-linux (5.15.0-26.27) UNRELEASED; urgency=medium
-
- CHANGELOG: Do not edit directly. Autogenerated at release.
- CHANGELOG: Use the printchanges target to see the curent changes.
- CHANGELOG: Use the insertchanges target to create the final log.
-
- -- Paolo Pisati <paolo.pisati@canonical.com> Wed, 13 Apr 2022 16:48:22 +0200
+linux (5.15.0-26.27) jammy; urgency=medium
+
+ * jammy/linux: 5.15.0-26.27 -proposed tracker (LP: #1968850)
+
+ * CVE-2022-1016
+ - netfilter: nf_tables: initialize registers in nft_do_chain()
+
+ * CVE-2022-1015
+ - netfilter: nf_tables: validate registers coming from userspace.
+
+ * CVE-2022-26490
+ - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION
+
+ * harden indirect calls against BHI attacks (LP: #1967579)
+ - objtool: Classify symbols
+ - objtool: Explicitly avoid self modifying code in .altinstr_replacement
+ - objtool: Shrink struct instruction
+ - objtool,x86: Replace alternatives with .retpoline_sites
+ - x86/retpoline: Remove unused replacement symbols
+ - x86/asm: Fix register order
+ - x86/asm: Fixup odd GEN-for-each-reg.h usage
+ - x86/retpoline: Move the retpoline thunk declarations to nospec-branch.h
+ - x86/retpoline: Create a retpoline thunk array
+ - x86/alternative: Implement .retpoline_sites support
+ - x86/alternative: Handle Jcc __x86_indirect_thunk_\reg
+ - x86/alternative: Try inline spectre_v2=retpoline,amd
+ - x86/alternative: Add debug prints to apply_retpolines()
+ - bpf,x86: Simplify computing label offsets
+ - bpf,x86: Respect X86_FEATURE_RETPOLINE*
+
+ -- Paolo Pisati <paolo.pisati@canonical.com> Wed, 13 Apr 2022 16:51:38 +0200
linux (5.15.0-25.25) jammy; urgency=medium