntu.com/security/CVE-2024-41020 - filelock: Fix fcntl/close race recovery compat path * CVE-url: https://ubuntu.com/security/CVE-2024-43892 - memcg: protect concurrent access to mem_cgroup_idr * CVE-url: https://ubuntu.com/security/CVE-2021-47379 - blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd * CVE-url: https://ubuntu.com/security/CVE-2024-53239 - ALSA: 6fire: Release resources at card release * CVE-url: https://ubuntu.com/security/CVE-2024-50051 - spi: mpc52xx: Add cancel_work_sync before module remove Important TuxCare License Agreement CVE-2024-50234 CVE-2024-43892 CVE-2023-52799 CVE-2021-47379 CVE-2024-50302 CVE-2024-49902 CVE-2024-50229 CVE-2023-52522 CVE-2024-47809 CVE-2024-53239 CVE-2024-50180 CVE-2024-50051 CVE-2024-44938 CVE-2024-50278 CVE-2024-50233 CVE-2024-43863 CVE-2024-50267 CVE-2024-50171 CVE-2024-50279 CVE-2024-50143 CVE-2024-50230 CVE-2024-53061 CVE-2024-44931 CVE-2024-40911 CVE-2024-50117 CVE-2024-50301 CVE-2024-41063 CVE-2024-41020 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2024-26872 - RDMA/srpt: Do not register event handler until srpt device is fully setup * CVE-url: https://ubuntu.com/security/CVE-2024-53179 - smb: client: fix use-after-free of signing key * CVE-url: https://ubuntu.com/security/CVE-2021-47357 - atm: iphase: fix possible use-after-free in ia_module_exit() * Bionic update: upstream stable patchset 2022-11-15 (LP: #1996650) // CVE- url: https://ubuntu.com/security/CVE-2021-47103 - inet: fully convert sk->sk_rx_dst to RCU rules * CVE-url: https://ubuntu.com/security/CVE-2025-21858 - geneve: Fix use-after-free in geneve_find_dev(). * CVE-url: https://ubuntu.com/security/CVE-2024-36921 - wifi: iwlwifi: mvm: guard against invalid STA ID on removal * Bionic update: upstream stable patchset 2022-07-25 (LP: #1982782) // CVE- url: https://ubuntu.com/security/CVE-2022-49478 - media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init * CVE-url: https://ubuntu.com/security/CVE-2023-52621 - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers * CVE-url: https://ubuntu.com/security/CVE-2025-21855 - ibmvnic: Don't reference skb after sending to VIOS * CVE-url: https://ubuntu.com/security/CVE-2021-47110 - x86/kvm: Disable kvmclock on all CPUs on shutdown * CVE-url: https://ubuntu.com/security/CVE-2024-57980 - media: uvcvideo: Fix double free in error path * CVE-url: https://ubuntu.com/security/CVE-2025-21718 - net: rose: fix timer races against user threads * CVE-url: https://ubuntu.com/security/CVE-2025-21735 - NFC: nci: Add bounds checking in nci_hci_create_pipe() * CVE-url: https://ubuntu.com/security/CVE-2023-52805 - jfs: fix array-index-out-of-bounds in diAlloc * CVE-url: https://ubuntu.com/security/CVE-2023-52847 - media: bttv: fix use after free error due to btv->timeout timer * CVE-url: https://ubuntu.com/security/CVE-2024-41014 - xfs: add bounds checking to xlog_recover_process_data * Bionic update: upstream stable patchset 2022-10-18 (LP: #1993349) // CVE- url: https://ubuntu.com/security/CVE-2022-48702 - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() * Bionic update: upstream stable patchset 2022-10-18 (LP: #1993349) // CVE- url: https://ubuntu.com/security/CVE-2022-48701 - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() * CVE-url: https://ubuntu.com/security/CVE-2024-26982 - Squashfs: check the inode number is not the invalid value of zero * CVE-url: https://ubuntu.com/security/CVE-2024-56548 - hfsplus: don't query the device logical block size multiple times * CVE-url: https://ubuntu.com/security/CVE-2024-57850 - jffs2: Prevent rtime decompress memory corruption * CVE-url: https://ubuntu.com/security/CVE-2024-49982 - aoe: fix the potential use-after-free problem in more places * CVE-url: https://ubuntu.com/security/CVE-2025-21687 - vfio/platform: check the bounds of read/write syscalls * CVE-url: https://ubuntu.com/security/CVE-2024-56539 - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() * CVE-url: https://ubuntu.com/security/CVE-2024-53680 - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() * CVE-url: https://ubuntu.com/security/CVE-2024-56630 - ocfs2: free inode when ocfs2_get_init_inode() fails * CVE-url: https://ubuntu.com/security/CVE-2024-53184 - um: ubd: Do not use drvdata in release * CVE-url: https://ubuntu.com/security/CVE-2024-57884 - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() * CVE-url: https://ubuntu.com/security/CVE-2024-56597 - jfs: fix shift-out-of-bounds in dbSplit * CVE-url: https://ubuntu.com/security/CVE-2025-21664 - dm thin: make get_first_thin use rcu-safe list first function * CVE-url: https://ubuntu.com/security/CVE-2024-56594 - drm/amdgpu: set the right AMDGPU sg segment limitation * CVE-url: https://ubuntu.com/security/CVE-2024-52332 - igb: Fix potential invalid memory access in igb_init_module() * CVE-url: https://ubuntu.com/security/CVE-2024-53172 - ubi: fastmap: Fix duplicate slab cache names while attaching * CVE-url: https://ubuntu.com/security/CVE-2024-56532 - ALSA: us122l: Use snd_card_free_when_closed() at disconnection * CVE-url: https://ubuntu.com/security/CVE-2024-53183 - um: net: Do not use drvdata in release * CVE-url: https://ubuntu.com/security/CVE-2024-57948 - mac802154: check local interfaces before deleting sdata list * CVE-url: https://ubuntu.com/security/CVE-2024-57904 - iio: adc: at91: call input_free_device() on allocated iio_dev * CVE-url: https://ubuntu.com/security/CVE-2024-56637 - netfilter: ipset: Hold module reference while requesting a module * CVE-url: https://ubuntu.com/security/CVE-2024-53214 - vfio/pci: Properly hide first-in-list PCIe extended capability * CVE-url: https://ubuntu.com/security/CVE-2024-56700 - media: wl128x: Fix atomicity violation in fmc_send_cmd() * CVE-url: https://ubuntu.com/security/CVE-2024-56531 - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection * CVE-url: https://ubuntu.com/security/CVE-2024-53194 - PCI: Fix use-after-free of slot->bus on hot remove * CVE-url: https://ubuntu.com/security/CVE-2024-56619 - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() * CVE-url: https://ubuntu.com/security/CVE-2021-47636 - ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() * Bionic update: upstream stable patchset 2022-05-17 (LP: #1973831) // CVE- url: https://ubuntu.com/security/CVE-2022-49058 - cifs: potential buffer overflow in handling symlinks * CVE-url: https://ubuntu.com/security/CVE-2024-5317 - nfsd: make sure exp active before svc_export_show * CVE-url: https://ubuntu.com/security/CVE-2024-53174 - SUNRPC: make sure cache entry active before cache_show * CVE-url: https://ubuntu.com/security/CVE-2021-47219 - scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() * CVE-url: https://ubuntu.com/security/CVE-2024-50269 - usb: musb: sunxi: Fix accessing an released usb phy * CVE-url: https://ubuntu.com/security/CVE-2024-57908 - iio: imu: kmx61: fix information leak in triggered buffer Important TuxCare License Agreement CVE-2024-52332 CVE-2021-47103 CVE-2024-56594 CVE-2024-57904 CVE-2021-47636 CVE-2024-53184 CVE-2024-53214 CVE-2022-49058 CVE-2024-56548 CVE-2024-53194 CVE-2024-56637 CVE-2024-53172 CVE-2024-56532 CVE-2024-56597 CVE-2025-21735 CVE-2023-52847 CVE-2024-56630 CVE-2025-21687 CVE-2024-57884 CVE-2024-53179 CVE-2024-56558 CVE-2024-26872 CVE-2024-36921 CVE-2024-56619 CVE-2024-53174 CVE-2024-49982 CVE-2025-21718 CVE-2021-47357 CVE-2025-21664 CVE-2025-21858 CVE-2022-48702 CVE-2024-41014 CVE-2021-47110 CVE-2024-50269 CVE-2024-57908 CVE-2022-48701 CVE-2024-57850 CVE-2023-52805 CVE-2022-49478 CVE-2024-56700 CVE-2024-56539 CVE-2024-57948 CVE-2024-57980 CVE-2021-47219 CVE-2024-53183 CVE-2024-5317 CVE-2025-21855 CVE-2023-52621 CVE-2024-26982 CVE-2024-53680 CVE-2024-56531 Ubuntu 16.04 LTS * Bionic update: upstream stable patchset 2022-04-13 (LP: #1968932) // CVE- url: https://ubuntu.com/security/CVE-2022-23041 - xen/gnttab: fix gnttab_end_foreign_access() without page specified * Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE- url: https://ubuntu.com/security/CVE-2022-49850 - nilfs2: fix deadlock in nilfs_count_free_blocks() * CVE-url: https://ubuntu.com/security/CVE-2024-42305 - ext4: check dot and dotdot of dx_root before making dir indexed * CVE-url: https://ubuntu.com/security/CVE-2024-53168 - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket * CVE-url: https://ubuntu.com/security/CVE-2024-26915 - drm/amdgpu: Add check to prevent IH overflow - drm/amdgpu: Reset IH OVERFLOW_CLEAR bit * CVE-url: https://ubuntu.com/security/CVE-2024-56770 - net/sched: netem: account for backlog updates from child qdisc - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() * Bionic update: upstream stable patchset 2022-01-14 (LP: #1957957) // CVE- url: https://ubuntu.com/security/CVE-2021-47587 - net: systemport: Add global locking for descriptor lifecycle * Bionic update: upstream stable patchset 2021-06-01 (LP: #1930472) // CVE- url: https://ubuntu.com/security/CVE-2021-46959 - spi: Fix use-after-free with devm_spi_alloc_* * CVE-url: https://ubuntu.com/security/CVE-2024-26689 - ceph: prevent use-after-free in encode_cap_msg() * CVE-url: https://ubuntu.com/security/CVE-2024-53066 - nfs: Fix KMSAN warning in decode_getfattr_attrs() * CVE-url: https://ubuntu.com/security/CVE-2024-49944 - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start * CVE-url: https://ubuntu.com/security/CVE-2024-50237 - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower * CVE-url: https://ubuntu.com/security/CVE-2024-46780 - nilfs2: protect references to superblock parameters exposed in sysfs * CVE-url: https://ubuntu.com/security/CVE-2024-53063 - media: dvbdev: prevent the risk of out of memory access - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set * CVE-url: https://ubuntu.com/security/CVE-2021-47150 - net: fec: fix the potential memory leak in fec_enet_init() * CVE-url: https://ubuntu.com/security/CVE-2024-53140 - netlink: terminate outstanding dump on socket close * CVE-url: https://ubuntu.com/security/CVE-2025-21971 - net_sched: Prevent creation of classes with TC_H_ROOT * CVE-url: https://ubuntu.com/security/CVE-2023-52572 - cifs: Fix UAF in cifs_demultiplex_thread() * CVE-url: https://ubuntu.com/security/CVE-2025-37785 - ext4: fix OOB read when checking dotdot dir * Bionic update: upstream stable patchset 2021-07-14 (LP: #1936231) // CVE- url: https://ubuntu.com/security/CVE-2021-47277 - kvm: avoid speculation-based attacks from out-of-range memslot accesses * CVE-url: https://ubuntu.com/security/CVE-2022-49740 - wifi: brcmfmac: Check the count value of channel spec to prevent out-of- bounds reads * Bionic update: upstream stable patchset 2022-07-25 (LP: #1982782) // CVE- url: https://ubuntu.com/security/CVE-2022-49404 - RDMA/hfi1: Fix potential integer multiplication overflow errors * Bionic update: upstream stable patchset 2023-03-03 (LP: #2009237) // CVE- url: https://ubuntu.com/security/CVE-2022-49757 - EDAC/highbank: Fix memory leak in highbank_mc_probe() * Bionic update: upstream stable patchset 2022-07-25 (LP: #1982782) // CVE- url: https://ubuntu.com/security/CVE-2022-49395 - um: Fix out-of-bounds read in LDT setup * CVE-url: https://ubuntu.com/security/CVE-2022-49738 - f2fs: fix to do sanity check on summary info - f2fs: should put a page when checking the summary info - f2fs: fix to do sanity check on i_extra_isize in is_alive() * CVE-url: https://ubuntu.com/security/ - ipv6: Define dscp_t and stop taking ECN bits into account in fib6-rules * CVE-url: https://ubuntu.com/security/CVE-2025-21891 - ipvlan: ensure network headers are in skb linear part * CVE-url: https://ubuntu.com/security/CVE-2025-21969 - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd * CVE-url: https://ubuntu.com/security/CVE-2025-21957 - scsi: qla1280: Fix kernel oops when debug level > 2 * CVE-url: https://ubuntu.com/security/CVE-2025-21948 - HID: appleir: Fix potential NULL dereference at raw event handle * Bionic update: upstream stable patchset 2023-04-05 (LP: #2015399) // CVE- url: https://ubuntu.com/security/CVE-2023-52989 - firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region * Bionic update: upstream stable patchset 2023-04-05 (LP: #2015399) // CVE- url: https://ubuntu.com/security/CVE-2023-52932 - mm/swapfile: add cond_resched() in get_swap_pages() * Bionic update: upstream stable patchset 2023-03-03 (LP: #2009237) // CVE- url: https://ubuntu.com/security/CVE-2023-53015 - HID: betop: check shape of output reports * Bionic update: upstream stable patchset 2023-03-03 (LP: #2009237) // CVE- url: https://ubuntu.com/security/CVE-2023-52993 - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL * CVE-url: https://ubuntu.com/security/CVE-2025-21912 - gpio: rcar: Use raw_spinlock to protect register access * CVE-url: https://ubuntu.com/security/CVE-2025-21922 - ppp: Fix KMSAN uninit-value warning with bpf * CVE-url: https://ubuntu.com/security/CVE-2025-21959 - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() * Bionic update: upstream stable patchset 2023-04-05 (LP: #2015399) // CVE- url: https://ubuntu.com/security/CVE-2023-52988 - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() * CVE-url: https://ubuntu.com/security/CVE-2025-21996 - drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() * CVE-url: https://ubuntu.com/security/CVE-2025-21917 - usb: renesas_usbhs: Flush the notify_hotplug_work * CVE-url: https://ubuntu.com/security/CVE-2023-53001 - drm/drm_vma_manager: Add drm_vma_node_allow_once() * CVE-url: https://ubuntu.com/security/CVE-2025-21920 - vlan: enforce underlying device type * CVE-url: https://ubuntu.com/security/CVE-2025-21904 - caif_virtio: fix wrong pointer check in cfv_probe() * Bionic update: upstream stable patchset 2021-06-23 (LP: #1933375) // CVE- url: https://ubuntu.com/security/CVE-2021-47320 - net: caif: added cfserl_release function - net: caif: add proper error handling - net: caif: fix memory leak in caif_device_notify * CVE-url: https://ubuntu.com/security/CVE-2021-47342 - ext4: fix memory leak in ext4_fill_super - ext4: fix timer use-after-free on failed mount * Bionic update: upstream stable patchset 2021-08-03 (LP: #1938824) // CVE- url: https://ubuntu.com/security/CVE-2021-47320 - nfs: fix acl memory leak of posix_acl_create() * Bionic update: upstream stable patchset 2022-01-14 (LP: #1957957) // CVE- url: https://ubuntu.com/security/CVE-2021-47602 - mac80211: track only QoS data frames for admission control * CVE-url: https://ubuntu.com/security/CVE-2021-47328 - scsi: iscsi: Fix conn use after free during resets * CVE-url: https://ubuntu.com/security/CVE-2025-21702 - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 * CVE-url: https://ubuntu.com/security/CVE-2024-56658 - net: defer final 'struct net' free in netns dismantle * CVE-url: https://ubuntu.com/security/CVE-2024-50265 - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() * CVE-url: https://ubuntu.com/security/CVE-2024-46826 - ELF: fix kernel.randomize_va_space double read * CVE-url: https://ubuntu.com/security/CVE-2025-21700 - net: sched: Disallow replacing of child qdisc from one parent to another * CVE-url: https://ubuntu.com/security/CVE-2024-50167 - be2net: fix potential memory leak in be_xmit() * CVE-url: https://ubuntu.com/security/CVE-2024-49952 - netfilter: nf_tables: prevent nf_skb_duplicated corruption * CVE-url: https://ubuntu.com/security/CVE-2024-49948 - net: add more sanity checks to qdisc_pkt_len_init() Important TuxCare License Agreement CVE-2024-53168 CVE-2022-49850 CVE-2024-46780 CVE-2024-53140 CVE-2024-42305 CVE-2025-21912 CVE-2021-46959 CVE-2024-56658 CVE-2023-52989 CVE-2025-21957 CVE-2025-21904 CVE-2025-21971 CVE-2023-53001 CVE-2025-21700 CVE-2021-47277 CVE-2024-49944 CVE-2024-56770 CVE-2025-21702 CVE-2025-21969 CVE-2023-52932 CVE-2022-49395 CVE-2021-47342 CVE-2023-52993 CVE-2023-52988 CVE-2025-21948 CVE-2025-21920 CVE-2024-53063 CVE-2022-23041 CVE-2025-21891 CVE-2025-21959 CVE-2024-26689 CVE-2023-52572 CVE-2021-47150 CVE-2024-50237 CVE-2024-26915 CVE-2021-47328 CVE-2023-53015 CVE-2022-49757 CVE-2025-37785 CVE-2025-21917 CVE-2022-49738 CVE-2025-21996 CVE-2022-49740 CVE-2024-53066 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2024-57896 - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount * CVE-url: https://ubuntu.com/security/CVE-2024-56551 - drm/amdgpu: fix usage slab after free * CVE-url: https://ubuntu.com/security/CVE-2021-47211 - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc * CVE-url: https://ubuntu.com/security/CVE-2024-56661 - tipc: fix NULL deref in cleanup_bearer() * CVE-url: https://ubuntu.com/security/CVE-2024-56642 - tipc: Fix use-after-free of kernel socket in cleanup_bearer(). * CVE-url: https://ubuntu.com/security/CVE-2021-47163 - tipc: wait and exit until all work queues are done * Miscellaneous upstream changes - Revert "block: add check that partition length needs to be aligned with block size" Important TuxCare License Agreement CVE-2024-56661 CVE-2024-56551 CVE-2021-47163 CVE-2024-57896 CVE-2024-56642 CVE-2021-47211 Ubuntu 16.04 LTS * Focal update: v5.4.292 upstream stable release (LP: #2109357) // CVE-url: https://ubuntu.com/security/CVE-2025-37937 - objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() * Focal update: v5.4.287 upstream stable release (LP: #2095145) // CVE-url: https://ubuntu.com/security/CVE-2024-53197 - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices * Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE- url: https://ubuntu.com/security/CVE-2022-49909 - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() * Bionic update: upstream stable patchset 2022-07-25 (LP: #1982782) // CVE- url: https://ubuntu.com/security/CVE-2022-49530 - drm/amd/pm: fix double free in si_parse_power_table() * CVE-url: https://ubuntu.com/security/CVE-2025-39688 - nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid() * CVE-url: https://ubuntu.com/security/CVE-2024-50106 - nfsd: simplify nfs4_put_deleg_lease calls - nfsd: factor out common delegation-destruction code - nfsd: Fix race to FREE_STATEID and cl_revoked - nfsd: don't call functions with side-effecting inside WARN_ON() - nfsd: remove fault injection code - nfsd: avoid race after unhash_delegation_locked() - nfsd: split sc_status out of sc_type - nfsd: fix race between laundromat and free_stateid * CVE-url: https://ubuntu.com/security/CVE-2024-35937 - wifi: cfg80211: check A-MSDU format more carefully * CVE-url: https://ubuntu.com/security/CVE-2024-49966 - ocfs2: cancel dqi_sync_work before freeing oinfo * CVE-url: https://ubuntu.com/security/CVE-2023-52588 - f2fs: fix to tag gcing flag on page during block migration * CVE-url: https://ubuntu.com/security/CVE-2024-57798 - drm/dp-mst-helper: Remove hotplug callback - drm/dp_mst: Remove huge conditional in drm_dp_mst_handle_up_req() - drm/dp_mst: Refactor drm_dp_mst_handle_up_req() - drm/dp_mst: Rename drm_dp_add_port and drm_dp_update_port - drm/dp_mst: Handle UP requests asynchronously - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() * Miscellaneous Ubuntu changes - [Config] updateconfigs for NFSD_FAULT_INJECTION Important TuxCare License Agreement CVE-2025-37937 CVE-2024-49966 CVE-2024-35937 CVE-2022-49530 CVE-2025-39688 CVE-2024-53197 CVE-2022-49909 CVE-2023-52588 CVE-2024-50106 CVE-2024-57798 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2021-47352 - virtio-net: Add validation for used length * CVE-url: https://ubuntu.com/security/CVE-2024-46771 - can: bcm: Remove proc entry when dev is unregistered. * Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE- url: https://ubuntu.com/security/CVE-2022-49842 - ASoC: core: Fix use-after-free in snd_soc_exit() * CVE-url: https://ubuntu.com/security/CVE-2021-47336 - smackfs: restrict bytes count in smk_set_cipso() * CVE-url: https://ubuntu.com/security/CVE-2025-21993 - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() * CVE-url: https://ubuntu.com/security/CVE-2022-49541 - cifs: fix potential double free during failed mount * CVE-url: https://ubuntu.com/security/CVE-2021-47281 - ALSA: timer: Protect the whole snd_timer_close() with open race - ALSA: timer: Follow standard EXPORT_SYMBOL() declarations - ALSA: timer: Limit max instances per timer - ALSA: timer: Fix possible race at assigning a timer instance - ALSA: seq: Fix race of snd_seq_timer_open() * Bionic update: upstream stable patchset 2020-01-14 (LP: #1859712) // CVE- url: https://ubuntu.com/security/CVE-2021-47281 - ALSA: timer: Limit max amount of slave instances * Bionic update: upstream stable patchset 2019-11-13 (LP: #1852492) // CVE- url: https://ubuntu.com/security/CVE-2021-47281 - ALSA: timer: Fix mutex deadlock at releasing card - ALSA: timer: Simplify error path in snd_timer_open() Important TuxCare License Agreement CVE-2021-47281 CVE-2025-21993 CVE-2022-49541 CVE-2021-47352 CVE-2021-47336 CVE-2022-49842 CVE-2024-46771 Ubuntu 16.04 LTS * Bionic update: upstream stable patchset 2021-06-11 (LP: #1931740) // CVE- url: https://ubuntu.com/security/CVE-2021-34981 - Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails * CVE-url: https://ubuntu.com/security/CVE-2025-37797 - net_sched: hfsc: Fix a UAF vulnerability in class handling * CVE-url: https://ubuntu.com/security/CVE-2024-57996 // CVE-url: https://ubuntu.com/security/CVE-2025-37752 - net_sched: sch_sfq: move the limit validation * Focal update: v5.4.285 upstream stable release (LP: #2089233) // CVE-2024-50202 // CVE-url: https://ubuntu.com/security/CVE-2024-50202 - nilfs2: propagate directory read errors from nilfs_find_entry() * Focal update: v5.4.279 upstream stable release (LP: #2073621) // CVE-url: https://ubuntu.com/security/CVE-2024-50202 - nilfs2: Remove check for PageError - nilfs2: return the mapped address from nilfs_get_page() * CVE-url: https://ubuntu.com/security/CVE-2024-50202 - make ext2_get_page() and friends work without external serialization * Bionic update: upstream stable patchset 2021-08-03 (LP: #1938824) // CVE- url: https://ubuntu.com/security/CVE-2021-47345 - RDMA/cma: Fix rdma_resolve_route() memory leak * Focal update: v5.4.287 upstream stable release (LP: #2095145) // CVE-url: https://ubuntu.com/security/CVE-2024-53131 - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint * Focal update: v5.4.287 upstream stable release (LP: #2095145) // CVE-url: https://ubuntu.com/security/CVE-2024-53130 - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint * CVE-url: https://ubuntu.com/security/CVE-2025-37798 - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() * CVE-url: https://ubuntu.com/security/CVE-2025-21640 - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy * CVE-url: https://ubuntu.com/security/CVE-2024-57913 - usb: gadget: f_fs: Remove WARN_ON in functionfs_bind * CVE-url: https://ubuntu.com/security/CVE-2025-21638 - sctp: sysctl: auth_enable: avoid using current->nsproxy * CVE-url: https://ubuntu.com/security/CVE-2024-50195 - posix-clock: Fix missing timespec64 check in pc_clock_settime() * CVE-url: https://ubuntu.com/security/CVE-2024-50299 - sctp: properly validate chunk size in sctp_sf_ootb() * CVE-url: https://ubuntu.com/security/CVE-2024-41016 - ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() * CVE-url: https://ubuntu.com/security/CVE-2024-50287 - media: v4l2-tpg: prevent the risk of a division by zero * CVE-url: https://ubuntu.com/security/CVE-2024-49965 - ocfs2: remove unreasonable unlock in ocfs2_read_blocks * CVE-url: https://ubuntu.com/security/CVE-2024-50179 - ceph: remove the incorrect Fw reference check when dirtying pages * CVE-url: https://ubuntu.com/security/CVE-2024-40953 - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() * CVE-url: https://ubuntu.com/security/CVE-2024-50290 - media: cx24116: prevent overflows on SNR calculus * CVE-url: https://ubuntu.com/security/CVE-2024-49877 - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate * CVE-url: https://ubuntu.com/security/CVE-2024-50008 - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() * CVE-url: https://ubuntu.com/security/CVE-2024-49959 - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error * CVE-url: https://ubuntu.com/security/CVE-2024-49963 - mailbox: bcm2835: Fix timeout during suspend mode * CVE-url: https://ubuntu.com/security/CVE-2024-47709 - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). * CVE-url: https://ubuntu.com/security/CVE-2025-21699 - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag * CVE-url: https://ubuntu.com/security/CVE-2025-21689 - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() * CVE-url: https://ubuntu.com/security/CVE-2024-53101 - fs: Fix uninitialized value issue in from_kuid and from_kgid Important TuxCare License Agreement CVE-2025-21638 CVE-2025-21689 CVE-2025-37752 CVE-2021-47345 CVE-2024-53131 CVE-2024-49959 CVE-2024-50287 CVE-2024-53101 CVE-2024-57996 CVE-2024-50290 CVE-2024-41016 CVE-2024-47709 CVE-2024-50299 CVE-2025-37797 CVE-2024-50008 CVE-2024-49877 CVE-2024-40953 CVE-2024-57913 CVE-2024-50179 CVE-2025-21699 CVE-2024-49963 CVE-2024-49965 CVE-2021-34981 CVE-2024-53130 CVE-2024-50195 CVE-2024-50202 CVE-2025-21640 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2024-41069 - ASoC: topology: Fix references to freed memory - ASoC: topology: Do not assign fields that are already set - ASoC: topology: Clean up route loading * Bionic update: upstream stable patchset 2021-06-11 (LP: #1931740) // CVE- url: https://ubuntu.com/security/CVE-2021-47149 - net: fujitsu: fix potential null-ptr-deref * CVE-url: https://ubuntu.com/security/CVE-2024-35849 - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() * CVE-url: https://ubuntu.com/security/CVE-2025-38618 - vsock: Do not allow binding to VMADDR_PORT_ANY * CVE-url: https://ubuntu.com/security/CVE-2025-38617 - net/packet: fix a race in packet_set_ring() and packet_notifier() * CVE-url: https://ubuntu.com/security/CVE-2025-21796 - nfsd: clear acl_access/acl_default after releasing them * Bionic update: upstream stable patchset 2021-08-03 (LP: #1938824) // CVE- url: https://ubuntu.com/security/CVE-2021-47319 - virtio-blk: Fix memory leak among suspend/resume procedure * Focal update: v5.4.285 upstream stable release (LP: #2089233) // CVE-2024-49924 // CVE-url: https://ubuntu.com/security/CVE-2024-49924 - fbdev: pxafb: Fix possible use after free in pxafb_task() * CVE-url: https://ubuntu.com/security/CVE-2022-48827 - NFSD: Fix the behavior of READ near OFFSET_MAX * Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717) // CVE- url: https://ubuntu.com/security/CVE-2022-48737 - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() - ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx() * Focal update: v5.4.261 upstream stable release (LP: #2049049) // CVE-url: https://ubuntu.com/security/CVE-2023-52868 - thermal: core: prevent potential string overflow * Bionic update: upstream stable patchset 2022-05-17 (LP: #1973831) // CVE- url: https://ubuntu.com/security/CVE-2021-47633 - ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 * CVE-url: https://ubuntu.com/security/CVE-2021-47391 - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests * Bionic update: upstream stable patchset 2021-12-03 (LP: #1953202) // CVE- url: https://ubuntu.com/security/CVE-2021-47475 - comedi: vmk80xx: fix transfer-buffer overflows - comedi: vmk80xx: fix bulk-buffer overflow - comedi: vmk80xx: fix bulk and interrupt message timeouts * Bionic update: upstream stable patchset 2021-11-12 (LP: #1950816) // CVE- url: https://ubuntu.com/security/CVE-2021-47497 - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells * CVE-2024-35965 // CVE-url: https://ubuntu.com/security/CVE-2024-35965 - Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() - Bluetooth: L2CAP: Fix not validating setsockopt user input * CVE-url: https://ubuntu.com/security/CVE-2024-56616 - drm/dp_mst: Fix MST sideband message body length check * Bionic update: upstream stable patchset 2022-07-25 (LP: #1982782) // CVE- url: https://ubuntu.com/security/CVE-2022-49407 - dlm: fix plock invalid read * Focal update: v5.4.188 upstream stable release (LP: #1971496) // CVE-url: https://ubuntu.com/security/CVE-2022-49292 - ALSA: oss: Fix PCM OSS buffer allocation overflow * Focal update: v5.4.262 upstream stable release (LP: #2049069) // CVE-url: https://ubuntu.com/security/CVE-2023-52835 - perf/core: Bail out early if the request AUX area is out of bound * Focal update: v5.4.262 upstream stable release (LP: #2049069) // CVE-url: https://ubuntu.com/security/CVE-2023-52764 - media: gspca: cpia1: shift-out-of-bounds in set_flicker * CVE-2024-35966 // CVE-url: https://ubuntu.com/security/CVE-2024-35966 - Bluetooth: RFCOMM: Fix not validating setsockopt user input * CVE-2024-35967 // CVE-url: https://ubuntu.com/security/CVE-2024-35966 - Bluetooth: SCO: Fix not validating setsockopt user input * Focal update: v5.4.291 upstream stable release (LP: #2106002) // CVE-2025-21704 // CVE-url: https://ubuntu.com/security/CVE-2025-21704 - usb: cdc-acm: Check control transfer buffer size before access * CVE-url: https://ubuntu.com/security/CVE-2025-21704 - cdc-acm: reassemble fragmented notifications * CVE-url: https://ubuntu.com/security/CVE-2025-37798 - sch_drr: make drr_qlen_notify() idempotent - sch_htb: make htb_qlen_notify() idempotent - sch_hfsc: make hfsc_qlen_notify() idempotent - sch_qfq: make qfq_qlen_notify() idempotent Important TuxCare License Agreement CVE-2023-52868 CVE-2024-35849 CVE-2022-48827 CVE-2024-49924 CVE-2024-35965 CVE-2024-41069 CVE-2021-47475 CVE-2023-52835 CVE-2025-21704 CVE-2021-47149 CVE-2025-38617 CVE-2025-21796 CVE-2021-47497 CVE-2022-48737 CVE-2021-47391 CVE-2025-38618 CVE-2023-52764 CVE-2024-35966 CVE-2025-37798 CVE-2021-47633 CVE-2021-47319 CVE-2022-49407 CVE-2024-56616 CVE-2022-49292 Ubuntu 16.04 LTS * Focal update: v5.4.291 upstream stable release (LP: #2106002) // CVE-2025-21772 - partitions: mac: fix handling of bogus partition table * CVE-url: https://ubuntu.com/security/CVE-2025-22079 - ocfs2: validate l_tree_depth to avoid out-of-bounds access * CVE-url: https://ubuntu.com/security/CVE-2024-58014 - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() * CVE-url: https://ubuntu.com/security/CVE-2024-41042 - netfilter: nf_tables: prefer nft_chain_validate * CVE-url: https://ubuntu.com/security/CVE-2024-46713 - perf/aux: Fix AUX buffer serialization * CVE-url: https://ubuntu.com/security/CVE-2025-38352 - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() * CVE-url: https://ubuntu.com/security/CVE-2025-38477 - net/sched: sch_qfq: Fix race condition on qfq_aggregate * Focal update: v5.4.262 upstream stable release (LP: #2049069) // CVE-url: https://ubuntu.com/security/CVE-2023-52804 - fs/jfs: Add check for negative db_l2nbperpage - fs/jfs: Add validity check for db_maxag and db_agpref * Focal update: v5.4.251 upstream stable release (LP: #2034918) // CVE-url: https://ubuntu.com/security/CVE-2023-52804 - jfs: jfs_dmap: Validate db_l2nbperpage while mounting * Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403) // CVE- url: https://ubuntu.com/security/CVE-2023-52804 - fs: jfs: fix shift-out-of-bounds in dbAllocAG * CVE-url: https://ubuntu.com/security/CVE-2022-25265 - x86/elf: Add table to document READ_IMPLIES_EXEC - x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK - x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit * Bionic update: upstream stable patchset 2021-06-11 (LP: #1931740) // CVE- url: https://ubuntu.com/security/CVE-2021-47153 - i2c: i801: Don't generate an interrupt on bus reset * Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717) // CVE- url: https://ubuntu.com/security/CVE-2022-48757 - net: fix information leakage in /proc/net/ptype * Focal update: v5.4.279 upstream stable release (LP: #2073621) // CVE-url: https://ubuntu.com/security/CVE-2024-37078 - nilfs2: fix potential kernel bug due to lack of writeback flag waiting * Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717) // CVE- url: https://ubuntu.com/security/CVE-2022-48760 - USB: core: Fix hang in usb_kill_urb by adding memory barriers * Bionic update: upstream stable patchset 2021-11-02 (LP: #1949512) // CVE- url: https://ubuntu.com/security/CVE-2021-47383 - tty: Fix out-of-bound vmalloc access in imageblit * Bionic update: upstream stable patchset 2022-05-17 (LP: #1973831) // CVE- url: https://ubuntu.com/security/CVE-2022-49145 - ACPI: CPPC: Avoid out of bounds access when parsing _CPC data * Bionic update: upstream stable patchset 2021-11-23 (LP: #1951997) // CVE- url: https://ubuntu.com/security/CVE-2021-47458 - ocfs2: mount fails with buffer overflow in strlen * CVE-url: https://ubuntu.com/security/CVE-2022-49170 - f2fs: fix to do sanity check on curseg->alloc_type * CVE-url: https://ubuntu.com/security/CVE-2021-47479 - staging: rtl8712: fix use-after-free in rtl8712_dl_fw * Bionic update: upstream stable patchset 2021-12-03 (LP: #1953202) // CVE- url: https://ubuntu.com/security/CVE-2021-47477 - comedi: dt9812: fix DMA buffers on stack * Bionic update: upstream stable patchset 2022-05-17 (LP: #1973831) // CVE- url: https://ubuntu.com/security/CVE-2021-47642 - video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow * Bionic update: upstream stable patchset 2022-01-06 (LP: #1956614) // CVE- url: https://ubuntu.com/security/CVE-2021-47565 - scsi: mpt3sas: Fix kernel panic during drive powercycle test * Bionic update: upstream stable patchset 2022-01-06 (LP: #1956614) // CVE- url: https://ubuntu.com/security/CVE-2021-47566 - proc/vmcore: fix clearing user buffer by properly using clear_user() * Focal update: v5.4.279 upstream stable release (LP: #2073621) // CVE-url: https://ubuntu.com/security/CVE-2024-39469 - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors * CVE-url: https://ubuntu.com/security/CVE-2022-49519 - ath10k: skip ath10k_halt during suspend for driver state RESTARTING * CVE-url: https://ubuntu.com/security/CVE-2024-36880 - Bluetooth: qca: add missing firmware sanity checks * Miscellaneous upstream changes - net: openvswitch: fix nested key length validation in the set() action - isofs: Prevent the use of too small fid - net: ppp: Add bound checking for skb data on ppp_sync_txmung - wifi: at76c50x: fix use after free access in at76_disconnect Important TuxCare License Agreement CVE-2022-49145 CVE-2018-9568 CVE-2019-3846 CVE-2025-21772 CVE-2024-37078 CVE-2022-48760 CVE-2024-41042 CVE-2022-48757 CVE-2024-36880 CVE-2023-52804 CVE-2021-47383 CVE-2020-25643 CVE-2021-47566 CVE-2024-39469 CVE-2021-47565 CVE-2024-46713 CVE-2025-38477 CVE-2025-22079 CVE-2022-49170 CVE-2019-11486 CVE-2019-19448 CVE-2025-38352 CVE-2019-11479 CVE-2018-16884 CVE-2024-58014 CVE-2021-47642 CVE-2021-47474 CVE-2020-35519 CVE-2022-25265 CVE-2021-47479 CVE-2021-47153 CVE-2021-47477 CVE-2022-49519 CVE-2021-47458 Ubuntu 16.04 LTS * CVE-2025-39743 - jfs: truncate good inode pages when hard link is 0 {CVE-2025-39743} * CVE-2025-39685 - comedi: pcl726: Prevent invalid irq number {CVE-2025-39685} * CVE-2025-38713 - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() {CVE-2025-38713} * CVE-2025-38699 - scsi: bfa: Double-free fix {CVE-2025-38699} * CVE-2025-38697 - jfs: upper bound check of tree index in dbAllocAG {CVE-2025-38697} * CVE-2025-38680 - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680} * CVE-2025-38677 - f2fs: fix to avoid out-of-boundary access in dnode page {CVE-2025-38677} * CVE-2025-38572 - ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572} * CVE-2025-38538 - dmaengine: nbpfaxi: Fix memory corruption in probe() {CVE-2025-38538} * CVE-2025-38530 - comedi: pcl812: Fix bit shift out of bounds {CVE-2025-38530} * CVE-2025-38529 - comedi: aio_iiro_16: Fix bit shift out of bounds {CVE-2025-38529} * CVE-2025-38494 - HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494} * CVE-2025-38482 - comedi: das6402: Fix bit shift out of bounds {CVE-2025-38482} * CVE-2025-38428 - Input: ims-pcu - check record size in ims_pcu_flash_firmware() {CVE-2025-38428} * CVE-2025-38416 - NFC: nci: uart: Set tty->disc_data only in success path {CVE-2025-38416} * CVE-2025-38415 - Squashfs: check return result of sb_min_blocksize {CVE-2025-38415} * CVE-2025-38403 - vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403} * CVE-2025-38286 - pinctrl: at91: Fix possible out-of-boundary access {CVE-2025-38286} * CVE-2025-38245 - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). {CVE-2025-38245} * CVE-2025-38212 - ipc: fix to protect IPCS lookups using RCU {CVE-2025-38212} * CVE-2025-38204 - jfs: fix array-index-out-of-bounds read in add_missing_indices {CVE-2025-38204} * CVE-2025-38157 - wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157} * CVE-2025-38079 - crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079} * CVE-2025-38051 - smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051} * CVE-2023-53676 - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() {CVE-2023-53676} * CVE-2023-53675 - scsi: ses: Fix possible desc_ptr out-of-bounds accesses {CVE-2023-53675} * CVE-2023-53668 - ring-buffer: Fix deadloop issue on reading trace_pipe {CVE-2023-53668} * CVE-2023-53622 - gfs2: Fix possible data races in gfs2_show_options() {CVE-2023-53622} * CVE-2023-53616 - jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount {CVE-2023-53616} * CVE-2023-53608 - nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() {CVE-2023-53608} * CVE-2023-53587 - ring-buffer: Sync IRQ works before buffer destruction {CVE-2023-53587} * CVE-2023-53569 - ext2: Check block size validity during mount {CVE-2023-53569} * CVE-2023-53559 - ip_vti: fix potential slab-use-after-free in decode_session6 {CVE-2023-53559} * CVE-2023-53541 - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write {CVE-2023-53541} * CVE-2023-53521 - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() {CVE-2023-53521} * CVE-2023-53506 - udf: Do not bother merging very long extents {CVE-2023-53506} * CVE-2023-53485 - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev {CVE-2023-53485} * CVE-2023-53484 - lib: cpu_rmap: Avoid use after free on rmap->obj array entries {CVE-2023-53484} * CVE-2023-53454 - HID: multitouch: Correct devm device reference for hidinput input_dev name {CVE-2023-53454} * CVE-2023-53322 - scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322} * CVE-2023-53311 - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput {CVE-2023-53311} * CVE-2023-53259 - VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF {CVE-2023-53259} * CVE-2023-53219 - media: netup_unidvb: fix use-after-free at del_timer() {CVE-2023-53219} * CVE-2023-53138 - net: caif: Fix use-after-free in cfusbl_device_notify() {CVE-2023-53138} * CVE-2023-53075 - ftrace: Fix invalid address access in lookup_rec() when index is 0 {CVE-2023-53075} * CVE-2023-53035 - nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() {CVE-2023-53035} * CVE-2022-50542 - media: si470x: Fix use-after-free in si470x_int_in_callback() {CVE-2022-50542} * CVE-2022-50496 - dm cache: Fix UAF in destroy() {CVE-2022-50496} * CVE-2022-50478 - nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() {CVE-2022-50478} * CVE-2022-50470 - xhci: Remove device endpoints from bandwidth list when freeing the device {CVE-2022-50470} * CVE-2022-50432 - kernfs: fix use-after-free in __kernfs_remove {CVE-2022-50432} * CVE-2022-50423 - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() {CVE-2022-50423} * CVE-2022-50419 - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times {CVE-2022-50419} * CVE-2022-50411 - ACPICA: Fix error code path in acpi_ds_call_control_method() {CVE-2022-50411} * CVE-2022-50394 - i2c: ismt: Fix an out-of-bounds bug in ismt_access() {CVE-2022-50394} * CVE-2022-50384 - staging: vme_user: Fix possible UAF in tsi148_dma_list_add {CVE-2022-50384} * CVE-2022-50333 - fs: jfs: fix shift-out-of-bounds in dbDiscardAG {CVE-2022-50333} * CVE-2022-50301 - iommu/omap: Fix buffer overflow in debugfs {CVE-2022-50301} * CVE-2022-50094 - spmi: trace: fix stack-out-of-bound access in SPMI tracing functions {CVE-2022-50094} * CVE-2022-50022 - drivers:md:fix a potential use-after-free bug {CVE-2022-50022} * CVE-2022-49945 - hwmon: (gpio-fan) Fix array out of bounds access {CVE-2022-49945} * CVE-2022-49865 - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network {CVE-2022-49865} * CVE-2022-49775 - tcp: cdg: allow tcp_cdg_release() to be called multiple times {CVE-2022-49775} * CVE-2022-49581 - be2net: Fix buffer overflow in be_get_module_eeprom {CVE-2022-49581} * CVE-2022-49503 - ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix {CVE-2022-49503} * CVE-2021-47142 - drm/amdgpu: Fix a use-after-free {CVE-2021-47142} * CVE-url: https://ubuntu.com/security/CVE-2025-38477 - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class * Focal update: v5.4.255 upstream stable release (LP: #2039440) - Bluetooth: L2CAP: Fix use-after-free * Bionic update: upstream stable patchset 2022-11-15 (LP: #1996650) - Bluetooth: L2CAP: Fix user-after-free - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() * Focal update: v5.4.253 upstream stable release (LP: #2038652) - ip6mr: Fix skb_under_panic in ip6mr_cache_report() * Focal update: v5.4.224 upstream stable release (LP: #1999273) - ipvs: use explicitly signed chars - ipvs: fix WARNING in __ip_vs_cleanup_batch() - ipvs: fix WARNING in ip_vs_app_net_cleanup() * Bionic update: upstream stable patchset 2022-10-18 (LP: #1993349) - vt: Clear selection before changing the font * Focal update: v5.4.237 upstream stable release (LP: #2023420) - fs: prevent out-of-bounds array speculation when closing a file descriptor * Focal update: v5.4.231 upstream stable release (LP: #2011226) - netlink: prevent potential spectre v1 gadgets * Bionic update: upstream stable patchset 2022-09-23 (LP: #1990698) - ALSA: bcd2000: Fix a UAF bug on the error path of probing - drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() - md-raid10: fix KASAN warning - selinux: Add boundary check in put_entry() - video: fbdev: vt8623fb: Check the size of screen before memset_io() - video: fbdev: arkfb: Check the size of screen before memset_io() - video: fbdev: s3fb: Check the size of screen before memset_io() * Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403) - igb: Do not free q_vector unless new one was allocated * Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK - net: mdio: fix undefined behavior in bit shift for __mdiobus_register * CVE-url: https://ubuntu.com/security/CVE-2023-1989 - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition * Focal update: v5.4.225 upstream stable release (LP: #2002347) - ntfs: fix use-after-free in ntfs_attr_find() * Focal update: Focal update: v5.4.235 upstream stable release (LP: #2017706) - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() * Miscellaneous upstream changes - debian: add control and changelog files - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - Merge branch 'master' into master-build - vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint - f2fs: return error when accessing insane flie offset - f2fs: lost matching-pair of trace in f2fs_truncate_inode_blocks - f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() - usb: vhci-hcd: Do not drop references before new references are gained - tracing: Fix oob write in trace_seq_to_buffer() - mtd: inftlcore: Add error check for inftl_read_oob() - jbd2: remove wrong sb->s_sequence check - usb: dwc3: gadget: check that event count does not exceed event buffer length - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control - Bluetooth: hci_core: Fix use-after-free in vhci_flush() - usb: xhci: Fix isochronous Ring Underrun/Overrun event handling - Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" - scsi: target: Fix WRITE_SAME No Data Buffer crash - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too - HID: core: Harden s32ton() against conversion to 0 bits - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() - wifi: mac80211_hwsim: drop short frames - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write Important TuxCare License Agreement CVE-2022-50097 CVE-2025-38572 CVE-2023-53117 CVE-2022-49581 CVE-2022-50419 CVE-2022-49945 CVE-2023-53454 CVE-2023-53622 CVE-2022-49948 CVE-2022-50411 CVE-2023-53322 CVE-2023-53035 CVE-2025-38538 CVE-2022-49907 CVE-2023-53000 CVE-2023-53321 CVE-2022-50094 CVE-2023-53219 CVE-2025-38415 CVE-2025-38079 CVE-2025-39743 CVE-2022-50301 CVE-2022-50211 CVE-2025-38713 CVE-2022-50470 CVE-2023-53282 CVE-2025-37839 CVE-2022-50384 CVE-2022-50542 CVE-2025-38286 CVE-2022-50496 CVE-2025-38051 CVE-2025-37823 CVE-2022-50099 CVE-2025-39685 CVE-2022-49865 CVE-2023-53569 CVE-2023-53138 CVE-2024-43883 CVE-2022-50185 CVE-2023-53145 CVE-2025-37882 CVE-2022-50022 CVE-2022-50333 CVE-2022-50423 CVE-2025-38529 CVE-2023-53365 CVE-2023-53559 CVE-2022-50408 CVE-2025-38697 CVE-2025-38157 CVE-2025-37892 CVE-2022-50478 CVE-2023-53608 CVE-2022-49870 CVE-2022-50200 CVE-2022-50252 CVE-2025-37923 CVE-2021-47142 CVE-2025-38494 CVE-2025-38403 CVE-2025-38699 CVE-2022-50432 CVE-2023-53616 CVE-2025-38428 CVE-2023-53521 CVE-2025-38482 CVE-2023-53484 CVE-2023-53075 CVE-2025-38245 CVE-2025-38680 CVE-2025-38530 CVE-2025-38677 CVE-2025-38204 CVE-2022-49503 CVE-2022-50422 CVE-2023-53587 CVE-2022-49763 CVE-2023-53395 CVE-2022-50394 CVE-2023-53311 CVE-2023-53675 CVE-2023-53676 CVE-2022-50101 CVE-2023-53668 CVE-2023-53259 CVE-2023-53305 CVE-2025-38250 CVE-2022-21546 CVE-2022-50386 CVE-2025-38556 CVE-2022-49775 CVE-2023-53541 CVE-2023-53506 CVE-2025-37810 CVE-2025-38416 CVE-2022-50258 CVE-2022-49917 CVE-2025-22083 CVE-2023-53485 CVE-2025-37739 CVE-2025-38212 CVE-2022-50229 Ubuntu 16.04 LTS * CVE-2025-38715 - hfs: fix slab-out-of-bounds in hfs_bnode_read() {CVE-2025-38715} * CVE-2023-53432 - firewire: net: fix use after free in fwnet_finish_incoming_packet() {CVE-2023-53432} * CVE-2025-39891 - wifi: mwifiex: Initialize the chan_stats array to zero {CVE-2025-39891} * CVE-2025-38666 - net: appletalk: Fix use-after-free in AARP proxy probe {CVE-2025-38666} * CVE-2025-39828 - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() {CVE-2025-39828} * Miscellaneous upstream changes - UBUNTU: [Packaging] drop abi/module/retpoline checks (match u18/u20) - smb: client: reject userspace cifs.spnego descriptions - UBUNTU: Vendor linux-meta sources and integrate meta-build into linux * Bump ABI 4.4.0-282 Important TuxCare License Agreement CVE-2023-53432 CVE-2020-27786 CVE-2019-19060 CVE-2020-1749 CVE-2019-14814 CVE-2019-18683 CVE-2018-14633 CVE-2020-25645 CVE-2025-39828 CVE-2019-11477 CVE-2019-11478 CVE-2025-38666 CVE-2025-38715 CVE-2020-8648 CVE-2019-14835 CVE-2025-39891 Ubuntu 16.04 LTS * CVE-2022-50093 - iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) {CVE-2022-50093} * CVE-2026-31778 - ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778} * CVE-2026-43011 - net/x25: Fix potential double free of skb {CVE-2026-43011} * CVE-2026-31602 - ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602} * CVE-2026-31622 - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler {CVE-2026-31622} * CVE-2026-31583 - media: em28xx: fix use-after-free in em28xx_v4l2_open() {CVE-2026-31583} * CVE-2026-31659 - batman-adv: reject oversized global TT response buffers {CVE-2026-31659} * CVE-2023-53596 - drivers: base: Free devm resources when unregistering a {CVE-2023-53596} * CVE-2026-31696 - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing {CVE-2026-31696} * CVE-2022-50497 - binfmt_misc: fix shift-out-of-bounds in check_special_flags {CVE-2022-50497} * CVE-2026-23372 - nfc: rawsock: cancel tx_work before socket teardown {CVE-2026-23372} * CVE-2026-23193 - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() {CVE-2026-23193} * CVE-2023-53619 - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free {CVE-2023-53619} * CVE-2023-53285 - ext4: add bounds checking in get_max_inline_xattr_value_size() {CVE-2023-53285} * CVE-2026-43427 - usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427} * CVE-2026-43052 - wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052} * CVE-2026-31405 - media: dvb-net: fix OOB access in ULE extension header tables {CVE-2026-31405} * CVE-2026-31629 - nfc: llcp: add missing return after LLCP_CLOSED checks {CVE-2026-31629} * CVE-2025-71136 - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() {CVE-2025-71136} * CVE-2026-31417 - net/x25: Fix overflow when accumulating packets {CVE-2026-31417} * CVE-2026-43020 - Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020} * CVE-2026-43040 - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040} * CVE-2022-49770 - ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770} * CVE-2026-43283 - net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle {CVE-2026-43283} * CVE-2026-31748 - comedi: me_daq: Fix potential overrun of firmware buffer {CVE-2026-31748} * CVE-2026-31747 - comedi: me4000: Fix potential overrun of firmware buffer {CVE-2026-31747} * CVE-2026-31576 - media: hackrf: fix to not free memory after the device is registered in hackrf_probe() {CVE-2026-31576} * CVE-2026-31399 - nvdimm/bus: Fix potential use after free in asynchronous initialization {CVE-2026-31399} * CVE-2026-23388 - Squashfs: check metadata block offset is within range {CVE-2026-23388} * CVE-2026-43450 - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450} * CVE-2026-31720 - usb: gadget: f_uac1_legacy: validate control request size {CVE-2026-31720} * CVE-2026-23216 - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216} * Bump ABI 4.4.0-283 Important TuxCare License Agreement CVE-2022-50497 CVE-2026-31778 CVE-2026-43011 CVE-2026-43427 CVE-2026-43283 CVE-2026-31696 CVE-2023-53619 CVE-2026-31405 CVE-2026-23388 CVE-2026-43450 CVE-2026-31602 CVE-2026-31583 CVE-2026-31622 CVE-2026-31747 CVE-2026-23216 CVE-2022-50093 CVE-2026-31720 CVE-2026-43020 CVE-2026-43052 CVE-2026-23372 CVE-2022-49770 CVE-2026-31748 CVE-2023-53285 CVE-2026-31659 CVE-2026-31576 CVE-2025-71136 CVE-2026-31417 CVE-2026-43040 CVE-2023-53596 CVE-2026-23193 CVE-2026-31629 Ubuntu 16.04 LTS * CVE-2026-46113 - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role {CVE-2026-46113} * CVE-2024-39467 - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() {CVE-2024-39467} * CVE-2023-52796 - ipvlan: add ipvlan_route_v6_outbound() helper {CVE-2023-52796} * CVE-2025-37879 - 9p/net: fix improper handling of bogus negative read/write replies {CVE-2025-37879} * CVE-2022-49934 - wifi: mac80211: Fix UAF in ieee80211_scan_rx() {CVE-2022-49934} * CVE-2025-38117 - Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117} * CVE-2025-39686 - comedi: Make insn_rw_emulate_bits() do insn->n samples {CVE-2025-39686} * CVE-2022-50169 - wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() {CVE-2022-50169} * CVE-2026-23191 - ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191} * CVE-2026-23001 - macvlan: fix possible UAF in macvlan_forward_source() {CVE-2026-23001} * CVE-2026-31527 - driver core: platform: use generic driver_override infrastructure {CVE-2026-31527} * CVE-2026-46300 - net: skbuff: preserve shared-frag marker during coalescing {CVE-2026-46300} - net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-46300} * CVE-2026-23281 - wifi: libertas: fix use-after-free in lbs_free_adapter() {CVE-2026-23281} * CVE-2022-50279 - wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() {CVE-2022-50279} * CVE-2025-39901 - i40e: remove read access to debugfs files {CVE-2025-39901} * CVE-2024-41013 - xfs: don't walk off the end of a directory data block {CVE-2024-41013} * CVE-2024-58072 - wifi: rtlwifi: remove unused check_buddy_priv {CVE-2024-58072} * CVE-2025-38377 - rose: fix dangling neighbour pointers in rose_rt_device_down() {CVE-2025-38377} * CVE-2025-71091 - team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091} * CVE-2023-53254 - cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254} * CVE-2025-21811 - nilfs2: protect access to buffers with no active references {CVE-2025-21811} * CVE-2025-39955 - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-39955} * CVE-2025-38702 - fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702} * CVE-2026-31500 - Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock {CVE-2026-31500} * CVE-2025-39911 - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911} * CVE-2025-38102 - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify {CVE-2025-38102} * CVE-2025-38565 - perf/core: Exit early on perf_mmap() fail {CVE-2025-38565} * CVE-2023-53153 - wifi: cfg80211: Fix use after free for wext {CVE-2023-53153} * CVE-2025-39866 - fs: writeback: fix use-after-free in __mark_inode_dirty() {CVE-2025-39866} * CVE-2025-38724 - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724} * CVE-2026-31581 - ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581} * CVE-2025-71082 - Bluetooth: btusb: revert use of devm_kzalloc in btusb {CVE-2025-71082} * CVE-2023-53510 - scsi: ufs: core: Fix handling of lrbp->cmd {CVE-2023-53510} * CVE-2026-31627 - i2c: s3c24xx: check the size of the SMBUS message before using it {CVE-2026-31627} * CVE-2026-31452 - ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452} * CVE-2026-23397 - nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397} * CVE-2025-71093 - e1000: fix OOB in e1000_tbi_should_accept() {CVE-2025-71093} * Bump ABI 4.4.0-284 Important TuxCare License Agreement CVE-2025-38377 CVE-2026-31452 CVE-2023-53254 CVE-2025-39911 CVE-2024-58072 CVE-2025-71082 CVE-2025-39866 CVE-2025-39901 CVE-2026-31627 CVE-2025-39686 CVE-2025-39955 CVE-2026-23397 CVE-2025-37879 CVE-2024-41013 CVE-2022-50169 CVE-2022-49934 CVE-2022-50279 CVE-2025-38702 CVE-2026-23001 CVE-2025-38102 CVE-2026-31500 CVE-2025-38724 CVE-2023-53510 CVE-2025-71091 CVE-2025-71093 CVE-2023-52796 CVE-2023-53153 CVE-2025-21811 CVE-2026-31581 CVE-2025-38565 CVE-2026-23191 CVE-2026-23281 CVE-2026-46300 CVE-2024-39467 CVE-2026-31527 CVE-2025-38117 Ubuntu 16.04 LTS * CVE-2026-53166 - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock {CVE-2026-53166} * CVE-2026-43499 - rtmutex: Use waiter::task instead of current in remove_waiter() {CVE-2026-43499} * Bump ABI 4.4.0-285 Important TuxCare License Agreement CVE-2026-43499 Ubuntu 16.04 LTS * Miscellaneous Ubuntu changes - [Packaging]: add tuxcare suffix Important TuxCare License Agreement CVE-2022-1419 CVE-2022-29581 CVE-2022-21499 CVE-2022-1966 CVE-2021-33656 CVE-2022-27223 CVE-2022-28388 CVE-2023-4459 CVE-2023-4387 CVE-2021-3506 CVE-2022-2586 CVE-2022-1679 CVE-2022-27666 CVE-2022-0847 CVE-2022-1734 CVE-2022-48619 CVE-2022-1652 CVE-2021-43975 CVE-2022-28390 CVE-2022-22942 CVE-2022-3202 CVE-2022-0001 CVE-2022-0492 CVE-2022-26490 CVE-2022-2588 CVE-2022-34918 CVE-2022-41858 CVE-2023-4385 CVE-2022-0435 CVE-2022-2977 CVE-2021-26401 CVE-2022-1974 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-194.205 ] Important TuxCare License Agreement CVE-2022-32296 CVE-2022-33742 CVE-2022-33740 CVE-2022-33741 CVE-2022-2318 CVE-2022-26365 CVE-2022-1012 CVE-2022-0812 CVE-2022-33744 Ubuntu 16.04 LTS * bionic/linux: 4.15.0-200.211 -proposed tracker (LP: #1997465) * CVE-2022-3239 - media: em28xx: initialize refcount before kref_get * CVE-2022-3524 - tcp/udp: Fix memory leak in ipv6_renew_options(). * CVE-2022-3564 - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu * CVE-2022-3565 - mISDN: fix use-after-free bugs in l1oip timer handlers * CVE-2022-3566 - tcp: Fix data races around icsk->icsk_af_ops. * CVE-2022-3567 - ipv6: annotate some data-races around sk->sk_prot - ipv6: Fix data races around sk->sk_prot. * CVE-2022-3594 - r8152: Rate limit overflow messages * CVE-2022-3621 - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() * CVE-2022-42703 - mm/rmap.c: don't reuse anon_vma if we just want a copy - mm: rmap: explicitly reset vma->anon_vma in unlink_anon_vmas() - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse Important TuxCare License Agreement CVE-2022-2153 CVE-2022-3594 CVE-2022-3524 CVE-2022-3565 CVE-2022-3028 CVE-2022-3621 CVE-2022-40768 CVE-2022-3564 CVE-2022-3629 CVE-2022-3635 CVE-2021-4159 CVE-2022-3567 CVE-2022-3566 CVE-2022-3239 CVE-2022-36879 CVE-2022-42703 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-206.217 ] * bionic/linux: 4.15.0-206.217 -proposed tracker (LP: #2004655) * CVE-2023-0461 - SAUCE: Fix inet_csk_listen_start after CVE-2023-0461 [ Ubuntu: 4.15.0-205.216 ] * bionic/linux: 4.15.0-205.216 -proposed tracker (LP: #2004414) * Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot - nfs4: Fix kmemleak when allocate slot failed - net: dsa: Fix possible memory leaks in dsa_loop_init() - nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() - net: fec: fix improper use of NETDEV_TX_BUSY - ata: pata_legacy: fix pdc20230_set_piomode() - net: sched: Fix use after free in red_enqueue() - ipvs: use explicitly signed chars - rose: Fix NULL pointer dereference in rose_send_frame() - mISDN: fix possible memory leak in mISDN_register_device() - isdn: mISDN: netjet: fix wrong check of device registration - btrfs: fix inode list leak during backref walking at resolve_indirect_refs() - btrfs: fix ulist leaks in error paths of qgroup self tests - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() - net: mdio: fix undefined behavior in bit shift for __mdiobus_register - net, neigh: Fix null-ptr-deref in neigh_table_clear() - media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE - media: dvb-frontends/drxk: initialize err to 0 - i2c: xiic: Add platform module alias - Bluetooth: L2CAP: Fix attempting to access uninitialized memory - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' - btrfs: fix type of parameter generation in btrfs_get_dentry - tcp/udp: Make early_demux back namespacified. - capabilities: fix potential memleak on error path from vfs_getxattr_alloc() - ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices - efi: random: reduce seed size to 32 bytes - parisc: Make 8250_gsc driver dependend on CONFIG_PARISC - parisc: Export iosapic_serial_irq() symbol for serial port driver - ext4: fix warning in 'ext4_da_release_space' - KVM: x86: Mask off reserved bits in CPUID.80000008H - KVM: x86: emulator: em_sysexit should update ctxt->mode - KVM: x86: emulator: introduce emulator_recalc_and_set_mode - KVM: x86: emulator: update the emulation mode after CR0 write - linux/const.h: prefix include guard of uapi/linux/const.h with _UAPI - linux/const.h: move UL() macro to include/linux/const.h - linux/bits.h: make BIT(), GENMASK(), and friends available in assembly - RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() - net: tun: fix bugs for oversize packet when napi frags enabled - ipvs: fix WARNING in __ip_vs_cleanup_batch() - ipvs: fix WARNING in ip_vs_app_net_cleanup() - ipv6: fix WARNING in ip6_route_net_exit_late() - parisc: Avoid printing the hardware path twice - HID: hyperv: fix possible memory leak in mousevsc_probe() - net: gso: fix panic on frag_list with mixed head alloc types - bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer - net: fman: Unregister ethernet device on removal - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK - net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() - hamradio: fix issue of dev reference count leakage in bpq_device_event() - drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network - tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header - dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() - drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() - net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() - ethernet: s2io: disable napi when start nic failed in s2io_card_up() - net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() - net: macvlan: fix memory leaks of macvlan_common_newlink - arm64: efi: Fix handling of misaligned runtime regions and drop warning - ALSA: hda: fix potential memleak in 'add_widget_node' - ALSA: usb-audio: Add quirk entry for M-Audio Micro - nilfs2: fix deadlock in nilfs_count_free_blocks() - drm/i915/dmabuf: fix sg_table handling in map_dma_buf - platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi - btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() - cert host tools: Stop complaining about deprecated OpenSSL functions - dmaengine: at_hdmac: Fix at_lli struct definition - dmaengine: at_hdmac: Don't start transactions at tx_submit level - dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors - dmaengine: at_hdmac: Don't allow CPU to reorder channel enable - dmaengine: at_hdmac: Fix impossible condition - dmaengine: at_hdmac: Check return code of dma_async_device_register - x86/cpu: Restore AMD's DE_CFG MSR after resume - selftests/futex: fix build for clang - drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid - ASoC: core: Fix use-after-free in snd_soc_exit() - serial: 8250_omap: remove wait loop from Errata i202 workaround - serial: 8250: omap: Flush PM QOS work on remove - tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send - ASoC: soc-utils: Remove __exit for snd_soc_util_exit() - block: sed-opal: kmalloc the cmd/resp buffers - parport_pc: Avoid FIFO port location truncation - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map - net: bgmac: Drop free_netdev() from bgmac_enet_remove() - mISDN: fix possible memory leak in mISDN_dsp_element_register() - mISDN: fix misuse of put_device() in mISDN_register_device() - net: caif: fix double disconnect client in chnl_net_open() - xen/pcpu: fix possible memory leak in register_pcpu() - drbd: use after free in drbd_create_device() - net/x25: Fix skb leak in x25_lapb_receive_frame() - cifs: Fix wrong return value checking when GETFLAGS - ftrace: Fix the possible incorrect kernel message - ftrace: Optimize the allocation for mcount entries - ftrace: Fix null pointer dereference in ftrace_add_mod() - ring_buffer: Do not deactivate non-existant pages - ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() - USB: serial: option: add Sierra Wireless EM9191 - USB: serial: option: remove old LARA-R6 PID - USB: serial: option: add u-blox LARA-R6 00B modem - USB: serial: option: add u-blox LARA-L6 modem - USB: serial: option: add Fibocom FM160 0x0111 composition - usb: add NO_LPM quirk for Realforce 87U Keyboard - usb: chipidea: fix deadlock in ci_otg_del_timer - iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() - iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() - iio: pressure: ms5611: changed hardcoded SPI speed to value limited - dm ioctl: fix misbehavior if list_versions races with module loading - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs - serial: 8250_lpss: Configure DMA also w/o DMA filter - mmc: core: properly select voltage range without power cycle - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() - nilfs2: fix use-after-free bug of ns_writer on remount - serial: 8250: Flush DMA Rx on RLSI - macvlan: enforce a consistent minimal mtu - tcp: cdg: allow tcp_cdg_release() to be called multiple times - kcm: avoid potential race in kcm_tx_work - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() - kcm: close race conditions on sk_receive_queue - 9p: trans_fd/p9_conn_cancel: drop client lock earlier - gfs2: Check sb_bsize_shift after reading superblock - gfs2: Switch from strlcpy to strscpy - 9p/trans_fd: always use O_NONBLOCK read/write - mm: fs: initialize fsdata passed to write_begin/write_end interface - ntfs: fix use-after-free in ntfs_attr_find() - ntfs: fix out-of-bounds read in ntfs_attr_find() - ntfs: check overflow when iterating ATTR_RECORDs - wifi: cfg80211: fix memory leak in query_regdb_file() - net: tun: Fix memory leaks of napi_get_frags - riscv: process: fix kernel info leakage - vmlinux.lds.h: Fix placement of '.data..decrypted' section - net: thunderbolt: Fix error handling in tbnet_init() - scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() - Input: i8042 - fix leaking of platform device on module removal - wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support - audit: fix undefined behavior in bit shift for AUDIT_BIT - wifi: mac80211: Fix ack frame idr leak when mesh has no route - spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run - MIPS: pic32: treat port as signed integer - af_key: Fix send_acquire race with pfkey_register - ARM: dts: am335x-pcm-953: Define fixed regulators in root node - bus: sunxi-rsb: Support atomic transfers - ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl - nfc/nci: fix race with opening and closing - net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() - 9p/fd: fix issue of list_del corruption in p9_fd_cancel() - ARM: mxs: fix memory leak in mxs_machine_init() - net/mlx4: Check retval of mlx4_bitmap_init - net/qla3xxx: fix potential memleak in ql3xxx_send() - xfrm: Fix ignored return value in xfrm6_init() - NFC: nci: fix memory leak in nci_rx_data_packet() - dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). - s390/dasd: fix no record found for raw_track_access - nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION - nfc: st-nci: fix memory leaks in EVT_TRANSACTION - net: thunderx: Fix the ACPI memory leak - s390/crashdump: fix TOD programmable field size - nios2: add FORCE for vmlinuz.gz - arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency - iio: light: apds9960: fix wrong register for gesture gain - iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails - kconfig: display recursive dependency resolution hint just once - nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty - Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode - serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() - xen/platform-pci: add missing free_irq() in error path - platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() - platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) - platform/x86: hp-wmi: Ignore Smart Experience App event - [Config] updateconfigs for INET_TABLE_PERTURB_ORDER - tcp: configurable source port perturb table size - net: usb: qmi_wwan: add Telit 0x103a composition - drm/amdgpu: always register an MMU notifier for userptr - iio: health: afe4403: Fix oob read in afe4403_read_raw - iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw - iio: light: rpr0521: add missing Kconfig dependencies - hwmon: (i5500_temp) fix missing pci_disable_device() - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails - of: property: decrement node refcount in of_fwnode_get_reference_args() - net/mlx5: Fix uninitialized variable bug in outlen_write() - can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() - can: cc770: cc770_isa_probe(): add missing free_cc770dev() - qlcnic: fix sleep-in-atomic-context bugs caused by msleep - net: phy: fix null-ptr-deref while probe() failed - net: net_netdev: Fix error handling in ntb_netdev_init_module() - net/9p: Fix a potential socket leak in p9_socket_open - dsa: lan9303: Correct stat name - net: hsr: Fix potential use-after-free - packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE - net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed - hwmon: (coretemp) Check for null before removing sysfs attrs - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() - perf: Add sample_flags to indicate the PMU-filled sample data - btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() - tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep" - nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() - x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 - arm64: Fix panic() when Spectre-v2 causes Spectre-BHB to re-allocate KVM vectors - arm64: errata: Fix KVM Spectre-v2 mitigation selection for Cortex-A57/A72 - efi: random: Properly limit the size of the random seed - ASoC: ops: Fix bounds check for _sx controls - pinctrl: single: Fix potential division by zero - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() - nvme: restrict management ioctls to admin - x86/tsx: Add a feature bit for TSX control MSR support - x86/pm: Add enumeration check before spec MSRs save/restore setup - x86/ioremap: Fix page aligned size calculation in __ioremap_caller() - mmc: sdhci: use FIELD_GET for preset value bit masks - mmc: sdhci: Fix voltage switch delay - proc: avoid integer type confusion in get_proc_long - proc: proc_skip_spaces() shouldn't think it is working on C strings - v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails - ipc/sem: Fix dangling sem_array access in semtimedop race - x86/nospec: Fix i386 RSB stuffing - Revert "x86/speculation: Change FILL_RETURN_BUFFER to work with objtool" - ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove - net: pch_gbe: fix pci device refcount leak while module exiting - Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() - Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() - bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() - iio: pressure: ms5611: fixed value compensation bug - arm: dts: rockchip: fix node name for hym8563 rtc - ARM: dts: rockchip: fix ir-receiver node names - ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels - ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation - ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 - ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event - ASoC: soc-pcm: Add NULL check in BE reparenting - regulator: twl6030: fix get status of twl6032 regulators - net: usb: qmi_wwan: add u-blox 0x1342 composition - xen/netback: do some code cleanup - xen/netback: don't call kfree_skb() with interrupts disabled - rcutorture: Automatically create initrd directory - media: v4l2-dv-timings.c: fix too strict blanking sanity checks - memcg: fix possible use-after-free in memcg_write_event_control() - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field - HID: hid-lg4ff: Add check for empty lbuf - HID: core: fix shift-out-of-bounds in hid_report_raw_event - ieee802154: cc2520: Fix error return code in cc2520_hw_init() - ca8210: Fix crash by zero initializing data - gpio: amd8111: Fix PCI device reference count leak - e1000e: Fix TX dispatch condition - igb: Allocate MSI-X vector when testing - Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() - net: encx24j600: Add parentheses to fix precedence - net: encx24j600: Fix invalid logic in reading of MISTAT register - net: mvneta: Prevent out of bounds read in mvneta_config_rss() - NFC: nci: Bounds check struct nfc_target arrays - net: stmmac: fix "snps,axi-config" node property parsing - net: hisilicon: Fix potential use-after-free in hisi_femac_rx() - net: hisilicon: Fix potential use-after-free in hix5hd2_rx() - tipc: Fix potential OOB in tipc_link_proto_rcv() - ethernet: aeroflex: fix potential skb leak in greth_init_rings() - net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() - ipv6: avoid use-after-free in ip6_fragment() - net: mvneta: Fix an out of bounds check - net: mvneta: Prevent out of bounds read in mvneta_config_rss() - i40e: Fix not setting default xps_cpus after reset - i40e: Fix for VF MAC address 0 - i40e: Disallow ip4 and ip6 l4_4_bytes - nvme initialize core quirks before calling nvme_init_subsystem - can: esd_usb: Allow REC and TEC to return to zero * CVE-2022-3628 - wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() * rdpru in ubuntu_kvm_unit_tests failed on B-4.15 node riccioli with FAIL: RDPRU raises #UD (LP: #1968681) - x86/cpufeatures: Add feature bit RDPRU on AMD - kvm: svm: Intercept RDPRU * NFS: client permission error after adding user to permissible group (LP: #2003053) - cred: add cred_fscmp() for comparing creds. - NFS: Clear the file access cache upon login - NFS: Judge the file access cache's timestamp in rcu path - NFS: Fix up a sparse warning * 5.15.0-58.64 breaks xen bridge networking (pvh domU) (LP: #2002889) - xen/netback: fix build warning * CVE-2023-0461 - net/ulp: prevent ULP without clone op from entering the LISTEN status * CVE-2022-3545 - nfp: fix use-after-free in area_cache_get() [ Ubuntu: 4.15.0-204.215 ] * bionic/linux: 4.15.0-204.215 -proposed tracker (LP: #2003522) * Revoke & rotate to new signing key (LP: #2002812) - [Packaging] Revoke and rotate to new signing key [ Ubuntu: 4.15.0-203.214 ] * bionic/linux: 4.15.0-203.214 -proposed tracker (LP: #2001876) * Packaging resync (LP: #1786013) - [Packaging] update helper scripts * Bionic update: upstream stable patchset 2022-12-01 (LP: #1998542) - Revert "x86/cpu: Add a steppings field to struct x86_cpu_id" - x86/cpufeature: Add facility to check for min microcode revisions - x86/cpufeature: Fix various quality problems in the <asm/cpu_device_hd.h> header - x86/devicetable: Move x86 specific macro out of generic code - x86/cpu: Add consistent CPU match macros - x86/cpu: Add a steppings field to struct x86_cpu_id - x86/entry: Remove skip_r11rcx - x86/cpufeatures: Move RETPOLINE flags to word 11 - x86/bugs: Report AMD retbleed vulnerability - x86/bugs: Add AMD retbleed= boot parameter - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value - x86/entry: Add kernel IBRS implementation - x86/bugs: Optimize SPEC_CTRL MSR writes - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() - x86/bugs: Report Intel retbleed vulnerability - entel_idle: Disable IBRS during long idle - x86/speculation: Change FILL_RETURN_BUFFER to work with objtool - x86/speculation: Add LFENCE to RSB fill sequence - x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n - x86/speculation: Fix firmware entry SPEC_CTRL handling - x86/speculation: Fix SPEC_CTRL write on SMT state change - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit - x86/speculation: Remove x86_spec_ctrl_mask - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS - KVM: VMX: Fix IBRS handling after vmexit - x86/speculation: Fill RSB on vmexit for IBRS - x86/common: Stamp out the stepping madness - x86/cpu/amd: Enumerate BTC_NO - x86/bugs: Add Cannon lake to RETBleed affected CPU list - x86/speculation: Disable RRSBA behavior - x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current - x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts - x86/speculation: Add RSB VM Exit protections - ocfs2: clear dinode links count in case of error - ocfs2: fix BUG when iput after ocfs2_mknod fails - x86/microcode/AMD: Apply the patch early on every logical thread - ata: ahci-imx: Fix MODULE_ALIAS - ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS - KVM: arm64: vgic: Fix exit condition in scan_its_table() - [Config] updateconfigs for ARM64_ERRATUM_1742098 - arm64: errata: Remove AES hwcap for COMPAT tasks - r8152: add PID for the Lenovo OneLink+ Dock - btrfs: fix processing of delayed data refs during backref walking - ACPI: extlog: Handle multiple records - HID: magicmouse: Do not set BTN_MOUSE on double report - net/atm: fix proc_mpc_write incorrect return value - net: hns: fix possible memory leak in hnae_ae_register() - iommu/vt-d: Clean up si_domain in the init_dmars() error path - media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls - ACPI: video: Force backlight native for more TongFang devices - ALSA: Use del_timer_sync() before freeing timer - ALSA: au88x0: use explicitly signed char - USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM - usb: dwc3: gadget: Don't set IMI for no_interrupt - usb: bdc: change state when port disconnected - usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller - xhci: Remove device endpoints from bandwidth list when freeing the device - tools: iio: iio_utils: fix digit calculation - iio: light: tsl2583: Fix module unloading - fbdev: smscufx: Fix several use-after-free bugs - mac802154: Fix LQI recording - drm/msm/hdmi: fix memory corruption with too many bridges - mmc: core: Fix kernel panic when remove non-standard SDIO card - kernfs: fix use-after-free in __kernfs_remove - s390/futex: add missing EX_TABLE entry to __futex_atomic_op() - Xen/gntdev: don't ignore kernel unmapping error - xen/gntdev: Prevent leaking grants - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages - net: ieee802154: fix error return code in dgram_bind() - drm/msm: Fix return type of mdp4_lvds_connector_mode_valid - arc: iounmap() arg is volatile - ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() - x86/unwind/orc: Fix unreliable stack dump with gcov - amd-xgbe: fix the SFP compliance codes check for DAC cables - amd-xgbe: add the bit rate quirk for Molex cables - kcm: annotate data-races around kcm->rx_psock - kcm: annotate data-races around kcm->rx_wait - net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY - tcp: fix indefinite deferral of RTO with SACK reneging - can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path - PM: hibernate: Allow hybrid sleep to work with s2idle - media: vivid: s_fbuf: add more sanity checks - media: vivid: dev->bitmap_cap wasn't freed in all cases - media: v4l2-dv-timings: add sanity checks for blanking values - media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' - i40e: Fix ethtool rx-flow-hash setting for X722 - i40e: Fix flow-type by setting GL_HASH_INSET registers - net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() - PM: domains: Fix handling of unavailable/disabled idle states - ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() - ALSA: aoa: Fix I2S device accounting - openvswitch: switch from WARN to pr_warn - net: ehea: fix possible memory leak in ehea_register_port() - can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive - media: venus: dec: Handle the case where find_format fails - Makefile.debug: re-enable debug info for .S files - drm/msm/dsi: fix memory corruption with too many bridges - perf auxtrace: Fix address filter symbol name match for modules - net: netsec: fix error handling in netsec_register_mdio() - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed - i40e: Fix VF hang when reset is triggered on another VF * Bionic update: upstream stable patchset 2022-11-15 (LP: #1996650) - of: fdt: fix off-by-one error in unflatten_dt_nodes() - gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx - drm/meson: Correct OSD1 global alpha value - parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM - ASoC: nau8824: Fix semaphore unbalance at error paths - regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe() - ALSA: hda/sigmatel: Keep power up while beep is enabled - net: usb: qmi_wwan: add Quectel RM520N - MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping() - mksysmap: Fix the mismatch of 'L0' symbols in System.map - video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write - ALSA: hda/sigmatel: Fix unused variable warning for beep power change - wifi: mac80211: Fix UAF in ieee80211_scan_rx() - USB: core: Fix RST error in hub.c - USB: serial: option: add Quectel BG95 0x0203 composition - USB: serial: option: add Quectel RM520N - ALSA: hda/tegra: set depop delay for tegra - ALSA: hda: add Intel 5 Series / 3400 PCI DID - mm/slub: fix to return errno if kmalloc() fails - arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma - netfilter: nf_conntrack_sip: fix ct_sip_walk_headers - netfilter: nf_conntrack_irc: Tighten matching on DCC message - iavf: Fix cached head and tail value for iavf_get_tx_pending - ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header - net: team: Unsync device addresses on ndo_stop - MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko - of: mdio: Add of_node_put() when breaking out of for_each_xx - netfilter: ebtables: fix memory leak when blob is malformed - can: gs_usb: gs_can_open(): fix race dev->can.state condition - perf kcore_copy: Do not check /proc/modules is unchanged - net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD - serial: Create uart_xmit_advance() - serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting - s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup - Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region - ext4: make directory inode spreading reflect flexbg size - nvmet: fix a use-after-free - i40e: Fix VF set max MTU size - i40e: Fix set max_tx_rate when it is lower than 1 Mbps - perf jit: Include program header in ELF files - workqueue: don't skip lockdep work dependency in cancel_work_sync() - mmc: moxart: fix 4-bit bus width and remove 8-bit bus width - mm/page_alloc: fix race condition between build_all_zonelists and page allocation - mm: prevent page_frag_alloc() from corrupting the memory - mm/migrate_device.c: flush TLB while holding PTL - soc: sunxi: sram: Actually claim SRAM regions - soc: sunxi: sram: Fix debugfs info for A64 SRAM C - Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time" - Input: melfas_mip4 - fix return value check in mip4_probe() - usbnet: Fix memory leak in usbnet_disconnect() - selftests: Fix the if conditions of in test_extra_filter() - uas: add no-uas quirk for Hiksemi usb_disk - usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS - uas: ignore UAS for Thinkplus chips - net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 - ntfs: fix BUG_ON in ntfs_lookup_inode_by_name() - nvme: add new line after variable declatation - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices - clk: iproc: Minor tidy up of iproc pll data structures - clk: iproc: Do not rely on node name for correct PLL setup - Makefile.extrawarn: Move -Wcast-function-type-strict to W=1 - ARM: fix function graph tracer and unwinder dependencies - [Config] updateconfigs for UNWINDER_ARM - dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property - dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure - ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer - net/ieee802154: fix uninit value bug in dgram_sendmsg - um: Cleanup syscall_handler_t cast in syscalls_32.h - um: Cleanup compiler warning in arch/x86/um/tls_32.c - usb: mon: make mmapped memory read only - USB: serial: ftdi_sio: fix 300 bps rate for SIO - mmc: core: Replace with already defined values for readability - mmc: core: Terminate infinite loop in SD-UHS voltage switch - rpmsg: qcom: glink: replace strncpy() with strscpy_pad() - nilfs2: fix leak of nilfs_root in case of writer thread creation failure - nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure - ceph: don't truncate file in atomic_open - random: clamp credited irq bits to maximum mixed - ALSA: hda: Fix position reporting on Poulsbo - USB: serial: qcserial: add new usb-id for Dell branded EM7455 - random: restore O_NONBLOCK support - random: avoid reading two cache lines on irq randomness - wifi: mac80211_hwsim: avoid mac80211 warning on bad rate - Input: xpad - add supported devices as contributed on github - Input: xpad - fix wireless 360 controller breaking after suspend - random: use expired timer rather than wq for mixing fast pool - ALSA: oss: Fix potential deadlock at unregistration - ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() - ALSA: usb-audio: Fix potential memory leaks - ALSA: usb-audio: Fix NULL dererence at error path - iio: dac: ad5593r: Fix i2c read protocol requirements - fs: dlm: fix race between test_bit() and queue_work() - fs: dlm: handle -EBUSY first in lock arg validation - HID: multitouch: Add memory barriers - quota: Check next/prev free block number after reading from quota file - regulator: qcom_rpm: Fix circular deferral regression - Revert "fs: check FMODE_LSEEK to control internal pipe splicing" - parisc: fbdev/stifb: Align graphics memory size to 4MB - UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK - PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge - fbdev: smscufx: Fix use-after-free in ufx_ops_open() - nilfs2: fix use-after-free bug of struct nilfs_root - ext4: fix null-ptr-deref in ext4_write_info - ext4: make ext4_lazyinit_thread freezable - ext4: place buffer head allocation before handle start - livepatch: fix race between fork and KLP transition - ftrace: Properly unset FTRACE_HASH_FL_MOD - ring-buffer: Allow splice to read previous partially read pages - ring-buffer: Check pending waiters when doing wake ups as well - ring-buffer: Fix race between reset page and reading page - KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility - KVM: nVMX: Unconditionally purge queued/injected events on nested "exit" - gcov: support GCC 12.1 and newer compilers - selinux: use "grep -E" instead of "egrep" - sh: machvec: Use char[] for section boundaries - wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() - wifi: mac80211: allow bw change during channel switch in mesh - wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() - spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() - spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() - wifi: rtl8xxxu: Fix skb misuse in TX queue selection - wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration - net: fs_enet: Fix wrong check in do_pd_setup - spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe - netfilter: nft_fib: Fix for rpath check with VRF devices - spi: s3c64xx: Fix large transfers with DMA - vhost/vsock: Use kvmalloc/kvfree for larger packets. - tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited - net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks() - bnx2x: fix potential memory leak in bnx2x_tpa_stop() - drm/mipi-dsi: Detach devices when removing the host - platform/x86: msi-laptop: Fix old-ec check for backlight registering - platform/x86: msi-laptop: Fix resource cleanup - drm/bridge: megachips: Fix a null pointer dereference bug - mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() - ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API - ALSA: dmaengine: increment buffer pointer atomically - mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() - memory: of: Fix refcount leak bug in of_get_ddr_timings() - soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() - soc: qcom: smem_state: Add refcounting for the 'state->of_node' - ARM: dts: turris-omnia: Fix mpp26 pin name and comment - ARM: dts: kirkwood: lsxl: fix serial line - ARM: dts: kirkwood: lsxl: remove first ethernet port - ARM: Drop CMDLINE_* dependency on ATAGS - ARM: dts: exynos: fix polarity of VBUS GPIO of Origen - iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX - iio: inkern: only release the device node when done with it - iio: ABI: Fix wrong format of differential capacitance channel ABI. - clk: oxnas: Hold reference returned by of_get_parent() - clk: tegra: Fix refcount leak in tegra210_clock_init - clk: tegra: Fix refcount leak in tegra114_clock_init - clk: tegra20: Fix refcount leak in tegra20_clock_init - HSI: omap_ssi: Fix refcount leak in ssi_probe - HSI: omap_ssi_port: Fix dma_map_sg error check - media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop - tty: xilinx_uartps: Fix the ignore_status - media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init - RDMA/rxe: Fix "kernel NULL pointer dereference" error - RDMA/rxe: Fix the error caused by qp->sk - dyndbg: fix module.dyndbg handling - dyndbg: let query-modname override actual module name - ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() - ata: fix ata_id_has_devslp() - ata: fix ata_id_has_ncq_autosense() - ata: fix ata_id_has_dipm() - md/raid5: Ensure stripe_fill happens on non-read IO with journal - xhci: Don't show warning for reinit on known broken suspend - usb: gadget: function: fix dangling pnp_string in f_printer.c - drivers: serial: jsm: fix some leaks in probe - phy: qualcomm: call clk_disable_unprepare in the error handling - firmware: google: Test spinlock on panic path to avoid lockups - serial: 8250: Fix restoring termios speed after suspend - fsi: core: Check error number after calling ida_simple_get - mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() - mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() - mfd: lp8788: Fix an error handling path in lp8788_probe() - mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() - mfd: sm501: Add check for platform_driver_register() - dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() - spmi: pmic-arb: correct duplicate APID to PPID mapping logic - clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration - clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe - mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg - powerpc/math_emu/efp: Include module.h - powerpc/sysdev/fsl_msi: Add missing of_node_put() - powerpc/pci_dn: Add missing of_node_put() - powerpc/powernv: add missing of_node_put() in opal_export_attrs() - powerpc: Fix SPE Power ISA properties for e500v1 platforms - iommu/omap: Fix buffer overflow in debugfs - iommu/iova: Fix module config properly - crypto: cavium - prevent integer overflow loading firmware - f2fs: fix race condition on setting FI_NO_EXTENT flag - ACPI: video: Add Toshiba Satellite/Portege Z830 quirk - MIPS: BCM47XX: Cast memcmp() of function to (void *) - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue - thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash - NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data - wifi: brcmfmac: fix invalid address access when enabling SCAN log level - openvswitch: Fix double reporting of drops in dropwatch - openvswitch: Fix overreporting of drops in dropwatch - tcp: annotate data-race around tcp_md5sig_pool_populated - wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() - xfrm: Update ipcomp_scratches with NULL when freed - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() - Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times - can: bcm: check the result of can_send() in bcm_can_tx() - wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 - wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 - wifi: rt2x00: set SoC wmac clock register - wifi: rt2x00: correctly set BBP register 86 for MT7620 - net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory - Bluetooth: L2CAP: Fix user-after-free - drm: Use size_t type for len variable in drm_copy_field() - drm: Prevent drm_copy_field() to attempt copying a NULL pointer - drm/vc4: vec: Fix timings for VEC modes - platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading - drm/amdgpu: fix initial connector audio value - ARM: dts: imx7d-sdb: config the max pressure for tsc2046 - ARM: dts: imx6q: add missing properties for sram - ARM: dts: imx6dl: add missing properties for sram - ARM: dts: imx6qp: add missing properties for sram - ARM: dts: imx6sl: add missing properties for sram - media: cx88: Fix a null-ptr-deref bug in buffer_prepare() - scsi: 3w-9xxx: Avoid disabling device if failing to enable it - nbd: Fix hung when signal interrupts nbd_start_device_ioctl() - HID: roccat: Fix use-after-free in roccat_read() - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d - usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() - usb: musb: Fix musb_gadget.c rxstate overflow bug - Revert "usb: storage: Add quirk for Samsung Fit flash" - usb: idmouse: fix an uninit-value in idmouse_open - perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc - net: ieee802154: return -EINVAL for unknown addr type - net/ieee802154: don't warn zero-sized raw_sendmsg() - ext4: continue to expand file system when the target size doesn't reach - md: Replace snprintf with scnprintf - efi: libstub: drop pointless get_memory_map() call - inet: fully convert sk->sk_rx_dst to RCU rules - thermal: intel_powerclamp: Use first online CPU as control_cpu - mtd: rawnand: atmel: Unmap streaming DMA mappings - drm: bridge: adv7511: fix CEC power down control register offset - ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe - ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe - ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe - clk: berlin: Add of_node_put() for of_get_parent() - mtd: devices: docg3: check the return value of devm_ioremap() in the probe Critical TuxCare License Agreement CVE-2022-4378 CVE-2022-29900 CVE-2022-41850 CVE-2022-3628 CVE-2021-4197 CVE-2022-26373 CVE-2022-43750 CVE-2022-3640 CVE-2022-41849 CVE-2022-3545 CVE-2022-3061 CVE-2022-39188 CVE-2022-3643 CVE-2022-40307 CVE-2022-20369 CVE-2022-42328 CVE-2022-28356 CVE-2022-49846 CVE-2022-42896 CVE-2022-3649 CVE-2022-29901 CVE-2022-2663 CVE-2022-45934 CVE-2023-0461 CVE-2022-3586 CVE-2022-42895 CVE-2022-39842 CVE-2021-45868 CVE-2021-3640 CVE-2022-3646 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-208.219 ] * bionic/linux: 4.15.0-208.219 -proposed tracker (LP: #2012097) * NFS deathlock with last Kernel 5.4.0-144.161 and 5.15.0-67.74 (LP: #2009325) - NFS: Correct timing for assigning access cache timestamp [ Ubuntu: 4.15.0-207.218 ] * bionic/linux: 4.15.0-207.218 -proposed tracker (LP: #2008419) * rtcpie in timers from ubuntu_kernel_selftests randomly failing (LP: #1814234) - SAUCE: selftest: rtctest: Force passing unreliable subtest * btrfs/154: rename fails with EOVERFLOW when calculating item size during item key collision (LP: #2004132) - btrfs: correctly calculate item size used when item key collision happens * CVE-2021-3669 - ipc: replace costly bailout check in sysvipc_find_ipc() * Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403) - libtraceevent: Fix build with binutils 2.35 - once: Fix panic when module unload - once: add DO_ONCE_SLOW() for sleepable contexts - mm/khugepaged: fix GUP-fast interaction by sending IPI - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths - block: unhash blkdev part inode when the part is deleted - ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() - can: sja1000: fix size of OCR_MODE_MASK define - can: mcba_usb: Fix termination command argument - ASoC: ops: Correct bounds check for second channel on SX controls - perf script python: Remove explicit shebang from tests/attr.c - udf: Discard preallocation before extending file with a hole - udf: Drop unused arguments of udf_delete_aext() - udf: Fix preallocation discarding at indirect extent boundary - udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size - udf: Fix extending file within last block - usb: gadget: uvc: Prevent buffer overflow in setup handler - USB: serial: option: add Quectel EM05-G modem - USB: serial: cp210x: add Kamstrup RF sniffer PIDs - igb: Initialize mailbox message for VF reset - net: loopback: use NET_NAME_PREDICTABLE for name_assign_type - usb: musb: remove extra check in musb_gadget_vbus_draw - ARM: dts: qcom: apq8064: fix coresight compatible - drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static - arm: dts: spear600: Fix clcd interrupt - soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe - arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name - ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port - ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port - ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port - ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port - ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port - ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port - ARM: dts: turris-omnia: Add ethernet aliases - ARM: dts: turris-omnia: Add switch port 6 node - pstore/ram: Fix error return code in ramoops_probe() - ARM: mmp: fix timer_read delay - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP - tpm/tpm_crb: Fix error message in __crb_relinquish_locality() - cpuidle: dt: Return the correct numbers of parsed idle states - alpha: fix syscall entry in !AUDUT_SYSCALL case - PM: hibernate: Fix mistake in kerneldoc comment - fs: don't audit the capability check in simple_xattr_list() - perf: Fix possible memleak in pmu_dev_alloc() - timerqueue: Use rb_entry_safe() in timerqueue_getnext() - ocfs2: fix memory leak in ocfs2_stack_glue_init() - MIPS: vpe-mt: fix possible memory leak while module exiting - MIPS: vpe-cmp: fix possible memory leak while module exiting - PNP: fix name memory leak in pnp_alloc_dev() - irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value - lib/notifier-error-inject: fix error when writing -errno to debugfs file - rapidio: fix possible name leaks when rio_add_device() fails - rapidio: rio: fix possible name leak in rio_register_mport() - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix - x86/xen: Fix memory leak in xen_init_lock_cpu() - platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() - MIPS: BCM63xx: Add check for NULL for clk in clk_enable - fs: sysv: Fix sysv_nblocks() returns wrong value - rapidio: fix possible UAF when kfifo_alloc() fails - eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD - hfs: Fix OOB Write in hfs_asc2mac - rapidio: devices: fix missing put_device in mport_cdev_open - wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() - wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() - media: i2c: ad5820: Fix error path - spi: Update reference to struct spi_controller - media: vivid: fix compose size exceed boundary - mtd: Fix device name leak when register device failed in add_mtd_device() - media: camss: Clean up received buffers on failed start of streaming - drm/radeon: Add the missed acpi_put_table() to fix memory leak - ASoC: pxa: fix null-pointer dereference in filter() - regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() - ima: Fix misuse of dereference of pointer in template_desc_init_fields() - wifi: ath10k: Fix return value in ath10k_pci_init() - mtd: lpddr2_nvm: Fix possible null-ptr-deref - Input: elants_i2c - properly handle the reset GPIO when power is off - media: solo6x10: fix possible memory leak in solo_sysfs_init() - media: platform: exynos4-is: Fix error handling in fimc_md_init() - HID: hid-sensor-custom: set fixed size for custom attributes - ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT - clk: rockchip: Fix memory leak in rockchip_clk_register_pll() - mtd: maps: pxa2xx-flash: fix memory leak in probe - media: imon: fix a race condition in send_packet() - pinctrl: pinconf-generic: add missing of_node_put() - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() - media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC - NFSv4.2: Fix a memory stomp in decode_attr_security_label - NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn - ALSA: asihpi: fix missing pci_disable_device() - drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() - drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() - ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe - bonding: uninitialized variable in bond_miimon_inspect() - regulator: core: fix module refcount leak in set_supply() - media: saa7164: fix missing pci_disable_device() - ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt - SUNRPC: Fix missing release socket in rpc_sockname() - NFSv4.x: Fail client initialisation if state manager thread can't run - mmc: moxart: fix return value check of mmc_add_host() - mmc: mxcmmc: fix return value check of mmc_add_host() - mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() - mmc: toshsd: fix return value check of mmc_add_host() - mmc: vub300: fix return value check of mmc_add_host() - mmc: wmt-sdmmc: fix return value check of mmc_add_host() - mmc: via-sdmmc: fix return value check of mmc_add_host() - mmc: wbsd: fix return value check of mmc_add_host() - mmc: mmci: fix return value check of mmc_add_host() - media: c8sectpfe: Add of_node_put() when breaking out of loop - media: coda: Add check for dcoda_iram_alloc - media: coda: Add check for kmalloc - clk: samsung: Fix memory leak in _samsung_clk_register_pll() - wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h - wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() - blktrace: Fix output non-blktrace event when blk_classic option enabled - net: vmw_vsock: vmci: Check memcpy_from_msg() - net: defxx: Fix missing err handling in dfx_init() - drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() - ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() - net: farsync: Fix kmemleak when rmmods farsync - net/tunnel: wait until all sk_user_data reader finish before releasing the sock - net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() - net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() - net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() - net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() - hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() - net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() - net: amd-xgbe: Check only the minimum speed for active/passive cables - net: lan9303: Fix read error execution path - ntb_netdev: Use dev_kfree_skb_any() in interrupt context - Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() - Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() - Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() - Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() - Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() - Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() - stmmac: fix potential division by 0 - apparmor: fix a memleak in multi_transaction_new() - PCI: Check for alloc failure in pci_request_irq() - RDMA/hfi: Decrease PCI device reference count in error path - RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed - scsi: hpsa: Fix error handling in hpsa_add_sas_host() - scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() - scsi: fcoe: Fix possible name leak when device_register() fails - scsi: ipr: Fix WARNING in ipr_init() - scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails - scsi: snic: Fix possible UAF in snic_tgt_create() - RDMA/hfi1: Fix error return code in parse_platform_config() - orangefs: Fix sysfs not cleanup when dev init failed - crypto: img-hash - Fix variable dereferenced before check 'hdev->req' - hwrng: amd - Fix PCI device refcount leak - hwrng: geode - Fix PCI device refcount leak - IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces - drivers: dio: fix possible memory leak in dio_init() - class: fix possible memory leak in __class_register() - vfio: platform: Do not pass return buffer to ACPI _RST method - uio: uio_dmem_genirq: Fix missing unlock in irq configuration - uio: uio_dmem_genirq: Fix deadlock between irq config and handling - usb: fotg210-udc: Fix ages old endianness issues - staging: vme_user: Fix possible UAF in tsi148_dma_list_add - serial: amba-pl011: avoid SBSA UART accessing DMACR register - serial: pch: Fix PCI device refcount leak in pch_request_dma() - serial: sunsab: Fix error handling in sunsab_init() - test_firmware: fix memory leak in test_firmware_init() - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os - cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() - cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() - drivers: mcb: fix resource leak in mcb_probe() - mcb: mcb-parse: fix error handing in chameleon_parse_gdd() - chardev: fix error handling in cdev_device_add() - i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe - staging: rtl8192u: Fix use after free in ieee80211_rx() - staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() - vme: Fix error not catched in fake_init() - i2c: ismt: Fix an out-of-bounds bug in ismt_access() - usb: storage: Add check for kcalloc - fbdev: ssd1307fb: Drop optional dependency - fbdev: pm2fb: fix missing pci_disable_device() - fbdev: via: Fix error in via_core_init() - fbdev: vermilion: decrease reference count in error path - fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() - HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() - HSI: omap_ssi_core: fix possible memory leak in ssi_probe() - power: supply: fix residue sysfs file in error handle route of __power_supply_register() - HSI: omap_ssi_core: Fix error handling in ssi_init() - include/uapi/linux/swab: Fix potentially missing __always_inline - rtc: snvs: Allow a time difference on clock register read - iommu/amd: Fix pci device refcount leak in ppr_notifier() - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() - macintosh: fix possible memory leak in macio_add_one_device() - macintosh/macio-adb: check the return value of ioremap() - powerpc/52xx: Fix a resource leak in an error handling path - cxl: Fix refcount leak in cxl_calc_capp_routing - powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() - powerpc/perf: callchain validate kernel stack pointer bounds - powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() - powerpc/hv-gpci: Fix hv_gpci event list - selftests/powerpc: Fix resource leaks - rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure - mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() - mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() - mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() - nfc: pn533: Clear nfc_target before being used - r6040: Fix kmemleak in probe and remove - openvswitch: Fix flow lookup to use unmasked key - skbuff: Account for tail adjustment during pull operations - net_sched: reject TCF_EM_SIMPLE case for complex ematch module - myri10ge: Fix an error handling path in myri10ge_probe() - net: stream: purge sk_error_queue in sk_stream_kill_queues() - binfmt_misc: fix shift-out-of-bounds in check_special_flags - fs: jfs: fix shift-out-of-bounds in dbAllocAG - udf: Avoid double brelse() in udf_rename() - fs: jfs: fix shift-out-of-bounds in dbDiscardAG - ACPICA: Fix error code path in acpi_ds_call_control_method() - nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() - acct: fix potential integer overflow in encode_comp_t() - hfs: fix OOB Read in __hfs_brec_find - wifi: ath9k: verify the expected usb_endpoints are present - wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out - ASoC: codecs: rt298: Add quirk for KBL-R RVP platform - ipmi: fix memleak when unload ipmi driver - bpf: make sure skb->len != 0 when redirecting to a tunneling device - net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() - hamradio: baycom_epp: Fix return type of baycom_send_packet() - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() - igb: Do not free q_vector unless new one was allocated - s390/ctcm: Fix return type of ctc{mp,}m_tx() - s390/netiucv: Fix return type of netiucv_tx() - s390/lcs: Fix return type of lcs_start_xmit() - drm/sti: Use drm_mode_copy() - md/raid1: stop mdx_raid1 thread when raid1 array run failed - mrp: introduce active flags to prevent UAF when applicant uninit - ppp: associate skb with a device at tx - media: dvb-frontends: fix leak of memory fw - media: dvbdev: adopts refcnt to avoid UAF - media: dvb-usb: fix memory leak in dvb_usb_adapter_init() - blk-mq: fix possible memleak when register 'hctx' failed - mmc: f-sdh30: Add quirks for broken timeout clock capability - media: si470x: Fix use-after-free in si470x_int_in_callback() - clk: st: Fix memory leak in st_of_quadfs_setup() - drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() - drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() - orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() - ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() - ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() - ASoC: wm8994: Fix potential deadlock - ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() - ASoC: rt5670: Remove unbalanced pm_runtime_put() - pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion - pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES - usb: dwc3: core: defer probe on ulpi_read_id timeout - HID: wacom: Ensure bootloader PID is usable in hidraw mode - reiserfs: Add missing calls to reiserfs_security_free() - iio: adc: ad_sigma_delta: do not use internal iio_dev lock - gcov: add support for checksum field - media: dvbdev: fix refcnt bug - powerpc/rtas: avoid device tree lookups in rtas_os_term() - powerpc/rtas: avoid scheduling in rtas_os_term() - HID: plantronics: Additional PIDs for double volume key presses quirk - hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount - ALSA: line6: correct midi status byte when receiving data from podxt - ALSA: line6: fix stack overflow in line6_midi_transmit - pnode: terminate at peers of source - md: fix a crash in mempool_free - mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING - tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak - tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak - media: stv0288: use explicitly signed char - ktest.pl minconfig: Unset configs instead of just removing them - ARM: ux500: do not directly dereference __iomem - selftests: Use optional USERCFLAGS and USERLDFLAGS - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort - dm thin: Use last transaction's pmd->root when commit failed - dm thin: Fix UAF in run_timer_softirq() - dm cache: Fix UAF in destroy() - dm cache: set needs_check flag after aborting metadata - x86/microcode/intel: Do not retry microcode reloading on the APs - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line - ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod - media: dvb-core: Fix double free in dvb_register_device() - cifs: fix confusing debug message - ima: Fix a potential NULL pointer access in ima_restore_measurement_list - PCI: Fix pci_device_is_present() for VFs by checking PF - PCI/sysfs: Fix double free in error path - crypto: n2 - add missing hash statesize - iommu/amd: Fix ivrs_acpihid cmdline parsing code - parisc: led: Fix potential null-ptr-deref in start_task() - device_cgroup: Roll back to original exceptions after copy failure - drm/connector: send hotplug uevent on connector cleanup - drm/vmwgfx: Validate the box size for the snooped cursor - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop - ext4: fix undefined behavior in bit shift for ext4_check_flag_values - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode - ext4: init quota for 'old.inode' in 'ext4_rename' - ext4: fix error code return to user-space in ext4_get_branch() - ext4: avoid BUG_ON when creating xattrs - ext4: fix inode leak in ext4_xattr_inode_create() on an error path - ext4: initialize quota before expanding inode in setproject ioctl - ext4: avoid unaccounted block allocation when expanding inode - ext4: allocate extended attribute value in vmalloc area - SUNRPC: ensure the matching upcall is in-flight upon downcall - bpf: pull before calling skb_postpull_rcsum() - qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure - nfc: Fix potential resource leaks - net: amd-xgbe: add missed tasklet_kill - net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe - net: sched: atm: dont intepret cls results when asked to drop - usb: rndis_host: Secure rndis_query check against int overflow - caif: fix memory leak in cfctrl_linkup_request() - udf: Fix extension of the last extent in the file - nfsd: fix handling of readdir in v4root vs. mount upcall timeout - hfs/hfsplus: use WARN_ON for sanity check - hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling - parisc: Align parisc MADV_XXX constants with all other architectures - driver core: Fix bus_type.match() error handling in __driver_attach() - ravb: Fix "failed to switch device to config mode" message during unbind - net: sched: disallow noqueue for qdisc classes - docs: Fix the docs build with Sphinx 6.0 - perf auxtrace: Fix address filter duplicate symbol selection - s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() - platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames - netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. - x86/boot: Avoid using Intel mnemonics in AT&T syntax asm - EDAC/device: Fix period calculation in edac_device_reset_delay_period() - regulator: da9211: Use irq handler when ready - hvc/xen: lock console list traversal - nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() - Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout" - selftests/ftrace: event_triggers: wait longer for test_event_enable - debugfs: fix error when writing negative value to atomic_t debugfs file - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() - relay: fix type mismatch when allocating memory in relay_create_buf() - wifi: rtl8xxxu: Fix reading the vendor of combo chips - media: dvb-core: Fix ignored return value in dvb_register_frontend() - wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails - mmc: atmel-mci: fix return value check of mmc_add_host() - mmc: meson-gx: fix return value check of mmc_add_host() - net: amd-xgbe: Fix logic around active and passive cables - apparmor: fix lockdep warning when removing a namespace - scsi: hpsa: Fix possible memory leak in hpsa_init_one() - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. - serial: altera_uart: fix locking in polling mode - usb: gadget: f_hid: fix refcount leak on error path - perf symbol: correction while adjusting symbol - rxrpc: Fix missing unlock in rxrpc_do_sendmsg() - media: dvbdev: fix build warning due to comments - ata: ahci: Fix PCS quirk application for suspend - SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails - binfmt: Fix error return code in load_elf_fdpic_binary() - ext4: fix corruption when online resizing a 1K bigalloc fs - media: s5p-mfc: Fix to handle reference queue during finishing - media: s5p-mfc: Clear workbit to handle error condition - media: s5p-mfc: Fix in register read and write for H264 - dm thin: resume even if in FAIL mode - mbcache: don't reclaim used entries - ext4: remove EA inode entry from mbcache on inode eviction - usb: ulpi: defer ulpi_register on ulpi_read_id timeout - net/mlx5: Fix ptp max frequency adjustment range - drm/virtio: Fix GEM handle creation UAF - arm64: cmpxchg_double*: hazard against entire exchange variable * Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403) // CVE-2023-0266 was assigned for this issue. - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF * Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403) // CVE-2022-41218 is assigned to those bugs above. - media: dvb-core: Fix UAF due to refcount races at releasing * CVE-2023-23559 - wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid * CVE-2023-0045 - x86/bugs: Flush IBP in ib_prctl_set() Important TuxCare License Agreement CVE-2023-0266 CVE-2023-23559 CVE-2023-0045 CVE-2022-41218 CVE-2021-3669 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-209.220 ] * bionic/linux: 4.15.0-209.220 -proposed tracker (LP: #2011989) * CVE-2023-26545 - net: mpls: fix stale pointer if allocation fails during device rename * CVE-2023-1281 - rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer() - net/sched: tcindex: update imperfect hash filters respecting rcu * CVE-2022-3903 - USB: add usb_control_msg_send() and usb_control_msg_recv() - USB: correct API of usb_control_msg_send/recv - USB: move snd_usb_pipe_sanity_check into the USB core - media: mceusb: Use new usb_control_msg_*() routines * Bionic update: upstream stable patchset 2023-03-03 (LP: #2009237) - pNFS/filelayout: Fix coalescing test for single DS - net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats - RDMA/srp: Move large values to a new enum for gcc13 - f2fs: let's avoid panic if extent_tree is not created - nilfs2: fix general protection fault in nilfs_btree_insert() - xhci-pci: set the dma max_seg_size - usb: xhci: Check endpoint is valid before dereferencing it - prlimit: do_prlimit needs to have a speculation check - USB: serial: option: add Quectel EM05-G (GR) modem - USB: serial: option: add Quectel EM05-G (CS) modem - USB: serial: option: add Quectel EM05-G (RS) modem - USB: serial: option: add Quectel EC200U modem - USB: serial: option: add Quectel EM05CN (SG) modem - USB: serial: option: add Quectel EM05CN modem - USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 - usb: core: hub: disable autosuspend for TI TUSB8041 - USB: serial: cp210x: add SCALANCE LPE-9000 device id - usb: host: ehci-fsl: Fix module alias - usb: gadget: g_webcam: Send color matching descriptor per frame - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() - usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 - serial: pch_uart: Pass correct sg to dma_unmap_sg() - serial: atmel: fix incorrect baudrate setup - gsmi: fix null-deref in gsmi_get_variable - comedi: adv_pci1760: Fix PWM instruction handling - ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' - HID: intel_ish-hid: Add check for ishtp_dma_tx_map - EDAC/highbank: Fix memory leak in highbank_mc_probe() - tomoyo: fix broken dependency on *.conf.default - IB/hfi1: Reject a zero-length user expected buffer - IB/hfi1: Reserve user expected TIDs - affs: initialize fsdata in affs_truncate() - amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent - phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() - net: nfc: Fix use-after-free in local_cleanup() - net: usb: sr9700: Handle negative len - net: mdio: validate parameter addr in mdiobus_get_phy() - HID: check empty report_list in hid_validate_values() - usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait - usb: gadget: f_fs: Ensure ep0req is dequeued before free_request - net: mlx5: eliminate anonymous module_init & module_exit - dmaengine: Fix double increment of client_count in dma_chan_get() - HID: betop: check shape of output reports - w1: fix deadloop in __w1_remove_master_device() - w1: fix WARNING after calling w1_process() - fs: reiserfs: remove useless new_opts in reiserfs_remount - Bluetooth: hci_sync: cancel cmd_timer if hci_open failed - scsi: hpsa: Fix allocation size for scsi_host_alloc() - module: Don't wait for GOING modules - tracing: Make sure trace_printk() can output as soon as it can be used - ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment - EDAC/device: Respect any driver-supplied workqueue polling value - netlink: annotate data races around dst_portid and dst_group - netlink: annotate data races around sk_state - netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE - netrom: Fix use-after-free of a listening socket. - sctp: fail if no bound addresses can be used for a given scope - net: ravb: Fix possible hang if RIS2_QFF1 happen - net/tg3: resolve deadlock in tg3_reset_task() during EEH - Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode" - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL - xen: Fix up build warning with xen_init_time_ops() reference - x86/asm: Fix an assembler warning with current binutils - x86/entry/64: Add instruction suffix to SYSRET - sysctl: add a new register_sysctl_init() interface - panic: unset panic_on_warn inside panic() - exit: Add and use make_task_dead. - objtool: Add a missing comma to avoid string concatenation - hexagon: Fix function name in die() - h8300: Fix build errors from do_exit() to make_task_dead() transition - ia64: make IA64_MCA_RECOVERY bool instead of tristate - exit: Put an upper limit on how often we can oops - exit: Expose "oops_count" to sysfs - exit: Allow oops_limit to be disabled - panic: Consolidate open-coded panic_on_warn checks - panic: Introduce warn_limit - panic: Expose "warn_count" to sysfs - exit: Use READ_ONCE() for all oops/warn limit reads - mm: kvmalloc does not fallback to vmalloc for incompatible gfp flags - ipv6: ensure sane device mtu in tunnels - usb: host: xhci-plat: add wakeup entry at sysfs - amd-xgbe: Delay AN timeout during KR training - tcp: avoid the lookup process failing to get sk in ehash table - net: fix UaF in netns ops registration error path - netlink: annotate data races around nlk->portid - ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() * rtcpie in timers from ubuntu_kernel_selftests randomly failing (LP: #1814234) - SAUCE: selftest: rtctest: Fix force-passing unreliable subtest Important TuxCare License Agreement CVE-2023-1281 CVE-2023-26545 CVE-2023-0458 CVE-2022-3903 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-210.221 ] * bionic/linux: 4.15.0-210.221 -proposed tracker (LP: #2016738) * CVE-2023-1829 - net/sched: Retire tcindex classifier - [Config]: Make sure CONFIG_NET_CLS_TCINDEX is not available Important TuxCare License Agreement CVE-2023-1829 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-211.222 ] * bionic/linux: 4.15.0-211.222 -proposed tracker (LP: #2016623) * Debian autoreconstruct Fix restoration of execute permissions (LP: #2015498) - [Debian] autoreconstruct - fix restoration of execute permissions * kernel: fix __clear_user() inline assembly constraints (LP: #2013088) - s390/uaccess: add missing earlyclobber annotations to __clear_user() * Fix selftests/ftracetests/Meta-selftests (LP: #2006453) - selftests/ftrace: Fix bash specific "==" operator * Bionic update: upstream stable patchset 2023-04-05 (LP: #2015399) - firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region - bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() - netrom: Fix use-after-free caused by accept on already connected socket - squashfs: harden sanity check in squashfs_read_xattr_id_table - sctp: do not check hb_timer.expires when resetting hb_timer - net: openvswitch: fix flow memory leak in ovs_flow_cmd_new - scsi: target: core: Fix warning on RT kernels - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress - net/x25: Fix to not accept on connected socket - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait - fbcon: Check font dimension limits - watchdog: diag288_wdt: do not use stack buffers for hardware data - watchdog: diag288_wdt: fix __diag288() inline assembly - efi: Accept version 2 of memory attributes table - iio: hid: fix the retval in accel_3d_capture_sample - iio: adc: berlin2-adc: Add missing of_node_put() in error path - iio:adc:twl6030: Enable measurements of VUSB, VBAT and others - parisc: Fix return code of pdc_iodc_print() - parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case - mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps - mm/swapfile: add cond_resched() in get_swap_pages() - Squashfs: fix handling and sanity checking of xattr_ids count - serial: 8250_dma: Fix DMA Rx completion race - serial: 8250_dma: Fix DMA Rx rearm race - btrfs: limit device extents to the device size - ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() - ALSA: pci: lx6464es: fix a debug loop - pinctrl: aspeed: Fix confusing types in return value - pinctrl: single: fix potential NULL dereference - net: USB: Fix wrong-direction WARNING in plusb.c - usb: core: add quirk for Alcor Link AK9563 smartcard reader - migrate: hugetlb: check for hugetlb shared PMD in node migration - tools/virtio: fix the vringh test for virtio ring changes - net/rose: Fix to not accept on connected socket - nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association - aio: fix mremap after fork null-deref - mmc: sdio: fix possible resource leaks in some error paths - ALSA: hda/conexant: add a new hda codec SN6180 - hugetlb: check for undefined shift on 32 bit architectures - revert "squashfs: harden sanity check in squashfs_read_xattr_id_table" - i40e: add double of VLAN header when computing the max MTU - net: bgmac: fix BCM5358 support by setting correct flags - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions. - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path - net: stmmac: Restrict warning on disabling DMA store and fwd mode - ipv6: Fix datagram socket connection with DSCP. - ipv6: Fix tcp socket connection with DSCP. - i40e: Add checking for null for nlmsg_find_attr() - kvm: initialize all of the kvm_debugregs structure before sending it to userspace - nilfs2: fix underflow in second superblock position calculations - ata: libata: Fix sata_down_spd_limit() when no link speed is reported - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF - thermal: intel: int340x: Protect trip temperature from concurrent updates - iio:adc:twl6030: Enable measurement of VAC - IB/hfi1: Restore allocated resources on failed copyout - net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY - riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte - arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive - wifi: rtl8xxxu: gen2: Turn on the rate control - powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G - random: always mix cycle counter in add_latent_entropy() - powerpc: dts: t208x: Disable 10G on MAC1 and MAC2 - alarmtimer: Prevent starvation by small intervals and SIG_IGN - uaccess: Add speculation barrier to copy_from_user() - wifi: mwifiex: Add missing compatible string for SD8787 - bpf: add missing header file include - vc_screen: don't clobber return value in vcs_read - dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size * CVE-2023-1118 - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() Important TuxCare License Agreement CVE-2023-3161 CVE-2023-3567 CVE-2023-1118 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-212.223 ] * bionic/linux: 4.15.0-212.223 -proposed tracker (LP: #2019708) * Packaging resync (LP: #1786013) - [Packaging] update helper scripts * CVE-2023-32233 - netfilter: nf_tables: add nft_set_is_anonymous() helper - netfilter: nf_tables: split set destruction in deactivate and destroy phase - netfilter: nf_tables: unbind set in rule from commit path - netfilter: nf_tables: bogus EBUSY in helper removal from transaction - netfilter: nf_tables: fix set double-free in abort path - netfilter: nf_tables: bogus EBUSY when deleting set after flush - netfilter: nf_tables: use-after-free in failing rule with bound set - netfilter: nf_tables: deactivate anonymous set from preparation phase * CVE-2023-31436 - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg * CVE-2023-1380 - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() * CVE-2023-30456 - KVM: nVMX: add missing consistency checks for CR0 and CR4 Important TuxCare License Agreement CVE-2023-32233 CVE-2023-1380 CVE-2023-30456 CVE-2023-31436 Ubuntu 16.04 LTS * Jammy update: v5.15.75 upstream stable release (LP: #1996825) // CVE-url: https://ubuntu.com/security/CVE-2022-1184 - ext4: fix check for block being out of directory size * Jammy update: v5.15.61 upstream stable release (LP: #1990162) // CVE-url: https://ubuntu.com/security/CVE-2022-1184 - ext4: check if directory block is within i_size * Jammy update: v5.15.68 upstream stable release (LP: #1993003) // CVE-url: https://ubuntu.com/security/CVE-2022-3303 - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC * CVE-2023-1670 // CVE-url: https://ubuntu.com/security/CVE-2023-1670 - xirc2ps_cs: Fix use after free bug in xirc2ps_detach * CVE-url: https://ubuntu.com/security/CVE-2023-1989 - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition * Jammy update: v5.15.104 upstream stable release (LP: #2023225) // CVE-url: https://ubuntu.com/security/CVE-2023-1990 - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition * CVE-url: https://ubuntu.com/security/CVE-2023-2007 - scsi: dpt_i2o: Remove obsolete driver * CVE-2023-2124 // CVE-url: https://ubuntu.com/security/CVE-2023-2124 - xfs: verify buffer contents when we skip log replay * CVE-url: https://ubuntu.com/security/CVE-2023-23000 - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function * CVE-url: https://ubuntu.com/security/CVE-2023-28466 - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() * CVE-url: https://ubuntu.com/security/CVE-2023-3090 - ipvlan:Fix out-of-bounds caused by unclear skb->cb * Jammy update: v5.15.63 upstream stable release (LP: #1990564) // CVE-url: https://ubuntu.com/security/CVE-2023-3111 - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() * CVE-url: https://ubuntu.com/security/CVE-2023-3111 - btrfs: check return value of btrfs_commit_transaction in relocation * CVE-url: https://ubuntu.com/security/CVE-2023-3141 - memstick: r592: Fix UAF bug in r592_remove due to race condition * CVE-url: https://ubuntu.com/security/CVE-2023-3212 - gfs2: Don't deref jdesc in evict * CVE-url: https://ubuntu.com/security/CVE-2023-3268 - kernel/relay.c: fix read_pos error when multiple readers - relayfs: fix out-of-bounds access in relay_file_read * CVE-url: https://ubuntu.com/security/CVE-2023-3390 - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE * CVE-url: https://ubuntu.com/security/CVE-2023-35823 - media: saa7134: fix use after free bug in saa7134_finidev due to race condition * CVE-url: https://ubuntu.com/security/CVE-2023-35824 - media: dm1105: Fix use after free bug in dm1105_remove due to race condition * Miscellaneous Ubuntu changes - [Config] updateconfigs for SCSI_DPT_I2O Important TuxCare License Agreement CVE-2023-3090 CVE-2022-3303 CVE-2023-35824 CVE-2023-2124 CVE-2023-3141 CVE-2023-28466 CVE-2023-35823 CVE-2023-1990 CVE-2023-23000 CVE-2022-1184 CVE-2023-1670 CVE-2023-1989 CVE-2023-3212 CVE-2023-3111 CVE-2023-2007 CVE-2023-3268 CVE-2023-3390 Ubuntu 16.04 LTS * CVE-url: https://ubuntu.com/security/CVE-2023-4128 - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after- free - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after- free - net/sched: cls_route: No longer copy tcf_result on update to avoid use- after-free * CVE-url: https://ubuntu.com/security/CVE-2023-40283 - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb * CVE-2023-20593 // CVE-url: https://ubuntu.com/security/CVE-2023-20593 - x86/cpu/amd: Move the errata checking functionality up - x86/cpu/amd: Add a Zenbleed fix * CVE-2023-1859 // CVE-url: https://ubuntu.com/security/CVE-2023-1859 - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition * CVE-url: https://ubuntu.com/security/CVE-2023-35001 - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval * Jammy update: v5.15.106 upstream stable release (LP: #2023233) // CVE-url: https://ubuntu.com/security/CVE-2023-1611 - btrfs: fix race between quota disable and quota assign ioctls * CVE-2023-3611 // CVE-url: https://ubuntu.com/security/CVE-2023-3611 - net/sched: sch_qfq: account for stab overhead in qfq_enqueue * CVE-2023-3776 // CVE-url: https://ubuntu.com/security/CVE-2023-3776 - net/sched: cls_fw: Fix improper refcount update leads to use-after-free Important TuxCare License Agreement CVE-2023-35001 CVE-2023-3776 CVE-2023-4128 CVE-2023-1859 CVE-2023-3611 CVE-2023-4206 CVE-2023-1611 CVE-2023-40283 CVE-2023-4207 CVE-2023-20593 CVE-2023-4208 Ubuntu 16.04 LTS * Jammy update: v5.15.86 upstream stable release (LP: #2005113) // CVE-url: https://ubuntu.com/security/CVE-2022-3606 - libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() * Jammy update: v5.15.87 upstream stable release (LP: #2007441) // CVE-url: https://ubuntu.com/security/CVE-2023-23454 - net: sched: cbq: dont intepret cls results when asked to drop * Jammy update: v5.15.76 upstream stable release (LP: #1997113) // CVE-url: https://ubuntu.com/security/CVE-2023-0590 - net: sched: fix race condition in qdisc_graft() * Jammy update: v5.15.104 upstream stable release (LP: #2023225) // CVE-url: https://ubuntu.com/security/CVE-2023-1855 - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition * Jammy update: v5.15.91 upstream stable release (LP: #2011467) // CVE-url: https://ubuntu.com/security/CVE-2022-4129 - l2tp: Serialize access to sk_user_data with sk_callback_lock * Jammy update: v5.15.105 upstream stable release (LP: #2023230) // CVE-url: https://ubuntu.com/security/CVE-2023-30772 - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition * Jammy update: v5.15.105 upstream stable release (LP: #2023230) // CVE-url: https://ubuntu.com/security/CVE-2023-2194 - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() * Jammy update: v5.15.105 upstream stable release (LP: #2023230) // CVE-url: https://ubuntu.com/security/CVE-2023-33203 - net: qcom/emac: Fix use after free bug in emac_remove due to race condition * CVE-2023-31084 // CVE-2023-31084 was assigned to this bug. // CVE-url: https://ubuntu.com/security/CVE-2023-31084 - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() * Jammy update: v5.15.99 upstream stable release (LP: #2018438) // CVE-url: https://ubuntu.com/security/CVE-2023-2985 - fs: hfsplus: fix UAF issue in hfsplus_put_super * Jammy update: v5.15.111 upstream stable release (LP: #2025095) // CVE-url: https://ubuntu.com/security/CVE-2023-2269 - dm ioctl: fix nested locking in table_clear() to remove deadlock concern Moderate TuxCare License Agreement CVE-2023-2985 CVE-2023-30772 CVE-2023-23454 CVE-2023-2194 CVE-2023-33203 CVE-2023-0590 CVE-2022-3606 CVE-2023-31084 CVE-2023-2269 CVE-2022-4129 CVE-2023-1855 Ubuntu 16.04 LTS * Miscellaneous Ubuntu changes - update-from-bionic-master repo has been updated - fix tuxcare.suffix after rebase from bionic [ Ubuntu: 4.15.0-217.228 ] * CVE-url: https://ubuntu.com/security/CVE-2023-4622 - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). * Jammy update: v5.15.105 upstream stable release (LP: #2023230) // CVE-url: https://ubuntu.com/security/CVE-2022-4269 - net/sched: act_mirred: better wording on protection against excessive stack growth - act_mirred: use the backlog for nested calls to mirred ingress * CVE-url: https://ubuntu.com/security/CVE-2022-4269 - net/sched: user-space can't set unknown tcfa_action values - net/tc: introduce TC_ACT_REINSERT. - act_mirred: use TC_ACT_REINSERT when possible - net: sched: act_mirred method rename for grep-ability and consistency - net: sched: protect against stack overflow in TC act_mirred - net/sched: act_mirred: refactor the handle of xmit - selftests: forwarding: Introduce tc actions tests * Jammy update: v5.15.94 upstream stable release (LP: #2012673) // CVE-url: https://ubuntu.com/security/CVE-2022-27672 - x86/speculation: Identify processors vulnerable to SMT RSB predictions - KVM: x86: Mitigate the cross-thread return address predictions bug - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions * CVE-url: https://ubuntu.com/security/CVE-2022-27672 - KVM: x86: drop bogus MWAIT check - KVM: x86: simplify kvm_mwait_in_guest() - KVM: X86: Provide a capability to disable MWAIT intercepts - KVM: X86: Provide a capability to disable HLT intercepts - KVM: VMX: Remove redundant write to set vCPU as active at RESET/INIT - KVM: X86: Provide a capability to disable PAUSE intercepts - x86/headers/UAPI: Move DISABLE_EXITS KVM capability bits to the UAPI - tools headers kvm: Sync uapi/linux/kvm.h with the kernel sources - KVM: X86: Provide a capability to disable cstate msr read intercepts * Jammy update: v5.15.110 upstream stable release (LP: #2025090) // CVE-url: https://ubuntu.com/security/CVE-2023-2002 - bluetooth: Perform careful capability checks in hci_sock_ioctl() * Jammy update: v5.15.80 upstream stable release (LP: #2003122) // CVE-url: https://ubuntu.com/security/CVE-2022-3169 - nvme: ensure subsystem reset is single threaded * CVE-url: https://ubuntu.com/security/CVE-2022-3169 - nvme: host delete_work and reset_work on separate workqueues - PCI/ASPM: Add pcie_aspm_enabled() - nvme-pci: Allow PCI bus-level PM to be used if ASPM is disabled - nvme: Prevent resets during paused controller state - nvme: Add quirk for LiteON CL1 devices running FW 22301111 - nvme: Wait for reset state when required * Jammy update: v5.15.81 upstream stable release (LP: #2003130) // CVE-url: https://ubuntu.com/security/CVE-2022-47519 - wifi: wilc1000: validate length of IEEE80211_P2P_ATTR_OPER_CHANNEL attribute * CVE-2022-47520 // CVE-url: https://ubuntu.com/security/CVE-2022-47520 - wifi: wilc1000: validate pairwise and authentication suite offsets * CVE-url: https://ubuntu.com/security/CVE-2022-45919 - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 [ Ubuntu: 4.15.0-216.227 ] * Jammy update: v5.15.86 upstream stable release (LP: #2005113) // CVE-url: https://ubuntu.com/security/CVE-2022-3606 - libbpf: Fix null-pointer dereference in find_prog_by_sec_insn() * Jammy update: v5.15.87 upstream stable release (LP: #2007441) // CVE-url: https://ubuntu.com/security/CVE-2023-23454 - net: sched: cbq: dont intepret cls results when asked to drop * Jammy update: v5.15.76 upstream stable release (LP: #1997113) // CVE-url: https://ubuntu.com/security/CVE-2023-0590 - net: sched: fix race condition in qdisc_graft() * Jammy update: v5.15.104 upstream stable release (LP: #2023225) // CVE-url: https://ubuntu.com/security/CVE-2023-1855 - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition * Jammy update: v5.15.91 upstream stable release (LP: #2011467) // CVE-url: https://ubuntu.com/security/CVE-2022-4129 - l2tp: Serialize access to sk_user_data with sk_callback_lock * Jammy update: v5.15.105 upstream stable release (LP: #2023230) // CVE-url: https://ubuntu.com/security/CVE-2023-30772 - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition * Jammy update: v5.15.105 upstream stable release (LP: #2023230) // CVE-url: https://ubuntu.com/security/CVE-2023-2194 - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() * Jammy update: v5.15.105 upstream stable release (LP: #2023230) // CVE-url: https://ubuntu.com/security/CVE-2023-33203 - net: qcom/emac: Fix use after free bug in emac_remove due to race condition * CVE-2023-31084 // CVE-2023-31084 was assigned to this bug. // CVE-url: https://ubuntu.com/security/CVE-2023-31084 - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() * Jammy update: v5.15.99 upstream stable release (LP: #2018438) // CVE-url: https://ubuntu.com/security/CVE-2023-2985 - fs: hfsplus: fix UAF issue in hfsplus_put_super * Jammy update: v5.15.111 upstream stable release (LP: #2025095) // CVE-url: https://ubuntu.com/security/CVE-2023-2269 - dm ioctl: fix nested locking in table_clear() to remove deadlock concern [ Ubuntu: 4.15.0-215.226 ] * CVE-url: https://ubuntu.com/security/CVE-2023-4128 - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after- free - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after- free - net/sched: cls_route: No longer copy tcf_result on update to avoid use- after-free * CVE-url: https://ubuntu.com/security/CVE-2023-40283 - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb * CVE-2023-20593 // CVE-url: https://ubuntu.com/security/CVE-2023-20593 - x86/cpu/amd: Move the errata checking functionality up - x86/cpu/amd: Add a Zenbleed fix * CVE-2023-1859 // CVE-url: https://ubuntu.com/security/CVE-2023-1859 - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition * CVE-url: https://ubuntu.com/security/CVE-2023-35001 - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval * Jammy update: v5.15.106 upstream stable release (LP: #2023233) // CVE-url: https://ubuntu.com/security/CVE-2023-1611 - btrfs: fix race between quota disable and quota assign ioctls * CVE-2023-3611 // CVE-url: https://ubuntu.com/security/CVE-2023-3611 - net/sched: sch_qfq: account for stab overhead in qfq_enqueue * CVE-2023-3776 // CVE-url: https://ubuntu.com/security/CVE-2023-3776 - net/sched: cls_fw: Fix improper refcount update leads to use-after-free [ Ubuntu: 4.15.0-214.225 ] * Jammy update: v5.15.75 upstream stable release (LP: #1996825) // CVE-url: https://ubuntu.com/security/CVE-2022-1184 - ext4: fix check for block being out of directory size * Jammy update: v5.15.61 upstream stable release (LP: #1990162) // CVE-url: https://ubuntu.com/security/CVE-2022-1184 - ext4: check if directory block is within i_size * Jammy update: v5.15.68 upstream stable release (LP: #1993003) // CVE-url: https://ubuntu.com/security/CVE-2022-3303 - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC * CVE-2023-1670 // CVE-url: https://ubuntu.com/security/CVE-2023-1670 - xirc2ps_cs: Fix use after free bug in xirc2ps_detach * CVE-url: https://ubuntu.com/security/CVE-2023-1989 - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition * Jammy update: v5.15.104 upstream stable release (LP: #2023225) // CVE-url: https://ubuntu.com/security/CVE-2023-1990 - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition * CVE-url: https://ubuntu.com/security/CVE-2023-2007 - scsi: dpt_i2o: Remove obsolete driver * CVE-2023-2124 // CVE-url: https://ubuntu.com/security/CVE-2023-2124 - xfs: verify buffer contents when we skip log replay * CVE-url: https://ubuntu.com/security/CVE-2023-23000 - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function * CVE-url: https://ubuntu.com/security/CVE-2023-28466 - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() * CVE-url: https://ubuntu.com/security/CVE-2023-3090 - ipvlan:Fix out-of-bounds caused by unclear skb->cb * Jammy update: v5.15.63 upstream stable release (LP: #1990564) // CVE-url: https://ubuntu.com/security/CVE-2023-3111 - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() * CVE-url: https://ubuntu.com/security/CVE-2023-3111 - btrfs: check return value of btrfs_commit_transaction in relocation * CVE-url: https://ubuntu.com/security/CVE-2023-3141 - memstick: r592: Fix UAF bug in r592_remove due to race condition * CVE-url: https://ubuntu.com/security/CVE-2023-3212 - gfs2: Don't deref jdesc in evict * CVE-url: https://ubuntu.com/security/CVE-2023-3268 - kernel/relay.c: fix read_pos error when multiple readers - relayfs: fix out-of-bounds access in relay_file_read * CVE-url: https://ubuntu.com/security/CVE-2023-3390 - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE * CVE-url: https://ubuntu.com/security/CVE-2023-35823 - media: saa7134: fix use after free bug in saa7134_finidev due to race condition * CVE-url: https://ubuntu.com/security/CVE-2023-35824 - media: dm1105: Fix use after free bug in dm1105_remove due to race condition * Miscellaneous Ubuntu changes - [Config] updateconfigs for SCSI_DPT_I2O * Miscellaneous upstream changes - fixup! UBUNTU: [Packaging]: add tuxcare suffix [ Ubuntu: 4.15.0-213.224 ] * Jammy update: v5.15.97 upstream stable release (LP: #2015599) - net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues(). [ Ubuntu: 4.15.0-212.223 ] * bionic/linux: 4.15.0-212.223 -proposed tracker (LP: #2019708) * Packaging resync (LP: #1786013) - [Packaging] update helper scripts * CVE-2023-32233 - netfilter: nf_tables: add nft_set_is_anonymous() helper - netfilter: nf_tables: split set destruction in deactivate and destroy phase - netfilter: nf_tables: unbind set in rule from commit path - netfilter: nf_tables: bogus EBUSY in helper removal from transaction - netfilter: nf_tables: fix set double-free in abort path - netfilter: nf_tables: bogus EBUSY when deleting set after flush - netfilter: nf_tables: use-after-free in failing rule with bound set - netfilter: nf_tables: deactivate anonymous set from preparation phase * CVE-2023-31436 - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg * CVE-2023-1380 - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() * CVE-2023-30456 - KVM: nVMX: add missing consistency checks for CR0 and CR4 Important TuxCare License Agreement CVE-2022-3169 CVE-2022-47520 CVE-2022-4269 CVE-2023-4622 CVE-2022-27672 CVE-2022-45919 CVE-2022-47519 CVE-2023-2002 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-218.229 ] * CVE-url: https://ubuntu.com/security/CVE-2023-42753 - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c * CVE-2022-40982 // CVE-url: https://ubuntu.com/security/CVE-2022-40982 - init: Provide arch_cpu_finalize_init() - x86/cpu: Switch to arch_cpu_finalize_init() - init: Remove check_bugs() leftovers - x86/speculation: Add Gather Data Sampling mitigation - x86/speculation: Add force option to GDS mitigation - x86/speculation: Add Kconfig option for GDS - KVM: Add GDS_NO support to KVM * CVE-url: https://ubuntu.com/security/CVE-2022-40982 - vmlinux.lds.h: Create section for protection against instrumentation - x86/cpu: Move arch_smt_update() to a neutral place * CVE-2023-20588 // CVE-url: https://ubuntu.com/security/CVE-2023-20588 - x86/bugs: Increase the x86 bugs vector size to two u32s - x86/CPU/AMD: Do not leak quotient data after a division by 0 - x86/CPU/AMD: Fix the DIV(0) initial fix attempt * CVE-2023-3863 // CVE-url: https://ubuntu.com/security/CVE-2023-3863 - nfc: llcp: simplify llcp_sock_connect() error paths - net: nfc: Fix use-after-free caused by nfc_llcp_find_local * CVE-url: https://ubuntu.com/security/CVE-2023-3863 - nfc: Fix to check for kmemdup failure * CVE-url: https://ubuntu.com/security/CVE-2023-4921 - net: sched: sch_qfq: Fix UAF in qfq_dequeue() * Miscellaneous Ubuntu changes - [Config] CONFIG_GDS_FORCE_MITIGATION=n Important TuxCare License Agreement CVE-2022-40982 CVE-2023-42753 CVE-2023-4921 CVE-2023-20588 CVE-2023-3863 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-219.230 ] * CVE-url: https://ubuntu.com/security/CVE-2023-42755 - net/sched: Retire rsvp classifier * CVE-url: https://ubuntu.com/security/CVE-2023-39194 - net: xfrm: Fix xfrm_address_filter OOB read * CVE-url: https://ubuntu.com/security/CVE-2023-39192 - netfilter: xt_u32: validate user space input * CVE-url: https://ubuntu.com/security/CVE-2023-39193 - netfilter: xt_sctp: validate the flag_info count * CVE-url: https://ubuntu.com/security/CVE-2023-42754 - ipv4: fix null-deref in ipv4_link_failure * CVE-url: https://ubuntu.com/security/CVE-2023-3338 - [Config] updateconfigs for DECNET * Jammy update: v5.15.118 upstream stable release (LP: #2030239) // CVE-url: https://ubuntu.com/security/CVE-2023-3338 - Remove DECnet support from kernel * CVE-2023-1206 // CVE-url: https://ubuntu.com/security/CVE-2023-1206 - tcp: Reduce chance of collisions in inet6_hashfn(). * CVE-url: https://ubuntu.com/security/CVE-2022-45886 - media: dvb-core: Fix use-after-free on race condition at dvb_frontend - media: dvb-core: Fix use-after-free due on race condition at dvb_net * Miscellaneous Ubuntu changes - [Config] updateconfigs for NET_CLS_RSVP Important TuxCare License Agreement CVE-2023-42755 CVE-2023-1206 CVE-2023-42754 CVE-2023-39192 CVE-2023-3338 CVE-2022-45886 CVE-2023-39194 CVE-2023-39193 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-220.231 ] * CVE-2023-0597 // CVE-url: https://ubuntu.com/security/CVE-2023-0597 - x86/kasan: Map shadow for percpu pages on demand - x86/mm: Recompute physical address for every page of per-CPU CEA mapping - x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area - x86/mm: Do not shuffle CPU entry areas without KASLR * CVE-url: https://ubuntu.com/security/CVE-2023-0597 - random32: add noise from network and scheduling activity - x86/mm: Randomize per-cpu entry area - x86/cpu_entry_area: Move percpu_setup_debug_store() to __init section - x86/cpu_entry_area: Cleanup setup functions * CVE-2023-42752 // CVE-url: https://ubuntu.com/security/CVE-2023-42752 - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU * CVE-2023-4623 // CVE-url: https://ubuntu.com/security/CVE-2023-4623 - net/sched: sch_hfsc: Ensure inner classes have fsc curve * CVE-2023-34319 // CVE-url: https://ubuntu.com/security/CVE-2023-34319 - xen/netback: Fix buffer overrun triggered by unusual packet * CVE-2023-4881 // CVE-url: https://ubuntu.com/security/CVE-2023-4881 - netfilter: nftables: exthdr: fix 4-byte stack OOB write * CVE-2023-31083 // CVE-url: https://ubuntu.com/security/CVE-2023-31083 - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO * CVE-2023-3772 // CVE-url: https://ubuntu.com/security/CVE-2023-3772 - xfrm: add NULL check in xfrm_update_ae_params Important TuxCare License Agreement CVE-2023-34319 CVE-2023-4623 CVE-2023-42752 CVE-2023-0597 CVE-2023-31083 CVE-2023-4881 CVE-2023-3772 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-221.232 ] * CVE-2023-31085 // CVE-url: https://ubuntu.com/security/CVE-2023-31085 - ubi: Refuse attaching if mtd's erasesize is 0 * Jammy update: v5.15.121 upstream stable release (LP: #2032689) // CVE-url: https://ubuntu.com/security/CVE-2023-4132 - media: usb: siano: Fix warning due to null work_func_t function pointer * Jammy update: v5.15.99 upstream stable release (LP: #2018438) // CVE-url: https://ubuntu.com/security/CVE-2023-4132 - media: usb: siano: Fix use after free bugs caused by do_submit_urb * CVE-2023-5717 // CVE-url: https://ubuntu.com/security/CVE-2023-5717 - perf: Disallow mis-matched inherited group reads * CVE-url: https://ubuntu.com/security/CVE-2023-1838 - Fix double fget() in vhost_net_set_backend() * Jammy update: v5.15.99 upstream stable release (LP: #2018438) // CVE-url: https://ubuntu.com/security/CVE-2023-1077 - sched/rt: pick_next_rt_entity(): check list_entry * Jammy update: v5.15.99 upstream stable release (LP: #2018438) // CVE-url: https://ubuntu.com/security/CVE-2023-1076 - net: add sock_init_data_uid() - tun: tun_chr_open(): correctly initialize socket uid - tap: tap_open(): correctly initialize socket uid * CVE-url: https://ubuntu.com/security/CVE-2023-45863 - kobject: Fix slab-out-of-bounds in fill_kobj_path() * CVE-url: https://ubuntu.com/security/CVE-2023-45871 - igb: set max size RX buffer when store bad packet is enabled * Jammy update: v5.15.100 upstream stable release (LP: #2020387) // CVE-url: https://ubuntu.com/security/CVE-2023-45862 - USB: ene_usb6250: Allocate enough memory for full object * CVE-url: https://ubuntu.com/security/CVE-2023-39189 - netfilter: nfnetlink_osf: avoid OOB read Critical TuxCare License Agreement CVE-2023-45871 CVE-2023-45863 CVE-2023-4132 CVE-2023-31085 CVE-2023-1076 CVE-2023-1077 CVE-2023-45862 CVE-2023-5717 CVE-2023-1838 CVE-2023-39189 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-222.233 ] * CVE-url: https://ubuntu.com/security/CVE-2023-7192 - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() * CVE-url: https://ubuntu.com/security/CVE-2023-6610 - smb: client: fix potential OOB in smb2_dump_detail() * CVE-url: https://ubuntu.com/security/CVE-2023-6606 - smb: client: fix OOB in smbCalcSize() * CVE-url: https://ubuntu.com/security/CVE-2023-6546 - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux * CVE-url: https://ubuntu.com/security/CVE-2023-6932 - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet * CVE-url: https://ubuntu.com/security/CVE-2023-6931 - perf: Fix perf_event_validate_size() - perf: Fix perf_event_validate_size() lockdep splat * CVE-2023-4244 // CVE-url: https://ubuntu.com/security/CVE-2023-4244 - netfilter: nf_tables: don't skip expired elements during walk - netfilter: nf_tables: GC transaction API to avoid race with control plane - netfilter: nf_tables: adapt set backend to use GC transaction API - netfilter: nf_tables: remove busy mark and gc batch API - netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path - netfilter: nf_tables: GC transaction race with netns dismantle - netfilter: nf_tables: GC transaction race with abort path - netfilter: nft_dynset: disallow object maps * CVE-url: https://ubuntu.com/security/CVE-2023-4244 - netfilter: nf_tables: pass ctx to nf_tables_expr_destroy() - netfilter: nf_tables: use net_generic infra for transaction data - netfilter: nftables: add nft_pernet() helper function - netfilter: nftables: rename set element data activation/deactivation functions - netfilter: nf_tables: fix chain dependency validation - netfilter: nf_tables: place all set backends in one single module - netfilter: nf_tables: make sets built-in * Miscellaneous Ubuntu changes - [Config] updateconfigs for CONFIG_NFT_SET_RBTREE CONFIG_NFT_SET_HASH CONFIG_NFT_SET_BITMAP Important TuxCare License Agreement CVE-2023-6606 CVE-2023-6931 CVE-2023-6932 CVE-2023-6546 CVE-2023-7192 CVE-2023-4244 CVE-2023-6610 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-223.234 ] * Jammy update: v5.15.140 upstream stable release (LP: #2050038) // CVE-url: https://ubuntu.com/security/CVE-2024-0607 - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() * CVE-url: https://ubuntu.com/security/CVE-2024-0607 - netfilter: nf_tables: Introduce new 64-bit helper register functions * Focal update: Focal update: v5.4.235 upstream stable release (LP: #2017706) // CVE-url: https://ubuntu.com/security/CVE-2023-1079 - HID: asus: Remove check for same LED brightness on set - HID: asus: use spinlock to protect concurrent accesses - HID: asus: use spinlock to safely schedule workers * CVE-url: https://ubuntu.com/security/CVE-2022-36402 - drm/vmwgfx: Add SM4_1 flag - drm/vmwgfx: Add support for SVGA3dCmdDefineGBSurface_v3 - drm/vmwgfx: Add CAP2 support in vmwgfx - drm/vmwgfx: Bump version patchlevel and date - drm/vmwgfx: Expose SM4_1 param to user space - drm/vmwgfx: Update the device headers - drm/vmwgfx: Fix shader stage validation * CVE-url: https://ubuntu.com/security/CVE-2024-0639 - sctp: fix potential deadlock on &net->sctp.addr_wq_lock * CVE-url: https://ubuntu.com/security/CVE-2023-6915 - ida: Fix crash in ida_free when the bitmap is empty * CVE-url: https://ubuntu.com/security/CVE-2023-6040 - netfilter: nf_tables: Reject tables of unsupported family * CVE-url: https://ubuntu.com/security/CVE-2023-51780 - atm: Fix Use-After-Free in do_vcc_ioctl * CVE-url: https://ubuntu.com/security/CVE-2023-51782 - net/rose: Fix Use-After-Free in rose_ioctl * CVE-url: https://ubuntu.com/security/CVE-2023-51781 - appletalk: Fix Use-After-Free in atalk_ioctl * CVE-url: https://ubuntu.com/security/CVE-2024-0340 - vhost: use kzalloc() instead of kmalloc() followed by memset() * CVE-2023-51779 // CVE-url: https://ubuntu.com/security/CVE-2023-51779 - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg * Jammy update: v5.15.135 upstream stable release (LP: #2045809) // CVE-url: https://ubuntu.com/security/CVE-2023-34324 - xen/events: replace evtchn_rwlock with RCU * Miscellaneous upstream changes - drm/vmwgfx: Use enum to represent graphics context capabilities Important TuxCare License Agreement CVE-2024-0607 CVE-2023-34324 CVE-2023-51779 CVE-2023-51780 CVE-2022-36402 CVE-2023-51782 CVE-2023-6040 CVE-2023-1079 CVE-2024-0340 CVE-2024-0639 CVE-2023-6915 CVE-2023-51781 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-224.235 ] * CVE-url: https://ubuntu.com/security/CVE-2024-23851 - dm: limit the number of targets and parameter size area * CVE-url: https://ubuntu.com/security/CVE-2024-23849 - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv * CVE-url: https://ubuntu.com/security/CVE-2024-1086 - netfilter: nf_tables: reject QUEUE/DROP verdict parameters * CVE-url: https://ubuntu.com/security/CVE-2023-35827 - ravb: Fix use-after-free issue in ravb_tx_timeout_work() * CVE-url: https://ubuntu.com/security/CVE-2023-46838 - xen-netback: don't produce zero-size SKB frags * CVE-url: https://ubuntu.com/security/CVE-2024-22705 - ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() * CVE-url: https://ubuntu.com/security/CVE-2023-46343 - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() * CVE-url: https://ubuntu.com/security/CVE-2023-51042 - drm/amdgpu: Fix potential fence use-after-free v2 * CVE-url: https://ubuntu.com/security/CVE-2024-0775 - ext4: improve error recovery code paths in __ext4_remount() * CVE-url: https://ubuntu.com/security/CVE-2023-51043 - drm/atomic: Fix potential use-after-free in nonblocking commits Important TuxCare License Agreement CVE-2023-52429 CVE-2023-46838 CVE-2023-51042 CVE-2023-51043 CVE-2023-46343 CVE-2024-0775 CVE-2023-35827 CVE-2024-23849 CVE-2024-23851 CVE-2024-1086 CVE-2023-52509 CVE-2024-22705 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-225.236 ] * CVE-url: https://ubuntu.com/security/CVE-2023-52449 - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier * CVE-url: https://ubuntu.com/security/CVE-2023-39197 - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one * CVE-url: https://ubuntu.com/security/CVE-2023-34256 - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum * CVE-url: https://ubuntu.com/security/CVE-2024-24855 - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() * CVE-url: https://ubuntu.com/security/CVE-2024-26602 - locking: Introduce __cleanup() based infrastructure - dmaengine: ioat: Free up __cleanup() name - sched/membarrier: reduce the ability to hammer on sys_membarrier * CVE-url: https://ubuntu.com/security/CVE-2023-52435 - net: prevent mss overflow in skb_segment() * CVE-url: https://ubuntu.com/security/CVE-2023-52445 - media: pvrusb2: fix use after free on context disconnection * CVE-url: https://ubuntu.com/security/CVE-2023-52444 - f2fs: fix to avoid dirent corruption * CVE-url: https://ubuntu.com/security/CVE-2023-52443 - apparmor: avoid crash when parsed profile name is empty * CVE-url: https://ubuntu.com/security/CVE-2021-44879 - f2fs: fix to do sanity check on inode type during garbage collection * CVE-url: https://ubuntu.com/security/CVE-2023-6121 - nvmet: nul-terminate the NQNs passed in the connect command * CVE-url: https://ubuntu.com/security/CVE-2024-24860 - Bluetooth: Move {min,max}_key_size debugfs into hci_debugfs_create_le - Bluetooth: Fix atomicity violation in {min,max}_key_size_set Important TuxCare License Agreement CVE-2023-52449 CVE-2024-24855 CVE-2023-52443 CVE-2023-52444 CVE-2023-39197 CVE-2023-52445 CVE-2023-6121 CVE-2024-26602 CVE-2023-34256 CVE-2021-44879 CVE-2024-24860 CVE-2023-52435 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-226.237 ] * CVE-url: https://ubuntu.com/security/CVE-2021-46925 - net/smc: get rid of tx_pend waits in socket closing - net/smc: fix kernel panic caused by race of smc_sock * CVE-url: https://ubuntu.com/security/CVE-2024-23307 - md/raid5: fix atomicity violation in raid5_cache_count * CVE-url: https://ubuntu.com/security/CVE-2021-46941 - usb: dwc3: Add splitdisable quirk for Hisilicon Kirin Soc - usb: dwc3: core: Do core softreset when switch mode * CVE-url: https://ubuntu.com/security/CVE-2023-52469 - drivers/amd/pm: fix a use-after-free in kv_parse_power_table * CVE-url: https://ubuntu.com/security/CVE-2024-26633 - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() * CVE-url: https://ubuntu.com/security/CVE-2023-52439 - uio: Fix use-after-free in uio_open * CVE-url: https://ubuntu.com/security/CVE-2023-52612 - crypto: scomp - fix req->dst buffer overflow * CVE-url: https://ubuntu.com/security/CVE-2023-52340 - net: add a route cache full diagnostic message - net/dst: use a smaller percpu_counter batch for dst entries accounting - ipv6: remove max_size check inline with ipv4 * CVE-url: https://ubuntu.com/security/CVE-2023-52436 - f2fs: explicitly null-terminate the xattr list * CVE-url: https://ubuntu.com/security/CVE-2023-52470 - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() * CVE-url: https://ubuntu.com/security/CVE-2023-52464 - EDAC/thunderx: Fix possible out-of-bounds string access * CVE-url: https://ubuntu.com/security/CVE-2022-45884 - media: dvbdev: remove double-unlock - media: media/dvb: Use kmemdup rather than duplicating its implementation - media: dvbdev: Fix memleak in dvb_register_device - media: dvbdev: fix error logic at dvb_register_device() - media: dvb-core: Fix use-after-free due to race at dvb_register_device() Important TuxCare License Agreement CVE-2023-52612 CVE-2021-46925 CVE-2024-23307 CVE-2023-52464 CVE-2023-52470 CVE-2024-26633 CVE-2023-52439 CVE-2021-46941 CVE-2023-52436 CVE-2023-52469 CVE-2023-52340 CVE-2022-45884 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-227.238 ] * CVE-url: https://ubuntu.com/security/CVE-2023-1998 - x86/speculation: Allow enabling STIBP with legacy IBRS * CVE-url: https://ubuntu.com/security/CVE-2021-47193 - scsi: pm80xx: Tie the interrupt name to the module instance - scsi: pm80xx: Deal with kexec reboots - scsi: pm80xx: Increase number of supported queues - scsi: pm80xx: Remove DMA memory allocation for ccb and device structures - scsi: pm80xx: Increase the number of outstanding I/O supported to 1024 - scsi: pm80xx: Fix memory leak during rmmod * CVE-url: https://ubuntu.com/security/CVE-2021-47198 - scsi: lpfc: Fix use-after-free in lpfc_unreg_rpi() routine * CVE-url: https://ubuntu.com/security/CVE-2023-52458 - block: add check that partition length needs to be aligned with block size * CVE-url: https://ubuntu.com/security/CVE-2023-52600 - jfs: fix uaf in jfs_evict_inode * CVE-url: https://ubuntu.com/security/CVE-2023-24023 - Bluetooth: Add debug setting for changing minimum encryption key size - Bluetooth: Add more enc key size check * CVE-url: https://ubuntu.com/security/CVE-2023-52603 - UBSAN: array-index-out-of-bounds in dtSplitRoot * Jammy update: v5.15.81 upstream stable release (LP: #2003130) // CVE-url: https://ubuntu.com/security/CVE-2023-1382 - tipc: set con sock in tipc_conn_alloc - tipc: add an extra conn_get in tipc_conn_alloc * CVE-url: https://ubuntu.com/security/CVE-2024-26600 - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP Important TuxCare License Agreement CVE-2023-52458 CVE-2021-47193 CVE-2023-52603 CVE-2023-1998 CVE-2023-24023 CVE-2023-52600 CVE-2024-26600 CVE-2023-1382 CVE-2021-47198 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-228.239 ] * CVE-url: https://ubuntu.com/security/CVE-2023-47233 - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach * CVE-url: https://ubuntu.com/security/CVE-2023-52601 - jfs: Fix memleak in dbAdjCtl * CVE-url: https://ubuntu.com/security/CVE-2024-26801 - Bluetooth: Avoid potential use-after-free in hci_error_reset * CVE-url: https://ubuntu.com/security/CVE-2024-26805 - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter * CVE-url: https://ubuntu.com/security/CVE-2024-26735 - ipv6: sr: fix possible use-after-free and null-ptr-deref * CVE-url: https://ubuntu.com/security/CVE-2023-52566 - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() * CVE-url: https://ubuntu.com/security/CVE-2021-46981 - nbd: Fix NULL pointer in flush_workqueue * CVE-url: https://ubuntu.com/security/CVE-2024-26622 - tomoyo: fix UAF write bug in tomoyo_write_control() * CVE-url: https://ubuntu.com/security/CVE-2024-26614 - tcp: make sure init the accept_queue's spinlocks once - ipv6: init the accept_queue's spinlocks in inet6_create * CVE-url: https://ubuntu.com/security/CVE-2023-52530 - wifi: mac80211: fix potential key use-after-free * CVE-url: https://ubuntu.com/security/CVE-2023-52524 - net: nfc: llcp: Add lock when modifying device list * CVE-url: https://ubuntu.com/security/CVE-2021-47173 - misc/uss720: fix memory leak in uss720_probe * CVE-url: https://ubuntu.com/security/CVE-2024-26910 - timers: Get rid of del_singleshot_timer_sync() - timers: Update kernel-doc for various functions - timers: Use del_timer_sync() even on UP - timers: Rename del_timer_sync() to timer_delete_sync() - timers: Rename del_timer() to timer_delete() - timers: Silently ignore timers with a NULL function - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode - timers: Add shutdown mechanism to the internal functions - timers: Provide timer_shutdown[_sync]() - netfilter: ipset: fix performance regression in swap operation * CVE-url: https://ubuntu.com/security/CVE-2023-52595 - rt2x00: clear IV's on start to fix AP mode regression - wifi: rt2x00: restart beacon queue when hardware reset * CVE-url: https://ubuntu.com/security/CVE-2023-52617 - switchtec: Improve MRPC efficiency by enabling write combining - switchtec: Add MRPC DMA mode support - PCI: switchtec: Fix stdev_release() crash after surprise hot remove * CVE-url: https://ubuntu.com/security/CVE-2024-26696 - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() * CVE-url: https://ubuntu.com/security/CVE-2024-26685 - nilfs2: fix potential bug in end_buffer_async_write * CVE-url: https://ubuntu.com/security/CVE-2024-26625 - llc: call sock_orphan() at release time * CVE-url: https://ubuntu.com/security/CVE-2023-52615 - hwrng: core - Fix page fault dead lock on mmap-ed hwrng * CVE-url: https://ubuntu.com/security/CVE-2023-52486 - drm: Don't unref the same fb many times by mistake due to deadlock handling * CVE-url: https://ubuntu.com/security/CVE-2024-26920 - tracing/trigger: Fix to return error if failed to alloc snapshot * CVE-url: https://ubuntu.com/security/CVE-2024-26697 - nilfs2: fix data corruption in dsync block recovery for small block sizes * CVE-url: https://ubuntu.com/security/CVE-2024-26679 - inet: read sk->sk_family once in inet_recv_error() * CVE-url: https://ubuntu.com/security/CVE-2023-52622 - ext4: remove unnecessary check from alloc_flex_gd() - ext4: avoid online resizing failures due to oversized flex bg * CVE-url: https://ubuntu.com/security/CVE-2024-26635 - llc: Drop support for ETH_P_TR_802_2. * CVE-url: https://ubuntu.com/security/CVE-2023-52594 - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() * CVE-url: https://ubuntu.com/security/CVE-2023-52583 - ceph: fix deadlock or deadcode of misusing dget() * CVE-url: https://ubuntu.com/security/CVE-2024-26720 - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again * CVE-url: https://ubuntu.com/security/CVE-2024-26825 - nfc: nci: free rx_data_reassembly skb on NCI device cleanup * CVE-url: https://ubuntu.com/security/CVE-2024-26671 - blk-mq: fix IO hang from sbitmap wakeup race * CVE-url: https://ubuntu.com/security/CVE-2024-26675 - ppp_async: limit MRU to 64K * CVE-url: https://ubuntu.com/security/CVE-2024-26663 - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() * CVE-url: https://ubuntu.com/security/CVE-2023-52602 - jfs: fix slab-out-of-bounds Read in dtSearch * CVE-url: https://ubuntu.com/security/CVE-2024-26704 - ext4: fix double-free of blocks due to wrong extents moved_len * CVE-url: https://ubuntu.com/security/CVE-2023-52619 - pstore/ram: Fix crash when setting number of cpus to an odd number * CVE-url: https://ubuntu.com/security/CVE-2024-26636 - llc: make llc_ui_sendmsg() more robust against bonding changes * CVE-url: https://ubuntu.com/security/CVE-2023-52587 - IB/ipoib: Fix mcast list locking * CVE-url: https://ubuntu.com/security/CVE-2023-52601 // CVE-url: https://ubuntu.com/security/CVE-2023-52604 - jfs: fix array-index-out-of-bounds in dbAdjTree * CVE-url: https://ubuntu.com/security/CVE-2023-52604 - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree * CVE-url: https://ubuntu.com/security/CVE-2023-52623 - SUNRPC: Fix a suspicious RCU usage warning * CVE-url: https://ubuntu.com/security/CVE-2023-52599 - jfs: fix array-index-out-of-bounds in diNewExt * CVE-url: https://ubuntu.com/security/CVE-2024-26884 - bpf: Fix hashtab overflow check on 32-bit arches * CVE-url: https://ubuntu.com/security/CVE-2024-26883 - bpf: Fix stackmap overflow check on 32-bit arches * CVE-url: https://ubuntu.com/security/CVE-2024-26882 - net: add atomic_long_t to net_device_stats fields - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() * CVE-url: https://ubuntu.com/security/CVE-2024-26908 - x86/xen: Add some null pointer checking to smp.c * CVE-url: https://ubuntu.com/security/CVE-2024-26904 - btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve * CVE-url: https://ubuntu.com/security/CVE-2024-26903 - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security * CVE-url: https://ubuntu.com/security/CVE-2024-26901 - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak * CVE-url: https://ubuntu.com/security/CVE-2024-26898 - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts Important TuxCare License Agreement CVE-2023-52622 CVE-2024-26625 CVE-2024-26636 CVE-2023-52604 CVE-2024-26663 CVE-2024-26882 CVE-2023-52617 CVE-2024-26622 CVE-2024-26704 CVE-2023-52524 CVE-2024-26614 CVE-2023-52594 CVE-2024-26908 CVE-2023-52623 CVE-2024-26679 CVE-2024-26884 CVE-2023-6270 CVE-2024-22099 CVE-2024-26801 CVE-2024-26696 CVE-2024-26901 CVE-2021-47173 CVE-2024-26635 CVE-2023-52601 CVE-2023-52619 CVE-2024-26904 CVE-2023-52486 CVE-2024-26685 CVE-2024-26903 CVE-2023-52615 CVE-2024-26671 CVE-2024-26697 CVE-2024-26720 CVE-2023-52595 CVE-2024-26883 CVE-2024-26920 CVE-2024-26825 CVE-2023-52530 CVE-2024-26675 CVE-2023-52602 CVE-2021-46981 CVE-2023-52583 CVE-2024-26735 CVE-2024-26910 CVE-2023-52599 CVE-2023-52566 CVE-2024-26805 CVE-2023-52587 CVE-2024-26898 CVE-2023-47233 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-229.240 ] * CVE-url: https://ubuntu.com/security/CVE-2022-48673 - net/smc: Fix possible access to freed memory in link clear * CVE-url: https://ubuntu.com/security/CVE-2024-35997 - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up * CVE-url: https://ubuntu.com/security/CVE-2023-52752 - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() * CVE-url: https://ubuntu.com/security/CVE-2022-48687 - ipv6: sr: fix out-of-bounds read when setting HMAC data. * CVE-url: https://ubuntu.com/security/CVE-2024-27013 - tun: limit printing rate when illegal packet received by tun dev * CVE-url: https://ubuntu.com/security/CVE-2024-27019 - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() * CVE-url: https://ubuntu.com/security/CVE-2023-52809 - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() * CVE-url: https://ubuntu.com/security/CVE-2024-26934 - USB: core: Fix deadlock in usb_deauthorize_interface() * CVE-url: https://ubuntu.com/security/CVE-2024-35978 - Bluetooth: Fix memory leak in hci_req_sync_complete() * CVE-url: https://ubuntu.com/security/CVE-2023-52753 - drm/amd/display: Avoid NULL dereference of timing generator * CVE-url: https://ubuntu.com/security/CVE-2023-52806 - ALSA: hda: Fix possible null-ptr-deref when assigning a stream * CVE-url: https://ubuntu.com/security/CVE-2024-35984 - i2c: smbus: fix NULL function pointer dereference * CVE-url: https://ubuntu.com/security/CVE-2023-52817 - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL * CVE-url: https://ubuntu.com/security/CVE-2024-27020 - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() * CVE-url: https://ubuntu.com/security/CVE-2024-35982 - batman-adv: Avoid infinite loop trying to resize local TT * CVE-url: https://ubuntu.com/security/CVE-2024-26929 - scsi: qla2xxx: Fix double free of fcport * CVE-url: https://ubuntu.com/security/CVE-2023-52802 - iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() Important TuxCare License Agreement CVE-2022-48687 CVE-2024-27020 CVE-2023-52817 CVE-2023-52752 CVE-2024-27013 CVE-2023-52753 CVE-2024-35984 CVE-2023-52802 CVE-2024-26934 CVE-2023-52806 CVE-2024-35978 CVE-2024-35982 CVE-2022-48673 CVE-2024-27019 CVE-2023-52809 CVE-2024-26929 CVE-2024-35997 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-230.241 ] * CVE-url: https://ubuntu.com/security/CVE-2024-26764 - aio: remove an outdated BUG_ON and comment in aio_complete - aio: remove the extra get_file/fput pair in io_submit_one - aio: refactor read/write iocb setup - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio * CVE-url: https://ubuntu.com/security/CVE-2024-36971 - net: fix __dst_negative_advice() race * CVE-url: https://ubuntu.com/security/CVE-2024-26840 - cachefiles: fix memory leak in cachefiles_add_cache() * CVE-url: https://ubuntu.com/security/CVE-2021-47543 - perf report: Fix memory leaks around perf_tip() * CVE-url: https://ubuntu.com/security/CVE-2024-27405 - usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call - usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs * CVE-url: https://ubuntu.com/security/CVE-2024-26779 - wifi: mac80211: fix race condition on enabling fast-xmit * CVE-url: https://ubuntu.com/security/CVE-2024-26772 - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() * CVE-url: https://ubuntu.com/security/CVE-2024-26845 - scsi: target: core: Add TMF to tmr_list handling * CVE-url: https://ubuntu.com/security/CVE-2021-47063 - drm: bridge/panel: Cleanup connector on bridge detach * CVE-url: https://ubuntu.com/security/CVE-2024-26804 - net: ip_tunnel: prevent perpetual headroom growth * CVE-url: https://ubuntu.com/security/CVE-2024-27410 - wifi: nl80211: reject iftype change with mesh ID change * CVE-url: https://ubuntu.com/security/CVE-2024-26793 - gtp: fix use-after-free and null-ptr-deref in gtp_newlink() * CVE-url: https://ubuntu.com/security/CVE-2024-26754 - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() * CVE-url: https://ubuntu.com/security/CVE-2024-26839 - IB/hfi1: Fix a memleak in init_credit_return * CVE-url: https://ubuntu.com/security/CVE-2024-26773 - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() * CVE-url: https://ubuntu.com/security/CVE-2024-27413 - efi/capsule-loader: fix incorrect allocation size * CVE-url: https://ubuntu.com/security/CVE-2024-26736 - afs: Increase buffer size in afs_update_volume_status() * CVE-url: https://ubuntu.com/security/CVE-2024-26777 - fbdev: sis: Error out if pixclock equals zero * CVE-url: https://ubuntu.com/security/CVE-2024-26778 - fbdev: savage: Error out if pixclock equals zero * CVE-url: https://ubuntu.com/security/CVE-2024-26763 - dm-crypt: don't modify the data when using authenticated encryption * CVE-url: https://ubuntu.com/security/CVE-2024-26733 - arp: Prevent overflow in arp_req_get(). * CVE-url: https://ubuntu.com/security/CVE-2024-26791 - btrfs: dev-replace: properly validate device names Important TuxCare License Agreement CVE-2024-27413 CVE-2024-27405 CVE-2024-26840 CVE-2024-26764 CVE-2024-26733 CVE-2021-47063 CVE-2024-26793 CVE-2024-26804 CVE-2024-26777 CVE-2024-36971 CVE-2024-26779 CVE-2024-26791 CVE-2024-26754 CVE-2024-26772 CVE-2024-26763 CVE-2024-26736 CVE-2024-26845 CVE-2024-26778 CVE-2024-27410 CVE-2024-26839 CVE-2024-26773 CVE-2021-47543 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-231.242 ] * CVE-url: https://ubuntu.com/security/CVE-2024-2201 - x86/cpufeatures: Add new word for scattered features - x86/cpufeatures: Add CPUID_LNX_5 to track recently added Linux-defined word - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file - x86/bhi: Add support for clearing branch history at syscall entry - x86/bhi: Define SPEC_CTRL_BHI_DIS_S - x86/bhi: Enumerate Branch History Injection (BHI) bug - x86/bhi: Add BHI mitigation knob - x86/bhi: Mitigate KVM by default - x86/bugs: Fix BHI documentation - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' - x86/bugs: Fix BHI handling of RRSBA - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation - x86/bugs: Fix BHI retpoline check * CVE-url: https://ubuntu.com/security/CVE-2024-26922 - drm/amdgpu: validate the parameters of bo mapping operations more clearly * CVE-url: https://ubuntu.com/security/CVE-2024-26642 - netfilter: nf_tables: disallow anonymous set with timeout flag * CVE-url: https://ubuntu.com/security/CVE-2021-33631 - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' * CVE-url: https://ubuntu.com/security/CVE-2024-36902 - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() * CVE-url: https://ubuntu.com/security/CVE-2024-36901 - ipv6: prevent NULL dereference in ip6_output() * Miscellaneous upstream changes - media: xc4000: Fix atomicity violation in xc4000_get_frequency - [Config] updateconfigs for CONFIG_BHI_{AUTO|OFF|ON} Important TuxCare License Agreement CVE-2024-26642 CVE-2024-26922 CVE-2024-2201 CVE-2021-47545 CVE-2024-24861 CVE-2021-33631 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-232.243 ] * CVE-url: https://ubuntu.com/security/CVE-2024-35902 - net/rds: fix possible cp null dereference * CVE-url: https://ubuntu.com/security/CVE-2024-38587 - speakup: Fix sizeof() vs ARRAY_SIZE() bug * CVE-url: https://ubuntu.com/security/CVE-2024-39493 - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak * CVE-url: https://ubuntu.com/security/CVE-2024-38381 - nfc: nci: Fix uninit-value in nci_rx_work * CVE-url: https://ubuntu.com/security/CVE-2024-26810 - vfio/pci: Lock external INTx masking ops * CVE-url: https://ubuntu.com/security/CVE-2024-26687 - xen/events: close evtchn after mapping cleanup * CVE-url: https://ubuntu.com/security/CVE-2024-35893 - net: sched: change type of reference and bind counters - net: sched: act_skbmod: remove dependency on rtnl lock - net/sched: act_skbmod: prevent kernel-infoleak * CVE-url: https://ubuntu.com/security/CVE-2024-35823 - vt: preserve unicode values corresponding to screen characters - vt: fix unicode buffer corruption when deleting characters * CVE-url: https://ubuntu.com/security/CVE-2024-35805 - dm snapshot: Replace mutex with rw semaphore - dm snapshot: fix lockup in dm_exception_table_exit * CVE-url: https://ubuntu.com/security/CVE-2024-27004 - clk: core: clarify the check for runtime PM - clk: Get runtime PM before walking tree during disable_unused * CVE-url: https://ubuntu.com/security/CVE-2024-26852 - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() * CVE-url: https://ubuntu.com/security/CVE-2023-52620 - netfilter: nf_tables: disallow timeout for anonymous sets * CVE-url: https://ubuntu.com/security/CVE-2024-25739 - ubi: Check for too small LEB size in VTBL code * CVE-url: https://ubuntu.com/security/CVE-2024-27437 - genirq: Add IRQF_NO_AUTOEN for request_irq/nmi() - vfio/pci: Disable auto-enable of exclusive INTx IRQ * CVE-url: https://ubuntu.com/security/CVE-2022-48627 - vc: separate state - vt: fix memory overlapping when deleting chars in the buffer * CVE-url: https://ubuntu.com/security/CVE-2024-35910 - mptcp: add sk_stop_timer_sync helper - tcp: properly terminate timers for kernel sockets * CVE-url: https://ubuntu.com/security/CVE-2024-35969 - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr * CVE-url: https://ubuntu.com/security/CVE-2024-27024 - RDS: RDMA: Fix the NULL-ptr deref in rds_ib_get_mr - net/rds: fix WARNING in rds_conn_connect_if_down * CVE-url: https://ubuntu.com/security/CVE-2024-26863 - hsr: Fix uninit-value access in hsr_get_node() * CVE-url: https://ubuntu.com/security/CVE-2024-26984 - nouveau: fix instmem race condition around ptr stores * CVE-url: https://ubuntu.com/security/CVE-2024-36020 - i40e: fix vf may be used uninitialized in this function warning * CVE-url: https://ubuntu.com/security/CVE-2024-35849 - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() * CVE-url: https://ubuntu.com/security/CVE-2024-27388 - SUNRPC: fix some memleaks in gssx_dec_option_array * CVE-url: https://ubuntu.com/security/CVE-2024-35886 - ipv6: Fix infinite recursion in fib6_dump_done(). * CVE-url: https://ubuntu.com/security/CVE-2024-35809 - PCI/PM: Drain runtime-idle callbacks before driver removal * CVE-url: https://ubuntu.com/security/CVE-2024-26875 - media: pvrusb2: fix uaf in pvr2_context_set_notify * CVE-url: https://ubuntu.com/security/CVE-2024-26851 - netfilter: nf_conntrack_h323: Add protection for bmp length out of range * CVE-url: https://ubuntu.com/security/CVE-2024-26999 - serial/pmac_zilog: Remove flawed mitigation for rx irq flood * CVE-url: https://ubuntu.com/security/CVE-2024-35819 - soc: fsl: qbman: Use raw spinlock for cgr_lock * CVE-url: https://ubuntu.com/security/CVE-2024-35806 - soc: fsl: qbman: Always disable interrupts when taking cgr_lock * CVE-url: https://ubuntu.com/security/CVE-2023-52699 - sysv: don't call sb_bread() with pointers_lock held * CVE-url: https://ubuntu.com/security/CVE-2024-35828 - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() * CVE-url: https://ubuntu.com/security/CVE-2024-27001 - comedi: vmk80xx: fix incomplete endpoint checking * CVE-url: https://ubuntu.com/security/CVE-2024-26878 - quota: Fix potential NULL pointer dereference * CVE-url: https://ubuntu.com/security/CVE-2024-27008 - drm: nv04: Fix out of bounds access * CVE-url: https://ubuntu.com/security//CVE-2024-35825 - usb: gadget: ncm: Fix handling of zero block length packets * CVE-url: https://ubuntu.com/security/CVE-2024-35935 - btrfs: send: handle path ref underflow in header iterate_inode_ref() * CVE-url: https://ubuntu.com/security/CVE-2024-26957 - s390/zcrypt: fix reference counting on zcrypt card objects * CVE-url: https://ubuntu.com/security/CVE-2024-35973 - geneve: fix header validation in geneve[6]_xmit_skb * CVE-url: https://ubuntu.com/security/CVE-2024-26965 - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays * CVE-url: https://ubuntu.com/security/CVE-2024-26931 - scsi: qla2xxx: Fix command flush on cable pull * CVE-url: https://ubuntu.com/security/CVE-2024-35944 - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() * CVE-url: https://ubuntu.com/security/CVE-2024-27028 - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler * CVE-url: https://ubuntu.com/security/CVE-2024-35830 - media: tc358743: register v4l2 async device only after successful setup * CVE-url: https://ubuntu.com/security/CVE-2024-26956 - nilfs2: fix failure to detect DAT corruption in btree and direct mappings * CVE-url: https://ubuntu.com/security/CVE-2024-35807 - ext4: fix corruption during on-line resize * CVE-url: https://ubuntu.com/security/CVE-2024-26813 - vfio/platform: Create persistent IRQ handlers * CVE-url: https://ubuntu.com/security/CVE-2023-52644 - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled * CVE-url: https://ubuntu.com/security/CVE-2024-26966 - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays * CVE-url: https://ubuntu.com/security/CVE-2024-26654 - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs * CVE-url: https://ubuntu.com/security/CVE-2024-27073 - media: ttpci: fix two memleaks in budget_av_attach * CVE-url: https://ubuntu.com/security/CVE-2023-52880 - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc * CVE-url: https://ubuntu.com/security/CVE-2023-52650 - drm/tegra: dsi: Add missing check for of_find_device_by_node * CVE-url: https://ubuntu.com/security/CVE-2024-35822 - usb: udc: remove warning when queue disabled ep * CVE-url: https://ubuntu.com/security/CVE-2024-35933 - Bluetooth: btintel: Fix null ptr deref in btintel_read_version * CVE-url: https://ubuntu.com/security/CVE-2024-26857 - geneve: make sure to pull inner header in geneve_rx() * CVE-url: https://ubuntu.com/security/CVE-2024-35925 - block: prevent division by zero in blk_rq_stat_sum() * CVE-url: https://ubuntu.com/security/CVE-2024-35930 - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() * CVE-url: https://ubuntu.com/security/CVE-2024-27419 - netrom: Fix data-races around sysctl_net_busy_read * CVE-url: https://ubuntu.com/security/CVE-2024-35955 - kprobes: Fix possible use-after-free issue on kprobe registration * CVE-url: https://ubuntu.com/security/CVE-2024-27074 - media: go7007: fix a memleak in go7007_load_encoder * CVE-url: https://ubuntu.com/security/CVE-2024-35847 - irqchip/gic-v3-its: Prevent double free on error * CVE-url: https://ubuntu.com/security/CVE-2024-35936 - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() * CVE-url: https://ubuntu.com/security/CVE-2024-35821 - ubifs: Set page uptodate in the correct place * CVE-url: https://ubuntu.com/security/CVE-2024-27075 - media: dvb-frontends: avoid stack overflow warnings with clang * CVE-url: https://ubuntu.com/security/CVE-2024-26651 - sr9800: Add check for usbnet_get_endpoints * CVE-url: https://ubuntu.com/security/CVE-2024-27043 - media: edia: dvbdev: fix a use-after-free * CVE-url: https://ubuntu.com/security/CVE-2024-26976 - KVM: Always flush async #PF workqueue when vCPU is being destroyed * CVE-url: https://ubuntu.com/security/CVE-2024-27000 - serial: mxs-auart: add spinlock around changing cts state * CVE-url: https://ubuntu.com/security/CVE-2024-35815 - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion * CVE-url: https://ubuntu.com/security/CVE-2024-27396 - net: gtp: Fix Use-After-Free in gtp_dellink * CVE-url: https://ubuntu.com/security/CVE-2024-26874 - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip * CVE-url: https://ubuntu.com/security/CVE-2024-35922 - fbmon: prevent division by zero in fb_videomode_from_videomode() * CVE-url: https://ubuntu.com/security/CVE-2024-27078 - media: v4l2-tpg: fix some memleaks in tpg_alloc * CVE-url: https://ubuntu.com/security/CVE-2024-26981 - nilfs2: fix OOB in nilfs_set_de_type * CVE-url: https://ubuntu.com/security/CVE-2024-26816 - x86, relocs: Ignore relocations in .notes section * CVE-url: https://ubuntu.com/security/CVE-2024-26880 - dm: call the resume method on internal suspend * CVE-url: https://ubuntu.com/security/CVE-2024-26994 - speakup: Avoid crash on very long word * CVE-url: https://ubuntu.com/security/CVE-2024-26955 - nilfs2: prevent kernel bug at submit_bh_wbc() * CVE-url: https://ubuntu.com/security/CVE-2024-36004 - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue * CVE-url: https://ubuntu.com/security/CVE-2024-35789 - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes * CVE-url: https://ubuntu.com/security/CVE-2024-26974 - crypto: qat - resolve race condition during AER recovery * CVE-url: https://ubuntu.com/security/CVE-2024-26859 - net/bnx2x: Prevent access to a freed page in page_pool * CVE-url: https://ubuntu.com/security/CVE-2024-35960 - net/mlx5: Properly link new fs rules into the tree * CVE-url: https://ubuntu.com/security/CVE-2024-27059 - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command * CVE-url: https://ubuntu.com/security/CVE-2024-26993 - fs: sysfs: Fix reference leak in sysfs_break_active_protection() * CVE-url: https://ubuntu.com/security/CVE-2024-24857 // CVE-url: https://ubuntu.com/security/CVE-2024-24858 // CVE-url: https://ubuntu.com/security/CVE-2024-24859 - Bluetooth: Fix TOCTOU in HCI debugfs implementation * CVE-url: https://ubuntu.com/security/CVE-2024-26894 - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() * CVE-url: https://ubuntu.com/security/CVE-2024-27436 - ALSA: usb-audio: Stop parsing channels bits when all channels are found. * CVE-url: https://ubuntu.com/security/CVE-2024-35915 - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet * CVE-url: https://ubuntu.com/security/CVE-2024-26973 - fat: fix uninitialized field in nostale filehandles * CVE-url: https://ubuntu.com/security/CVE-2024-26923 - af_unix: Fix garbage collector racing against connect() * CVE-url: https://ubuntu.com/security/CVE-2024-26643 - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout * CVE-url: https://ubuntu.com/security/CVE-2024-26886 - Bluetooth: af_bluetooth: Fix deadlock Important TuxCare License Agreement CVE-2024-27001 CVE-2024-35910 CVE-2023-52650 CVE-2024-26966 CVE-2024-35933 CVE-2024-35805 CVE-2024-25739 CVE-2024-35973 CVE-2024-26810 CVE-2024-35822 CVE-2024-26813 CVE-2024-35849 CVE-2024-35807 CVE-2024-27000 CVE-2024-35902 CVE-2024-26974 CVE-2024-26965 CVE-2024-26852 CVE-2024-27073 CVE-2024-38587 CVE-2024-26976 CVE-2024-39493 CVE-2024-27024 CVE-2024-26956 CVE-2024-35955 CVE-2024-26816 CVE-2024-26923 CVE-2024-27388 CVE-2024-35789 CVE-2024-36004 CVE-2024-27075 CVE-2024-26857 CVE-2024-26880 CVE-2024-35893 CVE-2024-26859 CVE-2024-35886 CVE-2024-26886 CVE-2024-35922 CVE-2024-26875 CVE-2024-26981 CVE-2024-35815 CVE-2024-27059 CVE-2024-26955 CVE-2024-26654 CVE-2024-26993 CVE-2024-27437 CVE-2024-26894 CVE-2024-26999 CVE-2024-35936 CVE-2024-27074 CVE-2024-26687 CVE-2024-35828 CVE-2024-26643 CVE-2024-35915 CVE-2024-35925 CVE-2024-26874 CVE-2024-26994 CVE-2024-38381 CVE-2024-27396 CVE-2024-35809 CVE-2024-27436 CVE-2024-27043 CVE-2024-35944 CVE-2024-35825 CVE-2024-26863 CVE-2024-27028 CVE-2023-52699 CVE-2024-27008 CVE-2024-35935 CVE-2024-35806 CVE-2023-52620 CVE-2024-35830 CVE-2024-26878 CVE-2022-48627 CVE-2024-26984 CVE-2024-35821 CVE-2024-26931 CVE-2023-52880 CVE-2024-35969 CVE-2024-35823 CVE-2024-24858 CVE-2024-24857 CVE-2024-27004 CVE-2024-35847 CVE-2024-27078 CVE-2024-35819 CVE-2024-26851 CVE-2024-24859 CVE-2024-35960 CVE-2024-27419 CVE-2023-52644 CVE-2024-36020 CVE-2024-35930 CVE-2024-26651 CVE-2024-26973 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-233.244 ] * CVE-url: https://ubuntu.com/security/CVE-2024-25744 - x86/sev: Rename mem_encrypt.c to mem_encrypt_amd.c - x86: Introduce ia32_enabled() - x86/coco: Disable 32-bit emulation by default on TDX and SEV * CVE-url: https://ubuntu.com/security/CVE-2024-36016 - tty: n_gsm: fix frame reception handling - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() * CVE-url: https://ubuntu.com/security/CVE-2023-52474 - IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order - IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests * CVE-url: https://ubuntu.com/security/CVE-2024-26907 - stddef: Introduce DECLARE_FLEX_ARRAY() helper - RDMA/mlx5: Fix fortify source warning while accessing Eth segment * CVE-url: https://ubuntu.com/security/CVE-2024-39495 - greybus: Fix use-after-free bug in gb_interface_release due to race condition. * CVE-url: https://ubuntu.com/security/CVE-2024-39494 - ima: Fix use-after-free on a dentry's dname.name * CVE-url: https://ubuntu.com/security/CVE-2024-40902 - jfs: xattr: fix buffer overflow for invalid xattr * CVE-url: https://ubuntu.com/security/CVE-2022-48865 - tipc: fix kernel panic when enabling bearer * CVE-url: https://ubuntu.com/security/CVE-2022-48863 - mISDN: Fix memory leak in dsp_pipeline_build() * CVE-url: https://ubuntu.com/security/CVE-2024-35950 - drm/client: Fully protect modes[] with dev->mode_config.mutex Important TuxCare License Agreement CVE-2024-39495 CVE-2024-36016 CVE-2024-40902 CVE-2024-39494 CVE-2022-48863 CVE-2022-48865 CVE-2024-26907 CVE-2024-25744 CVE-2024-35950 CVE-2023-52474 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-234.245 ] * CVE-url: https://ubuntu.com/security/CVE-2024-42236 - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() * CVE-url: https://ubuntu.com/security/CVE-2024-41095 - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes * CVE-url: https://ubuntu.com/security/CVE-2024-41098 - ata: libata-core: Fix null pointer dereference on error * CVE-url: https://ubuntu.com/security/CVE-2024-42244 - USB: serial: mos7840: fix crash on resume * CVE-url: https://ubuntu.com/security/CVE-2024-41089 - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes * CVE-url: https://ubuntu.com/security/CVE-2024-42232 - libceph: fix race between delayed_work() and ceph_monc_stop() * CVE-url: https://ubuntu.com/security/CVE-2024-42153 - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr * CVE-url: https://ubuntu.com/security/CVE-2022-48791 - scsi: pm80xx: Fix TMF task completion race condition - scsi: pm8001: Fix use-after-free for aborted TMF sas_task * CVE-url: https://ubuntu.com/security/CVE-2022-48788 - nvme-rdma: fix possible use-after-free in transport error_recovery work * CVE-url: https://ubuntu.com/security/CVE-2022-48792 - scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task * CVE-url: https://ubuntu.com/security/CVE-2022-48790 - nvme: fix a possible use-after-free in controller reset during load * CVE-url: https://ubuntu.com/security/CVE-2024-42154 - tcp_metrics: validate source addr length * CVE-url: https://ubuntu.com/security/CVE-2024-38596 - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg * CVE-url: https://ubuntu.com/security/CVE-2024-36270 - netfilter: tproxy: bail out if IP has been disabled on the device * CVE-url: https://ubuntu.com/security/CVE-2024-38780 - dma-buf/sw-sync: don't enable IRQ from sync_print_obj() * CVE-url: https://ubuntu.com/security/CVE-2024-36886 - tipc: fix UAF in error path * CVE-url: https://ubuntu.com/security/CVE-2024-42068 - bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro() * CVE-url: https://ubuntu.com/security/CVE-2024-42156 - s390/pkey: Wipe copies of clear-key structures on failure * CVE-url: https://ubuntu.com/security/CVE-2024-42079 - gfs2: Fix NULL pointer dereference in gfs2_log_flush * CVE-url: https://ubuntu.com/security/CVE-2024-42223 - media: dvb-frontends: tda10048: Fix integer overflow * CVE-url: https://ubuntu.com/security/CVE-2024-42157 - s390/pkey: Wipe sensitive data on failure * CVE-url: https://ubuntu.com/security/CVE-2024-42160 - f2fs: indicate shutdown f2fs to allow unmount successfully - f2fs: support fault_type mount option - f2fs: check validation of fault attrs in f2fs_build_fault_attr() * CVE-url: https://ubuntu.com/security/CVE-2024-42224 - net: dsa: mv88e6xxx: Correct check for empty list * CVE-url: https://ubuntu.com/security/CVE-2024-38570 - gfs2: Rename sd_{ glock => kill }_wait - gfs2: Fix potential glock use-after-free on unmount * CVE-url: https://ubuntu.com/security/CVE-2024-38583 - nilfs2: fix use-after-free of timer for log writer thread - nilfs2: fix unexpected freezing of nilfs_segctor_sync() - nilfs2: fix potential hang in nilfs_detach_log_writer() * CVE-url: https://ubuntu.com/security/CVE-2024-42070 - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers * CVE-url: https://ubuntu.com/security/CVE-2024-42077 - ocfs2: fix DIO failure due to insufficient transaction credits * CVE-url: https://ubuntu.com/security/CVE-2024-42226 - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB * CVE-url: https://ubuntu.com/security/CVE-2024-42228 - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc Critical TuxCare License Agreement CVE-2024-42153 CVE-2024-42224 CVE-2022-48790 CVE-2024-36270 CVE-2024-38570 CVE-2024-42228 CVE-2022-48792 CVE-2024-42156 CVE-2022-48788 CVE-2024-42070 CVE-2022-48791 CVE-2024-42077 CVE-2024-41089 CVE-2024-42232 CVE-2024-42154 CVE-2024-42160 CVE-2024-41095 CVE-2024-38583 CVE-2024-42244 CVE-2024-41098 CVE-2024-42223 CVE-2024-36886 CVE-2024-42226 CVE-2024-42236 CVE-2024-38596 CVE-2024-38780 CVE-2024-42068 CVE-2024-42157 CVE-2024-42079 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-235.246 ] * CVE-url: https://ubuntu.com/security/CVE-2024-39467 - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() * CVE-url: https://ubuntu.com/security/CVE-2024-36940 - pinctrl: core: delete incorrect free in pinctrl_enable() * CVE-url: https://ubuntu.com/security/CVE-2024-38659 - enic: Validate length of nl attributes in enic_set_vf_port * CVE-url: https://ubuntu.com/security/CVE-2024-38560 - scsi: bfa: Ensure the copied buf is NUL terminated * CVE-url: https://ubuntu.com/security/CVE-2024-36941 - wifi: nl80211: don't free NULL coalescing rule * CVE-url: https://ubuntu.com/security/CVE-2024-27401 - firewire: nosy: ensure user_length is taken into account when fetching packet contents * CVE-url: https://ubuntu.com/security/CVE-2024-39276 - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() * CVE-url: https://ubuntu.com/security/CVE-2024-27398 - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout * CVE-url: https://ubuntu.com/security/CVE-2024-36964 - fs/9p: only translate RWX permissions for plain 9P2000 * CVE-url: https://ubuntu.com/security/CVE-2024-38601 - ring-buffer: Fix a race between readers and resize checks * CVE-url: https://ubuntu.com/security/CVE-2024-39475 - fbdev: savage: Handle err return when savagefb_check_var failed * CVE-url: https://ubuntu.com/security/CVE-2024-38578 - ecryptfs: Fix buffer size for tag 66 packet * CVE-url: https://ubuntu.com/security/CVE-2024-36950 - firewire: ohci: mask bus reset interrupts between ISR and bottom half * CVE-url: https://ubuntu.com/security/CVE-2024-38589 - netrom: fix possible dead-lock in nr_rt_ioctl() * CVE-url: https://ubuntu.com/security/CVE-2024-38627 - stm class: Fix a double free in stm_register_device() * CVE-url: https://ubuntu.com/security/CVE-2024-38612 - ipv6: sr: fix invalid unregister error path * CVE-url: https://ubuntu.com/security/CVE-2024-36905 - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets * CVE-url: https://ubuntu.com/security/CVE-2024-38559 - scsi: qedf: Ensure the copied buf is NUL terminated * CVE-url: https://ubuntu.com/security/CVE-2024-33621 - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound * CVE-url: https://ubuntu.com/security/CVE-2024-38637 - greybus: lights: check return of get_channel_from_mode * CVE-url: https://ubuntu.com/security/CVE-2024-38567 - wifi: carl9170: add a proper sanity check for endpoints * CVE-url: https://ubuntu.com/security/CVE-2024-39301 - net/9p: fix uninit-value in p9_client_rpc() * CVE-url: https://ubuntu.com/security/CVE-2024-36919 - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload * CVE-url: https://ubuntu.com/security/CVE-2022-48772 - media: lgdt3306a: Add a check against null-pointer-def * CVE-url: https://ubuntu.com/security/CVE-2024-36017 - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation * CVE-url: https://ubuntu.com/security/CVE-2024-36934 - bna: ensure the copied buf is NUL terminated * CVE-url: https://ubuntu.com/security/CVE-2024-38558 - net: openvswitch: fix overwriting ct original tuple for ICMPv6 * CVE-url: https://ubuntu.com/security/CVE-2024-38565 - USB: core: Add routines for endpoint checks in old drivers - wifi: ar5523: enable proper endpoint verification * CVE-url: https://ubuntu.com/security/CVE-2024-38600 - ALSA: control: Add verification for kctl accesses - ALSA: control: Track in-flight control read/write/tlv accesses - ALSA: Fix deadlocks with kctl removals at disconnection * CVE-url: https://ubuntu.com/security/CVE-2024-31076 - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline * CVE-url: https://ubuntu.com/security/CVE-2024-36015 - ida: Add new API - ppdev: Remove usage of the deprecated ida_simple_xx() API - ppdev: Add an error check in register_device * CVE-url: https://ubuntu.com/security/CVE-2024-38621 - media: stk1160: fix bounds checking in stk1160_copy_video() * CVE-url: https://ubuntu.com/security/CVE-2024-38549 - drm/mediatek: Add 0 size check to mtk_drm_gem_obj * CVE-url: https://ubuntu.com/security/CVE-2024-35947 - dyndbg: fix old BUG_ON in >control parser * CVE-url: https://ubuntu.com/security/CVE-2024-37353 - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails * CVE-url: https://ubuntu.com/security/CVE-2024-27399 - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout * CVE-url: https://ubuntu.com/security/CVE-2024-38618 - ALSA: timer: Simplify timer hw resolution calls - ALSA: timer: Set lower bound of start tick time * CVE-url: https://ubuntu.com/security/CVE-2024-38579 - crypto: bcm - Fix pointer arithmetic * CVE-url: https://ubuntu.com/security/CVE-2024-36286 - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() * CVE-url: https://ubuntu.com/security/CVE-2024-39488 - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY * CVE-url: https://ubuntu.com/security/CVE-2024-38607 - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" * CVE-url: https://ubuntu.com/security/CVE-2024-37356 - params: lift param_set_uint_minmax to common code - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). * CVE-url: https://ubuntu.com/security/CVE-2024-38613 - m68k: Fix spinlock race in kernel thread creation * CVE-url: https://ubuntu.com/security/CVE-2024-36954 - tipc: fix a possible memleak in tipc_buf_append * CVE-url: https://ubuntu.com/security/CVE-2024-38661 - s390/ap: Fix crash in AP internal function modify_bitmap() * CVE-url: https://ubuntu.com/security/CVE-2024-38599 - jffs2: prevent xattr node from overflowing the eraseblock * CVE-url: https://ubuntu.com/security/CVE-2024-38633 - serial: core: Provide port lock wrappers - serial: max3100: Update uart_driver_registered on driver removal * CVE-url: https://ubuntu.com/security/CVE-2024-39292 - um: Add winch to winch_handlers before registering winch IRQ * CVE-url: https://ubuntu.com/security/CVE-2024-36939 - NFS: Cleanup - add nfs_clients_exit to mirror nfs_clients_init - nfs: expose /proc/net/sunrpc/nfs in net namespaces - sunrpc: add a struct rpc_stats arg to rpc_create_args - nfs: make the rpc_stat per net namespace - nfs: Handle error of rpc_proc_register() in nfs_net_init(). * CVE-url: https://ubuntu.com/security/CVE-2024-38634 - serial: max3100: Lock port->lock when calling uart_handle_cts_change() * CVE-url: https://ubuntu.com/security/CVE-2024-36933 - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). * CVE-url: https://ubuntu.com/security/CVE-2024-36883 - net: fix out-of-bounds access in ops_init * CVE-url: https://ubuntu.com/security/CVE-2024-39480 - kdb: Fix buffer overflow during tab-complete * CVE-url: https://ubuntu.com/security/CVE-2024-36960 - drm/vmwgfx: Fix invalid reads in fence signaled events * CVE-url: https://ubuntu.com/security/CVE-2024-36946 - phonet: fix rtm_phonet_notify() skb allocation Important TuxCare License Agreement CVE-2024-27401 CVE-2024-38567 CVE-2024-36940 CVE-2024-38618 CVE-2024-39276 CVE-2024-36950 CVE-2024-36933 CVE-2024-36946 CVE-2024-36017 CVE-2024-38559 CVE-2024-38607 CVE-2024-38600 CVE-2024-38661 CVE-2024-38599 CVE-2024-37353 CVE-2024-38578 CVE-2024-38627 CVE-2024-39488 CVE-2024-36939 CVE-2024-31076 CVE-2024-36941 CVE-2024-38549 CVE-2024-38565 CVE-2024-38560 CVE-2024-36954 CVE-2024-38633 CVE-2024-36964 CVE-2024-36015 CVE-2024-36286 CVE-2024-39480 CVE-2024-38621 CVE-2024-35947 CVE-2024-38589 CVE-2024-36883 CVE-2024-39475 CVE-2024-38637 CVE-2024-27399 CVE-2024-38613 CVE-2024-33621 CVE-2024-38558 CVE-2022-48772 CVE-2024-39292 CVE-2024-36905 CVE-2024-38579 CVE-2024-39301 CVE-2024-39467 CVE-2024-38634 CVE-2024-36934 CVE-2024-38612 CVE-2024-38601 CVE-2024-36960 CVE-2024-38659 CVE-2024-36919 CVE-2024-27398 CVE-2024-37356 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-236.247 ] * CVE-url: https://ubuntu.com/security/CVE-2024-39487 - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() * CVE-url: https://ubuntu.com/security/CVE-2023-52760 - gfs2: Fix slab-use-after-free in gfs2_qd_dealloc * CVE-url: https://ubuntu.com/security/CVE-2024-39484 - mmc: davinci: Don't strip remove function when driver is builtin * CVE-url: https://ubuntu.com/security/CVE-2024-35835 - net/mlx5: Use kfree(ft->g) in arfs_create_groups() - net/mlx5e: fix a double-free in arfs_create_groups * Miscellaneous upstream changes - fixup! blk-mq: fix IO hang from sbitmap wakeup race - Revert "block: add check that partition length needs to be aligned with block size" Important TuxCare License Agreement CVE-2024-39484 CVE-2023-52760 CVE-2024-39487 CVE-2024-35835 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-237.248 ] * CVE-url: https://ubuntu.com/security/CVE-2024-26752 - l2tp: pass correct message length to ip6_append_data * CVE-url: https://ubuntu.com/security/CVE-2021-47188 - scsi: ufs: core: Improve SCSI abort handling * CVE-url: https://ubuntu.com/security/CVE-2024-26677 - rxrpc: Fix delayed ACKs to not set the reference serial number * CVE-url: https://ubuntu.com/security/CVE-2023-52527 - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() * CVE-url: https://ubuntu.com/security/CVE-2024-43882 - exec: Fix ToCToU between perm check and set-uid/gid usage * CVE-url: https://ubuntu.com/security/CVE-2022-48943 - KVM: x86/mmu: make apf token non-zero to fix bug * CVE-url: https://ubuntu.com/security/CVE-2024-38630 - watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger * CVE-url: https://ubuntu.com/security/CVE-2024-44987 - ipv6: prevent UAF in ip6_send_skb() * CVE-url: https://ubuntu.com/security/CVE-2024-42285 - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs * CVE-url: https://ubuntu.com/security/CVE-2022-48733 - btrfs: fix use-after-free after failure to create a snapshot * CVE-url: https://ubuntu.com/security/CVE-2024-44940 - fou: remove warn in gue_gro_receive on unsupported protocol * CVE-url: https://ubuntu.com/security/CVE-2024-41059 - hfsplus: fix uninit-value in copy_name * CVE-url: https://ubuntu.com/security/CVE-2024-46673 - scsi: aacraid: Fix double-free on probe failure * CVE-url: https://ubuntu.com/security/CVE-2024-42313 - media: venus: fix use after free in vdec_close * CVE-url: https://ubuntu.com/security/CVE-2024-44999 - gtp: pull network headers in gtp_dev_xmit() * CVE-url: https://ubuntu.com/security/CVE-2024-42271 - net/iucv: fix use after free in iucv_sock_close() * CVE-url: https://ubuntu.com/security/CVE-2024-44942 - f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC * CVE-url: https://ubuntu.com/security/CVE-2024-43858 - jfs: Fix array-index-out-of-bounds in diFree * CVE-url: https://ubuntu.com/security/CVE-2024-41071 - wifi: mac80211: Avoid address calculations via out of bounds array indexing * CVE-url: https://ubuntu.com/security/CVE-2024-42301 - dev/parport: fix the array out-of-bounds risk * CVE-url: https://ubuntu.com/security/CVE-2024-46674 - usb: dwc3: st: fix probed platform device ref count on probe error path * CVE-url: https://ubuntu.com/security/CVE-2024-43900 - media: xc2028: avoid use-after-free in load_firmware_cb() * CVE-url: https://ubuntu.com/security/CVE-2024-42284 - tipc: Return non-zero value from tipc_udp_addr2str() on error * CVE-url: https://ubuntu.com/security/CVE-2024-44998 - atm: idt77252: prevent use after free in dequeue_rx() * CVE-url: https://ubuntu.com/security/CVE-2024-42280 - mISDN: Fix a use after free in hfcmulti_tx() * CVE-url: https://ubuntu.com/security/CVE-2024-39503 - netns: add pre_exit method to struct pernet_operations - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type * CVE-url: https://ubuntu.com/security/CVE-2024-39499 - vmci: prevent speculation leaks by sanitizing event in event_deliver() * CVE-url: https://ubuntu.com/security/CVE-2024-40988 - drm/radeon: fix UBSAN warning in kv_dpm.c * CVE-url: https://ubuntu.com/security/CVE-2024-40916 - drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found * CVE-url: https://ubuntu.com/security/CVE-2024-40904 - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages * CVE-url: https://ubuntu.com/security/CVE-2024-39506 - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet * CVE-url: https://ubuntu.com/security/CVE-2024-42106 - inet_diag: Initialize pad field in struct inet_diag_req_v2 * CVE-url: https://ubuntu.com/security/CVE-2024-42145 - IB/core: Implement a limit on UMAD receive List * CVE-url: https://ubuntu.com/security/CVE-2024-40945 - iommu: Return right value in iommu_sva_bind_device() * CVE-url: https://ubuntu.com/security/CVE-2024-40932 - drm/exynos/vidi: fix memory leak in .get_modes() * CVE-url: https://ubuntu.com/security/CVE-2024-41006 - netrom: Fix a memory leak in nr_heartbeat_expiry() * CVE-url: https://ubuntu.com/security/CVE-2024-40943 - ocfs2: fix races between hole punching and AIO+DIO * CVE-url: https://ubuntu.com/security/CVE-2024-36894 - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete * CVE-url: https://ubuntu.com/security/CVE-2024-42124 - scsi: qedf: Make qedf_execute_tmf() non-preemptible * CVE-url: https://ubuntu.com/security/CVE-2024-42115 - jffs2: Fix potential illegal address access in jffs2_free_inode * CVE-url: https://ubuntu.com/security/CVE-2024-41035 - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor * CVE-url: https://ubuntu.com/security/CVE-2024-41097 - usb: atm: cxacru: fix endpoint checking in cxacru_bind() * CVE-url: https://ubuntu.com/security/CVE-2024-42119 - drm/amd/display: Skip finding free audio for unknown engine_id * CVE-url: https://ubuntu.com/security/CVE-2024-39501 - drivers: core: synchronize really_probe() and dev_uevent() * CVE-url: https://ubuntu.com/security/CVE-2024-42105 - nilfs2: fix inode number range checks * CVE-url: https://ubuntu.com/security/CVE-2024-40984 - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." * CVE-url: https://ubuntu.com/security/CVE-2024-40987 - drm/amdgpu: fix UBSAN warning in kv_dpm.c * CVE-url: https://ubuntu.com/security/CVE-2024-42097 - ALSA: emux: improve patch ioctl data validation * CVE-url: https://ubuntu.com/security/CVE-2024-42090 - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER * CVE-url: https://ubuntu.com/security/CVE-2024-40942 - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects * CVE-url: https://ubuntu.com/security/CVE-2024-40981 - batman-adv: bypass empty buckets in batadv_purge_orig_ref() * CVE-url: https://ubuntu.com/security/CVE-2024-40959 - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() * CVE-url: https://ubuntu.com/security/CVE-2024-42089 - ASoC: fsl-asoc-card: set priv->pdev before using it * CVE-url: https://ubuntu.com/security/CVE-2024-40901 - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory * CVE-url: https://ubuntu.com/security/CVE-2024-42101 - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes * CVE-url: https://ubuntu.com/security/CVE-2024-40980 - drop_monitor: replace spin_lock by raw_spin_lock * CVE-url: https://ubuntu.com/security/CVE-2024-42084 - ftruncate: pass a signed offset * CVE-url: https://ubuntu.com/security/CVE-2024-39509 - HID: core: remove unnecessary WARN_ON() in implement() * CVE-url: https://ubuntu.com/security/CVE-2024-42096 - x86: stop playing stack games in profile_pc() * CVE-url: https://ubuntu.com/security/CVE-2024-38619 - usb-storage: alauda: Check whether the media is initialized * CVE-url: https://ubuntu.com/security/CVE-2024-42102 - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" - mm: avoid overflows in dirty throttling logic * CVE-url: https://ubuntu.com/security/CVE-2024-41044 - ppp: reject claimed-as-LCP but actually malformed packets * CVE-url: https://ubuntu.com/security/CVE-2024-40978 - scsi: qedi: Fix crash while reading debugfs attribute * CVE-url: https://ubuntu.com/security/CVE-2024-40941 - wifi: iwlwifi: mvm: don't read past the mfuart notifcation * CVE-url: https://ubuntu.com/security/CVE-2024-40905 - ipv6: fix possible race in __fib6_drop_pcpu_from() * CVE-url: https://ubuntu.com/security/CVE-2023-52803 - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries * CVE-url: https://ubuntu.com/security/CVE-2024-42104 - nilfs2: add missing check for inode numbers on directory entries * CVE-url: https://ubuntu.com/security/CVE-2024-42148 - bnx2x: Fix multiple UBSAN array-index-out-of-bounds * CVE-url: https://ubuntu.com/security/CVE-2024-42094 - net/iucv: Avoid explicit cpumask var allocation on stack * CVE-url: https://ubuntu.com/security/CVE-2024-41046 - net: ethernet: lantiq_etop: fix double free in detach * CVE-url: https://ubuntu.com/security/CVE-2024-38538 - net: bridge: xmit: make sure we have at least eth header len bytes * CVE-url: https://ubuntu.com/security/CVE-2024-26830 - i40e: Fix permission check for VF MAC filters - i40e: Fix MAC address setting for a VF via Host/VM - i40e: Do not allow untrusted VF to remove administratively set MAC * CVE-url: https://ubuntu.com/security/CVE-2023-52885 - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() * CVE-url: https://ubuntu.com/security/CVE-2023-52629 - sh: push-switch: Reorder cleanup operations to avoid use-after-free bug * Miscellaneous upstream changes - fixup! scsi: qla2xxx: Fix double free of fcport Important TuxCare License Agreement CVE-2024-38630 CVE-2024-40943 CVE-2024-38619 CVE-2024-42148 CVE-2024-42280 CVE-2024-44999 CVE-2024-42284 CVE-2024-40905 CVE-2024-42102 CVE-2024-46674 CVE-2024-40901 CVE-2024-39499 CVE-2024-40980 CVE-2023-52629 CVE-2024-40959 CVE-2024-40932 CVE-2023-52885 CVE-2024-42096 CVE-2022-48943 CVE-2024-44998 CVE-2024-40941 CVE-2022-48733 CVE-2023-52527 CVE-2024-40945 CVE-2024-40904 CVE-2024-42115 CVE-2024-40942 CVE-2024-40978 CVE-2024-41059 CVE-2024-44940 CVE-2024-42271 CVE-2024-40988 CVE-2024-26830 CVE-2024-40916 CVE-2024-39509 CVE-2024-43900 CVE-2024-40981 CVE-2024-46673 CVE-2024-42090 CVE-2024-44987 CVE-2024-39503 CVE-2024-42105 CVE-2024-26752 CVE-2024-40987 CVE-2024-41035 CVE-2024-42106 CVE-2024-42313 CVE-2023-52803 CVE-2024-42084 CVE-2024-42119 CVE-2024-42101 CVE-2024-41046 CVE-2024-39501 CVE-2024-42094 CVE-2021-47188 CVE-2024-42124 CVE-2024-38538 CVE-2024-43882 CVE-2024-42301 CVE-2024-36894 CVE-2024-43858 CVE-2024-42145 CVE-2024-41044 CVE-2024-26677 CVE-2024-42285 CVE-2024-41071 CVE-2024-42097 CVE-2024-42089 CVE-2024-41097 CVE-2024-42104 CVE-2024-40984 CVE-2024-39506 CVE-2024-44942 CVE-2024-41006 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-238.249 ] * CVE-url: https://ubuntu.com/security/CVE-2024-46802 - drm/amd/display: added NULL check at start of dc_validate_stream * CVE-url: https://ubuntu.com/security/CVE-2024-46818 - drm/amd/display: fix sporadic multiple aux transaction failure - drm/amd/display: Check gpio_id before used as array index * CVE-url: https://ubuntu.com/security/CVE-2024-46744 - Squashfs: sanity check symbolic link size * CVE-url: https://ubuntu.com/security/CVE-2024-46854 - net: dpaa: Pad packets to ETH_ZLEN * CVE-url: https://ubuntu.com/security/CVE-2024-46813 - drm/amd/display: Check link_index before accessing dc->links[] * CVE-url: https://ubuntu.com/security/CVE-2024-46731 - drm/amd/pm: fix the Out-of-bounds read warning * CVE-url: https://ubuntu.com/security/CVE-2024-46759 - hwmon: (adc128d818) Fix underflows seen when writing limit attributes * CVE-url: https://ubuntu.com/security/CVE-2024-38588 - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() - ftrace: Fix possible use-after-free issue in ftrace_location() * CVE-url: https://ubuntu.com/security/CVE-2024-46743 - of/irq: Prevent device address out-of-bounds read in interrupt map walk * CVE-url: https://ubuntu.com/security/CVE-2024-46738 - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() * CVE-url: https://ubuntu.com/security/CVE-2024-46800 - sch/netem: fix use after free in netem_dequeue * CVE-url: https://ubuntu.com/security/CVE-2024-46757 - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes * CVE-url: https://ubuntu.com/security/CVE-2024-46758 - hwmon: (lm95234) Fix underflows seen when writing limit attributes * CVE-url: https://ubuntu.com/security/CVE-2024-46782 - ila: call nf_unregister_net_hooks() sooner * CVE-url: https://ubuntu.com/security/CVE-2024-46756 - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes * CVE-url: https://ubuntu.com/security/CVE-2024-40912 - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() * CVE-url: https://ubuntu.com/security/CVE-2024-46723 - drm/amdgpu: fix ucode out-of-bounds read warning * CVE-url: https://ubuntu.com/security/CVE-2024-46722 - drm/amdgpu: fix mc_data out-of-bounds read warning Important TuxCare License Agreement CVE-2024-46758 CVE-2024-46723 CVE-2024-46738 CVE-2024-46818 CVE-2024-46800 CVE-2024-46854 CVE-2024-46744 CVE-2024-46756 CVE-2024-40912 CVE-2024-46757 CVE-2024-38588 CVE-2024-46759 CVE-2024-46802 CVE-2024-46782 CVE-2024-46731 CVE-2024-46813 CVE-2024-46722 CVE-2024-46743 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-239.250 ] * CVE-url: https://ubuntu.com/security/CVE-2024-38632 - vfio/pci: fix potential memory leak in vfio_intx_enable() * CVE-url: https://ubuntu.com/security/CVE-2024-46840 - btrfs: clean up our handling of refs == 0 in snapshot delete * CVE-url: https://ubuntu.com/security/CVE-2024-44954 - ALSA: line6: Fix racy access to midibuf * CVE-url: https://ubuntu.com/security/CVE-2024-45003 - vfs: Don't evict inode under the inode lru traversing context * CVE-url: https://ubuntu.com/security/CVE-2024-46841 - btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in walk_down_proc() * CVE-url: https://ubuntu.com/security/CVE-2024-44950 - serial: sc16is7xx: fix invalid FIFO access with special register set * CVE-url: https://ubuntu.com/security/CVE-2024-26812 - vfio: Introduce interface to flush virqfd inject workqueue - vfio/pci: Create persistent INTx handler * CVE-url: https://ubuntu.com/security/CVE-2023-52510 - ieee802154: ca8210: Fix a potential UAF in ca8210_probe * CVE-url: https://ubuntu.com/security/CVE-2023-52528 - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg * CVE-url: https://ubuntu.com/security/CVE-2024-26960 - mm, swap: fix race between swapoff and some swap operations - mm: swap: fix race between free_swap_and_cache() and swapoff() * CVE-url: https://ubuntu.com/security/CVE-2024-27051 - cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value - cpufreq: brcmstb-avs-cpufreq: ISO C90 forbids mixed declarations * CVE-url: https://ubuntu.com/security/CVE-2024-41073 - nvme: avoid double free special payload * CVE-url: https://ubuntu.com/security/CVE-2024-45016 - netem: fix return value if duplicate enqueue fails * CVE-url: https://ubuntu.com/security/CVE-2024-42229 - crypto: aead,cipher - zeroize key buffer after use * CVE-url: https://ubuntu.com/security/CVE-2024-38602 - ax25: Fix reference count leak issues of ax25_dev Important TuxCare License Agreement CVE-2024-41073 CVE-2024-44950 CVE-2024-26960 CVE-2023-52510 CVE-2024-45003 CVE-2024-44954 CVE-2023-52528 CVE-2024-45016 CVE-2024-26812 CVE-2024-46841 CVE-2024-27051 CVE-2024-46840 CVE-2024-42229 CVE-2024-38602 CVE-2024-38632 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-240.251 ] * CVE-url: https://ubuntu.com/security/CVE-2024-44946 - kcm: Serialise kcm_sendmsg() for the same socket. * CVE-url: https://ubuntu.com/security/CVE-2024-42292 - kobject_uevent: Fix OOB access within zap_modalias_env() * CVE-url: https://ubuntu.com/security/CVE-2024-41042 - netfilter: nf_tables: prefer nft_chain_validate * CVE-url: https://ubuntu.com/security/CVE-2024-42265 - protect the fetch of ->fd[fd] in do_dup2() from mispredictions * CVE-url: https://ubuntu.com/security/CVE-2024-50036 - net: do not delay dst_entries_add() in dst_release() * CVE-url: https://ubuntu.com/security/CVE-2024-47663 - staging: iio: frequency: ad9833: Load clock using clock framework - staging: iio: frequency: ad9834: Validate frequency parameter value * CVE-url: https://ubuntu.com/security/CVE-2024-47669 - nilfs2: fix state management in error path of log writing function * CVE-url: https://ubuntu.com/security/CVE-2023-52918 - media: pci: cx23885: check cx23885_vdev_init() return * CVE-url: https://ubuntu.com/security/CVE-2024-44960 - usb: gadget: core: Check for unset descriptor * CVE-url: https://ubuntu.com/security/CVE-2024-42297 - f2fs: fix to don't dirty inode for readonly filesystem * CVE-url: https://ubuntu.com/security/CVE-2024-46750 - PCI: Add missing bridge lock to pci_bus_lock() * CVE-url: https://ubuntu.com/security/CVE-2024-46676 - nfc: pn533: Add poll mod list filling check * CVE-url: https://ubuntu.com/security/CVE-2024-46761 - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv * CVE-url: https://ubuntu.com/security/CVE-2024-46755 - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() * CVE-url: https://ubuntu.com/security/CVE-2024-46679 - ethtool: check device is present when getting link settings * CVE-url: https://ubuntu.com/security/CVE-2024-46721 - apparmor: fix possible NULL pointer dereference * CVE-url: https://ubuntu.com/security/CVE-2024-46685 - pinctrl: single: fix potential NULL dereference in pcs_get_function() * CVE-url: https://ubuntu.com/security/CVE-2024-44947 - fuse: Initialize beyond-EOF page contents before setting uptodate * CVE-url: https://ubuntu.com/security/CVE-2024-46675 - usb: dwc3: core: Prevent USB core invalid event buffer address access * CVE-url: https://ubuntu.com/security/CVE-2024-43893 - serial: core: check uartclk for zero to avoid divide by zero * CVE-url: https://ubuntu.com/security/CVE-2024-45021 - memcg_write_event_control(): fix a user-triggerable oops * CVE-url: https://ubuntu.com/security/CVE-2024-46677 - gtp: fix a potential NULL pointer dereference * CVE-url: https://ubuntu.com/security/CVE-2024-43861 - net: usb: qmi_wwan: fix memory leak for not ip packets * CVE-url: https://ubuntu.com/security/CVE-2024-41063 - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() * CVE-url: https://ubuntu.com/security/CVE-2024-45006 - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration * CVE-url: https://ubuntu.com/security/CVE-2024-43853 - cgroup/cpuset: Prevent UAF in proc_cpuset_show() * CVE-url: https://ubuntu.com/security/CVE-2024-42310 - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes * CVE-url: https://ubuntu.com/security/CVE-2024-42311 - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() * CVE-url: https://ubuntu.com/security/CVE-2024-41012 - filelock: Remove locks reliably when fcntl/close race is detected * CVE-url: https://ubuntu.com/security/CVE-2024-45028 - mmc: mmc_test: Fix NULL dereference on allocation failure * CVE-url: https://ubuntu.com/security/CVE-2024-43860 - remoteproc: imx_rproc: Skip over memory region when node value is NULL * CVE-url: https://ubuntu.com/security/CVE-2024-43914 - md/raid5: avoid BUG_ON() while continue reshape after reassembling * CVE-url: https://ubuntu.com/security/CVE-2024-45025 - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE * CVE-url: https://ubuntu.com/security/CVE-2024-43856 - dma: fix call order in dmam_free_coherent * CVE-url: https://ubuntu.com/security/CVE-2024-42289 - scsi: qla2xxx: During vport delete send async logout explicitly * CVE-url: https://ubuntu.com/security/CVE-2024-44995 - net: hns3: fix a deadlock problem when config TC during resetting * CVE-url: https://ubuntu.com/security/CVE-2024-43854 - block: initialize integrity buffer to zero before writing it to media * CVE-url: https://ubuntu.com/security/CVE-2024-43884 - Bluetooth: MGMT: Add error handling to pair_device() * CVE-url: https://ubuntu.com/security/CVE-2024-43871 - devres: Fix memory leakage caused by driver API devm_free_percpu() * CVE-url: https://ubuntu.com/security/CVE-2024-42309 - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes * CVE-url: https://ubuntu.com/security/CVE-2024-26668 - netfilter: nft_limit: reject configurations that cause integer overflow * CVE-url: https://ubuntu.com/security/CVE-2024-50044 - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change * CVE-url: https://ubuntu.com/security/CVE-2024-49967 - ext4: no need to continue when the number of entries is 1 * CVE-url: https://ubuntu.com/security/CVE-2024-50033 - slip: make slhc_remember() more robust against malicious packets * CVE-url: https://ubuntu.com/security/CVE-2024-47670 - ocfs2: add bounds checking to ocfs2_xattr_find_entry() * CVE-url: https://ubuntu.com/security/CVE-2024-49950 - Bluetooth: L2CAP: Fix uaf in l2cap_connect * CVE-url: https://ubuntu.com/security/CVE-2024-49883 - ext4: aovid use-after-free in ext4_ext_insert_extent() * CVE-url: https://ubuntu.com/security/CVE-2024-47745 - mm: call the security_mmap_file() LSM hook in remap_file_pages() * CVE-url: https://ubuntu.com/security/CVE-2024-49860 - ACPI: sysfs: validate return type of _STR method * CVE-url: https://ubuntu.com/security/CVE-2024-49882 - ext4: fix double brelse() the buffer of the extents path * CVE-url: https://ubuntu.com/security/CVE-2024-49995 - tipc: guard against string buffer overrun * CVE-url: https://ubuntu.com/security/CVE-2024-47723 - jfs: fix out-of-bounds in dbNextAG() and diAlloc() * CVE-url: https://ubuntu.com/security/CVE-2024-50055 - driver core: bus: Fix double free in driver API bus_register() * CVE-url: https://ubuntu.com/security/CVE-2024-47698 - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error * CVE-url: https://ubuntu.com/security/CVE-2022-49026 - e100: Fix possible use after free in e100_xmit_prepare * CVE-url: https://ubuntu.com/security/CVE-2024-47742 - firmware_loader: Block path traversal * CVE-url: https://ubuntu.com/security/CVE-2024-50035 - ppp: fix ppp_async_encode() illegal access * CVE-url: https://ubuntu.com/security/CVE-2024-47757 - nilfs2: fix potential oob read in nilfs_btree_check_delete() * CVE-url: https://ubuntu.com/security/CVE-2024-49884 - ext4: avoid ext4_error()'s caused by ENOMEM in the truncate path - ext4: fix slab-use-after-free in ext4_split_extent_at() * CVE-url: https://ubuntu.com/security/CVE-2022-49006 - tracing: Free buffers when a used dynamic event is removed * CVE-url: https://ubuntu.com/security/CVE-2024-49903 - jfs: Fix uaf in dbFreeBits * CVE-url: https://ubuntu.com/security/CVE-2024-47701 - ext4: avoid OOB when system.data xattr changes underneath the filesystem * CVE-url: https://ubuntu.com/security/CVE-2024-49889 - ext4: avoid use-after-free in ext4_ext_show_leaf() * CVE-url: https://ubuntu.com/security/CVE-2024-50073 - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux * CVE-url: https://ubuntu.com/security/CVE-2024-47747 - net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition * CVE-url: https://ubuntu.com/security/CVE-2024-49900 - jfs: Fix uninit-value access of new_ea in ea_buffer * CVE-url: https://ubuntu.com/security/CVE-2024-47697 - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error * CVE-url: https://ubuntu.com/security/CVE-2022-48951 - ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() * CVE-url: https://ubuntu.com/security/CVE-2024-49981 - media: venus: fix use after free bug in venus_remove due to race condition * CVE-url: https://ubuntu.com/security/CVE-2024-43839 - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures * CVE-url: https://ubuntu.com/security/CVE-2024-47659 - smack: tcp: ipv4, fix incorrect labeling * CVE-url: https://ubuntu.com/security/CVE-2024-47685 - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() * CVE-url: https://ubuntu.com/security/CVE-2024-39476 - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING * CVE-url: https://ubuntu.com/security/CVE-2024-27397 - netfilter: nf_tables: use timestamp to check for set element timeout - netfilter: nf_tables: annotate data-races around element expiration - netfilter: nf_tables: support timeouts larger than 23 days * CVE-url: https://ubuntu.com/security/CVE-2024-26641 - net: Fix unwanted sign extension in netdev_stats_to_stats64() - ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() * CVE-url: https://ubuntu.com/security/CVE-2024-38611 - media: i2c: et8ek8: Don't strip remove function when driver is builtin Critical TuxCare License Agreement CVE-2024-43854 CVE-2024-46677 CVE-2024-49860 CVE-2024-43839 CVE-2024-43856 CVE-2024-42265 CVE-2024-43861 CVE-2024-43893 CVE-2024-43884 CVE-2024-49889 CVE-2024-42289 CVE-2024-50033 CVE-2024-41042 CVE-2024-50044 CVE-2024-46755 CVE-2024-44960 CVE-2024-49967 CVE-2024-49903 CVE-2024-47669 CVE-2022-49026 CVE-2024-46721 CVE-2024-47757 CVE-2024-47723 CVE-2024-49995 CVE-2022-49006 CVE-2024-38611 CVE-2024-27397 CVE-2024-47745 CVE-2024-26641 CVE-2024-43914 CVE-2024-49883 CVE-2024-42292 CVE-2024-47742 CVE-2024-46679 CVE-2024-41012 CVE-2024-47670 CVE-2024-47697 CVE-2024-47663 CVE-2024-45025 CVE-2024-50036 CVE-2024-49882 CVE-2024-46685 CVE-2024-49884 CVE-2024-47698 CVE-2024-45006 CVE-2024-46761 CVE-2024-50035 CVE-2024-50073 CVE-2024-49981 CVE-2024-49950 CVE-2024-44995 CVE-2024-39476 CVE-2024-42297 CVE-2024-42310 CVE-2024-44947 CVE-2024-42309 CVE-2024-46676 CVE-2024-47685 CVE-2022-48951 CVE-2024-47659 CVE-2024-46750 CVE-2024-45028 CVE-2024-50055 CVE-2024-43871 CVE-2023-52918 CVE-2024-47747 CVE-2024-43853 CVE-2024-26668 CVE-2024-47701 CVE-2024-44946 CVE-2024-49900 CVE-2024-42311 CVE-2024-45021 CVE-2024-43860 CVE-2024-46675 CVE-2024-41063 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-241.252 ] * CVE-url: https://ubuntu.com/security/CVE-2024-49992 - drm: remove all control node code - drm: add managed resources tied to drm_device - drm: Set final_kfree in drm_dev_alloc - drm/plane: add drmm_universal_plane_alloc() - drm: Handle dev->unique with drmm_ - drm: Use drmm_ for drm_dev_init cleanup - drm: manage drm_minor cleanup with drmm_ - drm/stm: Avoid use-after-free issues with crtc and plane * CVE-url: https://ubuntu.com/security/CVE-2023-52531 - wifi: iwlwifi: mvm: Fix a memory corruption issue * CVE-url: https://ubuntu.com/security/CVE-2024-35877 - mm: introduce page_needs_cow_for_dma() for deciding whether cow - x86/mm/pat: fix VM_PAT handling in COW mappings * CVE-url: https://ubuntu.com/security/CVE-2023-52578 - net: bridge: use DEV_STATS_INC() * CVE-url: https://ubuntu.com/security/CVE-2024-42240 - x86/bhi: Avoid warning in #DB handler due to BHI mitigation * CVE-url: https://ubuntu.com/security/CVE-2022-48938 - CDC-NCM: avoid overflow in sanity checking * CVE-url: https://ubuntu.com/security/CVE-2023-52502 - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() * CVE-url: https://ubuntu.com/security/CVE-2023-52614 - time: Introduce jiffies64_to_msecs() - PM / devfreq: Fix buffer overflow in trans_stat_show * CVE-url: https://ubuntu.com/security/CVE-2024-50067 - uprobe: avoid out-of-bounds memory access of fetching args Important TuxCare License Agreement CVE-2024-50067 CVE-2024-49992 CVE-2023-52502 CVE-2024-42240 CVE-2024-35877 CVE-2023-52578 CVE-2022-48938 CVE-2023-52614 CVE-2023-52531 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-242.253 ] * CVE-url: https://ubuntu.com/security/CVE-2023-52664 - net: atlantic: eliminate double free in error handling logic * CVE-url: https://ubuntu.com/security/CVE-2023-52698 - calipso: fix memory leak in netlbl_calipso_add_pass() * CVE-url: https://ubuntu.com/security/CVE-2021-47466 - mm, slub: fix potential memoryleak in kmem_cache_open() * CVE-url: https://ubuntu.com/security/CVE-2023-52757 - smb: client: fix potential deadlock when releasing mids * CVE-url: https://ubuntu.com/security/CVE-2023-52749 - spi: Fix null dereference on suspend * CVE-url: https://ubuntu.com/security/CVE-2024-26921 - net: ipv4: do not handle duplicate fragments as overlapping - net: IP defrag: encapsulate rbtree defrag code into callable functions - ipv4: remove unnecessary type castings - skb_expand_head() adjust skb->truesize incorrectly - inet: inet_defrag: prevent sk release while still in use * CVE-url: https://ubuntu.com/security/CVE-2021-47082 - tun: avoid double free in tun_free_netdev * CVE-url: https://ubuntu.com/security/CVE-2024-36968 - Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() * CVE-url: https://ubuntu.com/security/CVE-2023-52507 - nfc: nci: assert requested protocol is valid * CVE-url: https://ubuntu.com/security/CVE-2024-44944 - netfilter: ctnetlink: use helper function to calculate expect ID * CVE-url: https://ubuntu.com/security/CVE-2024-35861 - smb: client: fix potential UAF in cifs_debug_files_proc_show() - smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect() * CVE-url: https://ubuntu.com/security/CVE-2024-35863 - smb: client: fix potential UAF in smb2_is_valid_oplock_break() * CVE-url: https://ubuntu.com/security/CVE-2024-35864 - smb: client: fix potential UAF in smb2_is_valid_lease_break() * CVE-url: https://ubuntu.com/security/CVE-2024-35867 - smb: client: fix potential UAF in cifs_stats_proc_show() * CVE-url: https://ubuntu.com/security/CVE-2024-35868 - smb: client: fix potential UAF in cifs_stats_proc_write() * CVE-url: https://ubuntu.com/security/CVE-2024-35896 - netfilter: validate user input for expected length * CVE-url: https://ubuntu.com/security/CVE-2024-27010 - net/sched: Fix mirred deadlock on device recursion * CVE-url: https://ubuntu.com/security/CVE-2024-26961 - mac802154: fix llsec key resources release in mac802154_llsec_key_del * CVE-url: https://ubuntu.com/security/CVE-2024-26958 - NFS: Fix up commit deadlocks - nfs: fix UAF in direct writes * CVE-url: https://ubuntu.com/security/CVE-2024-50115 - KVM: nSVM: Don't strip host's C-bit from guest's CR3 when reading PDPTRs - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory * CVE-url: https://ubuntu.com/security/CVE-2024-50148 - Bluetooth: bnep: fix wild-memory-access in proto_unregister * CVE-url: https://ubuntu.com/security/CVE-2024-40910 - ax25: Fix refcount imbalance on inbound connections * CVE-url: https://ubuntu.com/security/CVE-2024-53057 - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT * CVE-url: https://ubuntu.com/security/CVE-2021-47101 - net: asix: fix uninit value bugs - asix: fix uninit-value in asix_mdio_read() * CVE-url: https://ubuntu.com/security/CVE-2024-36952 - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up * CVE-url: https://ubuntu.com/security/CVE-2023-52488 - regmap: Add regmap_noinc_read API - regmap: Add regmap_noinc_write API - serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO * CVE-url: https://ubuntu.com/security/CVE-2024-50142 - xfrm: validate new SA's prefixlen using SA family when sel.family is unset * CVE-url: https://ubuntu.com/security/CVE-2024-50256 - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() * CVE-url: https://ubuntu.com/security/CVE-2024-50264 - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans * CVE-url: https://ubuntu.com/security/CVE-2021-47501 - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc * CVE-url: https://ubuntu.com/security/CVE-2021-47076 - RDMA/rxe: Return CQE error if invalid lkey was supplied * CVE-url: https://ubuntu.com/security/CVE-2023-52574 - team: fix null-ptr-deref when team device type is changed * CVE-url: https://ubuntu.com/security/CVE-2023-52477 - usb: hub: Guard against accesses to uninitialized BOS descriptors * CVE-url: https://ubuntu.com/security/CVE-2023-52475 - Input: powermate - fix use-after-free in powermate_config_complete * CVE-url: https://ubuntu.com/security/CVE-2024-39489 - ipv6: sr: fix memleak in seg6_hmac_init_algo Important TuxCare License Agreement CVE-2024-35863 CVE-2024-26958 CVE-2024-35861 CVE-2023-52664 CVE-2021-47466 CVE-2023-52507 CVE-2024-35867 CVE-2021-47101 CVE-2021-47082 CVE-2024-50264 CVE-2023-52475 CVE-2024-35864 CVE-2024-39489 CVE-2024-50142 CVE-2024-35896 CVE-2023-52574 CVE-2024-53057 CVE-2024-50115 CVE-2023-52477 CVE-2023-52488 CVE-2021-47076 CVE-2024-26961 CVE-2024-26921 CVE-2024-36968 CVE-2023-52757 CVE-2024-50148 CVE-2024-27010 CVE-2023-52698 CVE-2024-44944 CVE-2024-50256 CVE-2024-40910 CVE-2024-35868 CVE-2024-26928 CVE-2023-52749 CVE-2021-47501 CVE-2024-36952 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-243.254 ] * CVE-url: https://ubuntu.com/security/CVE-2024-26595 - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path * CVE-url: https://ubuntu.com/security/CVE-2024-38553/CVE-2024-38597 - netpoll: make ndo_poll_controller() optional - bonding: use netpoll_poll_dev() helper - netpoll: do not test NAPI_STATE_SCHED in poll_one_napi() * CVE-url: https://ubuntu.com/security/CVE-2024-38597 - eth: sungem: remove .ndo_poll_controller to avoid deadlocks * CVE-url: https://ubuntu.com/security/CVE-2024-38553 - net: fec: remove .ndo_poll_controller to avoid deadlocks * CVE-url: https://ubuntu.com/security/CVE-2024-42252 - closures: Change BUG_ON() to WARN_ON() * CVE-url: https://ubuntu.com/security/CVE-2024-41066 - ibmvnic: Add tx check to prevent skb leak * CVE-url: https://ubuntu.com/security/CVE-2024-40982 - ssb: Fix potential NULL pointer dereference in ssb_device_uevent() * CVE-url: https://ubuntu.com/security/CVE-2024-26689 - ceph: prevent use-after-free in encode_cap_msg() - fixup! ceph: prevent use-after-free in encode_cap_msg() * CVE-url: https://ubuntu.com/security/CVE-2024-56595 - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree * CVE-url: https://ubuntu.com/security/CVE-2024-57892 - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv * CVE-url: https://ubuntu.com/security/CVE-2024-57896 - btrfs: fix hang during unmount when stopping a space reclaim worker - btrfs: wait for fixup workers before stopping cleaner kthread during umount - btrfs: flush delalloc workers queue before stopping cleaner kthread during unmount * CVE-url: https://ubuntu.com/security/CVE-2024-56598 - jfs: array-index-out-of-bounds fix in dtReadFirst * CVE-url: https://ubuntu.com/security/CVE-2024-56551 - drm/amdgpu: fix usage slab after free * CVE-url: https://ubuntu.com/security/CVE-2024-56596 - jfs: fix array-index-out-of-bounds in jfs_readdir * CVE-url: https://ubuntu.com/security/CVE-2024-56615 - bpf: fix OOB devmap writes when deleting elements * CVE-url: https://ubuntu.com/security/CVE-2024-57887 - drm: adv7511: Fix use-after-free in adv7533_attach_dsi() * CVE-url: https://ubuntu.com/security/CVE-2024-50154 - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). * CVE-url: https://ubuntu.com/security/CVE-2024-56775 - drm/amd/display: Fix handling of plane refcount * CVE-url: https://ubuntu.com/security/CVE-2024-57900 - ila: serialize calls to nf_register_net_hooks() * CVE-url: https://ubuntu.com/security/CVE-2024-35887 - ax25: fix use-after-free bugs caused by ax25_ds_del_timer * CVE-url: https://ubuntu.com/security/CVE-2022-48739 - ASoC: hdmi-codec: Fix OOB memory accesses * CVE-url: https://ubuntu.com/security/CVE-2024-56704 - 9p/xen: fix release of IRQ * CVE-url: https://ubuntu.com/security/CVE-2024-56606 - af_packet: avoid erroring out after sock_init_data() in packet_create() * CVE-url: https://ubuntu.com/security/CVE-2024-53141 - netfilter: ipset: add missing range check in bitmap_ip_uadt * CVE-url: https://ubuntu.com/security/CVE-2023-52691 - drm/amd/pm: fix a double-free in si_dpm_init * CVE-url: https://ubuntu.com/security/CVE-2024-53165 - sh: intc: Fix use-after-free bug in register_intc_controller() * CVE-url: https://ubuntu.com/security/CVE-2023-52818 - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 * CVE-url: https://ubuntu.com/security/CVE-2024-56603 - net: af_can: do not leave a dangling sk pointer in can_create() * CVE-url: https://ubuntu.com/security/CVE-2024-53173 - NFSv4.0: Fix a use-after-free problem in the asynchronous open() * CVE-url: https://ubuntu.com/security/CVE-2024-56602 - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() * CVE-url: https://ubuntu.com/security/CVE-2024-26996 - usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error * CVE-url: https://ubuntu.com/security/CVE-2024-56650 - netfilter: x_tables: fix LED ID check in led_tg_check() * CVE-url: https://ubuntu.com/security/CVE-2024-56600 - net: inet6: do not leave a dangling sk pointer in inet6_create() * CVE-url: https://ubuntu.com/security/CVE-2024-53227 - scsi: bfa: Fix use-after-free in bfad_im_module_exit() * CVE-url: https://ubuntu.com/security/CVE-2021-47328 - scsi: iscsi: Fix conn use after free during resets * CVE-url: https://ubuntu.com/security/CVE-2024-53155 - ocfs2: fix uninitialized value in ocfs2_file_read_iter() * CVE-url: https://ubuntu.com/security/CVE-2024-56651 - can: hi311x: hi3110_can_ist(): fix potential use-after-free * CVE-url: https://ubuntu.com/security/CVE-2021-47281 - ALSA: timer: Fix possible race at assigning a timer instance - ALSA: seq: Fix race of snd_seq_timer_open() * CVE-url: https://ubuntu.com/security/CVE-2024-56605 - Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() * CVE-url: https://ubuntu.com/security/CVE-2024-53156 - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() * CVE-url: https://ubuntu.com/security/CVE-2023-52741 - cifs: Fix use-after-free in rdata->read_into_pages() * CVE-url: https://ubuntu.com/security/CVE-2024-56759 - btrfs: fix use-after-free when COWing tree bock and tracing is enabled * CVE-url: https://ubuntu.com/security/CVE-2024-56604 - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() * CVE-url: https://ubuntu.com/security/CVE-2024-53142 - initramfs: avoid filename buffer overrun * CVE-url: https://ubuntu.com/security/CVE-2024-56601 - net: inet: do not leave a dangling sk pointer in inet_create() * CVE-url: https://ubuntu.com/security/CVE-2024-56662 - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl * CVE-url: https://ubuntu.com/security/CVE-2024-56631 - scsi: sg: Fix slab-use-after-free read in sg_release() * CVE-url: https://ubuntu.com/security/CVE-2024-53103 - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer * CVE-url: https://ubuntu.com/security/CVE-2024-56581 - btrfs: ref-verify: fix use-after-free after invalid ref action * CVE-url: https://ubuntu.com/security/CVE-2021-47191 - scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() * CVE-url: https://ubuntu.com/security/CVE-2023-52478 - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect * CVE-url: https://ubuntu.com/security/CVE-2024-36924 - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() * CVE-url: https://ubuntu.com/security/CVE-2023-52476 - perf/x86/lbr: Filter vsyscall addresses * CVE-url: https://ubuntu.com/security/CVE-2024-27011 - netfilter: nf_tables: fix memleak in map from abort path * CVE-url: https://ubuntu.com/security/CVE-2024-53088 - i40e: fix race condition by adding filter's intermediate sync state Important TuxCare License Agreement CVE-2023-52741 CVE-2024-53227 CVE-2021-47281 CVE-2024-56662 CVE-2024-53165 CVE-2023-52476 CVE-2024-38553 CVE-2024-56581 CVE-2024-26996 CVE-2024-56600 CVE-2024-57887 CVE-2023-52478 CVE-2024-56551 CVE-2024-53103 CVE-2024-56606 CVE-2024-56605 CVE-2024-53141 CVE-2024-38597 CVE-2024-56650 CVE-2024-35887 CVE-2024-57896 CVE-2024-36924 CVE-2024-56596 CVE-2022-48739 CVE-2024-53156 CVE-2024-41066 CVE-2024-42252 CVE-2024-27011 CVE-2024-56601 CVE-2024-50154 CVE-2024-56759 CVE-2021-47191 CVE-2024-56615 CVE-2024-56704 CVE-2024-56603 CVE-2024-26689 CVE-2024-56602 CVE-2023-52818 CVE-2024-53142 CVE-2023-52691 CVE-2021-47328 CVE-2024-56651 CVE-2024-26595 CVE-2024-40982 CVE-2024-56631 CVE-2024-53155 CVE-2024-57892 CVE-2024-57900 CVE-2024-53173 CVE-2024-56595 CVE-2024-56775 CVE-2024-56598 CVE-2024-53088 CVE-2024-56604 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-244.255 ] * CVE-url: https://ubuntu.com/security/CVE-2024-53104 - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format * CVE-url: https://ubuntu.com/security/CVE-2024-41020 - filelock: Fix fcntl/close race recovery compat path * CVE-url: https://ubuntu.com/security/CVE-2024-43892 - memcg: protect concurrent access to mem_cgroup_idr * CVE-url: https://ubuntu.com/security/CVE-2021-47379 - blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd * CVE-url: https://ubuntu.com/security/CVE-2024-57911 - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer * CVE-url: https://ubuntu.com/security/CVE-2024-53239 - ALSA: 6fire: Release resources at card release * CVE-url: https://ubuntu.com/security/CVE-2024-50051 - spi: mpc52xx: Add cancel_work_sync before module remove Important TuxCare License Agreement CVE-2024-43892 CVE-2021-47379 CVE-2024-53239 CVE-2024-50051 CVE-2024-53104 CVE-2024-57911 CVE-2024-41020 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-245.256 ] * CVE-url: https://ubuntu.com/security/CVE-2024-50180 - fbdev: sisfb: Fix strbuf array overflow * CVE-url: https://ubuntu.com/security/CVE-2023-52522 - net: fix possible store tearing in neigh_periodic_work() * CVE-url: https://ubuntu.com/security/CVE-2024-40911 - wifi: cfg80211: Lock wiphy in cfg80211_get_station * CVE-url: https://ubuntu.com/security/CVE-2024-43863 - drm/vmwgfx: Fix a deadlock in dma buf fence polling * CVE-url: https://ubuntu.com/security/CVE-2024-44931 - gpio: prevent potential speculation leaks in gpio_device_get_desc() * CVE-url: https://ubuntu.com/security/CVE-2024-23848 - media: cec: cec-api: add locking in cec_release() - media: cec: core: avoid recursive cec_claim_log_addrs * CVE-url: https://ubuntu.com/security/CVE-2024-50229 - nilfs2: fix potential deadlock with newly created symlinks * CVE-url: https://ubuntu.com/security/CVE-2024-50171 - net: systemport: fix potential memory leak in bcm_sysport_xmit() * CVE-url: https://ubuntu.com/security/CVE-2024-50233 - staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() * CVE-url: https://ubuntu.com/security/CVE-2024-50134 - drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA * CVE-url: https://ubuntu.com/security/CVE-2024-44938 - jfs: Fix shift-out-of-bounds in dbDiscardAG * CVE-url: https://ubuntu.com/security/CVE-2024-50117 - drm/amd: Guard against bad data for ATIF ACPI method * CVE-url: https://ubuntu.com/security/CVE-2024-49902 - jfs: check if leafidx greater than num leaves per dmap tree * CVE-url: https://ubuntu.com/security/CVE-2023-52799 - jfs: fix array-index-out-of-bounds in dbFindLeaf * CVE-url: https://ubuntu.com/security/CVE-2024-49966 - ocfs2: cancel dqi_sync_work before freeing oinfo * CVE-url: https://ubuntu.com/security/CVE-2024-50267 - USB: serial: io_edgeport: fix use after free in debug printk * CVE-url: https://ubuntu.com/security/CVE-2024-50230 - nilfs2: fix kernel bug due to missing clearing of checked flag * CVE-url: https://ubuntu.com/security/CVE-2024-50302 - HID: core: zero-initialize the report buffer * CVE-url: https://ubuntu.com/security/CVE-2024-50278 - dm cache: fix out-of-bounds access to the dirty bitset when resizing - dm cache: fix potential out-of-bounds access on the first resume * CVE-url: https://ubuntu.com/security/CVE-2024-50234 - wifi: iwlegacy: Clear stale interrupts before resuming device * CVE-url: https://ubuntu.com/security/CVE-2024-50301 - security/keys: fix slab-out-of-bounds in key_task_permission * CVE-url: https://ubuntu.com/security/CVE-2024-50143 - overflow: Add __must_check attribute to check_*() helpers - compiler.h: drop fallback overflow checkers - overflow: Allow mixed type arguments - udf: fix uninit-value use in udf_get_fileshortad * CVE-url: https://ubuntu.com/security/CVE-2024-53061 - media: s5p-jpeg: prevent buffer overflows * CVE-url: https://ubuntu.com/security/CVE-2024-57798 - drm/dp-mst-helper: Remove hotplug callback - drm/dp_mst: Remove huge conditional in drm_dp_mst_handle_up_req() - drm/dp_mst: Refactor drm_dp_mst_handle_up_req() - drm/dp_mst: Rename drm_dp_add_port and drm_dp_update_port - drm/dp_mst: Handle UP requests asynchronously - drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() * CVE-url: https://ubuntu.com/security/CVE-2023-52854 - padata: make padata_do_parallel find alternate callback CPU - padata: allocate workqueue internally - crypto: pcrypt - remove padata cpumask notifier - padata, pcrypt: take CPU hotplug lock internally in padata_alloc_possible - padata: use separate workqueues for parallel and serial work - padata: unbind parallel jobs from specific CPUs - workqueue: Make alloc/apply/free_workqueue_attrs() static - workqueue: Remove GPF argument from alloc_workqueue_attrs() - workqueue: unconfine alloc/apply/free_workqueue_attrs() - crypto: pcrypt - Avoid deadlock by using per-instance padata queues - crypto: aead - pass instance to crypto_grab_aead() - crypto: pcrypt - simplify error handling in pcrypt_create_aead() - padata: Fix refcnt handling in padata_free_shell() * CVE-url: https://ubuntu.com/security/CVE-2024-53164 - net: sched: fix ordering of qlen adjustment * CVE-url: https://ubuntu.com/security/CVE-2024-47809 - dlm: fix possible lkb_resource null dereference * CVE-url: https://ubuntu.com/security/CVE-2021-47342 - ext4: fix memory leak in ext4_fill_super - ext4: fix possible UAF when remounting r/o a mmp-protected file system * CVE-url: https://ubuntu.com/security/CVE-2024-53179 - smb: client: fix use-after-free of signing key * Miscellaneous upstream changes - drm/amd/amdgpu: Fix GPR read from debugfs (v2) Important TuxCare License Agreement CVE-2024-50234 CVE-2024-53164 CVE-2023-52799 CVE-2024-49966 CVE-2024-50302 CVE-2024-49902 CVE-2024-50229 CVE-2024-50134 CVE-2024-53179 CVE-2023-52522 CVE-2024-47809 CVE-2024-50180 CVE-2024-44938 CVE-2024-50278 CVE-2024-50233 CVE-2024-43863 CVE-2024-50267 CVE-2024-50171 CVE-2024-50279 CVE-2024-50143 CVE-2021-47342 CVE-2024-50230 CVE-2024-53061 CVE-2024-44931 CVE-2023-52854 CVE-2024-23848 CVE-2024-40911 CVE-2024-50117 CVE-2024-50301 CVE-2024-57798 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-246.257 ] * CVE-url: https://ubuntu.com/security/CVE-2025-21858 - geneve: Fix use-after-free in geneve_find_dev(). * CVE-url: https://ubuntu.com/security/CVE-2024-36921 - wifi: iwlwifi: mvm: guard against invalid STA ID on removal * CVE-url: https://ubuntu.com/security/CVE-2023-52621 - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers * CVE-url: https://ubuntu.com/security/CVE-2025-21855 - ibmvnic: Don't reference skb after sending to VIOS * CVE-url: https://ubuntu.com/security/CVE-2021-47110 - x86/kvm: Disable kvmclock on all CPUs on shutdown * CVE-url: https://ubuntu.com/security/CVE-2025-21791 - vrf: use RCU protection in l3mdev_l3_out() * CVE-url: https://ubuntu.com/security/CVE-2024-57980 - media: uvcvideo: Fix double free in error path * CVE-url: https://ubuntu.com/security/CVE-2025-21718 - net: rose: fix timer races against user threads * CVE-url: https://ubuntu.com/security/CVE-2025-21735 - NFC: nci: Add bounds checking in nci_hci_create_pipe() * CVE-url: https://ubuntu.com/security/CVE-2023-52805 - jfs: fix array-index-out-of-bounds in diAlloc * CVE-url: https://ubuntu.com/security/CVE-2023-52847 - media: bttv: fix use after free error due to btv->timeout timer * CVE-url: https://ubuntu.com/security/CVE-2024-41014 - xfs: add bounds checking to xlog_recover_process_data * CVE-url: https://ubuntu.com/security/CVE-2025-21782 - orangefs: fix a oob in orangefs_debug_write * CVE-url: https://ubuntu.com/security/CVE-2024-26872 - RDMA/srpt: Do not register event handler until srpt device is fully setup * CVE-url: https://ubuntu.com/security/CVE-2024-26982 - Squashfs: check the inode number is not the invalid value of zero * CVE-url: https://ubuntu.com/security/CVE-2024-56548 - hfsplus: don't query the device logical block size multiple times * CVE-url: https://ubuntu.com/security/CVE-2024-57850 - jffs2: Prevent rtime decompress memory corruption * CVE-url: https://ubuntu.com/security/CVE-2024-49982 - aoe: fix the potential use-after-free problem in more places * CVE-url: https://ubuntu.com/security/CVE-2024-47696 - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency * CVE-url: https://ubuntu.com/security/CVE-2024-50074 - parport: Proper fix for array out-of-bounds access * CVE-url: https://ubuntu.com/security/CVE-2025-21687 - vfio/platform: check the bounds of read/write syscalls * CVE-url: https://ubuntu.com/security/CVE-2024-57889 - regmap: allow to disable all locking mechanisms - pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking * CVE-url: https://ubuntu.com/security/CVE-2024-56539 - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() * CVE-url: https://ubuntu.com/security/CVE-2024-53680 - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() * CVE-url: https://ubuntu.com/security/CVE-2024-56630 - ocfs2: free inode when ocfs2_get_init_inode() fails * CVE-url: https://ubuntu.com/security/CVE-2024-53184 - um: ubd: Do not use drvdata in release * CVE-url: https://ubuntu.com/security/CVE-2024-57884 - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() * CVE-url: https://ubuntu.com/security/CVE-2024-56597 - jfs: fix shift-out-of-bounds in dbSplit * CVE-url: https://ubuntu.com/security/CVE-2025-21664 - dm thin: make get_first_thin use rcu-safe list first function * CVE-url: https://ubuntu.com/security/CVE-2024-56594 - drm/amdgpu: set the right AMDGPU sg segment limitation * CVE-url: https://ubuntu.com/security/CVE-2024-56681 - crypto: bcm - add error check in the ahash_hmac_init function * CVE-url: https://ubuntu.com/security/CVE-2024-52332 - igb: Fix potential invalid memory access in igb_init_module() * CVE-url: https://ubuntu.com/security/CVE-2024-56570 - ovl: Filter invalid inodes with missing lookup function * CVE-url: https://ubuntu.com/security/CVE-2024-57912 - iio: pressure: zpa2326: fix information leak in triggered buffer * CVE-url: https://ubuntu.com/security/CVE-2024-53172 - ubi: fastmap: Fix duplicate slab cache names while attaching * CVE-url: https://ubuntu.com/security/CVE-2024-57929 - dm array: fix releasing a faulty array block twice in dm_array_cursor_end * CVE-url: https://ubuntu.com/security/CVE-2024-56532 - ALSA: us122l: Use snd_card_free_when_closed() at disconnection * CVE-url: https://ubuntu.com/security/CVE-2024-53183 - um: net: Do not use drvdata in release * CVE-url: https://ubuntu.com/security/CVE-2024-56644 - net/ipv6: release expired exception dst cached in socket * CVE-url: https://ubuntu.com/security/CVE-2024-57948 - mac802154: check local interfaces before deleting sdata list * CVE-url: https://ubuntu.com/security/CVE-2024-57904 - iio: adc: at91: call input_free_device() on allocated iio_dev * CVE-url: https://ubuntu.com/security/CVE-2024-56637 - netfilter: ipset: Hold module reference while requesting a module * CVE-url: https://ubuntu.com/security/CVE-2024-56576 - media: i2c: tc358743: Fix crash in the probe error path when using polling * CVE-url: https://ubuntu.com/security/CVE-2024-53214 - vfio/pci: Properly hide first-in-list PCIe extended capability * CVE-url: https://ubuntu.com/security/CVE-2024-56700 - media: wl128x: Fix atomicity violation in fmc_send_cmd() * CVE-url: https://ubuntu.com/security/CVE-2024-56531 - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection * CVE-url: https://ubuntu.com/security/CVE-2024-53194 - PCI: Fix use-after-free of slot->bus on hot remove * CVE-url: https://ubuntu.com/security/CVE-2024-58055 - usb: gadget: f_tcm: Don't free command immediately * CVE-url: https://ubuntu.com/security/CVE-2024-56619 - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() * CVE-url: https://ubuntu.com/security/CVE-2021-47636 - ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() * CVE-url: https://ubuntu.com/security/CVE-2024-5317 - nfsd: make sure exp active before svc_export_show * CVE-url: https://ubuntu.com/security/CVE-2024-53174 - SUNRPC: make sure cache entry active before cache_show * CVE-url: https://ubuntu.com/security/CVE-2021-47219 - scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() * CVE-url: https://ubuntu.com/security/CVE-2024-50269 - usb: musb: sunxi: Fix accessing an released usb phy * CVE-url: https://ubuntu.com/security/CVE-2024-57908 - iio: imu: kmx61: fix information leak in triggered buffer Important TuxCare License Agreement CVE-2024-52332 CVE-2024-56594 CVE-2024-57904 CVE-2024-57912 CVE-2021-47636 CVE-2024-53184 CVE-2024-53214 CVE-2024-56548 CVE-2024-53194 CVE-2024-56637 CVE-2024-53172 CVE-2024-56532 CVE-2024-56597 CVE-2025-21735 CVE-2023-52847 CVE-2024-56630 CVE-2025-21687 CVE-2024-57884 CVE-2024-26872 CVE-2024-56681 CVE-2024-36921 CVE-2024-56619 CVE-2024-53174 CVE-2024-49982 CVE-2025-21718 CVE-2025-21664 CVE-2025-21858 CVE-2024-41014 CVE-2024-50074 CVE-2021-47110 CVE-2024-50269 CVE-2024-57908 CVE-2024-57850 CVE-2023-52805 CVE-2025-21782 CVE-2024-56576 CVE-2024-56700 CVE-2024-57889 CVE-2025-21791 CVE-2024-56539 CVE-2024-57948 CVE-2024-56644 CVE-2024-57980 CVE-2021-47219 CVE-2024-53183 CVE-2024-58055 CVE-2024-57929 CVE-2024-5317 CVE-2024-56570 CVE-2024-47696 CVE-2025-21855 CVE-2023-52621 CVE-2024-26982 CVE-2024-53680 CVE-2024-56531 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-247.258 ] * CVE-url: https://ubuntu.com/security/CVE-2021-47352 - virtio-net: Add validation for used length * CVE-url: https://ubuntu.com/security/CVE-2024-46745 - Input: uinput - reject requests with unreasonable number of slots * CVE-url: https://ubuntu.com/security/CVE-2024-44952 - driver core: Fix uevent_show() vs driver detach race * CVE-url: https://ubuntu.com/security/CVE-2024-42304 - ext4: make sure the first directory block is not a hole * CVE-url: https://ubuntu.com/security/CVE-2024-42305 - ext4: check dot and dotdot of dx_root before making dir indexed * CVE-url: https://ubuntu.com/security/CVE-2024-53168 - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket * CVE-url: https://ubuntu.com/security/CVE-2024-49925 - driver core: add dev_groups to all drivers - driver core: Fix error return code in really_probe() - fbdev: efifb: Register sysfs groups through driver core * CVE-url: https://ubuntu.com/security/CVE-2024-56661 - tipc: fix NULL deref in cleanup_bearer() * CVE-url: https://ubuntu.com/security/CVE-2024-56642 - tipc: Fix use-after-free of kernel socket in cleanup_bearer(). * CVE-url: https://ubuntu.com/security/CVE-2021-47163 - tipc: wait and exit until all work queues are done * CVE-url: https://ubuntu.com/security/CVE-2024-26915 - drm/amdgpu: fix IH overflow on Vega10 v2 - drm/amdgpu: Add check to prevent IH overflow - drm/amdgpu: Reset IH OVERFLOW_CLEAR bit * CVE-url: https://ubuntu.com/security/CVE-2024-56770 - net/sched: netem: account for backlog updates from child qdisc - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() * CVE-url: https://ubuntu.com/security/CVE-2024-50296 - net: hns3: fix kernel crash when uninstalling driver * CVE-url: https://ubuntu.com/security/CVE-2024-53066 - nfs: Fix KMSAN warning in decode_getfattr_attrs() * CVE-url: https://ubuntu.com/security/CVE-2024-49944 - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start * CVE-url: https://ubuntu.com/security/CVE-2024-50237 - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower * CVE-url: https://ubuntu.com/security/CVE-2024-46780 - nilfs2: protect references to superblock parameters exposed in sysfs * CVE-url: https://ubuntu.com/security/CVE-2024-53063 - media: dvbdev: prevent the risk of out of memory access - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set * CVE-url: https://ubuntu.com/security/CVE-2023-52927 - netfilter: allow exp not to be removed in nf_ct_find_expectation * CVE-url: https://ubuntu.com/security/CVE-2021-47150 - net: fec: fix the potential memory leak in fec_enet_init() * CVE-url: https://ubuntu.com/security/CVE-2024-53140 - netlink: terminate outstanding dump on socket close * CVE-url: https://ubuntu.com/security/CVE-2025-21971 - net_sched: Prevent creation of classes with TC_H_ROOT * CVE-url: https://ubuntu.com/security/CVE-2025-37785 - ext4: fix OOB read when checking dotdot dir * CVE-url: https://ubuntu.com/security/CVE-2023-52572 - cifs: Fix UAF in cifs_demultiplex_thread() * CVE-url: https://ubuntu.com/security/CVE-2022-49738 - f2fs: fix to do sanity check on summary info - f2fs: should put a page when checking the summary info - f2fs: fix to do sanity check on i_extra_isize in is_alive() * CVE-url: https://ubuntu.com/security/CVE-2022-49740 - wifi: brcmfmac: Check the count value of channel spec to prevent out-of- bounds reads * CVE-url: https://ubuntu.com/security/ - ipv6: Define dscp_t and stop taking ECN bits into account in fib6-rules * CVE-url: https://ubuntu.com/security/CVE-2023-53020 - l2tp: close all race conditions in l2tp_tunnel_register() * CVE-url: https://ubuntu.com/security/CVE-2025-21957 - scsi: qla1280: Fix kernel oops when debug level > 2 * CVE-url: https://ubuntu.com/security/CVE-2025-21948 - HID: appleir: Fix potential NULL dereference at raw event handle * CVE-url: https://ubuntu.com/security/CVE-2023-52936 - debugfs: add debugfs_lookup_and_remove() - kernel/irq/irqdomain.c: fix memory leak with using debugfs_lookup() * CVE-url: https://ubuntu.com/security/CVE-2025-21912 - gpio: rcar: Use raw_spinlock to protect register access * CVE-url: https://ubuntu.com/security/CVE-2025-21922 - ppp: Fix KMSAN uninit-value warning with bpf * CVE-url: https://ubuntu.com/security/CVE-2025-21891 - ipvlan: ensure network headers are in skb linear part * CVE-url: https://ubuntu.com/security/CVE-2025-21959 - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() * CVE-url: https://ubuntu.com/security/CVE-2025-21996 - drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() * CVE-url: https://ubuntu.com/security/CVE-2025-21928 - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() * CVE-url: https://ubuntu.com/security/CVE-2025-21917 - usb: renesas_usbhs: Flush the notify_hotplug_work * CVE-url: https://ubuntu.com/security/CVE-2023-53001 - drm/drm_vma_manager: Add drm_vma_node_allow_once() * CVE-url: https://ubuntu.com/security/CVE-2025-21969 - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd * CVE-url: https://ubuntu.com/security/CVE-2025-21920 - vlan: enforce underlying device type * CVE-url: https://ubuntu.com/security/CVE-2025-21904 - caif_virtio: fix wrong pointer check in cfv_probe() * CVE-url: https://ubuntu.com/security/CVE-2024-56658 - net: defer final 'struct net' free in netns dismantle * CVE-url: https://ubuntu.com/security/CVE-2022-23041 - xen/pvcalls: use alloc/free_pages_exact() * CVE-url: https://ubuntu.com/security/CVE-2024-50265 - ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() * CVE-url: https://ubuntu.com/security/CVE-2024-46826 - ELF: fix kernel.randomize_va_space double read * CVE-url: https://ubuntu.com/security/CVE-2025-21700 - net: sched: Disallow replacing of child qdisc from one parent to another * CVE-url: https://ubuntu.com/security/CVE-2025-21702 - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 * CVE-url: https://ubuntu.com/security/CVE-2024-50167 - be2net: fix potential memory leak in be_xmit() * CVE-url: https://ubuntu.com/security/CVE-2024-49952 - netfilter: nf_tables: prevent nf_skb_duplicated corruption * CVE-url: https://ubuntu.com/security/CVE-2024-49948 - net: add more sanity checks to qdisc_pkt_len_init() Important TuxCare License Agreement CVE-2024-53168 CVE-2024-46780 CVE-2024-53140 CVE-2024-42305 CVE-2025-21912 CVE-2024-56658 CVE-2024-56661 CVE-2025-21904 CVE-2025-21971 CVE-2023-52936 CVE-2023-53001 CVE-2025-21700 CVE-2024-42304 CVE-2024-49944 CVE-2025-21702 CVE-2025-21969 CVE-2021-47163 CVE-2023-53020 CVE-2024-50296 CVE-2021-47352 CVE-2025-21922 CVE-2025-21928 CVE-2025-21948 CVE-2025-21920 CVE-2024-53063 CVE-2022-23041 CVE-2024-44952 CVE-2024-56642 CVE-2025-21959 CVE-2023-52927 CVE-2024-46745 CVE-2023-52572 CVE-2021-47150 CVE-2024-50237 CVE-2024-26915 CVE-2025-37785 CVE-2025-21917 CVE-2022-49738 CVE-2024-49925 CVE-2025-21996 CVE-2022-49740 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-248.259 ] * CVE-url: https://ubuntu.com/security/CVE-2025-21811 - nilfs2: protect access to buffers with no active references * CVE-url: https://ubuntu.com/security/CVE-2025-21715 - net: davicom: fix UAF in dm9000_drv_remove * CVE-url: https://ubuntu.com/security/CVE-2024-58083 - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() * CVE-url: https://ubuntu.com/security/CVE-2024-57979 - pps: Fix a use-after-free * CVE-url: https://ubuntu.com/security/CVE-2025-21898 - ftrace: Avoid potential division by zero in function_stat_show() * CVE-url: https://ubuntu.com/security/CVE-2025-21993 - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() * CVE-url: https://ubuntu.com/security/CVE-2025-21653 - netlink: add attribute range validation to policy - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute * CVE-url: https://ubuntu.com/security/CVE-2024-53148 - comedi: Flush partial mappings in error case * CVE-url: https://ubuntu.com/security/CVE-2022-49541 - cifs: fix potential double free during failed mount * CVE-url: https://ubuntu.com/security/CVE-2024-35937 - wifi: cfg80211: check A-MSDU format more carefully * CVE-url: https://ubuntu.com/security/CVE-2021-47211 - ALSA: usb-audio: fix null pointer dereference on pointer cs_desc * CVE-url: https://ubuntu.com/security/CVE-2025-21772 - partitions: mac: fix handling of bogus partition table * CVE-url: https://ubuntu.com/security/CVE-2025-21753 - btrfs: fix use-after-free when attempting to join an aborted transaction * CVE-url: https://ubuntu.com/security/CVE-2025-21934 - rapidio: fix an API misues when rio_add_net() fails Important TuxCare License Agreement CVE-2025-21772 CVE-2025-21993 CVE-2024-35937 CVE-2025-21753 CVE-2022-49541 CVE-2024-58083 CVE-2024-53148 CVE-2025-21715 CVE-2025-21934 CVE-2025-21811 CVE-2025-21653 CVE-2021-47211 CVE-2024-57979 Ubuntu 16.04 LTS * Miscellaneous upstream changes - fixup! UBUNTU: [Config] updateconfigs for NFSD_FAULT_INJECTION [ Ubuntu: 4.15.0-249.260 ] * Focal update: v5.4.292 upstream stable release (LP: #2109357) // CVE-url: https://ubuntu.com/security/CVE-2025-37937 - objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() * Focal update: v5.4.287 upstream stable release (LP: #2095145) // CVE-url: https://ubuntu.com/security/CVE-2024-53197 - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices * CVE-url: https://ubuntu.com/security/CVE-2024-46787 - userfaultfd: fix checks for huge PMDs * CVE-url: https://ubuntu.com/security/CVE-2025-37798 - sch_drr: make drr_qlen_notify() idempotent - sch_hfsc: make hfsc_qlen_notify() idempotent - sch_qfq: make qfq_qlen_notify() idempotent - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() * Focal update: v5.4.285 upstream stable release (LP: #2089233) // CVE-2024-50116 // CVE-url: https://ubuntu.com/security/CVE-2024-50116 - nilfs2: fix kernel bug due to missing clearing of buffer delay flag * Focal update: v5.4.285 upstream stable release (LP: #2089233) // CVE-2024-49958 // CVE-url: https://ubuntu.com/security/CVE-2024-49958 - ocfs2: reserve space for inline xattr before attaching reflink tree * Focal update: v5.4.286 upstream stable release (LP: #2089558) // CVE-url: https://ubuntu.com/security/CVE-2021-47195 - spi: fix use-after-free of the add_lock mutex * CVE-url: https://ubuntu.com/security/CVE-2021-47469 - spi: Fix deadlock when adding SPI controllers on SPI buses * CVE-url: https://ubuntu.com/security/CVE-2025-39735 - jfs: fix slab-out-of-bounds read in ea_get() * CVE-url: https://ubuntu.com/security/CVE-2025-22020 - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove * CVE-url: https://ubuntu.com/security/CVE-2025-22004 - net: atm: fix use after free in lec_send() * CVE-url: https://ubuntu.com/security/CVE-2025-39688 - nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid() * CVE-url: https://ubuntu.com/security/CVE-2022-49892 - ftrace: Fix use-after-free for dynamic ftrace_ops * CVE-url: https://ubuntu.com/security/CVE-2021-47293 - net/sched: act_skbmod: Skip non-Ethernet packets * CVE-url: https://ubuntu.com/security/CVE-2024-50106 - nfsd: simplify nfs4_put_deleg_lease calls - nfsd: factor out common delegation-destruction code - nfsd: Fix race to FREE_STATEID and cl_revoked - nfsd: don't call functions with side-effecting inside WARN_ON() - nfsd: remove fault injection code - nfsd: avoid race after unhash_delegation_locked() - nfsd4: don't set lock stateid's sc_type to CLOSED - nfsd: split sc_status out of sc_type - nfsd: fix race between laundromat and free_stateid * CVE-url: https://ubuntu.com/security/CVE-2024-57982 - xfrm: state: fix out-of-bounds read during lookup * CVE-url: https://ubuntu.com/security/CVE-2023-52588 - f2fs: fix to tag gcing flag on page during block migration * Miscellaneous Ubuntu changes - [Config] updateconfigs for NFSD_FAULT_INJECTION Important TuxCare License Agreement CVE-2025-22020 CVE-2025-22004 CVE-2025-37937 CVE-2025-39688 CVE-2021-47293 CVE-2024-53197 CVE-2021-47195 CVE-2024-57982 CVE-2022-49892 CVE-2023-52588 CVE-2025-37798 CVE-2025-39735 CVE-2024-50106 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-250.261 ] * Focal update: v5.4.291 upstream stable release (LP: #2106002) // CVE-2025-21760 // CVE-url: https://ubuntu.com/security/CVE-2025-21760 - ndisc: extend RCU protection in ndisc_send_skb() * Focal update: v5.4.291 upstream stable release (LP: #2106002) // CVE-2025-21761 // CVE-url: https://ubuntu.com/security/CVE-2025-21761 - openvswitch: use RCU protection in ovs_vport_cmd_fill_info() * Focal update: v5.4.291 upstream stable release (LP: #2106002) // CVE-2025-21764 // CVE-url: https://ubuntu.com/security/CVE-2025-21764 - ndisc: use RCU protection in ndisc_alloc_skb() * Focal update: v5.4.291 upstream stable release (LP: #2106002) // CVE-2025-21765 // CVE-url: https://ubuntu.com/security/CVE-2025-21764 - ipv6: use RCU protection in ip6_default_advmss() * Focal update: v5.4.291 upstream stable release (LP: #2106002) // CVE-url: https://ubuntu.com/security/CVE-2025-21764 - ipv4: use RCU protection in rt_is_expired() - ipv4: use RCU protection in inet_select_addr() * CVE-url: https://ubuntu.com/security/CVE-2025-21762 - net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu() - net: add dev_net_rcu() helper - arp: use RCU protection in arp_xmit() Important TuxCare License Agreement CVE-2025-21762 CVE-2025-21764 CVE-2025-21761 CVE-2025-21760 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-251.262 ] * CVE-url: https://ubuntu.com/security/CVE-2025-38000 - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() * CVE-url: https://ubuntu.com/security/CVE-2024-57996 // CVE-url: https://ubuntu.com/security/CVE-2025-37752 - net_sched: sch_sfq: move the limit validation * Focal update: v5.4.285 upstream stable release (LP: #2089233) // CVE-2024-50202 // CVE-url: https://ubuntu.com/security/CVE-2024-50202 - nilfs2: propagate directory read errors from nilfs_find_entry() * Focal update: v5.4.279 upstream stable release (LP: #2073621) // CVE-url: https://ubuntu.com/security/CVE-2024-50202 - nilfs2: Remove check for PageError - nilfs2: return the mapped address from nilfs_get_page() * Focal update: v5.4.287 upstream stable release (LP: #2095145) // CVE-url: https://ubuntu.com/security/CVE-2024-53131 - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint * Focal update: v5.4.287 upstream stable release (LP: #2095145) // CVE-url: https://ubuntu.com/security/CVE-2024-53130 - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint * CVE-url: https://ubuntu.com/security/CVE-2022-49179 - block, bfq: don't move oom_bfqq * CVE-url: https://ubuntu.com/security/CVE-2022-49176 - bfq: fix use-after-free in bfq_dispatch_request * CVE-url: https://ubuntu.com/security/CVE-2025-21956 - drm/amd/display: Assign normalized_pix_clk when color depth = 14 * CVE-url: https://ubuntu.com/security/CVE-2025-21992 - HID: ignore non-functional sensor in HP 5MP Camera * CVE-url: https://ubuntu.com/security/CVE-2025-22021 - netfilter: socket: Lookup orig tuple for IPv6 SNAT * CVE-url: https://ubuntu.com/security/CVE-2025-22073 - spufs: fix a leak on spufs_new_file() failure * CVE-url: https://ubuntu.com/security/CVE-2025-22079 - ocfs2: validate l_tree_depth to avoid out-of-bounds access * CVE-url: https://ubuntu.com/security/CVE-2025-22086 - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow * CVE-url: https://ubuntu.com/security/CVE-2025-21722 - nilfs2: do not force clear folio if buffer is referenced * CVE-url: https://ubuntu.com/security/CVE-2025-22018 - atm: Fix NULL pointer dereference * CVE-url: https://ubuntu.com/security/CVE-2024-58071 - team: prevent adding a device which is already a team device lower * CVE-url: https://ubuntu.com/security/CVE-2024-58063 - wifi: rtlwifi: fix memory leaks and invalid access at probe error path * CVE-url: https://ubuntu.com/security/CVE-2024-58052 - drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table * CVE-url: https://ubuntu.com/security/CVE-2024-58058 - ubifs: skip dumping tnc tree when zroot is null * CVE-url: https://ubuntu.com/security/CVE-2025-21859 - USB: gadget: f_midi: f_midi_complete to call queue_work * CVE-url: https://ubuntu.com/security/CVE-2025-21640 - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy * CVE-url: https://ubuntu.com/security/CVE-2024-57922 - drm/amd/display: Add check for granularity in dml ceil/floor helpers * CVE-url: https://ubuntu.com/security/CVE-2024-57913 - usb: gadget: f_fs: Remove WARN_ON in functionfs_bind * CVE-url: https://ubuntu.com/security/CVE-2025-21638 - sctp: sysctl: auth_enable: avoid using current->nsproxy * CVE-url: https://ubuntu.com/security/CVE-2024-50195 - posix-clock: Fix missing timespec64 check in pc_clock_settime() * CVE-url: https://ubuntu.com/security/CVE-2024-50299 - sctp: properly validate chunk size in sctp_sf_ootb() * CVE-url: https://ubuntu.com/security/CVE-2024-50273 - btrfs: reinitialize delayed ref list after deleting it from the list * CVE-url: https://ubuntu.com/security/CVE-2024-41016 - ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() * CVE-url: https://ubuntu.com/security/CVE-2024-50287 - media: v4l2-tpg: prevent the risk of a division by zero * CVE-url: https://ubuntu.com/security/CVE-2024-49965 - ocfs2: remove unreasonable unlock in ocfs2_read_blocks * CVE-url: https://ubuntu.com/security/CVE-2024-50179 - ceph: remove the incorrect Fw reference check when dirtying pages * CVE-url: https://ubuntu.com/security/CVE-2024-40953 - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() * CVE-url: https://ubuntu.com/security/CVE-2024-50290 - media: cx24116: prevent overflows on SNR calculus * CVE-url: https://ubuntu.com/security/CVE-2024-49877 - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate * CVE-url: https://ubuntu.com/security/CVE-2024-49938 - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit * CVE-url: https://ubuntu.com/security/CVE-2024-50008 - wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext() * CVE-url: https://ubuntu.com/security/CVE-2024-47672 - wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead * CVE-url: https://ubuntu.com/security/CVE-2024-49959 - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error * CVE-url: https://ubuntu.com/security/CVE-2024-49963 - mailbox: bcm2835: Fix timeout during suspend mode * CVE-url: https://ubuntu.com/security/CVE-2024-47709 - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry(). * CVE-url: https://ubuntu.com/security/CVE-2025-21699 - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag * CVE-url: https://ubuntu.com/security/CVE-2025-21689 - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() * CVE-url: https://ubuntu.com/security/CVE-2024-38544 - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt * CVE-url: https://ubuntu.com/security/CVE-2024-50251 - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() * CVE-url: https://ubuntu.com/security/CVE-2024-49949 - udp: add udp gso - net: avoid potential underflow in qdisc_pkt_len_init() with UFO * CVE-url: https://ubuntu.com/security/CVE-2024-53101 - fs: Fix uninitialized value issue in from_kuid and from_kgid * CVE-url: https://ubuntu.com/security/CVE-2023-52975 - scsi: iscsi: Move pool freeing - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress * Focal update: v5.4.287 upstream stable release (LP: #2095145) // CVE-url: https://ubuntu.com/security/CVE-2024-56748 - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() * CVE-url: https://ubuntu.com/security/CVE-2025-37797 - net_sched: hfsc: Fix a UAF vulnerability in class handling * CVE-url: https://ubuntu.com/security/CVE-2024-38541 - of: module: add buffer overflow check in of_modalias() * Miscellaneous upstream changes - fixup! UBUNTU: [Config] updateconfigs for NFSD_FAULT_INJECTION Important TuxCare License Agreement CVE-2025-21638 CVE-2025-21689 CVE-2024-50273 CVE-2024-49938 CVE-2022-49179 CVE-2025-37752 CVE-2025-22018 CVE-2024-38541 CVE-2024-53131 CVE-2024-49959 CVE-2024-56748 CVE-2024-50287 CVE-2025-22073 CVE-2022-49176 CVE-2024-50251 CVE-2024-53101 CVE-2024-57996 CVE-2024-50290 CVE-2024-41016 CVE-2024-38544 CVE-2025-21722 CVE-2024-58063 CVE-2024-49949 CVE-2024-47709 CVE-2024-50299 CVE-2025-37797 CVE-2023-52975 CVE-2025-22079 CVE-2024-47672 CVE-2024-50008 CVE-2024-49877 CVE-2024-40953 CVE-2024-58071 CVE-2025-22021 CVE-2024-57913 CVE-2024-50179 CVE-2025-21699 CVE-2024-49963 CVE-2024-57922 CVE-2024-49965 CVE-2025-21956 CVE-2025-21992 CVE-2024-53130 CVE-2024-50195 CVE-2024-50202 CVE-2025-21859 CVE-2024-58052 CVE-2025-21640 CVE-2025-22086 CVE-2025-38000 CVE-2024-58058 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-252.263 ] * CVE-url: https://ubuntu.com/security/CVE-2022-43945 - NFSD: Protect against send buffer overflow in NFSv3 READ * Focal update: v5.4.285 upstream stable release (LP: #2089233) // CVE-2024-49924 // CVE-url: https://ubuntu.com/security/CVE-2024-49924 - fbdev: pxafb: Fix possible use after free in pxafb_task() * CVE-url: https://ubuntu.com/security/CVE-2025-38477 - net/sched: sch_qfq: Fix race condition on qfq_aggregate - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class * CVE-url: https://ubuntu.com/security/CVE-2025-38618 - vsock: Do not allow binding to VMADDR_PORT_ANY * CVE-url: https://ubuntu.com/security/CVE-2025-38617 - net/packet: fix a race in packet_set_ring() and packet_notifier() * CVE-url: https://ubuntu.com/security/CVE-2025-21796 - nfsd: clear acl_access/acl_default after releasing them * CVE-url: https://ubuntu.com/security/CVE-2022-48827 - NFSD: Fix the behavior of READ near OFFSET_MAX * CVE-url: https://ubuntu.com/security/CVE-2021-47391 - RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests * CVE-url: https://ubuntu.com/security/CVE-2024-41069 - ASoC: topology: Fix references to freed memory - ASoC: topology: Do not assign fields that are already set - ASoC: topology: Clean up route loading * CVE-url: https://ubuntu.com/security/CVE-2024-56616 - drm/dp_mst: Fix MST sideband message body length check * Focal update: v5.4.261 upstream stable release (LP: #2049049) // CVE-url: https://ubuntu.com/security/CVE-2023-52868 - thermal: core: prevent potential string overflow * Focal update: v5.4.262 upstream stable release (LP: #2049069) // CVE-url: https://ubuntu.com/security/CVE-2023-52836 - locking/ww_mutex/test: Fix potential workqueue corruption * CVE-2024-35965 // CVE-url: https://ubuntu.com/security/CVE-2024-35965 - Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() - Bluetooth: L2CAP: Fix not validating setsockopt user input * Focal update: v5.4.188 upstream stable release (LP: #1971496) // CVE-url: https://ubuntu.com/security/CVE-2022-49292 - ALSA: oss: Fix PCM OSS buffer allocation overflow * Focal update: v5.4.262 upstream stable release (LP: #2049069) // CVE-url: https://ubuntu.com/security/CVE-2023-52835 - perf/core: Bail out early if the request AUX area is out of bound * Focal update: v5.4.262 upstream stable release (LP: #2049069) // CVE-url: https://ubuntu.com/security/CVE-2023-52764 - media: gspca: cpia1: shift-out-of-bounds in set_flicker * Focal update: v5.4.261 upstream stable release (LP: #2049049) // CVE-url: https://ubuntu.com/security/CVE-2023-52864 - platform/x86: wmi: Fix probe failure when failing to register WMI devices - platform/x86: wmi: remove unnecessary initializations - platform/x86: wmi: Fix opening of char device * CVE-2024-35966 // CVE-url: https://ubuntu.com/security/CVE-2024-35966 - Bluetooth: RFCOMM: Fix not validating setsockopt user input * CVE-2024-35967 // CVE-url: https://ubuntu.com/security/CVE-2024-35966 - Bluetooth: SCO: Fix not validating setsockopt user input * Focal update: v5.4.291 upstream stable release (LP: #2106002) // CVE-2025-21704 // CVE-url: https://ubuntu.com/security/CVE-2025-21704 - usb: cdc-acm: Check control transfer buffer size before access * CVE-url: https://ubuntu.com/security/CVE-2025-38350 - net/sched: Always pass notifications when child class becomes empty * CVE-url: https://ubuntu.com/security/CVE-2025-37798 - sch_htb: make htb_qlen_notify() idempotent Important TuxCare License Agreement CVE-2023-52868 CVE-2022-48827 CVE-2024-49924 CVE-2024-35965 CVE-2024-41069 CVE-2025-38350 CVE-2023-52835 CVE-2025-21704 CVE-2025-38617 CVE-2025-21796 CVE-2025-38477 CVE-2021-47391 CVE-2025-38618 CVE-2023-52764 CVE-2024-35966 CVE-2022-43945 CVE-2023-52836 CVE-2023-52864 CVE-2024-56616 CVE-2022-49292 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-253.264 ] * Focal update: v5.4.291 upstream stable release (LP: #2106002) // CVE-2024-58072 - wifi: rtlwifi: remove unused check_buddy_priv * Focal update: v5.4.291 upstream stable release (LP: #2106002) - wifi: rtlwifi: remove unused timer and related code - wifi: rtlwifi: remove unused dualmac control leftovers * Focal update: v5.4.237 upstream stable release (LP: #2023420) - ext4: move where set the MAY_INLINE_DATA flag is set * CVE-url: https://ubuntu.com/security/CVE-2024-58014 - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() * CVE-url: https://ubuntu.com/security/CVE-2025-38352 - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() * CVE-url: https://ubuntu.com/security/CVE-2022-25265 - x86/elf: Add table to document READ_IMPLIES_EXEC - x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK - x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit * Focal update: v5.4.279 upstream stable release (LP: #2073621) // CVE-url: https://ubuntu.com/security/CVE-2024-37078 - nilfs2: fix potential kernel bug due to lack of writeback flag waiting * CVE-url: https://ubuntu.com/security/CVE-2022-49170 - f2fs: fix to do sanity check on curseg->alloc_type * CVE-url: https://ubuntu.com/security/CVE-2021-47479 - staging: rtl8712: fix use-after-free in rtl8712_dl_fw * Focal update: v5.4.279 upstream stable release (LP: #2073621) // CVE-url: https://ubuntu.com/security/CVE-2024-39469 - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors * CVE-url: https://ubuntu.com/security/CVE-2022-49519 - ath10k: skip ath10k_halt during suspend for driver state RESTARTING * CVE-url: https://ubuntu.com/security/CVE-2024-46713 - perf/aux: Fix AUX buffer serialization * Focal update: v5.4.262 upstream stable release (LP: #2049069) // CVE-url: https://ubuntu.com/security/CVE-2023-52804 - fs/jfs: Add check for negative db_l2nbperpage - fs/jfs: Add validity check for db_maxag and db_agpref * Focal update: v5.4.251 upstream stable release (LP: #2034918) // CVE-url: https://ubuntu.com/security/CVE-2023-52804 - jfs: jfs_dmap: Validate db_l2nbperpage while mounting * CVE-url: https://ubuntu.com/security/CVE-2024-36880 - Bluetooth: qca: add missing firmware sanity checks * Miscellaneous upstream changes - net: openvswitch: fix nested key length validation in the set() action - isofs: Prevent the use of too small fid - ext4: ignore xattrs past end - net: ppp: Add bound checking for skb data on ppp_sync_txmung - media: venus: hfi: add check to handle incorrect queue size - sctp: detect and prevent references to a freed transport in sendmsg - ext4: improve xattr consistency checking and error reporting - ext4: introduce ITAIL helper - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() - ibmvnic: Do not attempt to login if RX or TX queues are not allocated - ibmvnic: Enable GRO - ibmvnic: Fix netdev feature clobbering during a reset - ibmvnic: create send_control_ip_offload - ibmvnic: Define vnic_login_client_data name field as unsized array - ibmvnic: Use strscpy() instead of strncpy() - ibmvnic: Use kernel helpers for hex dumps - wifi: at76c50x: fix use after free access in at76_disconnect Important TuxCare License Agreement CVE-2024-37078 CVE-2024-58072 CVE-2024-36880 CVE-2023-52804 CVE-2024-39469 CVE-2024-46713 CVE-2022-49170 CVE-2025-38352 CVE-2024-58014 CVE-2022-25265 CVE-2021-47479 CVE-2022-49519 Ubuntu 16.04 LTS * Miscellaneous Ubuntu changes - update-from-bionic-master repo has been updated * Miscellaneous upstream changes - debian: add control and changeg files [ Ubuntu: 4.15.0-254.265 ] * CVE-2023-53515 - virtio-mmio: don't break lifecycle of vm_dev {CVE-2023-53515} * CVE-2025-39967 - fbcon: fix integer overflow in fbcon_do_set_font {CVE-2025-39967} - fbcon: Fix OOB access in font allocation {CVE-2025-39967} * CVE-2025-38702 - fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702} * CVE-2025-38563 - perf/core: Prevent VMA split of buffer mappings {CVE-2025-38563} * CVE-2025-39869 - dmaengine: ti: edma: Fix memory allocation size for queue_priority_map {CVE-2025-39869} * CVE-2023-53577 - bpf, cpumap: Make sure kthread is running before map update returns {CVE-2023-53577} * CVE-2023-53608 - nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() {CVE-2023-53608} * CVE-2023-53604 - dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path {CVE-2023-53604} * CVE-2023-53619 - netfilter: Replace printk() with pr_*() and define pr_fmt() {CVE-2023-53619} - netfilter: use kvmalloc_array to allocate memory for hashtable {CVE-2023-53619} - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free {CVE-2023-53619} * CVE-2025-38680 - media: uvcvideo: Fix 1-byte out-of-bounds read in {CVE-2025-38680} * CVE-2023-53454 - HID: multitouch: Correct devm device reference for hidinput {CVE-2023-53454} * CVE-2025-38699 - scsi: bfa: Double-free fix {CVE-2025-38699} - ubi: ensure that VID header offset + VID header size <= alloc, size {CVE-2023-53265} - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() {CVE-2023-53676} - fs: jfs: Fix UBSAN: array-index-out-of-bounds in {CVE-2025-38699} * CVE-2023-53596 - drivers: base: Free devm resources when unregistering a {CVE-2023-53596} * CVE-2023-53622 - gfs2: Fix possible data races in gfs2_show_options() {CVE-2023-53622} - HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition {CVE-2023-53622} * CVE-2023-53090 - drm/amdkfd: Fix an illegal memory access {CVE-2023-53090} * CVE-2023-53116 - nvmet: avoid potential UAF in nvmet_req_complete() {CVE-2023-53116} * CVE-2023-53138 - net: caif: Fix use-after-free in cfusbl_device_notify() {CVE-2023-53138} * CVE-2023-53035 - nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() {CVE-2023-53035} * CVE-2023-53668 - ring-buffer: Fix deadloop issue on reading trace_pipe {CVE-2023-53668} * CVE-2023-53616 - jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount {CVE-2023-53616} * CVE-2023-53554 - staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() {CVE-2023-53554} * CVE-2023-53587 - ring-buffer: Sync IRQ works before buffer destruction {CVE-2023-53587} * CVE-2023-53541 - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write {CVE-2023-53541} * CVE-2023-53559 - ip_vti: fix potential slab-use-after-free in decode_session6 {CVE-2023-53559} * CVE-2023-53484 - lib: cpu_rmap: Avoid use after free on rmap->obj array entries {CVE-2023-53484} - lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() {CVE-2023-53484} * CVE-2025-39824 - HID: asus: fix UAF via HID_CLAIMED_INPUT validation {CVE-2025-39824} * CVE-2025-38715 - hfs: fix slab-out-of-bounds in hfs_bnode_read() {CVE-2025-38715} * CVE-2023-53153 - wifi: cfg80211: Fix use after free for wext {CVE-2023-53153} * CVE-2025-38555 - usb: gadget : fix use-after-free in composite_dev_cleanup() {CVE-2025-38555} * CVE-2025-39743 - jfs: truncate good inode pages when hard link is 0 {CVE-2025-39743} * CVE-2025-39945 - cnic: Fix use-after-free bugs in cnic_delete_task {CVE-2025-39945} * CVE-2023-53506 - udf: Do not bother merging very long extents {CVE-2023-53506} * CVE-2025-38714 - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() {CVE-2025-38714} * CVE-2025-39685 - comedi: pcl726: Prevent invalid irq number {CVE-2025-39685} * CVE-2025-39839 - batman-adv: fix OOB read/write in network-coding decode {CVE-2025-39839} * CVE-2025-38708 - drbd: add missing kref_get in handle_write_conflicts {CVE-2025-38708} * CVE-2023-53521 - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() {CVE-2023-53521} * CVE-2025-38713 - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() {CVE-2025-38713} * CVE-2023-53675 - scsi: ses: Fix possible desc_ptr out-of-bounds accesses {CVE-2023-53675} * CVE-2025-39691 - fs/buffer: fix use-after-free when call bh_read() helper {CVE-2025-39691} * CVE-2023-53259 - VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF {CVE-2023-53259} * CVE-2023-53285 - ext4: add bounds checking in get_max_inline_xattr_value_size() {CVE-2023-53285} * CVE-2023-53148 - igb: Fix igb_down hung on surprise removal {CVE-2023-53148} * CVE-2023-53219 - media: netup_unidvb: fix use-after-free at del_timer() {CVE-2023-53219} * CVE-2023-53215 - sched/fair: Don't balance task to its current running CPU {CVE-2023-53215} * CVE-2023-53305 - Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305} * CVE-2025-38103 - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103} * CVE-2025-38051 - smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051} * CVE-2025-38157 - wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157} * CVE-2023-53373 - crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373} * CVE-2025-38079 - crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079} * CVE-2025-38212 - ipc: fix to protect IPCS lookups using RCU {CVE-2025-38212} * CVE-2025-38313 - bus: fsl-mc: fix double-free on mc_dev {CVE-2025-38313} * CVE-2023-53311 - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput {CVE-2023-53311} * CVE-2023-53307 - rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails {CVE-2023-53307} * CVE-2025-38403 - vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403} * CVE-2025-39683 - tracing: Limit access to parser->buffer when trace_get_user failed {CVE-2025-39683} * CVE-2025-38697 - jfs: upper bound check of tree index in dbAllocAG {CVE-2025-38697} * CVE-2025-39689 - ftrace: Also allocate and copy hash for reading of filter files {CVE-2025-39689} * CVE-2025-38574 - pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574} * CVE-2025-38572 - ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572} * CVE-2025-38685 - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685} * CVE-2025-39911 - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911} * CVE-2025-39973 - i40e: increase max descriptors for XL710 {CVE-2025-39973} - i40e: add validation for ring_len param {CVE-2025-39973} * CVE-2025-38724 - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724} * CVE-2025-39860 - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() {CVE-2025-39860} * CVE-2025-38530 - comedi: pcl812: Fix bit shift out of bounds {CVE-2025-38530} * CVE-2025-38529 - comedi: aio_iiro_16: Fix bit shift out of bounds {CVE-2025-38529} * CVE-2025-38497 - usb: gadget: configfs: Fix OOB read on empty string write {CVE-2025-38497} * CVE-2025-38483 - comedi: das16m1: Fix bit shift out of bounds {CVE-2025-38483} * CVE-2025-38482 - comedi: das6402: Fix bit shift out of bounds {CVE-2025-38482} * CVE-2025-39702 - ipv6: sr: Fix MAC comparison to be constant-time {CVE-2025-39702} * CVE-2025-39730 - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() {CVE-2025-39730} * CVE-2025-39817 - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare {CVE-2025-39817} * CVE-2025-38494 - HID: core: ensure the allocated report buffer can contain the reserved report ID {CVE-2025-38494} - HID: core: ensure __hid_request reserves the report ID as the first byte {CVE-2025-38494} - HID: core: do not bypass hid_hw_raw_request {CVE-2025-38494} * CVE-2025-38527 - smb: client: fix use-after-free in cifs_oplock_break {CVE-2025-38527} * CVE-2025-39965 - xfrm: Duplicate SPI Handling {CVE-2025-39965} * CVE-2025-37927 - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid {CVE-2025-37927} * CVE-2025-37817 - mcb: fix error handling for different scenarios when parsing {CVE-2025-37817} - mcb: fix a double free bug in chameleon_parse_gdd() {CVE-2025-37817} * CVE-2025-38204 - jfs: fix array-index-out-of-bounds read in add_missing_indices {CVE-2025-38204} * CVE-2025-38323 - net: atm: add lec_mutex {CVE-2025-38323} * CVE-2025-38346 - ftrace: Fix UAF when lookup kallsym after ftrace disabled {CVE-2025-38346} * CVE-2025-38348 - wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() {CVE-2025-38348} * CVE-2025-38416 - NFC: nci: uart: Set tty->disc_data only in success path {CVE-2025-38416} * CVE-2025-38428 - Input: ims-pcu - check record size in ims_pcu_flash_firmware() {CVE-2025-38428} * CVE-2025-38245 - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). {CVE-2025-38245} * CVE-2025-38377 - rose: fix dangling neighbour pointers in rose_rt_device_down() {CVE-2025-38377} * CVE-2025-38459 - atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459} * CVE-2025-39863 - wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863} * CVE-2025-21726 - padata: avoid UAF for reorder_work {CVE-2025-21726} * CVE-2025-39760 - usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760} * CVE-2025-38198 - fbcon: Make sure modelist not set on unregistered console {CVE-2025-38198} * CVE-2025-38375 - virtio-net: ensure the received length does not exceed allocated size {CVE-2025-38375} * CVE-2025-39993 - media: imon: reorganize serialization {CVE-2025-39993} - media: rc: fix races with imon_disconnect() {CVE-2025-39993} * CVE-2025-39883 - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory {CVE-2025-39883} * Focal update: v5.4.211 upstream stable release (LP: #1990190) - scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input * Focal update: v5.4.231 upstream stable release (LP: #2011226) // CVE-2023-53000 - netlink: prevent potential spectre v1 gadgets * CVE-2022-49980 - USB: gadget: Fix use-after-free Read in usb_udc_uevent() * CVE-2022-21546 - scsi: target: Fix WRITE_SAME No Data Buffer crash * Focal update: v5.4.225 upstream stable release (LP: #2002347) // CVE-2022-49763 - ntfs: fix use-after-free in ntfs_attr_find() * Focal update: Focal update: v5.4.235 upstream stable release (LP: #2017706) // CVE-2022-50258 - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() * CVE-2025-21727 - padata: fix UAF in padata_reorder * CVE-2025-37882 - usb: xhci: Fix isochronous Ring Underrun/Overrun event handling * CVE-2025-38250 - Bluetooth: hci_core: Fix use-after-free in vhci_flush() * CVE-2025-39751 - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control * CVE-2025-37810 - usb: dwc3: gadget: check that event count does not exceed event buffer length * CVE-2025-37839 - jbd2: remove wrong sb->s_sequence check * CVE-2025-37892 - mtd: inftlcore: Add error check for inftl_read_oob() * CVE-2025-37923 - tracing: Fix oob write in trace_seq_to_buffer() * CVE-2024-43883 - usb: vhci-hcd: Do not drop references before new references are gained * CVE-2025-37739 - f2fs: lost matching-pair of trace in f2fs_truncate_inode_blocks - f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() * CVE-2025-38069 - PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops * CVE-2025-22083 - vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint * Miscellaneous upstream changes - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too - HID: core: Harden s32ton() against conversion to 0 bits - fbcon: Introduce wrapper for console->fb_info lookup {CVE-2025-38198} - net: atm: fix /proc/net/atm/lec handling {CVE-2025-38323} Important TuxCare License Agreement CVE-2025-38348 CVE-2025-38572 CVE-2025-38563 CVE-2025-39730 CVE-2025-39689 CVE-2025-38377 CVE-2023-53454 CVE-2025-39911 CVE-2023-53622 CVE-2025-39797 CVE-2023-53215 CVE-2018-1000026 CVE-2023-53035 CVE-2025-39883 CVE-2023-53148 CVE-2025-39869 CVE-2025-38555 CVE-2025-38497 CVE-2023-53000 CVE-2023-53219 CVE-2025-37927 CVE-2023-53577 CVE-2025-38069 CVE-2025-38079 CVE-2025-39743 CVE-2025-22104 CVE-2023-53515 CVE-2023-53619 CVE-2025-39702 CVE-2025-38527 CVE-2025-38713 CVE-2025-37839 CVE-2025-39967 CVE-2025-38051 CVE-2025-37823 CVE-2025-38346 CVE-2025-39683 CVE-2025-38323 CVE-2025-39685 CVE-2023-53090 CVE-2022-49980 CVE-2025-38103 CVE-2018-12233 CVE-2023-53138 CVE-2024-43883 CVE-2023-53373 CVE-2025-39817 CVE-2025-37882 CVE-2025-38702 CVE-2025-39860 CVE-2023-53116 CVE-2025-38529 CVE-2025-39839 CVE-2025-37817 CVE-2023-53559 CVE-2025-38697 CVE-2025-38157 CVE-2025-37892 CVE-2023-53604 CVE-2025-38708 CVE-2025-39824 CVE-2025-39945 CVE-2023-53608 CVE-2025-38574 CVE-2025-38459 CVE-2025-37923 CVE-2025-38724 CVE-2025-38494 CVE-2022-50030 CVE-2023-53554 CVE-2025-39863 CVE-2025-38403 CVE-2025-38699 CVE-2023-53616 CVE-2025-39691 CVE-2025-38428 CVE-2023-53521 CVE-2025-38482 CVE-2023-53285 CVE-2023-53484 CVE-2025-38245 CVE-2025-38680 CVE-2025-38530 CVE-2025-38715 CVE-2025-38483 CVE-2025-38204 CVE-2023-53153 CVE-2023-53587 CVE-2022-49763 CVE-2023-53311 CVE-2023-53675 CVE-2023-53676 CVE-2025-38198 CVE-2023-53265 CVE-2023-53668 CVE-2023-53259 CVE-2025-38685 CVE-2025-38714 CVE-2023-53305 CVE-2023-53307 CVE-2025-38375 CVE-2025-38250 CVE-2022-21546 CVE-2025-38556 CVE-2023-53541 CVE-2025-39760 CVE-2023-53506 CVE-2025-39993 CVE-2025-37810 CVE-2025-38416 CVE-2022-50258 CVE-2023-53596 CVE-2025-22083 CVE-2025-37739 CVE-2025-38212 CVE-2025-38313 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-255.266 ] * CVE-2026-31431 - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-31431} - crypto: scatterwalk - Backport memcpy_sglist() {CVE-2026-31431} - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption {CVE-2026-31431} - crypto: authencesn - Fix src offset when decrypting in-place {CVE-2026-31431} - crypto: aead - prevent using AEADs without setting key - crypto: algif_aead - use memcpy_sglist() instead of null skcipher {CVE-2026-31431} - crypto: algif_aead - Revert to operating out-of-place {CVE-2026-31431} - crypto: algif_aead - snapshot IV for async AEAD requests {CVE-2026-31431} - crypto: authenc - use memcpy_sglist() instead of null skcipher {CVE-2026-31431} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl {CVE-2026-31431} - crypto: algif_aead - Fix minimum RX size check for decryption {CVE-2026-31431} * CVE-2022-49267 - mmc: core: Do not export MMC_NAME= and MODALIAS=mmc:block for SDIO cards {CVE-2022-49267} - mmc: core: Export device/vendor ids from Common CIS for SDIO cards {CVE-2022-49267} - mmc: sdio: Extend sdio_config_attr macro and use it also for modalias {CVE-2022-49267} - mmc: sdio: Parse CISTPL_VERS_1 major and minor revision numbers {CVE-2022-49267} * CVE-2026-23089 - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089} * CVE-2026-23074 - net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074} * CVE-2025-39853 - i40e: Fix potential invalid access when MAC list is empty {CVE-2025-39853} * CVE-2025-38677 - f2fs: fix to avoid out-of-boundary access in dnode page {CVE-2025-38677} * CVE-2025-38652 - f2fs: fix to avoid out-of-boundary access in devs.path {CVE-2025-38652} * CVE-2025-38415 - Squashfs: check return result of sb_min_blocksize {CVE-2025-38415} * CVE-2025-38226 - media: vivid: Change the siize of the composing {CVE-2025-38226} * CVE-2025-38211 - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211} * CVE-2023-53075 - ftrace: Fix invalid address access in lookup_rec() when index >= FTRACE_MAX_RECORDS {CVE-2023-53075} * CVE-2023-53322 - scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322} * CVE-2025-71162 - dmaengine: tegra-adma: Fix use-after-free {CVE-2025-71162} * Miscellaneous upstream changes - tuxcare: update version Important TuxCare License Agreement CVE-2026-23089 CVE-2023-53322 CVE-2025-38415 CVE-2022-49267 CVE-2025-39853 CVE-2025-71162 CVE-2026-23074 CVE-2025-38226 CVE-2025-38652 CVE-2025-38211 CVE-2023-53075 CVE-2025-38677 CVE-2026-31431 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-256.267 ] * Miscellaneous upstream changes - xfrm: esp: avoid in-place decrypt on shared skb frags Important TuxCare License Agreement CVE-2026-43284 Ubuntu 16.04 LTS [ Ubuntu: 4.15.0-256.267 ] * CVE-2026-46333 - ptrace: require CAP_SYS_PTRACE when task has no mm {CVE-2026-46333} * CVE-2026-46300 - net: skbuff: propagate shared-frag marker through copy/coalesce/gro/shift paths {CVE-2026-46300} * CVE-2026-43284 - xfrm: esp: avoid in-place decrypt on shared skb frags {CVE-2026-43284} * Packaging - Adopt +tuxcare.elsN versioning scheme * Bump ABI 4.15.0-257 Important TuxCare License Agreement CVE-2026-46333 CVE-2026-46300 Ubuntu 16.04 LTS * CVE-2026-23193 - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() {CVE-2026-23193} * CVE-2025-71093 - e1000: fix OOB in e1000_tbi_should_accept() {CVE-2025-71093} * CVE-2025-71116 - libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116} * CVE-2025-71136 - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() {CVE-2025-71136} * CVE-2026-23073 - wifi: rsi: Fix memory corruption due to not set vif driver data size {CVE-2026-23073} * CVE-2026-23076 - ALSA: ctxfi: Fix potential OOB access in audio mixer handling {CVE-2026-23076} * CVE-2026-23216 - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216} * Miscellaneous upstream changes - UBUNTU: restore debian/changelog as regular file (cranky-faithful packaging) - smb: client: reject userspace cifs.spnego descriptions * Bump ABI 4.15.0-258 Important TuxCare License Agreement CVE-2025-38180 CVE-2019-10126 CVE-2026-23073 CVE-2022-49934 CVE-2026-23216 CVE-2025-71116 CVE-2025-71093 CVE-2026-23060 CVE-2025-71136 CVE-2026-23076 CVE-2018-14625 CVE-2026-23193 Ubuntu 16.04 LTS * CVE-2022-49267 - mmc: core: use sysfs_emit() instead of sprintf() {CVE-2022-49267} - mmc: sdio: Export SDIO revision and info strings to userspace {CVE-2022-49267} * CVE-2026-43040 - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040} * CVE-2026-43027 - netfilter: nf_conntrack_helper: pass helper to expect cleanup {CVE-2026-43027} * CVE-2025-71091 - team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091} * CVE-2025-71075 - scsi: aic94xx: fix use-after-free in device removal path {CVE-2025-71075} * CVE-2025-38565 - perf/core: Exit early on perf_mmap() fail {CVE-2025-38565} * CVE-2025-38401 - mtk-sd: Prevent memory corruption from DMA map failure {CVE-2025-38401} * CVE-2023-53218 - rxrpc: Make it so that a waiting process can be aborted {CVE-2023-53218} * CVE-2025-38230 - jfs: validate AG parameters in dbMount() to prevent crashes {CVE-2025-38230} * CVE-2023-52867 - drm/radeon: possible buffer overflow {CVE-2023-52867} * CVE-2023-53432 - firewire: net: fix use after free in fwnet_finish_incoming_packet() {CVE-2023-53432} * CVE-2025-39891 - wifi: mwifiex: Initialize the chan_stats array to zero {CVE-2025-39891} * CVE-2025-38666 - net: appletalk: Fix use-after-free in AARP proxy probe {CVE-2025-38666} * CVE-2025-39828 - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() {CVE-2025-39828} * CVE-2026-43020 - Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020} * CVE-2026-43011 - net/x25: Fix potential double free of skb {CVE-2026-43011} * CVE-2026-31778 - ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778} * CVE-2026-31748 - comedi: me_daq: Fix potential overrun of firmware buffer {CVE-2026-31748} * CVE-2026-31747 - comedi: me4000: Fix potential overrun of firmware buffer {CVE-2026-31747} * CVE-2026-31720 - usb: gadget: f_uac1_legacy: validate control request size {CVE-2026-31720} * CVE-2026-31696 - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing {CVE-2026-31696} * CVE-2026-31659 - batman-adv: reject oversized global TT response buffers {CVE-2026-31659} * CVE-2026-31629 - nfc: llcp: add missing return after LLCP_CLOSED checks {CVE-2026-31629} * CVE-2026-31626 - staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() {CVE-2026-31626} * CVE-2026-31622 - NFC: digital: Bounds check NFC-A cascade depth in SDD response handler {CVE-2026-31622} * CVE-2026-31602 - ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602} * CVE-2026-31583 - media: em28xx: fix use-after-free in em28xx_v4l2_open() {CVE-2026-31583} * CVE-2026-31581 - ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581} * CVE-2026-31576 - media: hackrf: fix to not free memory after the device is registered in hackrf_probe() {CVE-2026-31576} * CVE-2026-31504 - net: fix fanout UAF in packet_release() via NETDEV_UP race {CVE-2026-31504} * CVE-2026-23388 - Squashfs: check metadata block offset is within range {CVE-2026-23388} * CVE-2026-23372 - nfc: rawsock: cancel tx_work before socket teardown {CVE-2026-23372} * Bump ABI 4.15.0-259 Important TuxCare License Agreement CVE-2026-31778 CVE-2023-53432 CVE-2026-43011 CVE-2026-31626 CVE-2025-71075 CVE-2026-31696 CVE-2026-23388 CVE-2026-31602 CVE-2026-31583 CVE-2026-31622 CVE-2026-31747 CVE-2026-31720 CVE-2026-43020 CVE-2023-52867 CVE-2026-43027 CVE-2023-53218 CVE-2026-23372 CVE-2025-39828 CVE-2026-31748 CVE-2025-38230 CVE-2025-38666 CVE-2025-71091 CVE-2026-31659 CVE-2026-31581 CVE-2026-31576 CVE-2025-38565 CVE-2026-43040 CVE-2025-38401 CVE-2025-39891 CVE-2026-31629 Ubuntu 16.04 LTS * CVE-2026-46113 - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role {CVE-2026-46113} * CVE-2022-50300 - btrfs: fix extent map use-after-free when handling missing device in read_one_chunk {CVE-2022-50300} * CVE-2022-50082 - ext4: fix warning in ext4_iomap_begin as race between bmap and write {CVE-2022-50082} * CVE-2026-43052 - wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052} * CVE-2026-43386 - staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie {CVE-2026-43386} * CVE-2026-23281 - wifi: libertas: fix use-after-free in lbs_free_adapter() {CVE-2026-23281} * CVE-2026-43141 - ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut {CVE-2026-43141} * CVE-2026-23209 - macvlan: fix error recovery in macvlan_common_newlink() {CVE-2026-23209} * CVE-2026-23001 - macvlan: fix possible UAF in macvlan_forward_source() {CVE-2026-23001} * CVE-2026-31532 - can: raw: fix ro->uniq use-after-free in raw_rcv() {CVE-2026-31532} * CVE-2026-31688 - driver core: enforce device_lock for driver_match_device() {CVE-2026-31688} * CVE-2023-53680 - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL {CVE-2023-53680} * CVE-2025-38718 - sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718} * CVE-2025-38102 - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify {CVE-2025-38102} * CVE-2024-42120 - drm/amd/display: Check pipe offset before setting vblank {CVE-2024-42120} * CVE-2022-50093 - iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) {CVE-2022-50093} * CVE-2022-50410 - NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-50410} * CVE-2026-23234 - f2fs: fix to avoid UAF in f2fs_write_end_io() {CVE-2026-23234} * CVE-2026-43203 - atm: fore200e: fix use-after-free in tasklets during device removal {CVE-2026-43203} * CVE-2026-43373 - net: ncsi: fix skb leak in error paths {CVE-2026-43373} * CVE-2026-43450 - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450} * CVE-2026-31399 - nvdimm/bus: Fix potential use after free in asynchronous initialization {CVE-2026-31399} * CVE-2026-43449 - nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set {CVE-2026-43449} * CVE-2026-43427 - usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427} * CVE-2026-31452 - ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452} * CVE-2026-23397 - nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397} * CVE-2025-71082 - Bluetooth: btusb: revert use of devm_kzalloc in btusb {CVE-2025-71082} * CVE-2025-39955 - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-39955} * CVE-2022-49770 - ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770} * CVE-2026-43283 - net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle {CVE-2026-43283} * Bump ABI 4.15.0-261 Important TuxCare License Agreement CVE-2026-31452 CVE-2026-43427 CVE-2025-71082 CVE-2026-43283 CVE-2025-39955 CVE-2026-23397 CVE-2023-53680 CVE-2026-43449 CVE-2026-31532 CVE-2025-38718 CVE-2022-50300 CVE-2026-31399 CVE-2026-43450 CVE-2022-50082 CVE-2022-50410 CVE-2026-23001 CVE-2022-50093 CVE-2026-23234 CVE-2026-43052 CVE-2026-43386 CVE-2025-38102 CVE-2022-49770 CVE-2026-31688 CVE-2026-43373 CVE-2026-23281 CVE-2024-42120 CVE-2026-23209 CVE-2026-43203 CVE-2026-43141 Ubuntu 16.04 LTS * CVE-2026-53166 - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock {CVE-2026-53166} * CVE-2026-43499 - rtmutex: Use waiter::task instead of current in remove_waiter() {CVE-2026-43499} * Miscellaneous upstream changes - Revert "ext4: fix warning in ext4_iomap_begin as race between bmap and write {CVE-2022-50082}" * Bump ABI 4.15.0-262 Important TuxCare License Agreement CVE-2026-43499 Ubuntu 16.04 LTS * SECURITY UPDATE: out-of-bounds read in FTP gateway listing parser - debian/patches/CVE-2026-47729.patch: guard against a NUL byte before strchr() in ftpListParseParts, preventing an out-of-bounds read that could disclose memory from unrelated transactions - CVE-2026-47729 * SECURITY UPDATE: heap buffer overflow in cache digest handling - debian/patches/CVE-2026-50012.patch: bound the mask copy in peerDigestSwapInMask so an on-the-wire payload larger than the advertised mask size cannot overflow the heap buffer - CVE-2026-50012 Moderate TuxCare License Agreement CVE-2026-47729 CVE-2026-50012 Ubuntu 16.04 LTS * SECURITY UPDATE: quadratic-complexity denial of service in HTMLParser incremental parsing - debian/patches/CVE-2026-15308.patch: accumulate feed() data in a list in Lib/HTMLParser.py so an unterminated markup construct fed across many feed() calls is no longer rescanned and reconcatenated on every call; adds a regression test in Lib/test/test_htmlparser.py. - CVE-2026-15308 Important TuxCare License Agreement CVE-2026-15308 Ubuntu 16.04 LTS * SECURITY UPDATE: arbitrary Ex command execution during C omni-completion: the C omni-completion script interpolated the typeref/typename tag field of a tags entry, without escaping, into a :vimgrep pattern run through :execute. Because :vimgrep honours the bar as a command separator, a crafted tag field could close the search pattern and append an arbitrary Ex command, which ran when C omni-completion was invoked on a hostile .c file whose project tags file carried such an entry. - debian/patches/CVE-2026-59858.patch: escape the type field with escape(typename, '/\') before building the :vimgrep pattern in s:StructMembers(), in runtime/autoload/ccomplete.vim; matches upstream patch 9.2.0735. - CVE-2026-59858 Important TuxCare License Agreement CVE-2026-59858 Ubuntu 16.04 LTS * SECURITY UPDATE: pre-authentication denial of service via GSSAPI - debian/patches/CVE-2026-60000.patch: discard GSSAPI error tokens in auth2-gss.c instead of feeding them into the GSSAPI stack, and count the failed attempt so GSSAPI auth is subject to MaxAuthTries - CVE-2026-60000 Important TuxCare License Agreement CVE-2026-60000 /etc/els-release Ubuntu 16\.04 LTS \(Final, ELS by CloudLinux\) 1 expat libexpat1 libexpat1-dev bind9 bind9-doc bind9-host bind9utils dnsutils host libbind-dev libbind-export-dev libbind9-140 libdns-export162 libdns162 libirs-export141 libirs141 libisc-export160 libisc160 libisccc-export140 libisccc140 libisccfg-export140 libisccfg140 liblwres141 lwresd vim vim-athena vim-athena-py2 vim-common vim-doc vim-gnome vim-gnome-py2 vim-gtk vim-gtk-py2 vim-gtk3 vim-gtk3-py2 vim-gui-common vim-nox vim-nox-py2 vim-runtime vim-tiny libecpg-compat3 libecpg-dev libecpg6 libpgtypes3 libpq-dev libpq5 postgresql-9.5 postgresql-client-9.5 postgresql-contrib-9.5 postgresql-doc-9.5 postgresql-plperl-9.5 postgresql-plpython-9.5 postgresql-plpython3-9.5 postgresql-pltcl-9.5 postgresql-server-dev-9.5 lemon libsqlite3-0 libsqlite3-dev libsqlite3-tcl sqlite3 sqlite3-doc squid squid-cgi squid-common squid-purge squid3 squidclient vim vim-athena vim-athena-py2 vim-common vim-doc vim-gnome vim-gnome-py2 vim-gtk vim-gtk-py2 vim-gtk3 vim-gtk3-py2 vim-gui-common vim-nox vim-nox-py2 vim-runtime vim-tiny sosreport binutils binutils-aarch64-linux-gnu binutils-alpha-linux-gnu binutils-arm-linux-gnueabi binutils-arm-linux-gnueabihf binutils-dev binutils-doc binutils-hppa-linux-gnu binutils-hppa64-linux-gnu binutils-m68k-linux-gnu binutils-mips-linux-gnu binutils-mips64-linux-gnuabi64 binutils-mips64el-linux-gnuabi64 binutils-mipsel-linux-gnu binutils-multiarch binutils-multiarch-dev binutils-powerpc-linux-gnu binutils-powerpc-linux-gnuspe binutils-powerpc64-linux-gnu binutils-powerpc64le-linux-gnu binutils-s390x-linux-gnu binutils-sh4-linux-gnu binutils-source binutils-sparc64-linux-gnu libecpg-compat3 libecpg-dev libecpg6 libpgtypes3 libpq-dev libpq5 postgresql-9.5 postgresql-client-9.5 postgresql-contrib-9.5 postgresql-doc-9.5 postgresql-plperl-9.5 postgresql-plpython-9.5 postgresql-plpython3-9.5 postgresql-pltcl-9.5 postgresql-server-dev-9.5 expat libexpat1 libexpat1-dev libxml2 libxml2-dev libxml2-doc libxml2-utils python-libxml2 curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-doc libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-openssl-dev mongodb mongodb-clients mongodb-server libperl-dev libperl5.22 perl perl-base perl-debug perl-doc perl-modules-5.22 lemon libsqlite3-0 libsqlite3-dev libsqlite3-tcl sqlite3 sqlite3-doc nginx nginx-common nginx-core nginx-doc nginx-extras nginx-full nginx-light libmysqlclient-dev libmysqlclient20 libmysqld-dev mysql-client mysql-client-5.7 mysql-client-core-5.7 mysql-common mysql-server mysql-server-5.7 mysql-server-core-5.7 mysql-source-5.7 mysql-testsuite mysql-testsuite-5.7 idle-python2.7 libpython2.7 libpython2.7-dev libpython2.7-minimal libpython2.7-stdlib libpython2.7-testsuite python2.7 python2.7-dev python2.7-doc python2.7-examples python2.7-minimal dbus dbus-1-doc dbus-tests dbus-user-session dbus-x11 libdbus-1-3 libdbus-1-dev idle-python3.5 libpython3.5 libpython3.5-dev libpython3.5-minimal libpython3.5-stdlib libpython3.5-testsuite python3.5 python3.5-dev python3.5-doc python3.5-examples python3.5-minimal python3.5-venv isc-dhcp-client isc-dhcp-client-ddns isc-dhcp-common isc-dhcp-dev isc-dhcp-relay isc-dhcp-server isc-dhcp-server-ldap xterm openjdk-8-demo openjdk-8-doc openjdk-8-jdk openjdk-8-jdk-headless openjdk-8-jre openjdk-8-jre-headless openjdk-8-jre-jamvm openjdk-8-jre-zero openjdk-8-source vim vim-athena vim-athena-py2 vim-common vim-doc vim-gnome vim-gnome-py2 vim-gtk vim-gtk-py2 vim-gtk3 vim-gtk3-py2 vim-gui-common vim-nox vim-nox-py2 vim-runtime vim-tiny login passwd uidmap libxml2 libxml2-dev libxml2-doc libxml2-utils python-libxml2 imagemagick imagemagick-6.q16 imagemagick-common imagemagick-doc libimage-magick-perl libimage-magick-q16-perl libmagick++-6-headers libmagick++-6.q16-5v5 libmagick++-6.q16-dev libmagick++-dev libmagickcore-6-arch-config libmagickcore-6-headers libmagickcore-6.q16-2 libmagickcore-6.q16-2-extra libmagickcore-6.q16-dev libmagickcore-dev libmagickwand-6-headers libmagickwand-6.q16-2 libmagickwand-6.q16-dev libmagickwand-dev perlmagick bind9 bind9-doc bind9-host bind9utils dnsutils host libbind-dev libbind-export-dev libbind9-140 libdns-export162 libdns162 libirs-export141 libirs141 libisc-export160 libisc160 libisccc-export140 libisccc140 libisccfg-export140 libisccfg140 liblwres141 lwresd binutils binutils-aarch64-linux-gnu binutils-alpha-linux-gnu binutils-arm-linux-gnueabi binutils-arm-linux-gnueabihf binutils-dev binutils-doc binutils-hppa-linux-gnu binutils-hppa64-linux-gnu binutils-m68k-linux-gnu binutils-mips-linux-gnu binutils-mips64-linux-gnuabi64 binutils-mips64el-linux-gnuabi64 binutils-mipsel-linux-gnu binutils-multiarch binutils-multiarch-dev binutils-powerpc-linux-gnu binutils-powerpc-linux-gnuspe binutils-powerpc64-linux-gnu binutils-powerpc64le-linux-gnu binutils-s390x-linux-gnu binutils-sh4-linux-gnu binutils-source binutils-sparc64-linux-gnu libservlet3.0-java libservlet3.0-java-doc libtomcat7-java tomcat7 tomcat7-admin tomcat7-common tomcat7-docs tomcat7-examples tomcat7-user vim vim-athena vim-athena-py2 vim-common vim-doc vim-gnome vim-gnome-py2 vim-gtk vim-gtk-py2 vim-gtk3 vim-gtk3-py2 vim-gui-common vim-nox vim-nox-py2 vim-runtime vim-tiny libecpg-compat3 libecpg-dev libecpg6 libpgtypes3 libpq-dev libpq5 postgresql-9.5 postgresql-client-9.5 postgresql-contrib-9.5 postgresql-doc-9.5 postgresql-plperl-9.5 postgresql-plpython-9.5 postgresql-plpython3-9.5 postgresql-pltcl-9.5 postgresql-server-dev-9.5 vim vim-athena vim-athena-py2 vim-common vim-doc vim-gnome vim-gnome-py2 vim-gtk vim-gtk-py2 vim-gtk3 vim-gtk3-py2 vim-gui-common vim-nox vim-nox-py2 vim-runtime vim-tiny vim vim-athena vim-athena-py2 vim-common vim-doc vim-gnome vim-gnome-py2 vim-gtk vim-gtk-py2 vim-gtk3 vim-gtk3-py2 vim-gui-common vim-nox vim-nox-py2 vim-runtime vim-tiny glibc-doc glibc-source libc-bin libc-dev-bin libc6 libc6-dev libc6-dev-i386 libc6-dev-x32 libc6-i386 libc6-pic libc6-x32 locales locales-all multiarch-support nscd bsdutils libblkid-dev libblkid1 libfdisk-dev libfdisk1 libmount-dev libmount1 libsmartcols-dev libsmartcols1 libuuid1 mount util-linux util-linux-locales uuid-dev uuid-runtime ctdb libnss-winbind libpam-winbind libparse-pidl-perl libsmbclient libsmbclient-dev libwbclient-dev libwbclient0 python-samba registry-tools samba samba-common samba-common-bin samba-dev samba-dsdb-modules samba-libs samba-testsuite samba-vfs-modules smbclient winbind krb5-admin-server krb5-doc krb5-gss-samples krb5-k5tls krb5-kdc krb5-kdc-ldap krb5-locales krb5-multidev krb5-otp krb5-pkinit krb5-user libgssapi-krb5-2 libgssrpc4 libk5crypto3 libkadm5clnt-mit9 libkadm5srv-mit9 libkdb5-8 libkrad-dev libkrad0 libkrb5-3 libkrb5-dev libkrb5support0 vim vim-athena vim-athena-py2 vim-common vim-doc vim-gnome vim-gnome-py2 vim-gtk vim-gtk-py2 vim-gtk3 vim-gtk3-py2 vim-gui-common vim-nox vim-nox-py2 vim-runtime vim-tiny libpam-cracklib libpam-doc libpam-modules libpam-modules-bin libpam-runtime libpam0g libpam0g-dev apache2 apache2-bin apache2-data apache2-dev apache2-doc apache2-suexec-custom apache2-suexec-pristine apache2-utils vim vim-athena vim-athena-py2 vim-common vim-doc vim-gnome vim-gnome-py2 vim-gtk vim-gtk-py2 vim-gtk3 vim-gtk3-py2 vim-gui-common vim-nox vim-nox-py2 vim-runtime vim-tiny ctdb libnss-winbind libpam-winbind libparse-pidl-perl libsmbclient libsmbclient-dev libwbclient-dev libwbclient0 python-samba registry-tools samba samba-common samba-common-bin samba-dev samba-dsdb-modules samba-libs samba-testsuite samba-vfs-modules smbclient winbind libmysqlclient-dev libmysqlclient20 libmysqld-dev mysql-client mysql-client-5.7 mysql-client-core-5.7 mysql-common mysql-server mysql-server-5.7 mysql-server-core-5.7 mysql-source-5.7 mysql-testsuite mysql-testsuite-5.7 krb5-admin-server krb5-doc krb5-gss-samples krb5-k5tls krb5-kdc krb5-kdc-ldap krb5-locales krb5-multidev krb5-otp krb5-pkinit krb5-user libgssapi-krb5-2 libgssrpc4 libk5crypto3 libkadm5clnt-mit9 libkadm5srv-mit9 libkdb5-8 libkrad-dev libkrad0 libkrb5-3 libkrb5-dev libkrb5support0 apache2 apache2-bin apache2-data apache2-dev apache2-doc apache2-suexec-custom apache2-suexec-pristine apache2-utils sudo sudo-ldap libssl-dev libssl-doc libssl1.0.0 openssl cpp-5 cpp-5-doc fixincludes g++-5 g++-5-multilib gcc-5 gcc-5-base gcc-5-doc gcc-5-hppa64-linux-gnu gcc-5-locales gcc-5-multilib gcc-5-plugin-dev gcc-5-source gcc-5-test-results gccgo-5 gccgo-5-doc gccgo-5-multilib gcj-5 gcj-5-jdk gcj-5-jre gcj-5-jre-headless gcj-5-jre-lib gcj-5-source gdc-5 gdc-5-multilib gfortran-5 gfortran-5-doc gfortran-5-multilib gnat-5 gnat-5-doc gnat-5-sjlj gobjc++-5 gobjc++-5-multilib gobjc-5 gobjc-5-multilib lib32asan2 lib32atomic1 lib32cilkrts5 lib32gcc-5-dev lib32gfortran-5-dev lib32gfortran3 lib32go7 lib32gomp1 lib32itm1 lib32lsan0 lib32mpx0 lib32objc-5-dev lib32objc4 lib32phobos-5-dev lib32quadmath0 lib32stdc++-5-dev lib32stdc++6 lib32ubsan0 libasan2 libatomic1 libcc1-0 libcilkrts5 libgcc-5-dev libgccjit-5-dev libgccjit-5-doc libgccjit0 libgcj-doc libgcj16 libgcj16-awt libgcj16-dev libgfortran-5-dev libgfortran3 libgnat-5 libgnatprj5 libgnatprj5-dev libgnatvsn5 libgnatvsn5-dev libgo7 libgomp1 libitm1 liblsan0 libmpx0 libobjc-5-dev libobjc4 libphobos-5-dev libquadmath0 libstdc++-5-dev libstdc++-5-doc libstdc++-5-pic libstdc++6 libtsan0 libubsan0 libx32asan2 libx32atomic1 libx32cilkrts5 libx32gcc-5-dev libx32gfortran-5-dev libx32gfortran3 libx32go7 libx32gomp1 libx32itm1 libx32lsan0 libx32objc-5-dev libx32objc4 libx32phobos-5-dev libx32quadmath0 libx32stdc++-5-dev libx32stdc++6 libx32ubsan0 git git-all git-arch git-core git-cvs git-daemon-run git-daemon-sysvinit git-doc git-el git-email git-gui git-man git-mediawiki git-svn gitk gitweb libnss3 libnss3-1d libnss3-dev libnss3-nssdb libnss3-tools libapache2-mod-php7.0 libphp7.0-embed php7.0 php7.0-bcmath php7.0-bz2 php7.0-cgi php7.0-cli php7.0-common php7.0-curl php7.0-dba php7.0-dev php7.0-enchant php7.0-fpm php7.0-gd php7.0-gmp php7.0-imap php7.0-interbase php7.0-intl php7.0-json php7.0-ldap php7.0-mbstring php7.0-mcrypt php7.0-mysql php7.0-odbc php7.0-opcache php7.0-pgsql php7.0-phpdbg php7.0-pspell php7.0-readline php7.0-recode php7.0-snmp php7.0-soap php7.0-sqlite3 php7.0-sybase php7.0-tidy php7.0-xml php7.0-xmlrpc php7.0-xsl php7.0-zip tar tar-scripts idle-python2.7 libpython2.7 libpython2.7-dev libpython2.7-minimal libpython2.7-stdlib libpython2.7-testsuite python2.7 python2.7-dev python2.7-doc python2.7-examples python2.7-minimal idle-python3.5 libpython3.5 libpython3.5-dev libpython3.5-minimal libpython3.5-stdlib libpython3.5-testsuite python3.5 python3.5-dev python3.5-doc python3.5-examples python3.5-minimal python3.5-venv vim vim-athena vim-athena-py2 vim-common vim-doc vim-gnome vim-gnome-py2 vim-gtk vim-gtk-py2 vim-gtk3 vim-gtk3-py2 vim-gui-common vim-nox vim-nox-py2 vim-runtime vim-tiny curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-doc libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-openssl-dev intel-microcode ctdb libnss-winbind libpam-winbind libparse-pidl-perl libsmbclient libsmbclient-dev libwbclient-dev libwbclient0 python-samba registry-tools samba samba-common samba-common-bin samba-dev samba-dsdb-modules samba-libs samba-testsuite samba-vfs-modules smbclient winbind libnss-myhostname libnss-mymachines libnss-resolve libpam-systemd libsystemd-dev libsystemd0 libudev-dev libudev1 systemd systemd-container systemd-coredump systemd-journal-remote systemd-sysv udev vim vim-athena vim-athena-py2 vim-common vim-doc vim-gnome vim-gnome-py2 vim-gtk vim-gtk-py2 vim-gtk3 vim-gtk3-py2 vim-gui-common vim-nox vim-nox-py2 vim-runtime vim-tiny apache2 apache2-bin apache2-data apache2-dev apache2-doc apache2-suexec-custom apache2-suexec-pristine apache2-utils libapache2-mod-php7.0 libphp7.0-embed php7.0 php7.0-bcmath php7.0-bz2 php7.0-cgi php7.0-cli php7.0-common php7.0-curl php7.0-dba php7.0-dev php7.0-enchant php7.0-fpm php7.0-gd php7.0-gmp php7.0-imap php7.0-interbase php7.0-intl php7.0-json php7.0-ldap php7.0-mbstring php7.0-mcrypt php7.0-mysql php7.0-odbc php7.0-opcache php7.0-pgsql php7.0-phpdbg php7.0-pspell php7.0-readline php7.0-recode php7.0-snmp php7.0-soap php7.0-sqlite3 php7.0-sybase php7.0-tidy php7.0-xml php7.0-xmlrpc php7.0-xsl php7.0-zip vim vim-athena vim-athena-py2 vim-common vim-doc vim-gnome vim-gnome-py2 vim-gtk vim-gtk-py2 vim-gtk3 vim-gtk3-py2 vim-gui-common vim-nox vim-nox-py2 vim-runtime vim-tiny git git-all git-arch git-core git-cvs git-daemon-run git-daemon-sysvinit git-doc git-el git-email git-gui git-man git-mediawiki git-svn gitk gitweb glusterfs-client glusterfs-common glusterfs-server libnss3 libnss3-1d libnss3-dev libnss3-nssdb libnss3-tools curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-doc libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-openssl-dev imagemagick imagemagick-6.q16 imagemagick-common imagemagick-doc libimage-magick-perl libimage-magick-q16-perl libmagick++-6-headers libmagick++-6.q16-5v5 libmagick++-6.q16-dev libmagick++-dev libmagickcore-6-arch-config libmagickcore-6-headers libmagickcore-6.q16-2 libmagickcore-6.q16-2-extra libmagickcore-6.q16-dev libmagickcore-dev libmagickwand-6-headers libmagickwand-6.q16-2 libmagickwand-6.q16-dev libmagickwand-dev perlmagick libxml2 libxml2-dev libxml2-doc libxml2-utils python-libxml2 libssl-dev libssl-doc libssl1.0.0 openssl git git-all git-arch git-core git-cvs git-daemon-run git-daemon-sysvinit git-doc git-el git-email git-gui git-man git-mediawiki git-svn gitk gitweb libmysqlclient-dev libmysqlclient20 libmysqld-dev mysql-client mysql-client-5.7 mysql-client-core-5.7 mysql-common mysql-server mysql-server-5.7 mysql-server-core-5.7 mysql-source-5.7 mysql-testsuite mysql-testsuite-5.7 isag sysstat isag sysstat vim vim-athena vim-athena-py2 vim-common vim-doc vim-gnome vim-gnome-py2 vim-gtk vim-gtk-py2 vim-gtk3 vim-gtk3-py2 vim-gui-common vim-nox vim-nox-py2 vim-runtime vim-tiny vim vim-athena vim-athena-py2 vim-common vim-doc vim-gnome vim-gnome-py2 vim-gtk vim-gtk-py2 vim-gtk3 vim-gtk3-py2 vim-gui-common vim-nox vim-nox-py2 vim-runtime vim-tiny libperl-dev libperl5.22 perl perl-base perl-debug perl-doc perl-modules-5.22 libssl-dev libssl-doc libssl1.0.0 openssl gnupg gnupg-curl gpgv binutils binutils-aarch64-linux-gnu binutils-alpha-linux-gnu binutils-arm-linux-gnueabi binutils-arm-linux-gnueabihf binutils-dev binutils-doc binutils-hppa-linux-gnu binutils-hppa64-linux-gnu binutils-m68k-linux-gnu binutils-mips-linux-gnu binutils-mips64-linux-gnuabi64 binutils-mips64el-linux-gnuabi64 binutils-mipsel-linux-gnu binutils-multiarch binutils-multiarch-dev binutils-powerpc-linux-gnu binutils-powerpc-linux-gnuspe binutils-powerpc64-linux-gnu binutils-powerpc64le-linux-gnu binutils-s390x-linux-gnu binutils-sh4-linux-gnu binutils-source binutils-sparc64-linux-gnu curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-doc libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-openssl-dev exim4 exim4-base exim4-config exim4-daemon-heavy exim4-daemon-light exim4-dev eximon4 libcap-dev libcap2 libcap2-bin libpam-cap apache2 apache2-bin apache2-data apache2-dev apache2-doc apache2-suexec-custom apache2-suexec-pristine apache2-utils cups cups-bsd cups-client cups-common cups-core-drivers cups-daemon cups-ipp-utils cups-ppdc cups-server-common libcups2 libcups2-dev libcupscgi1 libcupscgi1-dev libcupsimage2 libcupsimage2-dev libcupsmime1 libcupsmime1-dev libcupsppdc1 libcupsppdc1-dev openjdk-8-demo openjdk-8-doc openjdk-8-jdk openjdk-8-jdk-headless openjdk-8-jre openjdk-8-jre-headless openjdk-8-jre-jamvm openjdk-8-jre-zero openjdk-8-source imagemagick imagemagick-6.q16 imagemagick-common imagemagick-doc libimage-magick-perl libimage-magick-q16-perl libmagick++-6-headers libmagick++-6.q16-5v5 libmagick++-6.q16-dev libmagick++-dev libmagickcore-6-arch-config libmagickcore-6-headers libmagickcore-6.q16-2 libmagickcore-6.q16-2-extra libmagickcore-6.q16-dev libmagickcore-dev libmagickwand-6-headers libmagickwand-6.q16-2 libmagickwand-6.q16-dev libmagickwand-dev perlmagick sudo sudo-ldap ldap-utils libldap-2.4-2 libldap2-dev slapd slapd-smbk5pwd libperl-dev libperl5.22 perl perl-base perl-debug perl-doc perl-modules-5.22 idle-python2.7 libpython2.7 libpython2.7-dev libpython2.7-minimal libpython2.7-stdlib libpython2.7-testsuite python2.7 python2.7-dev python2.7-doc python2.7-examples python2.7-minimal idle-python3.5 libpython3.5 libpython3.5-dev libpython3.5-minimal libpython3.5-stdlib libpython3.5-testsuite python3.5 python3.5-dev python3.5-doc python3.5-examples python3.5-minimal python3.5-venv cups cups-bsd cups-client cups-common cups-core-drivers cups-daemon cups-ipp-utils cups-ppdc cups-server-common libcups2 libcups2-dev libcupscgi1 libcupscgi1-dev libcupsimage2 libcupsimage2-dev libcupsmime1 libcupsmime1-dev libcupsppdc1 libcupsppdc1-dev bind9 bind9-doc bind9-host bind9utils dnsutils host libbind-dev libbind-export-dev libbind9-140 libdns-export162 libdns162 libirs-export141 libirs141 libisc-export160 libisc160 libisccc-export140 libisccc140 libisccfg-export140 libisccfg140 liblwres141 lwresd ctdb libnss-winbind libpam-winbind libparse-pidl-perl libsmbclient libsmbclient-dev libwbclient-dev libwbclient0 python-samba registry-tools samba samba-common samba-common-bin samba-dev samba-dsdb-modules samba-libs samba-testsuite samba-vfs-modules smbclient winbind openssh-client openssh-client-ssh1 openssh-server openssh-sftp-server ssh ssh-askpass-gnome ssh-krb5 amd64-microcode libodbc1 odbcinst odbcinst1debian2 unixodbc unixodbc-dev amanda-client amanda-common amanda-server libapache2-mod-php7.0 libphp7.0-embed php7.0 php7.0-bcmath php7.0-bz2 php7.0-cgi php7.0-cli php7.0-common php7.0-curl php7.0-dba php7.0-dev php7.0-enchant php7.0-fpm php7.0-gd php7.0-gmp php7.0-imap php7.0-interbase php7.0-intl php7.0-json php7.0-ldap php7.0-mbstring php7.0-mcrypt php7.0-mysql php7.0-odbc php7.0-opcache php7.0-pgsql php7.0-phpdbg php7.0-pspell php7.0-readline php7.0-recode php7.0-snmp php7.0-soap php7.0-sqlite3 php7.0-sybase php7.0-tidy php7.0-xml php7.0-xmlrpc php7.0-xsl php7.0-zip intel-microcode libssl-dev libssl-doc libssl1.0.0 openssl busybox busybox-initramfs busybox-static busybox-syslogd udhcpc udhcpd amd64-microcode binutils binutils-aarch64-linux-gnu binutils-alpha-linux-gnu binutils-arm-linux-gnueabi binutils-arm-linux-gnueabihf binutils-dev binutils-doc binutils-hppa-linux-gnu binutils-hppa64-linux-gnu binutils-m68k-linux-gnu binutils-mips-linux-gnu binutils-mips64-linux-gnuabi64 binutils-mips64el-linux-gnuabi64 binutils-mipsel-linux-gnu binutils-multiarch binutils-multiarch-dev binutils-powerpc-linux-gnu binutils-powerpc-linux-gnuspe binutils-powerpc64-linux-gnu binutils-powerpc64le-linux-gnu binutils-s390x-linux-gnu binutils-sh4-linux-gnu binutils-source binutils-sparc64-linux-gnu openjdk-8-demo openjdk-8-doc openjdk-8-jdk openjdk-8-jdk-headless openjdk-8-jre openjdk-8-jre-headless openjdk-8-jre-jamvm openjdk-8-jre-zero openjdk-8-source idle-python2.7 libpython2.7 libpython2.7-dev libpython2.7-minimal libpython2.7-stdlib libpython2.7-testsuite python2.7 python2.7-dev python2.7-doc python2.7-examples python2.7-minimal idle-python3.5 libpython3.5 libpython3.5-dev libpython3.5-minimal libpython3.5-stdlib libpython3.5-testsuite python3.5 python3.5-dev python3.5-doc python3.5-examples python3.5-minimal python3.5-venv vim vim-athena vim-athena-py2 vim-common vim-doc vim-gnome vim-gnome-py2 vim-gtk vim-gtk-py2 vim-gtk3 vim-gtk3-py2 vim-gui-common vim-nox vim-nox-py2 vim-runtime vim-tiny libecpg-compat3 libecpg-dev libecpg6 libpgtypes3 libpq-dev libpq5 postgresql-9.5 postgresql-client-9.5 postgresql-contrib-9.5 postgresql-doc-9.5 postgresql-plperl-9.5 postgresql-plpython-9.5 postgresql-plpython3-9.5 postgresql-pltcl-9.5 postgresql-server-dev-9.5 vim vim-athena vim-athena-py2 vim-common vim-doc vim-gnome vim-gnome-py2 vim-gtk vim-gtk-py2 vim-gtk3 vim-gtk3-py2 vim-gui-common vim-nox vim-nox-py2 vim-runtime vim-tiny binutils binutils-aarch64-linux-gnu binutils-alpha-linux-gnu binutils-arm-linux-gnueabi binutils-arm-linux-gnueabihf binutils-dev binutils-doc binutils-hppa-linux-gnu binutils-hppa64-linux-gnu binutils-m68k-linux-gnu binutils-mips-linux-gnu binutils-mips64-linux-gnuabi64 binutils-mips64el-linux-gnuabi64 binutils-mipsel-linux-gnu binutils-multiarch binutils-multiarch-dev binutils-powerpc-linux-gnu binutils-powerpc-linux-gnuspe binutils-powerpc64-linux-gnu binutils-powerpc64le-linux-gnu binutils-s390x-linux-gnu binutils-sh4-linux-gnu binutils-source binutils-sparc64-linux-gnu libssh2-1 libssh2-1-dev binutils binutils-aarch64-linux-gnu binutils-alpha-linux-gnu binutils-arm-linux-gnueabi binutils-arm-linux-gnueabihf binutils-dev binutils-doc binutils-hppa-linux-gnu binutils-hppa64-linux-gnu binutils-m68k-linux-gnu binutils-mips-linux-gnu binutils-mips64-linux-gnuabi64 binutils-mips64el-linux-gnuabi64 binutils-mipsel-linux-gnu binutils-multiarch binutils-multiarch-dev binutils-powerpc-linux-gnu binutils-powerpc-linux-gnuspe binutils-powerpc64-linux-gnu binutils-powerpc64le-linux-gnu binutils-s390x-linux-gnu binutils-sh4-linux-gnu binutils-source binutils-sparc64-linux-gnu imagemagick imagemagick-6.q16 imagemagick-common imagemagick-doc libimage-magick-perl libimage-magick-q16-perl libmagick++-6-headers libmagick++-6.q16-5v5 libmagick++-6.q16-dev libmagick++-dev libmagickcore-6-arch-config libmagickcore-6-headers libmagickcore-6.q16-2 libmagickcore-6.q16-2-extra libmagickcore-6.q16-dev libmagickcore-dev libmagickwand-6-headers libmagickwand-6.q16-2 libmagickwand-6.q16-dev libmagickwand-dev perlmagick memcached libwebp-dev libwebp5 libwebpdemux1 libwebpmux1 webp idle-python3.5 libpython3.5 libpython3.5-dev libpython3.5-minimal libpython3.5-stdlib libpython3.5-testsuite python3.5 python3.5-dev python3.5-doc python3.5-examples python3.5-minimal python3.5-venv bind9 bind9-doc bind9-host bind9utils dnsutils host libbind-dev libbind-export-dev libbind9-140 libdns-export162 libdns162 libirs-export141 libirs141 libisc-export160 libisc160 libisccc-export140 libisccc140 libisccfg-export140 libisccfg140 liblwres141 lwresd curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-doc libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-openssl-dev exim4 exim4-base exim4-config exim4-daemon-heavy exim4-daemon-light exim4-dev eximon4 idle-python2.7 libpython2.7 libpython2.7-dev libpython2.7-minimal libpython2.7-stdlib libpython2.7-testsuite python2.7 python2.7-dev python2.7-doc python2.7-examples python2.7-minimal idle-python3.5 libpython3.5 libpython3.5-dev libpython3.5-minimal libpython3.5-stdlib libpython3.5-testsuite python3.5 python3.5-dev python3.5-doc python3.5-examples python3.5-minimal python3.5-venv cups cups-bsd cups-client cups-common cups-core-drivers cups-daemon cups-ipp-utils cups-ppdc cups-server-common libcups2 libcups2-dev libcupscgi1 libcupscgi1-dev libcupsimage2 libcupsimage2-dev libcupsmime1 libcupsmime1-dev libcupsppdc1 libcupsppdc1-dev libglib2.0-0 libglib2.0-0-refdbg libglib2.0-bin libglib2.0-data libglib2.0-dev libglib2.0-doc libglib2.0-tests nginx nginx-common nginx-core nginx-doc nginx-extras nginx-full nginx-light quagga quagga-doc lib32z1 lib32z1-dev libx32z1 libx32z1-dev zlib1g zlib1g-dev dbus dbus-1-doc dbus-tests dbus-user-session dbus-x11 libdbus-1-3 libdbus-1-dev vim vim-athena vim-athena-py2 vim-common vim-doc vim-gnome vim-gnome-py2 vim-gtk vim-gtk-py2 vim-gtk3 vim-gtk3-py2 vim-gui-common vim-nox vim-nox-py2 vim-runtime vim-tiny apache2 apache2-bin apache2-data apache2-dev apache2-doc apache2-suexec-custom apache2-suexec-pristine apache2-utils binutils binutils-aarch64-linux-gnu binutils-alpha-linux-gnu binutils-arm-linux-gnueabi binutils-arm-linux-gnueabihf binutils-dev binutils-doc binutils-hppa-linux-gnu binutils-hppa64-linux-gnu binutils-m68k-linux-gnu binutils-mips-linux-gnu binutils-mips64-linux-gnuabi64 binutils-mips64el-linux-gnuabi64 binutils-mipsel-linux-gnu binutils-multiarch binutils-multiarch-dev binutils-powerpc-linux-gnu binutils-powerpc-linux-gnuspe binutils-powerpc64-linux-gnu binutils-powerpc64le-linux-gnu binutils-s390x-linux-gnu binutils-sh4-linux-gnu binutils-source binutils-sparc64-linux-gnu binutils binutils-aarch64-linux-gnu binutils-alpha-linux-gnu binutils-arm-linux-gnueabi binutils-arm-linux-gnueabihf binutils-dev binutils-doc binutils-hppa-linux-gnu binutils-hppa64-linux-gnu binutils-m68k-linux-gnu binutils-mips-linux-gnu binutils-mips64-linux-gnuabi64 binutils-mips64el-linux-gnuabi64 binutils-mipsel-linux-gnu binutils-multiarch binutils-multiarch-dev binutils-powerpc-linux-gnu binutils-powerpc-linux-gnuspe binutils-powerpc64-linux-gnu binutils-powerpc64le-linux-gnu binutils-s390x-linux-gnu binutils-sh4-linux-gnu binutils-source binutils-sparc64-linux-gnu vim vim-athena vim-athena-py2 vim-common vim-doc vim-gnome vim-gnome-py2 vim-gtk vim-gtk-py2 vim-gtk3 vim-gtk3-py2 vim-gui-common vim-nox vim-nox-py2 vim-runtime vim-tiny cups cups-bsd cups-client cups-common cups-core-drivers cups-daemon cups-ipp-utils cups-ppdc cups-server-common libcups2 libcups2-dev libcupscgi1 libcupscgi1-dev libcupsimage2 libcupsimage2-dev libcupsmime1 libcupsmime1-dev libcupsppdc1 libcupsppdc1-dev libapache2-mod-php7.0 libphp7.0-embed php7.0 php7.0-bcmath php7.0-bz2 php7.0-cgi php7.0-cli php7.0-common php7.0-curl php7.0-dba php7.0-dev php7.0-enchant php7.0-fpm php7.0-gd php7.0-gmp php7.0-imap php7.0-interbase php7.0-intl php7.0-json php7.0-ldap php7.0-mbstring php7.0-mcrypt php7.0-mysql php7.0-odbc php7.0-opcache php7.0-pgsql php7.0-phpdbg php7.0-pspell php7.0-readline php7.0-recode php7.0-snmp php7.0-soap php7.0-sqlite3 php7.0-sybase php7.0-tidy php7.0-xml php7.0-xmlrpc php7.0-xsl php7.0-zip exim4 exim4-base exim4-config exim4-daemon-heavy exim4-daemon-light exim4-dev eximon4 krb5-admin-server krb5-doc krb5-gss-samples krb5-k5tls krb5-kdc krb5-kdc-ldap krb5-locales krb5-multidev krb5-otp krb5-pkinit krb5-user libgssapi-krb5-2 libgssrpc4 libk5crypto3 libkadm5clnt-mit9 libkadm5srv-mit9 libkdb5-8 libkrad-dev libkrad0 libkrb5-3 libkrb5-dev libkrb5support0 squid squid-cgi squid-common squid-purge squid3 squidclient openjdk-8-demo openjdk-8-doc openjdk-8-jdk openjdk-8-jdk-headless openjdk-8-jre openjdk-8-jre-headless openjdk-8-jre-jamvm openjdk-8-jre-zero openjdk-8-source libssl-dev libssl-doc libssl1.0.0 openssl ctdb libnss-winbind libpam-winbind libparse-pidl-perl libsmbclient libsmbclient-dev libwbclient-dev libwbclient0 python-samba registry-tools samba samba-common samba-common-bin samba-dev samba-dsdb-modules samba-libs samba-testsuite samba-vfs-modules smbclient winbind linux-firmware libksba-dev libksba8 libprocps4 libprocps4-dev procps idle-python2.7 libpython2.7 libpython2.7-dev libpython2.7-minimal libpython2.7-stdlib libpython2.7-testsuite python2.7 python2.7-dev python2.7-doc python2.7-examples python2.7-minimal intel-microcode squid squid-cgi squid-common squid-purge squid3 squidclient idle-python2.7 libpython2.7 libpython2.7-dev libpython2.7-minimal libpython2.7-stdlib libpython2.7-testsuite python2.7 python2.7-dev python2.7-doc python2.7-examples python2.7-minimal libmysqlclient-dev libmysqlclient20 libmysqld-dev mysql-client mysql-client-5.7 mysql-client-core-5.7 mysql-common mysql-server mysql-server-5.7 mysql-server-core-5.7 mysql-source-5.7 mysql-testsuite mysql-testsuite-5.7 haproxy haproxy-doc vim-haproxy squid squid-cgi squid-common squid-purge squid3 squidclient idle-python3.5 libpython3.5 libpython3.5-dev libpython3.5-minimal libpython3.5-stdlib libpython3.5-testsuite python3.5 python3.5-dev python3.5-doc python3.5-examples python3.5-minimal python3.5-venv openssh-client openssh-client-ssh1 openssh-server openssh-sftp-server ssh ssh-askpass-gnome ssh-krb5 openjdk-8-demo openjdk-8-doc openjdk-8-jdk openjdk-8-jdk-headless openjdk-8-jre openjdk-8-jre-headless openjdk-8-jre-jamvm openjdk-8-jre-zero openjdk-8-source vim vim-athena vim-athena-py2 vim-common vim-doc vim-gnome vim-gnome-py2 vim-gtk vim-gtk-py2 vim-gtk3 vim-gtk3-py2 vim-gui-common vim-nox vim-nox-py2 vim-runtime vim-tiny squid squid-cgi squid-common squid-purge squid3 squidclient tar tar-scripts openssh-client openssh-client-ssh1 openssh-server openssh-sftp-server ssh ssh-askpass-gnome ssh-krb5 libecpg-compat3 libecpg-dev libecpg6 libpgtypes3 libpq-dev libpq5 postgresql-9.5 postgresql-client-9.5 postgresql-contrib-9.5 postgresql-doc-9.5 postgresql-plperl-9.5 postgresql-plpython-9.5 postgresql-plpython3-9.5 postgresql-pltcl-9.5 postgresql-server-dev-9.5 libxml2 libxml2-dev libxml2-doc libxml2-utils python-libxml2 bind9 bind9-doc bind9-host bind9utils dnsutils host libbind-dev libbind-export-dev libbind9-140 libdns-export162 libdns162 libirs-export141 libirs141 libisc-export160 libisc160 libisccc-export140 libisccc140 libisccfg-export140 libisccfg140 liblwres141 lwresd exim4 exim4-base exim4-config exim4-daemon-heavy exim4-daemon-light exim4-dev eximon4 glibc-doc glibc-source libc-bin libc-dev-bin libc6 libc6-dev libc6-dev-i386 libc6-dev-x32 libc6-i386 libc6-pic libc6-x32 locales locales-all multiarch-support nscd libssh-4 libssh-dev libssh-doc libssh-gcrypt-4 libssh-gcrypt-dev imagemagick imagemagick-6.q16 imagemagick-common imagemagick-doc libimage-magick-perl libimage-magick-q16-perl libmagick++-6-headers libmagick++-6.q16-5v5 libmagick++-6.q16-dev libmagick++-dev libmagickcore-6-arch-config libmagickcore-6-headers libmagickcore-6.q16-2 libmagickcore-6.q16-2-extra libmagickcore-6.q16-dev libmagickcore-dev libmagickwand-6-headers libmagickwand-6.q16-2 libmagickwand-6.q16-dev libmagickwand-dev perlmagick libssl-dev libssl-doc libssl1.0.0 openssl squid squid-cgi squid-common squid-purge squid3 squidclient vim vim-athena vim-athena-py2 vim-common vim-doc vim-gnome vim-gnome-py2 vim-gtk vim-gtk-py2 vim-gtk3 vim-gtk3-py2 vim-gui-common vim-nox vim-nox-py2 vim-runtime vim-tiny curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-doc libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-openssl-dev libssl-dev libssl-doc libssl1.0.0 openssl libecpg-compat3 libecpg-dev libecpg6 libpgtypes3 libpq-dev libpq5 postgresql-9.5 postgresql-client-9.5 postgresql-contrib-9.5 postgresql-doc-9.5 postgresql-plperl-9.5 postgresql-plpython-9.5 postgresql-plpython3-9.5 postgresql-pltcl-9.5 postgresql-server-dev-9.5 libpam-cracklib libpam-doc libpam-modules libpam-modules-bin libpam-runtime libpam0g libpam0g-dev curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-doc libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-openssl-dev libodbc1 odbcinst odbcinst1debian2 unixodbc unixodbc-dev less libapache2-mod-php7.0 libphp7.0-embed php7.0 php7.0-bcmath php7.0-bz2 php7.0-cgi php7.0-cli php7.0-common php7.0-curl php7.0-dba php7.0-dev php7.0-enchant php7.0-fpm php7.0-gd php7.0-gmp php7.0-imap php7.0-interbase php7.0-intl php7.0-json php7.0-ldap php7.0-mbstring php7.0-mcrypt php7.0-mysql php7.0-odbc php7.0-opcache php7.0-pgsql php7.0-phpdbg php7.0-pspell php7.0-readline php7.0-recode php7.0-snmp php7.0-soap php7.0-sqlite3 php7.0-sybase php7.0-tidy php7.0-xml php7.0-xmlrpc php7.0-xsl php7.0-zip libapache2-mod-php7.0 libphp7.0-embed php7.0 php7.0-bcmath php7.0-bz2 php7.0-cgi php7.0-cli php7.0-common php7.0-curl php7.0-dba php7.0-dev php7.0-enchant php7.0-fpm php7.0-gd php7.0-gmp php7.0-imap php7.0-interbase php7.0-intl php7.0-json php7.0-ldap php7.0-mbstring php7.0-mcrypt php7.0-mysql php7.0-odbc php7.0-opcache php7.0-pgsql php7.0-phpdbg php7.0-pspell php7.0-readline php7.0-recode php7.0-snmp php7.0-soap php7.0-sqlite3 php7.0-sybase php7.0-tidy php7.0-xml php7.0-xmlrpc php7.0-xsl php7.0-zip less squid squid-cgi squid-common squid-purge squid3 squidclient glibc-doc glibc-source libc-bin libc-dev-bin libc6 libc6-dev libc6-dev-i386 libc6-dev-x32 libc6-i386 libc6-pic libc6-x32 locales locales-all multiarch-support nscd libprocps4 libprocps4-dev procps libapache2-mod-php7.0 libphp7.0-embed php7.0 php7.0-bcmath php7.0-bz2 php7.0-cgi php7.0-cli php7.0-common php7.0-curl php7.0-dba php7.0-dev php7.0-enchant php7.0-fpm php7.0-gd php7.0-gmp php7.0-imap php7.0-interbase php7.0-intl php7.0-json php7.0-ldap php7.0-mbstring php7.0-mcrypt php7.0-mysql php7.0-odbc php7.0-opcache php7.0-pgsql php7.0-phpdbg php7.0-pspell php7.0-readline php7.0-recode php7.0-snmp php7.0-soap php7.0-sqlite3 php7.0-sybase php7.0-tidy php7.0-xml php7.0-xmlrpc php7.0-xsl php7.0-zip glibc-doc glibc-source libc-bin libc-dev-bin libc6 libc6-dev libc6-dev-i386 libc6-dev-x32 libc6-i386 libc6-pic libc6-x32 locales locales-all multiarch-support nscd idle-python2.7 libpython2.7 libpython2.7-dev libpython2.7-minimal libpython2.7-stdlib libpython2.7-testsuite python2.7 python2.7-dev python2.7-doc python2.7-examples python2.7-minimal gdb gdb-doc gdb-multiarch gdb-source gdbserver intel-microcode idle-python2.7 libpython2.7 libpython2.7-dev libpython2.7-minimal libpython2.7-stdlib libpython2.7-testsuite python2.7 python2.7-dev python2.7-doc python2.7-examples python2.7-minimal wget idle-python3.5 libpython3.5 libpython3.5-dev libpython3.5-minimal libpython3.5-stdlib libpython3.5-testsuite python3.5 python3.5-dev python3.5-doc python3.5-examples python3.5-minimal python3.5-venv libservlet3.1-java libservlet3.1-java-doc libtomcat8-java tomcat8 tomcat8-admin tomcat8-common tomcat8-docs tomcat8-examples tomcat8-user apache2 apache2-bin apache2-data apache2-dev apache2-doc apache2-suexec-custom apache2-suexec-pristine apache2-utils squid squid-cgi squid-common squid-purge squid3 squidclient bind9 bind9-doc bind9-host bind9utils dnsutils host libbind-dev libbind-export-dev libbind9-140 libdns-export162 libdns162 libirs-export141 libirs141 libisc-export160 libisc160 libisccc-export140 libisccc140 libisccfg-export140 libisccfg140 liblwres141 lwresd git git-all git-arch git-core git-cvs git-daemon-run git-daemon-sysvinit git-doc git-el git-email git-gui git-man git-mediawiki git-svn gitk gitweb curl libcurl3 libcurl3-gnutls libcurl3-nss libcurl4-doc libcurl4-gnutls-dev libcurl4-nss-dev libcurl4-openssl-dev expat libexpat1 libexpat1-dev krb5-admin-server krb5-doc krb5-gss-samples krb5-k5tls krb5-kdc krb5-kdc-ldap krb5-locales krb5-multidev krb5-otp krb5-pkinit krb5-user libgssapi-krb5-2 libgssrpc4 libk5crypto3 libkadm5clnt-mit9 libkadm5srv-mit9 libkdb5-8 libkrad-dev libkrad0 libkrb5-3 libkrb5-dev libkrb5support0 idle-python2.7 libpython2.7 libpython2.7-dev libpython2.7-minimal libpython2.7-stdlib libpython2.7-testsuite python2.7 python2.7-dev python2.7-doc python2.7-examples python2.7-minimal bind9 bind9-doc bind9-host bind9utils dnsutils host libbind-dev libbind-export-dev libbind9-140 libdns-export162 libdns162 libirs-export141 libirs141 libisc-export160 libisc160 libisccc-export140 libisccc140 libisccfg-export140 libisccfg140 liblwres141 lwresd libecpg-compat3 libecpg-dev libecpg6 libpgtypes3 libpq-dev libpq5 postgresql-9.5 postgresql-client-9.5 postgresql-contrib-9.5 postgresql-doc-9.5 postgresql-plperl-9.5 postgresql-plpython-9.5 postgresql-plpython3-9.5 postgresql-pltcl-9.5 postgresql-server-dev-9.5 amd64-microcode intel-microcode intel-microcode vim vim-athena vim-athena-py2 vim-common vim-doc vim-gnome vim-gnome-py2 vim-gtk vim-gtk-py2 vim-gtk3 vim-gtk3-py2 vim-gui-common vim-nox vim-nox-py2 vim-runtime vim-tiny libapache2-mod-php7.0 libphp7.0-embed php7.0 php7.0-bcmath php7.0-bz2 php7.0-cgi php7.0-cli php7.0-common php7.0-curl php7.0-dba php7.0-dev php7.0-enchant php7.0-fpm php7.0-gd php7.0-gmp php7.0-imap php7.0-interbase php7.0-intl php7.0-json php7.0-ldap php7.0-mbstring php7.0-mcrypt php7.0-mysql php7.0-odbc php7.0-opcache php7.0-pgsql php7.0-phpdbg php7.0-pspell php7.0-readline php7.0-recode php7.0-snmp php7.0-soap php7.0-sqlite3 php7.0-sybase php7.0-tidy php7.0-xml php7.0-xmlrpc php7.0-xsl php7.0-zip idle-python2.7 libpython2.7 libpython2.7-dev libpython2.7-minimal libpython2.7-stdlib libpython2.7-testsuite python2.7 python2.7-dev python2.7-doc python2.7-examples python2.7-minimal idle-python3.5 libpython3.5 libpython3.5-dev libpython3.5-minimal libpython3.5-stdlib libpython3.5-testsuite python3.5 python3.5-dev python3.5-doc python3.5-examples python3.5-minimal python3.5-venv vim vim-athena vim-athena-py2 vim-common vim-doc vim-gnome vim-gnome-py2 vim-gtk vim-gtk-py2 vim-gtk3 vim-gtk3-py2 vim-gui-common vim-nox vim-nox-py2 vim-runtime vim-tiny libapache2-mod-php7.0 libphp7.0-embed php7.0 php7.0-bcmath php7.0-bz2 php7.0-cgi php7.0-cli php7.0-common php7.0-curl php7.0-dba php7.0-dev php7.0-enchant php7.0-fpm php7.0-gd php7.0-gmp php7.0-imap php7.0-interbase php7.0-intl php7.0-json php7.0-ldap php7.0-mbstring php7.0-mcrypt php7.0-mysql php7.0-odbc php7.0-opcache php7.0-pgsql php7.0-phpdbg php7.0-pspell php7.0-readline php7.0-recode php7.0-snmp php7.0-soap php7.0-sqlite3 php7.0-sybase php7.0-tidy php7.0-xml php7.0-xmlrpc php7.0-xsl php7.0-zip nginx nginx-common nginx-core nginx-doc nginx-extras nginx-full nginx-light imagemagick imagemagick-6.q16 imagemagick-common imagemagick-doc libimage-magick-perl libimage-magick-q16-perl libmagick++-6-headers libmagick++-6.q16-5v5 libmagick++-6.q16-dev libmagick++-dev libmagickcore-6-arch-config libmagickcore-6-headers libmagickcore-6.q16-2 libmagickcore-6.q16-2-extra libmagickcore-6.q16-dev libmagickcore-dev libmagickwand-6-headers libmagickwand-6.q16-2 libmagickwand-6.q16-dev libmagickwand-dev perlmagick imagemagick imagemagick-6.q16 imagemagick-common imagemagick-doc libimage-magick-perl libimage-magick-q16-perl libmagick++-6-headers libmagick++-6.q16-5v5 libmagick++-6.q16-dev libmagick++-dev libmagickcore-6-arch-config libmagickcore-6-headers libmagickcore-6.q16-2 libmagickcore-6.q16-2-extra libmagickcore-6.q16-dev libmagickcore-dev libmagickwand-6-headers libmagickwand-6.q16-2 libmagickwand-6.q16-dev libmagickwand-dev perlmagick imagemagick imagemagick-6.q16 imagemagick-common imagemagick-doc libimage-magick-perl libimage-magick-q16-perl libmagick++-6-headers libmagick++-6.q16-5v5 libmagick++-6.q16-dev libmagick++-dev libmagickcore-6-arch-config libmagickcore-6-headers libmagickcore-6.q16-2 libmagickcore-6.q16-2-extra libmagickcore-6.q16-dev libmagickcore-dev libmagickwand-6-headers libmagickwand-6.q16-2 libmagickwand-6.q16-dev libmagickwand-dev perlmagick imagemagick imagemagick-6.q16 imagemagick-common imagemagick-doc libimage-magick-perl libimage-magick-q16-perl libmagick++-6-headers libmagick++-6.q16-5v5 libmagick++-6.q16-dev libmagick++-dev libmagickcore-6-arch-config libmagickcore-6-headers libmagickcore-6.q16-2 libmagickcore-6.q16-2-extra libmagickcore-6.q16-dev libmagickcore-dev libmagickwand-6-headers libmagickwand-6.q16-2 libmagickwand-6.q16-dev libmagickwand-dev perlmagick git git-all git-arch git-core git-cvs git-daemon-run git-daemon-sysvinit git-doc git-el git-email git-gui git-man git-mediawiki git-svn gitk gitweb git git-all git-arch git-core git-cvs git-daemon-run git-daemon-sysvinit git-doc git-el git-email git-gui git-man git-mediawiki git-svn gitk gitweb imagemagick imagemagick-6.q16 imagemagick-common imagemagick-doc libimage-magick-perl libimage-magick-q16-perl libmagick++-6-headers libmagick++-6.q16-5v5 libmagick++-6.q16-dev libmagick++-dev libmagickcore-6-arch-config libmagickcore-6-headers libmagickcore-6.q16-2 libmagickcore-6.q16-2-extra libmagickcore-6.q16-dev libmagickcore-dev libmagickwand-6-headers libmagickwand-6.q16-2 libmagickwand-6.q16-dev libmagickwand-dev perlmagick imagemagick imagemagick-6.q16 imagemagick-common imagemagick-doc libimage-magick-perl libimage-magick-q16-perl libmagick++-6-headers libmagick++-6.q16-5v5 libmagick++-6.q16-dev libmagick++-dev libmagickcore-6-arch-config libmagickcore-6-headers libmagickcore-6.q16-2 libmagickcore-6.q16-2-extra libmagickcore-6.q16-dev libmagickcore-dev libmagickwand-6-headers libmagickwand-6.q16-2 libmagickwand-6.q16-dev libmagickwand-dev perlmagick git git-all git-arch git-core git-cvs git-daemon-run git-daemon-sysvinit git-doc git-el git-email git-gui git-man git-mediawiki git-svn gitk gitweb imagemagick imagemagick-6.q16 imagemagick-common imagemagick-doc libimage-magick-perl libimage-magick-q16-perl libmagick++-6-headers libmagick++-6.q16-5v5 libmagick++-6.q16-dev libmagick++-dev libmagickcore-6-arch-config libmagickcore-6-headers libmagickcore-6.q16-2 libmagickcore-6.q16-2-extra libmagickcore-6.q16-dev libmagickcore-dev libmagickwand-6-headers libmagickwand-6.q16-2 libmagickwand-6.q16-dev libmagickwand-dev perlmagick libglib2.0-0 libglib2.0-0-refdbg libglib2.0-bin libglib2.0-data libglib2.0-dev libglib2.0-doc libglib2.0-tests imagemagick imagemagick-6.q16 imagemagick-common imagemagick-doc libimage-magick-perl libimage-magick-q16-perl libmagick++-6-headers libmagick++-6.q16-5v5 libmagick++-6.q16-dev libmagick++-dev libmagickcore-6-arch-config libmagickcore-6-headers libmagickcore-6.q16-2 libmagickcore-6.q16-2-extra libmagickcore-6.q16-dev libmagickcore-dev libmagickwand-6-headers libmagickwand-6.q16-2 libmagickwand-6.q16-dev libmagickwand-dev perlmagick openjdk-8-demo openjdk-8-doc openjdk-8-jdk openjdk-8-jdk-headless openjdk-8-jre openjdk-8-jre-headless openjdk-8-jre-jamvm openjdk-8-jre-zero openjdk-8-source imagemagick imagemagick-6.q16 imagemagick-common imagemagick-doc libimage-magick-perl libimage-magick-q16-perl libmagick++-6-headers libmagick++-6.q16-5v5 libmagick++-6.q16-dev libmagick++-dev libmagickcore-6-arch-config libmagickcore-6-headers libmagickcore-6.q16-2 libmagickcore-6.q16-2-extra libmagickcore-6.q16-dev libmagickcore-dev libmagickwand-6-headers libmagickwand-6.q16-2 libmagickwand-6.q16-dev libmagickwand-dev perlmagick squid squid-cgi squid-common squid-purge squid3 squidclient haproxy haproxy-doc vim-haproxy needrestart idle-python2.7 libpython2.7 libpython2.7-dev libpython2.7-minimal libpython2.7-stdlib libpython2.7-testsuite python2.7 python2.7-dev python2.7-doc python2.7-examples python2.7-minimal libapache2-mod-php7.0 libphp7.0-embed php7.0 php7.0-bcmath php7.0-bz2 php7.0-cgi php7.0-cli php7.0-common php7.0-curl php7.0-dba php7.0-dev php7.0-enchant php7.0-fpm php7.0-gd php7.0-gmp php7.0-imap php7.0-interbase php7.0-intl php7.0-json php7.0-ldap php7.0-mbstring php7.0-mcrypt php7.0-mysql php7.0-odbc php7.0-opcache php7.0-pgsql php7.0-phpdbg php7.0-pspell php7.0-readline php7.0-recode php7.0-snmp php7.0-soap php7.0-sqlite3 php7.0-sybase php7.0-tidy php7.0-xml php7.0-xmlrpc php7.0-xsl php7.0-zip linux-firmware expat libexpat1 libexpat1-dev libapache2-mod-php7.0 libphp7.0-embed php7.0 php7.0-bcmath php7.0-bz2 php7.0-cgi php7.0-cli php7.0-common php7.0-curl php7.0-dba php7.0-dev php7.0-enchant php7.0-fpm php7.0-gd php7.0-gmp php7.0-imap php7.0-interbase php7.0-intl php7.0-json php7.0-ldap php7.0-mbstring php7.0-mcrypt php7.0-mysql php7.0-odbc php7.0-opcache php7.0-pgsql php7.0-phpdbg php7.0-pspell php7.0-readline php7.0-recode php7.0-snmp php7.0-soap php7.0-sqlite3 php7.0-sybase php7.0-tidy php7.0-xml php7.0-xmlrpc php7.0-xsl php7.0-zip linux-cloud-tools-common linux-cloud-tools-generic linux-cloud-tools-lowlatency linux-crashdump linux-doc linux-generic linux-headers-generic linux-headers-lowlatency linux-image-generic linux-image-lowlatency linux-libc-dev linux-lowlatency linux-source linux-source-4.4.0 linux-tools-common linux-tools-generic linux-tools-host linux-tools-lowlatency intel-microcode vim vim-athena vim-athena-py2 vim-common vim-doc vim-gnome vim-gnome-py2 vim-gtk vim-gtk-py2 vim-gtk3 vim-gtk3-py2 vim-gui-common vim-nox vim-nox-py2 vim-runtime vim-tiny rsync openvpn ansible libapache2-mod-svn libapache2-svn libsvn-dev libsvn-doc libsvn-java libsvn-perl libsvn-ruby1.8 libsvn1 python-subversion ruby-svn subversion subversion-tools dmidecode gnutls-bin gnutls-doc guile-gnutls libgnutls-dev libgnutls-openssl27 libgnutls28-dev libgnutls30 libgnutlsxx28 dirmngr gnupg-agent gnupg2 gpgsm gpgv2 scdaemon gzip linux-buildinfo-4.4.0-236-tuxcare.els7-generic linux-buildinfo-4.4.0-236-tuxcare.els7-lowlatency linux-cloud-tools-4.4.0-236-tuxcare.els7 linux-cloud-tools-4.4.0-236-tuxcare.els7-generic linux-cloud-tools-4.4.0-236-tuxcare.els7-lowlatency linux-headers-4.4.0-236-tuxcare.els7 linux-headers-4.4.0-236-tuxcare.els7-generic linux-headers-4.4.0-236-tuxcare.els7-lowlatency linux-image-unsigned-4.4.0-236-tuxcare.els7-generic linux-image-unsigned-4.4.0-236-tuxcare.els7-lowlatency linux-modules-4.4.0-236-tuxcare.els7-generic linux-modules-4.4.0-236-tuxcare.els7-lowlatency linux-modules-extra-4.4.0-236-tuxcare.els7-generic linux-tools-4.4.0-236-tuxcare.els7 linux-tools-4.4.0-236-tuxcare.els7-generic linux-tools-4.4.0-236-tuxcare.els7-lowlatency linux-buildinfo-4.4.0-238-tuxcare.els9-generic linux-buildinfo-4.4.0-238-tuxcare.els9-lowlatency linux-cloud-tools-4.4.0-238-tuxcare.els9 linux-cloud-tools-4.4.0-238-tuxcare.els9-generic linux-cloud-tools-4.4.0-238-tuxcare.els9-lowlatency linux-headers-4.4.0-238-tuxcare.els9 linux-headers-4.4.0-238-tuxcare.els9-generic linux-headers-4.4.0-238-tuxcare.els9-lowlatency linux-image-unsigned-4.4.0-238-tuxcare.els9-generic linux-image-unsigned-4.4.0-238-tuxcare.els9-lowlatency linux-modules-4.4.0-238-tuxcare.els9-generic linux-modules-4.4.0-238-tuxcare.els9-lowlatency linux-modules-extra-4.4.0-238-tuxcare.els9-generic linux-tools-4.4.0-238-tuxcare.els9 linux-tools-4.4.0-238-tuxcare.els9-generic linux-tools-4.4.0-238-tuxcare.els9-lowlatency linux-buildinfo-4.4.0-240-tuxcare.els11-generic linux-buildinfo-4.4.0-240-tuxcare.els11-lowlatency linux-cloud-tools-4.4.0-240-tuxcare.els11 linux-cloud-tools-4.4.0-240-tuxcare.els11-generic linux-cloud-tools-4.4.0-240-tuxcare.els11-lowlatency linux-headers-4.4.0-240-tuxcare.els11 linux-headers-4.4.0-240-tuxcare.els11-generic linux-headers-4.4.0-240-tuxcare.els11-lowlatency linux-image-unsigned-4.4.0-240-tuxcare.els11-generic linux-image-unsigned-4.4.0-240-tuxcare.els11-lowlatency linux-modules-4.4.0-240-tuxcare.els11-generic linux-modules-4.4.0-240-tuxcare.els11-lowlatency linux-modules-extra-4.4.0-240-tuxcare.els11-generic linux-tools-4.4.0-240-tuxcare.els11 linux-tools-4.4.0-240-tuxcare.els11-generic linux-tools-4.4.0-240-tuxcare.els11-lowlatency linux-buildinfo-4.4.0-241-tuxcare.els12-generic linux-buildinfo-4.4.0-241-tuxcare.els12-lowlatency linux-cloud-tools-4.4.0-241-tuxcare.els12 linux-cloud-tools-4.4.0-241-tuxcare.els12-generic linux-cloud-tools-4.4.0-241-tuxcare.els12-lowlatency linux-headers-4.4.0-241-tuxcare.els12 linux-headers-4.4.0-241-tuxcare.els12-generic linux-headers-4.4.0-241-tuxcare.els12-lowlatency linux-image-unsigned-4.4.0-241-tuxcare.els12-generic linux-image-unsigned-4.4.0-241-tuxcare.els12-lowlatency linux-modules-4.4.0-241-tuxcare.els12-generic linux-modules-4.4.0-241-tuxcare.els12-lowlatency linux-modules-extra-4.4.0-241-tuxcare.els12-generic linux-tools-4.4.0-241-tuxcare.els12 linux-tools-4.4.0-241-tuxcare.els12-generic linux-tools-4.4.0-241-tuxcare.els12-lowlatency linux-buildinfo-4.4.0-242-tuxcare.els13-generic linux-buildinfo-4.4.0-242-tuxcare.els13-lowlatency linux-cloud-tools-4.4.0-242-tuxcare.els13 linux-cloud-tools-4.4.0-242-tuxcare.els13-generic linux-cloud-tools-4.4.0-242-tuxcare.els13-lowlatency linux-headers-4.4.0-242-tuxcare.els13 linux-headers-4.4.0-242-tuxcare.els13-generic linux-headers-4.4.0-242-tuxcare.els13-lowlatency linux-image-unsigned-4.4.0-242-tuxcare.els13-generic linux-image-unsigned-4.4.0-242-tuxcare.els13-lowlatency linux-modules-4.4.0-242-tuxcare.els13-generic linux-modules-4.4.0-242-tuxcare.els13-lowlatency linux-modules-extra-4.4.0-242-tuxcare.els13-generic linux-tools-4.4.0-242-tuxcare.els13 linux-tools-4.4.0-242-tuxcare.els13-generic linux-tools-4.4.0-242-tuxcare.els13-lowlatency linux-buildinfo-4.4.0-243-tuxcare.els14-generic linux-buildinfo-4.4.0-243-tuxcare.els14-lowlatency linux-cloud-tools-4.4.0-243-tuxcare.els14 linux-cloud-tools-4.4.0-243-tuxcare.els14-generic linux-cloud-tools-4.4.0-243-tuxcare.els14-lowlatency linux-headers-4.4.0-243-tuxcare.els14 linux-headers-4.4.0-243-tuxcare.els14-generic linux-headers-4.4.0-243-tuxcare.els14-lowlatency linux-image-unsigned-4.4.0-243-tuxcare.els14-generic linux-image-unsigned-4.4.0-243-tuxcare.els14-lowlatency linux-modules-4.4.0-243-tuxcare.els14-generic linux-modules-4.4.0-243-tuxcare.els14-lowlatency linux-modules-extra-4.4.0-243-tuxcare.els14-generic linux-tools-4.4.0-243-tuxcare.els14 linux-tools-4.4.0-243-tuxcare.els14-generic linux-tools-4.4.0-243-tuxcare.els14-lowlatency linux-buildinfo-4.4.0-244-tuxcare.els15-generic linux-buildinfo-4.4.0-244-tuxcare.els15-lowlatency linux-cloud-tools-4.4.0-244-tuxcare.els15 linux-cloud-tools-4.4.0-244-tuxcare.els15-generic linux-cloud-tools-4.4.0-244-tuxcare.els15-lowlatency linux-headers-4.4.0-244-tuxcare.els15 linux-headers-4.4.0-244-tuxcare.els15-generic linux-headers-4.4.0-244-tuxcare.els15-lowlatency linux-image-unsigned-4.4.0-244-tuxcare.els15-generic linux-image-unsigned-4.4.0-244-tuxcare.els15-lowlatency linux-modules-4.4.0-244-tuxcare.els15-generic linux-modules-4.4.0-244-tuxcare.els15-lowlatency linux-modules-extra-4.4.0-244-tuxcare.els15-generic linux-tools-4.4.0-244-tuxcare.els15 linux-tools-4.4.0-244-tuxcare.els15-generic linux-tools-4.4.0-244-tuxcare.els15-lowlatency linux-buildinfo-4.4.0-245-tuxcare.els16-generic linux-buildinfo-4.4.0-245-tuxcare.els16-lowlatency linux-cloud-tools-4.4.0-245-tuxcare.els16 linux-cloud-tools-4.4.0-245-tuxcare.els16-generic linux-cloud-tools-4.4.0-245-tuxcare.els16-lowlatency linux-headers-4.4.0-245-tuxcare.els16 linux-headers-4.4.0-245-tuxcare.els16-generic linux-headers-4.4.0-245-tuxcare.els16-lowlatency linux-image-unsigned-4.4.0-245-tuxcare.els16-generic linux-image-unsigned-4.4.0-245-tuxcare.els16-lowlatency linux-modules-4.4.0-245-tuxcare.els16-generic linux-modules-4.4.0-245-tuxcare.els16-lowlatency linux-modules-extra-4.4.0-245-tuxcare.els16-generic linux-tools-4.4.0-245-tuxcare.els16 linux-tools-4.4.0-245-tuxcare.els16-generic linux-tools-4.4.0-245-tuxcare.els16-lowlatency linux-buildinfo-4.4.0-246-tuxcare.els17-generic linux-buildinfo-4.4.0-246-tuxcare.els17-lowlatency linux-cloud-tools-4.4.0-246-tuxcare.els17 linux-cloud-tools-4.4.0-246-tuxcare.els17-generic linux-cloud-tools-4.4.0-246-tuxcare.els17-lowlatency linux-headers-4.4.0-246-tuxcare.els17 linux-headers-4.4.0-246-tuxcare.els17-generic linux-headers-4.4.0-246-tuxcare.els17-lowlatency linux-image-unsigned-4.4.0-246-tuxcare.els17-generic linux-image-unsigned-4.4.0-246-tuxcare.els17-lowlatency linux-modules-4.4.0-246-tuxcare.els17-generic linux-modules-4.4.0-246-tuxcare.els17-lowlatency linux-modules-extra-4.4.0-246-tuxcare.els17-generic linux-tools-4.4.0-246-tuxcare.els17 linux-tools-4.4.0-246-tuxcare.els17-generic linux-tools-4.4.0-246-tuxcare.els17-lowlatency linux-buildinfo-4.4.0-247-tuxcare.els18-generic linux-buildinfo-4.4.0-247-tuxcare.els18-lowlatency linux-cloud-tools-4.4.0-247-tuxcare.els18 linux-cloud-tools-4.4.0-247-tuxcare.els18-generic linux-cloud-tools-4.4.0-247-tuxcare.els18-lowlatency linux-headers-4.4.0-247-tuxcare.els18 linux-headers-4.4.0-247-tuxcare.els18-generic linux-headers-4.4.0-247-tuxcare.els18-lowlatency linux-image-unsigned-4.4.0-247-tuxcare.els18-generic linux-image-unsigned-4.4.0-247-tuxcare.els18-lowlatency linux-modules-4.4.0-247-tuxcare.els18-generic linux-modules-4.4.0-247-tuxcare.els18-lowlatency linux-modules-extra-4.4.0-247-tuxcare.els18-generic linux-tools-4.4.0-247-tuxcare.els18 linux-tools-4.4.0-247-tuxcare.els18-generic linux-tools-4.4.0-247-tuxcare.els18-lowlatency linux-buildinfo-4.4.0-248-tuxcare.els19-generic linux-buildinfo-4.4.0-248-tuxcare.els19-lowlatency linux-cloud-tools-4.4.0-248-tuxcare.els19 linux-cloud-tools-4.4.0-248-tuxcare.els19-generic linux-cloud-tools-4.4.0-248-tuxcare.els19-lowlatency linux-headers-4.4.0-248-tuxcare.els19 linux-headers-4.4.0-248-tuxcare.els19-generic linux-headers-4.4.0-248-tuxcare.els19-lowlatency linux-image-unsigned-4.4.0-248-tuxcare.els19-generic linux-image-unsigned-4.4.0-248-tuxcare.els19-lowlatency linux-modules-4.4.0-248-tuxcare.els19-generic linux-modules-4.4.0-248-tuxcare.els19-lowlatency linux-modules-extra-4.4.0-248-tuxcare.els19-generic linux-tools-4.4.0-248-tuxcare.els19 linux-tools-4.4.0-248-tuxcare.els19-generic linux-tools-4.4.0-248-tuxcare.els19-lowlatency linux-buildinfo-4.4.0-249-tuxcare.els20-generic linux-buildinfo-4.4.0-249-tuxcare.els20-lowlatency linux-cloud-tools-4.4.0-249-tuxcare.els20 linux-cloud-tools-4.4.0-249-tuxcare.els20-generic linux-cloud-tools-4.4.0-249-tuxcare.els20-lowlatency linux-headers-4.4.0-249-tuxcare.els20 linux-headers-4.4.0-249-tuxcare.els20-generic linux-headers-4.4.0-249-tuxcare.els20-lowlatency linux-image-unsigned-4.4.0-249-tuxcare.els20-generic linux-image-unsigned-4.4.0-249-tuxcare.els20-lowlatency linux-modules-4.4.0-249-tuxcare.els20-generic linux-modules-4.4.0-249-tuxcare.els20-lowlatency linux-modules-extra-4.4.0-249-tuxcare.els20-generic linux-tools-4.4.0-249-tuxcare.els20 linux-tools-4.4.0-249-tuxcare.els20-generic linux-tools-4.4.0-249-tuxcare.els20-lowlatency linux-buildinfo-4.4.0-250-tuxcare.els21-generic linux-buildinfo-4.4.0-250-tuxcare.els21-lowlatency linux-cloud-tools-4.4.0-250-tuxcare.els21 linux-cloud-tools-4.4.0-250-tuxcare.els21-generic linux-cloud-tools-4.4.0-250-tuxcare.els21-lowlatency linux-headers-4.4.0-250-tuxcare.els21 linux-headers-4.4.0-250-tuxcare.els21-generic linux-headers-4.4.0-250-tuxcare.els21-lowlatency linux-image-unsigned-4.4.0-250-tuxcare.els21-generic linux-image-unsigned-4.4.0-250-tuxcare.els21-lowlatency linux-modules-4.4.0-250-tuxcare.els21-generic linux-modules-4.4.0-250-tuxcare.els21-lowlatency linux-modules-extra-4.4.0-250-tuxcare.els21-generic linux-tools-4.4.0-250-tuxcare.els21 linux-tools-4.4.0-250-tuxcare.els21-generic linux-tools-4.4.0-250-tuxcare.els21-lowlatency linux-buildinfo-4.4.0-251-tuxcare.els22-generic linux-buildinfo-4.4.0-251-tuxcare.els22-lowlatency linux-cloud-tools-4.4.0-251-tuxcare.els22 linux-cloud-tools-4.4.0-251-tuxcare.els22-generic linux-cloud-tools-4.4.0-251-tuxcare.els22-lowlatency linux-headers-4.4.0-251-tuxcare.els22 linux-headers-4.4.0-251-tuxcare.els22-generic linux-headers-4.4.0-251-tuxcare.els22-lowlatency linux-image-unsigned-4.4.0-251-tuxcare.els22-generic linux-image-unsigned-4.4.0-251-tuxcare.els22-lowlatency linux-modules-4.4.0-251-tuxcare.els22-generic linux-modules-4.4.0-251-tuxcare.els22-lowlatency linux-modules-extra-4.4.0-251-tuxcare.els22-generic linux-tools-4.4.0-251-tuxcare.els22 linux-tools-4.4.0-251-tuxcare.els22-generic linux-tools-4.4.0-251-tuxcare.els22-lowlatency linux-buildinfo-4.4.0-253-tuxcare.els24-generic linux-buildinfo-4.4.0-253-tuxcare.els24-lowlatency linux-cloud-tools-4.4.0-253-tuxcare.els24 linux-cloud-tools-4.4.0-253-tuxcare.els24-generic linux-cloud-tools-4.4.0-253-tuxcare.els24-lowlatency linux-headers-4.4.0-253-tuxcare.els24 linux-headers-4.4.0-253-tuxcare.els24-generic linux-headers-4.4.0-253-tuxcare.els24-lowlatency linux-image-unsigned-4.4.0-253-tuxcare.els24-generic linux-image-unsigned-4.4.0-253-tuxcare.els24-lowlatency linux-modules-4.4.0-253-tuxcare.els24-generic linux-modules-4.4.0-253-tuxcare.els24-lowlatency linux-modules-extra-4.4.0-253-tuxcare.els24-generic linux-tools-4.4.0-253-tuxcare.els24 linux-tools-4.4.0-253-tuxcare.els24-generic linux-tools-4.4.0-253-tuxcare.els24-lowlatency linux-buildinfo-4.4.0-254-tuxcare.els25-generic linux-buildinfo-4.4.0-254-tuxcare.els25-lowlatency linux-cloud-tools-4.4.0-254-tuxcare.els25 linux-cloud-tools-4.4.0-254-tuxcare.els25-generic linux-cloud-tools-4.4.0-254-tuxcare.els25-lowlatency linux-headers-4.4.0-254-tuxcare.els25 linux-headers-4.4.0-254-tuxcare.els25-generic linux-headers-4.4.0-254-tuxcare.els25-lowlatency linux-image-unsigned-4.4.0-254-tuxcare.els25-generic linux-image-unsigned-4.4.0-254-tuxcare.els25-lowlatency linux-modules-4.4.0-254-tuxcare.els25-generic linux-modules-4.4.0-254-tuxcare.els25-lowlatency linux-modules-extra-4.4.0-254-tuxcare.els25-generic linux-tools-4.4.0-254-tuxcare.els25 linux-tools-4.4.0-254-tuxcare.els25-generic linux-tools-4.4.0-254-tuxcare.els25-lowlatency linux-buildinfo-4.4.0-255-tuxcare.els26-generic linux-buildinfo-4.4.0-255-tuxcare.els26-lowlatency linux-cloud-tools-4.4.0-255-tuxcare.els26 linux-cloud-tools-4.4.0-255-tuxcare.els26-generic linux-cloud-tools-4.4.0-255-tuxcare.els26-lowlatency linux-headers-4.4.0-255-tuxcare.els26 linux-headers-4.4.0-255-tuxcare.els26-generic linux-headers-4.4.0-255-tuxcare.els26-lowlatency linux-image-unsigned-4.4.0-255-tuxcare.els26-generic linux-image-unsigned-4.4.0-255-tuxcare.els26-lowlatency linux-modules-4.4.0-255-tuxcare.els26-generic linux-modules-4.4.0-255-tuxcare.els26-lowlatency linux-modules-extra-4.4.0-255-tuxcare.els26-generic linux-tools-4.4.0-255-tuxcare.els26 linux-tools-4.4.0-255-tuxcare.els26-generic linux-tools-4.4.0-255-tuxcare.els26-lowlatency linux-buildinfo-4.4.0-256-tuxcare.els27-generic linux-buildinfo-4.4.0-256-tuxcare.els27-lowlatency linux-cloud-tools-4.4.0-256-tuxcare.els27 linux-cloud-tools-4.4.0-256-tuxcare.els27-generic linux-cloud-tools-4.4.0-256-tuxcare.els27-lowlatency linux-headers-4.4.0-256-tuxcare.els27 linux-headers-4.4.0-256-tuxcare.els27-generic linux-headers-4.4.0-256-tuxcare.els27-lowlatency linux-image-unsigned-4.4.0-256-tuxcare.els27-generic linux-image-unsigned-4.4.0-256-tuxcare.els27-lowlatency linux-modules-4.4.0-256-tuxcare.els27-generic linux-modules-4.4.0-256-tuxcare.els27-lowlatency linux-modules-extra-4.4.0-256-tuxcare.els27-generic linux-tools-4.4.0-256-tuxcare.els27 linux-tools-4.4.0-256-tuxcare.els27-generic linux-tools-4.4.0-256-tuxcare.els27-lowlatency linux-buildinfo-4.4.0-257-tuxcare.els28-generic linux-buildinfo-4.4.0-257-tuxcare.els28-lowlatency linux-cloud-tools-4.4.0-257-tuxcare.els28 linux-cloud-tools-4.4.0-257-tuxcare.els28-generic linux-cloud-tools-4.4.0-257-tuxcare.els28-lowlatency linux-headers-4.4.0-257-tuxcare.els28 linux-headers-4.4.0-257-tuxcare.els28-generic linux-headers-4.4.0-257-tuxcare.els28-lowlatency linux-image-unsigned-4.4.0-257-tuxcare.els28-generic linux-image-unsigned-4.4.0-257-tuxcare.els28-lowlatency linux-modules-4.4.0-257-tuxcare.els28-generic linux-modules-4.4.0-257-tuxcare.els28-lowlatency linux-modules-extra-4.4.0-257-tuxcare.els28-generic linux-tools-4.4.0-257-tuxcare.els28 linux-tools-4.4.0-257-tuxcare.els28-generic linux-tools-4.4.0-257-tuxcare.els28-lowlatency linux-buildinfo-4.4.0-258-tuxcare.els29-generic linux-buildinfo-4.4.0-258-tuxcare.els29-lowlatency linux-cloud-tools-4.4.0-258-tuxcare.els29 linux-cloud-tools-4.4.0-258-tuxcare.els29-generic linux-cloud-tools-4.4.0-258-tuxcare.els29-lowlatency linux-headers-4.4.0-258-tuxcare.els29 linux-headers-4.4.0-258-tuxcare.els29-generic linux-headers-4.4.0-258-tuxcare.els29-lowlatency linux-image-unsigned-4.4.0-258-tuxcare.els29-generic linux-image-unsigned-4.4.0-258-tuxcare.els29-lowlatency linux-modules-4.4.0-258-tuxcare.els29-generic linux-modules-4.4.0-258-tuxcare.els29-lowlatency linux-modules-extra-4.4.0-258-tuxcare.els29-generic linux-tools-4.4.0-258-tuxcare.els29 linux-tools-4.4.0-258-tuxcare.els29-generic linux-tools-4.4.0-258-tuxcare.els29-lowlatency linux-buildinfo-4.4.0-259-tuxcare.els30-generic linux-buildinfo-4.4.0-259-tuxcare.els30-lowlatency linux-cloud-tools-4.4.0-259-tuxcare.els30 linux-cloud-tools-4.4.0-259-tuxcare.els30-generic linux-cloud-tools-4.4.0-259-tuxcare.els30-lowlatency linux-headers-4.4.0-259-tuxcare.els30 linux-headers-4.4.0-259-tuxcare.els30-generic linux-headers-4.4.0-259-tuxcare.els30-lowlatency linux-image-unsigned-4.4.0-259-tuxcare.els30-generic linux-image-unsigned-4.4.0-259-tuxcare.els30-lowlatency linux-modules-4.4.0-259-tuxcare.els30-generic linux-modules-4.4.0-259-tuxcare.els30-lowlatency linux-modules-extra-4.4.0-259-tuxcare.els30-generic linux-tools-4.4.0-259-tuxcare.els30 linux-tools-4.4.0-259-tuxcare.els30-generic linux-tools-4.4.0-259-tuxcare.els30-lowlatency linux-buildinfo-4.4.0-260-tuxcare.els31-generic linux-buildinfo-4.4.0-260-tuxcare.els31-lowlatency linux-cloud-tools-4.4.0-260-tuxcare.els31 linux-cloud-tools-4.4.0-260-tuxcare.els31-generic linux-cloud-tools-4.4.0-260-tuxcare.els31-lowlatency linux-headers-4.4.0-260-tuxcare.els31 linux-headers-4.4.0-260-tuxcare.els31-generic linux-headers-4.4.0-260-tuxcare.els31-lowlatency linux-image-unsigned-4.4.0-260-tuxcare.els31-generic linux-image-unsigned-4.4.0-260-tuxcare.els31-lowlatency linux-modules-4.4.0-260-tuxcare.els31-generic linux-modules-4.4.0-260-tuxcare.els31-lowlatency linux-modules-extra-4.4.0-260-tuxcare.els31-generic linux-tools-4.4.0-260-tuxcare.els31 linux-tools-4.4.0-260-tuxcare.els31-generic linux-tools-4.4.0-260-tuxcare.els31-lowlatency linux-buildinfo-4.4.0-261-tuxcare.els32-generic linux-buildinfo-4.4.0-261-tuxcare.els32-lowlatency linux-cloud-tools-4.4.0-261-tuxcare.els32 linux-cloud-tools-4.4.0-261-tuxcare.els32-generic linux-cloud-tools-4.4.0-261-tuxcare.els32-lowlatency linux-headers-4.4.0-261-tuxcare.els32 linux-headers-4.4.0-261-tuxcare.els32-generic linux-headers-4.4.0-261-tuxcare.els32-lowlatency linux-image-unsigned-4.4.0-261-tuxcare.els32-generic linux-image-unsigned-4.4.0-261-tuxcare.els32-lowlatency linux-modules-4.4.0-261-tuxcare.els32-generic linux-modules-4.4.0-261-tuxcare.els32-lowlatency linux-modules-extra-4.4.0-261-tuxcare.els32-generic linux-tools-4.4.0-261-tuxcare.els32 linux-tools-4.4.0-261-tuxcare.els32-generic linux-tools-4.4.0-261-tuxcare.els32-lowlatency linux-buildinfo-4.4.0-262-tuxcare.els33-generic linux-buildinfo-4.4.0-262-tuxcare.els33-lowlatency linux-cloud-tools-4.4.0-262-tuxcare.els33 linux-cloud-tools-4.4.0-262-tuxcare.els33-generic linux-cloud-tools-4.4.0-262-tuxcare.els33-lowlatency linux-headers-4.4.0-262-tuxcare.els33 linux-headers-4.4.0-262-tuxcare.els33-generic linux-headers-4.4.0-262-tuxcare.els33-lowlatency linux-image-unsigned-4.4.0-262-tuxcare.els33-generic linux-image-unsigned-4.4.0-262-tuxcare.els33-lowlatency linux-modules-4.4.0-262-tuxcare.els33-generic linux-modules-4.4.0-262-tuxcare.els33-lowlatency linux-modules-extra-4.4.0-262-tuxcare.els33-generic linux-tools-4.4.0-262-tuxcare.els33 linux-tools-4.4.0-262-tuxcare.els33-generic linux-tools-4.4.0-262-tuxcare.els33-lowlatency linux-buildinfo-4.4.0-263-tuxcare.els34-generic linux-buildinfo-4.4.0-263-tuxcare.els34-lowlatency linux-cloud-tools-4.4.0-263-tuxcare.els34 linux-cloud-tools-4.4.0-263-tuxcare.els34-generic linux-cloud-tools-4.4.0-263-tuxcare.els34-lowlatency linux-headers-4.4.0-263-tuxcare.els34 linux-headers-4.4.0-263-tuxcare.els34-generic linux-headers-4.4.0-263-tuxcare.els34-lowlatency linux-image-unsigned-4.4.0-263-tuxcare.els34-generic linux-image-unsigned-4.4.0-263-tuxcare.els34-lowlatency linux-modules-4.4.0-263-tuxcare.els34-generic linux-modules-4.4.0-263-tuxcare.els34-lowlatency linux-modules-extra-4.4.0-263-tuxcare.els34-generic linux-tools-4.4.0-263-tuxcare.els34 linux-tools-4.4.0-263-tuxcare.els34-generic linux-tools-4.4.0-263-tuxcare.els34-lowlatency linux-buildinfo-4.4.0-264-tuxcare.els35-generic linux-buildinfo-4.4.0-264-tuxcare.els35-lowlatency linux-cloud-tools-4.4.0-264-tuxcare.els35 linux-cloud-tools-4.4.0-264-tuxcare.els35-generic linux-cloud-tools-4.4.0-264-tuxcare.els35-lowlatency linux-headers-4.4.0-264-tuxcare.els35 linux-headers-4.4.0-264-tuxcare.els35-generic linux-headers-4.4.0-264-tuxcare.els35-lowlatency linux-image-unsigned-4.4.0-264-tuxcare.els35-generic linux-image-unsigned-4.4.0-264-tuxcare.els35-lowlatency linux-modules-4.4.0-264-tuxcare.els35-generic linux-modules-4.4.0-264-tuxcare.els35-lowlatency linux-modules-extra-4.4.0-264-tuxcare.els35-generic linux-tools-4.4.0-264-tuxcare.els35 linux-tools-4.4.0-264-tuxcare.els35-generic linux-tools-4.4.0-264-tuxcare.els35-lowlatency linux-buildinfo-4.4.0-265-tuxcare.els36-generic linux-buildinfo-4.4.0-265-tuxcare.els36-lowlatency linux-cloud-tools-4.4.0-265-tuxcare.els36 linux-cloud-tools-4.4.0-265-tuxcare.els36-generic linux-cloud-tools-4.4.0-265-tuxcare.els36-lowlatency linux-headers-4.4.0-265-tuxcare.els36 linux-headers-4.4.0-265-tuxcare.els36-generic linux-headers-4.4.0-265-tuxcare.els36-lowlatency linux-image-unsigned-4.4.0-265-tuxcare.els36-generic linux-image-unsigned-4.4.0-265-tuxcare.els36-lowlatency linux-modules-4.4.0-265-tuxcare.els36-generic linux-modules-4.4.0-265-tuxcare.els36-lowlatency linux-modules-extra-4.4.0-265-tuxcare.els36-generic linux-tools-4.4.0-265-tuxcare.els36 linux-tools-4.4.0-265-tuxcare.els36-generic linux-tools-4.4.0-265-tuxcare.els36-lowlatency linux-buildinfo-4.4.0-266-tuxcare.els37-generic linux-buildinfo-4.4.0-266-tuxcare.els37-lowlatency linux-cloud-tools-4.4.0-266-tuxcare.els37 linux-cloud-tools-4.4.0-266-tuxcare.els37-generic linux-cloud-tools-4.4.0-266-tuxcare.els37-lowlatency linux-headers-4.4.0-266-tuxcare.els37 linux-headers-4.4.0-266-tuxcare.els37-generic linux-headers-4.4.0-266-tuxcare.els37-lowlatency linux-image-unsigned-4.4.0-266-tuxcare.els37-generic linux-image-unsigned-4.4.0-266-tuxcare.els37-lowlatency linux-modules-4.4.0-266-tuxcare.els37-generic linux-modules-4.4.0-266-tuxcare.els37-lowlatency linux-modules-extra-4.4.0-266-tuxcare.els37-generic linux-tools-4.4.0-266-tuxcare.els37 linux-tools-4.4.0-266-tuxcare.els37-generic linux-tools-4.4.0-266-tuxcare.els37-lowlatency linux-buildinfo-4.4.0-267-tuxcare.els38-generic linux-buildinfo-4.4.0-267-tuxcare.els38-lowlatency linux-cloud-tools-4.4.0-267-tuxcare.els38 linux-cloud-tools-4.4.0-267-tuxcare.els38-generic linux-cloud-tools-4.4.0-267-tuxcare.els38-lowlatency linux-headers-4.4.0-267-tuxcare.els38 linux-headers-4.4.0-267-tuxcare.els38-generic linux-headers-4.4.0-267-tuxcare.els38-lowlatency linux-image-unsigned-4.4.0-267-tuxcare.els38-generic linux-image-unsigned-4.4.0-267-tuxcare.els38-lowlatency linux-modules-4.4.0-267-tuxcare.els38-generic linux-modules-4.4.0-267-tuxcare.els38-lowlatency linux-modules-extra-4.4.0-267-tuxcare.els38-generic linux-tools-4.4.0-267-tuxcare.els38 linux-tools-4.4.0-267-tuxcare.els38-generic linux-tools-4.4.0-267-tuxcare.els38-lowlatency linux-buildinfo-4.4.0-268-tuxcare.els39-generic linux-buildinfo-4.4.0-268-tuxcare.els39-lowlatency linux-cloud-tools-4.4.0-268-tuxcare.els39 linux-cloud-tools-4.4.0-268-tuxcare.els39-generic linux-cloud-tools-4.4.0-268-tuxcare.els39-lowlatency linux-headers-4.4.0-268-tuxcare.els39 linux-headers-4.4.0-268-tuxcare.els39-generic linux-headers-4.4.0-268-tuxcare.els39-lowlatency linux-image-unsigned-4.4.0-268-tuxcare.els39-generic linux-image-unsigned-4.4.0-268-tuxcare.els39-lowlatency linux-modules-4.4.0-268-tuxcare.els39-generic linux-modules-4.4.0-268-tuxcare.els39-lowlatency linux-modules-extra-4.4.0-268-tuxcare.els39-generic linux-tools-4.4.0-268-tuxcare.els39 linux-tools-4.4.0-268-tuxcare.els39-generic linux-tools-4.4.0-268-tuxcare.els39-lowlatency linux-buildinfo-4.4.0-269-tuxcare.els40-generic linux-buildinfo-4.4.0-269-tuxcare.els40-lowlatency linux-cloud-tools-4.4.0-269-tuxcare.els40 linux-cloud-tools-4.4.0-269-tuxcare.els40-generic linux-cloud-tools-4.4.0-269-tuxcare.els40-lowlatency linux-headers-4.4.0-269-tuxcare.els40 linux-headers-4.4.0-269-tuxcare.els40-generic linux-headers-4.4.0-269-tuxcare.els40-lowlatency linux-image-unsigned-4.4.0-269-tuxcare.els40-generic linux-image-unsigned-4.4.0-269-tuxcare.els40-lowlatency linux-modules-4.4.0-269-tuxcare.els40-generic linux-modules-4.4.0-269-tuxcare.els40-lowlatency linux-modules-extra-4.4.0-269-tuxcare.els40-generic linux-tools-4.4.0-269-tuxcare.els40 linux-tools-4.4.0-269-tuxcare.els40-generic linux-tools-4.4.0-269-tuxcare.els40-lowlatency linux-buildinfo-4.4.0-270-tuxcare.els41-generic linux-buildinfo-4.4.0-270-tuxcare.els41-lowlatency linux-cloud-tools-4.4.0-270-tuxcare.els41 linux-cloud-tools-4.4.0-270-tuxcare.els41-generic linux-cloud-tools-4.4.0-270-tuxcare.els41-lowlatency linux-headers-4.4.0-270-tuxcare.els41 linux-headers-4.4.0-270-tuxcare.els41-generic linux-headers-4.4.0-270-tuxcare.els41-lowlatency linux-image-unsigned-4.4.0-270-tuxcare.els41-generic linux-image-unsigned-4.4.0-270-tuxcare.els41-lowlatency linux-modules-4.4.0-270-tuxcare.els41-generic linux-modules-4.4.0-270-tuxcare.els41-lowlatency linux-modules-extra-4.4.0-270-tuxcare.els41-generic linux-tools-4.4.0-270-tuxcare.els41 linux-tools-4.4.0-270-tuxcare.els41-generic linux-tools-4.4.0-270-tuxcare.els41-lowlatency linux-buildinfo-4.4.0-271-tuxcare.els42-generic linux-buildinfo-4.4.0-271-tuxcare.els42-lowlatency linux-cloud-tools-4.4.0-271-tuxcare.els42 linux-cloud-tools-4.4.0-271-tuxcare.els42-generic linux-cloud-tools-4.4.0-271-tuxcare.els42-lowlatency linux-headers-4.4.0-271-tuxcare.els42 linux-headers-4.4.0-271-tuxcare.els42-generic linux-headers-4.4.0-271-tuxcare.els42-lowlatency linux-image-unsigned-4.4.0-271-tuxcare.els42-generic linux-image-unsigned-4.4.0-271-tuxcare.els42-lowlatency linux-modules-4.4.0-271-tuxcare.els42-generic linux-modules-4.4.0-271-tuxcare.els42-lowlatency linux-modules-extra-4.4.0-271-tuxcare.els42-generic linux-tools-4.4.0-271-tuxcare.els42 linux-tools-4.4.0-271-tuxcare.els42-generic linux-tools-4.4.0-271-tuxcare.els42-lowlatency linux-buildinfo-4.4.0-272-tuxcare.els43-generic linux-buildinfo-4.4.0-272-tuxcare.els43-lowlatency linux-cloud-tools-4.4.0-272-tuxcare.els43 linux-cloud-tools-4.4.0-272-tuxcare.els43-generic linux-cloud-tools-4.4.0-272-tuxcare.els43-lowlatency linux-headers-4.4.0-272-tuxcare.els43 linux-headers-4.4.0-272-tuxcare.els43-generic linux-headers-4.4.0-272-tuxcare.els43-lowlatency linux-image-unsigned-4.4.0-272-tuxcare.els43-generic linux-image-unsigned-4.4.0-272-tuxcare.els43-lowlatency linux-modules-4.4.0-272-tuxcare.els43-generic linux-modules-4.4.0-272-tuxcare.els43-lowlatency linux-modules-extra-4.4.0-272-tuxcare.els43-generic linux-tools-4.4.0-272-tuxcare.els43 linux-tools-4.4.0-272-tuxcare.els43-generic linux-tools-4.4.0-272-tuxcare.els43-lowlatency linux-buildinfo-4.4.0-273-tuxcare.els44-generic linux-buildinfo-4.4.0-273-tuxcare.els44-lowlatency linux-cloud-tools-4.4.0-273-tuxcare.els44 linux-cloud-tools-4.4.0-273-tuxcare.els44-generic linux-cloud-tools-4.4.0-273-tuxcare.els44-lowlatency linux-headers-4.4.0-273-tuxcare.els44 linux-headers-4.4.0-273-tuxcare.els44-generic linux-headers-4.4.0-273-tuxcare.els44-lowlatency linux-image-unsigned-4.4.0-273-tuxcare.els44-generic linux-image-unsigned-4.4.0-273-tuxcare.els44-lowlatency linux-modules-4.4.0-273-tuxcare.els44-generic linux-modules-4.4.0-273-tuxcare.els44-lowlatency linux-modules-extra-4.4.0-273-tuxcare.els44-generic linux-tools-4.4.0-273-tuxcare.els44 linux-tools-4.4.0-273-tuxcare.els44-generic linux-tools-4.4.0-273-tuxcare.els44-lowlatency linux-buildinfo-4.4.0-274-tuxcare.els45-generic linux-buildinfo-4.4.0-274-tuxcare.els45-lowlatency linux-cloud-tools-4.4.0-274-tuxcare.els45 linux-cloud-tools-4.4.0-274-tuxcare.els45-generic linux-cloud-tools-4.4.0-274-tuxcare.els45-lowlatency linux-headers-4.4.0-274-tuxcare.els45 linux-headers-4.4.0-274-tuxcare.els45-generic linux-headers-4.4.0-274-tuxcare.els45-lowlatency linux-image-unsigned-4.4.0-274-tuxcare.els45-generic linux-image-unsigned-4.4.0-274-tuxcare.els45-lowlatency linux-modules-4.4.0-274-tuxcare.els45-generic linux-modules-4.4.0-274-tuxcare.els45-lowlatency linux-modules-extra-4.4.0-274-tuxcare.els45-generic linux-tools-4.4.0-274-tuxcare.els45 linux-tools-4.4.0-274-tuxcare.els45-generic linux-tools-4.4.0-274-tuxcare.els45-lowlatency linux-buildinfo-4.4.0-275-tuxcare.els46-generic linux-buildinfo-4.4.0-275-tuxcare.els46-lowlatency linux-cloud-tools-4.4.0-275-tuxcare.els46 linux-cloud-tools-4.4.0-275-tuxcare.els46-generic linux-cloud-tools-4.4.0-275-tuxcare.els46-lowlatency linux-headers-4.4.0-275-tuxcare.els46 linux-headers-4.4.0-275-tuxcare.els46-generic linux-headers-4.4.0-275-tuxcare.els46-lowlatency linux-image-unsigned-4.4.0-275-tuxcare.els46-generic linux-image-unsigned-4.4.0-275-tuxcare.els46-lowlatency linux-modules-4.4.0-275-tuxcare.els46-generic linux-modules-4.4.0-275-tuxcare.els46-lowlatency linux-modules-extra-4.4.0-275-tuxcare.els46-generic linux-tools-4.4.0-275-tuxcare.els46 linux-tools-4.4.0-275-tuxcare.els46-generic linux-tools-4.4.0-275-tuxcare.els46-lowlatency linux-buildinfo-4.4.0-276-tuxcare.els47-generic linux-buildinfo-4.4.0-276-tuxcare.els47-lowlatency linux-cloud-tools-4.4.0-276-tuxcare.els47 linux-cloud-tools-4.4.0-276-tuxcare.els47-generic linux-cloud-tools-4.4.0-276-tuxcare.els47-lowlatency linux-headers-4.4.0-276-tuxcare.els47 linux-headers-4.4.0-276-tuxcare.els47-generic linux-headers-4.4.0-276-tuxcare.els47-lowlatency linux-image-unsigned-4.4.0-276-tuxcare.els47-generic linux-image-unsigned-4.4.0-276-tuxcare.els47-lowlatency linux-modules-4.4.0-276-tuxcare.els47-generic linux-modules-4.4.0-276-tuxcare.els47-lowlatency linux-modules-extra-4.4.0-276-tuxcare.els47-generic linux-tools-4.4.0-276-tuxcare.els47 linux-tools-4.4.0-276-tuxcare.els47-generic linux-tools-4.4.0-276-tuxcare.els47-lowlatency linux-buildinfo-4.4.0-277-tuxcare.els48-generic linux-buildinfo-4.4.0-277-tuxcare.els48-lowlatency linux-cloud-tools-4.4.0-277-tuxcare.els48 linux-cloud-tools-4.4.0-277-tuxcare.els48-generic linux-cloud-tools-4.4.0-277-tuxcare.els48-lowlatency linux-headers-4.4.0-277-tuxcare.els48 linux-headers-4.4.0-277-tuxcare.els48-generic linux-headers-4.4.0-277-tuxcare.els48-lowlatency linux-image-unsigned-4.4.0-277-tuxcare.els48-generic linux-image-unsigned-4.4.0-277-tuxcare.els48-lowlatency linux-modules-4.4.0-277-tuxcare.els48-generic linux-modules-4.4.0-277-tuxcare.els48-lowlatency linux-modules-extra-4.4.0-277-tuxcare.els48-generic linux-tools-4.4.0-277-tuxcare.els48 linux-tools-4.4.0-277-tuxcare.els48-generic linux-tools-4.4.0-277-tuxcare.els48-lowlatency linux-buildinfo-4.4.0-278-tuxcare.els49-generic linux-buildinfo-4.4.0-278-tuxcare.els49-lowlatency linux-cloud-tools-4.4.0-278-tuxcare.els49 linux-cloud-tools-4.4.0-278-tuxcare.els49-generic linux-cloud-tools-4.4.0-278-tuxcare.els49-lowlatency linux-headers-4.4.0-278-tuxcare.els49 linux-headers-4.4.0-278-tuxcare.els49-generic linux-headers-4.4.0-278-tuxcare.els49-lowlatency linux-image-unsigned-4.4.0-278-tuxcare.els49-generic linux-image-unsigned-4.4.0-278-tuxcare.els49-lowlatency linux-modules-4.4.0-278-tuxcare.els49-generic linux-modules-4.4.0-278-tuxcare.els49-lowlatency linux-modules-extra-4.4.0-278-tuxcare.els49-generic linux-tools-4.4.0-278-tuxcare.els49 linux-tools-4.4.0-278-tuxcare.els49-generic linux-tools-4.4.0-278-tuxcare.els49-lowlatency linux-buildinfo-4.4.0-279-tuxcare.els50-generic linux-buildinfo-4.4.0-279-tuxcare.els50-lowlatency linux-cloud-tools-4.4.0-279-tuxcare.els50 linux-cloud-tools-4.4.0-279-tuxcare.els50-generic linux-cloud-tools-4.4.0-279-tuxcare.els50-lowlatency linux-headers-4.4.0-279-tuxcare.els50 linux-headers-4.4.0-279-tuxcare.els50-generic linux-headers-4.4.0-279-tuxcare.els50-lowlatency linux-image-unsigned-4.4.0-279-tuxcare.els50-generic linux-image-unsigned-4.4.0-279-tuxcare.els50-lowlatency linux-modules-4.4.0-279-tuxcare.els50-generic linux-modules-4.4.0-279-tuxcare.els50-lowlatency linux-modules-extra-4.4.0-279-tuxcare.els50-generic linux-tools-4.4.0-279-tuxcare.els50 linux-tools-4.4.0-279-tuxcare.els50-generic linux-tools-4.4.0-279-tuxcare.els50-lowlatency linux-buildinfo-4.4.0-280-tuxcare.els51-generic linux-buildinfo-4.4.0-280-tuxcare.els51-lowlatency linux-cloud-tools-4.4.0-280-tuxcare.els51 linux-cloud-tools-4.4.0-280-tuxcare.els51-generic linux-cloud-tools-4.4.0-280-tuxcare.els51-lowlatency linux-headers-4.4.0-280-tuxcare.els51 linux-headers-4.4.0-280-tuxcare.els51-generic linux-headers-4.4.0-280-tuxcare.els51-lowlatency linux-image-unsigned-4.4.0-280-tuxcare.els51-generic linux-image-unsigned-4.4.0-280-tuxcare.els51-lowlatency linux-modules-4.4.0-280-tuxcare.els51-generic linux-modules-4.4.0-280-tuxcare.els51-lowlatency linux-modules-extra-4.4.0-280-tuxcare.els51-generic linux-tools-4.4.0-280-tuxcare.els51 linux-tools-4.4.0-280-tuxcare.els51-generic linux-tools-4.4.0-280-tuxcare.els51-lowlatency linux-buildinfo-4.4.0-281-tuxcare.els51-generic linux-buildinfo-4.4.0-281-tuxcare.els51-lowlatency linux-cloud-tools-4.4.0-281-tuxcare.els51 linux-cloud-tools-4.4.0-281-tuxcare.els51-generic linux-cloud-tools-4.4.0-281-tuxcare.els51-lowlatency linux-headers-4.4.0-281-tuxcare.els51 linux-headers-4.4.0-281-tuxcare.els51-generic linux-headers-4.4.0-281-tuxcare.els51-lowlatency linux-image-unsigned-4.4.0-281-tuxcare.els51-generic linux-image-unsigned-4.4.0-281-tuxcare.els51-lowlatency linux-modules-4.4.0-281-tuxcare.els51-generic linux-modules-4.4.0-281-tuxcare.els51-lowlatency linux-modules-extra-4.4.0-281-tuxcare.els51-generic linux-tools-4.4.0-281-tuxcare.els51 linux-tools-4.4.0-281-tuxcare.els51-generic linux-tools-4.4.0-281-tuxcare.els51-lowlatency linux-buildinfo-4.4.0-282-generic linux-buildinfo-4.4.0-282-lowlatency linux-cloud-tools-4.4.0-282 linux-cloud-tools-4.4.0-282-generic linux-cloud-tools-4.4.0-282-lowlatency linux-headers-4.4.0-282 linux-headers-4.4.0-282-generic linux-headers-4.4.0-282-lowlatency linux-image-unsigned-4.4.0-282-generic linux-image-unsigned-4.4.0-282-lowlatency linux-modules-4.4.0-282-generic linux-modules-4.4.0-282-lowlatency linux-modules-extra-4.4.0-282-generic linux-tools-4.4.0-282 linux-tools-4.4.0-282-generic linux-tools-4.4.0-282-lowlatency linux-buildinfo-4.4.0-283-generic linux-buildinfo-4.4.0-283-lowlatency linux-cloud-tools-4.4.0-283 linux-cloud-tools-4.4.0-283-generic linux-cloud-tools-4.4.0-283-lowlatency linux-headers-4.4.0-283 linux-headers-4.4.0-283-generic linux-headers-4.4.0-283-lowlatency linux-image-unsigned-4.4.0-283-generic linux-image-unsigned-4.4.0-283-lowlatency linux-modules-4.4.0-283-generic linux-modules-4.4.0-283-lowlatency linux-modules-extra-4.4.0-283-generic linux-tools-4.4.0-283 linux-tools-4.4.0-283-generic linux-tools-4.4.0-283-lowlatency linux-buildinfo-4.4.0-284-generic linux-buildinfo-4.4.0-284-lowlatency linux-cloud-tools-4.4.0-284 linux-cloud-tools-4.4.0-284-generic linux-cloud-tools-4.4.0-284-lowlatency linux-headers-4.4.0-284 linux-headers-4.4.0-284-generic linux-headers-4.4.0-284-lowlatency linux-image-unsigned-4.4.0-284-generic linux-image-unsigned-4.4.0-284-lowlatency linux-modules-4.4.0-284-generic linux-modules-4.4.0-284-lowlatency linux-modules-extra-4.4.0-284-generic linux-tools-4.4.0-284 linux-tools-4.4.0-284-generic linux-tools-4.4.0-284-lowlatency linux-buildinfo-4.4.0-285-generic linux-buildinfo-4.4.0-285-lowlatency linux-cloud-tools-4.4.0-285 linux-cloud-tools-4.4.0-285-generic linux-cloud-tools-4.4.0-285-lowlatency linux-headers-4.4.0-285 linux-headers-4.4.0-285-generic linux-headers-4.4.0-285-lowlatency linux-image-unsigned-4.4.0-285-generic linux-image-unsigned-4.4.0-285-lowlatency linux-modules-4.4.0-285-generic linux-modules-4.4.0-285-lowlatency linux-modules-extra-4.4.0-285-generic linux-tools-4.4.0-285 linux-tools-4.4.0-285-generic linux-tools-4.4.0-285-lowlatency linux-buildinfo-4.15.0-192-tuxcare.els1-generic linux-buildinfo-4.15.0-192-tuxcare.els1-lowlatency linux-cloud-tools-4.15.0-192-tuxcare.els1-generic linux-cloud-tools-4.15.0-192-tuxcare.els1-lowlatency linux-headers-4.15.0-192-tuxcare.els1 linux-headers-4.15.0-192-tuxcare.els1-generic linux-headers-4.15.0-192-tuxcare.els1-lowlatency linux-hwe-cloud-tools-4.15.0-192-tuxcare.els1 linux-hwe-tools-4.15.0-192-tuxcare.els1 linux-image-unsigned-4.15.0-192-tuxcare.els1-generic linux-image-unsigned-4.15.0-192-tuxcare.els1-lowlatency linux-modules-4.15.0-192-tuxcare.els1-generic linux-modules-4.15.0-192-tuxcare.els1-lowlatency linux-modules-extra-4.15.0-192-tuxcare.els1-generic linux-source-4.15.0 linux-tools-4.15.0-192-tuxcare.els1-generic linux-tools-4.15.0-192-tuxcare.els1-lowlatency linux-buildinfo-4.15.0-194-tuxcare.els2-generic linux-buildinfo-4.15.0-194-tuxcare.els2-lowlatency linux-cloud-tools-4.15.0-194-tuxcare.els2-generic linux-cloud-tools-4.15.0-194-tuxcare.els2-lowlatency linux-headers-4.15.0-194-tuxcare.els2 linux-headers-4.15.0-194-tuxcare.els2-generic linux-headers-4.15.0-194-tuxcare.els2-lowlatency linux-hwe-cloud-tools-4.15.0-194-tuxcare.els2 linux-hwe-tools-4.15.0-194-tuxcare.els2 linux-image-unsigned-4.15.0-194-tuxcare.els2-generic linux-image-unsigned-4.15.0-194-tuxcare.els2-lowlatency linux-modules-4.15.0-194-tuxcare.els2-generic linux-modules-4.15.0-194-tuxcare.els2-lowlatency linux-modules-extra-4.15.0-194-tuxcare.els2-generic linux-tools-4.15.0-194-tuxcare.els2-generic linux-tools-4.15.0-194-tuxcare.els2-lowlatency linux-buildinfo-4.15.0-200-tuxcare.els2-generic linux-buildinfo-4.15.0-200-tuxcare.els2-lowlatency linux-cloud-tools-4.15.0-200-tuxcare.els2-generic linux-cloud-tools-4.15.0-200-tuxcare.els2-lowlatency linux-cloud-tools-generic-hwe-16.04 linux-cloud-tools-lowlatency-hwe-16.04 linux-generic-hwe-16.04 linux-headers-4.15.0-200-tuxcare.els2 linux-headers-4.15.0-200-tuxcare.els2-generic linux-headers-4.15.0-200-tuxcare.els2-lowlatency linux-headers-generic-hwe-16.04 linux-headers-lowlatency-hwe-16.04 linux-hwe-cloud-tools-4.15.0-200-tuxcare.els2 linux-hwe-tools-4.15.0-200-tuxcare.els2 linux-image-generic-hwe-16.04 linux-image-lowlatency-hwe-16.04 linux-image-unsigned-4.15.0-200-tuxcare.els2-generic linux-image-unsigned-4.15.0-200-tuxcare.els2-lowlatency linux-lowlatency-hwe-16.04 linux-modules-4.15.0-200-tuxcare.els2-generic linux-modules-4.15.0-200-tuxcare.els2-lowlatency linux-modules-extra-4.15.0-200-tuxcare.els2-generic linux-tools-4.15.0-200-tuxcare.els2-generic linux-tools-4.15.0-200-tuxcare.els2-lowlatency linux-tools-generic-hwe-16.04 linux-tools-lowlatency-hwe-16.04 linux-buildinfo-4.15.0-206-tuxcare.els5-generic linux-buildinfo-4.15.0-206-tuxcare.els5-lowlatency linux-cloud-tools-4.15.0-206-tuxcare.els5-generic linux-cloud-tools-4.15.0-206-tuxcare.els5-lowlatency linux-headers-4.15.0-206-tuxcare.els5 linux-headers-4.15.0-206-tuxcare.els5-generic linux-headers-4.15.0-206-tuxcare.els5-lowlatency linux-hwe-cloud-tools-4.15.0-206-tuxcare.els5 linux-hwe-tools-4.15.0-206-tuxcare.els5 linux-image-unsigned-4.15.0-206-tuxcare.els5-generic linux-image-unsigned-4.15.0-206-tuxcare.els5-lowlatency linux-modules-4.15.0-206-tuxcare.els5-generic linux-modules-4.15.0-206-tuxcare.els5-lowlatency linux-modules-extra-4.15.0-206-tuxcare.els5-generic linux-tools-4.15.0-206-tuxcare.els5-generic linux-tools-4.15.0-206-tuxcare.els5-lowlatency linux-buildinfo-4.15.0-208-tuxcare.els6-generic linux-buildinfo-4.15.0-208-tuxcare.els6-lowlatency linux-cloud-tools-4.15.0-208-tuxcare.els6-generic linux-cloud-tools-4.15.0-208-tuxcare.els6-lowlatency linux-headers-4.15.0-208-tuxcare.els6 linux-headers-4.15.0-208-tuxcare.els6-generic linux-headers-4.15.0-208-tuxcare.els6-lowlatency linux-hwe-cloud-tools-4.15.0-208-tuxcare.els6 linux-hwe-tools-4.15.0-208-tuxcare.els6 linux-image-unsigned-4.15.0-208-tuxcare.els6-generic linux-image-unsigned-4.15.0-208-tuxcare.els6-lowlatency linux-modules-4.15.0-208-tuxcare.els6-generic linux-modules-4.15.0-208-tuxcare.els6-lowlatency linux-modules-extra-4.15.0-208-tuxcare.els6-generic linux-tools-4.15.0-208-tuxcare.els6-generic linux-tools-4.15.0-208-tuxcare.els6-lowlatency linux-buildinfo-4.15.0-209-tuxcare.els7-generic linux-buildinfo-4.15.0-209-tuxcare.els7-lowlatency linux-cloud-tools-4.15.0-209-tuxcare.els7-generic linux-cloud-tools-4.15.0-209-tuxcare.els7-lowlatency linux-headers-4.15.0-209-tuxcare.els7 linux-headers-4.15.0-209-tuxcare.els7-generic linux-headers-4.15.0-209-tuxcare.els7-lowlatency linux-hwe-cloud-tools-4.15.0-209-tuxcare.els7 linux-hwe-tools-4.15.0-209-tuxcare.els7 linux-image-unsigned-4.15.0-209-tuxcare.els7-generic linux-image-unsigned-4.15.0-209-tuxcare.els7-lowlatency linux-modules-4.15.0-209-tuxcare.els7-generic linux-modules-4.15.0-209-tuxcare.els7-lowlatency linux-modules-extra-4.15.0-209-tuxcare.els7-generic linux-tools-4.15.0-209-tuxcare.els7-generic linux-tools-4.15.0-209-tuxcare.els7-lowlatency linux-buildinfo-4.15.0-210-tuxcare.els8-generic linux-buildinfo-4.15.0-210-tuxcare.els8-lowlatency linux-cloud-tools-4.15.0-210-tuxcare.els8-generic linux-cloud-tools-4.15.0-210-tuxcare.els8-lowlatency linux-headers-4.15.0-210-tuxcare.els8 linux-headers-4.15.0-210-tuxcare.els8-generic linux-headers-4.15.0-210-tuxcare.els8-lowlatency linux-hwe-cloud-tools-4.15.0-210-tuxcare.els8 linux-hwe-tools-4.15.0-210-tuxcare.els8 linux-image-unsigned-4.15.0-210-tuxcare.els8-generic linux-image-unsigned-4.15.0-210-tuxcare.els8-lowlatency linux-modules-4.15.0-210-tuxcare.els8-generic linux-modules-4.15.0-210-tuxcare.els8-lowlatency linux-modules-extra-4.15.0-210-tuxcare.els8-generic linux-tools-4.15.0-210-tuxcare.els8-generic linux-tools-4.15.0-210-tuxcare.els8-lowlatency linux-buildinfo-4.15.0-211-tuxcare.els9-generic linux-buildinfo-4.15.0-211-tuxcare.els9-lowlatency linux-cloud-tools-4.15.0-211-tuxcare.els9-generic linux-cloud-tools-4.15.0-211-tuxcare.els9-lowlatency linux-headers-4.15.0-211-tuxcare.els9 linux-headers-4.15.0-211-tuxcare.els9-generic linux-headers-4.15.0-211-tuxcare.els9-lowlatency linux-hwe-cloud-tools-4.15.0-211-tuxcare.els9 linux-hwe-tools-4.15.0-211-tuxcare.els9 linux-image-unsigned-4.15.0-211-tuxcare.els9-generic linux-image-unsigned-4.15.0-211-tuxcare.els9-lowlatency linux-modules-4.15.0-211-tuxcare.els9-generic linux-modules-4.15.0-211-tuxcare.els9-lowlatency linux-modules-extra-4.15.0-211-tuxcare.els9-generic linux-tools-4.15.0-211-tuxcare.els9-generic linux-tools-4.15.0-211-tuxcare.els9-lowlatency linux-buildinfo-4.15.0-212-tuxcare.els10-generic linux-buildinfo-4.15.0-212-tuxcare.els10-lowlatency linux-cloud-tools-4.15.0-212-tuxcare.els10-generic linux-cloud-tools-4.15.0-212-tuxcare.els10-lowlatency linux-headers-4.15.0-212-tuxcare.els10 linux-headers-4.15.0-212-tuxcare.els10-generic linux-headers-4.15.0-212-tuxcare.els10-lowlatency linux-hwe-cloud-tools-4.15.0-212-tuxcare.els10 linux-hwe-tools-4.15.0-212-tuxcare.els10 linux-image-unsigned-4.15.0-212-tuxcare.els10-generic linux-image-unsigned-4.15.0-212-tuxcare.els10-lowlatency linux-modules-4.15.0-212-tuxcare.els10-generic linux-modules-4.15.0-212-tuxcare.els10-lowlatency linux-modules-extra-4.15.0-212-tuxcare.els10-generic linux-tools-4.15.0-212-tuxcare.els10-generic linux-tools-4.15.0-212-tuxcare.els10-lowlatency linux-buildinfo-4.15.0-214-tuxcare.els12-generic linux-buildinfo-4.15.0-214-tuxcare.els12-lowlatency linux-cloud-tools-4.15.0-214-tuxcare.els12-generic linux-cloud-tools-4.15.0-214-tuxcare.els12-lowlatency linux-headers-4.15.0-214-tuxcare.els12 linux-headers-4.15.0-214-tuxcare.els12-generic linux-headers-4.15.0-214-tuxcare.els12-lowlatency linux-hwe-cloud-tools-4.15.0-214-tuxcare.els12 linux-hwe-tools-4.15.0-214-tuxcare.els12 linux-image-unsigned-4.15.0-214-tuxcare.els12-generic linux-image-unsigned-4.15.0-214-tuxcare.els12-lowlatency linux-modules-4.15.0-214-tuxcare.els12-generic linux-modules-4.15.0-214-tuxcare.els12-lowlatency linux-modules-extra-4.15.0-214-tuxcare.els12-generic linux-tools-4.15.0-214-tuxcare.els12-generic linux-tools-4.15.0-214-tuxcare.els12-lowlatency linux-buildinfo-4.15.0-215-tuxcare.els13-generic linux-buildinfo-4.15.0-215-tuxcare.els13-lowlatency linux-cloud-tools-4.15.0-215-tuxcare.els13-generic linux-cloud-tools-4.15.0-215-tuxcare.els13-lowlatency linux-headers-4.15.0-215-tuxcare.els13 linux-headers-4.15.0-215-tuxcare.els13-generic linux-headers-4.15.0-215-tuxcare.els13-lowlatency linux-hwe-cloud-tools-4.15.0-215-tuxcare.els13 linux-hwe-tools-4.15.0-215-tuxcare.els13 linux-image-unsigned-4.15.0-215-tuxcare.els13-generic linux-image-unsigned-4.15.0-215-tuxcare.els13-lowlatency linux-modules-4.15.0-215-tuxcare.els13-generic linux-modules-4.15.0-215-tuxcare.els13-lowlatency linux-modules-extra-4.15.0-215-tuxcare.els13-generic linux-tools-4.15.0-215-tuxcare.els13-generic linux-tools-4.15.0-215-tuxcare.els13-lowlatency linux-buildinfo-4.15.0-216-tuxcare.els14-generic linux-buildinfo-4.15.0-216-tuxcare.els14-lowlatency linux-cloud-tools-4.15.0-216-tuxcare.els14-generic linux-cloud-tools-4.15.0-216-tuxcare.els14-lowlatency linux-headers-4.15.0-216-tuxcare.els14 linux-headers-4.15.0-216-tuxcare.els14-generic linux-headers-4.15.0-216-tuxcare.els14-lowlatency linux-hwe-cloud-tools-4.15.0-216-tuxcare.els14 linux-hwe-tools-4.15.0-216-tuxcare.els14 linux-image-unsigned-4.15.0-216-tuxcare.els14-generic linux-image-unsigned-4.15.0-216-tuxcare.els14-lowlatency linux-modules-4.15.0-216-tuxcare.els14-generic linux-modules-4.15.0-216-tuxcare.els14-lowlatency linux-modules-extra-4.15.0-216-tuxcare.els14-generic linux-tools-4.15.0-216-tuxcare.els14-generic linux-tools-4.15.0-216-tuxcare.els14-lowlatency linux-buildinfo-4.15.0-217-tuxcare.els15-generic linux-buildinfo-4.15.0-217-tuxcare.els15-lowlatency linux-cloud-tools-4.15.0-217-tuxcare.els15-generic linux-cloud-tools-4.15.0-217-tuxcare.els15-lowlatency linux-headers-4.15.0-217-tuxcare.els15 linux-headers-4.15.0-217-tuxcare.els15-generic linux-headers-4.15.0-217-tuxcare.els15-lowlatency linux-hwe-cloud-tools-4.15.0-217-tuxcare.els15 linux-hwe-tools-4.15.0-217-tuxcare.els15 linux-image-unsigned-4.15.0-217-tuxcare.els15-generic linux-image-unsigned-4.15.0-217-tuxcare.els15-lowlatency linux-modules-4.15.0-217-tuxcare.els15-generic linux-modules-4.15.0-217-tuxcare.els15-lowlatency linux-modules-extra-4.15.0-217-tuxcare.els15-generic linux-tools-4.15.0-217-tuxcare.els15-generic linux-tools-4.15.0-217-tuxcare.els15-lowlatency linux-buildinfo-4.15.0-218-tuxcare.els16-generic linux-buildinfo-4.15.0-218-tuxcare.els16-lowlatency linux-cloud-tools-4.15.0-218-tuxcare.els16-generic linux-cloud-tools-4.15.0-218-tuxcare.els16-lowlatency linux-headers-4.15.0-218-tuxcare.els16 linux-headers-4.15.0-218-tuxcare.els16-generic linux-headers-4.15.0-218-tuxcare.els16-lowlatency linux-hwe-cloud-tools-4.15.0-218-tuxcare.els16 linux-hwe-tools-4.15.0-218-tuxcare.els16 linux-image-unsigned-4.15.0-218-tuxcare.els16-generic linux-image-unsigned-4.15.0-218-tuxcare.els16-lowlatency linux-modules-4.15.0-218-tuxcare.els16-generic linux-modules-4.15.0-218-tuxcare.els16-lowlatency linux-modules-extra-4.15.0-218-tuxcare.els16-generic linux-tools-4.15.0-218-tuxcare.els16-generic linux-tools-4.15.0-218-tuxcare.els16-lowlatency linux-buildinfo-4.15.0-219-tuxcare.els17-generic linux-buildinfo-4.15.0-219-tuxcare.els17-lowlatency linux-cloud-tools-4.15.0-219-tuxcare.els17-generic linux-cloud-tools-4.15.0-219-tuxcare.els17-lowlatency linux-headers-4.15.0-219-tuxcare.els17 linux-headers-4.15.0-219-tuxcare.els17-generic linux-headers-4.15.0-219-tuxcare.els17-lowlatency linux-hwe-cloud-tools-4.15.0-219-tuxcare.els17 linux-hwe-tools-4.15.0-219-tuxcare.els17 linux-image-unsigned-4.15.0-219-tuxcare.els17-generic linux-image-unsigned-4.15.0-219-tuxcare.els17-lowlatency linux-modules-4.15.0-219-tuxcare.els17-generic linux-modules-4.15.0-219-tuxcare.els17-lowlatency linux-modules-extra-4.15.0-219-tuxcare.els17-generic linux-tools-4.15.0-219-tuxcare.els17-generic linux-tools-4.15.0-219-tuxcare.els17-lowlatency linux-buildinfo-4.15.0-220-tuxcare.els18-generic linux-buildinfo-4.15.0-220-tuxcare.els18-lowlatency linux-cloud-tools-4.15.0-220-tuxcare.els18-generic linux-cloud-tools-4.15.0-220-tuxcare.els18-lowlatency linux-headers-4.15.0-220-tuxcare.els18 linux-headers-4.15.0-220-tuxcare.els18-generic linux-headers-4.15.0-220-tuxcare.els18-lowlatency linux-hwe-cloud-tools-4.15.0-220-tuxcare.els18 linux-hwe-tools-4.15.0-220-tuxcare.els18 linux-image-unsigned-4.15.0-220-tuxcare.els18-generic linux-image-unsigned-4.15.0-220-tuxcare.els18-lowlatency linux-modules-4.15.0-220-tuxcare.els18-generic linux-modules-4.15.0-220-tuxcare.els18-lowlatency linux-modules-extra-4.15.0-220-tuxcare.els18-generic linux-tools-4.15.0-220-tuxcare.els18-generic linux-tools-4.15.0-220-tuxcare.els18-lowlatency linux-buildinfo-4.15.0-221-tuxcare.els19-generic linux-buildinfo-4.15.0-221-tuxcare.els19-lowlatency linux-cloud-tools-4.15.0-221-tuxcare.els19-generic linux-cloud-tools-4.15.0-221-tuxcare.els19-lowlatency linux-headers-4.15.0-221-tuxcare.els19 linux-headers-4.15.0-221-tuxcare.els19-generic linux-headers-4.15.0-221-tuxcare.els19-lowlatency linux-hwe-cloud-tools-4.15.0-221-tuxcare.els19 linux-hwe-tools-4.15.0-221-tuxcare.els19 linux-image-unsigned-4.15.0-221-tuxcare.els19-generic linux-image-unsigned-4.15.0-221-tuxcare.els19-lowlatency linux-modules-4.15.0-221-tuxcare.els19-generic linux-modules-4.15.0-221-tuxcare.els19-lowlatency linux-modules-extra-4.15.0-221-tuxcare.els19-generic linux-tools-4.15.0-221-tuxcare.els19-generic linux-tools-4.15.0-221-tuxcare.els19-lowlatency linux-buildinfo-4.15.0-222-tuxcare.els20-generic linux-buildinfo-4.15.0-222-tuxcare.els20-lowlatency linux-cloud-tools-4.15.0-222-tuxcare.els20-generic linux-cloud-tools-4.15.0-222-tuxcare.els20-lowlatency linux-headers-4.15.0-222-tuxcare.els20 linux-headers-4.15.0-222-tuxcare.els20-generic linux-headers-4.15.0-222-tuxcare.els20-lowlatency linux-hwe-cloud-tools-4.15.0-222-tuxcare.els20 linux-hwe-tools-4.15.0-222-tuxcare.els20 linux-image-unsigned-4.15.0-222-tuxcare.els20-generic linux-image-unsigned-4.15.0-222-tuxcare.els20-lowlatency linux-modules-4.15.0-222-tuxcare.els20-generic linux-modules-4.15.0-222-tuxcare.els20-lowlatency linux-modules-extra-4.15.0-222-tuxcare.els20-generic linux-tools-4.15.0-222-tuxcare.els20-generic linux-tools-4.15.0-222-tuxcare.els20-lowlatency linux-buildinfo-4.15.0-223-tuxcare.els21-generic linux-buildinfo-4.15.0-223-tuxcare.els21-lowlatency linux-cloud-tools-4.15.0-223-tuxcare.els21-generic linux-cloud-tools-4.15.0-223-tuxcare.els21-lowlatency linux-headers-4.15.0-223-tuxcare.els21 linux-headers-4.15.0-223-tuxcare.els21-generic linux-headers-4.15.0-223-tuxcare.els21-lowlatency linux-hwe-cloud-tools-4.15.0-223-tuxcare.els21 linux-hwe-tools-4.15.0-223-tuxcare.els21 linux-image-unsigned-4.15.0-223-tuxcare.els21-generic linux-image-unsigned-4.15.0-223-tuxcare.els21-lowlatency linux-modules-4.15.0-223-tuxcare.els21-generic linux-modules-4.15.0-223-tuxcare.els21-lowlatency linux-modules-extra-4.15.0-223-tuxcare.els21-generic linux-tools-4.15.0-223-tuxcare.els21-generic linux-tools-4.15.0-223-tuxcare.els21-lowlatency linux-buildinfo-4.15.0-224-tuxcare.els22-generic linux-buildinfo-4.15.0-224-tuxcare.els22-lowlatency linux-cloud-tools-4.15.0-224-tuxcare.els22-generic linux-cloud-tools-4.15.0-224-tuxcare.els22-lowlatency linux-headers-4.15.0-224-tuxcare.els22 linux-headers-4.15.0-224-tuxcare.els22-generic linux-headers-4.15.0-224-tuxcare.els22-lowlatency linux-hwe-cloud-tools-4.15.0-224-tuxcare.els22 linux-hwe-tools-4.15.0-224-tuxcare.els22 linux-image-unsigned-4.15.0-224-tuxcare.els22-generic linux-image-unsigned-4.15.0-224-tuxcare.els22-lowlatency linux-modules-4.15.0-224-tuxcare.els22-generic linux-modules-4.15.0-224-tuxcare.els22-lowlatency linux-modules-extra-4.15.0-224-tuxcare.els22-generic linux-tools-4.15.0-224-tuxcare.els22-generic linux-tools-4.15.0-224-tuxcare.els22-lowlatency linux-buildinfo-4.15.0-225-tuxcare.els23-generic linux-buildinfo-4.15.0-225-tuxcare.els23-lowlatency linux-cloud-tools-4.15.0-225-tuxcare.els23-generic linux-cloud-tools-4.15.0-225-tuxcare.els23-lowlatency linux-headers-4.15.0-225-tuxcare.els23 linux-headers-4.15.0-225-tuxcare.els23-generic linux-headers-4.15.0-225-tuxcare.els23-lowlatency linux-hwe-cloud-tools-4.15.0-225-tuxcare.els23 linux-hwe-tools-4.15.0-225-tuxcare.els23 linux-image-unsigned-4.15.0-225-tuxcare.els23-generic linux-image-unsigned-4.15.0-225-tuxcare.els23-lowlatency linux-modules-4.15.0-225-tuxcare.els23-generic linux-modules-4.15.0-225-tuxcare.els23-lowlatency linux-modules-extra-4.15.0-225-tuxcare.els23-generic linux-tools-4.15.0-225-tuxcare.els23-generic linux-tools-4.15.0-225-tuxcare.els23-lowlatency linux-buildinfo-4.15.0-226-tuxcare.els24-generic linux-buildinfo-4.15.0-226-tuxcare.els24-lowlatency linux-cloud-tools-4.15.0-226-tuxcare.els24-generic linux-cloud-tools-4.15.0-226-tuxcare.els24-lowlatency linux-headers-4.15.0-226-tuxcare.els24 linux-headers-4.15.0-226-tuxcare.els24-generic linux-headers-4.15.0-226-tuxcare.els24-lowlatency linux-hwe-cloud-tools-4.15.0-226-tuxcare.els24 linux-hwe-tools-4.15.0-226-tuxcare.els24 linux-image-unsigned-4.15.0-226-tuxcare.els24-generic linux-image-unsigned-4.15.0-226-tuxcare.els24-lowlatency linux-modules-4.15.0-226-tuxcare.els24-generic linux-modules-4.15.0-226-tuxcare.els24-lowlatency linux-modules-extra-4.15.0-226-tuxcare.els24-generic linux-tools-4.15.0-226-tuxcare.els24-generic linux-tools-4.15.0-226-tuxcare.els24-lowlatency linux-buildinfo-4.15.0-227-tuxcare.els25-generic linux-buildinfo-4.15.0-227-tuxcare.els25-lowlatency linux-cloud-tools-4.15.0-227-tuxcare.els25-generic linux-cloud-tools-4.15.0-227-tuxcare.els25-lowlatency linux-headers-4.15.0-227-tuxcare.els25 linux-headers-4.15.0-227-tuxcare.els25-generic linux-headers-4.15.0-227-tuxcare.els25-lowlatency linux-hwe-cloud-tools-4.15.0-227-tuxcare.els25 linux-hwe-tools-4.15.0-227-tuxcare.els25 linux-image-unsigned-4.15.0-227-tuxcare.els25-generic linux-image-unsigned-4.15.0-227-tuxcare.els25-lowlatency linux-modules-4.15.0-227-tuxcare.els25-generic linux-modules-4.15.0-227-tuxcare.els25-lowlatency linux-modules-extra-4.15.0-227-tuxcare.els25-generic linux-tools-4.15.0-227-tuxcare.els25-generic linux-tools-4.15.0-227-tuxcare.els25-lowlatency linux-buildinfo-4.15.0-228-tuxcare.els26-generic linux-buildinfo-4.15.0-228-tuxcare.els26-lowlatency linux-cloud-tools-4.15.0-228-tuxcare.els26-generic linux-cloud-tools-4.15.0-228-tuxcare.els26-lowlatency linux-headers-4.15.0-228-tuxcare.els26 linux-headers-4.15.0-228-tuxcare.els26-generic linux-headers-4.15.0-228-tuxcare.els26-lowlatency linux-hwe-cloud-tools-4.15.0-228-tuxcare.els26 linux-hwe-tools-4.15.0-228-tuxcare.els26 linux-image-unsigned-4.15.0-228-tuxcare.els26-generic linux-image-unsigned-4.15.0-228-tuxcare.els26-lowlatency linux-modules-4.15.0-228-tuxcare.els26-generic linux-modules-4.15.0-228-tuxcare.els26-lowlatency linux-modules-extra-4.15.0-228-tuxcare.els26-generic linux-tools-4.15.0-228-tuxcare.els26-generic linux-tools-4.15.0-228-tuxcare.els26-lowlatency linux-buildinfo-4.15.0-229-tuxcare.els27-generic linux-buildinfo-4.15.0-229-tuxcare.els27-lowlatency linux-cloud-tools-4.15.0-229-tuxcare.els27-generic linux-cloud-tools-4.15.0-229-tuxcare.els27-lowlatency linux-headers-4.15.0-229-tuxcare.els27 linux-headers-4.15.0-229-tuxcare.els27-generic linux-headers-4.15.0-229-tuxcare.els27-lowlatency linux-hwe-cloud-tools-4.15.0-229-tuxcare.els27 linux-hwe-tools-4.15.0-229-tuxcare.els27 linux-image-unsigned-4.15.0-229-tuxcare.els27-generic linux-image-unsigned-4.15.0-229-tuxcare.els27-lowlatency linux-modules-4.15.0-229-tuxcare.els27-generic linux-modules-4.15.0-229-tuxcare.els27-lowlatency linux-modules-extra-4.15.0-229-tuxcare.els27-generic linux-tools-4.15.0-229-tuxcare.els27-generic linux-tools-4.15.0-229-tuxcare.els27-lowlatency linux-buildinfo-4.15.0-230-tuxcare.els28-generic linux-buildinfo-4.15.0-230-tuxcare.els28-lowlatency linux-cloud-tools-4.15.0-230-tuxcare.els28-generic linux-cloud-tools-4.15.0-230-tuxcare.els28-lowlatency linux-headers-4.15.0-230-tuxcare.els28 linux-headers-4.15.0-230-tuxcare.els28-generic linux-headers-4.15.0-230-tuxcare.els28-lowlatency linux-hwe-cloud-tools-4.15.0-230-tuxcare.els28 linux-hwe-tools-4.15.0-230-tuxcare.els28 linux-image-unsigned-4.15.0-230-tuxcare.els28-generic linux-image-unsigned-4.15.0-230-tuxcare.els28-lowlatency linux-modules-4.15.0-230-tuxcare.els28-generic linux-modules-4.15.0-230-tuxcare.els28-lowlatency linux-modules-extra-4.15.0-230-tuxcare.els28-generic linux-tools-4.15.0-230-tuxcare.els28-generic linux-tools-4.15.0-230-tuxcare.els28-lowlatency linux-buildinfo-4.15.0-231-tuxcare.els29-generic linux-buildinfo-4.15.0-231-tuxcare.els29-lowlatency linux-cloud-tools-4.15.0-231-tuxcare.els29-generic linux-cloud-tools-4.15.0-231-tuxcare.els29-lowlatency linux-headers-4.15.0-231-tuxcare.els29 linux-headers-4.15.0-231-tuxcare.els29-generic linux-headers-4.15.0-231-tuxcare.els29-lowlatency linux-hwe-cloud-tools-4.15.0-231-tuxcare.els29 linux-hwe-tools-4.15.0-231-tuxcare.els29 linux-image-unsigned-4.15.0-231-tuxcare.els29-generic linux-image-unsigned-4.15.0-231-tuxcare.els29-lowlatency linux-modules-4.15.0-231-tuxcare.els29-generic linux-modules-4.15.0-231-tuxcare.els29-lowlatency linux-modules-extra-4.15.0-231-tuxcare.els29-generic linux-tools-4.15.0-231-tuxcare.els29-generic linux-tools-4.15.0-231-tuxcare.els29-lowlatency linux-buildinfo-4.15.0-232-tuxcare.els30-generic linux-buildinfo-4.15.0-232-tuxcare.els30-lowlatency linux-cloud-tools-4.15.0-232-tuxcare.els30-generic linux-cloud-tools-4.15.0-232-tuxcare.els30-lowlatency linux-headers-4.15.0-232-tuxcare.els30 linux-headers-4.15.0-232-tuxcare.els30-generic linux-headers-4.15.0-232-tuxcare.els30-lowlatency linux-hwe-cloud-tools-4.15.0-232-tuxcare.els30 linux-hwe-tools-4.15.0-232-tuxcare.els30 linux-image-unsigned-4.15.0-232-tuxcare.els30-generic linux-image-unsigned-4.15.0-232-tuxcare.els30-lowlatency linux-modules-4.15.0-232-tuxcare.els30-generic linux-modules-4.15.0-232-tuxcare.els30-lowlatency linux-modules-extra-4.15.0-232-tuxcare.els30-generic linux-tools-4.15.0-232-tuxcare.els30-generic linux-tools-4.15.0-232-tuxcare.els30-lowlatency linux-buildinfo-4.15.0-233-tuxcare.els31-generic linux-buildinfo-4.15.0-233-tuxcare.els31-lowlatency linux-cloud-tools-4.15.0-233-tuxcare.els31-generic linux-cloud-tools-4.15.0-233-tuxcare.els31-lowlatency linux-headers-4.15.0-233-tuxcare.els31 linux-headers-4.15.0-233-tuxcare.els31-generic linux-headers-4.15.0-233-tuxcare.els31-lowlatency linux-hwe-cloud-tools-4.15.0-233-tuxcare.els31 linux-hwe-tools-4.15.0-233-tuxcare.els31 linux-image-unsigned-4.15.0-233-tuxcare.els31-generic linux-image-unsigned-4.15.0-233-tuxcare.els31-lowlatency linux-modules-4.15.0-233-tuxcare.els31-generic linux-modules-4.15.0-233-tuxcare.els31-lowlatency linux-modules-extra-4.15.0-233-tuxcare.els31-generic linux-tools-4.15.0-233-tuxcare.els31-generic linux-tools-4.15.0-233-tuxcare.els31-lowlatency linux-buildinfo-4.15.0-234-tuxcare.els32-generic linux-buildinfo-4.15.0-234-tuxcare.els32-lowlatency linux-cloud-tools-4.15.0-234-tuxcare.els32-generic linux-cloud-tools-4.15.0-234-tuxcare.els32-lowlatency linux-headers-4.15.0-234-tuxcare.els32 linux-headers-4.15.0-234-tuxcare.els32-generic linux-headers-4.15.0-234-tuxcare.els32-lowlatency linux-hwe-cloud-tools-4.15.0-234-tuxcare.els32 linux-hwe-tools-4.15.0-234-tuxcare.els32 linux-image-unsigned-4.15.0-234-tuxcare.els32-generic linux-image-unsigned-4.15.0-234-tuxcare.els32-lowlatency linux-modules-4.15.0-234-tuxcare.els32-generic linux-modules-4.15.0-234-tuxcare.els32-lowlatency linux-modules-extra-4.15.0-234-tuxcare.els32-generic linux-tools-4.15.0-234-tuxcare.els32-generic linux-tools-4.15.0-234-tuxcare.els32-lowlatency linux-buildinfo-4.15.0-235-tuxcare.els33-generic linux-buildinfo-4.15.0-235-tuxcare.els33-lowlatency linux-cloud-tools-4.15.0-235-tuxcare.els33-generic linux-cloud-tools-4.15.0-235-tuxcare.els33-lowlatency linux-headers-4.15.0-235-tuxcare.els33 linux-headers-4.15.0-235-tuxcare.els33-generic linux-headers-4.15.0-235-tuxcare.els33-lowlatency linux-hwe-cloud-tools-4.15.0-235-tuxcare.els33 linux-hwe-tools-4.15.0-235-tuxcare.els33 linux-image-unsigned-4.15.0-235-tuxcare.els33-generic linux-image-unsigned-4.15.0-235-tuxcare.els33-lowlatency linux-modules-4.15.0-235-tuxcare.els33-generic linux-modules-4.15.0-235-tuxcare.els33-lowlatency linux-modules-extra-4.15.0-235-tuxcare.els33-generic linux-tools-4.15.0-235-tuxcare.els33-generic linux-tools-4.15.0-235-tuxcare.els33-lowlatency linux-buildinfo-4.15.0-236-tuxcare.els34-generic linux-buildinfo-4.15.0-236-tuxcare.els34-lowlatency linux-cloud-tools-4.15.0-236-tuxcare.els34-generic linux-cloud-tools-4.15.0-236-tuxcare.els34-lowlatency linux-headers-4.15.0-236-tuxcare.els34 linux-headers-4.15.0-236-tuxcare.els34-generic linux-headers-4.15.0-236-tuxcare.els34-lowlatency linux-hwe-cloud-tools-4.15.0-236-tuxcare.els34 linux-hwe-tools-4.15.0-236-tuxcare.els34 linux-image-unsigned-4.15.0-236-tuxcare.els34-generic linux-image-unsigned-4.15.0-236-tuxcare.els34-lowlatency linux-modules-4.15.0-236-tuxcare.els34-generic linux-modules-4.15.0-236-tuxcare.els34-lowlatency linux-modules-extra-4.15.0-236-tuxcare.els34-generic linux-tools-4.15.0-236-tuxcare.els34-generic linux-tools-4.15.0-236-tuxcare.els34-lowlatency linux-buildinfo-4.15.0-237-tuxcare.els35-generic linux-buildinfo-4.15.0-237-tuxcare.els35-lowlatency linux-cloud-tools-4.15.0-237-tuxcare.els35-generic linux-cloud-tools-4.15.0-237-tuxcare.els35-lowlatency linux-headers-4.15.0-237-tuxcare.els35 linux-headers-4.15.0-237-tuxcare.els35-generic linux-headers-4.15.0-237-tuxcare.els35-lowlatency linux-hwe-cloud-tools-4.15.0-237-tuxcare.els35 linux-hwe-tools-4.15.0-237-tuxcare.els35 linux-image-unsigned-4.15.0-237-tuxcare.els35-generic linux-image-unsigned-4.15.0-237-tuxcare.els35-lowlatency linux-modules-4.15.0-237-tuxcare.els35-generic linux-modules-4.15.0-237-tuxcare.els35-lowlatency linux-modules-extra-4.15.0-237-tuxcare.els35-generic linux-tools-4.15.0-237-tuxcare.els35-generic linux-tools-4.15.0-237-tuxcare.els35-lowlatency linux-buildinfo-4.15.0-238-tuxcare.els36-generic linux-buildinfo-4.15.0-238-tuxcare.els36-lowlatency linux-cloud-tools-4.15.0-238-tuxcare.els36-generic linux-cloud-tools-4.15.0-238-tuxcare.els36-lowlatency linux-headers-4.15.0-238-tuxcare.els36 linux-headers-4.15.0-238-tuxcare.els36-generic linux-headers-4.15.0-238-tuxcare.els36-lowlatency linux-hwe-cloud-tools-4.15.0-238-tuxcare.els36 linux-hwe-tools-4.15.0-238-tuxcare.els36 linux-image-unsigned-4.15.0-238-tuxcare.els36-generic linux-image-unsigned-4.15.0-238-tuxcare.els36-lowlatency linux-modules-4.15.0-238-tuxcare.els36-generic linux-modules-4.15.0-238-tuxcare.els36-lowlatency linux-modules-extra-4.15.0-238-tuxcare.els36-generic linux-tools-4.15.0-238-tuxcare.els36-generic linux-tools-4.15.0-238-tuxcare.els36-lowlatency linux-buildinfo-4.15.0-239-tuxcare.els37-generic linux-buildinfo-4.15.0-239-tuxcare.els37-lowlatency linux-cloud-tools-4.15.0-239-tuxcare.els37-generic linux-cloud-tools-4.15.0-239-tuxcare.els37-lowlatency linux-headers-4.15.0-239-tuxcare.els37 linux-headers-4.15.0-239-tuxcare.els37-generic linux-headers-4.15.0-239-tuxcare.els37-lowlatency linux-hwe-cloud-tools-4.15.0-239-tuxcare.els37 linux-hwe-tools-4.15.0-239-tuxcare.els37 linux-image-unsigned-4.15.0-239-tuxcare.els37-generic linux-image-unsigned-4.15.0-239-tuxcare.els37-lowlatency linux-modules-4.15.0-239-tuxcare.els37-generic linux-modules-4.15.0-239-tuxcare.els37-lowlatency linux-modules-extra-4.15.0-239-tuxcare.els37-generic linux-tools-4.15.0-239-tuxcare.els37-generic linux-tools-4.15.0-239-tuxcare.els37-lowlatency linux-buildinfo-4.15.0-240-tuxcare.els38-generic linux-buildinfo-4.15.0-240-tuxcare.els38-lowlatency linux-cloud-tools-4.15.0-240-tuxcare.els38-generic linux-cloud-tools-4.15.0-240-tuxcare.els38-lowlatency linux-headers-4.15.0-240-tuxcare.els38 linux-headers-4.15.0-240-tuxcare.els38-generic linux-headers-4.15.0-240-tuxcare.els38-lowlatency linux-hwe-cloud-tools-4.15.0-240-tuxcare.els38 linux-hwe-tools-4.15.0-240-tuxcare.els38 linux-image-unsigned-4.15.0-240-tuxcare.els38-generic linux-image-unsigned-4.15.0-240-tuxcare.els38-lowlatency linux-modules-4.15.0-240-tuxcare.els38-generic linux-modules-4.15.0-240-tuxcare.els38-lowlatency linux-modules-extra-4.15.0-240-tuxcare.els38-generic linux-tools-4.15.0-240-tuxcare.els38-generic linux-tools-4.15.0-240-tuxcare.els38-lowlatency linux-buildinfo-4.15.0-241-tuxcare.els39-generic linux-buildinfo-4.15.0-241-tuxcare.els39-lowlatency linux-cloud-tools-4.15.0-241-tuxcare.els39-generic linux-cloud-tools-4.15.0-241-tuxcare.els39-lowlatency linux-headers-4.15.0-241-tuxcare.els39 linux-headers-4.15.0-241-tuxcare.els39-generic linux-headers-4.15.0-241-tuxcare.els39-lowlatency linux-hwe-cloud-tools-4.15.0-241-tuxcare.els39 linux-hwe-tools-4.15.0-241-tuxcare.els39 linux-image-unsigned-4.15.0-241-tuxcare.els39-generic linux-image-unsigned-4.15.0-241-tuxcare.els39-lowlatency linux-modules-4.15.0-241-tuxcare.els39-generic linux-modules-4.15.0-241-tuxcare.els39-lowlatency linux-modules-extra-4.15.0-241-tuxcare.els39-generic linux-tools-4.15.0-241-tuxcare.els39-generic linux-tools-4.15.0-241-tuxcare.els39-lowlatency linux-buildinfo-4.15.0-242-tuxcare.els40-generic linux-buildinfo-4.15.0-242-tuxcare.els40-lowlatency linux-cloud-tools-4.15.0-242-tuxcare.els40-generic linux-cloud-tools-4.15.0-242-tuxcare.els40-lowlatency linux-headers-4.15.0-242-tuxcare.els40 linux-headers-4.15.0-242-tuxcare.els40-generic linux-headers-4.15.0-242-tuxcare.els40-lowlatency linux-hwe-cloud-tools-4.15.0-242-tuxcare.els40 linux-hwe-tools-4.15.0-242-tuxcare.els40 linux-image-unsigned-4.15.0-242-tuxcare.els40-generic linux-image-unsigned-4.15.0-242-tuxcare.els40-lowlatency linux-modules-4.15.0-242-tuxcare.els40-generic linux-modules-4.15.0-242-tuxcare.els40-lowlatency linux-modules-extra-4.15.0-242-tuxcare.els40-generic linux-tools-4.15.0-242-tuxcare.els40-generic linux-tools-4.15.0-242-tuxcare.els40-lowlatency linux-buildinfo-4.15.0-243-tuxcare.els41-generic linux-buildinfo-4.15.0-243-tuxcare.els41-lowlatency linux-cloud-tools-4.15.0-243-tuxcare.els41-generic linux-cloud-tools-4.15.0-243-tuxcare.els41-lowlatency linux-headers-4.15.0-243-tuxcare.els41 linux-headers-4.15.0-243-tuxcare.els41-generic linux-headers-4.15.0-243-tuxcare.els41-lowlatency linux-hwe-cloud-tools-4.15.0-243-tuxcare.els41 linux-hwe-tools-4.15.0-243-tuxcare.els41 linux-image-unsigned-4.15.0-243-tuxcare.els41-generic linux-image-unsigned-4.15.0-243-tuxcare.els41-lowlatency linux-modules-4.15.0-243-tuxcare.els41-generic linux-modules-4.15.0-243-tuxcare.els41-lowlatency linux-modules-extra-4.15.0-243-tuxcare.els41-generic linux-tools-4.15.0-243-tuxcare.els41-generic linux-tools-4.15.0-243-tuxcare.els41-lowlatency linux-buildinfo-4.15.0-244-tuxcare.els42-generic linux-buildinfo-4.15.0-244-tuxcare.els42-lowlatency linux-cloud-tools-4.15.0-244-tuxcare.els42-generic linux-cloud-tools-4.15.0-244-tuxcare.els42-lowlatency linux-headers-4.15.0-244-tuxcare.els42 linux-headers-4.15.0-244-tuxcare.els42-generic linux-headers-4.15.0-244-tuxcare.els42-lowlatency linux-hwe-cloud-tools-4.15.0-244-tuxcare.els42 linux-hwe-tools-4.15.0-244-tuxcare.els42 linux-image-unsigned-4.15.0-244-tuxcare.els42-generic linux-image-unsigned-4.15.0-244-tuxcare.els42-lowlatency linux-modules-4.15.0-244-tuxcare.els42-generic linux-modules-4.15.0-244-tuxcare.els42-lowlatency linux-modules-extra-4.15.0-244-tuxcare.els42-generic linux-tools-4.15.0-244-tuxcare.els42-generic linux-tools-4.15.0-244-tuxcare.els42-lowlatency linux-buildinfo-4.15.0-245-tuxcare.els43-generic linux-buildinfo-4.15.0-245-tuxcare.els43-lowlatency linux-cloud-tools-4.15.0-245-tuxcare.els43-generic linux-cloud-tools-4.15.0-245-tuxcare.els43-lowlatency linux-headers-4.15.0-245-tuxcare.els43 linux-headers-4.15.0-245-tuxcare.els43-generic linux-headers-4.15.0-245-tuxcare.els43-lowlatency linux-hwe-cloud-tools-4.15.0-245-tuxcare.els43 linux-hwe-tools-4.15.0-245-tuxcare.els43 linux-image-unsigned-4.15.0-245-tuxcare.els43-generic linux-image-unsigned-4.15.0-245-tuxcare.els43-lowlatency linux-modules-4.15.0-245-tuxcare.els43-generic linux-modules-4.15.0-245-tuxcare.els43-lowlatency linux-modules-extra-4.15.0-245-tuxcare.els43-generic linux-tools-4.15.0-245-tuxcare.els43-generic linux-tools-4.15.0-245-tuxcare.els43-lowlatency linux-buildinfo-4.15.0-246-tuxcare.els44-generic linux-buildinfo-4.15.0-246-tuxcare.els44-lowlatency linux-cloud-tools-4.15.0-246-tuxcare.els44-generic linux-cloud-tools-4.15.0-246-tuxcare.els44-lowlatency linux-headers-4.15.0-246-tuxcare.els44 linux-headers-4.15.0-246-tuxcare.els44-generic linux-headers-4.15.0-246-tuxcare.els44-lowlatency linux-hwe-cloud-tools-4.15.0-246-tuxcare.els44 linux-hwe-tools-4.15.0-246-tuxcare.els44 linux-image-unsigned-4.15.0-246-tuxcare.els44-generic linux-image-unsigned-4.15.0-246-tuxcare.els44-lowlatency linux-modules-4.15.0-246-tuxcare.els44-generic linux-modules-4.15.0-246-tuxcare.els44-lowlatency linux-modules-extra-4.15.0-246-tuxcare.els44-generic linux-tools-4.15.0-246-tuxcare.els44-generic linux-tools-4.15.0-246-tuxcare.els44-lowlatency linux-buildinfo-4.15.0-247-tuxcare.els45-generic linux-buildinfo-4.15.0-247-tuxcare.els45-lowlatency linux-cloud-tools-4.15.0-247-tuxcare.els45-generic linux-cloud-tools-4.15.0-247-tuxcare.els45-lowlatency linux-headers-4.15.0-247-tuxcare.els45 linux-headers-4.15.0-247-tuxcare.els45-generic linux-headers-4.15.0-247-tuxcare.els45-lowlatency linux-hwe-cloud-tools-4.15.0-247-tuxcare.els45 linux-hwe-tools-4.15.0-247-tuxcare.els45 linux-image-unsigned-4.15.0-247-tuxcare.els45-generic linux-image-unsigned-4.15.0-247-tuxcare.els45-lowlatency linux-modules-4.15.0-247-tuxcare.els45-generic linux-modules-4.15.0-247-tuxcare.els45-lowlatency linux-modules-extra-4.15.0-247-tuxcare.els45-generic linux-tools-4.15.0-247-tuxcare.els45-generic linux-tools-4.15.0-247-tuxcare.els45-lowlatency linux-buildinfo-4.15.0-248-tuxcare.els46-generic linux-buildinfo-4.15.0-248-tuxcare.els46-lowlatency linux-cloud-tools-4.15.0-248-tuxcare.els46-generic linux-cloud-tools-4.15.0-248-tuxcare.els46-lowlatency linux-headers-4.15.0-248-tuxcare.els46 linux-headers-4.15.0-248-tuxcare.els46-generic linux-headers-4.15.0-248-tuxcare.els46-lowlatency linux-hwe-cloud-tools-4.15.0-248-tuxcare.els46 linux-hwe-tools-4.15.0-248-tuxcare.els46 linux-image-unsigned-4.15.0-248-tuxcare.els46-generic linux-image-unsigned-4.15.0-248-tuxcare.els46-lowlatency linux-modules-4.15.0-248-tuxcare.els46-generic linux-modules-4.15.0-248-tuxcare.els46-lowlatency linux-modules-extra-4.15.0-248-tuxcare.els46-generic linux-tools-4.15.0-248-tuxcare.els46-generic linux-tools-4.15.0-248-tuxcare.els46-lowlatency linux-buildinfo-4.15.0-249-tuxcare.els47-generic linux-buildinfo-4.15.0-249-tuxcare.els47-lowlatency linux-cloud-tools-4.15.0-249-tuxcare.els47-generic linux-cloud-tools-4.15.0-249-tuxcare.els47-lowlatency linux-headers-4.15.0-249-tuxcare.els47 linux-headers-4.15.0-249-tuxcare.els47-generic linux-headers-4.15.0-249-tuxcare.els47-lowlatency linux-hwe-cloud-tools-4.15.0-249-tuxcare.els47 linux-hwe-tools-4.15.0-249-tuxcare.els47 linux-image-unsigned-4.15.0-249-tuxcare.els47-generic linux-image-unsigned-4.15.0-249-tuxcare.els47-lowlatency linux-modules-4.15.0-249-tuxcare.els47-generic linux-modules-4.15.0-249-tuxcare.els47-lowlatency linux-modules-extra-4.15.0-249-tuxcare.els47-generic linux-tools-4.15.0-249-tuxcare.els47-generic linux-tools-4.15.0-249-tuxcare.els47-lowlatency linux-buildinfo-4.15.0-250-tuxcare.els48-generic linux-buildinfo-4.15.0-250-tuxcare.els48-lowlatency linux-cloud-tools-4.15.0-250-tuxcare.els48-generic linux-cloud-tools-4.15.0-250-tuxcare.els48-lowlatency linux-headers-4.15.0-250-tuxcare.els48 linux-headers-4.15.0-250-tuxcare.els48-generic linux-headers-4.15.0-250-tuxcare.els48-lowlatency linux-hwe-cloud-tools-4.15.0-250-tuxcare.els48 linux-hwe-tools-4.15.0-250-tuxcare.els48 linux-image-unsigned-4.15.0-250-tuxcare.els48-generic linux-image-unsigned-4.15.0-250-tuxcare.els48-lowlatency linux-modules-4.15.0-250-tuxcare.els48-generic linux-modules-4.15.0-250-tuxcare.els48-lowlatency linux-modules-extra-4.15.0-250-tuxcare.els48-generic linux-tools-4.15.0-250-tuxcare.els48-generic linux-tools-4.15.0-250-tuxcare.els48-lowlatency linux-buildinfo-4.15.0-251-tuxcare.els49-generic linux-buildinfo-4.15.0-251-tuxcare.els49-lowlatency linux-cloud-tools-4.15.0-251-tuxcare.els49-generic linux-cloud-tools-4.15.0-251-tuxcare.els49-lowlatency linux-headers-4.15.0-251-tuxcare.els49 linux-headers-4.15.0-251-tuxcare.els49-generic linux-headers-4.15.0-251-tuxcare.els49-lowlatency linux-hwe-cloud-tools-4.15.0-251-tuxcare.els49 linux-hwe-tools-4.15.0-251-tuxcare.els49 linux-image-unsigned-4.15.0-251-tuxcare.els49-generic linux-image-unsigned-4.15.0-251-tuxcare.els49-lowlatency linux-modules-4.15.0-251-tuxcare.els49-generic linux-modules-4.15.0-251-tuxcare.els49-lowlatency linux-modules-extra-4.15.0-251-tuxcare.els49-generic linux-tools-4.15.0-251-tuxcare.els49-generic linux-tools-4.15.0-251-tuxcare.els49-lowlatency linux-buildinfo-4.15.0-252-tuxcare.els50-generic linux-buildinfo-4.15.0-252-tuxcare.els50-lowlatency linux-cloud-tools-4.15.0-252-tuxcare.els50-generic linux-cloud-tools-4.15.0-252-tuxcare.els50-lowlatency linux-headers-4.15.0-252-tuxcare.els50 linux-headers-4.15.0-252-tuxcare.els50-generic linux-headers-4.15.0-252-tuxcare.els50-lowlatency linux-hwe-cloud-tools-4.15.0-252-tuxcare.els50 linux-hwe-tools-4.15.0-252-tuxcare.els50 linux-image-unsigned-4.15.0-252-tuxcare.els50-generic linux-image-unsigned-4.15.0-252-tuxcare.els50-lowlatency linux-modules-4.15.0-252-tuxcare.els50-generic linux-modules-4.15.0-252-tuxcare.els50-lowlatency linux-modules-extra-4.15.0-252-tuxcare.els50-generic linux-tools-4.15.0-252-tuxcare.els50-generic linux-tools-4.15.0-252-tuxcare.els50-lowlatency linux-buildinfo-4.15.0-253-tuxcare.els51-generic linux-buildinfo-4.15.0-253-tuxcare.els51-lowlatency linux-cloud-tools-4.15.0-253-tuxcare.els51-generic linux-cloud-tools-4.15.0-253-tuxcare.els51-lowlatency linux-headers-4.15.0-253-tuxcare.els51 linux-headers-4.15.0-253-tuxcare.els51-generic linux-headers-4.15.0-253-tuxcare.els51-lowlatency linux-hwe-cloud-tools-4.15.0-253-tuxcare.els51 linux-hwe-tools-4.15.0-253-tuxcare.els51 linux-image-unsigned-4.15.0-253-tuxcare.els51-generic linux-image-unsigned-4.15.0-253-tuxcare.els51-lowlatency linux-modules-4.15.0-253-tuxcare.els51-generic linux-modules-4.15.0-253-tuxcare.els51-lowlatency linux-modules-extra-4.15.0-253-tuxcare.els51-generic linux-tools-4.15.0-253-tuxcare.els51-generic linux-tools-4.15.0-253-tuxcare.els51-lowlatency linux-buildinfo-4.15.0-254-tuxcare.els52-generic linux-buildinfo-4.15.0-254-tuxcare.els52-lowlatency linux-cloud-tools-4.15.0-254-tuxcare.els52-generic linux-cloud-tools-4.15.0-254-tuxcare.els52-lowlatency linux-headers-4.15.0-254-tuxcare.els52 linux-headers-4.15.0-254-tuxcare.els52-generic linux-headers-4.15.0-254-tuxcare.els52-lowlatency linux-hwe-cloud-tools-4.15.0-254-tuxcare.els52 linux-hwe-tools-4.15.0-254-tuxcare.els52 linux-image-unsigned-4.15.0-254-tuxcare.els52-generic linux-image-unsigned-4.15.0-254-tuxcare.els52-lowlatency linux-modules-4.15.0-254-tuxcare.els52-generic linux-modules-4.15.0-254-tuxcare.els52-lowlatency linux-modules-extra-4.15.0-254-tuxcare.els52-generic linux-tools-4.15.0-254-tuxcare.els52-generic linux-tools-4.15.0-254-tuxcare.els52-lowlatency linux-buildinfo-4.15.0-255-tuxcare.els53-generic linux-buildinfo-4.15.0-255-tuxcare.els53-lowlatency linux-cloud-tools-4.15.0-255-tuxcare.els53-generic linux-cloud-tools-4.15.0-255-tuxcare.els53-lowlatency linux-headers-4.15.0-255-tuxcare.els53 linux-headers-4.15.0-255-tuxcare.els53-generic linux-headers-4.15.0-255-tuxcare.els53-lowlatency linux-hwe-cloud-tools-4.15.0-255-tuxcare.els53 linux-hwe-tools-4.15.0-255-tuxcare.els53 linux-image-unsigned-4.15.0-255-tuxcare.els53-generic linux-image-unsigned-4.15.0-255-tuxcare.els53-lowlatency linux-modules-4.15.0-255-tuxcare.els53-generic linux-modules-4.15.0-255-tuxcare.els53-lowlatency linux-modules-extra-4.15.0-255-tuxcare.els53-generic linux-tools-4.15.0-255-tuxcare.els53-generic linux-tools-4.15.0-255-tuxcare.els53-lowlatency linux-buildinfo-4.15.0-256-tuxcare.els54-generic linux-buildinfo-4.15.0-256-tuxcare.els54-lowlatency linux-cloud-tools-4.15.0-256-tuxcare.els54-generic linux-cloud-tools-4.15.0-256-tuxcare.els54-lowlatency linux-headers-4.15.0-256-tuxcare.els54 linux-headers-4.15.0-256-tuxcare.els54-generic linux-headers-4.15.0-256-tuxcare.els54-lowlatency linux-hwe-cloud-tools-4.15.0-256-tuxcare.els54 linux-hwe-tools-4.15.0-256-tuxcare.els54 linux-image-unsigned-4.15.0-256-tuxcare.els54-generic linux-image-unsigned-4.15.0-256-tuxcare.els54-lowlatency linux-modules-4.15.0-256-tuxcare.els54-generic linux-modules-4.15.0-256-tuxcare.els54-lowlatency linux-modules-extra-4.15.0-256-tuxcare.els54-generic linux-tools-4.15.0-256-tuxcare.els54-generic linux-tools-4.15.0-256-tuxcare.els54-lowlatency linux-buildinfo-4.15.0-257-generic linux-buildinfo-4.15.0-257-lowlatency linux-cloud-tools-4.15.0-257-generic linux-cloud-tools-4.15.0-257-lowlatency linux-headers-4.15.0-257 linux-headers-4.15.0-257-generic linux-headers-4.15.0-257-lowlatency linux-hwe-cloud-tools-4.15.0-257 linux-hwe-tools-4.15.0-257 linux-image-unsigned-4.15.0-257-generic linux-image-unsigned-4.15.0-257-lowlatency linux-modules-4.15.0-257-generic linux-modules-4.15.0-257-lowlatency linux-modules-extra-4.15.0-257-generic linux-tools-4.15.0-257-generic linux-tools-4.15.0-257-lowlatency linux-buildinfo-4.15.0-258-generic linux-buildinfo-4.15.0-258-lowlatency linux-cloud-tools-4.15.0-258-generic linux-cloud-tools-4.15.0-258-lowlatency linux-headers-4.15.0-258 linux-headers-4.15.0-258-generic linux-headers-4.15.0-258-lowlatency linux-hwe-cloud-tools-4.15.0-258 linux-hwe-tools-4.15.0-258 linux-image-unsigned-4.15.0-258-generic linux-image-unsigned-4.15.0-258-lowlatency linux-modules-4.15.0-258-generic linux-modules-4.15.0-258-lowlatency linux-modules-extra-4.15.0-258-generic linux-tools-4.15.0-258-generic linux-tools-4.15.0-258-lowlatency linux-buildinfo-4.15.0-259-generic linux-buildinfo-4.15.0-259-lowlatency linux-cloud-tools-4.15.0-259-generic linux-cloud-tools-4.15.0-259-lowlatency linux-headers-4.15.0-259 linux-headers-4.15.0-259-generic linux-headers-4.15.0-259-lowlatency linux-hwe-cloud-tools-4.15.0-259 linux-hwe-tools-4.15.0-259 linux-image-unsigned-4.15.0-259-generic linux-image-unsigned-4.15.0-259-lowlatency linux-modules-4.15.0-259-generic linux-modules-4.15.0-259-lowlatency linux-modules-extra-4.15.0-259-generic linux-tools-4.15.0-259-generic linux-tools-4.15.0-259-lowlatency linux-buildinfo-4.15.0-261-generic linux-buildinfo-4.15.0-261-lowlatency linux-cloud-tools-4.15.0-261-generic linux-cloud-tools-4.15.0-261-lowlatency linux-headers-4.15.0-261 linux-headers-4.15.0-261-generic linux-headers-4.15.0-261-lowlatency linux-hwe-cloud-tools-4.15.0-261 linux-hwe-tools-4.15.0-261 linux-image-unsigned-4.15.0-261-generic linux-image-unsigned-4.15.0-261-lowlatency linux-modules-4.15.0-261-generic linux-modules-4.15.0-261-lowlatency linux-modules-extra-4.15.0-261-generic linux-tools-4.15.0-261-generic linux-tools-4.15.0-261-lowlatency linux-buildinfo-4.15.0-262-generic linux-buildinfo-4.15.0-262-lowlatency linux-cloud-tools-4.15.0-262-generic linux-cloud-tools-4.15.0-262-lowlatency linux-headers-4.15.0-262 linux-headers-4.15.0-262-generic linux-headers-4.15.0-262-lowlatency linux-hwe-cloud-tools-4.15.0-262 linux-hwe-tools-4.15.0-262 linux-image-unsigned-4.15.0-262-generic linux-image-unsigned-4.15.0-262-lowlatency linux-modules-4.15.0-262-generic linux-modules-4.15.0-262-lowlatency linux-modules-extra-4.15.0-262-generic linux-tools-4.15.0-262-generic linux-tools-4.15.0-262-lowlatency amd64 0:2.1.0-7ubuntu0.16.04.5+tuxcare.els2 amd64 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els31 3:7.4.1689-3ubuntu1.5+tuxcare.els31 amd64 0:9.5.25-0ubuntu0.16.04.1+tuxcare.els2 0:9.5.25-0ubuntu0.16.04.1+tuxcare.els2 amd64 0:3.11.0-1ubuntu1.5+tuxcare.els2 0:3.11.0-1ubuntu1.5+tuxcare.els2 amd64 0:3.5.12-1ubuntu7.17+tuxcare.els2 0:3.5.12-1ubuntu7.17+tuxcare.els2 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els32 3:7.4.1689-3ubuntu1.5+tuxcare.els32 amd64 0:3.9.1-1ubuntu0.16.04.2+tuxcare.els1 amd64 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els4 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els4 amd64 0:9.5.25-0ubuntu0.16.04.1+tuxcare.els3 0:9.5.25-0ubuntu0.16.04.1+tuxcare.els3 amd64 0:2.1.0-7ubuntu0.16.04.5+tuxcare.els3 amd64 0:2.9.3+dfsg1-1ubuntu0.7+tuxcare.els4 0:2.9.3+dfsg1-1ubuntu0.7+tuxcare.els4 amd64 0:7.47.0-1ubuntu2.23+tuxcare.els6 0:7.47.0-1ubuntu2.23+tuxcare.els6 amd64 1:2.6.10-0ubuntu1+tuxcare.els2 amd64 0:5.22.1-9ubuntu0.9+tuxcare.els1 0:5.22.1-9ubuntu0.9+tuxcare.els1 amd64 0:3.11.0-1ubuntu1.5+tuxcare.els3 0:3.11.0-1ubuntu1.5+tuxcare.els3 0:1.10.3-0ubuntu0.16.04.8+tuxcare.els3 amd64 0:1.10.3-0ubuntu0.16.04.8+tuxcare.els3 amd64 0:5.7.40-0ubuntu0.16.04.1+tuxcare.els1 0:5.7.40-0ubuntu0.16.04.1+tuxcare.els1 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els5 amd64 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els5 amd64 0:1.10.6-1ubuntu3.6+tuxcare.els1 0:1.10.6-1ubuntu3.6+tuxcare.els1 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els7 amd64 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els7 amd64 0:4.3.3-5ubuntu12.11+tuxcare.els2 amd64 0:322-1ubuntu1.2+tuxcare.els1 amd64 0:8u352-ga-0ubuntu1~16.04+tuxcare.els1 0:8u352-ga-0ubuntu1~16.04+tuxcare.els1 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els33 3:7.4.1689-3ubuntu1.5+tuxcare.els33 amd64 1:4.2-3.1ubuntu5.5+tuxcare.els2 amd64 0:2.9.3+dfsg1-1ubuntu0.7+tuxcare.els5 0:2.9.3+dfsg1-1ubuntu0.7+tuxcare.els5 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els5 8:6.8.9.9-7ubuntu5.17+tuxcare.els5 amd64 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els4 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els4 amd64 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els5 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els5 0:7.0.68-1ubuntu0.4+tuxcare.els2 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els34 3:7.4.1689-3ubuntu1.5+tuxcare.els34 amd64 0:9.5.25-0ubuntu0.16.04.1+tuxcare.els4 0:9.5.25-0ubuntu0.16.04.1+tuxcare.els4 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els35 3:7.4.1689-3ubuntu1.5+tuxcare.els35 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els36 3:7.4.1689-3ubuntu1.5+tuxcare.els36 0:2.23-0ubuntu11.5+tuxcare.els5 amd64 0:2.23-0ubuntu11.5+tuxcare.els5 amd64 1:2.27.1-6ubuntu3.10+tuxcare.els1 amd64 0:2.27.1-6ubuntu3.10+tuxcare.els1 0:2.27.1-6ubuntu3.10+tuxcare.els1 amd64 2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els2 2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els2 amd64 0:1.13.2+dfsg-5ubuntu2.2+tuxcare.els1 0:1.13.2+dfsg-5ubuntu2.2+tuxcare.els1 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els37 3:7.4.1689-3ubuntu1.5+tuxcare.els37 amd64 0:1.1.8-3.2ubuntu2.3+tuxcare.els1 0:1.1.8-3.2ubuntu2.3+tuxcare.els1 amd64 1:2.4.18-2ubuntu3.17+tuxcare.els8 1:2.4.18-2ubuntu3.17+tuxcare.els8 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els38 3:7.4.1689-3ubuntu1.5+tuxcare.els38 amd64 2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3 2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3 amd64 0:5.7.41-0ubuntu0.16.04.1+tuxcare.els1 0:5.7.41-0ubuntu0.16.04.1+tuxcare.els1 amd64 0:1.13.2+dfsg-5ubuntu2.2+tuxcare.els2 0:1.13.2+dfsg-5ubuntu2.2+tuxcare.els2 amd64 1:2.4.18-2ubuntu3.17+tuxcare.els9 1:2.4.18-2ubuntu3.17+tuxcare.els9 amd64 0:1.8.16-0ubuntu1.11+tuxcare.els1 amd64 0:1.0.2g-1ubuntu4.21+tuxcare.els5 0:1.0.2g-1ubuntu4.21+tuxcare.els5 amd64 0:5.4.0-6ubuntu1~16.04.12+tuxcare.els1 0:5.4.0-6ubuntu1~16.04.12+tuxcare.els1 amd64 1:5.4.0-6ubuntu1~16.04.12+tuxcare.els1 amd64 1:2.7.4-0ubuntu1.10+tuxcare.els1 1:2.7.4-0ubuntu1.10+tuxcare.els1 amd64 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els4 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els4 amd64 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els4 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els4 amd64 0:1.28-2.1ubuntu0.2+tuxcare.els1 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els6 amd64 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els6 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els8 amd64 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els8 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els39 3:7.4.1689-3ubuntu1.5+tuxcare.els39 amd64 0:7.47.0-1ubuntu2.23+tuxcare.els7 0:7.47.0-1ubuntu2.23+tuxcare.els7 amd64 0:3.20230214.0ubuntu0.16.04.1+tuxcare.els1 amd64 2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4 2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4 amd64 0:229-4ubuntu21.33+tuxcare.els1 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els40 3:7.4.1689-3ubuntu1.5+tuxcare.els40 amd64 1:2.4.18-2ubuntu3.17+tuxcare.els10 1:2.4.18-2ubuntu3.17+tuxcare.els10 amd64 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els5 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els5 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els41 3:7.4.1689-3ubuntu1.5+tuxcare.els41 amd64 1:2.7.4-0ubuntu1.10+tuxcare.els2 1:2.7.4-0ubuntu1.10+tuxcare.els2 amd64 0:3.7.6-1ubuntu1+tuxcare.els1 amd64 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els5 2:3.28.4-0ubuntu0.16.04.14+tuxcare.els5 amd64 0:7.47.0-1ubuntu2.23+tuxcare.els8 0:7.47.0-1ubuntu2.23+tuxcare.els8 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els6 8:6.8.9.9-7ubuntu5.17+tuxcare.els6 amd64 0:2.9.3+dfsg1-1ubuntu0.7+tuxcare.els6 0:2.9.3+dfsg1-1ubuntu0.7+tuxcare.els6 amd64 0:1.0.2g-1ubuntu4.21+tuxcare.els6 0:1.0.2g-1ubuntu4.21+tuxcare.els6 amd64 1:2.7.4-0ubuntu1.10+tuxcare.els3 1:2.7.4-0ubuntu1.10+tuxcare.els3 amd64 0:5.7.42-0ubuntu0.16.04.1+tuxcare.els1 0:5.7.42-0ubuntu0.16.04.1+tuxcare.els1 0:11.2.0-1ubuntu0.3+tuxcare.els1 amd64 0:11.2.0-1ubuntu0.3+tuxcare.els1 0:11.2.0-1ubuntu0.3+tuxcare.els2 amd64 0:11.2.0-1ubuntu0.3+tuxcare.els2 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els42 3:7.4.1689-3ubuntu1.5+tuxcare.els42 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els43 3:7.4.1689-3ubuntu1.5+tuxcare.els43 amd64 0:5.22.1-9ubuntu0.9+tuxcare.els2 0:5.22.1-9ubuntu0.9+tuxcare.els2 amd64 0:1.0.2g-1ubuntu4.21+tuxcare.els7 0:1.0.2g-1ubuntu4.21+tuxcare.els7 amd64 0:1.4.20-1ubuntu3.3+tuxcare.els1 amd64 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els6 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els6 amd64 0:7.47.0-1ubuntu2.23+tuxcare.els9 0:7.47.0-1ubuntu2.23+tuxcare.els9 0:4.86.2-2ubuntu2.6+tuxcare.els3 amd64 0:4.86.2-2ubuntu2.6+tuxcare.els3 amd64 1:2.24-12+tuxcare.els1 amd64 1:2.4.18-2ubuntu3.17+tuxcare.els11 1:2.4.18-2ubuntu3.17+tuxcare.els11 amd64 0:2.1.3-4ubuntu0.11+tuxcare.els2 0:2.1.3-4ubuntu0.11+tuxcare.els2 amd64 0:8u372-ga-0ubuntu1~16.04+tuxcare.els1 0:8u372-ga-0ubuntu1~16.04+tuxcare.els1 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els7 8:6.8.9.9-7ubuntu5.17+tuxcare.els7 amd64 0:1.8.16-0ubuntu1.11+tuxcare.els2 amd64 0:2.4.42+dfsg-2ubuntu3.13.tuxcare.els2 amd64 0:5.22.1-9ubuntu0.9+tuxcare.els3 0:5.22.1-9ubuntu0.9+tuxcare.els3 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els7 amd64 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els7 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els9 amd64 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els9 amd64 0:2.1.3-4ubuntu0.11+tuxcare.els3 0:2.1.3-4ubuntu0.11+tuxcare.els3 amd64 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els5 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els5 amd64 2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els5 2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els5 amd64 2:7.2p2-4ubuntu2.10+tuxcare.els2 2:7.2p2-4ubuntu2.10+tuxcare.els2 amd64 0:3.20230719.1ubuntu0.16.04.2+tuxcare.els1 amd64 0:2.3.1-4.1+tuxcare.els1 amd64 1:3.3.6-4.1+tuxcare.els1 amd64 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els6 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els6 amd64 0:3.20230808.0ubuntu0.16.04.1+tuxcare.els1 amd64 0:1.0.2g-1ubuntu4.21+tuxcare.els8 0:1.0.2g-1ubuntu4.21+tuxcare.els8 amd64 2:1.22.0-15ubuntu1.4+tuxcare.els4 2:1.22.0-15ubuntu1.4+tuxcare.els4 amd64 0:3.20230808.1ubuntu0.16.04.2+tuxcare.els1 amd64 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els8 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els8 amd64 0:8u372-ga-0ubuntu1~16.04+tuxcare.els2 0:8u372-ga-0ubuntu1~16.04+tuxcare.els2 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els8 amd64 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els8 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els10 amd64 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els10 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els44 3:7.4.1689-3ubuntu1.5+tuxcare.els44 amd64 0:9.5.25-0ubuntu0.16.04.1+tuxcare.els5 0:9.5.25-0ubuntu0.16.04.1+tuxcare.els5 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els46 3:7.4.1689-3ubuntu1.5+tuxcare.els46 amd64 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els9 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els9 amd64 0:1.5.0-2ubuntu0.1+tuxcare.els1 amd64 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els10 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els10 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 8:6.8.9.9-7ubuntu5.17+tuxcare.els9 amd64 0:1.4.25-2ubuntu1.5+tuxcare.els1 amd64 0:0.4.4-1+tuxcare.els1 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els11 amd64 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els11 amd64 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els6 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els6 amd64 0:7.47.0-1ubuntu2.23+tuxcare.els10 0:7.47.0-1ubuntu2.23+tuxcare.els10 0:4.86.2-2ubuntu2.6+tuxcare.els4 amd64 0:4.86.2-2ubuntu2.6+tuxcare.els4 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els9 amd64 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els9 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els12 amd64 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els12 amd64 0:2.1.3-4ubuntu0.11+tuxcare.els4 0:2.1.3-4ubuntu0.11+tuxcare.els4 amd64 0:2.48.2-0ubuntu4.8+tuxcare.els2 0:2.48.2-0ubuntu4.8+tuxcare.els2 0:1.10.3-0ubuntu0.16.04.8+tuxcare.els4 amd64 0:1.10.3-0ubuntu0.16.04.8+tuxcare.els4 amd64 0:0.99.24.1-2ubuntu1.4+tuxcare.els1 0:0.99.24.1-2ubuntu1.4+tuxcare.els1 amd64 1:1.2.8.dfsg-2ubuntu4.3+tuxcare.els3 amd64 0:1.10.6-1ubuntu3.6+tuxcare.els2 0:1.10.6-1ubuntu3.6+tuxcare.els2 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els47 3:7.4.1689-3ubuntu1.5+tuxcare.els47 amd64 1:2.4.18-2ubuntu3.17+tuxcare.els12 1:2.4.18-2ubuntu3.17+tuxcare.els12 amd64 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els12 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els12 amd64 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els11 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els11 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els48 3:7.4.1689-3ubuntu1.5+tuxcare.els48 amd64 0:2.1.3-4ubuntu0.11+tuxcare.els5 0:2.1.3-4ubuntu0.11+tuxcare.els5 amd64 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els7 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els7 0:4.86.2-2ubuntu2.6+tuxcare.els5 amd64 0:4.86.2-2ubuntu2.6+tuxcare.els5 amd64 0:1.13.2+dfsg-5ubuntu2.2+tuxcare.els3 0:1.13.2+dfsg-5ubuntu2.2+tuxcare.els3 amd64 0:3.5.12-1ubuntu7.17+tuxcare.els3 0:3.5.12-1ubuntu7.17+tuxcare.els3 amd64 0:8u382-ga-0ubuntu1~16.04+tuxcare.els1 0:8u382-ga-0ubuntu1~16.04+tuxcare.els1 amd64 0:1.0.2g-1ubuntu4.21+tuxcare.els9 0:1.0.2g-1ubuntu4.21+tuxcare.els9 amd64 2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els6 2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els6 0:1.157.23+tuxcare.els1 amd64 0:1.3.3-1ubuntu0.16.04.1+tuxcare.els1 amd64 2:3.3.10-4ubuntu2.5+tuxcare.els1 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els10 amd64 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els10 amd64 0:3.20231114.0ubuntu0.16.04.1+tuxcare.els1 amd64 0:3.5.12-1ubuntu7.17+tuxcare.els4 0:3.5.12-1ubuntu7.17+tuxcare.els4 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els11 amd64 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els11 amd64 0:5.7.44-0ubuntu0.16.04.1+tuxcare.els1 0:5.7.44-0ubuntu0.16.04.1+tuxcare.els1 amd64 0:1.6.3-1ubuntu0.3+tuxcare.els1 0:1.6.3-1ubuntu0.3+tuxcare.els1 amd64 0:3.5.12-1ubuntu7.17+tuxcare.els5 0:3.5.12-1ubuntu7.17+tuxcare.els5 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els13 amd64 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els13 amd64 2:7.2p2-4ubuntu2.10+tuxcare.els4 2:7.2p2-4ubuntu2.10+tuxcare.els4 amd64 0:8u392-ga-0ubuntu1~16.04+tuxcare.els1 0:8u392-ga-0ubuntu1~16.04+tuxcare.els1 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els49 3:7.4.1689-3ubuntu1.5+tuxcare.els49 amd64 0:3.5.12-1ubuntu7.17+tuxcare.els6 0:3.5.12-1ubuntu7.17+tuxcare.els6 amd64 0:1.28-2.1ubuntu0.2+tuxcare.els2 amd64 2:7.2p2-4ubuntu2.10+tuxcare.els5 2:7.2p2-4ubuntu2.10+tuxcare.els5 amd64 0:9.5.25-0ubuntu0.16.04.1+tuxcare.els6 0:9.5.25-0ubuntu0.16.04.1+tuxcare.els6 amd64 0:2.9.3+dfsg1-1ubuntu0.7+tuxcare.els7 0:2.9.3+dfsg1-1ubuntu0.7+tuxcare.els7 amd64 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els7 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els7 0:4.86.2-2ubuntu2.6+tuxcare.els6 amd64 0:4.86.2-2ubuntu2.6+tuxcare.els6 0:2.23-0ubuntu11.5+tuxcare.els6 amd64 0:2.23-0ubuntu11.5+tuxcare.els6 amd64 0:0.6.3-4.3ubuntu0.6+tuxcare.els1 0:0.6.3-4.3ubuntu0.6+tuxcare.els1 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els10 8:6.8.9.9-7ubuntu5.17+tuxcare.els10 amd64 0:1.0.2g-1ubuntu4.21+tuxcare.els10 0:1.0.2g-1ubuntu4.21+tuxcare.els10 amd64 0:3.5.12-1ubuntu7.17+tuxcare.els7 0:3.5.12-1ubuntu7.17+tuxcare.els7 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els50 3:7.4.1689-3ubuntu1.5+tuxcare.els50 amd64 0:7.47.0-1ubuntu2.23+tuxcare.els11 0:7.47.0-1ubuntu2.23+tuxcare.els11 amd64 0:1.0.2g-1ubuntu4.21+tuxcare.els11 0:1.0.2g-1ubuntu4.21+tuxcare.els11 amd64 0:9.5.25-0ubuntu0.16.04.1+tuxcare.els7 0:9.5.25-0ubuntu0.16.04.1+tuxcare.els7 amd64 0:1.1.8-3.2ubuntu2.3+tuxcare.els2 0:1.1.8-3.2ubuntu2.3+tuxcare.els2 amd64 0:7.47.0-1ubuntu2.23+tuxcare.els12 0:7.47.0-1ubuntu2.23+tuxcare.els12 amd64 0:2.3.1-4.1+tuxcare.els2 amd64 0:481-2.1ubuntu0.2+tuxcare.els1 amd64 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els8 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els8 amd64 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els9 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els9 amd64 0:481-2.1ubuntu0.2+tuxcare.els2 amd64 0:3.5.12-1ubuntu7.17+tuxcare.els8 0:3.5.12-1ubuntu7.17+tuxcare.els8 0:2.23-0ubuntu11.5+tuxcare.els7 amd64 0:2.23-0ubuntu11.5+tuxcare.els7 amd64 2:3.3.10-4ubuntu2.5+tuxcare.els2 amd64 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els10 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els10 0:2.23-0ubuntu11.5+tuxcare.els8 amd64 0:2.23-0ubuntu11.5+tuxcare.els8 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els12 amd64 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els12 amd64 0:7.11.1-0ubuntu1~16.5+tuxcare.els1 0:7.11.1-0ubuntu1~16.5+tuxcare.els1 amd64 0:3.20240514.0ubuntu0.16.04.1+tuxcare.els1 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els13 amd64 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els13 amd64 0:1.17.1-1ubuntu1.5+tuxcare.els1 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els14 amd64 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els14 0:8.0.32-1ubuntu1.13+tuxcare.els1 amd64 1:2.4.18-2ubuntu3.17+tuxcare.els15 1:2.4.18-2ubuntu3.17+tuxcare.els15 amd64 0:3.5.12-1ubuntu7.17+tuxcare.els9 0:3.5.12-1ubuntu7.17+tuxcare.els9 amd64 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els8 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els8 amd64 1:2.7.4-0ubuntu1.10+tuxcare.els4 1:2.7.4-0ubuntu1.10+tuxcare.els4 amd64 0:7.47.0-1ubuntu2.23+tuxcare.els13 0:7.47.0-1ubuntu2.23+tuxcare.els13 amd64 0:2.1.0-7ubuntu0.16.04.5+tuxcare.els5 amd64 0:1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 0:1.13.2+dfsg-5ubuntu2.2+tuxcare.els4 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els14 amd64 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els14 amd64 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els9 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els9 amd64 0:9.5.25-0ubuntu0.16.04.1+tuxcare.els8 0:9.5.25-0ubuntu0.16.04.1+tuxcare.els8 amd64 0:3.20240811.1ubuntu0.16.04.2+tuxcare.els1 amd64 0:3.20240813.0ubuntu0.16.04.1+tuxcare.els1 amd64 0:3.20240910.0ubuntu0.16.04.1+tuxcare.els1 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els51 3:7.4.1689-3ubuntu1.5+tuxcare.els51 amd64 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els11 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els11 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els15 amd64 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els15 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els15 amd64 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els15 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els52 3:7.4.1689-3ubuntu1.5+tuxcare.els52 amd64 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els12 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els12 0:1.10.3-0ubuntu0.16.04.8+tuxcare.els5 amd64 0:1.10.3-0ubuntu0.16.04.8+tuxcare.els5 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els11 8:6.8.9.9-7ubuntu5.17+tuxcare.els11 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els12 8:6.8.9.9-7ubuntu5.17+tuxcare.els12 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els13 8:6.8.9.9-7ubuntu5.17+tuxcare.els13 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els14 8:6.8.9.9-7ubuntu5.17+tuxcare.els14 amd64 1:2.7.4-0ubuntu1.10+tuxcare.els5 1:2.7.4-0ubuntu1.10+tuxcare.els5 amd64 1:2.7.4-0ubuntu1.10+tuxcare.els6 1:2.7.4-0ubuntu1.10+tuxcare.els6 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els15 8:6.8.9.9-7ubuntu5.17+tuxcare.els15 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els16 8:6.8.9.9-7ubuntu5.17+tuxcare.els16 amd64 1:2.7.4-0ubuntu1.10+tuxcare.els7 1:2.7.4-0ubuntu1.10+tuxcare.els7 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els17 8:6.8.9.9-7ubuntu5.17+tuxcare.els17 amd64 0:2.48.2-0ubuntu4.8+tuxcare.els3 0:2.48.2-0ubuntu4.8+tuxcare.els3 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els18 8:6.8.9.9-7ubuntu5.17+tuxcare.els18 amd64 0:8u432-ga-0ubuntu1~16.04+tuxcare.els1 0:8u432-ga-0ubuntu1~16.04+tuxcare.els1 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els20 8:6.8.9.9-7ubuntu5.17+tuxcare.els20 amd64 0:3.5.12-1ubuntu7.17+tuxcare.els10 0:3.5.12-1ubuntu7.17+tuxcare.els10 amd64 0:1.6.3-1ubuntu0.3+tuxcare.els2 0:1.6.3-1ubuntu0.3+tuxcare.els2 0:2.6-1+tuxcare.els1 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els16 amd64 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els16 amd64 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els13 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els13 0:1.157.23+tuxcare.els2 amd64 0:2.1.0-7ubuntu0.16.04.5+tuxcare.els6 amd64 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els14 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els14 amd64 0:3.20241112.0ubuntu0.16.04.1+tuxcare.els1 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els53 3:7.4.1689-3ubuntu1.5+tuxcare.els53 amd64 0:3.1.1-3ubuntu1.3+tuxcare.els5 amd64 0:3.1.1-3ubuntu1.3+tuxcare.els6 amd64 0:3.1.1-3ubuntu1.3+tuxcare.els7 amd64 0:1.13.2+dfsg-5ubuntu2.2+tuxcare.els5 0:1.13.2+dfsg-5ubuntu2.2+tuxcare.els5 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els16 amd64 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els16 0:2.23-0ubuntu11.5+tuxcare.els9 amd64 0:2.23-0ubuntu11.5+tuxcare.els9 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17 amd64 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els17 amd64 0:2.1.3-4ubuntu0.11+tuxcare.els6 0:2.1.3-4ubuntu0.11+tuxcare.els6 amd64 0:3.20250211.0ubuntu0.16.04.1+tuxcare.els1 amd64 0:2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8 0:2.9.3+dfsg1-1ubuntu0.7+tuxcare.els8 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els19 amd64 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els19 amd64 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els13 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els13 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els18 amd64 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els18 amd64 0:9.5.25-0ubuntu0.16.04.1+tuxcare.els9 0:9.5.25-0ubuntu0.16.04.1+tuxcare.els9 amd64 2:7.2p2-4ubuntu2.10+tuxcare.els7 2:7.2p2-4ubuntu2.10+tuxcare.els7 amd64 0:2.3.10-1ubuntu2.2+tuxcare.els2 0:2.1.1.0-1~ubuntu16.04.1+tuxcare.els1 0:2.1.1.0-1~ubuntu16.04.1+tuxcare.els2 0:2.1.1.0-1~ubuntu16.04.1+tuxcare.els4 amd64 0:2.3.10-1ubuntu2.2+tuxcare.els3 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els20 amd64 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els20 0:2.1.1.0-1~ubuntu16.04.1+tuxcare.els5 amd64 0:9.5.25-0ubuntu0.16.04.1+tuxcare.els10 0:9.5.25-0ubuntu0.16.04.1+tuxcare.els10 amd64 0:9.5.25-0ubuntu0.16.04.1+tuxcare.els12 0:9.5.25-0ubuntu0.16.04.1+tuxcare.els12 0:2.1.1.0-1~ubuntu16.04.1+tuxcare.els8 amd64 0:2.9.3+dfsg1-1ubuntu0.7+tuxcare.els9 0:2.9.3+dfsg1-1ubuntu0.7+tuxcare.els9 0:2.1.1.0-1~ubuntu16.04.1+tuxcare.els11 0:2.1.1.0-1~ubuntu16.04.1+tuxcare.els12 amd64 0:8u452-ga-0ubuntu1~16.04+tuxcare.els1 0:8u452-ga-0ubuntu1~16.04+tuxcare.els1 amd64 1:2.7.4-0ubuntu1.10+tuxcare.els8 1:2.7.4-0ubuntu1.10+tuxcare.els8 amd64 0:2.9.3+dfsg1-1ubuntu0.7+tuxcare.els10 0:2.9.3+dfsg1-1ubuntu0.7+tuxcare.els10 amd64 0:1.8.16-0ubuntu1.11+tuxcare.els3 amd64 0:3.11.0-1ubuntu1.5+tuxcare.els4 0:3.11.0-1ubuntu1.5+tuxcare.els4 amd64 0:3.20250512.0ubuntu0.16.04.1+tuxcare.els1 amd64 1:2.7.4-0ubuntu1.10+tuxcare.els9 1:2.7.4-0ubuntu1.10+tuxcare.els9 amd64 1:2.7.4-0ubuntu1.10+tuxcare.els10 1:2.7.4-0ubuntu1.10+tuxcare.els10 amd64 0:1.9.3-2ubuntu1.3+tuxcare.els2 0:1.9.3-2ubuntu1.3+tuxcare.els2 amd64 0:8u462-ga-0ubuntu1~16.04+tuxcare.els1 0:8u462-ga-0ubuntu1~16.04+tuxcare.els1 amd64 0:1.13.2+dfsg-5ubuntu2.2+tuxcare.els6 0:1.13.2+dfsg-5ubuntu2.2+tuxcare.els6 amd64 0:3.11.0-1ubuntu1.5+tuxcare.els5 0:3.11.0-1ubuntu1.5+tuxcare.els5 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els54 3:7.4.1689-3ubuntu1.5+tuxcare.els54 amd64 1:2.4.18-2ubuntu3.17+tuxcare.els18 1:2.4.18-2ubuntu3.17+tuxcare.els18 amd64 0:2.9.3+dfsg1-1ubuntu0.7+tuxcare.els11 0:2.9.3+dfsg1-1ubuntu0.7+tuxcare.els11 amd64 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els14 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els14 amd64 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els15 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els15 amd64 0:3.5.12-1ubuntu7.17+tuxcare.els11 0:3.5.12-1ubuntu7.17+tuxcare.els11 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els21 8:6.8.9.9-7ubuntu5.17+tuxcare.els21 amd64 1:2.4.18-2ubuntu3.17+tuxcare.els16 1:2.4.18-2ubuntu3.17+tuxcare.els16 amd64 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els16 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els16 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els21 amd64 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els21 amd64 0:3.0-2ubuntu0.2+tuxcare.els1 amd64 0:2.9.3+dfsg1-1ubuntu0.7+tuxcare.els12 0:2.9.3+dfsg1-1ubuntu0.7+tuxcare.els12 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els22 8:6.8.9.9-7ubuntu5.17+tuxcare.els22 amd64 0:0.6.3-4.3ubuntu0.6+tuxcare.els2 0:0.6.3-4.3ubuntu0.6+tuxcare.els2 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els23 8:6.8.9.9-7ubuntu5.17+tuxcare.els23 amd64 2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els7 2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els7 amd64 0:3.4.10-4ubuntu1.9+tuxcare.els1 0:3.4.10-4ubuntu1.9+tuxcare.els1 amd64 0:2.1.3-4ubuntu0.11+tuxcare.els8 0:2.1.3-4ubuntu0.11+tuxcare.els8 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els24 8:6.8.9.9-7ubuntu5.17+tuxcare.els24 amd64 0:2.1.3-4ubuntu0.11+tuxcare.els9 0:2.1.3-4ubuntu0.11+tuxcare.els9 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els25 8:6.8.9.9-7ubuntu5.17+tuxcare.els25 amd64 0:1.1.8-3.2ubuntu2.3+tuxcare.els3 0:1.1.8-3.2ubuntu2.3+tuxcare.els3 amd64 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els17 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els17 amd64 0:2.9.3+dfsg1-1ubuntu0.7+tuxcare.els13 0:2.9.3+dfsg1-1ubuntu0.7+tuxcare.els13 amd64 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els15 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els15 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els28 8:6.8.9.9-7ubuntu5.17+tuxcare.els28 amd64 2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els8 2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els8 amd64 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els16 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els16 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els55 3:7.4.1689-3ubuntu1.5+tuxcare.els55 amd64 0:3.5.12-1ubuntu7.17+tuxcare.els12 0:3.5.12-1ubuntu7.17+tuxcare.els12 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els29 8:6.8.9.9-7ubuntu5.17+tuxcare.els29 0:2.6-1+tuxcare.els2 amd64 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els17 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els17 amd64 0:8u472-ga-0ubuntu1~16.04+tuxcare.els1 0:8u472-ga-0ubuntu1~16.04+tuxcare.els1 amd64 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els18 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els18 amd64 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els19 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els19 amd64 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els19 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els19 amd64 0:2.1.3-4ubuntu0.11+tuxcare.els10 0:2.1.3-4ubuntu0.11+tuxcare.els10 amd64 1:2.7.4-0ubuntu1.10+tuxcare.els11 1:2.7.4-0ubuntu1.10+tuxcare.els11 amd64 0:2.1.11-6ubuntu2.1+tuxcare.els2 amd64 1:2.7.4-0ubuntu1.10+tuxcare.els12 1:2.7.4-0ubuntu1.10+tuxcare.els12 amd64 0:1.0.2g-1ubuntu4.21+tuxcare.els12 0:1.0.2g-1ubuntu4.21+tuxcare.els12 amd64 0:2.1.0-7ubuntu0.16.04.5+tuxcare.els7 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 8:6.8.9.9-7ubuntu5.17+tuxcare.els30 amd64 0:1.0.2g-1ubuntu4.21+tuxcare.els13 0:1.0.2g-1ubuntu4.21+tuxcare.els13 amd64 0:1.4.20-1ubuntu3.3+tuxcare.els2 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els31 8:6.8.9.9-7ubuntu5.17+tuxcare.els31 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els22 amd64 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els22 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els23 amd64 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els23 amd64 0:8u482-ga~us1-0ubuntu1~16.04+tuxcare.els1 0:8u482-ga~us1-0ubuntu1~16.04+tuxcare.els1 amd64 0:2.48.2-0ubuntu4.8+tuxcare.els5 0:2.48.2-0ubuntu4.8+tuxcare.els5 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els32 8:6.8.9.9-7ubuntu5.17+tuxcare.els32 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els58 3:7.4.1689-3ubuntu1.5+tuxcare.els58 amd64 2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els9 2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els9 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els33 8:6.8.9.9-7ubuntu5.17+tuxcare.els33 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els34 8:6.8.9.9-7ubuntu5.17+tuxcare.els34 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els35 8:6.8.9.9-7ubuntu5.17+tuxcare.els35 amd64 0:0.6.3-4.3ubuntu0.6+tuxcare.els3 0:0.6.3-4.3ubuntu0.6+tuxcare.els3 amd64 0:2.1.0-7ubuntu0.16.04.5+tuxcare.els8 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els38 8:6.8.9.9-7ubuntu5.17+tuxcare.els38 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els39 8:6.8.9.9-7ubuntu5.17+tuxcare.els39 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els61 3:7.4.1689-3ubuntu1.5+tuxcare.els61 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els40 8:6.8.9.9-7ubuntu5.17+tuxcare.els40 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els41 8:6.8.9.9-7ubuntu5.17+tuxcare.els41 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els42 8:6.8.9.9-7ubuntu5.17+tuxcare.els42 amd64 0:3.5.12-1ubuntu7.17+tuxcare.els13 0:3.5.12-1ubuntu7.17+tuxcare.els13 amd64 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els20 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els20 amd64 0:0.6.3-4.3ubuntu0.6+tuxcare.els4 0:0.6.3-4.3ubuntu0.6+tuxcare.els4 amd64 0:7.11.1-0ubuntu1~16.5+tuxcare.els2 0:7.11.1-0ubuntu1~16.5+tuxcare.els2 amd64 0:1.5.0-2ubuntu0.1+tuxcare.els3 amd64 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els20 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els20 amd64 0:1.5.0-2ubuntu0.1+tuxcare.els4 amd64 0:2.1.3-4ubuntu0.11+tuxcare.els11 0:2.1.3-4ubuntu0.11+tuxcare.els11 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els62 3:7.4.1689-3ubuntu1.5+tuxcare.els62 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els43 8:6.8.9.9-7ubuntu5.17+tuxcare.els43 amd64 0:1.0.2g-1ubuntu4.21+tuxcare.els14 0:1.0.2g-1ubuntu4.21+tuxcare.els14 0:7.0.68-1ubuntu0.4+tuxcare.els7 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els45 8:6.8.9.9-7ubuntu5.17+tuxcare.els45 amd64 2:7.2p2-4ubuntu2.10+tuxcare.els8 2:7.2p2-4ubuntu2.10+tuxcare.els8 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els24 amd64 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els24 amd64 0:3.7.6-1ubuntu1+tuxcare.els2 amd64 2:7.2p2-4ubuntu2.10+tuxcare.els9 2:7.2p2-4ubuntu2.10+tuxcare.els9 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els63 3:7.4.1689-3ubuntu1.5+tuxcare.els63 0:7.0.68-1ubuntu0.4+tuxcare.els3 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els17 amd64 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els17 amd64 2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els10 2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els10 amd64 0:0.6.3-4.3ubuntu0.6+tuxcare.els5 0:0.6.3-4.3ubuntu0.6+tuxcare.els5 0:4.86.2-2ubuntu2.6+tuxcare.els8 amd64 0:4.86.2-2ubuntu2.6+tuxcare.els8 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els46 8:6.8.9.9-7ubuntu5.17+tuxcare.els46 amd64 1:2.24-12+tuxcare.els2 amd64 0:1.5.0-2ubuntu0.1+tuxcare.els5 amd64 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els21 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els21 amd64 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els22 0:7.0.33-0ubuntu0.16.04.17+tuxcare.els22 amd64 0:1.0.2g-1ubuntu4.21+tuxcare.els15 0:1.0.2g-1ubuntu4.21+tuxcare.els15 amd64 1:2.4.18-2ubuntu3.17+tuxcare.els19 1:2.4.18-2ubuntu3.17+tuxcare.els19 0:1.10.3-0ubuntu0.16.04.8+tuxcare.els6 amd64 0:1.10.3-0ubuntu0.16.04.8+tuxcare.els6 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els47 8:6.8.9.9-7ubuntu5.17+tuxcare.els47 amd64 0:2.1.0-7ubuntu0.16.04.5+tuxcare.els9 amd64 0:3.4.10-4ubuntu1.9+tuxcare.els2 0:3.4.10-4ubuntu1.9+tuxcare.els2 amd64 0:7.47.0-1ubuntu2.23+tuxcare.els14 0:7.47.0-1ubuntu2.23+tuxcare.els14 amd64 0:3.1.1-3ubuntu1.3+tuxcare.els8 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els64 3:7.4.1689-3ubuntu1.5+tuxcare.els64 amd64 0:3.1.1-3ubuntu1.3+tuxcare.els9 0:1.10.3-0ubuntu0.16.04.8+tuxcare.els7 amd64 0:1.10.3-0ubuntu0.16.04.8+tuxcare.els7 amd64 0:9.5.25-0ubuntu0.16.04.1+tuxcare.els13 0:9.5.25-0ubuntu0.16.04.1+tuxcare.els13 0:7.0.68-1ubuntu0.4+tuxcare.els8 amd64 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10 2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els10 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els65 3:7.4.1689-3ubuntu1.5+tuxcare.els65 amd64 0:3.1.1-3ubuntu1.3+tuxcare.els10 amd64 0:5.22.1-9ubuntu0.9+tuxcare.els4 0:5.22.1-9ubuntu0.9+tuxcare.els4 amd64 0:2.1.0-7ubuntu0.16.04.5+tuxcare.els10 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els18 amd64 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els18 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els25 amd64 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els25 0:1.10.3-0ubuntu0.16.04.8+tuxcare.els8 amd64 0:1.10.3-0ubuntu0.16.04.8+tuxcare.els8 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els66 3:7.4.1689-3ubuntu1.5+tuxcare.els66 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26 amd64 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els26 amd64 0:1.0.2g-1ubuntu4.21+tuxcare.els16 0:1.0.2g-1ubuntu4.21+tuxcare.els16 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els67 3:7.4.1689-3ubuntu1.5+tuxcare.els67 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els19 amd64 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els19 amd64 0:1.8.16-0ubuntu1.11+tuxcare.els4 amd64 2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els11 2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els11 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els68 3:7.4.1689-3ubuntu1.5+tuxcare.els68 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els48 8:6.8.9.9-7ubuntu5.17+tuxcare.els48 amd64 1:2.4.18-2ubuntu3.17+tuxcare.els20 1:2.4.18-2ubuntu3.17+tuxcare.els20 amd64 1:2.4.18-2ubuntu3.17+tuxcare.els21 1:2.4.18-2ubuntu3.17+tuxcare.els21 0:1.10.3-0ubuntu0.16.04.8+tuxcare.els9 amd64 0:1.10.3-0ubuntu0.16.04.8+tuxcare.els9 amd64 1:2.4.18-2ubuntu3.17+tuxcare.els22 1:2.4.18-2ubuntu3.17+tuxcare.els22 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els69 3:7.4.1689-3ubuntu1.5+tuxcare.els69 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els49 8:6.8.9.9-7ubuntu5.17+tuxcare.els49 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els70 3:7.4.1689-3ubuntu1.5+tuxcare.els70 0:8.0.32-1ubuntu1.13+tuxcare.els2 amd64 0:2.9.3+dfsg1-1ubuntu0.7+tuxcare.els14 0:2.9.3+dfsg1-1ubuntu0.7+tuxcare.els14 amd64 0:2.48.2-0ubuntu4.8+tuxcare.els6 0:2.48.2-0ubuntu4.8+tuxcare.els6 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els50 8:6.8.9.9-7ubuntu5.17+tuxcare.els50 amd64 0:7.47.0-1ubuntu2.23+tuxcare.els15 0:7.47.0-1ubuntu2.23+tuxcare.els15 amd64 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els21 0:2.26.1-1ubuntu1~16.04.10+tuxcare.els21 0:8.0.32-1ubuntu1.13+tuxcare.els3 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els52 8:6.8.9.9-7ubuntu5.17+tuxcare.els52 amd64 0:8u492-ga~us2-0ubuntu1~16.04+tuxcare.els1 0:8u492-ga~us2-0ubuntu1~16.04+tuxcare.els1 amd64 0:1.6-4ubuntu1+tuxcare.els2 amd64 0:2.48.2-0ubuntu4.8+tuxcare.els7 0:2.48.2-0ubuntu4.8+tuxcare.els7 0:7.0.68-1ubuntu0.4+tuxcare.els9 amd64 0:7.47.0-1ubuntu2.23+tuxcare.els16 0:7.47.0-1ubuntu2.23+tuxcare.els16 amd64 0:3.4.10-4ubuntu1.9+tuxcare.els3 0:3.4.10-4ubuntu1.9+tuxcare.els3 amd64 1:2.4.18-2ubuntu3.17+tuxcare.els23 1:2.4.18-2ubuntu3.17+tuxcare.els23 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els53 8:6.8.9.9-7ubuntu5.17+tuxcare.els53 amd64 0:1.5.0-2ubuntu0.1+tuxcare.els6 amd64 0:1.17.1-1ubuntu1.5+tuxcare.els2 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els54 8:6.8.9.9-7ubuntu5.17+tuxcare.els54 amd64 8:6.8.9.9-7ubuntu5.17+tuxcare.els55 8:6.8.9.9-7ubuntu5.17+tuxcare.els55 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els27 amd64 1:3.5.2-2ubuntu0~16.04.13+tuxcare.els27 amd64 0:3.4.10-4ubuntu1.9+tuxcare.els4 0:3.4.10-4ubuntu1.9+tuxcare.els4 amd64 0:5.22.1-9ubuntu0.9+tuxcare.els5 0:5.22.1-9ubuntu0.9+tuxcare.els5 0:1.10.3-0ubuntu0.16.04.8+tuxcare.els10 amd64 0:1.10.3-0ubuntu0.16.04.8+tuxcare.els10 ^4\.4\.0\- (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[4-9]\d|23[6-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-236.270 0:4.4.0-236.270 amd64 0:4.4.0.236.270 0:4.4.0.236.270 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[4-9]\d|23[8-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-238.272 0:4.4.0-238.272 amd64 0:4.4.0.238.272 0:4.4.0.238.272 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[5-9]\d|24[0-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-240.274 0:4.4.0-240.274 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[5-9]\d|24[1-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-241.275 0:4.4.0-241.275 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[5-9]\d|24[2-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-242.276 0:4.4.0-242.276 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[5-9]\d|24[3-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-243.277 0:4.4.0-243.277 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[5-9]\d|24[4-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-244.278 0:4.4.0-244.278 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[5-9]\d|24[5-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-245.279 0:4.4.0-245.279 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[5-9]\d|24[6-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-246.280 0:4.4.0-246.280 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[5-9]\d|24[7-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-247.281 0:4.4.0-247.281 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[5-9]\d|24[8-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-248.282 0:4.4.0-248.282 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[5-9]\d|249)(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-249.283 0:4.4.0-249.283 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[6-9]\d|25[0-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-250.284 0:4.4.0-250.284 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[6-9]\d|25[1-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-251.285 0:4.4.0-251.285 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[6-9]\d|25[3-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-253.287 0:4.4.0-253.287 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[6-9]\d|25[4-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-254.288 0:4.4.0-254.288 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[6-9]\d|25[5-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-255.289 0:4.4.0-255.289 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[6-9]\d|25[6-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-256.290 0:4.4.0-256.290 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[6-9]\d|25[7-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-257.291 0:4.4.0-257.291 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[6-9]\d|25[8-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-258.292 0:4.4.0-258.292 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[6-9]\d|259)(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-259.293 0:4.4.0-259.293 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[7-9]\d|26[0-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-260.294 0:4.4.0-260.294 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[7-9]\d|26[1-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-261.295 0:4.4.0-261.295 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[7-9]\d|26[2-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-262.296 0:4.4.0-262.296 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[7-9]\d|26[3-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-263.297 0:4.4.0-263.297 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[7-9]\d|26[4-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-264.298 0:4.4.0-264.298 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[7-9]\d|26[5-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-265.299 0:4.4.0-265.299 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[7-9]\d|26[6-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-266.300 0:4.4.0-266.300 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[7-9]\d|26[7-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-267.301 0:4.4.0-267.301 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[7-9]\d|26[8-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-268.302 0:4.4.0-268.302 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[7-9]\d|269)(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-269.303 0:4.4.0-269.303 amd64 0:4.4.0.269.303 0:4.4.0.269.303 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[8-9]\d|27[0-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-270.304 0:4.4.0-270.304 amd64 0:4.4.0.270.304 0:4.4.0.270.304 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[8-9]\d|27[1-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-271.305 0:4.4.0-271.305 amd64 0:4.4.0.271.305 0:4.4.0.271.305 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[8-9]\d|27[2-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-272.306 0:4.4.0-272.306 amd64 0:4.4.0.272.306 0:4.4.0.272.306 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[8-9]\d|27[3-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-273.307 0:4.4.0-273.307 amd64 0:4.4.0.273.307 0:4.4.0.273.307 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[8-9]\d|27[4-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-274.308 0:4.4.0-274.308 amd64 0:4.4.0.274.308 0:4.4.0.274.308 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[8-9]\d|27[5-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-275.309 0:4.4.0-275.309 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[8-9]\d|27[6-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-276.310 0:4.4.0-276.310 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[8-9]\d|27[7-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-277.311 0:4.4.0-277.311 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[8-9]\d|27[8-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-278.312 0:4.4.0-278.312 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|2[8-9]\d|279)(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-279.313 0:4.4.0-279.313 amd64 0:4.4.0.279.313 0:4.4.0.279.313 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|29\d|28[0-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-280.314 0:4.4.0-280.314 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|29\d|28[1-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-281.315 0:4.4.0-281.315 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|29\d|28[2-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-282.316+tuxcare.els1 0:4.4.0-282.316+tuxcare.els1 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|29\d|28[3-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-283.317+tuxcare.els1 0:4.4.0-283.317+tuxcare.els1 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|29\d|28[4-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-284.318+tuxcare.els1 0:4.4.0-284.318+tuxcare.els1 (^4\.4\.0\-(?:\d{4,}|[3-9]\d{2}|29\d|28[5-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.4.0-285.319+tuxcare.els1 0:4.4.0-285.319+tuxcare.els1 ^4\.15\.0\- (^4\.15\.0\-(?:\d{4,}|[2-9]\d{2}|19[2-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-192.203~16.04.1 0:4.15.0-192.203~16.04.1 (^4\.15\.0\-(?:\d{4,}|[2-9]\d{2}|19[4-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-194.205~16.04.1 0:4.15.0-194.205~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[1-9]\d|20[0-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-200.211~16.04.1 amd64 0:4.15.0.200.140 0:4.15.0-200.211~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[1-9]\d|20[6-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-206.217~16.04.1 amd64 0:4.15.0.206.142 0:4.15.0-206.217~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[1-9]\d|20[8-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-208.219~16.04.1 0:4.15.0-208.219~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[1-9]\d|209)(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-209.220~16.04.1 0:4.15.0-209.220~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[2-9]\d|21[0-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-210.221~16.04.1 0:4.15.0-210.221~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[2-9]\d|21[1-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-211.222~16.04.1 0:4.15.0-211.222~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[2-9]\d|21[2-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-212.223~16.04.1 0:4.15.0-212.223~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[2-9]\d|21[4-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-214.225~16.04.1 0:4.15.0-214.225~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[2-9]\d|21[5-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-215.226~16.04.1 0:4.15.0-215.226~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[2-9]\d|21[6-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-216.227~16.04.1 0:4.15.0-216.227~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[2-9]\d|21[7-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-217.228~16.04.1 0:4.15.0-217.228~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[2-9]\d|21[8-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-218.229~16.04.1 0:4.15.0-218.229~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[2-9]\d|219)(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-219.230~16.04.1 0:4.15.0-219.230~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[3-9]\d|22[0-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-220.231~16.04.1 0:4.15.0-220.231~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[3-9]\d|22[1-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-221.232~16.04.1 0:4.15.0-221.232~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[3-9]\d|22[2-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-222.233~16.04.1 0:4.15.0-222.233~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[3-9]\d|22[3-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-223.234~16.04.1 0:4.15.0-223.234~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[3-9]\d|22[4-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-224.235~16.04.1 0:4.15.0-224.235~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[3-9]\d|22[5-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-225.236~16.04.1 0:4.15.0-225.236~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[3-9]\d|22[6-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-226.237~16.04.1 0:4.15.0-226.237~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[3-9]\d|22[7-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-227.238~16.04.1 0:4.15.0-227.238~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[3-9]\d|22[8-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-228.239~16.04.1 0:4.15.0-228.239~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[3-9]\d|229)(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-229.240~16.04.1 0:4.15.0-229.240~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[4-9]\d|23[0-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-230.241~16.04.1 0:4.15.0-230.241~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[4-9]\d|23[1-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-231.242~16.04.1 0:4.15.0-231.242~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[4-9]\d|23[2-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-232.243~16.04.1 0:4.15.0-232.243~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[4-9]\d|23[3-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-233.244~16.04.1 0:4.15.0-233.244~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[4-9]\d|23[4-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-234.245~16.04.1 0:4.15.0-234.245~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[4-9]\d|23[5-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-235.246~16.04.1 0:4.15.0-235.246~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[4-9]\d|23[6-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-236.247~16.04.1 0:4.15.0-236.247~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[4-9]\d|23[7-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-237.248~16.04.1 0:4.15.0-237.248~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[4-9]\d|23[8-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-238.249~16.04.1 0:4.15.0-238.249~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[4-9]\d|239)(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-239.250~16.04.1 0:4.15.0-239.250~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[5-9]\d|24[0-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-240.251~16.04.1 0:4.15.0-240.251~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[5-9]\d|24[1-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-241.252~16.04.1 amd64 0:4.15.0.241.176 0:4.15.0-241.252~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[5-9]\d|24[2-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-242.253~16.04.1 amd64 0:4.15.0.242.177 0:4.15.0-242.253~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[5-9]\d|24[3-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-243.254~16.04.1 amd64 0:4.15.0.243.178 0:4.15.0-243.254~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[5-9]\d|24[4-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-244.255~16.04.1 amd64 0:4.15.0.244.179 0:4.15.0-244.255~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[5-9]\d|24[5-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-245.256~16.04.1 0:4.15.0-245.256~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[5-9]\d|24[6-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-246.257~16.04.1 0:4.15.0-246.257~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[5-9]\d|24[7-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-247.258~16.04.1 0:4.15.0-247.258~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[5-9]\d|24[8-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-248.259~16.04.1 0:4.15.0-248.259~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[5-9]\d|249)(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-249.260~16.04.1 0:4.15.0-249.260~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[6-9]\d|25[0-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-250.261~16.04.1 0:4.15.0-250.261~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[6-9]\d|25[1-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-251.262~16.04.1 0:4.15.0-251.262~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[6-9]\d|25[2-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-252.263~16.04.1 0:4.15.0-252.263~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[6-9]\d|25[3-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-253.264~16.04.1 0:4.15.0-253.264~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[6-9]\d|25[4-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-254.265~16.04.1 0:4.15.0-254.265~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[6-9]\d|25[5-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-255.266~16.04.1 0:4.15.0-255.266~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[6-9]\d|25[6-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-256.267~16.04.1 0:4.15.0-256.267~16.04.1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[6-9]\d|25[7-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-257.268~16.04.1+tuxcare.els1 0:4.15.0-257.268~16.04.1+tuxcare.els1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[6-9]\d|25[8-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-258.269~16.04.1+tuxcare.els1 0:4.15.0-258.269~16.04.1+tuxcare.els1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[6-9]\d|259)(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-259.270~16.04.1+tuxcare.els1 0:4.15.0-259.270~16.04.1+tuxcare.els1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[7-9]\d|26[1-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-261.272~16.04.1+tuxcare.els1 0:4.15.0-261.272~16.04.1+tuxcare.els1 (^4\.15\.0\-(?:\d{4,}|[3-9]\d{2}|2[7-9]\d|26[2-9])(?:\-tuxcare\.els\d+)?\-\w*$) amd64 0:4.15.0-262.273~16.04.1+tuxcare.els1 0:4.15.0-262.273~16.04.1+tuxcare.els1 amd64 0:3.5.12-1ubuntu7.17+tuxcare.els14 0:3.5.12-1ubuntu7.17+tuxcare.els14 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els20 amd64 0:2.7.12-1ubuntu0~16.04.18+tuxcare.els20 amd64 3:7.4.1689-3ubuntu1.5+tuxcare.els71 3:7.4.1689-3ubuntu1.5+tuxcare.els71 amd64 2:7.2p2-4ubuntu2.10+tuxcare.els10 2:7.2p2-4ubuntu2.10+tuxcare.els10