diff --git a/debian.master/changelog b/debian.master/changelog index 85e0ddfa0b6b5..44c1a3b7c652c 100644 --- a/debian.master/changelog +++ b/debian.master/changelog @@ -1,10 +1,34 @@ -linux (5.15.0-26.27) UNRELEASED; urgency=medium - - CHANGELOG: Do not edit directly. Autogenerated at release. - CHANGELOG: Use the printchanges target to see the curent changes. - CHANGELOG: Use the insertchanges target to create the final log. - - -- Paolo Pisati Wed, 13 Apr 2022 16:48:22 +0200 +linux (5.15.0-26.27) jammy; urgency=medium + + * jammy/linux: 5.15.0-26.27 -proposed tracker (LP: #1968850) + + * CVE-2022-1016 + - netfilter: nf_tables: initialize registers in nft_do_chain() + + * CVE-2022-1015 + - netfilter: nf_tables: validate registers coming from userspace. + + * CVE-2022-26490 + - nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION + + * harden indirect calls against BHI attacks (LP: #1967579) + - objtool: Classify symbols + - objtool: Explicitly avoid self modifying code in .altinstr_replacement + - objtool: Shrink struct instruction + - objtool,x86: Replace alternatives with .retpoline_sites + - x86/retpoline: Remove unused replacement symbols + - x86/asm: Fix register order + - x86/asm: Fixup odd GEN-for-each-reg.h usage + - x86/retpoline: Move the retpoline thunk declarations to nospec-branch.h + - x86/retpoline: Create a retpoline thunk array + - x86/alternative: Implement .retpoline_sites support + - x86/alternative: Handle Jcc __x86_indirect_thunk_\reg + - x86/alternative: Try inline spectre_v2=retpoline,amd + - x86/alternative: Add debug prints to apply_retpolines() + - bpf,x86: Simplify computing label offsets + - bpf,x86: Respect X86_FEATURE_RETPOLINE* + + -- Paolo Pisati Wed, 13 Apr 2022 16:51:38 +0200 linux (5.15.0-25.25) jammy; urgency=medium