CLSA-2023-1697744819

Dashboard / Vulnerabilities / CLSA-2023-1697744819

CLSA-2023-1697744819

Summary: Fix of 8 CVEs

Details: * CVE-url: https://ubuntu.com/security/CVE-2023-42755 - net/sched: Retire rsvp classifier * CVE-url: https://ubuntu.com/security/CVE-2023-39194 - net: xfrm: Fix xfrm_address_filter OOB read * CVE-url: https://ubuntu.com/security/CVE-2023-39192 - netfilter: xt_u32: validate user space input * CVE-url: https://ubuntu.com/security/CVE-2023-39193 - netfilter: xt_sctp: validate the flag_info count * CVE-url: https://ubuntu.com/security/CVE-2023-42754 - ipv4: fix null-deref in ipv4_link_failure * CVE-url: https://ubuntu.com/security/CVE-2023-3338 - [Config] updateconfigs for DECNET * Jammy update: v5.15.118 upstream stable release (LP: #2030239) // CVE-url: https://ubuntu.com/security/CVE-2023-3338 - Remove DECnet support from kernel * CVE-2023-1206 // CVE-url: https://ubuntu.com/security/CVE-2023-1206 - tcp: Reduce chance of collisions in inet6_hashfn(). * CVE-url: https://ubuntu.com/security/CVE-2022-45886 - media: dvb-core: Fix use-after-free on race condition at dvb_frontend - media: dvb-core: Fix use-after-free due on race condition at dvb_net * Miscellaneous Ubuntu changes - [Config] updateconfigs for NET_CLS_RSVP

References: https://errata.cloudlinux.com/ubuntu18_04-els/CLSA-2023-1697744819