{ "summary": { "snap": { "added": [], "removed": [], "diff": [] }, "deb": { "added": [ "binutils", "binutils-common:riscv64", "binutils-riscv64-linux-gnu", "bpftrace", "dracut", "dracut-core", "dracut-network", "gcc-16-base:riscv64", "libbinutils:riscv64", "libc-dev-bin", "libc6-dev:riscv64", "libclang1-21", "libctf-nobfd0:riscv64", "libctf0:riscv64", "libgpgme45:riscv64", "libgprofng0:riscv64", "libnvme1t64:riscv64", "libsframe3:riscv64", "linux-headers-7.0.0-7-generic", "linux-image-7.0.0-7-generic", "linux-libc-dev:riscv64", "linux-modules-7.0.0-7-generic", "linux-riscv-headers-7.0.0-7", "linux-riscv-tools-7.0.0-7", "linux-tools-7.0.0-7-generic", "manpages-dev", "python3.14", "python3.14-minimal", "rpcsvc-proto" ], "removed": [ "cryptsetup-initramfs", "gcc-15-base:riscv64", "initramfs-tools", "libarchive13t64:riscv64", "libgpgme11t64:riscv64", "libnvme1t64", "libprotobuf-c1:riscv64", "linux-headers-6.17.0-5-generic", "linux-image-6.17.0-5-generic", "linux-modules-6.17.0-5-generic", "linux-riscv-headers-6.17.0-5", "linux-riscv-tools-6.17.0-5", "linux-tools-6.17.0-5-generic", "python3.13-gdbm" ], "diff": [ "apparmor", "apport", "apport-core-dump-handler", "bash", "bcache-tools", "bpfcc-tools", "bpftool", "bsdextrautils", "bsdutils", "btrfs-progs", "ca-certificates", "cloud-init", "cloud-init-base", "cloud-initramfs-copymods", "cloud-initramfs-dyn-netconf", "console-setup", "console-setup-linux", "cryptsetup", "cryptsetup-bin", "curl", "dbus", "dbus-bin", "dbus-daemon", "dbus-session-bus-common", "dbus-system-bus-common", "dbus-user-session", "debconf", "debconf-i18n", "distro-info", "dpkg", "dracut-install", "e2fsprogs", "eject", "ethtool", "exfatprogs", "fdisk", "file", "fwupd", "gir1.2-girepository-3.0:riscv64", "gir1.2-glib-2.0:riscv64", "git", "git-man", "gnu-coreutils", "grub-efi-riscv64", "grub-efi-riscv64-bin", "grub-efi-riscv64-unsigned", "grub2-common", "gzip", "ibverbs-providers:riscv64", "info", "initramfs-tools-bin", "initramfs-tools-core", "install-info", "keyboard-configuration", "kpartx", "krb5-locales", "landscape-common", "libapparmor1:riscv64", "libatomic1:riscv64", "libattr1:riscv64", "libaudit-common", "libaudit1:riscv64", "libblkid1:riscv64", "libbpf1:riscv64", "libbpfcc:riscv64", "libbrotli1:riscv64", "libc-bin", "libc-gconv-modules-extra:riscv64", "libc6:riscv64", "libcap-ng0:riscv64", "libclang-cpp21", "libcom-err2:riscv64", "libcryptsetup12:riscv64", "libcurl3t64-gnutls:riscv64", "libcurl4t64:riscv64", "libdbus-1-3:riscv64", "libdebuginfod-common", "libdebuginfod1t64:riscv64", "libdw1t64:riscv64", "libelf1t64:riscv64", "libext2fs2t64:riscv64", "libfdisk1:riscv64", "libfreetype6:riscv64", "libfwupd3:riscv64", "libgcc-s1:riscv64", "libgirepository-2.0-0:riscv64", "libglib2.0-0t64:riscv64", "libglib2.0-bin", "libglib2.0-data", "libgnutls30t64:riscv64", "libgssapi-krb5-2:riscv64", "libgstreamer1.0-0:riscv64", "libibverbs1:riscv64", "libicu78:riscv64", "libjcat1:riscv64", "libjson-c5:riscv64", "libk5crypto3:riscv64", "libkrb5-3:riscv64", "libkrb5support0:riscv64", "liblastlog2-2:riscv64", "libllvm21:riscv64", "liblz4-1:riscv64", "libmagic-mgc", "libmagic1t64:riscv64", "libmm-glib0:riscv64", "libmount1:riscv64", "libmpathcmd0", "libmpathpersist0", "libmultipath0", "libnetplan1:riscv64", "libnewt0.52:riscv64", "libnghttp2-14:riscv64", "libnss-systemd:riscv64", "libnss3:riscv64", "libopeniscsiusr", "libp11-kit0:riscv64", "libpam-systemd:riscv64", "libpcap0.8t64:riscv64", "libperl5.40:riscv64", "libplymouth5:riscv64", "libpython3-stdlib:riscv64", "libpython3.13-minimal:riscv64", "libpython3.13-stdlib:riscv64", "libpython3.14:riscv64", "libpython3.14-minimal:riscv64", "libpython3.14-stdlib:riscv64", "libreadline8t64:riscv64", "libsasl2-2:riscv64", "libsasl2-modules:riscv64", "libsasl2-modules-db:riscv64", "libseccomp2:riscv64", "libselinux1:riscv64", "libsemanage-common", "libsemanage2:riscv64", "libsgutils2-1.48:riscv64", "libsmartcols1:riscv64", "libss2:riscv64", "libssh2-1t64:riscv64", "libssl3t64:riscv64", "libstdc++6:riscv64", "libsystemd-shared:riscv64", "libsystemd0:riscv64", "libtirpc-common", "libtirpc3t64:riscv64", "libudev1:riscv64", "libudisks2-0:riscv64", "libunistring5:riscv64", "libuuid1:riscv64", "libvolume-key1:riscv64", "libxml2-16:riscv64", "linux-base", "linux-headers-generic", "linux-headers-virtual", "linux-image-virtual", "linux-perf", "linux-sysctl-defaults", "linux-tools-common", "linux-virtual", "locales", "login", "logsave", "lshw", "lxd-agent-loader", "mdadm", "modemmanager", "mount", "multipath-tools", "netbase", "netplan-generator", "netplan.io", "open-iscsi", "openssh-client", "openssh-server", "openssh-sftp-server", "openssl", "openssl-provider-legacy", "overlayroot", "perl", "perl-base", "perl-modules-5.40", "plymouth", "plymouth-theme-ubuntu-text", "python-apt-common", "python3", "python3-apport", "python3-apt", "python3-bcrypt", "python3-bpfcc", "python3-cffi-backend:riscv64", "python3-cryptography", "python3-dbus", "python3-debconf", "python3-distro-info", "python3-distupgrade", "python3-gdbm", "python3-gi", "python3-jinja2", "python3-markupsafe", "python3-minimal", "python3-netplan", "python3-openssl", "python3-packaging", "python3-pkg-resources", "python3-problem-report", "python3-pyasn1", "python3-pyparsing", "python3-setuptools", "python3-systemd", "python3-typeguard", "python3-update-manager", "python3-urllib3", "python3-yaml", "python3-zope.interface", "python3.13", "python3.13-minimal", "python3.14-gdbm", "readline-common", "rsyslog", "rust-coreutils", "sg3-utils", "sg3-utils-udev", "snapd", "squashfs-tools", "strace", "sudo", "sudo-rs", "systemd", "systemd-cryptsetup", "systemd-hwe-hwdb", "systemd-resolved", "systemd-sysv", "tcpdump", "trace-cmd", "tzdata", "ubuntu-kernel-accessories", "ubuntu-minimal", "ubuntu-pro-client", "ubuntu-pro-client-l10n", "ubuntu-release-upgrader-core", "ubuntu-server", "ubuntu-standard", "ucf", "udev", "udisks2", "unattended-upgrades", "update-manager-core", "util-linux", "util-linux-extra", "uuid-runtime", "vim", "vim-common", "vim-runtime", "vim-tiny", "whiptail", "wireless-regdb", "xkb-data", "xxd" ] } }, "diff": { "deb": [ { "name": "apparmor", "from_version": { "source_package_name": "apparmor", "source_package_version": "5.0.0~alpha1-0ubuntu11", "version": "5.0.0~alpha1-0ubuntu11" }, "to_version": { "source_package_name": "apparmor", "source_package_version": "5.0.0~beta1-0ubuntu5", "version": "5.0.0~beta1-0ubuntu5" }, "cves": [ { "cve": "CVE-2025-9615", "url": "https://ubuntu.com/security/CVE-2025-9615", "cve_description": "A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to other users. NetworkManager allows non-root users to configure the system's network. The daemon runs with root privileges and can access files owned by users different from the one who added the connection.", "cve_priority": "medium", "cve_public_date": "2026-01-26 20:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2144679, 2137395, 2143810, 2142788, 2142885 ], "changes": [ { "cves": [], "log": [ "", " * Add patches for network iface mediation in the parser (LP: #2144679):", " - d/p/u/0001-parser-add-more-reserved-mediation-classes.patch", " - d/p/u/0002-parser-convert-conditionals-operators-to-an-enum.patch", " - d/p/u/0003-parser-add-override-assign-to-cond-list-elements.patch", " - d/p/u/0004-parser-support-network-interface-conditional.patch", " - d/p/u/0005-tests-add-network-interface-tests.patch", " * debian/control: add socat test dependency to Build-Depends", "" ], "package": "apparmor", "version": "5.0.0~beta1-0ubuntu5", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144679 ], "author": "Ryan Lee ", "date": "Thu, 19 Mar 2026 08:46:13 -0700" }, { "cves": [], "log": [ "", " * Add patch from upstream to fix transmission (LP: #2137395)", " - d/p/u/transmission-common-fixes-for-lp-2137395.patch", "" ], "package": "apparmor", "version": "5.0.0~beta1-0ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2137395 ], "author": "Alex Murray ", "date": "Wed, 18 Mar 2026 23:02:41 +1030" }, { "cves": [ { "cve": "CVE-2025-9615", "url": "https://ubuntu.com/security/CVE-2025-9615", "cve_description": "A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to other users. NetworkManager allows non-root users to configure the system's network. The daemon runs with root privileges and can access files owned by users different from the one who added the connection.", "cve_priority": "medium", "cve_public_date": "2026-01-26 20:16:00 UTC" } ], "log": [ "", " * Add patch to fix openvpn loading of NetworkManager copied certificates", " after CVE-2025-9615 fix (LP: #2143810):", " - d/p/u/openvpn_networkmanager_rundir.patch", "" ], "package": "apparmor", "version": "5.0.0~beta1-0ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143810 ], "author": "Ryan Lee ", "date": "Wed, 11 Mar 2026 11:33:40 -0700" }, { "cves": [], "log": [ "", " * Add patch to fix libapparmor Python aa_get_lsm_iface binding", " (LP: #2142788):", " - d/p/u/libapparmor-move-aa_get_lsm_iface-decl-in-libapparmor.patch", " * Add patches to fix parser tempfile umask (LP: #2142885):", " - d/p/u/0001-parser-set-umask-before-creating-temp-file.patch", " - d/p/u/0002-parser-restrict-umask-to-allow-only-user-permissions.patch", " * Add test for libapparmor feature prefix parse issue (LP 2105986):", " - d/p/u/libapparmor-add-test-for-libapparmor-features-prefix.patch", "" ], "package": "apparmor", "version": "5.0.0~beta1-0ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142788, 2142885 ], "author": "Ryan Lee ", "date": "Fri, 27 Feb 2026 09:48:42 -0800" }, { "cves": [], "log": [ "", " [ Alessandro Astone ]", " * d/tests: Update libreoffice profile names", "", " [ Ryan Lee ]", " * New upstream release.", " * debian/control: add libzstd-dev to list of dependencies", " * debian/libapparmor1.symbols: Add new libapparmor symbols to file", " * Refresh patches to apply to new release:", " - d/p/u/communitheme-snap-support.patch", " - d/p/u/profiles-grant-access-to-systemd-resolved.patch", " * Drop patches that were superseded upstream:", " - d/p/u/parser-fix-pam_apparmor-regression-test-failures.patch", "" ], "package": "apparmor", "version": "5.0.0~beta1-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Ryan Lee ", "date": "Thu, 19 Feb 2026 09:57:16 -0800" }, { "cves": [], "log": [ "", " * New upstream release.", " * Update patches to apply to new release:", " - d/p/d/Enable-writing-cache.patch", " - d/p/u/Move-the-bwrap-userns-restrict-profile-out-of-extras.patch", " - d/p/u/delete-the-busybox-and-nautilus-profiles.patch", " - d/p/u/profiles_remove_hwctl.patch", " - d/p/u/profiles_disable_free.patch", " - d/p/u/profiles_disable_curl.patch", " - d/p/u/profiles_add_more_consoles_workaround.patch", " - d/p/u/profiles-use-coreutils-tunable.patch", " * Refresh patches to apply to new release:", " - d/p/u/parser-fix-pam_apparmor-regression-test-failures.patch", " - d/p/u/aa-notify-userns-filtering.patch", " - d/p/u/aa-notify-fallback-to-ev-comm-when-ev-execpath.patch", " * Drop patches that were applied upstream:", " - d/p/u/userns-runtime-disable.patch", " - d/p/u/userns-runtime-disable-fix-for-6_14.patch", " - d/p/u/parser-fix-variable-expansion.patch", " - d/p/u/nss-systemd-grant-access-to-gdm-user-db.patch", " - d/p/u/parser-fix-misc-leaks.patch", " - d/p/u/parser-fix-more-parser-leaks.patch", " - d/p/u/curl_read_tmp.patch", " - d/p/u/curl_access_snapd_socket.patch", " - d/p/u/unix_chkpwd_authd.patch", " - d/p/u/profiles_dig_add_abstractions_consoles.patch", " - d/p/u/profiles_fix_systemd_detect_virt_new_denials.patch", " - d/p/u/profiles_expand_libnuma_abstraction", " - d/p/u/regression_disconnected_mount_complain_danglings.patch", " - d/p/u/regression_disconnected_mount_complain_fix_6_15.patch", " - d/p/u/utils_test_aa_show_usage_handle_disabled.patch", " - d/p/u/profiles-add-rules-for-pam-extrausers.so-to-unix-chkpwd.patch", " - d/p/u/parser_libapparmor_re_fix_inconsistent_build.patch", " - d/p/u/parser_libapparmor_re_fix_implied_m.patch", " - d/p/u/0001-tests-regression-Update-socketpair-test-for-upstream.patch", " - d/p/u/0002-tests-regression-update-socketpair-tests-to-detect-d.patch", " - d/p/u/0003-tests-regression-update-socketpair-tests-to-detect-d.patch", " - d/p/u/0004-tests-regressions-Improve-output-of-require_any_of_k.patch", " - d/p/u/0005-tests-regression-update-network-requirements-for-v9.patch", " - d/p/u/0006-regression-tests-update-logic-to-support-v9-af_unix-.patch", " - d/p/u/0007-tests-regressions-Fix-socket-pair-for-v7-semantics.patch", " - d/p/u/parser-fix-unix-addresses-with-alternations.patch", " - d/p/u/profiles-add-rules-to-fix-flatpaks-with-fuse3-17.patch", " - d/p/u/profiles-grant-netrc-read-access-to-tnftp.patch", " - d/p/u/profiles-systemd-detect-virt-handle-device-tree-folder.patch", " - d/p/u/lsblk_read_access_azure_acpi.patch", " - d/p/u/regression-fix-for-rust-coreutils.patch", " - d/p/u/utils-remove-global-_-from-aa-notify-main.patch", " - d/p/u/0001-libapparmor-change-setup.py-to-remove-the-need-for-_.patch", " - d/p/u/0002-libapparmor-remove-__init__.py-not-needed-for-SWIG-P.patch", " - d/p/u/utils-test-use-sys.executable-when-launching-aa-show.patch", " * d/apparmor.install, d/not-installed: account for new location", " of init scripts", " * d/rules:", " - account for new locatin of init scripts", " - specify LD_LIBRARY_PATH during testing to use locally built", " libapparmor for libapparmor.so", " * d/watch: point towards GitLab tarballs instead and update regexes", " * debian/apparmor-profiles.install: account for remmina profile being", " moved to extra-profiles upstream", "" ], "package": "apparmor", "version": "5.0.0~alpha6-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Ryan Lee ", "date": "Mon, 09 Feb 2026 11:15:02 -0800" } ], "notes": null, "is_version_downgrade": false }, { "name": "apport", "from_version": { "source_package_name": "apport", "source_package_version": "2.33.1-0ubuntu3", "version": "2.33.1-0ubuntu3" }, "to_version": { "source_package_name": "apport", "source_package_version": "2.33.1-0ubuntu7", "version": "2.33.1-0ubuntu7" }, "cves": [], "launchpad_bugs_fixed": [ 2143758, 2132257 ], "changes": [ { "cves": [], "log": [ "", " * Enable Launchpad crash reports for resolute", " * parse_segv.py: ignore registers with unavailable values (like pl3_ssp)", "" ], "package": "apport", "version": "2.33.1-0ubuntu7", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Thu, 26 Mar 2026 17:32:38 +0100" }, { "cves": [], "log": [ "", " * Update apport-kde to Qt6 (LP: 2145946)", "" ], "package": "apport", "version": "2.33.1-0ubuntu6", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Erich Eickmeyer ", "date": "Mon, 23 Mar 2026 20:29:09 -0700" }, { "cves": [], "log": [ "", " * Fix FTBFS due Python 3.14 (LP: #2143758)", "" ], "package": "apport", "version": "2.33.1-0ubuntu5", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143758 ], "author": "Carlos Nihelton ", "date": "Mon, 09 Mar 2026 17:01:15 -0300" }, { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "apport", "version": "2.33.1-0ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:16:39 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "apport-core-dump-handler", "from_version": { "source_package_name": "apport", "source_package_version": "2.33.1-0ubuntu3", "version": "2.33.1-0ubuntu3" }, "to_version": { "source_package_name": "apport", "source_package_version": "2.33.1-0ubuntu7", "version": "2.33.1-0ubuntu7" }, "cves": [], "launchpad_bugs_fixed": [ 2143758, 2132257 ], "changes": [ { "cves": [], "log": [ "", " * Enable Launchpad crash reports for resolute", " * parse_segv.py: ignore registers with unavailable values (like pl3_ssp)", "" ], "package": "apport", "version": "2.33.1-0ubuntu7", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Thu, 26 Mar 2026 17:32:38 +0100" }, { "cves": [], "log": [ "", " * Update apport-kde to Qt6 (LP: 2145946)", "" ], "package": "apport", "version": "2.33.1-0ubuntu6", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Erich Eickmeyer ", "date": "Mon, 23 Mar 2026 20:29:09 -0700" }, { "cves": [], "log": [ "", " * Fix FTBFS due Python 3.14 (LP: #2143758)", "" ], "package": "apport", "version": "2.33.1-0ubuntu5", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143758 ], "author": "Carlos Nihelton ", "date": "Mon, 09 Mar 2026 17:01:15 -0300" }, { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "apport", "version": "2.33.1-0ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:16:39 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "bash", "from_version": { "source_package_name": "bash", "source_package_version": "5.3-1ubuntu1", "version": "5.3-1ubuntu1" }, "to_version": { "source_package_name": "bash", "source_package_version": "5.3-2ubuntu1", "version": "5.3-2ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Merge with Debian; remaining changes same as in 5.3-1ubuntu1.", "" ], "package": "bash", "version": "5.3-2ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 13 Feb 2026 13:16:08 +0100" }, { "cves": [], "log": [ "", " * Apply upstream patches 004 - 009.", " * Bump standards version.", "" ], "package": "bash", "version": "5.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 13 Feb 2026 11:43:30 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "bcache-tools", "from_version": { "source_package_name": "bcache-tools", "source_package_version": "1.0.8-5build2", "version": "1.0.8-5build2" }, "to_version": { "source_package_name": "bcache-tools", "source_package_version": "1.0.8-5ubuntu1", "version": "1.0.8-5ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2142775 ], "changes": [ { "cves": [], "log": [ "", " * Recommend dracut as default initrd generator (LP: #2142775)", "" ], "package": "bcache-tools", "version": "1.0.8-5ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142775 ], "author": "Benjamin Drung ", "date": "Thu, 26 Feb 2026 17:49:50 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "bpfcc-tools", "from_version": { "source_package_name": "bpfcc", "source_package_version": "0.35.0+ds-1ubuntu1", "version": "0.35.0+ds-1ubuntu1" }, "to_version": { "source_package_name": "bpfcc", "source_package_version": "0.35.0+ds-1ubuntu2", "version": "0.35.0+ds-1ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild to build with LLVM 21 on amd64v3.", "" ], "package": "bpfcc", "version": "0.35.0+ds-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Mon, 16 Mar 2026 12:30:24 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "bpftool", "from_version": { "source_package_name": "linux", "source_package_version": "6.19.0-6.6", "version": "7.7.0+6.19.0-6.6" }, "to_version": { "source_package_name": "linux", "source_package_version": "7.0.0-10.10", "version": "7.7.0+7.0.0-10.10" }, "cves": [], "launchpad_bugs_fixed": [ 2144865, 2144735, 2142775, 2144652, 2143197, 2139276, 2143974, 1990064, 2142956, 2141298, 2028253, 2028253, 2102680, 2028253, 2032602, 2143243, 2143203, 2110092, 2143745, 2143700, 2143181, 2143123, 2141276, 2106681, 2121347, 2138328, 2143020, 2142764, 2142402 ], "changes": [ { "cves": [], "log": [ "", " * resolute/linux: 7.0.0-10.10 -proposed tracker (LP: #2144865)", "", " * Miscellaneous upstream changes", " - Revert \"powerpc: fix KUAP warning in VMX usercopy path\"", "" ], "package": "linux", "version": "7.0.0-10.10", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144865 ], "author": "Paolo Pisati ", "date": "Thu, 19 Mar 2026 09:44:11 +0100" }, { "cves": [], "log": [ "", " * resolute/linux: 7.0.0-9.9 -proposed tracker (LP: #2144735)", "", " * Please make dracut the default initrd generator (LP: #2142775)", " - [Packaging] recommends dracut instead of initramfs-tools", "", " * Miscellaneous Ubuntu changes", " - SAUCE: Change RISC-V target to RVA23 (riscv64a23-unknown-linux-gnu)", "" ], "package": "linux", "version": "7.0.0-9.9", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144735, 2142775 ], "author": "Paolo Pisati ", "date": "Wed, 18 Mar 2026 13:11:06 +0100" }, { "cves": [], "log": [ "", " * resolute/linux: 7.0.0-8.8 -proposed tracker (LP: #2144652)", "", " * UBUNTU: SAUCE: igc: Increase Thunderbolt MAC passthrough delay to 1000ms", " (LP: #2143197)", " - SAUCE: igc: Increase Thunderbolt MAC passthrough delay to 1000ms", "", " * [usrmerge] evaluate kernel owned packages for DEP17 compliance", " (LP: #2139276)", " - [Packaging] Install modules in /usr/lib/modules", "", " * Miscellaneous Ubuntu changes", " - [Config] hardening: enable LIST_HARDENED", " - [Config] hardening: disable LDISC_AUTOLOAD", " - [Config] hardening: disable LEGACY_PTYS", " - [Config] updateconfigs following v7.0-rc4 rebase", "" ], "package": "linux", "version": "7.0.0-8.8", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144652, 2143197, 2139276 ], "author": "Paolo Pisati ", "date": "Tue, 17 Mar 2026 18:01:36 +0100" }, { "cves": [], "log": [ "", " * resolute/linux: 7.0.0-7.7 -proposed tracker (LP: #2143974)", "", " * unconfined profile denies userns_create for chromium based processes", " (LP: #1990064)", " - [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS", "", " * Jellyfin Desktop Flatpak doesn't work with the current AppArmor profile", " (LP: #2142956)", " - SAUCE: apparmor5.0.0 [29/29]: apparmor: fix fine grained inet mediation", " sock_file_perm", "", " * AppArmor blocks write(2) to network sockets with Linux 6.19 (LP: #2141298)", " - SAUCE: apparmor5.0.0 [28/29]: apparmor: fix aa_label_sk_perm to check", " for RULE_MEDIATES_NET", "", " * update apparmor and LSM stacking patch set (LP: #2028253)", " - SAUCE: apparmor5.0.0 [1/29]: Stacking: LSM: Single calls in secid hooks", " - SAUCE: apparmor5.0.0 [2/29]: Stacking: LSM: Exclusive secmark usage", " - SAUCE: apparmor5.0.0 [3/29]: Stacking: AppArmor: Remove the exclusive", " flag", " - SAUCE: apparmor5.0.0 [4/29]: Revert \"apparmor: fix dbus permission", " queries to v9 ABI\"", " - SAUCE: apparmor5.0.0 [5/29]: Revert \"apparmor: gate make fine grained", " unix mediation behind v9 abi\"", " - SAUCE: apparmor5.0.0 [6/29]: apparmor: net: patch to provide", " compatibility with v2.x net rules", " - SAUCE: apparmor5.0.0 [7/29]: apparmor: net: add fine grained ipv4/ipv6", " mediation", " - SAUCE: apparmor5.0.0 [8/29]: apparmor: lift compatibility check out of", " profile_af_perm", " - SAUCE: apparmor5.0.0 [9/29]: apparmor: userns: add unprivileged user ns", " mediation", " - SAUCE: apparmor5.0.0 [10/29]: apparmor: userns: Add sysctls for", " additional controls of unpriv userns restrictions", " - SAUCE: apparmor5.0.0 [12/29]: apparmor: userns: open userns related", " sysctl so lxc can check if restriction are in place", " - SAUCE: apparmor5.0.0 [13/29]: apparmor: userns: allow profile to be", " transitioned when a userns is created", " - SAUCE: apparmor5.0.0 [14/29]: apparmor: mqueue: call", " security_inode_init_security on inode creation", " - SAUCE: apparmor5.0.0 [15/29]: apparmor: mqueue: add fine grained", " mediation of posix mqueues", " - SAUCE: apparmor5.0.0 [16/29]: apparmor: uring: add io_uring mediation", " - SAUCE: apparmor5.0.0 [19/29]: apparmor: prompt: setup slab cache for", " audit data", " - SAUCE: apparmor5.0.0 [20/29]: apparmor: prompt: add the ability for", " profiles to have a learning cache", " - SAUCE: apparmor5.0.0 [21/29]: apparmor: prompt: enable userspace upcall", " for mediation", " - SAUCE: apparmor5.0.0 [22/29]: apparmor: prompt: pass prompt boolean", " through into path_name as well", " - SAUCE: apparmor5.0.0 [23/29]: apparmor: check for supported version in", " notification messages.", " - SAUCE: apparmor5.0.0 [24/29]: apparmor: refactor building notice so it", " is easier to extend", " - SAUCE: apparmor5.0.0 [25/29]: apparmor: switch from ENOTSUPP to", " EPROTONOSUPPORT", " - SAUCE: apparmor5.0.0 [26/29]: apparmor: add support for meta data tags", " - SAUCE: apparmor5.0.0 [27/29]: apparmor: prevent profile->disconnected", " double free in aa_free_profile", "", " * update apparmor and LSM stacking patch set (LP: #2028253) // Installation", " of AppArmor on a 6.14 kernel produces error message \"Illegal number: yes\"", " (LP: #2102680)", " - SAUCE: apparmor5.0.0 [17/29]: apparmor: create an", " AA_SFS_TYPE_BOOLEAN_INTPRINT sysctl variant", " - SAUCE: apparmor5.0.0 [18/29]: apparmor: Use AA_SFS_FILE_BOOLEAN_INTPRINT", " for userns and io_uring sysctls", "", " * update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]", " apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in", " mantic (LP: #2032602)", " - SAUCE: apparmor5.0.0 [11/29]: apparmor: userns - make it so special", " unconfined profiles can mediate user namespaces", "", " * NPU utilization on amdxdna is missing (LP: #2143243)", " - SAUCE: accel/amdxdna: Add IOCTL to retrieve realtime NPU power estimate", " - SAUCE: accel/amdxdna: Support sensors for column utilization", " - SAUCE: accel/amdxdna: Import AMD_PMF namespace", "", " * Adopting dark mode by default for OLED panel (LP: #2143203)", " - SAUCE: drm/connector: Add a new 'panel_type' property", " - SAUCE: drm/amd/display: Attach OLED property to eDP panels", "", " * Support AMD Image Signal Processing (ISP) unit V4.0 (LP: #2110092)", " - SAUCE: media: platform: amd: Introduce amd isp4 capture driver", " - SAUCE: media: platform: amd: low level support for isp4 firmware", " - SAUCE: media: platform: amd: Add isp4 fw and hw interface", " - SAUCE: media: platform: amd: isp4 subdev and firmware loading handling", " added", " - SAUCE: media: platform: amd: isp4 video node and buffers handling added", " - SAUCE: Documentation: add documentation of AMD isp 4 driver", " - SAUCE: media: platform: amd: isp4 debug fs logging and more descriptive", " errors", " - [Config] Enable VIDEO_AMD_ISP4_CAPTURE", "", " * Miscellaneous Ubuntu changes", " - [Config] temporarily disable OBJTOOL_WERROR", "" ], "package": "linux", "version": "7.0.0-7.7", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143974, 1990064, 2142956, 2141298, 2028253, 2028253, 2102680, 2028253, 2032602, 2143243, 2143203, 2110092 ], "author": "Paolo Pisati ", "date": "Thu, 12 Mar 2026 10:49:34 +0100" }, { "cves": [], "log": [ "", " * resolute/linux: 7.0.0-6.6 -proposed tracker (LP: #2143745)", "", " * Miscellaneous Ubuntu changes", " - [Packaging] drop unstable suffix", "" ], "package": "linux", "version": "7.0.0-6.6", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143745 ], "author": "Paolo Pisati ", "date": "Mon, 09 Mar 2026 17:20:26 +0100" }, { "cves": [], "log": [ "", " * resolute/linux-unstable: 7.0.0-5.5 -proposed tracker (LP: #2143700)", "", " * Resolute real-time patchset: 7.0-rc1-rt1 (LP: #2143181)", " - SAUCE: Reapply \"serial: 8250: Switch to nbcon console\"", " - SAUCE: Reapply \"serial: 8250: Revert \"drop lockdep annotation from", " serial8250_clear_IER()\"\"", " - SAUCE: drm/i915: Use preempt_disable/enable_rt() where recommended", " - SAUCE: drm/i915: Don't disable interrupts on PREEMPT_RT during atomic", " updates", " - SAUCE: drm/i915: Disable tracing points on PREEMPT_RT", " - SAUCE: drm/i915/gt: Use spin_lock_irq() instead of local_irq_disable() +", " spin_lock()", " - SAUCE: drm/i915: Drop the irqs_disabled() check", " - SAUCE: drm/i915/guc: Consider also RCU depth in busy loop.", " - SAUCE: drm/i915: Consider RCU read section as atomic.", " - SAUCE: Revert \"drm/i915: Depend on !PREEMPT_RT.\"", " - SAUCE: sysfs: Add /sys/kernel/realtime entry", " - Real-time patchset 7.0-rc1-rt1", "", " * Miscellaneous Ubuntu changes", " - [Config] rust toolchain version update", "" ], "package": "linux", "version": "7.0.0-5.5", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143700, 2143181 ], "author": "Paolo Pisati ", "date": "Mon, 09 Mar 2026 08:10:31 +0100" }, { "cves": [], "log": [ "", " * resolute/linux-unstable: 7.0.0-4.4 -proposed tracker (LP: #2143123)", "", " * efi: Fix swapped arguments to bsearch() in efi_status_to_*() SAUCE patch", " (LP: #2141276)", " - SAUCE efi: Fix swapped arguments to bsearch() in efi_status_to_*()", "", " * Plucky preinstalled server fails to boot on rb3gen2 (LP: #2106681) //", " Questing preinstalled server fails to boot on sa8775p boards", " (LP: #2121347)", " - [Config] move more qcom interconnect/pinctrl/gcc options to builtin", "", " * linux-tools: consider linking perf against LLVM (LP: #2138328)", " - [Packaging] Add llvm-21-dev to build-depends for perf", "", " * Miscellaneous Ubuntu changes", " - [Packaging] Add intel-speed-select to linux-tools", " - [Packaging] remove stale debian/dkms-versions", " - [Packaging] remove stale debian/dkms-versions scripting", "" ], "package": "linux-unstable", "version": "7.0.0-4.4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143123, 2141276, 2106681, 2121347, 2138328 ], "author": "Paolo Pisati ", "date": "Wed, 04 Mar 2026 13:59:02 +0100" }, { "cves": [], "log": [ "", " * resolute/linux-unstable: 7.0.0-3.3 -proposed tracker (LP: #2143020)", "", " * Miscellaneous Ubuntu changes", " - [Config] updateconfig after rebase to v7.0-rc2", " - [Config] switch to PREEMPT_LAZY", "" ], "package": "linux-unstable", "version": "7.0.0-3.3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143020 ], "author": "Paolo Pisati ", "date": "Mon, 02 Mar 2026 09:26:45 +0100" }, { "cves": [], "log": [ "", " * resolute/linux-unstable: 7.0.0-2.2 -proposed tracker (LP: #2142764)", "" ], "package": "linux-unstable", "version": "7.0.0-2.2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142764 ], "author": "Paolo Pisati ", "date": "Fri, 27 Feb 2026 10:25:35 +0100" }, { "cves": [], "log": [ "", " * resolute/linux-unstable: 7.0.0-1.1 -proposed tracker (LP: #2142402)", "", " * Miscellaneous Ubuntu changes", " - [packaging] rename to linux-unstable", " - [Config] updateconfig after rebase to v7.0-rc1", " - Update Changes.md", " - [Packaging] add libbpf-dev to Build-Depends", " - [Config] disable AMD_ISP4, FTBFS", " - [Packaging] debian.master/dkms-versions -- temporarily remove zfs FTBFS", " - [Packaging] debian.master/dkms-versions -- temporarily remove evdi FTBFS", " - [Config] updateconfig after rebase to v7.0-rc1", " - [Config] update toolchain version", "" ], "package": "linux-unstable", "version": "7.0.0-1.1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142402 ], "author": "Paolo Pisati ", "date": "Mon, 23 Feb 2026 08:32:17 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "bsdextrautils", "from_version": { "source_package_name": "util-linux", "source_package_version": "2.41.2-4ubuntu3", "version": "2.41.2-4ubuntu3" }, "to_version": { "source_package_name": "util-linux", "source_package_version": "2.41.3-3ubuntu2", "version": "2.41.3-3ubuntu2" }, "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" }, { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2142050 ], "changes": [ { "cves": [], "log": [ "", " * d/p/ubuntu/su-pty-drop-caps.patch: harden 'su --pty' to temporarily lower", " capabilities while proxying between stdin/stdout and the pty master. This", " is to avoid su from being used to exploit kernel vulnerabilities.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Fri, 13 Mar 2026 07:09:23 -0400" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Merge with Debian unstable (LP: #2142050). Remaining changes:", " - Add sulogin-fallback-static-sh.patch", " Add support for /bin/static-sh as fallback if the regular shell fails to", " execute. Patch ported from sysvinit. (see LP #505887)", " - Add sulogin-lockedpwd.patch", " Make sure file systems can be fixed on machines with locked root", " accounts (as Ubuntu does by default). Don't require --force for sulogin.", " - d/rules: disable libmount mountfs support", " Disable brand new feature with --disable-libmount-mountfd-support that", " causes inability to deploy MAAS LP #2037417.", " * Dropped changes applied upstream:", " - SECURITY UPDATE: heap overread with 256-byte usernames", " + debian/patches/CVE-2025-14104-1.patch: add length check in", " login-utils/setpwnam.c.", " + debian/patches/CVE-2025-14104-2.patch: update buflen in", " login-utils/setpwnam.c.", " + CVE-2025-14104", " * Dropped changes as they were no longer necessary:", " - d/p/ubuntu/lp-2030793-make-check-pidfd.patch", " This patch only effected kernel versions below 5.15 which are not", " available on resolute.", " - d/p/u/lp-2112552-tests-mark-mkfds-multiplexing-as-known-fail.patch", " The underlying bug was addressed in rust-coreutils.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142050 ], "author": "Ural Tunaboyu ", "date": "Sun, 15 Feb 2026 17:43:12 -0800" }, { "cves": [], "log": [ "", " * d/libsmartcols1.symbols: drop terminal crap", " * d/rules: make dpkg-gensymbols more strict", " * lintian: ignore groff-message tags", " * lintian: ignore groff-message tags in remaining packages", " * Add upstream patches", " * unshare: fix user namespace bind mounts", " * unshare: remove get_mnt_ino() check in bind_ns_files_from_child()", " * unshare: add --owner to set user namespace owner uid and gid", " * libfdisk: modernize ZFS GPT type description", "" ], "package": "util-linux", "version": "2.41.3-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 31 Dec 2025 13:06:28 +0100" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * util-linux: do not fail postinst/prerm if update-alternatives is missing", "" ], "package": "util-linux", "version": "2.41.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 17 Dec 2025 10:42:28 +0100" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Stop installing lastlog2-import.service", " * New upstream release, fixing CVE-2025-14104. (Closes: #1122058)", "" ], "package": "util-linux", "version": "2.41.3-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Tue, 16 Dec 2025 20:37:41 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "bsdutils", "from_version": { "source_package_name": "util-linux", "source_package_version": "2.41.2-4ubuntu3", "version": "1:2.41.2-4ubuntu3" }, "to_version": { "source_package_name": "util-linux", "source_package_version": "2.41.3-3ubuntu2", "version": "1:2.41.3-3ubuntu2" }, "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" }, { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2142050 ], "changes": [ { "cves": [], "log": [ "", " * d/p/ubuntu/su-pty-drop-caps.patch: harden 'su --pty' to temporarily lower", " capabilities while proxying between stdin/stdout and the pty master. This", " is to avoid su from being used to exploit kernel vulnerabilities.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Fri, 13 Mar 2026 07:09:23 -0400" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Merge with Debian unstable (LP: #2142050). Remaining changes:", " - Add sulogin-fallback-static-sh.patch", " Add support for /bin/static-sh as fallback if the regular shell fails to", " execute. Patch ported from sysvinit. (see LP #505887)", " - Add sulogin-lockedpwd.patch", " Make sure file systems can be fixed on machines with locked root", " accounts (as Ubuntu does by default). Don't require --force for sulogin.", " - d/rules: disable libmount mountfs support", " Disable brand new feature with --disable-libmount-mountfd-support that", " causes inability to deploy MAAS LP #2037417.", " * Dropped changes applied upstream:", " - SECURITY UPDATE: heap overread with 256-byte usernames", " + debian/patches/CVE-2025-14104-1.patch: add length check in", " login-utils/setpwnam.c.", " + debian/patches/CVE-2025-14104-2.patch: update buflen in", " login-utils/setpwnam.c.", " + CVE-2025-14104", " * Dropped changes as they were no longer necessary:", " - d/p/ubuntu/lp-2030793-make-check-pidfd.patch", " This patch only effected kernel versions below 5.15 which are not", " available on resolute.", " - d/p/u/lp-2112552-tests-mark-mkfds-multiplexing-as-known-fail.patch", " The underlying bug was addressed in rust-coreutils.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142050 ], "author": "Ural Tunaboyu ", "date": "Sun, 15 Feb 2026 17:43:12 -0800" }, { "cves": [], "log": [ "", " * d/libsmartcols1.symbols: drop terminal crap", " * d/rules: make dpkg-gensymbols more strict", " * lintian: ignore groff-message tags", " * lintian: ignore groff-message tags in remaining packages", " * Add upstream patches", " * unshare: fix user namespace bind mounts", " * unshare: remove get_mnt_ino() check in bind_ns_files_from_child()", " * unshare: add --owner to set user namespace owner uid and gid", " * libfdisk: modernize ZFS GPT type description", "" ], "package": "util-linux", "version": "2.41.3-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 31 Dec 2025 13:06:28 +0100" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * util-linux: do not fail postinst/prerm if update-alternatives is missing", "" ], "package": "util-linux", "version": "2.41.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 17 Dec 2025 10:42:28 +0100" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Stop installing lastlog2-import.service", " * New upstream release, fixing CVE-2025-14104. (Closes: #1122058)", "" ], "package": "util-linux", "version": "2.41.3-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Tue, 16 Dec 2025 20:37:41 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "btrfs-progs", "from_version": { "source_package_name": "btrfs-progs", "source_package_version": "6.17.1-1", "version": "6.17.1-1" }, "to_version": { "source_package_name": "btrfs-progs", "source_package_version": "6.17.1-1build1", "version": "6.17.1-1build1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild with Python 3.14 as default", "" ], "package": "btrfs-progs", "version": "6.17.1-1build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Graham Inggs ", "date": "Thu, 22 Jan 2026 20:28:27 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "ca-certificates", "from_version": { "source_package_name": "ca-certificates", "source_package_version": "20250419", "version": "20250419" }, "to_version": { "source_package_name": "ca-certificates", "source_package_version": "20250419build1", "version": "20250419build1" }, "cves": [], "launchpad_bugs_fixed": [ 2132257 ], "changes": [ { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "ca-certificates", "version": "20250419build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:22:10 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "cloud-init", "from_version": { "source_package_name": "cloud-init", "source_package_version": "25.4~4g26c7d38d-0ubuntu1", "version": "25.4~4g26c7d38d-0ubuntu1" }, "to_version": { "source_package_name": "cloud-init", "source_package_version": "26.1-0ubuntu1", "version": "26.1-0ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Upstream snapshot based on 26.1.", " List of changes from upstream can be found at", " https://raw.githubusercontent.com/canonical/cloud-init/26.1/ChangeLog", "" ], "package": "cloud-init", "version": "26.1-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Chad Smith ", "date": "Fri, 27 Feb 2026 19:10:12 -0700" } ], "notes": null, "is_version_downgrade": false }, { "name": "cloud-init-base", "from_version": { "source_package_name": "cloud-init", "source_package_version": "25.4~4g26c7d38d-0ubuntu1", "version": "25.4~4g26c7d38d-0ubuntu1" }, "to_version": { "source_package_name": "cloud-init", "source_package_version": "26.1-0ubuntu1", "version": "26.1-0ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Upstream snapshot based on 26.1.", " List of changes from upstream can be found at", " https://raw.githubusercontent.com/canonical/cloud-init/26.1/ChangeLog", "" ], "package": "cloud-init", "version": "26.1-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Chad Smith ", "date": "Fri, 27 Feb 2026 19:10:12 -0700" } ], "notes": null, "is_version_downgrade": false }, { "name": "cloud-initramfs-copymods", "from_version": { "source_package_name": "cloud-initramfs-tools", "source_package_version": "0.52", "version": "0.52" }, "to_version": { "source_package_name": "cloud-initramfs-tools", "source_package_version": "0.55", "version": "0.55" }, "cves": [], "launchpad_bugs_fixed": [ 2125790, 2142564 ], "changes": [ { "cves": [], "log": [ "", " [ Benjamin Drung ]", " * copymods: enable by default when using dracut", "" ], "package": "cloud-initramfs-tools", "version": "0.55", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Paride Legovini ", "date": "Thu, 05 Mar 2026 18:59:57 +0100" }, { "cves": [], "log": [ "", " * autopkgtest: explicitly pull in dracut for rooturl test", " * dyn-netconf: support dracut by pulling in systemd-networkd (LP: #2125790)", " * Drop redundant priority optional", " * Bump Standards-Version to 4.7.3", " * Override executable-in-usr-lib lintian warning for Dracut modules dir", "" ], "package": "cloud-initramfs-tools", "version": "0.54", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2125790 ], "author": "Benjamin Drung ", "date": "Fri, 27 Feb 2026 10:31:34 +0100" }, { "cves": [], "log": [ "", " [ Benjamin Drung ]", " * rooturl: use systemd-import on Dracut to support tarballs (LP: #2142564)", "" ], "package": "cloud-initramfs-tools", "version": "0.53", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142564 ], "author": "Paride Legovini ", "date": "Tue, 24 Feb 2026 12:30:44 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "cloud-initramfs-dyn-netconf", "from_version": { "source_package_name": "cloud-initramfs-tools", "source_package_version": "0.52", "version": "0.52" }, "to_version": { "source_package_name": "cloud-initramfs-tools", "source_package_version": "0.55", "version": "0.55" }, "cves": [], "launchpad_bugs_fixed": [ 2125790, 2142564 ], "changes": [ { "cves": [], "log": [ "", " [ Benjamin Drung ]", " * copymods: enable by default when using dracut", "" ], "package": "cloud-initramfs-tools", "version": "0.55", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Paride Legovini ", "date": "Thu, 05 Mar 2026 18:59:57 +0100" }, { "cves": [], "log": [ "", " * autopkgtest: explicitly pull in dracut for rooturl test", " * dyn-netconf: support dracut by pulling in systemd-networkd (LP: #2125790)", " * Drop redundant priority optional", " * Bump Standards-Version to 4.7.3", " * Override executable-in-usr-lib lintian warning for Dracut modules dir", "" ], "package": "cloud-initramfs-tools", "version": "0.54", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2125790 ], "author": "Benjamin Drung ", "date": "Fri, 27 Feb 2026 10:31:34 +0100" }, { "cves": [], "log": [ "", " [ Benjamin Drung ]", " * rooturl: use systemd-import on Dracut to support tarballs (LP: #2142564)", "" ], "package": "cloud-initramfs-tools", "version": "0.53", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142564 ], "author": "Paride Legovini ", "date": "Tue, 24 Feb 2026 12:30:44 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "console-setup", "from_version": { "source_package_name": "console-setup", "source_package_version": "1.237ubuntu1", "version": "1.237ubuntu1" }, "to_version": { "source_package_name": "console-setup", "source_package_version": "1.237ubuntu3", "version": "1.237ubuntu3" }, "cves": [], "launchpad_bugs_fixed": [ 2132257 ], "changes": [ { "cves": [], "log": [ "", " [ Samuel Thibault ]", " * Keyboard/kbdcompiler: Fix checking ckbcomp success.", " * Keyboard/ckbcomp: Support symbols = [...].", "" ], "package": "console-setup", "version": "1.237ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Timo Aaltonen ", "date": "Mon, 02 Mar 2026 16:21:56 +0200" }, { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "console-setup", "version": "1.237ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:24:29 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "console-setup-linux", "from_version": { "source_package_name": "console-setup", "source_package_version": "1.237ubuntu1", "version": "1.237ubuntu1" }, "to_version": { "source_package_name": "console-setup", "source_package_version": "1.237ubuntu3", "version": "1.237ubuntu3" }, "cves": [], "launchpad_bugs_fixed": [ 2132257 ], "changes": [ { "cves": [], "log": [ "", " [ Samuel Thibault ]", " * Keyboard/kbdcompiler: Fix checking ckbcomp success.", " * Keyboard/ckbcomp: Support symbols = [...].", "" ], "package": "console-setup", "version": "1.237ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Timo Aaltonen ", "date": "Mon, 02 Mar 2026 16:21:56 +0200" }, { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "console-setup", "version": "1.237ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:24:29 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "cryptsetup", "from_version": { "source_package_name": "cryptsetup", "source_package_version": "2:2.8.4-1ubuntu1", "version": "2:2.8.4-1ubuntu1" }, "to_version": { "source_package_name": "cryptsetup", "source_package_version": "2:2.8.4-1ubuntu4", "version": "2:2.8.4-1ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [ 2143933, 2142888, 2142775 ], "changes": [ { "cves": [], "log": [ "", " * Cherry-pick fixes from upstream:", " - tests: Fix tests to not use aes-generic kernel cipher name", " - Add specific error for failed posix_fallocate call.", " * test: use gnudd as workaround in luks2-reencryption-mangle-test", " (LP: #2143933)", "" ], "package": "cryptsetup", "version": "2:2.8.4-1ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143933 ], "author": "Benjamin Drung ", "date": "Wed, 11 Mar 2026 18:58:47 +0100" }, { "cves": [], "log": [ "", " * askpass: Fix FTBFS with glibc 2.43. (Closes: #1128538, LP: #2142888)", "" ], "package": "cryptsetup", "version": "2:2.8.4-1ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142888 ], "author": "Benjamin Drung ", "date": "Wed, 11 Mar 2026 11:53:16 +0100" }, { "cves": [], "log": [ "", " * cryptsetup: recommend dracut over cryptsetup-initramfs (LP: #2142775)", "" ], "package": "cryptsetup", "version": "2:2.8.4-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142775 ], "author": "Benjamin Drung ", "date": "Tue, 10 Mar 2026 12:24:16 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "cryptsetup-bin", "from_version": { "source_package_name": "cryptsetup", "source_package_version": "2:2.8.4-1ubuntu1", "version": "2:2.8.4-1ubuntu1" }, "to_version": { "source_package_name": "cryptsetup", "source_package_version": "2:2.8.4-1ubuntu4", "version": "2:2.8.4-1ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [ 2143933, 2142888, 2142775 ], "changes": [ { "cves": [], "log": [ "", " * Cherry-pick fixes from upstream:", " - tests: Fix tests to not use aes-generic kernel cipher name", " - Add specific error for failed posix_fallocate call.", " * test: use gnudd as workaround in luks2-reencryption-mangle-test", " (LP: #2143933)", "" ], "package": "cryptsetup", "version": "2:2.8.4-1ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143933 ], "author": "Benjamin Drung ", "date": "Wed, 11 Mar 2026 18:58:47 +0100" }, { "cves": [], "log": [ "", " * askpass: Fix FTBFS with glibc 2.43. (Closes: #1128538, LP: #2142888)", "" ], "package": "cryptsetup", "version": "2:2.8.4-1ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142888 ], "author": "Benjamin Drung ", "date": "Wed, 11 Mar 2026 11:53:16 +0100" }, { "cves": [], "log": [ "", " * cryptsetup: recommend dracut over cryptsetup-initramfs (LP: #2142775)", "" ], "package": "cryptsetup", "version": "2:2.8.4-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142775 ], "author": "Benjamin Drung ", "date": "Tue, 10 Mar 2026 12:24:16 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "curl", "from_version": { "source_package_name": "curl", "source_package_version": "8.18.0-1ubuntu1", "version": "8.18.0-1ubuntu1" }, "to_version": { "source_package_name": "curl", "source_package_version": "8.18.0-1ubuntu2", "version": "8.18.0-1ubuntu2" }, "cves": [ { "cve": "CVE-2026-1965", "url": "https://ubuntu.com/security/CVE-2026-1965", "cve_description": "libcurl can in some circumstances reuse the wrong connection when asked to do an Negotiate-authenticated HTTP or HTTPS request. libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead. When reusing a connection a range of criterion must first be met. Due to a logical error in the code, a request that was issued by an application could wrongfully reuse an existing connection to the same server that was authenticated using different credentials. One underlying reason being that Negotiate sometimes authenticates *connections* and not *requests*, contrary to how HTTP is designed to work. An application that allows Negotiate authentication to a server (that responds wanting Negotiate) with `user1:password1` and then does another operation to the same server also using Negotiate but with `user2:password2` (while the previous connection is still alive) - the second request wrongly reused the same connection and since it then sees that the Negotiate negotiation is already made, it just sends the request over that connection thinking it uses the user2 credentials when it is in fact still using the connection authenticated for user1... The set of authentication methods to use is set with `CURLOPT_HTTPAUTH`. Applications can disable libcurl's reuse of connections and thus mitigate this problem, by using one of the following libcurl options to alter how connections are or are not reused: `CURLOPT_FRESH_CONNECT`, `CURLOPT_MAXCONNECTS` and `CURLMOPT_MAX_HOST_CONNECTIONS` (if using the curl_multi API).", "cve_priority": "medium", "cve_public_date": "2026-03-11 11:15:00 UTC" }, { "cve": "CVE-2026-3783", "url": "https://ubuntu.com/security/CVE-2026-3783", "cve_description": "When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname under some circumstances. If the hostname that the first request is redirected to has information in the used .netrc file, with either of the `machine` or `default` keywords, curl would pass on the bearer token set for the first host also to the second one.", "cve_priority": "medium", "cve_public_date": "2026-03-11 11:16:00 UTC" }, { "cve": "CVE-2026-3784", "url": "https://ubuntu.com/security/CVE-2026-3784", "cve_description": "curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is to create or use a separate connection.", "cve_priority": "low", "cve_public_date": "2026-03-11 11:16:00 UTC" }, { "cve": "CVE-2026-3805", "url": "https://ubuntu.com/security/CVE-2026-3805", "cve_description": "When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.", "cve_priority": "medium", "cve_public_date": "2026-03-11 11:16:00 UTC" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-1965", "url": "https://ubuntu.com/security/CVE-2026-1965", "cve_description": "libcurl can in some circumstances reuse the wrong connection when asked to do an Negotiate-authenticated HTTP or HTTPS request. libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead. When reusing a connection a range of criterion must first be met. Due to a logical error in the code, a request that was issued by an application could wrongfully reuse an existing connection to the same server that was authenticated using different credentials. One underlying reason being that Negotiate sometimes authenticates *connections* and not *requests*, contrary to how HTTP is designed to work. An application that allows Negotiate authentication to a server (that responds wanting Negotiate) with `user1:password1` and then does another operation to the same server also using Negotiate but with `user2:password2` (while the previous connection is still alive) - the second request wrongly reused the same connection and since it then sees that the Negotiate negotiation is already made, it just sends the request over that connection thinking it uses the user2 credentials when it is in fact still using the connection authenticated for user1... The set of authentication methods to use is set with `CURLOPT_HTTPAUTH`. Applications can disable libcurl's reuse of connections and thus mitigate this problem, by using one of the following libcurl options to alter how connections are or are not reused: `CURLOPT_FRESH_CONNECT`, `CURLOPT_MAXCONNECTS` and `CURLMOPT_MAX_HOST_CONNECTIONS` (if using the curl_multi API).", "cve_priority": "medium", "cve_public_date": "2026-03-11 11:15:00 UTC" }, { "cve": "CVE-2026-3783", "url": "https://ubuntu.com/security/CVE-2026-3783", "cve_description": "When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname under some circumstances. If the hostname that the first request is redirected to has information in the used .netrc file, with either of the `machine` or `default` keywords, curl would pass on the bearer token set for the first host also to the second one.", "cve_priority": "medium", "cve_public_date": "2026-03-11 11:16:00 UTC" }, { "cve": "CVE-2026-3784", "url": "https://ubuntu.com/security/CVE-2026-3784", "cve_description": "curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is to create or use a separate connection.", "cve_priority": "low", "cve_public_date": "2026-03-11 11:16:00 UTC" }, { "cve": "CVE-2026-3805", "url": "https://ubuntu.com/security/CVE-2026-3805", "cve_description": "When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.", "cve_priority": "medium", "cve_public_date": "2026-03-11 11:16:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: bad reuse of HTTP Negotiate connection", " - debian/patches/CVE-2026-1965-1.patch: fix reuse of connections using", " HTTP Negotiate in lib/url.c.", " - debian/patches/CVE-2026-1965-2.patch: fix copy and paste", " url_match_auth_nego mistake in lib/url.c.", " - CVE-2026-1965", " * SECURITY UPDATE: token leak with redirect and netrc", " - debian/patches/CVE-2026-3783.patch: only send bearer if auth is", " allowed in lib/http.c, tests/data/Makefile.am, tests/data/test2006.", " - CVE-2026-3783", " * SECURITY UPDATE: wrong proxy connection reuse with credentials", " - debian/patches/CVE-2026-3784.patch: add additional tests in", " lib/url.c, tests/http/test_13_proxy_auth.py,", " tests/http/testenv/curl.py.", " - CVE-2026-3784", " * SECURITY UPDATE: use after free in SMB connection reuse", " - debian/patches/CVE-2026-3805.patch: free the path in the request", " struct properly in lib/smb.c.", " - CVE-2026-3805", "" ], "package": "curl", "version": "8.18.0-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Mon, 09 Mar 2026 08:30:05 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "dbus", "from_version": { "source_package_name": "dbus", "source_package_version": "1.16.2-2ubuntu3", "version": "1.16.2-2ubuntu3" }, "to_version": { "source_package_name": "dbus", "source_package_version": "1.16.2-2ubuntu4", "version": "1.16.2-2ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [ 2141603 ], "changes": [ { "cves": [], "log": [ "", " * dont-stop-dbus.patch: restore Before=sockets.target (LP: #2141603)", "" ], "package": "dbus", "version": "1.16.2-2ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2141603 ], "author": "Benjamin Drung ", "date": "Tue, 03 Mar 2026 12:20:34 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "dbus-bin", "from_version": { "source_package_name": "dbus", "source_package_version": "1.16.2-2ubuntu3", "version": "1.16.2-2ubuntu3" }, "to_version": { "source_package_name": "dbus", "source_package_version": "1.16.2-2ubuntu4", "version": "1.16.2-2ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [ 2141603 ], "changes": [ { "cves": [], "log": [ "", " * dont-stop-dbus.patch: restore Before=sockets.target (LP: #2141603)", "" ], "package": "dbus", "version": "1.16.2-2ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2141603 ], "author": "Benjamin Drung ", "date": "Tue, 03 Mar 2026 12:20:34 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "dbus-daemon", "from_version": { "source_package_name": "dbus", "source_package_version": "1.16.2-2ubuntu3", "version": "1.16.2-2ubuntu3" }, "to_version": { "source_package_name": "dbus", "source_package_version": "1.16.2-2ubuntu4", "version": "1.16.2-2ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [ 2141603 ], "changes": [ { "cves": [], "log": [ "", " * dont-stop-dbus.patch: restore Before=sockets.target (LP: #2141603)", "" ], "package": "dbus", "version": "1.16.2-2ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2141603 ], "author": "Benjamin Drung ", "date": "Tue, 03 Mar 2026 12:20:34 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "dbus-session-bus-common", "from_version": { "source_package_name": "dbus", "source_package_version": "1.16.2-2ubuntu3", "version": "1.16.2-2ubuntu3" }, "to_version": { "source_package_name": "dbus", "source_package_version": "1.16.2-2ubuntu4", "version": "1.16.2-2ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [ 2141603 ], "changes": [ { "cves": [], "log": [ "", " * dont-stop-dbus.patch: restore Before=sockets.target (LP: #2141603)", "" ], "package": "dbus", "version": "1.16.2-2ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2141603 ], "author": "Benjamin Drung ", "date": "Tue, 03 Mar 2026 12:20:34 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "dbus-system-bus-common", "from_version": { "source_package_name": "dbus", "source_package_version": "1.16.2-2ubuntu3", "version": "1.16.2-2ubuntu3" }, "to_version": { "source_package_name": "dbus", "source_package_version": "1.16.2-2ubuntu4", "version": "1.16.2-2ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [ 2141603 ], "changes": [ { "cves": [], "log": [ "", " * dont-stop-dbus.patch: restore Before=sockets.target (LP: #2141603)", "" ], "package": "dbus", "version": "1.16.2-2ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2141603 ], "author": "Benjamin Drung ", "date": "Tue, 03 Mar 2026 12:20:34 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "dbus-user-session", "from_version": { "source_package_name": "dbus", "source_package_version": "1.16.2-2ubuntu3", "version": "1.16.2-2ubuntu3" }, "to_version": { "source_package_name": "dbus", "source_package_version": "1.16.2-2ubuntu4", "version": "1.16.2-2ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [ 2141603 ], "changes": [ { "cves": [], "log": [ "", " * dont-stop-dbus.patch: restore Before=sockets.target (LP: #2141603)", "" ], "package": "dbus", "version": "1.16.2-2ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2141603 ], "author": "Benjamin Drung ", "date": "Tue, 03 Mar 2026 12:20:34 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "debconf", "from_version": { "source_package_name": "debconf", "source_package_version": "1.5.91", "version": "1.5.91" }, "to_version": { "source_package_name": "debconf", "source_package_version": "1.5.92", "version": "1.5.92" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * Add BMP version of debian-logo.", "" ], "package": "debconf", "version": "1.5.92", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Colin Watson ", "date": "Mon, 16 Feb 2026 17:48:32 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "debconf-i18n", "from_version": { "source_package_name": "debconf", "source_package_version": "1.5.91", "version": "1.5.91" }, "to_version": { "source_package_name": "debconf", "source_package_version": "1.5.92", "version": "1.5.92" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * Add BMP version of debian-logo.", "" ], "package": "debconf", "version": "1.5.92", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Colin Watson ", "date": "Mon, 16 Feb 2026 17:48:32 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "distro-info", "from_version": { "source_package_name": "distro-info", "source_package_version": "1.14build1", "version": "1.14build1" }, "to_version": { "source_package_name": "distro-info", "source_package_version": "1.15", "version": "1.15" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * test: Fix testAlias when SOURCE_DATE_EPOCH is set to 2030 (Closes: #1127115)", " * Remove redundant Rules-Requires-Root", " * Remove redundant priority optional field", " * Bump Standards-Version to 4.7.3", "" ], "package": "distro-info", "version": "1.15", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Mon, 16 Feb 2026 23:18:29 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "dpkg", "from_version": { "source_package_name": "dpkg", "source_package_version": "1.22.21ubuntu9", "version": "1.22.21ubuntu9" }, "to_version": { "source_package_name": "dpkg", "source_package_version": "1.23.6ubuntu2", "version": "1.23.6ubuntu2" }, "cves": [ { "cve": "CVE-2026-2219", "url": "https://ubuntu.com/security/CVE-2026-2219", "cve_description": "It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data stream when uncompressing a zstd-compressed .deb archive, which may result in denial of service (infinite loop spinning the CPU).", "cve_priority": "medium", "cve_public_date": "2026-03-07 09:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2070015, 2092676, 2070015 ], "changes": [ { "cves": [], "log": [ "", " * Set a derivative.ubuntu build profile by default.", "" ], "package": "dpkg", "version": "1.23.6ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sat, 14 Mar 2026 17:10:34 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Change native source version/format mismatch errors into warnings", " until the dust settles on Debian bug 737634 about override options.", " - Add DPKG_UNTRANSLATED_MESSAGES environment check so that higher-level", " tools can get untranslated dpkg terminal log messages while at the", " same time having translated debconf prompts.", " - Map unqualified package names of multiarch-same packages to the native", " arch instead of throwing an error, so that we don't break on upgrade", " when there are unqualified names stored in the dpkg trigger database.", " - Apply a workaround from mvo to consider ^rc packages as multiarch,", " during the dpkg consistency checks. (see LP: 1015567 and 1057367).", " - dpkg-gencontrol: Fix Package-Type override handling for ddeb support.", " - scripts/Dpkg/Vendor/Ubuntu.pm, scripts/dpkg-buildpackage.pl: set", " 'nocheck' in build options by default on Ubuntu/riscv64. Overridable", " in debian/rules with", " 'DEB_BUILD_OPTIONS := $(filter-out nocheck,$(DEB_BUILD_OPTIONS))'.", " - dpkg-dev: Depend on lto-disabled-list.", " - dpkg-buildflags: Read package source names from lto-disabled-list,", " to build without lto optimizations. When adding a source package to the", " list, please also file a launchpad issue and tag it with 'lto'.", " - scripts/Dpkg/Vendor/Ubuntu.pm: set 'noudeb' build profile by", " default. Override this by exporting DEB_BUILD_PROFILE='!noudeb' which", " will be stripped, and thus building with udebs.", " - build: Switch default dpkg-deb compression from xz to zstd.", " Keep compressing dpkg.deb with xz to help bootstrapping on non-Ubuntu", " systems.", " - set default zstd compression level to 19", " - scripts/Dpkg/Vendor/Debian.pm: Always include \"-fdebug-prefix-map\"", " to build flags. Map path to \"/usr/src/PKGNAME-PKGVER\" instead of", " \".\", honouring the DWARF standard which prohibits relative paths", " in DW_AT_comp_dir.", " - scripts/{mk/buildflags.mk,t.mk}: Add support for DEB_BUILD_DEBUGPATH.", " - man/dpkg-buildflags.pod: Document new behaviour of \"fdebugmap\" and", " new DEB_BUILD_DEBUGPATH variable.", " - Disable -fstack-clash-protection on armhf since it causes crashes", " - dpkg-buildflags: Add a new feature \"framepointer\" in the \"qa\" area.", " - Turn on the use of frame pointers by default on 64bit architectures.", " - Update _FORTIFY_SOURCE documentation.", " - Update Dpkg_BuildFlags test case.", " - Fix debian/rules duplicate invocations of dh_builddeb", " - lib/dpkg/compress.c: clean up override of the default zstd compression", " level", " - dpkg-buildflags: Explicitly turn off hardening flags when requested.", " - Export environment variables DEB_BUILD_OS_RELEASE_ID, DEB_HOST_ARCH,", " DEB_SOURCE, and DEB_VERSION when including buildflags.mk (LP: #2070015)", " - buildflags: document RUSTFLAGS", " - buildflags: Always set RUSTFLAGS", " - tests: avoid failing under DEB_VENDOR != Debian", " - dpkg-buildflags: enable ELF package note metadata", " - buildflags: set origin of env vars for ELF package metadata", " - Export ELF_PACKAGE_METADATA for a build. Picked up by GCC and clang.", " Passing -specs explicitly can be dropped in a follow-up upload.", " - dpkg-buildflags: set RUSTFLAGS to influence the command line flags cargo", " will pass to rustc, and set the flags to include framepointers when the", " framepointer feature of the qa area is enabled.", " - Disable framepointer on ppc64el.", " - Disable framepointer on s390x, leaving only -mbackchain.", " - Add a note about different behaviour of dpkg-buildflags with respect to", " LTO on Ubuntu.", " - dpkg-buildpackage: Construct ELF_PACKAGE_METADATA, and set in the", " environment if not already set. This setting is picked up by", " GCC and clang, passing a --package-metadata option the the linker.", " - Stop passing --specs for metadata information. It's too fragile", " and only works for GCC. Also introduces a lot of packaging delta.", " - Stop defaulting to -O3 on amd64.", " - dpkg-dev: Still prefer gnupg and gpgv over sq.", " Introduce architecture variants (thanks to mwhudson for the rebase)", " - scripts/dpkg-gencentrol.pl: fix operator precedence.", " - Copy across the architecture variant (LP #2128606)", " - Drop unused elf-package-metadata specs files", " - dpkg-buildflags: set --package-metadata directly in LDFLAGS, and still", " set ELF_PACKAGE_METADATA in the environment.", " - Include architecture variant in ELF package metadata (LP #2131806)", "" ], "package": "dpkg", "version": "1.23.6ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2070015 ], "author": "Matthias Klose ", "date": "Sat, 07 Mar 2026 08:47:21 +0100" }, { "cves": [ { "cve": "CVE-2026-2219", "url": "https://ubuntu.com/security/CVE-2026-2219", "cve_description": "It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data stream when uncompressing a zstd-compressed .deb archive, which may result in denial of service (infinite loop spinning the CPU).", "cve_priority": "medium", "cve_public_date": "2026-03-07 09:16:00 UTC" } ], "log": [ "", " [ Guillem Jover ]", " * dpkg-query: Fix segfault with empty -S argument. LP: #2092676", " * dpkg-deb: Be more robust against truncated ar archives.", " Reported by Yashashree Gund .", " * dpkg-deb: Reject ar archives with 0 sized tar members.", " Reported by Yashashree Gund .", " * libdpkg, scripts: Detect corrupt ar archive with non-even byte sizes.", " * dpkg-source: Fix running from within the source tree.", " Reported by Umut (on IRC).", " * dpkg-source: Support running --commit from within the source tree w/o", " «.». Closes: #1127383", " * dpkg-source: Fix format in maintainer error message.", " Thanks to Marko Zajc .", " * dpkg-scanpackages: Add new --no-implicit-arch option. Closes: #1128325", " * Perl modules:", " - Dpkg::Shlibs::Objdump::Object: Clarify code comment.", " - Dpkg::Source::Package::V2: Do not print source root on modified files", " list. Closes: #1126558", " - Dpkg::Source::Patch: Speed up patched filename retrieval in patches.", " - Dpkg::Source::Patch: Add comment about the use of tr{}{} as char counter.", " - Dpkg::OpenPGP::Backend::GnuPG: Add missing Dpkg::Gettext import.", " Closes: #1128406", " - Dpkg::OpenPGP::Backend::GnuPG: Refactor _file_read_header().", " - Dpkg::OpenPGP::Backend::GnuPG: Detect and warn on LibrePGP artifacts.", " - Dpkg::Email::Address: Warn on email domains with a single label.", " Closes: #1126508", " - Dpkg::Source::Patch: Fix code comment.", " - Dpkg::Source::Patch: Add new has_errors() method.", " - Dpkg::Source::Package::V2: Delay unrepresentable error after local", " changes list. Closes: #1126665", " - Dpkg::Vendor: Fix taint mode in get_vendor_object().", " - Dpkg::Compression: Remove deprecated function compression_get_property().", " - Dpkg::Archive::Ar: Switch header variables into a hash.", " - Dpkg::Archive::Ar: Check that no header field is empty.", " * Code internals:", " - libdpkg: Use varbuf_str() instead of directly accessing buf.", " - scripts: Parse and validate all Changed-By and Maintainer field inputs.", " Closes: #1126507", " - libdpkg: Terminate zstd decompression when we have no more data.", " Reported by Yashashree Gund . Closes: #1129722", " Fixes CVE-2026-2219.", " - dpkg-deb: Refactor ar member size into an intermediate variable.", " * Build system:", " - Add URL, Maintainer and License fields to .pc file.", " * Test suite:", " - Add basic Perl taint mode checks.", " * Localization:", " - Update Dutch translations.", " Thanks to Frans Spiesschaert .", " Closes: #1127882, #1127884", " - Update Swedish translations.", " Thanks to Peter Krefting . Closes: #1128529", "" ], "package": "dpkg", "version": "1.23.6", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2092676 ], "author": "Guillem Jover ", "date": "Thu, 05 Mar 2026 06:54:58 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Change native source version/format mismatch errors into warnings", " until the dust settles on Debian bug 737634 about override options.", " - Add DPKG_UNTRANSLATED_MESSAGES environment check so that higher-level", " tools can get untranslated dpkg terminal log messages while at the", " same time having translated debconf prompts.", " - Map unqualified package names of multiarch-same packages to the native", " arch instead of throwing an error, so that we don't break on upgrade", " when there are unqualified names stored in the dpkg trigger database.", " - Apply a workaround from mvo to consider ^rc packages as multiarch,", " during the dpkg consistency checks. (see LP: 1015567 and 1057367).", " - dpkg-gencontrol: Fix Package-Type override handling for ddeb support.", " - scripts/Dpkg/Vendor/Ubuntu.pm, scripts/dpkg-buildpackage.pl: set", " 'nocheck' in build options by default on Ubuntu/riscv64. Overridable", " in debian/rules with", " 'DEB_BUILD_OPTIONS := $(filter-out nocheck,$(DEB_BUILD_OPTIONS))'.", " - dpkg-dev: Depend on lto-disabled-list.", " - dpkg-buildflags: Read package source names from lto-disabled-list,", " to build without lto optimizations. When adding a source package to the", " list, please also file a launchpad issue and tag it with 'lto'.", " - scripts/Dpkg/Vendor/Ubuntu.pm: set 'noudeb' build profile by", " default. Override this by exporting DEB_BUILD_PROFILE='!noudeb' which", " will be stripped, and thus building with udebs.", " - build: Switch default dpkg-deb compression from xz to zstd.", " Keep compressing dpkg.deb with xz to help bootstrapping on non-Ubuntu", " systems.", " - set default zstd compression level to 19", " - scripts/Dpkg/Vendor/Debian.pm: Always include \"-fdebug-prefix-map\"", " to build flags. Map path to \"/usr/src/PKGNAME-PKGVER\" instead of", " \".\", honouring the DWARF standard which prohibits relative paths", " in DW_AT_comp_dir.", " - scripts/{mk/buildflags.mk,t.mk}: Add support for DEB_BUILD_DEBUGPATH.", " - man/dpkg-buildflags.pod: Document new behaviour of \"fdebugmap\" and", " new DEB_BUILD_DEBUGPATH variable.", " - Disable -fstack-clash-protection on armhf since it causes crashes", " - dpkg-buildflags: Add a new feature \"framepointer\" in the \"qa\" area.", " - Turn on the use of frame pointers by default on 64bit architectures.", " - Update _FORTIFY_SOURCE documentation.", " - Update Dpkg_BuildFlags test case.", " - Fix debian/rules duplicate invocations of dh_builddeb", " - lib/dpkg/compress.c: clean up override of the default zstd compression", " level", " - dpkg-buildflags: Explicitly turn off hardening flags when requested.", " - Export environment variables DEB_BUILD_OS_RELEASE_ID, DEB_HOST_ARCH,", " DEB_SOURCE, and DEB_VERSION when including buildflags.mk (LP: #2070015)", " - buildflags: document RUSTFLAGS", " - buildflags: Always set RUSTFLAGS", " - tests: avoid failing under DEB_VENDOR != Debian", " - dpkg-buildflags: enable ELF package note metadata", " - buildflags: set origin of env vars for ELF package metadata", " - Export ELF_PACKAGE_METADATA for a build. Picked up by GCC and clang.", " Passing -specs explicitly can be dropped in a follow-up upload.", " - dpkg-buildflags: set RUSTFLAGS to influence the command line flags cargo", " will pass to rustc, and set the flags to include framepointers when the", " framepointer feature of the qa area is enabled.", " - Disable framepointer on ppc64el.", " - Disable framepointer on s390x, leaving only -mbackchain.", " - Add a note about different behaviour of dpkg-buildflags with respect to", " LTO on Ubuntu.", " - dpkg-buildpackage: Construct ELF_PACKAGE_METADATA, and set in the", " environment if not already set. This setting is picked up by", " GCC and clang, passing a --package-metadata option the the linker.", " - Stop passing --specs for metadata information. It's too fragile", " and only works for GCC. Also introduces a lot of packaging delta.", " - Stop defaulting to -O3 on amd64.", " - dpkg-dev: Still prefer gnupg and gpgv over sq.", " Introduce architecture variants (thanks to mwhudson for the rebase)", " - scripts/dpkg-gencentrol.pl: fix operator precedence.", " - Copy across the architecture variant (LP #2128606)", " - Drop unused elf-package-metadata specs files", " - dpkg-buildflags: set --package-metadata directly in LDFLAGS, and still", " set ELF_PACKAGE_METADATA in the environment.", " - Include architecture variant in ELF package metadata (LP #2131806)", "" ], "package": "dpkg", "version": "1.23.5ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2070015 ], "author": "Matthias Klose ", "date": "Sun, 08 Feb 2026 12:01:45 +0100" }, { "cves": [], "log": [ "", " [ Guillem Jover ]", " * dpkg-source: Do not error out on empty fields. Closes: #1125985", " * Perl modules:", " - Dpkg::Email::Address: Do not construct invalid objects.", " - Dpkg::Control::FieldsCore: Improve Maintainer and Uploader field parse", " errors.", " * Documentation:", " - man: Improve dpkg-buildpackage --sign-backend description.", " * Build system:", " - Move the dist artifacts to the release directory.", " * Test suite:", " - Add known exception sources for ProhibitCaptureWithoutTest.", "" ], "package": "dpkg", "version": "1.23.5", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Guillem Jover ", "date": "Fri, 23 Jan 2026 01:41:44 +0100" }, { "cves": [], "log": [ "", " [ Guillem Jover ]", " * Revert \"Dpkg::Vendor: Add branch hardening flags to LDFLAGS\".", " Closes: #1125323, #1125715", " * start-stop-daemon: Check for invalid combinations of --notify-await", " options. Closes: #1124643", " * dpkg: Fix typo for «metadata» in error message. Closes: #1125128", " * scripts: Parse and validate Maintainer and Uploaders email addresses.", " * dpkg-source: Warn when the Uploaders field contains the Maintainer.", " * Perl modules:", " - Dpkg::BuildProfiles: Remove the parser workaround now that dh-exec is", " fixed.", " - Dpkg::Shlibs::Symbol: Emit a warning for the deprecated wildcard syntax.", " Closes: #1125722", " - Dpkg::Source::Package::V2: Switch generated patch to be git formatted.", " - Dpkg::Source::Package::V2: Print Bug- in patch template instead", " of vendor specific ones.", " - Dpkg::Email::Address: New module.", " - Dpkg::Control::FieldsCore: Add new email address field parsing functions.", " - Dpkg::Shlibs::SymbolFile: Refactor metavariable substitution into a", " function.", " - Dpkg::Shlibs::SymbolFile: Add support for #CURVER#. Closes: #615940", " * Documentation:", " - dpkg-buildflags(1): Clarify that LDFLAGS are not safe for direct ld(1)", " use. See #1125323.", " - start-stop-daemon(8): Clarify relationship between --notify-await and", " --background. See #1124643.", " - man: Refactor explanation about deb-symbols metavariables.", " * Code internals:", " - dselect: Mark keybindings methods only accessing static members as", " static.", " - dpkg-deb: Reduce pid variable scope.", " - libcompat: Define __has_attribute() if not already defined in gettext.h.", " * Packaging:", " - Bump Standards-Version to 4.7.3 (no changes needed).", " * Test suite:", " - Undefine _LIBC for cppcheck.", " - Update cppcheck suppressions for 2.19.0.", " * Localization:", " - Update Dutch translations.", " Thanks to Frans Spiesschaert .", " Closes: #1125463, #1125465, #1125466", " - Update Portuguese translations.", " Thanks to Américo Monteiro .", " Closes: #1124138, #1124412, #1124439, #1124636", "" ], "package": "dpkg", "version": "1.23.4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Guillem Jover ", "date": "Sun, 18 Jan 2026 18:29:23 +0100" }, { "cves": [], "log": [ "", " [ Guillem Jover ]", " * Perl modules:", " - Dpkg::Vendor::Debian: Mask PIE on m68k, sh4 and x32.", " Thanks to Adrian Bunk . Closes: #1100187", " - Dpkg::Version: Add new has_epoch() and has_revision() methods.", " Closes: #1123630", " - Dpkg::Source::Package::V1: Make debian/rules executable on extract if", " present. Closes: #1123652", "" ], "package": "dpkg", "version": "1.23.3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Guillem Jover ", "date": "Sat, 20 Dec 2025 02:18:49 +0100" }, { "cves": [], "log": [ "", " [ Guillem Jover ]", " * Perl modules:", " - Dpkg::BuildProfiles: Add workaround for callers passing invalid formulas.", " Diagnosed by Chris Hofstaedtler .", "" ], "package": "dpkg", "version": "1.23.2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Guillem Jover ", "date": "Thu, 18 Dec 2025 02:10:10 +0100" }, { "cves": [], "log": [ "", " [ Guillem Jover ]", " * Perl modules:", " - Dpkg::BuildProfiles: Add missing Dpkg::Gettext and Dpkg::ErrorHandling", " imports. Closes: #1123515", " * Test suite:", " - Add a test for negated build profiles.", " Prompted by Chris Hofstaedtler (on IRC).", "" ], "package": "dpkg", "version": "1.23.1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Guillem Jover ", "date": "Wed, 17 Dec 2025 13:10:07 +0100" }, { "cves": [], "log": [ "", " [ Guillem Jover ]", " * Pass --format=xz explicitly to xz on decompression.", " * dpkg-divert: Clarify default behavior change timeline.", " * dpkg: Remove obsolete --forget-old-unavail from --help output.", " * Add vendor specific support for fuzzy source vs version nativeness.", " Closes: #737634", " * dpkg-deb: Fix cleanup for control member with restricted directories.", " Reported by zhutyra on HackerOne.", " * dpkg: Use maintscript name instead of untranslated description in error", " messages.", " * dpkg: Unify maintainer script error messages.", " * dpkg: Print maintscript fallback success message after finishing actions.", " * Improve subprocess exit message.", " * update-alternatives: Move debug message from call site into", " alternative_prepare_install().", " * Shallow pass at clarifying debug messages.", " * update-alternatives: Clarify in --help output that the «...» refers to", " --slave.", " * dpkg-query: Improve --list header ASCII art.", " Suggested by No Comment .", " * dselect, libdpkg: Use Ctrl+ instead of ^ in messages.", " * dpkg-split: Obsolete --msdos option which no longer does anything.", " * Remove support for MSDOS-Filename field.", " * dpkg-shlibdeps: Add a debug print when overriding file to package mappings.", " See #1115395.", " * Use invalid instead of illegal in symbol names and output messages.", " * dpkg: Improve commands acting on the available file from standard input.", " Closes: #1119906", " * Use «package metadata» instead of «control information».", " * dpkg: Use MAXCONTROLFILENAME instead of 50 or 250 in format string", " precision.", " * dpkg-split: Mark strings for translation.", " * start-stop-daemon: Update list of change contributors.", " * Do not use contractions in output messages.", " * Reword --help options descriptions to fit again in 80 columns.", " * dpkg-source: Use Dpkg::BuildProfiles to parse the Build-Profiles field.", " * dpkg-source: Add a new profile:v1 property in Package-List field.", " See https://lists.debian.org/debian-devel/2025/11/msg00333.html.", " * Use valid instead of legal in output messages and code comments.", " * dpkg-source: Add support for --signer-certs option. Closes: #1110172", " * dpkg-source: Add new --no-vendor-certs extract option.", " * dpkg: Do not run the postinst during cleanup if the previous state was bad.", " Based on a patch by Ian Jackson .", " Closes: #432893", " * dpkg: Mark reinstreq during unpack as late as possible, not before prerm.", " Thanks to Ian Jackson .", " * Architecture support:", " - Accept sparcv9 as an alias for GNU CPU name sparc64.", " - Remove kopensolaris-any support.", " See commit 602261f1f3e3143b0b668d3ae185fb600b4ed18c.", " See https://github.com/dtbartle/glibc-opensolaris (2009-04).", " See https://github.com/ip1981/kopensolaris-glibc (2015-01).", " - Remove kfreebsd-any support.", " See https://lists.debian.org/debian-devel/2023/05/msg00306.html.", " - Remove support for powerpcspe.", " * Portability:", " - Use portable POSIX «cp» options -RPp instead -a.", " * Perl modules:", " - Dpkg::Vendor: Parametrize vendor and field names in diagnostic messages.", " - Dpkg: Bump PROGVERSION to 1.23.x.", " - Dpkg::Build::Info: Remove deprecated module.", " - Dpkg::OpenPGP::Backend::Sequoia: Do not run sq/sqv to verify with no", " keyrings. Closes: #1106148", " - Dpkg::OpenPGP::Backend::Sequoia: Run sq in stateless mode for", " verification.", " Suggested by Neal H. Walfield .", " - Dpkg::Compression: Uncomment compression_get_property() deprecation", " warning.", " - Dpkg::Control::FieldsCore: Remove implicit argument use in", " field_transfer_single().", " - Dpkg::Shlibs::SymbolFile: Remove deprecated ignore blacklist support.", " - Dpkg::Source::Package: Move non-native version build check from 3.0", " (quilt) to 2.0.", " - Dpkg::Source::Package: Add format vs version coherence warnings on", " extract.", " - Dpkg::Source::Package::V1: Remove redundant -r option for cp.", " - Test::Dpkg: Refactor all_shell_files() function.", " - Test::Dpkg: Add all maintscripts to all_shell_files().", " - Test::Dpkg: Refactor all_pod_modules() function.", " - Test::Dpkg: Optimize modules skipping in all_pod_modules().", " - Test::Dpkg: Do not export directory getters.", " - Test::Dpkg: Refactor test files scan function.", " - Test::Dpkg: Extend all_shell_files() to return all shell scripts.", " - Dpkg::BuildDriver::DebianRules: Fix uninitialized Perl variables.", " Closes: #1107971", " - Dpkg::BuildDriver::DebianRules: Fix R³ dpkg/target/ values", " handling.", " - Dpkg::BuildDriver::DebianRules: Improve R³ dpkg/ fallback", " matching.", " - Dpkg::BuildTree: Fix needs_root() for R³ with implementation specific", " keywords. See #1107971.", " - Dpkg::SysInfo: Refactor number of processes retrieval into new module.", " - Dpkg::Shlibs: Remove DEB_TARGET_ARCH handling from setup_library_paths().", " Reported by Helmut Grohne .", " - Dpkg::OpenPGP::Backend: Do not mark hint command as translatable.", " - Dpkg::Source::Package: Print a notice when verifying .dsc signatures.", " - Dpkg::Source::Package: Print the keyrings used during verification.", " Closes: #703364", " - Dpkg::OpenPGP: Add own error for missing keyrings in verify functions.", " - Dpkg::BuildDriver::DebianRules: Use a default debian_rules value.", " - Dpkg::Source::Package::V3::Git: Use «git submodule» for its status.", " Suggested by Daniel Gröber . Closes: #1100413", " - Dpkg::OpenPGP: Do not run verify with no keyrings. Closes: #1111617", " - Dpkg::BuildDriver::DebianRules: Unify debian/rules fixer with source", " extract.", " - Dpkg::Source::Package: Remove debian/rules fixer at extract time.", " Closes: #1078764", " - Dpkg::IPC: Deprecate nocheck option and rename it to no_check.", " - Dpkg::Source::Patch: Deprecate nofinish option and rename it to", " no_finish.", " - Dpkg::Deps::Simple: Move dependency regex into its own variable.", " - Dpkg::Compression: Move global regexes into", " compression_get_file_extension_regex.", " - Dpkg::OpenPGP::Backend::GnuPG: Use TEMPLATE instead of argument in", " newdir.", " - Dpkg::Source: Rename $tmp to $tmpdir.", " - Dpkg::OpenPGP::Backend::SOP: Switch _sop_exec to get all options in a", " hash.", " - Dpkg::Shlibs::SymbolFile: Switch wantarray from a ternary operator to", " if/else.", " - Dpkg::Shlibs::SymbolFile: Rename file option to filename.", " - Dpkg::Changelog::Parse: Deprecate file option and rename it to filename.", " - Dpkg::Lock: Restructure file_lock code to make it easier to add fallback.", " - Dpkg::Lock: Avoid using eval for the File::FcntlLock new and lock calls.", " - Dpkg::Lock: Fallback to use File::FcntlLock::Pure if File::FcntlLock", " fails.", " - Dselect::Method::Config: New module.", " - Dselect::Method::Media: New module to refactor get_disk_label().", " - Dpkg::Vendor: Add branch hardening flags to LDFLAGS.", " Thanks to Simon Chopin . Closes: #1115292", " - Test::Dpkg: Rename test_needs_srcdir_switch() to test_chdir_srcdir().", " - Dpkg::Shlibs: Use a hash to track libdir repeats when parsing ld.so.conf.", " - Dpkg::Shlibs: Assign from s///r instead of via topic variable.", " - Dpkg::Shlibs::Objdump::Object: Do not assign readline to $_ on discard.", " - Dpkg::Vendor::Debian: Add comment about current state of -fcf-protection.", " - Dpkg::BuildInfo: Allow LFLAGS (lex/flex) and YFLAGS (yacc/bison)", " variables.", " - Dpkg::BuildInfo: Allow LANGUAGE variable.", " - Dpkg::BuildInfo: Allow LOCPATH, NLSPATH, I18NPATH and GCONV_PATH", " variables.", " - Dpkg::BuildInfo: Allow TZ, TZDIR and DATEMSK variables.", " - Dpkg::BuildInfo: Allow ld.so run-time variables.", " - Dpkg::BuildInfo: Allow resolver specific variables.", " - Dpkg::BuildInfo: Allow POSIXLY_CORRECT and GETCONF_DIR variables.", " - Dpkg::BuildProfiles: Add new build_profile_is_invalid function.", " - Dpkg::BuildProfiles: Make parser more strict. Closes: #1121657", " - Dpkg::Shlibs::Objdump::Object: Add support for \"Version References\"", " symbols. Closes: #1122107", " - Dpkg::Source::Package: Deprecate implicit trusted GnuPG keyrings.", " - Dpkg::OpenPGP::Backend::GnuPG: Deprecate KeyBox formatted keyrings.", " - Dpkg::Vendor::Debian: Use .pgp keyrings instead of .gpg ones.", " - Dpkg::Vendor::Devuan: Use .pgp keyrings instead of .gpg ones.", " - Dpkg::Control::FieldsCore: Deprecate SC field export rules in binary", " stanza. Prompted by Richard Hansen .", " See https://bugs.debian.org/1117566.", " - Dpkg::Control::FieldsCore: Do not autovivify %FIELDS entries on getters.", " - Dpkg::Substvars: Add support for implicit substvars assigned with $=.", " * Make fragments:", " - Switch to use GNU make intcmp instead of relying on shell.", " Prompted by Sean Whitton .", " See https://lists.debian.org/debian-devel/2025/12/msg00039.html.", " * Documentation:", " - doc: Make README.* files fully machine readable.", " - doc: Add space after comment and TODO/XXX marker.", " - man: Clarify when dpkg-maintscript-helpers might need Pre-Depends on", " dpkg. Closes: #1108386", " - man: Document DEB_BUILD_PROFILES in all tools honoring the env variable.", " - man: Add a reference to build profiles in dpkg-buildflags.", " Closes: #1026319", " - man: Itemize deb(5) and deb-split(5).", " - man: Fix DPKG_ROOT documentation in dpkg(1). Closes: #1110873", " - man: Document DPKG_ROOT also as an external environment variable for", " dpkg.", " - man: Switch from .orig-.tar to .orig-.tar.", " Closes: #1095231", " - man: Clarify that the archive described is the ar archive in a .deb.", " - man: Update control examples in deb-control(5) and deb-src-control(5).", " - man: Add lost detail about parts of a deb-changelog(5) getting ignored.", " Reported by Helge Kreutzmann .", " - man: Use proper L<> markup for man page references.", " Reported by Helge Kreutzmann .", " - man: Use «directory» instead of «dir» for dpkg option arguments.", " Reported by Helge Kreutzmann .", " - man: Add missing dpkg in «supported since» sentence in deb(5).", " Reported by Helge Kreutzmann .", " - man: Match plural forms in parentheticals in dpkg-buildflags(1).", " Reported by Helge Kreutzmann .", " - man: Add Multi-Arch field to dpkg-query known fields.", " Thanks to Nicolas Boulenguez . Closes: #1115250", " - doc: Update references to mixed old and new C/C++ coding styles.", " - doc: Document test suite specific environment variables in README.", " - man: Use command instead of action for dpkg command options.", " - man: Clarify build profiles syntax.", " - man: Document accepted syntax for architecture names.", " - man: Improve architecture documentation.", " Prompted by Helmut Grohne .", " - man: Clarify binary stanza default field values and inheritance rules.", " - man: Itemize deb-substvars operators.", " * Code internals:", " - Quote variables in shell scripts.", " - Disable intentional or false-positive shellcheck checks.", " - perl: Switch to use 0o prefix for octal literals.", " - perl: Switch to «use v5.36» instead of «use strict» and «use", " warnings».", " - libdpkg: Do not segfault when adding triggers in no-act mode.", " Closes: #1108192", " - dpkg: Switch from m_asprintf() to str_fmt().", " - dpkg: Fix memory leak in maintscript_fallback().", " - dpkg: Rename maintscript description variable from buf to scriptdesc.", " - libdpkg: Enable meminfo_get_available() on GNU/Hurd.", " Prompted by Helmut Grohne .", " See https://lists.debian.org/debian-dpkg/2024/12/msg00004.html.", " - dpkg: Add a translator comment for the summarized pathname message.", " - libdpkg: Print () after function name in internerr message.", " - libdpkg: Add support for debug_at() to print debug messages at a", " function.", " - libdpkg, dpkg: Use debug_at() instead of debug() to print function name.", " - dpkg: Rename maintscript_exec() warn argument to subproc_opts.", " - dpkg: Pass cidir and cidirrest before scriptname to maintscript", " functions.", " - dpkg: Rename maintscript execution functions.", " - dpkg-gencontrol: Remove unused Dpkg::BuildProfiles import.", " - scripts: Replace some POSIX imports with Fcntl module.", " - libdpkg: Switch status abbreviations from char to strings.", " - perl: Rename regular expression variables from *_re to *_regex.", " - perl: Fix indentation.", " - perl: Remove unused File::Temp imports.", " - perl: Switch from tempfile()/tempdir() to OOP File::Temp interfaces.", " - perl: Move File::Find::find() options into an actual hashref variable.", " - perl: Fix indentation for list, listrefs and hashref variable", " definitions.", " - perl: Fix indentation for function calls with hash, hashref and listref", " arguments.", " - perl: Remove feature pragmas implied by «use VERSION».", " - Change TRANSLATORS comments style to get better extraction by gettext.", " - dselect: Remove unused __END__ markers in methods Perl modules.", " - dselect: Use Dpkg::Version in method scripts instead of calling dpkg.", " - dselect: Fix Perl syntax in methods scripts (duped parenthesis).", " - dselect: Fix Perl syntax in methods scripts (unbalanced quoting).", " - dselect: Use HERE document instead of multi-line string in method script.", " - dselect: Remove unnecessary trailing semicolon in method scripts.", " - dselect: Add missing Version field parsing to method scripts.", " - dselect: Fix variables declaration in «my» operator in media method", " script.", " - dselect: Fix open() calls in method scripts.", " - dselect: Close file descriptors in method scripts.", " - dselect: Use foreach loops instead of C-style loops in method scripts.", " - dselect: Declare Perl variables in method scripts with my.", " - dselect: Use chdir instead of non-existent cd function in method script.", " - dselect: Use {} for regex substitution operators in method scripts.", " - dselect: Remove useless topic variable use in split calls in method", " scripts.", " - dselect: Use foreach instead of map in void context in method script.", " - dselect: Use an array variable instead of reusing @_ in method script.", " - dselect: Do not mix high and low-precedence boolean operators.", " - dselect: Do not use mixed-case variable names in method scripts.", " - dselect: Rewrite all methods install scripts from shell to Perl.", " - dselect: Use intermediate variable for substr handling in method scripts.", " - dselect: Remove unused $iarch variable in method script.", " - dselect: Remove unnecessary intermediate variables in method script.", " - dselect: Use Oo as octal prefix in method scripts.", " - dselect: Do not use unusual delimiter for tr in method script.", " - dselect: Do not use boolean operators for code flow except for dying.", " - dpkg-architecture: Make architecture variables assignment more clear.", " - scripts: Remove unnecessary terminating 0 in scripts.", " - perl: Switch from hard tabs to spaces.", " - perl: Place label before loop keyword.", " - perl: Fix code indentation.", " - perl: Place each statement into its own line.", " - perl: Fix space style.", " - perl: Fix format and contents of code comments.", " - dpkg-shlibdeps: Rename global $i to $depstrength.", " - perl: Place each statement into its own line (round two).", " - perl: Fix format and contents of code comments (round two).", " - perl: Fix space style (round two).", " - perl: Fix code indentation (round two).", " - perl: Remove unnecessary parenthesis around single «my» variables.", " - dselect: Do not use boolean operators for code flow except for dying", " (round two).", " - dselect: Use named variables instead of topic variable in foreach loops.", " - libdpkg: Do an early continue in run_cleanups to reduce nesting level.", " - lib, src: Fix code formatting style of C code (round one).", " - dselect: Rework curses enable/disable functions to reduce nesting level.", " - dselect: Fix code formatting style of C++ code (round one).", " - start-stop-daemon: Change xmalloc() size argument type from int to", " size_t.", " - libcompat: Add support for __format_arg__ attribute.", " - libcompat: Mark gettext functions with __format_arg__ attribute.", " - dselect: Give a context string to keybinding translations.", " - Stop using length limited format strings (%.255s/%.250s/%.100s/%.50s).", " - libdpkg: Double the emergency error message buffer size.", " * Build system:", " - Bump minimal Perl version to 5.36.0.", " - Automatically set test parallelism from make parallelism.", " - Add new authordistcheck convenience rule.", " - Add a function definition to compile for the flags checks.", " - Add support for SHORT_TESTING to avoid running cppcheck.", " - Disable po4a warning that nags about switch to SimplePod.", " - Add an editorconfig file.", " * Packaging:", " - Use local keyword for function scoped variable in maintscript.", " - Add libselinux-dev in Build-Depends as alternative to libselinux1-dev.", " - Remove «Rules-Requires-Root: no», which is the current default.", " * Test suite:", " - Use $* instead of $@ when assigning into a string.", " - Use $() instead of legacy `` for shell command expansion.", " - Update dselect shell methods files list.", " - Check shell files pending fixes from shellcheck tests as TODO.", " - Move Perl version use pragmas as the first things to declare.", " - Pass soname as a scalar in Dpkg::Shlibs::Symbol->lookup_symbol calls.", " - Test that we do not allow «anyfoo» as an arch wildcard.", " - Remove unnecessary semicolon after loop block.", " - Hardcode number of invariant tests instead of dynamically computing them.", " - Move test plan to Test::More import.", " - Do not exit explicitly after a «plan skip_all».", " - Move update-alternatives test plan as early as possible in the test file.", " - Move use_ok() calls immediately after use imports.", " - Switch from «use_ok» to «use ok» for import checks.", " - Remove duplicate semicolon after statement.", " * Localization:", " - Add English UTF-8 translations.", " - Unfuzzy translations after contraction removal changes.", " - Unfuzzy translations after format string changes.", " - Update Catalan translations.", " - Update Portuguese scripts translation.", " - Update Swedish scripts translation.", "", " [ Helge Kreutzmann ]", " * Localization:", " - Update German man pages translation.", " - Update German scripts translation.", "", " [ Sven Joachim ]", " * Localization:", " - Update German programs translation.", "" ], "package": "dpkg", "version": "1.23.0", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Guillem Jover ", "date": "Tue, 16 Dec 2025 22:21:13 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "dracut-install", "from_version": { "source_package_name": "dracut", "source_package_version": "110-1ubuntu2", "version": "110-1ubuntu2" }, "to_version": { "source_package_name": "dracut", "source_package_version": "110-7", "version": "110-7" }, "cves": [], "launchpad_bugs_fixed": [ 2133402, 2116183, 2116073, 2116067, 2114683, 2115490, 2111570, 2107477, 1466965, 2105377, 2103540, 2098525, 2091954, 1596220, 2081183, 2081183, 2048990, 2081183, 2073677, 2069290, 2065180, 2069290, 2065180, 2065180, 2053057, 2053057, 2031417, 2031185, 2031185, 2031417 ], "changes": [ { "cves": [], "log": [ "", " * Drop test-skip-failing-MD-RAID-tests-cases-in-test-70-and-71.patch", " * Apply patches to fix failing autopkgtest 14-hooks:", " - fix(kernel-modules-export): use return instead of exit in pre-pivot hook", " - fix(memdisk): use return instead of exit in cmdline hook", " - fix(ppcmac): use return instead of exit in pre-udev hook", " - fix(syslog): use return instead of exit in initqueue/online hook", "" ], "package": "dracut", "version": "110-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Wed, 11 Feb 2026 17:43:47 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian unstable. Remaining changes:", " - autopkgtest: skip too slow 41-full-systemd on arm64 and armhf", " (see LP 2133401)", " - dracut-core: Declare breaking rust-coreutils before version 0.5.0", " * autopkgtest: run 43-kernel-install on arm64 again (LP: #2133402)", " * dracut-test: add run-qemu and test-functions", " * autopkgtest: depend on libarchive13t64 (fixed in systemd 259.1-1)", "" ], "package": "dracut", "version": "110-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2133402 ], "author": "Benjamin Drung ", "date": "Mon, 09 Feb 2026 13:20:58 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian unstable. Remaining changes:", " - autopkgtest: skip failing 43-kernel-install on arm64 (see LP 2133402)", " - autopkgtest: skip too slow 41-full-systemd on arm64 and armhf", " (see LP 2133401)", " - dracut-core: Declare breaking rust-coreutils before version 0.5.0", "" ], "package": "dracut", "version": "109-11ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Wed, 04 Feb 2026 01:04:58 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian unstable. Remaining changes:", " - Let linux-firmware updates trigger the dracut autopkgtest", " - autopkgtest: skip failing 43-kernel-install on arm64 (see LP 2133402)", " - autopkgtest: skip too slow 41-full-systemd on arm64 and armhf", " (see LP 2133401)", " * Dropped changes:", " - dracut-core: demote binutils to suggests. its only needed when using UEFI", " executables", " - fix(udev-rules): exclude udev rules from snapd. Let snapd ship a Dracut", " config file instead (see LP 2139065)", " - feat(dmsquash-live-autooverlay): support readlink from uutils", " (fixed by rust-coreutils 0.5.0)", " - test: use GNU dd instead of uutil's dd (to work around bug LP 2129037)", " (fixed by rust-coreutils 0.4.0)", " * dracut-core: Declare breaking rust-coreutils before version 0.5.0", "" ], "package": "dracut", "version": "109-9ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Mon, 26 Jan 2026 11:47:44 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian unstable. Remaining changes:", " - drop udevsettle patch (these kind of patches should be applied upstream)", " - dracut-core: demote binutils to suggests. its only needed when using UEFI", " executables", " - Let linux-firmware updates trigger the dracut autopkgtest", " - fix(udev-rules): exclude udev rules from snapd", " - feat(dmsquash-live-autooverlay): support readlink from uutils", " - test: use GNU dd instead of uutil's dd (to work around bug LP 2129037)", " - autopkgtest: skip failing 43-kernel-install on arm64 (see LP 2133402)", " - autopkgtest: skip too slow 41-full-systemd on arm64 and armhf", " (see LP 2133401)", "" ], "package": "dracut", "version": "109-7ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Sat, 17 Jan 2026 01:27:36 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian unstable. Remaining changes:", " - drop udevsettle patch (these kind of patches should be applied upstream)", " - dracut-core: demote binutils to suggests. its only needed when using UEFI", " executables", " - Let linux-firmware updates trigger the dracut autopkgtest", " - fix(udev-rules): exclude udev rules from snapd", " - feat(dmsquash-live-autooverlay): support readlink from uutils", " - test: use GNU dd instead of uutil's dd (to work around bug LP 2129037)", " * test(sysroot): run with --no-hostonly-cmdline", " * autopkgtest: skip failing 43-kernel-install on arm64 (see LP 2133402)", " * autopkgtest: skip too slow 41-full-systemd on arm64 and armhf", " (see LP 2133401)", "" ], "package": "dracut", "version": "109-5ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Mon, 01 Dec 2025 11:49:45 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian unstable. Remaining changes:", " - drop udevsettle patch (these kind of patches should be applied upstream)", " - dracut-core:", " - demote cryptsetup, systemd-cryptsetup, dmsetup, kpartx, lvm2,", " and mdadm to suggests", " - demote binutils to suggests. its only needed when using UEFI executables", " - Include all packages with dracut modules in Apport bug reports", " - autopkgtest: enable tests for s390x again", " - Plymouth hook: Use alternatives instead of plymouth-set-default-theme", " - run upstream-dracut-live autopkgtest on armhf and ppc64el", " - Drop debian-initramfs-post-update.patch. Let update-initramfs call the", " bootloader hooks instead of dracut itself.", " - plymouth: Only pull in the SimpleDRM driver by default", " - Let linux-firmware updates trigger the dracut autopkgtest", " - Cherry-pick some upstream fixes:", " - fix(dracut): use \"-name\" to avoid find matching temporary directory", " - fix(systemd-sysusers): increase ordering from 68 to 78", " - fix(dracut-systemd): avoid matching extra root= substrings in cmdline", " - fix(resume): avoid matching extra resume= substrings in cmdline", " - fix(udev-rules): exclude udev rules from snapd", " * feat(dmsquash-live-autooverlay): support readlink from uutils", " * test: use GNU dd instead of uutil's dd (to work around bug LP 2129037)", "" ], "package": "dracut", "version": "108-8ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Mon, 20 Oct 2025 18:37:02 +0200" }, { "cves": [], "log": [ "", " * Default to cpio until 3cpio MIR is complete", " * Cherry-pick some upstream fixes:", " - fix(dracut): use \"-name\" to avoid find matching temporary directory", " - fix(systemd-sysusers): increase ordering from 68 to 78", " - fix(dracut-systemd): avoid matching extra root= substrings in cmdline", " - fix(resume): avoid matching extra resume= substrings in cmdline", " * fix(udev-rules): exclude udev rules from snapd", "" ], "package": "dracut", "version": "108-3ubuntu3", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Thu, 04 Sep 2025 23:20:52 +0200" }, { "cves": [], "log": [ "", " * fix(dracut): library directory creation in --kernel-only", "" ], "package": "dracut", "version": "108-3ubuntu2", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Thu, 14 Aug 2025 20:39:46 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian unstable. Remaining changes:", " - drop udevsettle patch (these kind of patches should be applied upstream)", " - dracut-core:", " - demote cryptsetup, systemd-cryptsetup, dmsetup, kpartx, lvm2,", " and mdadm to suggests", " - demote binutils to suggests. its only needed when using UEFI executables", " - Include all packages with dracut modules in Apport bug reports", " - autopkgtest: enable tests for s390x again", " - Plymouth hook: Use alternatives instead of plymouth-set-default-theme", " - run upstream-dracut-live autopkgtest on armhf and ppc64el", " - Drop debian-initramfs-post-update.patch. Let update-initramfs call the", " bootloader hooks instead of dracut itself.", " - plymouth: Only pull in the SimpleDRM driver by default", " - Let linux-firmware updates trigger the dracut autopkgtest", " * Depend on 3cpio instead of cpio", "" ], "package": "dracut", "version": "108-3ubuntu1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Wed, 13 Aug 2025 23:08:38 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian unstable. Remaining changes:", " - drop udevsettle patch (these kind of patches should be applied upstream)", " - dracut-core:", " - demote cryptsetup, systemd-cryptsetup, dmsetup, kpartx, lvm2,", " and mdadm to suggests", " - demote binutils to suggests. its only needed when using UEFI executables", " - Include all packages with dracut modules in Apport bug reports", " - autopkgtest: enable tests for s390x again", " - Plymouth hook: Use alternatives instead of plymouth-set-default-theme", " - run upstream-dracut-live autopkgtest on armhf and ppc64el", " - Drop debian-initramfs-post-update.patch. Let update-initramfs call the", " bootloader hooks instead of dracut itself.", " - plymouth: Only pull in the SimpleDRM driver by default", " - Let linux-firmware updates trigger the dracut autopkgtest", " * fix(dracut-util): crash if CMDLINE ends with quotation mark", "" ], "package": "dracut", "version": "108-2ubuntu1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Fri, 08 Aug 2025 02:17:39 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian unstable. Remaining changes:", " - drop udevsettle patch (these kind of patches should be applied upstream)", " - dracut-core:", " - demote cryptsetup, systemd-cryptsetup, dmsetup, kpartx, lvm2,", " and mdadm to suggests", " - demote binutils to suggests. its only needed when using UEFI executables", " - Include all packages with dracut modules in Apport bug reports", " - autopkgtest: enable tests for s390x again", " - autopkgtest: add TEST-70-ISCSI and TEST-71-ISCSI-MULTI", " - Plymouth hook: Use alternatives instead of plymouth-set-default-theme", " - run upstream-dracut-live autopkgtest on armhf and ppc64el", " - Drop debian-initramfs-post-update.patch. Let update-initramfs call the", " bootloader hooks instead of dracut itself.", " - plymouth: Only pull in the SimpleDRM driver by default", " - Let linux-firmware updates trigger the dracut autopkgtest", "" ], "package": "dracut", "version": "108-1ubuntu1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Tue, 05 Aug 2025 10:40:05 +0200" }, { "cves": [], "log": [ "", " * fix(lsinitrd): resolve initrd to real path (LP: #2116183)", "" ], "package": "dracut", "version": "107-1ubuntu5", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 2116183 ], "author": "Benjamin Drung ", "date": "Tue, 08 Jul 2025 23:12:17 +0200" }, { "cves": [], "log": [ "", " * Fix trigger looping when installing dracut (LP: #2116073)", " * Add autopkgtest for lsinitrd", " * Let linux-firmware updates trigger the dracut autopkgtest (LP: #2116067)", "" ], "package": "dracut", "version": "107-1ubuntu4", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 2116073, 2116067 ], "author": "Benjamin Drung ", "date": "Mon, 07 Jul 2025 13:30:54 +0200" }, { "cves": [], "log": [ "", " * Skip missing shellcheck on i386", "" ], "package": "dracut", "version": "107-1ubuntu3", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Mon, 30 Jun 2025 11:58:56 +0200" }, { "cves": [], "log": [ "", " * autopkgtest: replace qemu-kvm by qemu-system-native", " * update-initramfs: support deferring update by trigger (LP: #2114683)", " * Revert \"Avoid updating the initramfs twice for some cases\" (LP: #2115490)", " * dracut-network: default to systemd-networkd as network manager", " * source.apport: import packaging from apport", " * Fix shellcheck in Debian packaging scripts", " * Run syncheck, TEST-80-GETARGS, and TEST-81-SKIPCPIO during build", "" ], "package": "dracut", "version": "107-1ubuntu2", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 2114683, 2115490 ], "author": "Benjamin Drung ", "date": "Fri, 27 Jun 2025 16:51:35 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian unstable (LP: #2111570). Remaining changes:", " - drop udevsettle patch (these kind of patches should be applied upstream)", " - dracut-core:", " - demote cryptsetup, systemd-cryptsetup, dmsetup, kpartx, lvm2,", " and mdadm to suggests", " - demote binutils to suggests. its only needed when using UEFI executables", " - Include all packages with dracut modules in Apport bug reports", " - autopkgtest: enable tests for s390x again", " - autopkgtest: add TEST-70-ISCSI and TEST-71-ISCSI-MULTI", " - Plymouth hook: Use alternatives instead of plymouth-set-default-theme", " - run upstream-dracut-live autopkgtest on armhf and ppc64el", " - Add update-initramfs (derived from initramfs-tools)", " - Drop debian-initramfs-post-update.patch. Let update-initramfs call the", " bootloader hooks instead of dracut itself.", " - Add bash completion for update-initramfs", " - Avoid updating the initramfs twice for some cases", " - plymouth: Only pull in the SimpleDRM driver by default", " * autopkgtest: depend on curl for test 60-NFS", " * fix(simpledrm): add =drivers/gpu/drm/panel (LP: #2107477)", "" ], "package": "dracut", "version": "107-1ubuntu1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 2111570, 2107477 ], "author": "Benjamin Drung ", "date": "Fri, 23 May 2025 14:54:03 +0200" }, { "cves": [], "log": [ "", " * update-initramfs: add -s parameter", " * Avoid updating the initramfs twice for some cases (LP: #1466965)", " * add simple-drm module", " * plymouth: Only pull in the SimpleDRM driver by default (LP: #2105377)", "" ], "package": "dracut", "version": "106-2ubuntu5", "urgency": "medium", "distributions": "plucky", "launchpad_bugs_fixed": [ 1466965, 2105377 ], "author": "Benjamin Drung ", "date": "Wed, 02 Apr 2025 10:39:23 +0200" }, { "cves": [], "log": [ "", " * update-initramfs: add --version parameter", " * Add bash completion for update-initramfs (LP: #2103540)", "" ], "package": "dracut", "version": "106-2ubuntu4", "urgency": "medium", "distributions": "plucky", "launchpad_bugs_fixed": [ 2103540 ], "author": "Benjamin Drung ", "date": "Sat, 22 Mar 2025 00:32:49 +0100" }, { "cves": [], "log": [ "", " * fix(systemd-sysusers): silence \"Creating \" on stderr", "" ], "package": "dracut", "version": "106-2ubuntu3", "urgency": "medium", "distributions": "plucky", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Tue, 25 Feb 2025 17:18:28 +0100" }, { "cves": [], "log": [ "", " * Add update-initramfs (derived from initramfs-tools) (LP: #2098525)", " * Drop debian-initramfs-post-update.patch. Let update-initramfs call the", " bootloader hooks instead of dracut itself.", "" ], "package": "dracut", "version": "106-2ubuntu2", "urgency": "medium", "distributions": "plucky", "launchpad_bugs_fixed": [ 2098525 ], "author": "Benjamin Drung ", "date": "Fri, 21 Feb 2025 01:23:03 +0100" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - drop udevsettle patch (these kind of patches should be applied upstream)", " - drop 90overlay-root in favor of 90overlayfs (Closes: #1017039)", " - dracut-core:", " - demote cryptsetup, systemd-cryptsetup, dmraid, dmsetup, kpartx, lvm2,", " and mdadm to suggests", " - demote binutils to suggests. its only needed when using UEFI executables", " - Include all packages with dracut modules in Apport bug reports", " - autopkgtest: add TEST-70-ISCSI and TEST-71-ISCSI-MULTI", " - Plymouth hook: Use alternatives instead of plymouth-set-default-theme", " - Set -H --hostonly-mode=sloppy as default arguments via a config file.", " * run upstream-dracut-live autopkgtest on armhf and ppc64el", " * move 99-ubuntu.conf to 10-ubuntu.conf (to ease overwriting it)", "" ], "package": "dracut", "version": "106-2ubuntu1", "urgency": "medium", "distributions": "plucky", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Thu, 13 Feb 2025 12:29:40 +0100" }, { "cves": [], "log": [ "", " * test: run RAID and ENC-RAID-LVM with --no-hostonly (LP: #2091954)", "" ], "package": "dracut", "version": "105-2ubuntu5", "urgency": "medium", "distributions": "plucky", "launchpad_bugs_fixed": [ 2091954 ], "author": "Benjamin Drung ", "date": "Sat, 21 Dec 2024 01:28:52 +0100" }, { "cves": [], "log": [ "", " * Install 99-ubuntu.conf in /usr/lib/dracut/dracut.conf.d instead of /etc", "" ], "package": "dracut", "version": "105-2ubuntu4", "urgency": "medium", "distributions": "plucky", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Wed, 27 Nov 2024 15:47:41 +0100" }, { "cves": [], "log": [ "", " * Set -H --hostonly-mode=sloppy as default arguments via a config file.", "" ], "package": "dracut", "version": "105-2ubuntu3", "urgency": "medium", "distributions": "plucky", "launchpad_bugs_fixed": [], "author": "Simon Quigley ", "date": "Sun, 24 Nov 2024 21:46:30 -0600" }, { "cves": [], "log": [ "", " * Plymouth hook: Use alternatives instead of plymouth-set-default-theme", " (LP: #1596220).", "" ], "package": "dracut", "version": "105-2ubuntu2", "urgency": "medium", "distributions": "plucky", "launchpad_bugs_fixed": [ 1596220 ], "author": "Simon Quigley ", "date": "Thu, 21 Nov 2024 14:54:12 -0600" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - run autopkgtest on all architectures", " - Run upstream autopkgtest as root", " - drop udevsettle patch (these kind of patches should be applied upstream)", " - drop 90overlay-root in favor of 90overlayfs (Closes: #1017039)", " - dracut-core:", " - demote cryptsetup, systemd-cryptsetup, dmraid, dmsetup, kpartx, lvm2,", " and mdadm to suggests", " - demote binutils to suggests. its only needed when using UEFI executables", " - Include all packages with dracut modules in Apport bug reports", " (LP: #2081183)", " * autopkgtest: also run TEST-20-NFS, TEST-30-ISCSI, and TEST-35-ISCSI-MULTI", "" ], "package": "dracut", "version": "105-2ubuntu1", "urgency": "medium", "distributions": "plucky", "launchpad_bugs_fixed": [ 2081183 ], "author": "Benjamin Drung ", "date": "Thu, 21 Nov 2024 15:16:59 +0100" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - Run upstream autopkgtest as root", " - disable using DH_VERBOSE=1", " - drop udevsettle patch (these kind of patches should be applied upstream)", " - drop 90overlay-root in favor of 90overlayfs (Closes: #1017039)", " - dracut-core:", " - demote cryptsetup, systemd-cryptsetup, dmraid, dmsetup, kpartx, lvm2,", " and mdadm to suggests", " - demote binutils to suggests. its only needed when using UEFI executables", " - Include all packages with dracut modules in Apport bug reports", " (LP: #2081183)", "" ], "package": "dracut", "version": "105-1ubuntu1", "urgency": "medium", "distributions": "plucky", "launchpad_bugs_fixed": [ 2081183 ], "author": "Benjamin Drung ", "date": "Thu, 14 Nov 2024 14:06:43 +0100" }, { "cves": [], "log": [ "", " * Regenerate only the latest and missing initrds (LP: #2048990)", " * Include all packages with dracut modules in Apport bug reports", " (LP: #2081183)", "" ], "package": "dracut", "version": "103-1ubuntu3", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [ 2048990, 2081183 ], "author": "Benjamin Drung ", "date": "Mon, 30 Sep 2024 15:04:58 +0200" }, { "cves": [], "log": [ "", " * autopkgtest: Drop dmraid upstream test 14 (LP: #2073677)", " * Add systemd-coredump, systemd-cryptsetup, and systemd-repart as", " dependencies for upstream-dracut-core autopkgtest.", "" ], "package": "dracut", "version": "103-1ubuntu2", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [ 2073677 ], "author": "Benjamin Drung ", "date": "Tue, 03 Sep 2024 11:02:08 +0200" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - autopkgtest: Enable dmraid upstream test 14", " - Run upstream autopkgtest as root", " - disable using DH_VERBOSE=1", " - dracut-core: add new modules 01systemd-bsod, 01systemd-creds, 90numlock,", " 90pcmcia", " - Explicitly mark 45ifcfg module as not installed", " - Switch to debhelper 13", " - dracut: use await variant of update-initramfs trigger", " - drop udevsettle patch (these kind of patches should be applied upstream)", " - drop nm-path patch (network-manager ships the helpers in /usr/libexec)", " - drop 90overlay-root in favor of 90overlayfs (Closes: #1017039)", " - run autopkgtest with V=2", " - run autopkgtest on all architectures", " - autopkgtest: disable using KVM for ppc64el", " - autopkgtest: set ARCH to dpkg architecture", " - dracut-core:", " - drop recommending pkgconf", " - drop depending directly on libkmod2. dracut-install links against it.", " - demote cryptsetup, dmraid, dmsetup, kpartx, lvm2, mdadm to suggests", " - demote binutils to suggests. its only needed when using UEFI executables", " - recommend zstd instead of pigz and default to zstd", " - Drop dracut-config-generic. Building a generic image is and will be the", " default.", " - Default initrdname to initrd.img-${kernel}", " * All submitted patches were accepted upstream and could be dropped.", "" ], "package": "dracut", "version": "103-1ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Fri, 09 Aug 2024 11:26:10 +0200" }, { "cves": [], "log": [ "", " * Cherry-pick upstream fixes for systemd 256 (LP: #2069290):", " - fix(test): use --add instead of --modules to create test-makeroot", " - test: avoid writing to rootfs as it might be read-only", " * fix(dracut-initramfs-restore.sh): correct initrd globbing", " * feat(lsinitrd.sh): support configurable initrd filenames", " * Default initrdname to initrd.img-${kernel}", " * Cherry-pick upstream performance fixes (LP: #2065180):", " - perf(dracut-install): memoize find_kmod_module_from_sysfs_node", " - perf(dracut-install): use driver/module sysfs dirs for module name", " * test: virtual hardware watchdog not available on s390x", "" ], "package": "dracut", "version": "102-3ubuntu4", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [ 2069290, 2065180 ], "author": "Benjamin Drung ", "date": "Mon, 08 Jul 2024 20:37:51 +0200" }, { "cves": [], "log": [ "", " * autopkgtest: set ARCH to dpkg architecture", " * dracut-core:", " - drop recommending pkgconf", " - drop depending directly on libkmod2. dracut-install links against it.", " - demote cryptsetup, dmraid, dmsetup, kpartx, lvm2, mdadm to suggests", " - demote binutils to suggests. its only needed when using UEFI executables.", " - recommend zstd instead of pigz and default to zstd", " * Drop dracut-config-generic. Building a generic image is and will be the", " default.", "" ], "package": "dracut", "version": "102-3ubuntu3", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Thu, 27 Jun 2024 23:07:12 +0200" }, { "cves": [], "log": [ "", " * dracut: use await variant of update-initramfs trigger", " * fix(shell-completion): remove hashbang from bash completions", " * drop udevsettle patch (these kind of patches should be applied upstream)", " * drop nm-path patch (network-manager ships the helpers in /usr/libexec)", " * drop 90overlay-root in favor of 90overlayfs (Closes: #1017039)", " * run autopkgtest with V=2", " * autopkgtest: depend on tpm2-tools for systemd-pcrphase (LP: #2069290)", " * run autopkgtest on all architectures", " * autopkgtest: disable using KVM for ppc64el", "" ], "package": "dracut", "version": "102-3ubuntu2", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [ 2069290 ], "author": "Benjamin Drung ", "date": "Fri, 14 Jun 2024 01:57:17 +0200" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - autopkgtest: Enable dmraid upstream test 14", " - Run upstream autopkgtest as root", " - disable using DH_VERBOSE=1", " - perf(dracut-install): preload kmod resources for quicker module lookup", " (LP: #2065180)", " * dracut-core: add new modules 01systemd-bsod, 01systemd-creds, 90numlock,", " 90pcmcia", " * Explicitly mark 45ifcfg module as not installed", " * Switch to debhelper 13", " * test(RAID-DEG): fix running test out of tree", "" ], "package": "dracut", "version": "102-3ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [ 2065180 ], "author": "Benjamin Drung ", "date": "Wed, 12 Jun 2024 19:38:43 +0200" }, { "cves": [], "log": [ "", " * perf(dracut-install): preload kmod resources for quicker module lookup", " (LP: #2065180)", "" ], "package": "dracut", "version": "060+5-8ubuntu2", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [ 2065180 ], "author": "Benjamin Drung ", "date": "Tue, 04 Jun 2024 16:33:13 +0200" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - autopkgtest: Enable dmraid upstream test 14", " - Run upstream autopkgtest as root", " - disable using DH_VERBOSE=1", " - d/p/ldconfig-real.patch: make sure ldconfig.real is installed where", " needed (LP: #2053057)", "" ], "package": "dracut", "version": "060+5-8ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [ 2053057 ], "author": "Benjamin Drung ", "date": "Tue, 21 May 2024 17:38:39 +0200" }, { "cves": [], "log": [ "", " * No change rebuild for 64-bit time_t and frame pointers.", "" ], "package": "dracut", "version": "060+5-1ubuntu3", "urgency": "high", "distributions": "noble", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Mon, 08 Apr 2024 17:56:43 +0200" }, { "cves": [], "log": [ "", " * d/p/ldconfig-real.patch: make sure ldconfig.real is installed where needed", " (LP: #2053057)", "" ], "package": "dracut", "version": "060+5-1ubuntu2", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2053057 ], "author": "Nick Rosbrook ", "date": "Tue, 13 Feb 2024 11:26:56 -0500" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - fix(test): running tests no longer requires to be root", " - Add modules 80test, 80test-makeroot, and 80test-root to dracut-core", " - Add autopkgtest to run upstream test cases on amd64 (LP: #2031417)", " - Split dracut-install into separate package for initramfs-tools", " (LP: #2031185)", " * test(FULL SYSTEMD): no need to include dbus to the target rootfs", " * Drop dbus-broker from autopkgtest", "" ], "package": "dracut", "version": "060+5-1ubuntu1", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2031417, 2031185 ], "author": "Benjamin Drung ", "date": "Wed, 07 Feb 2024 18:44:09 +0100" }, { "cves": [], "log": [ "", " * Split dracut-install into separate package for initramfs-tools", " (LP: #2031185)", " * Update out-of-tree patches to final version merged upstream", " * Cherry-pick upstream fixes:", " - fix(dracut-systemd): rootfs-generator issues", " - test: increase test VM memory from 512M to 1024M to avoid OOM killer", " * Address lintian complains:", " - Remove empty directories in /usr/lib/dracut/modules.d", " - Add ${misc:Depends} to all binary package dependencies", " - Override lintian complaint executable-in-usr-lib (reported upstream)", " - Override false positive about missing init.d scripts", " * Install files from debian/tmp to make dh_missing happy", " * Install dracut.kernel.7 man page (link to dracut.cmdline.7)", " * Restrict autopkgtest to amd64 (other architectures need upstrem work)", " * autopkgtest: run more upstream test cases", "" ], "package": "dracut", "version": "059-4ubuntu2", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2031185 ], "author": "Benjamin Drung ", "date": "Tue, 22 Aug 2023 16:34:06 +0200" }, { "cves": [], "log": [ "", " * fix(test): running tests no longer requires to be root", " * test: Make dracut and modules.d directory configurable", " * Add upstream autopkgtest to run four test cases (LP: #2031417)", " * Add modules 80test, 80test-makeroot, and 80test-root to dracut-core", "" ], "package": "dracut", "version": "059-4ubuntu1", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2031417 ], "author": "Benjamin Drung ", "date": "Wed, 16 Aug 2023 02:02:13 +0200" } ], "notes": null, "is_version_downgrade": true }, { "name": "e2fsprogs", "from_version": { "source_package_name": "e2fsprogs", "source_package_version": "1.47.2-3ubuntu2", "version": "1.47.2-3ubuntu2" }, "to_version": { "source_package_name": "e2fsprogs", "source_package_version": "1.47.2-3ubuntu4", "version": "1.47.2-3ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [ 2138219, 2132257 ], "changes": [ { "cves": [], "log": [ "", " * d/rules: fix pkgconfig call that results in inability", " to find udev rules.d in dh_install. Patch supplied by", " Helmut Grohne in Debian bug 1126636. (LP: #2138219)", "" ], "package": "e2fsprogs", "version": "1.47.2-3ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2138219 ], "author": "John Chittum ", "date": "Fri, 13 Feb 2026 07:17:00 -0500" }, { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "e2fsprogs", "version": "1.47.2-3ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:34:31 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "eject", "from_version": { "source_package_name": "util-linux", "source_package_version": "2.41.2-4ubuntu3", "version": "2.41.2-4ubuntu3" }, "to_version": { "source_package_name": "util-linux", "source_package_version": "2.41.3-3ubuntu2", "version": "2.41.3-3ubuntu2" }, "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" }, { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2142050 ], "changes": [ { "cves": [], "log": [ "", " * d/p/ubuntu/su-pty-drop-caps.patch: harden 'su --pty' to temporarily lower", " capabilities while proxying between stdin/stdout and the pty master. This", " is to avoid su from being used to exploit kernel vulnerabilities.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Fri, 13 Mar 2026 07:09:23 -0400" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Merge with Debian unstable (LP: #2142050). Remaining changes:", " - Add sulogin-fallback-static-sh.patch", " Add support for /bin/static-sh as fallback if the regular shell fails to", " execute. Patch ported from sysvinit. (see LP #505887)", " - Add sulogin-lockedpwd.patch", " Make sure file systems can be fixed on machines with locked root", " accounts (as Ubuntu does by default). Don't require --force for sulogin.", " - d/rules: disable libmount mountfs support", " Disable brand new feature with --disable-libmount-mountfd-support that", " causes inability to deploy MAAS LP #2037417.", " * Dropped changes applied upstream:", " - SECURITY UPDATE: heap overread with 256-byte usernames", " + debian/patches/CVE-2025-14104-1.patch: add length check in", " login-utils/setpwnam.c.", " + debian/patches/CVE-2025-14104-2.patch: update buflen in", " login-utils/setpwnam.c.", " + CVE-2025-14104", " * Dropped changes as they were no longer necessary:", " - d/p/ubuntu/lp-2030793-make-check-pidfd.patch", " This patch only effected kernel versions below 5.15 which are not", " available on resolute.", " - d/p/u/lp-2112552-tests-mark-mkfds-multiplexing-as-known-fail.patch", " The underlying bug was addressed in rust-coreutils.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142050 ], "author": "Ural Tunaboyu ", "date": "Sun, 15 Feb 2026 17:43:12 -0800" }, { "cves": [], "log": [ "", " * d/libsmartcols1.symbols: drop terminal crap", " * d/rules: make dpkg-gensymbols more strict", " * lintian: ignore groff-message tags", " * lintian: ignore groff-message tags in remaining packages", " * Add upstream patches", " * unshare: fix user namespace bind mounts", " * unshare: remove get_mnt_ino() check in bind_ns_files_from_child()", " * unshare: add --owner to set user namespace owner uid and gid", " * libfdisk: modernize ZFS GPT type description", "" ], "package": "util-linux", "version": "2.41.3-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 31 Dec 2025 13:06:28 +0100" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * util-linux: do not fail postinst/prerm if update-alternatives is missing", "" ], "package": "util-linux", "version": "2.41.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 17 Dec 2025 10:42:28 +0100" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Stop installing lastlog2-import.service", " * New upstream release, fixing CVE-2025-14104. (Closes: #1122058)", "" ], "package": "util-linux", "version": "2.41.3-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Tue, 16 Dec 2025 20:37:41 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "ethtool", "from_version": { "source_package_name": "ethtool", "source_package_version": "1:6.15-3build1", "version": "1:6.15-3build1" }, "to_version": { "source_package_name": "ethtool", "source_package_version": "1:6.19-1", "version": "1:6.19-1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * New upstream release: 6.19", "", " [ Ben Hutchings ]", " * d/watch: Update to avoid uscan bug #1112065", "", " [ Salvatore Bonaccorso ]", " * Declare compliance with Debian policy 4.7.3", " * debian/control: Remove \"Priority: optional\" (default)", " * Update copyright years for debian/* packaging files", " * d/u/signing-key.asc: Add GPG key for Jakub Kicinski", " * d/u/signing-key.asc: Strip extra signatures from GPG key for Jakub", " Kicinski", "" ], "package": "ethtool", "version": "1:6.19-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Salvatore Bonaccorso ", "date": "Sun, 15 Feb 2026 21:14:49 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "exfatprogs", "from_version": { "source_package_name": "exfatprogs", "source_package_version": "1.3.1-1", "version": "1.3.1-1" }, "to_version": { "source_package_name": "exfatprogs", "source_package_version": "1.3.2-1", "version": "1.3.2-1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * New upstream release.", " * Update to Standards-Version 4.7.3, remove the Priority field.", " * Fix debian/watch file (again) to pull the released tar.xz and .asc", " file, so we can use uscan for both and get the signature validation.", "" ], "package": "exfatprogs", "version": "1.3.2-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Sven Hoexter ", "date": "Tue, 10 Mar 2026 16:02:42 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "fdisk", "from_version": { "source_package_name": "util-linux", "source_package_version": "2.41.2-4ubuntu3", "version": "2.41.2-4ubuntu3" }, "to_version": { "source_package_name": "util-linux", "source_package_version": "2.41.3-3ubuntu2", "version": "2.41.3-3ubuntu2" }, "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" }, { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2142050 ], "changes": [ { "cves": [], "log": [ "", " * d/p/ubuntu/su-pty-drop-caps.patch: harden 'su --pty' to temporarily lower", " capabilities while proxying between stdin/stdout and the pty master. This", " is to avoid su from being used to exploit kernel vulnerabilities.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Fri, 13 Mar 2026 07:09:23 -0400" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Merge with Debian unstable (LP: #2142050). Remaining changes:", " - Add sulogin-fallback-static-sh.patch", " Add support for /bin/static-sh as fallback if the regular shell fails to", " execute. Patch ported from sysvinit. (see LP #505887)", " - Add sulogin-lockedpwd.patch", " Make sure file systems can be fixed on machines with locked root", " accounts (as Ubuntu does by default). Don't require --force for sulogin.", " - d/rules: disable libmount mountfs support", " Disable brand new feature with --disable-libmount-mountfd-support that", " causes inability to deploy MAAS LP #2037417.", " * Dropped changes applied upstream:", " - SECURITY UPDATE: heap overread with 256-byte usernames", " + debian/patches/CVE-2025-14104-1.patch: add length check in", " login-utils/setpwnam.c.", " + debian/patches/CVE-2025-14104-2.patch: update buflen in", " login-utils/setpwnam.c.", " + CVE-2025-14104", " * Dropped changes as they were no longer necessary:", " - d/p/ubuntu/lp-2030793-make-check-pidfd.patch", " This patch only effected kernel versions below 5.15 which are not", " available on resolute.", " - d/p/u/lp-2112552-tests-mark-mkfds-multiplexing-as-known-fail.patch", " The underlying bug was addressed in rust-coreutils.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142050 ], "author": "Ural Tunaboyu ", "date": "Sun, 15 Feb 2026 17:43:12 -0800" }, { "cves": [], "log": [ "", " * d/libsmartcols1.symbols: drop terminal crap", " * d/rules: make dpkg-gensymbols more strict", " * lintian: ignore groff-message tags", " * lintian: ignore groff-message tags in remaining packages", " * Add upstream patches", " * unshare: fix user namespace bind mounts", " * unshare: remove get_mnt_ino() check in bind_ns_files_from_child()", " * unshare: add --owner to set user namespace owner uid and gid", " * libfdisk: modernize ZFS GPT type description", "" ], "package": "util-linux", "version": "2.41.3-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 31 Dec 2025 13:06:28 +0100" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * util-linux: do not fail postinst/prerm if update-alternatives is missing", "" ], "package": "util-linux", "version": "2.41.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 17 Dec 2025 10:42:28 +0100" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Stop installing lastlog2-import.service", " * New upstream release, fixing CVE-2025-14104. (Closes: #1122058)", "" ], "package": "util-linux", "version": "2.41.3-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Tue, 16 Dec 2025 20:37:41 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "file", "from_version": { "source_package_name": "file", "source_package_version": "1:5.46-5build1", "version": "1:5.46-5build1" }, "to_version": { "source_package_name": "file", "source_package_version": "1:5.46-5build2", "version": "1:5.46-5build2" }, "cves": [], "launchpad_bugs_fixed": [ 2132257 ], "changes": [ { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "file", "version": "1:5.46-5build2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:37:37 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "fwupd", "from_version": { "source_package_name": "fwupd", "source_package_version": "2.0.19-1ubuntu1", "version": "2.0.19-1ubuntu1" }, "to_version": { "source_package_name": "fwupd", "source_package_version": "2.1.1-1ubuntu1", "version": "2.1.1-1ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2146332, 2143688, 2142298, 2139611 ], "changes": [ { "cves": [], "log": [ "", " * New upstream version (LP: #2146332)", " * Drop patches merged upstream.", " * Merge with Debian unstable. Remaining changes:", " - d/p/fwupdmgr-fde-verify-snapd-recovery-key.patch: Make fwupdmgr", " verify snapd recovery key through prompt on updates affecting FDE.", "" ], "package": "fwupd", "version": "2.1.1-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2146332 ], "author": "Mario Limonciello ", "date": "Thu, 26 Mar 2026 12:46:28 -0500" }, { "cves": [], "log": [ "", " * New upstream version (2.1.1)", "" ], "package": "fwupd", "version": "2.1.1-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Mario Limonciello ", "date": "Wed, 25 Mar 2026 13:18:21 -0500" }, { "cves": [], "log": [ "", " * d/patches/dell-uod-behavior.patch: Backport from 2_0_X branch to fix", " UOD behavior for some Dell docks. (LP: #2143688)", "" ], "package": "fwupd", "version": "2.0.20-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143688 ], "author": "Mario Limonciello ", "date": "Mon, 09 Mar 2026 11:48:10 -0500" }, { "cves": [], "log": [ "", " * Enable UMA carveout feature (LP: #2142298)", " * Merge from Debian unstable. Remaining changes:", " - d/p/db-update-snapd-bad-request.patch: On TPM/FDE systems, db updates", " require notifying snapd for preparation. However, the payload uses an", " incorrect format for composite updates. Change the format to align", " with snapd.", " - d/p/fwupdmgr-fde-verify-snapd-recovery-key.patch: Make fwupdmgr", " verify snapd recovery key through prompt on updates affecting FDE.", "" ], "package": "fwupd", "version": "2.0.20-1ubuntu1", "urgency": "low", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142298 ], "author": "Mario Limonciello ", "date": "Fri, 27 Feb 2026 20:24:47 -0600" }, { "cves": [], "log": [ "", " * New upstream version (2.0.20)", "" ], "package": "fwupd", "version": "2.0.20-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Mario Limonciello ", "date": "Thu, 26 Feb 2026 06:49:36 -0600" }, { "cves": [], "log": [ "", " * Fix snapd bad request on db updates (LP: #2139611):", " - d/p/db-update-snapd-bad-request.patch: On TPM/FDE systems, db updates", " require notifying snapd for preparation. However, the payload uses an", " incorrect format for composite updates. Change the format to align", " with snapd.", "" ], "package": "fwupd", "version": "2.0.19-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2139611 ], "author": "Simon Johnsson ", "date": "Mon, 23 Feb 2026 12:12:45 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "gir1.2-girepository-3.0:riscv64", "from_version": { "source_package_name": "glib2.0", "source_package_version": "2.87.2-3", "version": "2.87.2-3" }, "to_version": { "source_package_name": "glib2.0", "source_package_version": "2.88.0-1", "version": "2.88.0-1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * New upstream release", " - Work around a build regression in NetworkManager with 2.87.x", " * Release to unstable", "" ], "package": "glib2.0", "version": "2.88.0-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Simon McVittie ", "date": "Mon, 16 Mar 2026 21:37:12 +0000" }, { "cves": [], "log": [ "", " * New upstream release", " * d/control: Bump gi-docgen to 2026.1, matching upstream CI", " * d/copyright: Remove comment line.", " The machine-readable syntax doesn't actually allow these. Use", " a double blank line as the divider between Files and standalone", " License paragraphs instead.", "" ], "package": "glib2.0", "version": "2.87.5-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Simon McVittie ", "date": "Fri, 13 Mar 2026 16:54:09 +0000" }, { "cves": [], "log": [ "", " * Update the source using the upstream-generated-tarball", " * debian/control: Update breaks on old gjs and pygobject.", " Versions prior to these have not the fallback code to support the", " GLib/GLibUnix split", "" ], "package": "glib2.0", "version": "2.87.3-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Marco Trevisan (Treviño) ", "date": "Fri, 27 Feb 2026 00:24:46 +0100" }, { "cves": [], "log": [ "", " * New upstream release:", " Upstream has tagged a new release but not produced tarballs yet, due to CI", " problems. Let's get this (the tagged contents) early in experimental", " though, so we can start testing it, but using a pre-version so that we can", " later import the actual 2.87.3. tarball.", " * d/p: Refresh and drop applied patches", " * debian/libglib2.0-0t64.symbols: Update symbols", "" ], "package": "glib2.0", "version": "2.87.3~gitlab0-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Marco Trevisan (Treviño) ", "date": "Thu, 26 Feb 2026 00:48:14 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "gir1.2-glib-2.0:riscv64", "from_version": { "source_package_name": "glib2.0", "source_package_version": "2.87.2-3", "version": "2.87.2-3" }, "to_version": { "source_package_name": "glib2.0", "source_package_version": "2.88.0-1", "version": "2.88.0-1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * New upstream release", " - Work around a build regression in NetworkManager with 2.87.x", " * Release to unstable", "" ], "package": "glib2.0", "version": "2.88.0-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Simon McVittie ", "date": "Mon, 16 Mar 2026 21:37:12 +0000" }, { "cves": [], "log": [ "", " * New upstream release", " * d/control: Bump gi-docgen to 2026.1, matching upstream CI", " * d/copyright: Remove comment line.", " The machine-readable syntax doesn't actually allow these. Use", " a double blank line as the divider between Files and standalone", " License paragraphs instead.", "" ], "package": "glib2.0", "version": "2.87.5-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Simon McVittie ", "date": "Fri, 13 Mar 2026 16:54:09 +0000" }, { "cves": [], "log": [ "", " * Update the source using the upstream-generated-tarball", " * debian/control: Update breaks on old gjs and pygobject.", " Versions prior to these have not the fallback code to support the", " GLib/GLibUnix split", "" ], "package": "glib2.0", "version": "2.87.3-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Marco Trevisan (Treviño) ", "date": "Fri, 27 Feb 2026 00:24:46 +0100" }, { "cves": [], "log": [ "", " * New upstream release:", " Upstream has tagged a new release but not produced tarballs yet, due to CI", " problems. Let's get this (the tagged contents) early in experimental", " though, so we can start testing it, but using a pre-version so that we can", " later import the actual 2.87.3. tarball.", " * d/p: Refresh and drop applied patches", " * debian/libglib2.0-0t64.symbols: Update symbols", "" ], "package": "glib2.0", "version": "2.87.3~gitlab0-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Marco Trevisan (Treviño) ", "date": "Thu, 26 Feb 2026 00:48:14 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "git", "from_version": { "source_package_name": "git", "source_package_version": "1:2.51.0-1ubuntu1", "version": "1:2.51.0-1ubuntu1" }, "to_version": { "source_package_name": "git", "source_package_version": "1:2.53.0-1ubuntu1", "version": "1:2.53.0-1ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - Build diff-highlight in the contrib dir", " - Don't build-depend on subversion on i386, it is not reasonable to", " support on the partial arch.", "" ], "package": "git", "version": "1:2.53.0-1ubuntu1", "urgency": "low", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Gianfranco Costamagna ", "date": "Mon, 02 Mar 2026 18:55:34 +0100" }, { "cves": [], "log": [ "", " * new upstream release (see RelNotes/2.52.0.adoc, 2.53.0.adoc).", " * debian/control: Standards-Version: 4.7.2. The main relevant", " change is that packages may not break (but are permitted to", " error out when asked to display documentation) when manpages", " are not present; \"git help\" already fulfills this requirement by", " passing on the message for a missing page from \"man\" to the", " caller.", "" ], "package": "git", "version": "1:2.53.0-1", "urgency": "low", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Jonathan Nieder ", "date": "Sun, 01 Mar 2026 22:31:10 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "git-man", "from_version": { "source_package_name": "git", "source_package_version": "1:2.51.0-1ubuntu1", "version": "1:2.51.0-1ubuntu1" }, "to_version": { "source_package_name": "git", "source_package_version": "1:2.53.0-1ubuntu1", "version": "1:2.53.0-1ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - Build diff-highlight in the contrib dir", " - Don't build-depend on subversion on i386, it is not reasonable to", " support on the partial arch.", "" ], "package": "git", "version": "1:2.53.0-1ubuntu1", "urgency": "low", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Gianfranco Costamagna ", "date": "Mon, 02 Mar 2026 18:55:34 +0100" }, { "cves": [], "log": [ "", " * new upstream release (see RelNotes/2.52.0.adoc, 2.53.0.adoc).", " * debian/control: Standards-Version: 4.7.2. The main relevant", " change is that packages may not break (but are permitted to", " error out when asked to display documentation) when manpages", " are not present; \"git help\" already fulfills this requirement by", " passing on the message for a missing page from \"man\" to the", " caller.", "" ], "package": "git", "version": "1:2.53.0-1", "urgency": "low", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Jonathan Nieder ", "date": "Sun, 01 Mar 2026 22:31:10 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "gnu-coreutils", "from_version": { "source_package_name": "coreutils", "source_package_version": "9.7-3ubuntu1", "version": "9.7-3ubuntu1" }, "to_version": { "source_package_name": "coreutils", "source_package_version": "9.7-3ubuntu2", "version": "9.7-3ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [ 2137373 ], "changes": [ { "cves": [], "log": [ "", " * Fix slow performance of 'du' on large directories (>= 10K files)", " on Lustre filesystems by skipping inode sorting. The default", " behaviour of sorting dirents by inode numbers negatively impacts", " performance on Lustre because it interferes with Lustre's ability", " to prefetch file metadata via statahead. (LP: #2137373)", " - d/p/lp2137373-skip-dirent-inode-sorting-for-lustre.patch", "" ], "package": "coreutils", "version": "9.7-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2137373 ], "author": "Munir Siddiqui ", "date": "Fri, 23 Jan 2026 18:41:52 +0500" } ], "notes": null, "is_version_downgrade": false }, { "name": "grub-efi-riscv64", "from_version": { "source_package_name": "grub2", "source_package_version": "2.14-2ubuntu1", "version": "2.14-2ubuntu1" }, "to_version": { "source_package_name": "grub2", "source_package_version": "2.14-2ubuntu2", "version": "2.14-2ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [ 2142892, 2142695 ], "changes": [ { "cves": [], "log": [ "", " * Handle const generic returns, fixes glibc 2.43 FTBFS (LP: #2142892)", " * Fix ISO boot on POWER (LP: #2142695)", "" ], "package": "grub2", "version": "2.14-2ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142892, 2142695 ], "author": "Mate Kukri ", "date": "Fri, 06 Mar 2026 14:04:58 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "grub-efi-riscv64-bin", "from_version": { "source_package_name": "grub2", "source_package_version": "2.14-2ubuntu1", "version": "2.14-2ubuntu1" }, "to_version": { "source_package_name": "grub2", "source_package_version": "2.14-2ubuntu2", "version": "2.14-2ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [ 2142892, 2142695 ], "changes": [ { "cves": [], "log": [ "", " * Handle const generic returns, fixes glibc 2.43 FTBFS (LP: #2142892)", " * Fix ISO boot on POWER (LP: #2142695)", "" ], "package": "grub2", "version": "2.14-2ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142892, 2142695 ], "author": "Mate Kukri ", "date": "Fri, 06 Mar 2026 14:04:58 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "grub-efi-riscv64-unsigned", "from_version": { "source_package_name": "grub2", "source_package_version": "2.14-2ubuntu1", "version": "2.14-2ubuntu1" }, "to_version": { "source_package_name": "grub2", "source_package_version": "2.14-2ubuntu2", "version": "2.14-2ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [ 2142892, 2142695 ], "changes": [ { "cves": [], "log": [ "", " * Handle const generic returns, fixes glibc 2.43 FTBFS (LP: #2142892)", " * Fix ISO boot on POWER (LP: #2142695)", "" ], "package": "grub2", "version": "2.14-2ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142892, 2142695 ], "author": "Mate Kukri ", "date": "Fri, 06 Mar 2026 14:04:58 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "grub2-common", "from_version": { "source_package_name": "grub2", "source_package_version": "2.14-2ubuntu1", "version": "2.14-2ubuntu1" }, "to_version": { "source_package_name": "grub2", "source_package_version": "2.14-2ubuntu2", "version": "2.14-2ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [ 2142892, 2142695 ], "changes": [ { "cves": [], "log": [ "", " * Handle const generic returns, fixes glibc 2.43 FTBFS (LP: #2142892)", " * Fix ISO boot on POWER (LP: #2142695)", "" ], "package": "grub2", "version": "2.14-2ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142892, 2142695 ], "author": "Mate Kukri ", "date": "Fri, 06 Mar 2026 14:04:58 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "gzip", "from_version": { "source_package_name": "gzip", "source_package_version": "1.13-1ubuntu4", "version": "1.13-1ubuntu4" }, "to_version": { "source_package_name": "gzip", "source_package_version": "1.14-1~exp2ubuntu1", "version": "1.14-1~exp2ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2142871, 2132257 ], "changes": [ { "cves": [], "log": [ "", " * Merge from Debian experimental (LP: #2142871). Remaining changes:", " - debian/rules: Enable DFLTCC optimisations on s390x by default.", " * Dropped changes (fixed upstream):", " - d/p/0001-maint-fix-s390-buffer-flushes.patch", " - d/rules: define \"alignas\" to fix FTBFS on s390x", " * Cherry-pick upstream fixes:", " - gzip: fix uninitialized read", " - gzip: fix another uninitialized read", " - gzip: fix s390x build failure", "" ], "package": "gzip", "version": "1.14-1~exp2ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142871 ], "author": "Benjamin Drung ", "date": "Fri, 27 Feb 2026 18:02:51 +0100" }, { "cves": [], "log": [ "", " * d/rules: configure set /bin/sh and grep; autoreconf cleanup", "" ], "package": "gzip", "version": "1.14-1~exp2", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Milan Kupcevic ", "date": "Sun, 13 Apr 2025 09:27:04 -0400" }, { "cves": [], "log": [ "", " * new upstream release", "" ], "package": "gzip", "version": "1.14-1~exp1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Milan Kupcevic ", "date": "Sat, 12 Apr 2025 03:18:53 -0400" }, { "cves": [], "log": [ "", " * new upstream release", " * d/patches: quilt refresh", " * d/copyright: update", " * d/rules: use debhelper leverage", " * d/control: comply to standards version 4.7.2", " * d/patches/disable-Werror.patch: drop", "" ], "package": "gzip", "version": "1.13.56~e549-1~exp1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Milan Kupcevic ", "date": "Sun, 06 Apr 2025 12:59:34 -0400" }, { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "gzip", "version": "1.13-1ubuntu5", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:43:37 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "ibverbs-providers:riscv64", "from_version": { "source_package_name": "rdma-core", "source_package_version": "61.0-2ubuntu1", "version": "61.0-2ubuntu1" }, "to_version": { "source_package_name": "rdma-core", "source_package_version": "61.0-2ubuntu3", "version": "61.0-2ubuntu3" }, "cves": [], "launchpad_bugs_fixed": [ 2140324 ], "changes": [ { "cves": [], "log": [ "", " * d/p/providers-mana-no-check-cqid.patch: Patching from upstream's", " commit for providers/mana: do not check cqid on creation", " (LP: #2140324).", "" ], "package": "rdma-core", "version": "61.0-2ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2140324 ], "author": "Miriam España Acebal ", "date": "Wed, 04 Feb 2026 12:56:19 +0100" }, { "cves": [], "log": [ "", " * No-change rebuild with Python 3.14 as default", "" ], "package": "rdma-core", "version": "61.0-2ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Graham Inggs ", "date": "Thu, 22 Jan 2026 21:54:05 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "info", "from_version": { "source_package_name": "texinfo", "source_package_version": "7.2-5", "version": "7.2-5" }, "to_version": { "source_package_name": "texinfo", "source_package_version": "7.2-5ubuntu2", "version": "7.2-5ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [ 2144471, 2125808 ], "changes": [ { "cves": [], "log": [ "", " * Handle comments correctly in update-info-dir (LP: #2144471)", "" ], "package": "texinfo", "version": "7.2-5ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144471 ], "author": "Mitchell Augustin ", "date": "Wed, 25 Mar 2026 13:25:03 -0500" }, { "cves": [], "log": [ "", " * Read and export variables instead of sourcing /etc/environment", " (LP: #2125808)", "" ], "package": "texinfo", "version": "7.2-5ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2125808 ], "author": "Mitchell Augustin ", "date": "Wed, 28 Jan 2026 15:57:03 -0600" } ], "notes": null, "is_version_downgrade": false }, { "name": "initramfs-tools-bin", "from_version": { "source_package_name": "initramfs-tools", "source_package_version": "0.150ubuntu7", "version": "0.150ubuntu7" }, "to_version": { "source_package_name": "initramfs-tools", "source_package_version": "0.150ubuntu8", "version": "0.150ubuntu8" }, "cves": [], "launchpad_bugs_fixed": [ 2142121 ], "changes": [ { "cves": [], "log": [ "", " * d/t/run-qemu: fix arm64 tests failure because of cpu=max", " (LP: #2142121)", "" ], "package": "initramfs-tools", "version": "0.150ubuntu8", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142121 ], "author": "Hector Cao ", "date": "Fri, 27 Feb 2026 11:57:35 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "initramfs-tools-core", "from_version": { "source_package_name": "initramfs-tools", "source_package_version": "0.150ubuntu7", "version": "0.150ubuntu7" }, "to_version": { "source_package_name": "initramfs-tools", "source_package_version": "0.150ubuntu8", "version": "0.150ubuntu8" }, "cves": [], "launchpad_bugs_fixed": [ 2142121 ], "changes": [ { "cves": [], "log": [ "", " * d/t/run-qemu: fix arm64 tests failure because of cpu=max", " (LP: #2142121)", "" ], "package": "initramfs-tools", "version": "0.150ubuntu8", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142121 ], "author": "Hector Cao ", "date": "Fri, 27 Feb 2026 11:57:35 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "install-info", "from_version": { "source_package_name": "texinfo", "source_package_version": "7.2-5", "version": "7.2-5" }, "to_version": { "source_package_name": "texinfo", "source_package_version": "7.2-5ubuntu2", "version": "7.2-5ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [ 2144471, 2125808 ], "changes": [ { "cves": [], "log": [ "", " * Handle comments correctly in update-info-dir (LP: #2144471)", "" ], "package": "texinfo", "version": "7.2-5ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144471 ], "author": "Mitchell Augustin ", "date": "Wed, 25 Mar 2026 13:25:03 -0500" }, { "cves": [], "log": [ "", " * Read and export variables instead of sourcing /etc/environment", " (LP: #2125808)", "" ], "package": "texinfo", "version": "7.2-5ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2125808 ], "author": "Mitchell Augustin ", "date": "Wed, 28 Jan 2026 15:57:03 -0600" } ], "notes": null, "is_version_downgrade": false }, { "name": "keyboard-configuration", "from_version": { "source_package_name": "console-setup", "source_package_version": "1.237ubuntu1", "version": "1.237ubuntu1" }, "to_version": { "source_package_name": "console-setup", "source_package_version": "1.237ubuntu3", "version": "1.237ubuntu3" }, "cves": [], "launchpad_bugs_fixed": [ 2132257 ], "changes": [ { "cves": [], "log": [ "", " [ Samuel Thibault ]", " * Keyboard/kbdcompiler: Fix checking ckbcomp success.", " * Keyboard/ckbcomp: Support symbols = [...].", "" ], "package": "console-setup", "version": "1.237ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Timo Aaltonen ", "date": "Mon, 02 Mar 2026 16:21:56 +0200" }, { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "console-setup", "version": "1.237ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:24:29 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "kpartx", "from_version": { "source_package_name": "multipath-tools", "source_package_version": "0.12.0-1ubuntu2", "version": "0.12.0-1ubuntu2" }, "to_version": { "source_package_name": "multipath-tools", "source_package_version": "0.14.3-2ubuntu1", "version": "0.14.3-2ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2144005, 2135118, 2080474, 2142903 ], "changes": [ { "cves": [], "log": [ "", " * Merge with Debian unstable (LP: #2144005). Remaining changes:", " - d/rules: don't build the multipath-tools binary package on i386; only kpartx.", " - d/p/enable-find-multipaths.patch: re-enable find_multipaths by", " default -- see the removed 'add_find-multipaths.patch' (LP 1463046)", " - d/NEWS: add removal of kpartx-boot package", " - d/rules: remove -Bsymbolic-functions from LDFLAGS", " - d/rules: install friendly names multipath.conf by default", " - d/initramfs/scripts/init-top: ensure the bindings file exists before", " calling multipathd -B in the initramfs. This prevents multipathd -B from", " failing and exiting immediately (LP #2120444).", " - d/p/testsuite-no-lto: disable lto to workaround testsuite symbol wrapping", " (LP #2135118)", " * Dropped changes:", " - d/p/multipath-tools-Fix-ISO-C23-errors-with-strchr:", " Fix ISO C23 errors with strchr()", " [upstream in 0.14.0]", " - d/{rules,control}: enable testsuite (LP #2135118)", " [in 0.14.3-1]", " - d/initramfs: move the script stopping multipathd to init-bottom", " [in 0.13.0-1]", " - d/t/initramfs", " + determine extracted main cpio path dynamically", " + drop determine extracted main cpio path dynamically", " [cancel each other out]", "" ], "package": "multipath-tools", "version": "0.14.3-2ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144005 ], "author": "Jonas Jelten ", "date": "Mon, 16 Mar 2026 18:17:43 +0100" }, { "cves": [], "log": [ "", " * [9ef22a2] Run testsuite only during Arch-builds", " * [2a6ef4b] Disable testsuite on loong64", "" ], "package": "multipath-tools", "version": "0.14.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Mon, 02 Mar 2026 11:49:26 +0100" }, { "cves": [], "log": [ "", " [ Jonas Jelten ]", " * [d6c9eba] Enable testsuite (LP: #2135118)", "", " [ Chris Hofstaedtler ]", " * [5c1230c] New upstream version 0.14.3 (Closes: #1128696)", " * [6e2361a] Rebase patches, use WARN_ONLY=1 in make invocation", "" ], "package": "multipath-tools", "version": "0.14.3-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2135118 ], "author": "Chris Hofstaedtler ", "date": "Mon, 02 Mar 2026 10:37:01 +0100" }, { "cves": [], "log": [ "", " * [c8842fd] New upstream version 0.13.0", " * [6951eae] d/rules: enable verbose upstream build", " * [3d82dad] initramfs: stop multipathd in init-bottom, not local-bottom.", " Ubuntu noticed that local-* scripts are not executed on systems with", " disks on network. (LP: #2080474)", " * [fc4b508] d/t/control: add linux-image-generic for Ubuntu", " * [1df3a76] d/libmpathpersist0.symbols: tighten internal symbols", " * [6aff684] initramfs: stop requesting old dmsetup_env hack", "" ], "package": "multipath-tools", "version": "0.13.0-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2080474 ], "author": "Chris Hofstaedtler ", "date": "Sat, 20 Dec 2025 14:16:27 +0100" }, { "cves": [], "log": [ "", " * d/t/initramfs: drop determine extracted main cpio path dynamically", " * multipath-tools: Fix ISO C23 errors with strchr() (LP: #2142903)", "" ], "package": "multipath-tools", "version": "0.12.0-1ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142903 ], "author": "Benjamin Drung ", "date": "Mon, 02 Mar 2026 16:48:20 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "krb5-locales", "from_version": { "source_package_name": "krb5", "source_package_version": "1.22.1-2", "version": "1.22.1-2" }, "to_version": { "source_package_name": "krb5", "source_package_version": "1.22.1-2ubuntu4", "version": "1.22.1-2ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [ 2144909, 2142893, 2142451, 2037321 ], "changes": [ { "cves": [], "log": [ "", " * d/p/default-enctype-list.patch: do not default to weak encryption", " algorithms (LP: #2144909)", " * d/NEWS: explain weak algorithms are no longer default options", "" ], "package": "krb5", "version": "1.22.1-2ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144909 ], "author": "Athos Ribeiro ", "date": "Thu, 19 Mar 2026 10:48:16 -0300" }, { "cves": [], "log": [ "", " * d/p/fix-strchr-conformance-to-c23.patch: Fix FTBFS with glibc2.43", " (LP: #2142893)", "" ], "package": "krb5", "version": "1.22.1-2ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142893 ], "author": "Guilherme Puida Moreira ", "date": "Wed, 04 Mar 2026 10:15:11 -0300" }, { "cves": [], "log": [ "", " * Fix FTBFS test t_otp.py (LP: #2142451):", " - d/p/set-fork-start-method-t-otpy.patch: Python 3.14 changes the default", " start method of multiprocessing to 'forkserver'. This introduces issues", " in the test t_otp.py that does not use a main block. Set the start", " method to force 'fork' instead.", "" ], "package": "krb5", "version": "1.22.1-2ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142451 ], "author": "Simon Johnsson ", "date": "Mon, 23 Feb 2026 11:02:32 +0100" }, { "cves": [], "log": [ "", " * Add autopkgtest for includedir-ordering (LP: #2037321):", " - d/tests/includedir-ordering: Add new test.", " - d/tests/kinit: Create /etc/krb5.conf.d/ directory if it doesn't exist.", " - d/tests/util: Prepend includedir /etc/krb5.conf.d/ for the configuration", " file created in create_realm.", "" ], "package": "krb5", "version": "1.22.1-2ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2037321 ], "author": "Simon Johnsson ", "date": "Thu, 12 Feb 2026 16:15:24 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "landscape-common", "from_version": { "source_package_name": "landscape-client", "source_package_version": "24.12-0ubuntu5", "version": "24.12-0ubuntu5" }, "to_version": { "source_package_name": "landscape-client", "source_package_version": "26.02.2-0ubuntu1", "version": "26.02.2-0ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2145021, 2144674, 1754002 ], "changes": [ { "cves": [], "log": [ "", " * New upstream release 26.02.2", " - fix: restore tests for amd64v3 (LP: #2145021)", " - fix: add deterministic sub-process generation for flaky tests", " * d/p/fix-ubuntu-release-upgrader-log.patch: correct string formatting error", "" ], "package": "landscape-client", "version": "26.02.2-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2145021 ], "author": "Joey Mucci ", "date": "Fri, 20 Mar 2026 14:10:13 -0400" }, { "cves": [], "log": [ "", " * New upstream release 26.02.1 (LP: #2144674)", " - d/patches: refresh patches that have not been applied upstream", " - fix-landscape-client-manpage.patch", " - d/patches: remove patches that have been applied upstream", " - 2087852-feat-manage-ubuntu-sources-glob.patch", " - allow-http-proxy-in-tests.patch", " - fix-apt-source-file-management.patch", " - package-reporter-high-cpu.patch", " - unittest-makeSuite-deprecation.patch", " - fix: restore functionality and tests for python 3.14", " - feat: add FDE recovery key manager plugin", " - fix: package changer uses proxy when configured", " - refactor: Revert addition of `--ssl-ca` flag", " - fix: Move WSL config options out of unsaved_options", " - fix: landscape-config reads deprecated ssl_public_key field", " - refactor: clean up bpickle dumps", " - fix: don't explicitly make root owner of the executables", " - refactor: move uaclient integration test out of landscape directory", " - refactor: remove last instance of ssl_public_key", " - build: remove git suffix for packaging", " - fix: example. conf pro management plugin", " - Bug fix: add id for devmode snaps for server indexing", " - feat: add weekly integration testing for uaclient/pro", " - fix: add python3-packaging dependency to landscape-client", " - fix: uaclient wrapper with snap and core devices", " - fix: make improvements to landscape-config --show", " - feat: activity to detach pro", " - feat: activity for attaching pro", " - feat: add --show argument to landscape-config", " - fix: Add deprecation warning for --is-registered in landscape-client", " - refactor: add wrapper for uaclient library calls", " - fix: rename ssl-public-key parameter", " - build: add python3-packaging to build dependencies and fix test cases for build", " - Add setuptools, remove setup and fix paths in Snapcraft.yaml", " - fix: imports for snap/core devices", " - refactor: change ubuntu pro info to use `uaclient.status` instead of subprocess", " - fix: bump codecov upload version and use secret token", " - refactor: do not cast to list when not needed", " - feat: add --script-tempdir configuration", " - fix: use machine_id in registration message schema", " - feat: add machine-id to registration and computer info", " - refactor: cleanup string continuations", " - refactor: remove obsolete user message schemas", " - refactor: remove obsolete register-* message schemas", " - refactor: remove obsolete hardware-inventory message schema", " - refactor: remove obsolete computer-uptime message schema", " - refactor: remove oboslete client-uptime message schema", " - refactor: delete unused eucalyptus message schema", " - feat: unknown hashes per request is configurable", " - refactor: delete `landscape/lib/compat.py`", " - feat: log pending message count", " - feat: configurably exclude package sources", " - fix: invalid plugins do not crash landscape-sysinfo (LP: #1754002)", " - fix: .list and .sources files are restored when a repository profile is disassociated from a noble (or later) instance", " - fix: usgmanager should accept only the profile or the tailoring file", " - fix: ensure usgmanager plugin runs in deferred", " - feat: add usgmanager plugin to example.conf", " - fix: add run-id and operation-id fields to usg-audit message", " - fix: make config tests insensitive to http(s) proxy settings", " - fix: remove deprecated use of `unittest.makeSuite` to get tests passing on >=py312", " - feat: add optional --authenticated-attach-code to configuration parameters", " - feat: add authenticated attach code to registration message", " - refactor: stop using twisted.python.compat", " - feat: add support for .sources when applying repository profiles", " - fix: log rotation in snap", " - fix: removed snapd-control-managed from snapcraft.yaml apps stanza", " - fix: lint failure E226 - missing arithmetic whitespace", "" ], "package": "landscape-client", "version": "26.02.1-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144674, 1754002 ], "author": "Joey Mucci ", "date": "Thu, 05 Feb 2026 17:38:31 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "libapparmor1:riscv64", "from_version": { "source_package_name": "apparmor", "source_package_version": "5.0.0~alpha1-0ubuntu11", "version": "5.0.0~alpha1-0ubuntu11" }, "to_version": { "source_package_name": "apparmor", "source_package_version": "5.0.0~beta1-0ubuntu5", "version": "5.0.0~beta1-0ubuntu5" }, "cves": [ { "cve": "CVE-2025-9615", "url": "https://ubuntu.com/security/CVE-2025-9615", "cve_description": "A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to other users. NetworkManager allows non-root users to configure the system's network. The daemon runs with root privileges and can access files owned by users different from the one who added the connection.", "cve_priority": "medium", "cve_public_date": "2026-01-26 20:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2144679, 2137395, 2143810, 2142788, 2142885 ], "changes": [ { "cves": [], "log": [ "", " * Add patches for network iface mediation in the parser (LP: #2144679):", " - d/p/u/0001-parser-add-more-reserved-mediation-classes.patch", " - d/p/u/0002-parser-convert-conditionals-operators-to-an-enum.patch", " - d/p/u/0003-parser-add-override-assign-to-cond-list-elements.patch", " - d/p/u/0004-parser-support-network-interface-conditional.patch", " - d/p/u/0005-tests-add-network-interface-tests.patch", " * debian/control: add socat test dependency to Build-Depends", "" ], "package": "apparmor", "version": "5.0.0~beta1-0ubuntu5", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144679 ], "author": "Ryan Lee ", "date": "Thu, 19 Mar 2026 08:46:13 -0700" }, { "cves": [], "log": [ "", " * Add patch from upstream to fix transmission (LP: #2137395)", " - d/p/u/transmission-common-fixes-for-lp-2137395.patch", "" ], "package": "apparmor", "version": "5.0.0~beta1-0ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2137395 ], "author": "Alex Murray ", "date": "Wed, 18 Mar 2026 23:02:41 +1030" }, { "cves": [ { "cve": "CVE-2025-9615", "url": "https://ubuntu.com/security/CVE-2025-9615", "cve_description": "A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to other users. NetworkManager allows non-root users to configure the system's network. The daemon runs with root privileges and can access files owned by users different from the one who added the connection.", "cve_priority": "medium", "cve_public_date": "2026-01-26 20:16:00 UTC" } ], "log": [ "", " * Add patch to fix openvpn loading of NetworkManager copied certificates", " after CVE-2025-9615 fix (LP: #2143810):", " - d/p/u/openvpn_networkmanager_rundir.patch", "" ], "package": "apparmor", "version": "5.0.0~beta1-0ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143810 ], "author": "Ryan Lee ", "date": "Wed, 11 Mar 2026 11:33:40 -0700" }, { "cves": [], "log": [ "", " * Add patch to fix libapparmor Python aa_get_lsm_iface binding", " (LP: #2142788):", " - d/p/u/libapparmor-move-aa_get_lsm_iface-decl-in-libapparmor.patch", " * Add patches to fix parser tempfile umask (LP: #2142885):", " - d/p/u/0001-parser-set-umask-before-creating-temp-file.patch", " - d/p/u/0002-parser-restrict-umask-to-allow-only-user-permissions.patch", " * Add test for libapparmor feature prefix parse issue (LP 2105986):", " - d/p/u/libapparmor-add-test-for-libapparmor-features-prefix.patch", "" ], "package": "apparmor", "version": "5.0.0~beta1-0ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142788, 2142885 ], "author": "Ryan Lee ", "date": "Fri, 27 Feb 2026 09:48:42 -0800" }, { "cves": [], "log": [ "", " [ Alessandro Astone ]", " * d/tests: Update libreoffice profile names", "", " [ Ryan Lee ]", " * New upstream release.", " * debian/control: add libzstd-dev to list of dependencies", " * debian/libapparmor1.symbols: Add new libapparmor symbols to file", " * Refresh patches to apply to new release:", " - d/p/u/communitheme-snap-support.patch", " - d/p/u/profiles-grant-access-to-systemd-resolved.patch", " * Drop patches that were superseded upstream:", " - d/p/u/parser-fix-pam_apparmor-regression-test-failures.patch", "" ], "package": "apparmor", "version": "5.0.0~beta1-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Ryan Lee ", "date": "Thu, 19 Feb 2026 09:57:16 -0800" }, { "cves": [], "log": [ "", " * New upstream release.", " * Update patches to apply to new release:", " - d/p/d/Enable-writing-cache.patch", " - d/p/u/Move-the-bwrap-userns-restrict-profile-out-of-extras.patch", " - d/p/u/delete-the-busybox-and-nautilus-profiles.patch", " - d/p/u/profiles_remove_hwctl.patch", " - d/p/u/profiles_disable_free.patch", " - d/p/u/profiles_disable_curl.patch", " - d/p/u/profiles_add_more_consoles_workaround.patch", " - d/p/u/profiles-use-coreutils-tunable.patch", " * Refresh patches to apply to new release:", " - d/p/u/parser-fix-pam_apparmor-regression-test-failures.patch", " - d/p/u/aa-notify-userns-filtering.patch", " - d/p/u/aa-notify-fallback-to-ev-comm-when-ev-execpath.patch", " * Drop patches that were applied upstream:", " - d/p/u/userns-runtime-disable.patch", " - d/p/u/userns-runtime-disable-fix-for-6_14.patch", " - d/p/u/parser-fix-variable-expansion.patch", " - d/p/u/nss-systemd-grant-access-to-gdm-user-db.patch", " - d/p/u/parser-fix-misc-leaks.patch", " - d/p/u/parser-fix-more-parser-leaks.patch", " - d/p/u/curl_read_tmp.patch", " - d/p/u/curl_access_snapd_socket.patch", " - d/p/u/unix_chkpwd_authd.patch", " - d/p/u/profiles_dig_add_abstractions_consoles.patch", " - d/p/u/profiles_fix_systemd_detect_virt_new_denials.patch", " - d/p/u/profiles_expand_libnuma_abstraction", " - d/p/u/regression_disconnected_mount_complain_danglings.patch", " - d/p/u/regression_disconnected_mount_complain_fix_6_15.patch", " - d/p/u/utils_test_aa_show_usage_handle_disabled.patch", " - d/p/u/profiles-add-rules-for-pam-extrausers.so-to-unix-chkpwd.patch", " - d/p/u/parser_libapparmor_re_fix_inconsistent_build.patch", " - d/p/u/parser_libapparmor_re_fix_implied_m.patch", " - d/p/u/0001-tests-regression-Update-socketpair-test-for-upstream.patch", " - d/p/u/0002-tests-regression-update-socketpair-tests-to-detect-d.patch", " - d/p/u/0003-tests-regression-update-socketpair-tests-to-detect-d.patch", " - d/p/u/0004-tests-regressions-Improve-output-of-require_any_of_k.patch", " - d/p/u/0005-tests-regression-update-network-requirements-for-v9.patch", " - d/p/u/0006-regression-tests-update-logic-to-support-v9-af_unix-.patch", " - d/p/u/0007-tests-regressions-Fix-socket-pair-for-v7-semantics.patch", " - d/p/u/parser-fix-unix-addresses-with-alternations.patch", " - d/p/u/profiles-add-rules-to-fix-flatpaks-with-fuse3-17.patch", " - d/p/u/profiles-grant-netrc-read-access-to-tnftp.patch", " - d/p/u/profiles-systemd-detect-virt-handle-device-tree-folder.patch", " - d/p/u/lsblk_read_access_azure_acpi.patch", " - d/p/u/regression-fix-for-rust-coreutils.patch", " - d/p/u/utils-remove-global-_-from-aa-notify-main.patch", " - d/p/u/0001-libapparmor-change-setup.py-to-remove-the-need-for-_.patch", " - d/p/u/0002-libapparmor-remove-__init__.py-not-needed-for-SWIG-P.patch", " - d/p/u/utils-test-use-sys.executable-when-launching-aa-show.patch", " * d/apparmor.install, d/not-installed: account for new location", " of init scripts", " * d/rules:", " - account for new locatin of init scripts", " - specify LD_LIBRARY_PATH during testing to use locally built", " libapparmor for libapparmor.so", " * d/watch: point towards GitLab tarballs instead and update regexes", " * debian/apparmor-profiles.install: account for remmina profile being", " moved to extra-profiles upstream", "" ], "package": "apparmor", "version": "5.0.0~alpha6-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Ryan Lee ", "date": "Mon, 09 Feb 2026 11:15:02 -0800" } ], "notes": null, "is_version_downgrade": false }, { "name": "libatomic1:riscv64", "from_version": { "source_package_name": "gcc-15", "source_package_version": "15.2.0-12ubuntu1", "version": "15.2.0-12ubuntu1" }, "to_version": { "source_package_name": "gcc-16", "source_package_version": "16-20260315-1ubuntu1", "version": "16-20260315-1ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", " - Work-around the 80GB chroot size on the Ubuntu buildds.", "" ], "package": "gcc-16", "version": "16-20260315-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 15 Mar 2026 13:22:54 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260315).", " * Pass configure flags for libgcobol cross builds.", " * For backports, require binutils (>= 2.40) on riscv64.", " * libga68-dev: Depend on libgc-dev. Closes: #1130580.", " * Fix PR ada/107475 also for armhf and s390x.", " * Disable dwz on alpha, see PR dwz/33990.", " * Refresh patches.", " * Update libgcc-s, libcc1, lib*asan, liblsan, libtsan and libgcobol", " symbol files.", "" ], "package": "gcc-16", "version": "16-20260315-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 15 Mar 2026 13:17:23 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260308).", " * On riscv64, default again to RVA23.", " * Disable bootstrap build on riscv64 entirely for a quick build.", "" ], "package": "gcc-16", "version": "16-20260308-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 08 Mar 2026 09:49:05 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260308).", " * Refresh cross-installation-location patch.", "" ], "package": "gcc-16", "version": "16-20260308-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 08 Mar 2026 09:34:40 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260307).", " * libsanitizer/TSan: Fix determining static TLS blocks. Addresses: #1126312.", " * Refresh patches.", "" ], "package": "gcc-16", "version": "16-20260307-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sat, 07 Mar 2026 09:07:18 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260226).", " * On riscv64, default again to RVA23.", "" ], "package": "gcc-16", "version": "16-20260226-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 26 Feb 2026 06:09:01 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260226). Also closes: #1128648.", " * Disable again profiled+lto build on armhf.", " * Fix s390x backport builds.", " * Disable dwz on riscv64, see https://sourceware.org/bugzilla/show_bug.cgi?id=33929.", " * Disable profiled+lto build. See https://gcc.gnu.org/PR124238.", "" ], "package": "gcc-16", "version": "16-20260226-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 26 Feb 2026 06:00:27 +0100" }, { "cves": [], "log": [ "", " * Disable again profiled+lto build on armhf.", "" ], "package": "gcc-16", "version": "16-20260217-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Wed, 18 Feb 2026 08:29:24 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", " - Work-around the 80GB chroot size on the Ubuntu buildds.", " * On riscv64, default to rv64gc, RVA23 is currently broken.", " See PR target/124048.", "" ], "package": "gcc-16", "version": "16-20260217-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 17 Feb 2026 09:09:19 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260217).", " * Fix build when building without common libraries.", " * Re-enable profiled+lto build on armhf to check for PR target/119937.", " * Update GFDL+ doc file removal.", "" ], "package": "gcc-16", "version": "16-20260217-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 17 Feb 2026 08:25:09 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260210).", " * Fix build when building without common libraries.", "" ], "package": "gcc-16", "version": "16-20260210-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 10 Feb 2026 01:42:25 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", " - Work-around the 80GB chroot size on the Ubuntu buildds.", "" ], "package": "gcc-16", "version": "16-20260208-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 08 Feb 2026 13:09:34 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260208).", "" ], "package": "gcc-16", "version": "16-20260208-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 08 Feb 2026 11:23:36 +0100" }, { "cves": [], "log": [ "", " * Ignore dh_shlibdeps failure for libcc1 for now.", "" ], "package": "gcc-16", "version": "16-20260207-2", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sat, 07 Feb 2026 17:11:49 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260207).", " * Update sh4 LRA patches (Adrian Glaubitz). Closes: #1126958.", " * Build again gnat cross compiler for sh4.", " * Update libcc1 and libgphobos symbols files.", "" ], "package": "gcc-16", "version": "16-20260207-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sat, 07 Feb 2026 11:25:14 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", " - Work-around the 80GB chroot size on the Ubuntu buildds.", "" ], "package": "gcc-16", "version": "16-20260203-2ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 03 Feb 2026 17:10:34 +0100" }, { "cves": [], "log": [ "", " * Apply proposed patch for PR d/123953, fixing ftbfs on ppc64le.", "" ], "package": "gcc-16", "version": "16-20260203-2", "urgency": "medium", "distributions": "expperimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 03 Feb 2026 16:45:07 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260203).", " * Update newlib to 4.6.0.20260123.", " * Allow configuring libxml2 include and lib directories.", " * Build-depend on libxml2-source for the cross builds, and generate", " Built-Using for libgcobol built using libxml2-source.", " * Update libga68 and libgcobol symbols files.", " * d/tests/control: Update dependencies for 16 (Michael R. Crusoe).", " Closes: #1126131.", " * Add again build dependency on python3-check-jsonschema, needed for tests.", " * Fix D #22463: SOURCE_DATE_EPOCH parsing incorrectly affected by system", " timezone. Addresses: #1126512.", " * Add the results of the usage-wrapper into the binary packages.", " * Require 6GB memory/CPU for Ubuntu/riscv64 builds. Failing builds without", " build logs.", " * Refresh patches.", " * Update libgphobos7 symbols file for amd64.", "" ], "package": "gcc-16", "version": "16-20260203-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 03 Feb 2026 12:04:58 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", " - Work-around the 80GB chroot size on the Ubuntu buildds.", "" ], "package": "gcc-16", "version": "16-20260119-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Mon, 19 Jan 2026 10:32:42 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260119).", " * lib*gcc-N-dev: Install lib{atomic,gcc_s}_asneeded linker scripts.", " * Import updated sanitizer symbols files from GCC 15.", " * Enable PAC/BTI/GCS on arm64 for libgfortran (Emanuele Rocca).", " Closes: #1123084.", " * Don't complain about missing gccrs and gcobc man pages.", "" ], "package": "gcc-16", "version": "16-20260119-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Mon, 19 Jan 2026 10:29:59 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251214).", " * Log the available disk space for the build.", " * Disable cobol for cross builds for now. Requires a libxml2 build", " for the target.", " * Build liblsan and libtsan on s390x.", " * Work-around the 80GB chroot size on the Ubuntu buildds.", "" ], "package": "gcc-16", "version": "16-20251214-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 14 Dec 2025 09:21:28 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251210).", "" ], "package": "gcc-16", "version": "16-20251210-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Wed, 10 Dec 2025 12:17:05 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251210).", " * Don't rely on python3-check-jsonschema for testing, still having", " unpackaged dependencies.", " * Disable profiled build on powerpc for now.", "" ], "package": "gcc-16", "version": "16-20251210-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Wed, 10 Dec 2025 12:13:23 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251202).", "" ], "package": "gcc-16", "version": "16-20251202-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 02 Dec 2025 16:55:42 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251202).", " * Install Algol-68 upstream changelogs.", " * d/NEWS.html: Update for 16, the test file NEWS.gcc is still for 15.", " * d/p/ada-tv_nsec-size.diff: Update for 16. Upstream status?", " * d/copyright*: Update download locations.", " * Override so wrong lintian error about size of Binary field length.", " * Disabled profiled build on i386, see PR ada/122934.", " * Update libhwasan, liblsan, libtsan and libubsan symbols files.", "" ], "package": "gcc-16", "version": "16-20251202-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 02 Dec 2025 16:51:01 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251130).", "" ], "package": "gcc-16", "version": "16-20251130-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 30 Nov 2025 22:33:13 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251130).", " * Build using amdgcn-tools-21 instead of -19.", " * Update build dependencies for gcobol.", " * Disable profiled build on armhf. See PR target/121821, PR target/122815.", " * Update libga68, libgfortran, libgomp and libstdc++ symbols files.", " * Explicitly bump the libgphobos soname.", " * Refresh patches.", " * Fix some lintian warnings, override some more.", "" ], "package": "gcc-16", "version": "16-20251130-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 30 Nov 2025 15:14:37 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251123).", "" ], "package": "gcc-16", "version": "16-20251123-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 23 Nov 2025 12:49:38 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251123).", " * Build using amdgcn-tools-21 instead of -19.", "" ], "package": "gcc-16", "version": "16-20251123-1", "urgency": "medium", "distributions": "UNRELEASED", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 23 Nov 2025 08:54:26 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libattr1:riscv64", "from_version": { "source_package_name": "attr", "source_package_version": "1:2.5.2-3build2", "version": "1:2.5.2-3build2" }, "to_version": { "source_package_name": "attr", "source_package_version": "1:2.5.2-4", "version": "1:2.5.2-4" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Remove «Rules-Requires-Root: no», which is the current default.", " * Remove «Priority: optional», which is the current default.", " * Switch to debian/watch version 5.", " * Add spaces around make assignment operators to distinguish from shell ones.", " * Switch to Standards-Version 4.7.3 (no changes needed).", "" ], "package": "attr", "version": "1:2.5.2-4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Guillem Jover ", "date": "Sun, 15 Feb 2026 14:26:01 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libaudit-common", "from_version": { "source_package_name": "audit", "source_package_version": "1:4.1.2-1", "version": "1:4.1.2-1" }, "to_version": { "source_package_name": "audit", "source_package_version": "1:4.1.2-1build1", "version": "1:4.1.2-1build1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild to drop Python 3.13 bits.", "" ], "package": "audit", "version": "1:4.1.2-1build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 20 Mar 2026 12:17:14 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libaudit1:riscv64", "from_version": { "source_package_name": "audit", "source_package_version": "1:4.1.2-1", "version": "1:4.1.2-1" }, "to_version": { "source_package_name": "audit", "source_package_version": "1:4.1.2-1build1", "version": "1:4.1.2-1build1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild to drop Python 3.13 bits.", "" ], "package": "audit", "version": "1:4.1.2-1build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 20 Mar 2026 12:17:14 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libblkid1:riscv64", "from_version": { "source_package_name": "util-linux", "source_package_version": "2.41.2-4ubuntu3", "version": "2.41.2-4ubuntu3" }, "to_version": { "source_package_name": "util-linux", "source_package_version": "2.41.3-3ubuntu2", "version": "2.41.3-3ubuntu2" }, "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" }, { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2142050 ], "changes": [ { "cves": [], "log": [ "", " * d/p/ubuntu/su-pty-drop-caps.patch: harden 'su --pty' to temporarily lower", " capabilities while proxying between stdin/stdout and the pty master. This", " is to avoid su from being used to exploit kernel vulnerabilities.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Fri, 13 Mar 2026 07:09:23 -0400" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Merge with Debian unstable (LP: #2142050). Remaining changes:", " - Add sulogin-fallback-static-sh.patch", " Add support for /bin/static-sh as fallback if the regular shell fails to", " execute. Patch ported from sysvinit. (see LP #505887)", " - Add sulogin-lockedpwd.patch", " Make sure file systems can be fixed on machines with locked root", " accounts (as Ubuntu does by default). Don't require --force for sulogin.", " - d/rules: disable libmount mountfs support", " Disable brand new feature with --disable-libmount-mountfd-support that", " causes inability to deploy MAAS LP #2037417.", " * Dropped changes applied upstream:", " - SECURITY UPDATE: heap overread with 256-byte usernames", " + debian/patches/CVE-2025-14104-1.patch: add length check in", " login-utils/setpwnam.c.", " + debian/patches/CVE-2025-14104-2.patch: update buflen in", " login-utils/setpwnam.c.", " + CVE-2025-14104", " * Dropped changes as they were no longer necessary:", " - d/p/ubuntu/lp-2030793-make-check-pidfd.patch", " This patch only effected kernel versions below 5.15 which are not", " available on resolute.", " - d/p/u/lp-2112552-tests-mark-mkfds-multiplexing-as-known-fail.patch", " The underlying bug was addressed in rust-coreutils.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142050 ], "author": "Ural Tunaboyu ", "date": "Sun, 15 Feb 2026 17:43:12 -0800" }, { "cves": [], "log": [ "", " * d/libsmartcols1.symbols: drop terminal crap", " * d/rules: make dpkg-gensymbols more strict", " * lintian: ignore groff-message tags", " * lintian: ignore groff-message tags in remaining packages", " * Add upstream patches", " * unshare: fix user namespace bind mounts", " * unshare: remove get_mnt_ino() check in bind_ns_files_from_child()", " * unshare: add --owner to set user namespace owner uid and gid", " * libfdisk: modernize ZFS GPT type description", "" ], "package": "util-linux", "version": "2.41.3-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 31 Dec 2025 13:06:28 +0100" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * util-linux: do not fail postinst/prerm if update-alternatives is missing", "" ], "package": "util-linux", "version": "2.41.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 17 Dec 2025 10:42:28 +0100" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Stop installing lastlog2-import.service", " * New upstream release, fixing CVE-2025-14104. (Closes: #1122058)", "" ], "package": "util-linux", "version": "2.41.3-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Tue, 16 Dec 2025 20:37:41 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libbpf1:riscv64", "from_version": { "source_package_name": "libbpf", "source_package_version": "1.6.2-1build1", "version": "1:1.6.2-1build1" }, "to_version": { "source_package_name": "libbpf", "source_package_version": "1.6.3-1ubuntu1", "version": "1:1.6.3-1ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2144319 ], "changes": [ { "cves": [], "log": [ "", " * libbpf: Remove extern declaration of bpf_stream_vprintk()", " (LP: #2144319)", "" ], "package": "libbpf", "version": "1.6.3-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144319 ], "author": "Nick Rosbrook ", "date": "Mon, 16 Mar 2026 09:58:10 -0400" }, { "cves": [], "log": [ "", " * Upload to unstable.", "" ], "package": "libbpf", "version": "1.6.3-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Sudip Mukherjee ", "date": "Sat, 14 Mar 2026 12:55:31 +0000" }, { "cves": [], "log": [ "", " * New upstream version 1.6.3", " * Update Standards-Version to 4.7.3", "" ], "package": "libbpf", "version": "1.6.3-1~exp1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Sudip Mukherjee ", "date": "Mon, 23 Feb 2026 20:05:40 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "libbpfcc:riscv64", "from_version": { "source_package_name": "bpfcc", "source_package_version": "0.35.0+ds-1ubuntu1", "version": "0.35.0+ds-1ubuntu1" }, "to_version": { "source_package_name": "bpfcc", "source_package_version": "0.35.0+ds-1ubuntu2", "version": "0.35.0+ds-1ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild to build with LLVM 21 on amd64v3.", "" ], "package": "bpfcc", "version": "0.35.0+ds-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Mon, 16 Mar 2026 12:30:24 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libbrotli1:riscv64", "from_version": { "source_package_name": "brotli", "source_package_version": "1.2.0-3", "version": "1.2.0-3" }, "to_version": { "source_package_name": "brotli", "source_package_version": "1.2.0-3build1", "version": "1.2.0-3build1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild to drop Python 3.13 bits.", "" ], "package": "brotli", "version": "1.2.0-3build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 20 Mar 2026 12:01:44 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libc-bin", "from_version": { "source_package_name": "glibc", "source_package_version": "2.42-2ubuntu5", "version": "2.42-2ubuntu5" }, "to_version": { "source_package_name": "glibc", "source_package_version": "2.43-2ubuntu1", "version": "2.43-2ubuntu1" }, "cves": [ { "cve": "CVE-2025-15281", "url": "https://ubuntu.com/security/CVE-2025-15281", "cve_description": "Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.", "cve_priority": "medium", "cve_public_date": "2026-01-20 14:16:00 UTC" }, { "cve": "CVE-2026-0861", "url": "https://ubuntu.com/security/CVE-2026-0861", "cve_description": "Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. Note that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this. The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument. This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc. Typically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice. An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments.", "cve_priority": "medium", "cve_public_date": "2026-01-14 21:15:00 UTC" }, { "cve": "CVE-2026-0915", "url": "https://ubuntu.com/security/CVE-2026-0915", "cve_description": "Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.", "cve_priority": "medium", "cve_public_date": "2026-01-15 22:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2143767, 2138256, 2142067 ], "changes": [ { "cves": [], "log": [ "", " * Merge from Debian experimental (LP: #2143767)", " Delta dropped:", " - Don't strip ld.so on armhf. LP #1927192.", " - Enable systemtap support, which is currently disabled in Debian.", " - Fix gconv regression on i386", " - Stop building with --enable-sframe for now.", " - s390x: drop the 32-bit multi-arch variant (LP #2067350)", " * Fixed upstream:", " - NPTL: Optimize trylock for high cache contention workloads (LP: #2138256) ", " * Update from upstream:", " - Don't include directly", " - po: Incorporate translatins (nl updated, ar new)", " * d/watch: modernize watchfile delta to v5", " * Fix broken ldconfig, static-pie binary on riscv64", " Revert RVV memset variant patch. (LP: #2142067)", "" ], "package": "glibc", "version": "2.43-2ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143767, 2138256, 2142067 ], "author": "Simon Poirier ", "date": "Tue, 17 Feb 2026 16:52:35 -0500" }, { "cves": [], "log": [ "", " * debian/testsuite-xfail-debian.mk: Update hurd results.", "" ], "package": "glibc", "version": "2.43-2", "urgency": "medium", "distributions": "UNRELEASED", "launchpad_bugs_fixed": [], "author": "Samuel Thibault ", "date": "Fri, 30 Jan 2026 01:41:14 +0100" }, { "cves": [], "log": [ "", " [ Aurelien Jarno ]", " * New upstream release:", " - debian/copyright: update following upstream changes.", " - debian/symbols.wildcards: add 2.43.", " - debian/patches/git-updates.diff: update from upstream stable branch.", " - debian/patches/hurd-i386/local-enable-ldconfig.diff: rebased.", " - debian/patches/hurd-i386/git-sigreturn-SEGV.diff: upstreamed.", " - debian/patches/hurd-i386/git-rlimit-as.diff: upstreamed.", " - debian/patches/hurd-i386/git-run-iconv-test.sh.diff: upstreamed.", " - debian/patches/hurd-i386/git-elf-ordering.diff: upstreamed.", " - debian/patches/hurd-i386/git-rename.diff: upstreamed.", " - debian/patches/hurd-i386/git-signal-SSE-MMX.diff: upstreamed.", " - debian/patches/hurd-i386/git-sigreturn-xmm.diff: upstreamed.", " - debian/patches/hurd-i386/git-cancel-stack.diff: upstreamed.", " - debian/patches/i386/unsubmitted-quiet-ldconfig.diff: rebased.", " - debian/patches/any/local-asserth-decls.diff: rebased.", " - debian/patches/any/local-tcsetaddr.diff: rebased.", " - debian/patches/any/submitted-nptl-invalid-td.patch: drop, obsolete.", " - debian/patches/any/git-ldd-set-u.diff: upstreamed.", " - debian/patches/any/git-linux-termios.diff: upstreamed.", " - debian/patches/hurd-i386/submitted-net.diff: rebased.", " - debian/patches/hurd-i386/tg-bits_atomic.h_multiple_threads.diff: drop,", " obsolete.", " - debian/patches/hurd-i386/local-clock_gettime_MONOTONIC.diff: rebased.", " - debian/patches/hurd-i386/local-fix-nss.diff: rebased.", " - debian/libc0.3.symbols.hurd-i386: update following the move of symbols", " from libpthread.so.0.3 to libc.so.0.3.", "" ], "package": "glibc", "version": "2.43-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Wed, 28 Jan 2026 22:35:15 +0100" }, { "cves": [], "log": [ "", " [ Samuel Thibault ]", " * debian/testsuite-xfail-debian.mk: ignore new tst-pie-bss-static issue on", " hurd for now.", "", " [ Aurelien Jarno ]", " * debian/control: regenerate. Closes: #1127589.", "" ], "package": "glibc", "version": "2.42-13", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Tue, 10 Feb 2026 18:54:23 +0100" }, { "cves": [], "log": [ "", " [ Samuel Thibault ]", " * debian/patches/hurd-i386/git-fork-gdb.diff: Fix gdb after fork.", " * debian/patches/hurd-i386/local-execstack.diff: Drop, fixed in binutils.", " * debian/patches/hurd-i386/git-sig-sig-mmx-fix.diff: Fix mmx corruption on", " double-signal.", " * debian/patches/hurd-i386/local-intr-msg-clobber.diff: Drop, now fixed.", " * debian/patches/hurd-i386/git-cancel-sig.diff: Fix cancellation points in", " signals during cancellation points.", " * debian/testsuite-xfail-debian.mk: Update accordingly.", "", " [ Aurelien Jarno ]", " * debian/control.in/*, debian/glibc-source.filelist,", " debian/libc6-s390.symbols.s390x, debian/rules.d/control.mk,", " debian/sysdeps/s390x.mk: stop building a 31-bit multilib flavour on s390x.", "" ], "package": "glibc", "version": "2.42-12", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Sat, 07 Feb 2026 22:23:34 +0100" }, { "cves": [ { "cve": "CVE-2025-15281", "url": "https://ubuntu.com/security/CVE-2025-15281", "cve_description": "Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.", "cve_priority": "medium", "cve_public_date": "2026-01-20 14:16:00 UTC" } ], "log": [ "", " [ Samuel Thibault ]", " * debian/patches/hurd-i386/local-execstack.diff: Work around missing execstack", " on libc.so.", "", " [ Aurelien Jarno ]", " * debian/patches/git-updates.diff: update from upstream stable branch:", " - Fix bug in wordexp, which could return uninitialized memory when using", " WRDE_REUSE together with WRDE_APPEND (CVE-2025-15281). Closes: #1126266.", " - Switch currency symbol for the bg_BG locale to euro.", "" ], "package": "glibc", "version": "2.42-11", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Mon, 26 Jan 2026 23:40:35 +0100" }, { "cves": [], "log": [ "", " [ Aurelien Jarno ]", " * debian/sysdeps/{amd64,arm64,i386,x32}.mk: disable SFrame support. Closes:", " #1125944.", " * debian/control.in/{main,libc}: drop versioned Build-Depends and Breaks on", " binutils 2.45, now pointless.", "" ], "package": "glibc", "version": "2.42-10", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Mon, 19 Jan 2026 20:12:24 +0100" }, { "cves": [], "log": [ "", " [ Samuel Thibault ]", " * debian/patches/hurd-i386/git-cancel-stack.diff: Fix crash on cancellation", " with unaligned stack.", "", " [ Aurelien Jarno ]", " * debian/rules.d/debhelper.mk: do not strip ld.so on armhf. Closes:", " #1125796.", "" ], "package": "glibc", "version": "2.42-9", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Sun, 18 Jan 2026 11:52:41 +0100" }, { "cves": [ { "cve": "CVE-2026-0861", "url": "https://ubuntu.com/security/CVE-2026-0861", "cve_description": "Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. Note that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this. The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument. This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc. Typically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice. An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments.", "cve_priority": "medium", "cve_public_date": "2026-01-14 21:15:00 UTC" }, { "cve": "CVE-2026-0915", "url": "https://ubuntu.com/security/CVE-2026-0915", "cve_description": "Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.", "cve_priority": "medium", "cve_public_date": "2026-01-15 22:16:00 UTC" } ], "log": [ "", " [ Samuel Thibault ]", " * debian/testsuite-xfail-debian.mk: Avoid running tst-writev on hurd-amd64.", " * debian/patches/hurd-i386/git-sigreturn-xmm.diff: Fix sigreturn using xmm", " registers in the signal contention case.", " * debian/patches/hurd-i386/local-intr-msg-clobber.diff: Try to re-introduce", " mmx clobber work-around.", " * debian/testsuite-xfail-debian.mk: Update hurd results.", "", " [ Aurelien Jarno ]", " * debian/rules.d/build.mk: do not write BUILD_CXX to configparms, it's", " unused.", " * debian/patches/git-updates.diff: update from upstream stable branch:", " - Fix and integer overflow in _int_memalign leading to heap corruption", " (CVE-2026-0861). Closes: #1125678.", " - Fix stack contents leak in getnetbyaddr (CVE-2026-0915). Closes:", " #1125748.", " - Optimize trylock for high cache contention workloads.", "", " [ Helmut Grohne ]", " * debian/control.in/main: avoid g++ dependency in nocheck builds.", " * debian/control.in/main, rules, rules.d/build.mk: don't build nscd in", " stage2.", "" ], "package": "glibc", "version": "2.42-8", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Fri, 16 Jan 2026 21:50:10 +0100" }, { "cves": [], "log": [ "", " [ Aurelien Jarno ]", " * debian/control.in/libc, debian/rules.d/debhelper.mk: drop libcrypt-dev", " dependency from libc6-dev. Thanks to Helmut Grohne for proposing that,", " doing an archive rebuild and filling the bug reports.", " * debian/control.in/main, debian/sysdeps/linux.mk: enable SystemTap static", " probes.", " * debian/debhelper.in/libc-dev.NEWS: add a NEWS entry about the removal of", " the obsolete termio interface. Closes: #1124068.", " * debian/rules.d/debhelper.mk: ensure that linker scripts work even when", " /usr is unmerged. Closes: #1120508", " * debian/debhelper.in/libc-dev{,-alt}.lintian-overrides,", " source/lintian-overrides, rules.d/debhelper.mk, salsa-ci.yml: drop", " unpack-message-for-{orig,source} overrides, fixed in lintian 2.128.0.", " * debian/control.in/main: drop Rules-Requires-Root: no, this is now the", " default.", " * debian/libc6.symbols.i386, debian/libc6-i386.symbols.{amd64,x32}: remove", " the workaround for GLIBC_ABI_GNU_TLS. Closes: #1122038.", " * debian/control.in/{libc,i386}: ensure that libdpkg-perl is fixed wrt", " GLIBC_ABI_GNU_TLS.", "" ], "package": "glibc", "version": "2.42-7", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Sun, 04 Jan 2026 10:07:24 +0100" }, { "cves": [], "log": [ "", " [ Benjamin Drung ]", " * debian/control: add new lines when concatenating files", " * Update debian/watch to version 5", "", " [ Aurelien Jarno ]", " * debian/symbols.wildcards: adjust ABI flags version:", " - Fix corresponding to GLIBC_ABI_DT_X86_64_PLT was first corrected in 2.36", " - Fix corresponding to GLIBC_ABI_GNU2_TLS as first corrected in 2.40", " * debian/control.in/libc, debian/control.in/main: remove breaks, conflicts", " and (build-)depends already satisfied in bookworm.", " * debian/control.in/amd64, debian/control.in/libc: add a Breaks against", " binutils (<< 2.45) for builds with sframe support enabled.", " * debian/control.in/main, debian/rules: build with GCC 15.", " * debian/patches/git-updates.diff: update from upstream stable branch.", "", " [ Baptiste Jammet ]", " * Update French debconf translation. Closes: #1118006.", "" ], "package": "glibc", "version": "2.42-6", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Fri, 12 Dec 2025 18:37:16 +0100" }, { "cves": [], "log": [ "", " [ Martin Bagge ]", " * Update Swedish debconf translation. Closes: #1121991.", "", " [ Aurelien Jarno ]", " * debian/control.in/main: change libc-gconv-modules-extra to Multi-Arch:", " same as it contains libraries.", " * debian/libc6.symbols.i386, debian/libc6-i386.symbols.{amd64,x32}: force", " the minimum libc6 version to >= 2.42, to ensure GLIBC_ABI_GNU_TLS is", " available, given symbols in .gnu.version_r section are currently not", " handled by dpkg-shlibdeps.", "" ], "package": "glibc", "version": "2.42-5", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Sat, 06 Dec 2025 23:02:46 +0100" }, { "cves": [], "log": [ "", " * Upload to unstable.", "" ], "package": "glibc", "version": "2.42-4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Wed, 03 Dec 2025 23:03:48 +0100" }, { "cves": [], "log": [ "", " [ Aurelien Jarno ]", " * debian/patches/any/git-ldd-set-u.diff: backport fix to allow using", " set -u on ldd. Closes: #1114824.", " * debian/patches/git-updates.diff: update from upstream stable branch.", " * debian/patches/any/git-linux-termios.diff: backport fix for termios", " regression with non-standard baud rate.", "", " [ Samuel Thibault ]", " * debian/patches/hurd-i386/git-sigreturn-SEGV.diff: catch SIGSEGV on", " returning from signal handler.", " * debian/patches/hurd-i386/git-rlimit-as.diff: Support RLIMIT_AS.", " * debian/patches/hurd-i386/local-aux-pagesz.diff: Fix getauxval(AT_PAGESZ).", " * debian/patches/hurd-i386/git-run-iconv-test.sh.diff: Fix running iconv", " tests.", " * debian/patches/hurd-i386/git-elf-ordering.diff: Fix running ELF ordering", " tests.", " * debian/patches/hurd-i386/git-rename.diff: Fix renaming directories with", " trailing slahes.", " * debian/patches/hurd-i386/git-signal-SSE-MMX.diff: Fix signals thrashing", " SSE&MMX state.", "" ], "package": "glibc", "version": "2.42-3", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Sat, 29 Nov 2025 19:36:10 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libc-gconv-modules-extra:riscv64", "from_version": { "source_package_name": "glibc", "source_package_version": "2.42-2ubuntu5", "version": "2.42-2ubuntu5" }, "to_version": { "source_package_name": "glibc", "source_package_version": "2.43-2ubuntu1", "version": "2.43-2ubuntu1" }, "cves": [ { "cve": "CVE-2025-15281", "url": "https://ubuntu.com/security/CVE-2025-15281", "cve_description": "Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.", "cve_priority": "medium", "cve_public_date": "2026-01-20 14:16:00 UTC" }, { "cve": "CVE-2026-0861", "url": "https://ubuntu.com/security/CVE-2026-0861", "cve_description": "Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. Note that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this. The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument. This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc. Typically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice. An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments.", "cve_priority": "medium", "cve_public_date": "2026-01-14 21:15:00 UTC" }, { "cve": "CVE-2026-0915", "url": "https://ubuntu.com/security/CVE-2026-0915", "cve_description": "Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.", "cve_priority": "medium", "cve_public_date": "2026-01-15 22:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2143767, 2138256, 2142067 ], "changes": [ { "cves": [], "log": [ "", " * Merge from Debian experimental (LP: #2143767)", " Delta dropped:", " - Don't strip ld.so on armhf. LP #1927192.", " - Enable systemtap support, which is currently disabled in Debian.", " - Fix gconv regression on i386", " - Stop building with --enable-sframe for now.", " - s390x: drop the 32-bit multi-arch variant (LP #2067350)", " * Fixed upstream:", " - NPTL: Optimize trylock for high cache contention workloads (LP: #2138256) ", " * Update from upstream:", " - Don't include directly", " - po: Incorporate translatins (nl updated, ar new)", " * d/watch: modernize watchfile delta to v5", " * Fix broken ldconfig, static-pie binary on riscv64", " Revert RVV memset variant patch. (LP: #2142067)", "" ], "package": "glibc", "version": "2.43-2ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143767, 2138256, 2142067 ], "author": "Simon Poirier ", "date": "Tue, 17 Feb 2026 16:52:35 -0500" }, { "cves": [], "log": [ "", " * debian/testsuite-xfail-debian.mk: Update hurd results.", "" ], "package": "glibc", "version": "2.43-2", "urgency": "medium", "distributions": "UNRELEASED", "launchpad_bugs_fixed": [], "author": "Samuel Thibault ", "date": "Fri, 30 Jan 2026 01:41:14 +0100" }, { "cves": [], "log": [ "", " [ Aurelien Jarno ]", " * New upstream release:", " - debian/copyright: update following upstream changes.", " - debian/symbols.wildcards: add 2.43.", " - debian/patches/git-updates.diff: update from upstream stable branch.", " - debian/patches/hurd-i386/local-enable-ldconfig.diff: rebased.", " - debian/patches/hurd-i386/git-sigreturn-SEGV.diff: upstreamed.", " - debian/patches/hurd-i386/git-rlimit-as.diff: upstreamed.", " - debian/patches/hurd-i386/git-run-iconv-test.sh.diff: upstreamed.", " - debian/patches/hurd-i386/git-elf-ordering.diff: upstreamed.", " - debian/patches/hurd-i386/git-rename.diff: upstreamed.", " - debian/patches/hurd-i386/git-signal-SSE-MMX.diff: upstreamed.", " - debian/patches/hurd-i386/git-sigreturn-xmm.diff: upstreamed.", " - debian/patches/hurd-i386/git-cancel-stack.diff: upstreamed.", " - debian/patches/i386/unsubmitted-quiet-ldconfig.diff: rebased.", " - debian/patches/any/local-asserth-decls.diff: rebased.", " - debian/patches/any/local-tcsetaddr.diff: rebased.", " - debian/patches/any/submitted-nptl-invalid-td.patch: drop, obsolete.", " - debian/patches/any/git-ldd-set-u.diff: upstreamed.", " - debian/patches/any/git-linux-termios.diff: upstreamed.", " - debian/patches/hurd-i386/submitted-net.diff: rebased.", " - debian/patches/hurd-i386/tg-bits_atomic.h_multiple_threads.diff: drop,", " obsolete.", " - debian/patches/hurd-i386/local-clock_gettime_MONOTONIC.diff: rebased.", " - debian/patches/hurd-i386/local-fix-nss.diff: rebased.", " - debian/libc0.3.symbols.hurd-i386: update following the move of symbols", " from libpthread.so.0.3 to libc.so.0.3.", "" ], "package": "glibc", "version": "2.43-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Wed, 28 Jan 2026 22:35:15 +0100" }, { "cves": [], "log": [ "", " [ Samuel Thibault ]", " * debian/testsuite-xfail-debian.mk: ignore new tst-pie-bss-static issue on", " hurd for now.", "", " [ Aurelien Jarno ]", " * debian/control: regenerate. Closes: #1127589.", "" ], "package": "glibc", "version": "2.42-13", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Tue, 10 Feb 2026 18:54:23 +0100" }, { "cves": [], "log": [ "", " [ Samuel Thibault ]", " * debian/patches/hurd-i386/git-fork-gdb.diff: Fix gdb after fork.", " * debian/patches/hurd-i386/local-execstack.diff: Drop, fixed in binutils.", " * debian/patches/hurd-i386/git-sig-sig-mmx-fix.diff: Fix mmx corruption on", " double-signal.", " * debian/patches/hurd-i386/local-intr-msg-clobber.diff: Drop, now fixed.", " * debian/patches/hurd-i386/git-cancel-sig.diff: Fix cancellation points in", " signals during cancellation points.", " * debian/testsuite-xfail-debian.mk: Update accordingly.", "", " [ Aurelien Jarno ]", " * debian/control.in/*, debian/glibc-source.filelist,", " debian/libc6-s390.symbols.s390x, debian/rules.d/control.mk,", " debian/sysdeps/s390x.mk: stop building a 31-bit multilib flavour on s390x.", "" ], "package": "glibc", "version": "2.42-12", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Sat, 07 Feb 2026 22:23:34 +0100" }, { "cves": [ { "cve": "CVE-2025-15281", "url": "https://ubuntu.com/security/CVE-2025-15281", "cve_description": "Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.", "cve_priority": "medium", "cve_public_date": "2026-01-20 14:16:00 UTC" } ], "log": [ "", " [ Samuel Thibault ]", " * debian/patches/hurd-i386/local-execstack.diff: Work around missing execstack", " on libc.so.", "", " [ Aurelien Jarno ]", " * debian/patches/git-updates.diff: update from upstream stable branch:", " - Fix bug in wordexp, which could return uninitialized memory when using", " WRDE_REUSE together with WRDE_APPEND (CVE-2025-15281). Closes: #1126266.", " - Switch currency symbol for the bg_BG locale to euro.", "" ], "package": "glibc", "version": "2.42-11", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Mon, 26 Jan 2026 23:40:35 +0100" }, { "cves": [], "log": [ "", " [ Aurelien Jarno ]", " * debian/sysdeps/{amd64,arm64,i386,x32}.mk: disable SFrame support. Closes:", " #1125944.", " * debian/control.in/{main,libc}: drop versioned Build-Depends and Breaks on", " binutils 2.45, now pointless.", "" ], "package": "glibc", "version": "2.42-10", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Mon, 19 Jan 2026 20:12:24 +0100" }, { "cves": [], "log": [ "", " [ Samuel Thibault ]", " * debian/patches/hurd-i386/git-cancel-stack.diff: Fix crash on cancellation", " with unaligned stack.", "", " [ Aurelien Jarno ]", " * debian/rules.d/debhelper.mk: do not strip ld.so on armhf. Closes:", " #1125796.", "" ], "package": "glibc", "version": "2.42-9", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Sun, 18 Jan 2026 11:52:41 +0100" }, { "cves": [ { "cve": "CVE-2026-0861", "url": "https://ubuntu.com/security/CVE-2026-0861", "cve_description": "Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. Note that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this. The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument. This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc. Typically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice. An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments.", "cve_priority": "medium", "cve_public_date": "2026-01-14 21:15:00 UTC" }, { "cve": "CVE-2026-0915", "url": "https://ubuntu.com/security/CVE-2026-0915", "cve_description": "Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.", "cve_priority": "medium", "cve_public_date": "2026-01-15 22:16:00 UTC" } ], "log": [ "", " [ Samuel Thibault ]", " * debian/testsuite-xfail-debian.mk: Avoid running tst-writev on hurd-amd64.", " * debian/patches/hurd-i386/git-sigreturn-xmm.diff: Fix sigreturn using xmm", " registers in the signal contention case.", " * debian/patches/hurd-i386/local-intr-msg-clobber.diff: Try to re-introduce", " mmx clobber work-around.", " * debian/testsuite-xfail-debian.mk: Update hurd results.", "", " [ Aurelien Jarno ]", " * debian/rules.d/build.mk: do not write BUILD_CXX to configparms, it's", " unused.", " * debian/patches/git-updates.diff: update from upstream stable branch:", " - Fix and integer overflow in _int_memalign leading to heap corruption", " (CVE-2026-0861). Closes: #1125678.", " - Fix stack contents leak in getnetbyaddr (CVE-2026-0915). Closes:", " #1125748.", " - Optimize trylock for high cache contention workloads.", "", " [ Helmut Grohne ]", " * debian/control.in/main: avoid g++ dependency in nocheck builds.", " * debian/control.in/main, rules, rules.d/build.mk: don't build nscd in", " stage2.", "" ], "package": "glibc", "version": "2.42-8", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Fri, 16 Jan 2026 21:50:10 +0100" }, { "cves": [], "log": [ "", " [ Aurelien Jarno ]", " * debian/control.in/libc, debian/rules.d/debhelper.mk: drop libcrypt-dev", " dependency from libc6-dev. Thanks to Helmut Grohne for proposing that,", " doing an archive rebuild and filling the bug reports.", " * debian/control.in/main, debian/sysdeps/linux.mk: enable SystemTap static", " probes.", " * debian/debhelper.in/libc-dev.NEWS: add a NEWS entry about the removal of", " the obsolete termio interface. Closes: #1124068.", " * debian/rules.d/debhelper.mk: ensure that linker scripts work even when", " /usr is unmerged. Closes: #1120508", " * debian/debhelper.in/libc-dev{,-alt}.lintian-overrides,", " source/lintian-overrides, rules.d/debhelper.mk, salsa-ci.yml: drop", " unpack-message-for-{orig,source} overrides, fixed in lintian 2.128.0.", " * debian/control.in/main: drop Rules-Requires-Root: no, this is now the", " default.", " * debian/libc6.symbols.i386, debian/libc6-i386.symbols.{amd64,x32}: remove", " the workaround for GLIBC_ABI_GNU_TLS. Closes: #1122038.", " * debian/control.in/{libc,i386}: ensure that libdpkg-perl is fixed wrt", " GLIBC_ABI_GNU_TLS.", "" ], "package": "glibc", "version": "2.42-7", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Sun, 04 Jan 2026 10:07:24 +0100" }, { "cves": [], "log": [ "", " [ Benjamin Drung ]", " * debian/control: add new lines when concatenating files", " * Update debian/watch to version 5", "", " [ Aurelien Jarno ]", " * debian/symbols.wildcards: adjust ABI flags version:", " - Fix corresponding to GLIBC_ABI_DT_X86_64_PLT was first corrected in 2.36", " - Fix corresponding to GLIBC_ABI_GNU2_TLS as first corrected in 2.40", " * debian/control.in/libc, debian/control.in/main: remove breaks, conflicts", " and (build-)depends already satisfied in bookworm.", " * debian/control.in/amd64, debian/control.in/libc: add a Breaks against", " binutils (<< 2.45) for builds with sframe support enabled.", " * debian/control.in/main, debian/rules: build with GCC 15.", " * debian/patches/git-updates.diff: update from upstream stable branch.", "", " [ Baptiste Jammet ]", " * Update French debconf translation. Closes: #1118006.", "" ], "package": "glibc", "version": "2.42-6", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Fri, 12 Dec 2025 18:37:16 +0100" }, { "cves": [], "log": [ "", " [ Martin Bagge ]", " * Update Swedish debconf translation. Closes: #1121991.", "", " [ Aurelien Jarno ]", " * debian/control.in/main: change libc-gconv-modules-extra to Multi-Arch:", " same as it contains libraries.", " * debian/libc6.symbols.i386, debian/libc6-i386.symbols.{amd64,x32}: force", " the minimum libc6 version to >= 2.42, to ensure GLIBC_ABI_GNU_TLS is", " available, given symbols in .gnu.version_r section are currently not", " handled by dpkg-shlibdeps.", "" ], "package": "glibc", "version": "2.42-5", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Sat, 06 Dec 2025 23:02:46 +0100" }, { "cves": [], "log": [ "", " * Upload to unstable.", "" ], "package": "glibc", "version": "2.42-4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Wed, 03 Dec 2025 23:03:48 +0100" }, { "cves": [], "log": [ "", " [ Aurelien Jarno ]", " * debian/patches/any/git-ldd-set-u.diff: backport fix to allow using", " set -u on ldd. Closes: #1114824.", " * debian/patches/git-updates.diff: update from upstream stable branch.", " * debian/patches/any/git-linux-termios.diff: backport fix for termios", " regression with non-standard baud rate.", "", " [ Samuel Thibault ]", " * debian/patches/hurd-i386/git-sigreturn-SEGV.diff: catch SIGSEGV on", " returning from signal handler.", " * debian/patches/hurd-i386/git-rlimit-as.diff: Support RLIMIT_AS.", " * debian/patches/hurd-i386/local-aux-pagesz.diff: Fix getauxval(AT_PAGESZ).", " * debian/patches/hurd-i386/git-run-iconv-test.sh.diff: Fix running iconv", " tests.", " * debian/patches/hurd-i386/git-elf-ordering.diff: Fix running ELF ordering", " tests.", " * debian/patches/hurd-i386/git-rename.diff: Fix renaming directories with", " trailing slahes.", " * debian/patches/hurd-i386/git-signal-SSE-MMX.diff: Fix signals thrashing", " SSE&MMX state.", "" ], "package": "glibc", "version": "2.42-3", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Sat, 29 Nov 2025 19:36:10 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libc6:riscv64", "from_version": { "source_package_name": "glibc", "source_package_version": "2.42-2ubuntu5", "version": "2.42-2ubuntu5" }, "to_version": { "source_package_name": "glibc", "source_package_version": "2.43-2ubuntu1", "version": "2.43-2ubuntu1" }, "cves": [ { "cve": "CVE-2025-15281", "url": "https://ubuntu.com/security/CVE-2025-15281", "cve_description": "Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.", "cve_priority": "medium", "cve_public_date": "2026-01-20 14:16:00 UTC" }, { "cve": "CVE-2026-0861", "url": "https://ubuntu.com/security/CVE-2026-0861", "cve_description": "Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. Note that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this. The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument. This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc. Typically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice. An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments.", "cve_priority": "medium", "cve_public_date": "2026-01-14 21:15:00 UTC" }, { "cve": "CVE-2026-0915", "url": "https://ubuntu.com/security/CVE-2026-0915", "cve_description": "Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.", "cve_priority": "medium", "cve_public_date": "2026-01-15 22:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2143767, 2138256, 2142067 ], "changes": [ { "cves": [], "log": [ "", " * Merge from Debian experimental (LP: #2143767)", " Delta dropped:", " - Don't strip ld.so on armhf. LP #1927192.", " - Enable systemtap support, which is currently disabled in Debian.", " - Fix gconv regression on i386", " - Stop building with --enable-sframe for now.", " - s390x: drop the 32-bit multi-arch variant (LP #2067350)", " * Fixed upstream:", " - NPTL: Optimize trylock for high cache contention workloads (LP: #2138256) ", " * Update from upstream:", " - Don't include directly", " - po: Incorporate translatins (nl updated, ar new)", " * d/watch: modernize watchfile delta to v5", " * Fix broken ldconfig, static-pie binary on riscv64", " Revert RVV memset variant patch. (LP: #2142067)", "" ], "package": "glibc", "version": "2.43-2ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143767, 2138256, 2142067 ], "author": "Simon Poirier ", "date": "Tue, 17 Feb 2026 16:52:35 -0500" }, { "cves": [], "log": [ "", " * debian/testsuite-xfail-debian.mk: Update hurd results.", "" ], "package": "glibc", "version": "2.43-2", "urgency": "medium", "distributions": "UNRELEASED", "launchpad_bugs_fixed": [], "author": "Samuel Thibault ", "date": "Fri, 30 Jan 2026 01:41:14 +0100" }, { "cves": [], "log": [ "", " [ Aurelien Jarno ]", " * New upstream release:", " - debian/copyright: update following upstream changes.", " - debian/symbols.wildcards: add 2.43.", " - debian/patches/git-updates.diff: update from upstream stable branch.", " - debian/patches/hurd-i386/local-enable-ldconfig.diff: rebased.", " - debian/patches/hurd-i386/git-sigreturn-SEGV.diff: upstreamed.", " - debian/patches/hurd-i386/git-rlimit-as.diff: upstreamed.", " - debian/patches/hurd-i386/git-run-iconv-test.sh.diff: upstreamed.", " - debian/patches/hurd-i386/git-elf-ordering.diff: upstreamed.", " - debian/patches/hurd-i386/git-rename.diff: upstreamed.", " - debian/patches/hurd-i386/git-signal-SSE-MMX.diff: upstreamed.", " - debian/patches/hurd-i386/git-sigreturn-xmm.diff: upstreamed.", " - debian/patches/hurd-i386/git-cancel-stack.diff: upstreamed.", " - debian/patches/i386/unsubmitted-quiet-ldconfig.diff: rebased.", " - debian/patches/any/local-asserth-decls.diff: rebased.", " - debian/patches/any/local-tcsetaddr.diff: rebased.", " - debian/patches/any/submitted-nptl-invalid-td.patch: drop, obsolete.", " - debian/patches/any/git-ldd-set-u.diff: upstreamed.", " - debian/patches/any/git-linux-termios.diff: upstreamed.", " - debian/patches/hurd-i386/submitted-net.diff: rebased.", " - debian/patches/hurd-i386/tg-bits_atomic.h_multiple_threads.diff: drop,", " obsolete.", " - debian/patches/hurd-i386/local-clock_gettime_MONOTONIC.diff: rebased.", " - debian/patches/hurd-i386/local-fix-nss.diff: rebased.", " - debian/libc0.3.symbols.hurd-i386: update following the move of symbols", " from libpthread.so.0.3 to libc.so.0.3.", "" ], "package": "glibc", "version": "2.43-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Wed, 28 Jan 2026 22:35:15 +0100" }, { "cves": [], "log": [ "", " [ Samuel Thibault ]", " * debian/testsuite-xfail-debian.mk: ignore new tst-pie-bss-static issue on", " hurd for now.", "", " [ Aurelien Jarno ]", " * debian/control: regenerate. Closes: #1127589.", "" ], "package": "glibc", "version": "2.42-13", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Tue, 10 Feb 2026 18:54:23 +0100" }, { "cves": [], "log": [ "", " [ Samuel Thibault ]", " * debian/patches/hurd-i386/git-fork-gdb.diff: Fix gdb after fork.", " * debian/patches/hurd-i386/local-execstack.diff: Drop, fixed in binutils.", " * debian/patches/hurd-i386/git-sig-sig-mmx-fix.diff: Fix mmx corruption on", " double-signal.", " * debian/patches/hurd-i386/local-intr-msg-clobber.diff: Drop, now fixed.", " * debian/patches/hurd-i386/git-cancel-sig.diff: Fix cancellation points in", " signals during cancellation points.", " * debian/testsuite-xfail-debian.mk: Update accordingly.", "", " [ Aurelien Jarno ]", " * debian/control.in/*, debian/glibc-source.filelist,", " debian/libc6-s390.symbols.s390x, debian/rules.d/control.mk,", " debian/sysdeps/s390x.mk: stop building a 31-bit multilib flavour on s390x.", "" ], "package": "glibc", "version": "2.42-12", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Sat, 07 Feb 2026 22:23:34 +0100" }, { "cves": [ { "cve": "CVE-2025-15281", "url": "https://ubuntu.com/security/CVE-2025-15281", "cve_description": "Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.", "cve_priority": "medium", "cve_public_date": "2026-01-20 14:16:00 UTC" } ], "log": [ "", " [ Samuel Thibault ]", " * debian/patches/hurd-i386/local-execstack.diff: Work around missing execstack", " on libc.so.", "", " [ Aurelien Jarno ]", " * debian/patches/git-updates.diff: update from upstream stable branch:", " - Fix bug in wordexp, which could return uninitialized memory when using", " WRDE_REUSE together with WRDE_APPEND (CVE-2025-15281). Closes: #1126266.", " - Switch currency symbol for the bg_BG locale to euro.", "" ], "package": "glibc", "version": "2.42-11", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Mon, 26 Jan 2026 23:40:35 +0100" }, { "cves": [], "log": [ "", " [ Aurelien Jarno ]", " * debian/sysdeps/{amd64,arm64,i386,x32}.mk: disable SFrame support. Closes:", " #1125944.", " * debian/control.in/{main,libc}: drop versioned Build-Depends and Breaks on", " binutils 2.45, now pointless.", "" ], "package": "glibc", "version": "2.42-10", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Mon, 19 Jan 2026 20:12:24 +0100" }, { "cves": [], "log": [ "", " [ Samuel Thibault ]", " * debian/patches/hurd-i386/git-cancel-stack.diff: Fix crash on cancellation", " with unaligned stack.", "", " [ Aurelien Jarno ]", " * debian/rules.d/debhelper.mk: do not strip ld.so on armhf. Closes:", " #1125796.", "" ], "package": "glibc", "version": "2.42-9", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Sun, 18 Jan 2026 11:52:41 +0100" }, { "cves": [ { "cve": "CVE-2026-0861", "url": "https://ubuntu.com/security/CVE-2026-0861", "cve_description": "Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. Note that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this. The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument. This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc. Typically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice. An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments.", "cve_priority": "medium", "cve_public_date": "2026-01-14 21:15:00 UTC" }, { "cve": "CVE-2026-0915", "url": "https://ubuntu.com/security/CVE-2026-0915", "cve_description": "Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.", "cve_priority": "medium", "cve_public_date": "2026-01-15 22:16:00 UTC" } ], "log": [ "", " [ Samuel Thibault ]", " * debian/testsuite-xfail-debian.mk: Avoid running tst-writev on hurd-amd64.", " * debian/patches/hurd-i386/git-sigreturn-xmm.diff: Fix sigreturn using xmm", " registers in the signal contention case.", " * debian/patches/hurd-i386/local-intr-msg-clobber.diff: Try to re-introduce", " mmx clobber work-around.", " * debian/testsuite-xfail-debian.mk: Update hurd results.", "", " [ Aurelien Jarno ]", " * debian/rules.d/build.mk: do not write BUILD_CXX to configparms, it's", " unused.", " * debian/patches/git-updates.diff: update from upstream stable branch:", " - Fix and integer overflow in _int_memalign leading to heap corruption", " (CVE-2026-0861). Closes: #1125678.", " - Fix stack contents leak in getnetbyaddr (CVE-2026-0915). Closes:", " #1125748.", " - Optimize trylock for high cache contention workloads.", "", " [ Helmut Grohne ]", " * debian/control.in/main: avoid g++ dependency in nocheck builds.", " * debian/control.in/main, rules, rules.d/build.mk: don't build nscd in", " stage2.", "" ], "package": "glibc", "version": "2.42-8", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Fri, 16 Jan 2026 21:50:10 +0100" }, { "cves": [], "log": [ "", " [ Aurelien Jarno ]", " * debian/control.in/libc, debian/rules.d/debhelper.mk: drop libcrypt-dev", " dependency from libc6-dev. Thanks to Helmut Grohne for proposing that,", " doing an archive rebuild and filling the bug reports.", " * debian/control.in/main, debian/sysdeps/linux.mk: enable SystemTap static", " probes.", " * debian/debhelper.in/libc-dev.NEWS: add a NEWS entry about the removal of", " the obsolete termio interface. Closes: #1124068.", " * debian/rules.d/debhelper.mk: ensure that linker scripts work even when", " /usr is unmerged. Closes: #1120508", " * debian/debhelper.in/libc-dev{,-alt}.lintian-overrides,", " source/lintian-overrides, rules.d/debhelper.mk, salsa-ci.yml: drop", " unpack-message-for-{orig,source} overrides, fixed in lintian 2.128.0.", " * debian/control.in/main: drop Rules-Requires-Root: no, this is now the", " default.", " * debian/libc6.symbols.i386, debian/libc6-i386.symbols.{amd64,x32}: remove", " the workaround for GLIBC_ABI_GNU_TLS. Closes: #1122038.", " * debian/control.in/{libc,i386}: ensure that libdpkg-perl is fixed wrt", " GLIBC_ABI_GNU_TLS.", "" ], "package": "glibc", "version": "2.42-7", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Sun, 04 Jan 2026 10:07:24 +0100" }, { "cves": [], "log": [ "", " [ Benjamin Drung ]", " * debian/control: add new lines when concatenating files", " * Update debian/watch to version 5", "", " [ Aurelien Jarno ]", " * debian/symbols.wildcards: adjust ABI flags version:", " - Fix corresponding to GLIBC_ABI_DT_X86_64_PLT was first corrected in 2.36", " - Fix corresponding to GLIBC_ABI_GNU2_TLS as first corrected in 2.40", " * debian/control.in/libc, debian/control.in/main: remove breaks, conflicts", " and (build-)depends already satisfied in bookworm.", " * debian/control.in/amd64, debian/control.in/libc: add a Breaks against", " binutils (<< 2.45) for builds with sframe support enabled.", " * debian/control.in/main, debian/rules: build with GCC 15.", " * debian/patches/git-updates.diff: update from upstream stable branch.", "", " [ Baptiste Jammet ]", " * Update French debconf translation. Closes: #1118006.", "" ], "package": "glibc", "version": "2.42-6", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Fri, 12 Dec 2025 18:37:16 +0100" }, { "cves": [], "log": [ "", " [ Martin Bagge ]", " * Update Swedish debconf translation. Closes: #1121991.", "", " [ Aurelien Jarno ]", " * debian/control.in/main: change libc-gconv-modules-extra to Multi-Arch:", " same as it contains libraries.", " * debian/libc6.symbols.i386, debian/libc6-i386.symbols.{amd64,x32}: force", " the minimum libc6 version to >= 2.42, to ensure GLIBC_ABI_GNU_TLS is", " available, given symbols in .gnu.version_r section are currently not", " handled by dpkg-shlibdeps.", "" ], "package": "glibc", "version": "2.42-5", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Sat, 06 Dec 2025 23:02:46 +0100" }, { "cves": [], "log": [ "", " * Upload to unstable.", "" ], "package": "glibc", "version": "2.42-4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Wed, 03 Dec 2025 23:03:48 +0100" }, { "cves": [], "log": [ "", " [ Aurelien Jarno ]", " * debian/patches/any/git-ldd-set-u.diff: backport fix to allow using", " set -u on ldd. Closes: #1114824.", " * debian/patches/git-updates.diff: update from upstream stable branch.", " * debian/patches/any/git-linux-termios.diff: backport fix for termios", " regression with non-standard baud rate.", "", " [ Samuel Thibault ]", " * debian/patches/hurd-i386/git-sigreturn-SEGV.diff: catch SIGSEGV on", " returning from signal handler.", " * debian/patches/hurd-i386/git-rlimit-as.diff: Support RLIMIT_AS.", " * debian/patches/hurd-i386/local-aux-pagesz.diff: Fix getauxval(AT_PAGESZ).", " * debian/patches/hurd-i386/git-run-iconv-test.sh.diff: Fix running iconv", " tests.", " * debian/patches/hurd-i386/git-elf-ordering.diff: Fix running ELF ordering", " tests.", " * debian/patches/hurd-i386/git-rename.diff: Fix renaming directories with", " trailing slahes.", " * debian/patches/hurd-i386/git-signal-SSE-MMX.diff: Fix signals thrashing", " SSE&MMX state.", "" ], "package": "glibc", "version": "2.42-3", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Sat, 29 Nov 2025 19:36:10 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libcap-ng0:riscv64", "from_version": { "source_package_name": "libcap-ng", "source_package_version": "0.8.5-4build4", "version": "0.8.5-4build4" }, "to_version": { "source_package_name": "libcap-ng", "source_package_version": "0.8.5-4build5", "version": "0.8.5-4build5" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild to drop Python 3.13 bits.", "" ], "package": "libcap-ng", "version": "0.8.5-4build5", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 20 Mar 2026 12:18:30 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libclang-cpp21", "from_version": { "source_package_name": "llvm-toolchain-21", "source_package_version": "1:21.1.8-1ubuntu1", "version": "1:21.1.8-1ubuntu1" }, "to_version": { "source_package_name": "llvm-toolchain-21", "source_package_version": "1:21.1.8-4ubuntu2", "version": "1:21.1.8-4ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [ 2138890, 2138890, 2138890 ], "changes": [ { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - Regenerate the control file.", " - Use RVA23U64 profile in clang (LP #2116086).", " - d/rules: Remove i386 from CLANG_GRPC_ARCHS (not built on i386).", "" ], "package": "llvm-toolchain-21", "version": "1:21.1.8-4ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 27 Feb 2026 21:51:56 +0100" }, { "cves": [], "log": [ "", " [ Matthias Klose ]", " * d/rules: Fix self-referencing macro.", " * Stop building packages now built by LLVM 22.", " * d/rules: Don't use lld for backport build, when not available.", " * d/rules: Add safety check for enablement of the RVA23 baseline.", " * d/rules: Only disable Z3 support for Ubuntu when it is in main.", " * Install a lit binary. Closes: #1122910.", " * llvm-tools: Don't install the lit tests. Closes: #1122909.", "", " [ Sylvestre Ledru ]", " * Fix autopkgtest failure with CMake 4. thanks to Adrian Bunk", "" ], "package": "llvm-toolchain-21", "version": "1:21.1.8-4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 27 Feb 2026 17:29:38 +0100" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - Regenerate the control file.", " - Use RVA23U64 profile in clang (LP #2116086).", " - d/rules: Remove i386 from CLANG_GRPC_ARCHS (not built on i386).", " * Stop building packages now built from LLVM 22.", "" ], "package": "llvm-toolchain-21", "version": "1:21.1.8-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 05 Feb 2026 11:23:42 +0100" }, { "cves": [], "log": [ "", " [ Matthias Klose ]", " * d/llvm-X.Y-tools.bcep.in: Fix Python 3.14 byte compilation by adding", " an exception for shtest-encoding.py test file containing non-UTF-8", " characters (Igor Luppi). Closes: #1125352. LP: #2138890.", " * Enable libunwind on s390x (Michael R. Crusoe). Closes: #1126263.", "", " [ Fabian Grünbichler ]", " * d/rules: Work around cmake 4.x compat issue. Closes: #1125733.", "" ], "package": "llvm-toolchain-21", "version": "1:21.1.8-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2138890 ], "author": "Matthias Klose ", "date": "Tue, 03 Feb 2026 12:25:57 +0100" }, { "cves": [], "log": [ "", " * d/llvm-X.Y-tools.bcep.in: fix bcep exception pattern (LP: #2138890).", "" ], "package": "llvm-toolchain-21", "version": "1:21.1.8-2ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2138890 ], "author": "Igor Luppi ", "date": "Mon, 02 Feb 2026 11:59:53 -0300" }, { "cves": [], "log": [ "", " * Cherry-pick change from Debian git", " [ Matthias Klose ]", " * d/llvm-X.Y-tools.bcep.in: Fix Python 3.14 byte compilation by adding", " an exception for shtest-encoding.py test file containing non-UTF-8", " characters (Igor Luppi). LP: #2138890.", "" ], "package": "llvm-toolchain-21", "version": "1:21.1.8-2ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2138890 ], "author": "Gianfranco Costamagna ", "date": "Sat, 31 Jan 2026 19:43:34 +0100" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - Regenerate the control file.", " - Use RVA23U64 profile in clang (LP #2116086).", " - d/rules: Remove i386 from CLANG_GRPC_ARCHS (not built on i386).", "" ], "package": "llvm-toolchain-21", "version": "1:21.1.8-2ubuntu1", "urgency": "low", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Gianfranco Costamagna ", "date": "Mon, 26 Jan 2026 20:25:27 +0100" }, { "cves": [], "log": [ "", " * Stop building multilibs on s390x. Closes: #1125253.", "" ], "package": "llvm-toolchain-21", "version": "1:21.1.8-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 20 Jan 2026 05:14:27 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libcom-err2:riscv64", "from_version": { "source_package_name": "e2fsprogs", "source_package_version": "1.47.2-3ubuntu2", "version": "1.47.2-3ubuntu2" }, "to_version": { "source_package_name": "e2fsprogs", "source_package_version": "1.47.2-3ubuntu4", "version": "1.47.2-3ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [ 2138219, 2132257 ], "changes": [ { "cves": [], "log": [ "", " * d/rules: fix pkgconfig call that results in inability", " to find udev rules.d in dh_install. Patch supplied by", " Helmut Grohne in Debian bug 1126636. (LP: #2138219)", "" ], "package": "e2fsprogs", "version": "1.47.2-3ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2138219 ], "author": "John Chittum ", "date": "Fri, 13 Feb 2026 07:17:00 -0500" }, { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "e2fsprogs", "version": "1.47.2-3ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:34:31 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libcryptsetup12:riscv64", "from_version": { "source_package_name": "cryptsetup", "source_package_version": "2:2.8.4-1ubuntu1", "version": "2:2.8.4-1ubuntu1" }, "to_version": { "source_package_name": "cryptsetup", "source_package_version": "2:2.8.4-1ubuntu4", "version": "2:2.8.4-1ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [ 2143933, 2142888, 2142775 ], "changes": [ { "cves": [], "log": [ "", " * Cherry-pick fixes from upstream:", " - tests: Fix tests to not use aes-generic kernel cipher name", " - Add specific error for failed posix_fallocate call.", " * test: use gnudd as workaround in luks2-reencryption-mangle-test", " (LP: #2143933)", "" ], "package": "cryptsetup", "version": "2:2.8.4-1ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143933 ], "author": "Benjamin Drung ", "date": "Wed, 11 Mar 2026 18:58:47 +0100" }, { "cves": [], "log": [ "", " * askpass: Fix FTBFS with glibc 2.43. (Closes: #1128538, LP: #2142888)", "" ], "package": "cryptsetup", "version": "2:2.8.4-1ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142888 ], "author": "Benjamin Drung ", "date": "Wed, 11 Mar 2026 11:53:16 +0100" }, { "cves": [], "log": [ "", " * cryptsetup: recommend dracut over cryptsetup-initramfs (LP: #2142775)", "" ], "package": "cryptsetup", "version": "2:2.8.4-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142775 ], "author": "Benjamin Drung ", "date": "Tue, 10 Mar 2026 12:24:16 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libcurl3t64-gnutls:riscv64", "from_version": { "source_package_name": "curl", "source_package_version": "8.18.0-1ubuntu1", "version": "8.18.0-1ubuntu1" }, "to_version": { "source_package_name": "curl", "source_package_version": "8.18.0-1ubuntu2", "version": "8.18.0-1ubuntu2" }, "cves": [ { "cve": "CVE-2026-1965", "url": "https://ubuntu.com/security/CVE-2026-1965", "cve_description": "libcurl can in some circumstances reuse the wrong connection when asked to do an Negotiate-authenticated HTTP or HTTPS request. libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead. When reusing a connection a range of criterion must first be met. Due to a logical error in the code, a request that was issued by an application could wrongfully reuse an existing connection to the same server that was authenticated using different credentials. One underlying reason being that Negotiate sometimes authenticates *connections* and not *requests*, contrary to how HTTP is designed to work. An application that allows Negotiate authentication to a server (that responds wanting Negotiate) with `user1:password1` and then does another operation to the same server also using Negotiate but with `user2:password2` (while the previous connection is still alive) - the second request wrongly reused the same connection and since it then sees that the Negotiate negotiation is already made, it just sends the request over that connection thinking it uses the user2 credentials when it is in fact still using the connection authenticated for user1... The set of authentication methods to use is set with `CURLOPT_HTTPAUTH`. Applications can disable libcurl's reuse of connections and thus mitigate this problem, by using one of the following libcurl options to alter how connections are or are not reused: `CURLOPT_FRESH_CONNECT`, `CURLOPT_MAXCONNECTS` and `CURLMOPT_MAX_HOST_CONNECTIONS` (if using the curl_multi API).", "cve_priority": "medium", "cve_public_date": "2026-03-11 11:15:00 UTC" }, { "cve": "CVE-2026-3783", "url": "https://ubuntu.com/security/CVE-2026-3783", "cve_description": "When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname under some circumstances. If the hostname that the first request is redirected to has information in the used .netrc file, with either of the `machine` or `default` keywords, curl would pass on the bearer token set for the first host also to the second one.", "cve_priority": "medium", "cve_public_date": "2026-03-11 11:16:00 UTC" }, { "cve": "CVE-2026-3784", "url": "https://ubuntu.com/security/CVE-2026-3784", "cve_description": "curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is to create or use a separate connection.", "cve_priority": "low", "cve_public_date": "2026-03-11 11:16:00 UTC" }, { "cve": "CVE-2026-3805", "url": "https://ubuntu.com/security/CVE-2026-3805", "cve_description": "When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.", "cve_priority": "medium", "cve_public_date": "2026-03-11 11:16:00 UTC" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-1965", "url": "https://ubuntu.com/security/CVE-2026-1965", "cve_description": "libcurl can in some circumstances reuse the wrong connection when asked to do an Negotiate-authenticated HTTP or HTTPS request. libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead. When reusing a connection a range of criterion must first be met. Due to a logical error in the code, a request that was issued by an application could wrongfully reuse an existing connection to the same server that was authenticated using different credentials. One underlying reason being that Negotiate sometimes authenticates *connections* and not *requests*, contrary to how HTTP is designed to work. An application that allows Negotiate authentication to a server (that responds wanting Negotiate) with `user1:password1` and then does another operation to the same server also using Negotiate but with `user2:password2` (while the previous connection is still alive) - the second request wrongly reused the same connection and since it then sees that the Negotiate negotiation is already made, it just sends the request over that connection thinking it uses the user2 credentials when it is in fact still using the connection authenticated for user1... The set of authentication methods to use is set with `CURLOPT_HTTPAUTH`. Applications can disable libcurl's reuse of connections and thus mitigate this problem, by using one of the following libcurl options to alter how connections are or are not reused: `CURLOPT_FRESH_CONNECT`, `CURLOPT_MAXCONNECTS` and `CURLMOPT_MAX_HOST_CONNECTIONS` (if using the curl_multi API).", "cve_priority": "medium", "cve_public_date": "2026-03-11 11:15:00 UTC" }, { "cve": "CVE-2026-3783", "url": "https://ubuntu.com/security/CVE-2026-3783", "cve_description": "When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname under some circumstances. If the hostname that the first request is redirected to has information in the used .netrc file, with either of the `machine` or `default` keywords, curl would pass on the bearer token set for the first host also to the second one.", "cve_priority": "medium", "cve_public_date": "2026-03-11 11:16:00 UTC" }, { "cve": "CVE-2026-3784", "url": "https://ubuntu.com/security/CVE-2026-3784", "cve_description": "curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is to create or use a separate connection.", "cve_priority": "low", "cve_public_date": "2026-03-11 11:16:00 UTC" }, { "cve": "CVE-2026-3805", "url": "https://ubuntu.com/security/CVE-2026-3805", "cve_description": "When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.", "cve_priority": "medium", "cve_public_date": "2026-03-11 11:16:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: bad reuse of HTTP Negotiate connection", " - debian/patches/CVE-2026-1965-1.patch: fix reuse of connections using", " HTTP Negotiate in lib/url.c.", " - debian/patches/CVE-2026-1965-2.patch: fix copy and paste", " url_match_auth_nego mistake in lib/url.c.", " - CVE-2026-1965", " * SECURITY UPDATE: token leak with redirect and netrc", " - debian/patches/CVE-2026-3783.patch: only send bearer if auth is", " allowed in lib/http.c, tests/data/Makefile.am, tests/data/test2006.", " - CVE-2026-3783", " * SECURITY UPDATE: wrong proxy connection reuse with credentials", " - debian/patches/CVE-2026-3784.patch: add additional tests in", " lib/url.c, tests/http/test_13_proxy_auth.py,", " tests/http/testenv/curl.py.", " - CVE-2026-3784", " * SECURITY UPDATE: use after free in SMB connection reuse", " - debian/patches/CVE-2026-3805.patch: free the path in the request", " struct properly in lib/smb.c.", " - CVE-2026-3805", "" ], "package": "curl", "version": "8.18.0-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Mon, 09 Mar 2026 08:30:05 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "libcurl4t64:riscv64", "from_version": { "source_package_name": "curl", "source_package_version": "8.18.0-1ubuntu1", "version": "8.18.0-1ubuntu1" }, "to_version": { "source_package_name": "curl", "source_package_version": "8.18.0-1ubuntu2", "version": "8.18.0-1ubuntu2" }, "cves": [ { "cve": "CVE-2026-1965", "url": "https://ubuntu.com/security/CVE-2026-1965", "cve_description": "libcurl can in some circumstances reuse the wrong connection when asked to do an Negotiate-authenticated HTTP or HTTPS request. libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead. When reusing a connection a range of criterion must first be met. Due to a logical error in the code, a request that was issued by an application could wrongfully reuse an existing connection to the same server that was authenticated using different credentials. One underlying reason being that Negotiate sometimes authenticates *connections* and not *requests*, contrary to how HTTP is designed to work. An application that allows Negotiate authentication to a server (that responds wanting Negotiate) with `user1:password1` and then does another operation to the same server also using Negotiate but with `user2:password2` (while the previous connection is still alive) - the second request wrongly reused the same connection and since it then sees that the Negotiate negotiation is already made, it just sends the request over that connection thinking it uses the user2 credentials when it is in fact still using the connection authenticated for user1... The set of authentication methods to use is set with `CURLOPT_HTTPAUTH`. Applications can disable libcurl's reuse of connections and thus mitigate this problem, by using one of the following libcurl options to alter how connections are or are not reused: `CURLOPT_FRESH_CONNECT`, `CURLOPT_MAXCONNECTS` and `CURLMOPT_MAX_HOST_CONNECTIONS` (if using the curl_multi API).", "cve_priority": "medium", "cve_public_date": "2026-03-11 11:15:00 UTC" }, { "cve": "CVE-2026-3783", "url": "https://ubuntu.com/security/CVE-2026-3783", "cve_description": "When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname under some circumstances. If the hostname that the first request is redirected to has information in the used .netrc file, with either of the `machine` or `default` keywords, curl would pass on the bearer token set for the first host also to the second one.", "cve_priority": "medium", "cve_public_date": "2026-03-11 11:16:00 UTC" }, { "cve": "CVE-2026-3784", "url": "https://ubuntu.com/security/CVE-2026-3784", "cve_description": "curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is to create or use a separate connection.", "cve_priority": "low", "cve_public_date": "2026-03-11 11:16:00 UTC" }, { "cve": "CVE-2026-3805", "url": "https://ubuntu.com/security/CVE-2026-3805", "cve_description": "When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.", "cve_priority": "medium", "cve_public_date": "2026-03-11 11:16:00 UTC" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-1965", "url": "https://ubuntu.com/security/CVE-2026-1965", "cve_description": "libcurl can in some circumstances reuse the wrong connection when asked to do an Negotiate-authenticated HTTP or HTTPS request. libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead. When reusing a connection a range of criterion must first be met. Due to a logical error in the code, a request that was issued by an application could wrongfully reuse an existing connection to the same server that was authenticated using different credentials. One underlying reason being that Negotiate sometimes authenticates *connections* and not *requests*, contrary to how HTTP is designed to work. An application that allows Negotiate authentication to a server (that responds wanting Negotiate) with `user1:password1` and then does another operation to the same server also using Negotiate but with `user2:password2` (while the previous connection is still alive) - the second request wrongly reused the same connection and since it then sees that the Negotiate negotiation is already made, it just sends the request over that connection thinking it uses the user2 credentials when it is in fact still using the connection authenticated for user1... The set of authentication methods to use is set with `CURLOPT_HTTPAUTH`. Applications can disable libcurl's reuse of connections and thus mitigate this problem, by using one of the following libcurl options to alter how connections are or are not reused: `CURLOPT_FRESH_CONNECT`, `CURLOPT_MAXCONNECTS` and `CURLMOPT_MAX_HOST_CONNECTIONS` (if using the curl_multi API).", "cve_priority": "medium", "cve_public_date": "2026-03-11 11:15:00 UTC" }, { "cve": "CVE-2026-3783", "url": "https://ubuntu.com/security/CVE-2026-3783", "cve_description": "When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname under some circumstances. If the hostname that the first request is redirected to has information in the used .netrc file, with either of the `machine` or `default` keywords, curl would pass on the bearer token set for the first host also to the second one.", "cve_priority": "medium", "cve_public_date": "2026-03-11 11:16:00 UTC" }, { "cve": "CVE-2026-3784", "url": "https://ubuntu.com/security/CVE-2026-3784", "cve_description": "curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is to create or use a separate connection.", "cve_priority": "low", "cve_public_date": "2026-03-11 11:16:00 UTC" }, { "cve": "CVE-2026-3805", "url": "https://ubuntu.com/security/CVE-2026-3805", "cve_description": "When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.", "cve_priority": "medium", "cve_public_date": "2026-03-11 11:16:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: bad reuse of HTTP Negotiate connection", " - debian/patches/CVE-2026-1965-1.patch: fix reuse of connections using", " HTTP Negotiate in lib/url.c.", " - debian/patches/CVE-2026-1965-2.patch: fix copy and paste", " url_match_auth_nego mistake in lib/url.c.", " - CVE-2026-1965", " * SECURITY UPDATE: token leak with redirect and netrc", " - debian/patches/CVE-2026-3783.patch: only send bearer if auth is", " allowed in lib/http.c, tests/data/Makefile.am, tests/data/test2006.", " - CVE-2026-3783", " * SECURITY UPDATE: wrong proxy connection reuse with credentials", " - debian/patches/CVE-2026-3784.patch: add additional tests in", " lib/url.c, tests/http/test_13_proxy_auth.py,", " tests/http/testenv/curl.py.", " - CVE-2026-3784", " * SECURITY UPDATE: use after free in SMB connection reuse", " - debian/patches/CVE-2026-3805.patch: free the path in the request", " struct properly in lib/smb.c.", " - CVE-2026-3805", "" ], "package": "curl", "version": "8.18.0-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Mon, 09 Mar 2026 08:30:05 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "libdbus-1-3:riscv64", "from_version": { "source_package_name": "dbus", "source_package_version": "1.16.2-2ubuntu3", "version": "1.16.2-2ubuntu3" }, "to_version": { "source_package_name": "dbus", "source_package_version": "1.16.2-2ubuntu4", "version": "1.16.2-2ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [ 2141603 ], "changes": [ { "cves": [], "log": [ "", " * dont-stop-dbus.patch: restore Before=sockets.target (LP: #2141603)", "" ], "package": "dbus", "version": "1.16.2-2ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2141603 ], "author": "Benjamin Drung ", "date": "Tue, 03 Mar 2026 12:20:34 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libdebuginfod-common", "from_version": { "source_package_name": "elfutils", "source_package_version": "0.194-1", "version": "0.194-1" }, "to_version": { "source_package_name": "elfutils", "source_package_version": "0.194-4", "version": "0.194-4" }, "cves": [], "launchpad_bugs_fixed": [ 2144516 ], "changes": [ { "cves": [], "log": [ "", " * Apply two more patches from the trunk:", " - Fix const-correctness issues.", " - libdwfl: Work around ET_REL files with sh_addr fields set to", " non-zero.", "" ], "package": "elfutils", "version": "0.194-4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 17 Mar 2026 15:25:35 +0100" }, { "cves": [], "log": [ "", " [ Sergio Durigan Junior ]", " * d/libdebuginfod-common.postinst: Remove readonly usage when declaring", " local variables. (LP: #2144516)", "", " [ Matthias Klose ]", " * Fix PR dwz/33391, trunk: aarch64: Recognize SHT_AARCH64_ATTRIBUTES.", "" ], "package": "elfutils", "version": "0.194-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2144516 ], "author": "Matthias Klose ", "date": "Tue, 17 Mar 2026 07:31:46 +0100" }, { "cves": [], "log": [ "", " [ Mark Wielaard ]", " * d/p/elfutils-0.194-alloc-jobs.patch: Patch for upstream bug 33580.", "", " [ Matthias Klose ]", " * Update symbols file syntax.", " * Bump standards version.", " * Drop build dependency on gcc-multilib. Closes: #1107128.", " * Drop bashism from debian/libdebuginfod-common.postinst (Nobuhiro Iwamatsu).", " Closes: #1105011.", "" ], "package": "elfutils", "version": "0.194-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 15 Mar 2026 10:41:13 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libdebuginfod1t64:riscv64", "from_version": { "source_package_name": "elfutils", "source_package_version": "0.194-1", "version": "0.194-1" }, "to_version": { "source_package_name": "elfutils", "source_package_version": "0.194-4", "version": "0.194-4" }, "cves": [], "launchpad_bugs_fixed": [ 2144516 ], "changes": [ { "cves": [], "log": [ "", " * Apply two more patches from the trunk:", " - Fix const-correctness issues.", " - libdwfl: Work around ET_REL files with sh_addr fields set to", " non-zero.", "" ], "package": "elfutils", "version": "0.194-4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 17 Mar 2026 15:25:35 +0100" }, { "cves": [], "log": [ "", " [ Sergio Durigan Junior ]", " * d/libdebuginfod-common.postinst: Remove readonly usage when declaring", " local variables. (LP: #2144516)", "", " [ Matthias Klose ]", " * Fix PR dwz/33391, trunk: aarch64: Recognize SHT_AARCH64_ATTRIBUTES.", "" ], "package": "elfutils", "version": "0.194-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2144516 ], "author": "Matthias Klose ", "date": "Tue, 17 Mar 2026 07:31:46 +0100" }, { "cves": [], "log": [ "", " [ Mark Wielaard ]", " * d/p/elfutils-0.194-alloc-jobs.patch: Patch for upstream bug 33580.", "", " [ Matthias Klose ]", " * Update symbols file syntax.", " * Bump standards version.", " * Drop build dependency on gcc-multilib. Closes: #1107128.", " * Drop bashism from debian/libdebuginfod-common.postinst (Nobuhiro Iwamatsu).", " Closes: #1105011.", "" ], "package": "elfutils", "version": "0.194-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 15 Mar 2026 10:41:13 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libdw1t64:riscv64", "from_version": { "source_package_name": "elfutils", "source_package_version": "0.194-1", "version": "0.194-1" }, "to_version": { "source_package_name": "elfutils", "source_package_version": "0.194-4", "version": "0.194-4" }, "cves": [], "launchpad_bugs_fixed": [ 2144516 ], "changes": [ { "cves": [], "log": [ "", " * Apply two more patches from the trunk:", " - Fix const-correctness issues.", " - libdwfl: Work around ET_REL files with sh_addr fields set to", " non-zero.", "" ], "package": "elfutils", "version": "0.194-4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 17 Mar 2026 15:25:35 +0100" }, { "cves": [], "log": [ "", " [ Sergio Durigan Junior ]", " * d/libdebuginfod-common.postinst: Remove readonly usage when declaring", " local variables. (LP: #2144516)", "", " [ Matthias Klose ]", " * Fix PR dwz/33391, trunk: aarch64: Recognize SHT_AARCH64_ATTRIBUTES.", "" ], "package": "elfutils", "version": "0.194-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2144516 ], "author": "Matthias Klose ", "date": "Tue, 17 Mar 2026 07:31:46 +0100" }, { "cves": [], "log": [ "", " [ Mark Wielaard ]", " * d/p/elfutils-0.194-alloc-jobs.patch: Patch for upstream bug 33580.", "", " [ Matthias Klose ]", " * Update symbols file syntax.", " * Bump standards version.", " * Drop build dependency on gcc-multilib. Closes: #1107128.", " * Drop bashism from debian/libdebuginfod-common.postinst (Nobuhiro Iwamatsu).", " Closes: #1105011.", "" ], "package": "elfutils", "version": "0.194-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 15 Mar 2026 10:41:13 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libelf1t64:riscv64", "from_version": { "source_package_name": "elfutils", "source_package_version": "0.194-1", "version": "0.194-1" }, "to_version": { "source_package_name": "elfutils", "source_package_version": "0.194-4", "version": "0.194-4" }, "cves": [], "launchpad_bugs_fixed": [ 2144516 ], "changes": [ { "cves": [], "log": [ "", " * Apply two more patches from the trunk:", " - Fix const-correctness issues.", " - libdwfl: Work around ET_REL files with sh_addr fields set to", " non-zero.", "" ], "package": "elfutils", "version": "0.194-4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 17 Mar 2026 15:25:35 +0100" }, { "cves": [], "log": [ "", " [ Sergio Durigan Junior ]", " * d/libdebuginfod-common.postinst: Remove readonly usage when declaring", " local variables. (LP: #2144516)", "", " [ Matthias Klose ]", " * Fix PR dwz/33391, trunk: aarch64: Recognize SHT_AARCH64_ATTRIBUTES.", "" ], "package": "elfutils", "version": "0.194-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2144516 ], "author": "Matthias Klose ", "date": "Tue, 17 Mar 2026 07:31:46 +0100" }, { "cves": [], "log": [ "", " [ Mark Wielaard ]", " * d/p/elfutils-0.194-alloc-jobs.patch: Patch for upstream bug 33580.", "", " [ Matthias Klose ]", " * Update symbols file syntax.", " * Bump standards version.", " * Drop build dependency on gcc-multilib. Closes: #1107128.", " * Drop bashism from debian/libdebuginfod-common.postinst (Nobuhiro Iwamatsu).", " Closes: #1105011.", "" ], "package": "elfutils", "version": "0.194-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 15 Mar 2026 10:41:13 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libext2fs2t64:riscv64", "from_version": { "source_package_name": "e2fsprogs", "source_package_version": "1.47.2-3ubuntu2", "version": "1.47.2-3ubuntu2" }, "to_version": { "source_package_name": "e2fsprogs", "source_package_version": "1.47.2-3ubuntu4", "version": "1.47.2-3ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [ 2138219, 2132257 ], "changes": [ { "cves": [], "log": [ "", " * d/rules: fix pkgconfig call that results in inability", " to find udev rules.d in dh_install. Patch supplied by", " Helmut Grohne in Debian bug 1126636. (LP: #2138219)", "" ], "package": "e2fsprogs", "version": "1.47.2-3ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2138219 ], "author": "John Chittum ", "date": "Fri, 13 Feb 2026 07:17:00 -0500" }, { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "e2fsprogs", "version": "1.47.2-3ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:34:31 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libfdisk1:riscv64", "from_version": { "source_package_name": "util-linux", "source_package_version": "2.41.2-4ubuntu3", "version": "2.41.2-4ubuntu3" }, "to_version": { "source_package_name": "util-linux", "source_package_version": "2.41.3-3ubuntu2", "version": "2.41.3-3ubuntu2" }, "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" }, { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2142050 ], "changes": [ { "cves": [], "log": [ "", " * d/p/ubuntu/su-pty-drop-caps.patch: harden 'su --pty' to temporarily lower", " capabilities while proxying between stdin/stdout and the pty master. This", " is to avoid su from being used to exploit kernel vulnerabilities.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Fri, 13 Mar 2026 07:09:23 -0400" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Merge with Debian unstable (LP: #2142050). Remaining changes:", " - Add sulogin-fallback-static-sh.patch", " Add support for /bin/static-sh as fallback if the regular shell fails to", " execute. Patch ported from sysvinit. (see LP #505887)", " - Add sulogin-lockedpwd.patch", " Make sure file systems can be fixed on machines with locked root", " accounts (as Ubuntu does by default). Don't require --force for sulogin.", " - d/rules: disable libmount mountfs support", " Disable brand new feature with --disable-libmount-mountfd-support that", " causes inability to deploy MAAS LP #2037417.", " * Dropped changes applied upstream:", " - SECURITY UPDATE: heap overread with 256-byte usernames", " + debian/patches/CVE-2025-14104-1.patch: add length check in", " login-utils/setpwnam.c.", " + debian/patches/CVE-2025-14104-2.patch: update buflen in", " login-utils/setpwnam.c.", " + CVE-2025-14104", " * Dropped changes as they were no longer necessary:", " - d/p/ubuntu/lp-2030793-make-check-pidfd.patch", " This patch only effected kernel versions below 5.15 which are not", " available on resolute.", " - d/p/u/lp-2112552-tests-mark-mkfds-multiplexing-as-known-fail.patch", " The underlying bug was addressed in rust-coreutils.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142050 ], "author": "Ural Tunaboyu ", "date": "Sun, 15 Feb 2026 17:43:12 -0800" }, { "cves": [], "log": [ "", " * d/libsmartcols1.symbols: drop terminal crap", " * d/rules: make dpkg-gensymbols more strict", " * lintian: ignore groff-message tags", " * lintian: ignore groff-message tags in remaining packages", " * Add upstream patches", " * unshare: fix user namespace bind mounts", " * unshare: remove get_mnt_ino() check in bind_ns_files_from_child()", " * unshare: add --owner to set user namespace owner uid and gid", " * libfdisk: modernize ZFS GPT type description", "" ], "package": "util-linux", "version": "2.41.3-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 31 Dec 2025 13:06:28 +0100" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * util-linux: do not fail postinst/prerm if update-alternatives is missing", "" ], "package": "util-linux", "version": "2.41.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 17 Dec 2025 10:42:28 +0100" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Stop installing lastlog2-import.service", " * New upstream release, fixing CVE-2025-14104. (Closes: #1122058)", "" ], "package": "util-linux", "version": "2.41.3-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Tue, 16 Dec 2025 20:37:41 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libfreetype6:riscv64", "from_version": { "source_package_name": "freetype", "source_package_version": "2.14.1+dfsg-2", "version": "2.14.1+dfsg-2" }, "to_version": { "source_package_name": "freetype", "source_package_version": "2.14.2+dfsg-1", "version": "2.14.2+dfsg-1" }, "cves": [ { "cve": "CVE-2026-23865", "url": "https://ubuntu.com/security/CVE-2026-23865", "cve_description": "An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.", "cve_priority": "medium", "cve_public_date": "2026-03-02 17:16:00 UTC" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-23865", "url": "https://ubuntu.com/security/CVE-2026-23865", "cve_description": "An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.13.3 may allow for an out of bounds read operation when parsing HVAR/VVAR/MVAR tables in OpenType variable fonts. This issue is fixed in version 2.14.2.", "cve_priority": "medium", "cve_public_date": "2026-03-02 17:16:00 UTC" } ], "log": [ "", " * New upstream version 2.14.2:", " - Setting filter weights with FT_Face_Properties is no longer supported.", " - The legacy libXft LCD filter algorithm is no longer provided.", " - Various bug fixes, including for CVE-2026-23865 (integer overflow", " in the tt_var_load_item_variation_store function) (Closes: #1129606).", " * debian/control: Use ${source:*} replacement where possible.", " * debian/copyright: Update Debian copyright for 2026.", " * debian/patches: Refresh ftoption.patch.", "" ], "package": "freetype", "version": "2.14.2+dfsg-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Hugh McMaster ", "date": "Sat, 07 Mar 2026 21:55:55 +1100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libfwupd3:riscv64", "from_version": { "source_package_name": "fwupd", "source_package_version": "2.0.19-1ubuntu1", "version": "2.0.19-1ubuntu1" }, "to_version": { "source_package_name": "fwupd", "source_package_version": "2.1.1-1ubuntu1", "version": "2.1.1-1ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2146332, 2143688, 2142298, 2139611 ], "changes": [ { "cves": [], "log": [ "", " * New upstream version (LP: #2146332)", " * Drop patches merged upstream.", " * Merge with Debian unstable. Remaining changes:", " - d/p/fwupdmgr-fde-verify-snapd-recovery-key.patch: Make fwupdmgr", " verify snapd recovery key through prompt on updates affecting FDE.", "" ], "package": "fwupd", "version": "2.1.1-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2146332 ], "author": "Mario Limonciello ", "date": "Thu, 26 Mar 2026 12:46:28 -0500" }, { "cves": [], "log": [ "", " * New upstream version (2.1.1)", "" ], "package": "fwupd", "version": "2.1.1-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Mario Limonciello ", "date": "Wed, 25 Mar 2026 13:18:21 -0500" }, { "cves": [], "log": [ "", " * d/patches/dell-uod-behavior.patch: Backport from 2_0_X branch to fix", " UOD behavior for some Dell docks. (LP: #2143688)", "" ], "package": "fwupd", "version": "2.0.20-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143688 ], "author": "Mario Limonciello ", "date": "Mon, 09 Mar 2026 11:48:10 -0500" }, { "cves": [], "log": [ "", " * Enable UMA carveout feature (LP: #2142298)", " * Merge from Debian unstable. Remaining changes:", " - d/p/db-update-snapd-bad-request.patch: On TPM/FDE systems, db updates", " require notifying snapd for preparation. However, the payload uses an", " incorrect format for composite updates. Change the format to align", " with snapd.", " - d/p/fwupdmgr-fde-verify-snapd-recovery-key.patch: Make fwupdmgr", " verify snapd recovery key through prompt on updates affecting FDE.", "" ], "package": "fwupd", "version": "2.0.20-1ubuntu1", "urgency": "low", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142298 ], "author": "Mario Limonciello ", "date": "Fri, 27 Feb 2026 20:24:47 -0600" }, { "cves": [], "log": [ "", " * New upstream version (2.0.20)", "" ], "package": "fwupd", "version": "2.0.20-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Mario Limonciello ", "date": "Thu, 26 Feb 2026 06:49:36 -0600" }, { "cves": [], "log": [ "", " * Fix snapd bad request on db updates (LP: #2139611):", " - d/p/db-update-snapd-bad-request.patch: On TPM/FDE systems, db updates", " require notifying snapd for preparation. However, the payload uses an", " incorrect format for composite updates. Change the format to align", " with snapd.", "" ], "package": "fwupd", "version": "2.0.19-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2139611 ], "author": "Simon Johnsson ", "date": "Mon, 23 Feb 2026 12:12:45 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libgcc-s1:riscv64", "from_version": { "source_package_name": "gcc-15", "source_package_version": "15.2.0-12ubuntu1", "version": "15.2.0-12ubuntu1" }, "to_version": { "source_package_name": "gcc-16", "source_package_version": "16-20260315-1ubuntu1", "version": "16-20260315-1ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", " - Work-around the 80GB chroot size on the Ubuntu buildds.", "" ], "package": "gcc-16", "version": "16-20260315-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 15 Mar 2026 13:22:54 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260315).", " * Pass configure flags for libgcobol cross builds.", " * For backports, require binutils (>= 2.40) on riscv64.", " * libga68-dev: Depend on libgc-dev. Closes: #1130580.", " * Fix PR ada/107475 also for armhf and s390x.", " * Disable dwz on alpha, see PR dwz/33990.", " * Refresh patches.", " * Update libgcc-s, libcc1, lib*asan, liblsan, libtsan and libgcobol", " symbol files.", "" ], "package": "gcc-16", "version": "16-20260315-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 15 Mar 2026 13:17:23 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260308).", " * On riscv64, default again to RVA23.", " * Disable bootstrap build on riscv64 entirely for a quick build.", "" ], "package": "gcc-16", "version": "16-20260308-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 08 Mar 2026 09:49:05 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260308).", " * Refresh cross-installation-location patch.", "" ], "package": "gcc-16", "version": "16-20260308-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 08 Mar 2026 09:34:40 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260307).", " * libsanitizer/TSan: Fix determining static TLS blocks. Addresses: #1126312.", " * Refresh patches.", "" ], "package": "gcc-16", "version": "16-20260307-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sat, 07 Mar 2026 09:07:18 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260226).", " * On riscv64, default again to RVA23.", "" ], "package": "gcc-16", "version": "16-20260226-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 26 Feb 2026 06:09:01 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260226). Also closes: #1128648.", " * Disable again profiled+lto build on armhf.", " * Fix s390x backport builds.", " * Disable dwz on riscv64, see https://sourceware.org/bugzilla/show_bug.cgi?id=33929.", " * Disable profiled+lto build. See https://gcc.gnu.org/PR124238.", "" ], "package": "gcc-16", "version": "16-20260226-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 26 Feb 2026 06:00:27 +0100" }, { "cves": [], "log": [ "", " * Disable again profiled+lto build on armhf.", "" ], "package": "gcc-16", "version": "16-20260217-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Wed, 18 Feb 2026 08:29:24 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", " - Work-around the 80GB chroot size on the Ubuntu buildds.", " * On riscv64, default to rv64gc, RVA23 is currently broken.", " See PR target/124048.", "" ], "package": "gcc-16", "version": "16-20260217-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 17 Feb 2026 09:09:19 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260217).", " * Fix build when building without common libraries.", " * Re-enable profiled+lto build on armhf to check for PR target/119937.", " * Update GFDL+ doc file removal.", "" ], "package": "gcc-16", "version": "16-20260217-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 17 Feb 2026 08:25:09 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260210).", " * Fix build when building without common libraries.", "" ], "package": "gcc-16", "version": "16-20260210-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 10 Feb 2026 01:42:25 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", " - Work-around the 80GB chroot size on the Ubuntu buildds.", "" ], "package": "gcc-16", "version": "16-20260208-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 08 Feb 2026 13:09:34 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260208).", "" ], "package": "gcc-16", "version": "16-20260208-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 08 Feb 2026 11:23:36 +0100" }, { "cves": [], "log": [ "", " * Ignore dh_shlibdeps failure for libcc1 for now.", "" ], "package": "gcc-16", "version": "16-20260207-2", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sat, 07 Feb 2026 17:11:49 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260207).", " * Update sh4 LRA patches (Adrian Glaubitz). Closes: #1126958.", " * Build again gnat cross compiler for sh4.", " * Update libcc1 and libgphobos symbols files.", "" ], "package": "gcc-16", "version": "16-20260207-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sat, 07 Feb 2026 11:25:14 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", " - Work-around the 80GB chroot size on the Ubuntu buildds.", "" ], "package": "gcc-16", "version": "16-20260203-2ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 03 Feb 2026 17:10:34 +0100" }, { "cves": [], "log": [ "", " * Apply proposed patch for PR d/123953, fixing ftbfs on ppc64le.", "" ], "package": "gcc-16", "version": "16-20260203-2", "urgency": "medium", "distributions": "expperimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 03 Feb 2026 16:45:07 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260203).", " * Update newlib to 4.6.0.20260123.", " * Allow configuring libxml2 include and lib directories.", " * Build-depend on libxml2-source for the cross builds, and generate", " Built-Using for libgcobol built using libxml2-source.", " * Update libga68 and libgcobol symbols files.", " * d/tests/control: Update dependencies for 16 (Michael R. Crusoe).", " Closes: #1126131.", " * Add again build dependency on python3-check-jsonschema, needed for tests.", " * Fix D #22463: SOURCE_DATE_EPOCH parsing incorrectly affected by system", " timezone. Addresses: #1126512.", " * Add the results of the usage-wrapper into the binary packages.", " * Require 6GB memory/CPU for Ubuntu/riscv64 builds. Failing builds without", " build logs.", " * Refresh patches.", " * Update libgphobos7 symbols file for amd64.", "" ], "package": "gcc-16", "version": "16-20260203-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 03 Feb 2026 12:04:58 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", " - Work-around the 80GB chroot size on the Ubuntu buildds.", "" ], "package": "gcc-16", "version": "16-20260119-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Mon, 19 Jan 2026 10:32:42 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260119).", " * lib*gcc-N-dev: Install lib{atomic,gcc_s}_asneeded linker scripts.", " * Import updated sanitizer symbols files from GCC 15.", " * Enable PAC/BTI/GCS on arm64 for libgfortran (Emanuele Rocca).", " Closes: #1123084.", " * Don't complain about missing gccrs and gcobc man pages.", "" ], "package": "gcc-16", "version": "16-20260119-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Mon, 19 Jan 2026 10:29:59 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251214).", " * Log the available disk space for the build.", " * Disable cobol for cross builds for now. Requires a libxml2 build", " for the target.", " * Build liblsan and libtsan on s390x.", " * Work-around the 80GB chroot size on the Ubuntu buildds.", "" ], "package": "gcc-16", "version": "16-20251214-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 14 Dec 2025 09:21:28 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251210).", "" ], "package": "gcc-16", "version": "16-20251210-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Wed, 10 Dec 2025 12:17:05 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251210).", " * Don't rely on python3-check-jsonschema for testing, still having", " unpackaged dependencies.", " * Disable profiled build on powerpc for now.", "" ], "package": "gcc-16", "version": "16-20251210-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Wed, 10 Dec 2025 12:13:23 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251202).", "" ], "package": "gcc-16", "version": "16-20251202-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 02 Dec 2025 16:55:42 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251202).", " * Install Algol-68 upstream changelogs.", " * d/NEWS.html: Update for 16, the test file NEWS.gcc is still for 15.", " * d/p/ada-tv_nsec-size.diff: Update for 16. Upstream status?", " * d/copyright*: Update download locations.", " * Override so wrong lintian error about size of Binary field length.", " * Disabled profiled build on i386, see PR ada/122934.", " * Update libhwasan, liblsan, libtsan and libubsan symbols files.", "" ], "package": "gcc-16", "version": "16-20251202-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 02 Dec 2025 16:51:01 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251130).", "" ], "package": "gcc-16", "version": "16-20251130-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 30 Nov 2025 22:33:13 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251130).", " * Build using amdgcn-tools-21 instead of -19.", " * Update build dependencies for gcobol.", " * Disable profiled build on armhf. See PR target/121821, PR target/122815.", " * Update libga68, libgfortran, libgomp and libstdc++ symbols files.", " * Explicitly bump the libgphobos soname.", " * Refresh patches.", " * Fix some lintian warnings, override some more.", "" ], "package": "gcc-16", "version": "16-20251130-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 30 Nov 2025 15:14:37 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251123).", "" ], "package": "gcc-16", "version": "16-20251123-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 23 Nov 2025 12:49:38 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251123).", " * Build using amdgcn-tools-21 instead of -19.", "" ], "package": "gcc-16", "version": "16-20251123-1", "urgency": "medium", "distributions": "UNRELEASED", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 23 Nov 2025 08:54:26 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libgirepository-2.0-0:riscv64", "from_version": { "source_package_name": "glib2.0", "source_package_version": "2.87.2-3", "version": "2.87.2-3" }, "to_version": { "source_package_name": "glib2.0", "source_package_version": "2.88.0-1", "version": "2.88.0-1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * New upstream release", " - Work around a build regression in NetworkManager with 2.87.x", " * Release to unstable", "" ], "package": "glib2.0", "version": "2.88.0-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Simon McVittie ", "date": "Mon, 16 Mar 2026 21:37:12 +0000" }, { "cves": [], "log": [ "", " * New upstream release", " * d/control: Bump gi-docgen to 2026.1, matching upstream CI", " * d/copyright: Remove comment line.", " The machine-readable syntax doesn't actually allow these. Use", " a double blank line as the divider between Files and standalone", " License paragraphs instead.", "" ], "package": "glib2.0", "version": "2.87.5-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Simon McVittie ", "date": "Fri, 13 Mar 2026 16:54:09 +0000" }, { "cves": [], "log": [ "", " * Update the source using the upstream-generated-tarball", " * debian/control: Update breaks on old gjs and pygobject.", " Versions prior to these have not the fallback code to support the", " GLib/GLibUnix split", "" ], "package": "glib2.0", "version": "2.87.3-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Marco Trevisan (Treviño) ", "date": "Fri, 27 Feb 2026 00:24:46 +0100" }, { "cves": [], "log": [ "", " * New upstream release:", " Upstream has tagged a new release but not produced tarballs yet, due to CI", " problems. Let's get this (the tagged contents) early in experimental", " though, so we can start testing it, but using a pre-version so that we can", " later import the actual 2.87.3. tarball.", " * d/p: Refresh and drop applied patches", " * debian/libglib2.0-0t64.symbols: Update symbols", "" ], "package": "glib2.0", "version": "2.87.3~gitlab0-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Marco Trevisan (Treviño) ", "date": "Thu, 26 Feb 2026 00:48:14 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libglib2.0-0t64:riscv64", "from_version": { "source_package_name": "glib2.0", "source_package_version": "2.87.2-3", "version": "2.87.2-3" }, "to_version": { "source_package_name": "glib2.0", "source_package_version": "2.88.0-1", "version": "2.88.0-1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * New upstream release", " - Work around a build regression in NetworkManager with 2.87.x", " * Release to unstable", "" ], "package": "glib2.0", "version": "2.88.0-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Simon McVittie ", "date": "Mon, 16 Mar 2026 21:37:12 +0000" }, { "cves": [], "log": [ "", " * New upstream release", " * d/control: Bump gi-docgen to 2026.1, matching upstream CI", " * d/copyright: Remove comment line.", " The machine-readable syntax doesn't actually allow these. Use", " a double blank line as the divider between Files and standalone", " License paragraphs instead.", "" ], "package": "glib2.0", "version": "2.87.5-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Simon McVittie ", "date": "Fri, 13 Mar 2026 16:54:09 +0000" }, { "cves": [], "log": [ "", " * Update the source using the upstream-generated-tarball", " * debian/control: Update breaks on old gjs and pygobject.", " Versions prior to these have not the fallback code to support the", " GLib/GLibUnix split", "" ], "package": "glib2.0", "version": "2.87.3-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Marco Trevisan (Treviño) ", "date": "Fri, 27 Feb 2026 00:24:46 +0100" }, { "cves": [], "log": [ "", " * New upstream release:", " Upstream has tagged a new release but not produced tarballs yet, due to CI", " problems. Let's get this (the tagged contents) early in experimental", " though, so we can start testing it, but using a pre-version so that we can", " later import the actual 2.87.3. tarball.", " * d/p: Refresh and drop applied patches", " * debian/libglib2.0-0t64.symbols: Update symbols", "" ], "package": "glib2.0", "version": "2.87.3~gitlab0-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Marco Trevisan (Treviño) ", "date": "Thu, 26 Feb 2026 00:48:14 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libglib2.0-bin", "from_version": { "source_package_name": "glib2.0", "source_package_version": "2.87.2-3", "version": "2.87.2-3" }, "to_version": { "source_package_name": "glib2.0", "source_package_version": "2.88.0-1", "version": "2.88.0-1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * New upstream release", " - Work around a build regression in NetworkManager with 2.87.x", " * Release to unstable", "" ], "package": "glib2.0", "version": "2.88.0-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Simon McVittie ", "date": "Mon, 16 Mar 2026 21:37:12 +0000" }, { "cves": [], "log": [ "", " * New upstream release", " * d/control: Bump gi-docgen to 2026.1, matching upstream CI", " * d/copyright: Remove comment line.", " The machine-readable syntax doesn't actually allow these. Use", " a double blank line as the divider between Files and standalone", " License paragraphs instead.", "" ], "package": "glib2.0", "version": "2.87.5-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Simon McVittie ", "date": "Fri, 13 Mar 2026 16:54:09 +0000" }, { "cves": [], "log": [ "", " * Update the source using the upstream-generated-tarball", " * debian/control: Update breaks on old gjs and pygobject.", " Versions prior to these have not the fallback code to support the", " GLib/GLibUnix split", "" ], "package": "glib2.0", "version": "2.87.3-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Marco Trevisan (Treviño) ", "date": "Fri, 27 Feb 2026 00:24:46 +0100" }, { "cves": [], "log": [ "", " * New upstream release:", " Upstream has tagged a new release but not produced tarballs yet, due to CI", " problems. Let's get this (the tagged contents) early in experimental", " though, so we can start testing it, but using a pre-version so that we can", " later import the actual 2.87.3. tarball.", " * d/p: Refresh and drop applied patches", " * debian/libglib2.0-0t64.symbols: Update symbols", "" ], "package": "glib2.0", "version": "2.87.3~gitlab0-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Marco Trevisan (Treviño) ", "date": "Thu, 26 Feb 2026 00:48:14 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libglib2.0-data", "from_version": { "source_package_name": "glib2.0", "source_package_version": "2.87.2-3", "version": "2.87.2-3" }, "to_version": { "source_package_name": "glib2.0", "source_package_version": "2.88.0-1", "version": "2.88.0-1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * New upstream release", " - Work around a build regression in NetworkManager with 2.87.x", " * Release to unstable", "" ], "package": "glib2.0", "version": "2.88.0-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Simon McVittie ", "date": "Mon, 16 Mar 2026 21:37:12 +0000" }, { "cves": [], "log": [ "", " * New upstream release", " * d/control: Bump gi-docgen to 2026.1, matching upstream CI", " * d/copyright: Remove comment line.", " The machine-readable syntax doesn't actually allow these. Use", " a double blank line as the divider between Files and standalone", " License paragraphs instead.", "" ], "package": "glib2.0", "version": "2.87.5-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Simon McVittie ", "date": "Fri, 13 Mar 2026 16:54:09 +0000" }, { "cves": [], "log": [ "", " * Update the source using the upstream-generated-tarball", " * debian/control: Update breaks on old gjs and pygobject.", " Versions prior to these have not the fallback code to support the", " GLib/GLibUnix split", "" ], "package": "glib2.0", "version": "2.87.3-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Marco Trevisan (Treviño) ", "date": "Fri, 27 Feb 2026 00:24:46 +0100" }, { "cves": [], "log": [ "", " * New upstream release:", " Upstream has tagged a new release but not produced tarballs yet, due to CI", " problems. Let's get this (the tagged contents) early in experimental", " though, so we can start testing it, but using a pre-version so that we can", " later import the actual 2.87.3. tarball.", " * d/p: Refresh and drop applied patches", " * debian/libglib2.0-0t64.symbols: Update symbols", "" ], "package": "glib2.0", "version": "2.87.3~gitlab0-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Marco Trevisan (Treviño) ", "date": "Thu, 26 Feb 2026 00:48:14 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libgnutls30t64:riscv64", "from_version": { "source_package_name": "gnutls28", "source_package_version": "3.8.10-3ubuntu1", "version": "3.8.10-3ubuntu1" }, "to_version": { "source_package_name": "gnutls28", "source_package_version": "3.8.12-2ubuntu1", "version": "3.8.12-2ubuntu1" }, "cves": [ { "cve": "CVE-2025-14831", "url": "https://ubuntu.com/security/CVE-2025-14831", "cve_description": "A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).", "cve_priority": "medium", "cve_public_date": "2026-02-09 15:16:00 UTC" }, { "cve": "CVE-2025-9820", "url": "https://ubuntu.com/security/CVE-2025-9820", "cve_description": "A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.", "cve_priority": "low", "cve_public_date": "2026-01-26 20:16:00 UTC" }, { "cve": "CVE-2026-1584", "url": "https://ubuntu.com/security/CVE-2026-1584", "cve_description": "A TLS 1.3 resumption attempt with an invalid PSK binder value in ClientHello could lead to a denial of service attack via crashing the server.", "cve_priority": "high", "cve_public_date": "2026-02-10" }, { "cve": "CVE-2025-14831", "url": "https://ubuntu.com/security/CVE-2025-14831", "cve_description": "A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).", "cve_priority": "medium", "cve_public_date": "2026-02-09 15:16:00 UTC" }, { "cve": "CVE-2025-9820", "url": "https://ubuntu.com/security/CVE-2025-9820", "cve_description": "A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.", "cve_priority": "low", "cve_public_date": "2026-01-26 20:16:00 UTC" }, { "cve": "CVE-2025-14831", "url": "https://ubuntu.com/security/CVE-2025-14831", "cve_description": "A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).", "cve_priority": "medium", "cve_public_date": "2026-02-09 15:16:00 UTC" }, { "cve": "CVE-2025-9820", "url": "https://ubuntu.com/security/CVE-2025-9820", "cve_description": "A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.", "cve_priority": "low", "cve_public_date": "2026-01-26 20:16:00 UTC" } ], "launchpad_bugs_fixed": [ 213394 ], "changes": [ { "cves": [ { "cve": "CVE-2025-14831", "url": "https://ubuntu.com/security/CVE-2025-14831", "cve_description": "A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).", "cve_priority": "medium", "cve_public_date": "2026-02-09 15:16:00 UTC" }, { "cve": "CVE-2025-9820", "url": "https://ubuntu.com/security/CVE-2025-9820", "cve_description": "A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.", "cve_priority": "low", "cve_public_date": "2026-01-26 20:16:00 UTC" } ], "log": [ "", " * Merge with Debian unstable (LP: #213394). Remaining changes:", " - Enable CET.", " - d/patches/crypto-config.patch: also read configuration from", " /var/lib/crypto-config/profiles/current/gnutls.conf", " - Forcefully disable TLS 1.0 and 1.1 through /etc/gnutls/config.", " - Forcefully disable DTLS 0.9 and 1.0 through /etc/gnutls/config.", " - Set default priority string to only allow TLS1.2, DTLS1.2, and", " TLS1.3 with medium security profile (2048 RSA keys minimum, and", " similar).", " * Drop changes:", " - present upstream: debian/patches/CVE-2025-14831-*.patch", " - present upstream: debian/patches/CVE-2025-9820.patch ", "" ], "package": "gnutls28", "version": "3.8.12-2ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 213394 ], "author": "Anshul Singh ", "date": "Wed, 18 Feb 2026 20:39:01 +0000" }, { "cves": [], "log": [ "", " * While there are no libgnutls-openssl27t64 rdeps in sid anymore there are", " a couple of package which build-depend libgnutls-openssl-dev (but either", " use regular GnuTLS interfaces or do not use GnuTLS at all.) Add back the", " OpenSSl wrapper until this version has propagated to testing.", "" ], "package": "gnutls28", "version": "3.8.12-2", "urgency": "high", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Andreas Metzler ", "date": "Wed, 11 Feb 2026 18:18:55 +0100" }, { "cves": [ { "cve": "CVE-2026-1584", "url": "https://ubuntu.com/security/CVE-2026-1584", "cve_description": "A TLS 1.3 resumption attempt with an invalid PSK binder value in ClientHello could lead to a denial of service attack via crashing the server.", "cve_priority": "high", "cve_public_date": "2026-02-10" }, { "cve": "CVE-2025-14831", "url": "https://ubuntu.com/security/CVE-2025-14831", "cve_description": "A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).", "cve_priority": "medium", "cve_public_date": "2026-02-09 15:16:00 UTC" } ], "log": [ "", " * Drop OpenSSL wrapper library.", " * New upstream bugstream release, includes fixes for (inter alia):", " + libgnutls: Fix NULL pointer dereference in PSK binder verification:", " A TLS 1.3 resumption attempt with an invalid PSK binder value in", " ClientHello could lead to a denial of service attack via crashing the", " server. The updated code guards against the problematic dereference.", " Reported by Jaehun Lee.", " [Fixes: GNUTLS-SA-2026-02-09-1, CVSS: high] [CVE-2026-1584]", " + libgnutls: Fix name constraint processing performance issue:", " Verifying certificates with pathological amounts of name constraints", " could lead to a denial of service attack via resource exhaustion.", " Reworked processing algorithms exhibit better performance", " characteristics. Reported by Tim Scheckenbach.", " [Fixes: GNUTLS-SA-2026-02-09-2, CVSS: medium] [CVE-2025-14831]", " * Drop 50_0001-mem-include-headers-for-size_t-and-uint8_t.patch.", " * Update copyright info.", "" ], "package": "gnutls28", "version": "3.8.12-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Andreas Metzler ", "date": "Mon, 09 Feb 2026 18:34:29 +0100" }, { "cves": [], "log": [ "", " * Really upload to unstable.", "" ], "package": "gnutls28", "version": "3.8.11-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Andreas Metzler ", "date": "Sun, 23 Nov 2025 14:55:24 +0100" }, { "cves": [], "log": [ "", " * Upload to unstable.", "" ], "package": "gnutls28", "version": "3.8.11-2", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Andreas Metzler ", "date": "Sun, 23 Nov 2025 14:30:24 +0100" }, { "cves": [ { "cve": "CVE-2025-9820", "url": "https://ubuntu.com/security/CVE-2025-9820", "cve_description": "A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.", "cve_priority": "low", "cve_public_date": "2026-01-26 20:16:00 UTC" } ], "log": [ "", " * New upstream version.", " + Includes patch for CVE-2025-9820 / GNUTLS-SA-2025-11-18, which is", " mitigated by Debian building with -D_FORTIFY_SOURCE=2.", " Closes: #1121146", " + Drop superfluous patch, unfuzz.", " + Update symbol file.", " + Update copyright info.", " + Bump nettle-dev dependency to 3.10.", " * Drop Rules-Requires-Root: no", " * Cherry-pick post-release fix.", "" ], "package": "gnutls28", "version": "3.8.11-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Andreas Metzler ", "date": "Sat, 22 Nov 2025 14:41:00 +0100" }, { "cves": [ { "cve": "CVE-2025-14831", "url": "https://ubuntu.com/security/CVE-2025-14831", "cve_description": "A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).", "cve_priority": "medium", "cve_public_date": "2026-02-09 15:16:00 UTC" }, { "cve": "CVE-2025-9820", "url": "https://ubuntu.com/security/CVE-2025-9820", "cve_description": "A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.", "cve_priority": "low", "cve_public_date": "2026-01-26 20:16:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: DoS via malicious certificates", " - debian/patches/CVE-2025-14831-*.patch: rework processing algorithms", " to exhibit better performance characteristics in", " lib/x509/name_constraints.c, tests/name-constraints-ip.c.", " - CVE-2025-14831", " * SECURITY UPDATE: stack overflow via long token label", " - debian/patches/CVE-2025-9820.patch: avoid stack overwrite when", " initializing a token in lib/pkcs11_write.c, tests/Makefile.am,", " tests/pkcs11/long-label.c.", " - CVE-2025-9820", "" ], "package": "gnutls28", "version": "3.8.10-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Wed, 18 Feb 2026 10:00:15 -0500" } ], "notes": null, "is_version_downgrade": false }, { "name": "libgssapi-krb5-2:riscv64", "from_version": { "source_package_name": "krb5", "source_package_version": "1.22.1-2", "version": "1.22.1-2" }, "to_version": { "source_package_name": "krb5", "source_package_version": "1.22.1-2ubuntu4", "version": "1.22.1-2ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [ 2144909, 2142893, 2142451, 2037321 ], "changes": [ { "cves": [], "log": [ "", " * d/p/default-enctype-list.patch: do not default to weak encryption", " algorithms (LP: #2144909)", " * d/NEWS: explain weak algorithms are no longer default options", "" ], "package": "krb5", "version": "1.22.1-2ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144909 ], "author": "Athos Ribeiro ", "date": "Thu, 19 Mar 2026 10:48:16 -0300" }, { "cves": [], "log": [ "", " * d/p/fix-strchr-conformance-to-c23.patch: Fix FTBFS with glibc2.43", " (LP: #2142893)", "" ], "package": "krb5", "version": "1.22.1-2ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142893 ], "author": "Guilherme Puida Moreira ", "date": "Wed, 04 Mar 2026 10:15:11 -0300" }, { "cves": [], "log": [ "", " * Fix FTBFS test t_otp.py (LP: #2142451):", " - d/p/set-fork-start-method-t-otpy.patch: Python 3.14 changes the default", " start method of multiprocessing to 'forkserver'. This introduces issues", " in the test t_otp.py that does not use a main block. Set the start", " method to force 'fork' instead.", "" ], "package": "krb5", "version": "1.22.1-2ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142451 ], "author": "Simon Johnsson ", "date": "Mon, 23 Feb 2026 11:02:32 +0100" }, { "cves": [], "log": [ "", " * Add autopkgtest for includedir-ordering (LP: #2037321):", " - d/tests/includedir-ordering: Add new test.", " - d/tests/kinit: Create /etc/krb5.conf.d/ directory if it doesn't exist.", " - d/tests/util: Prepend includedir /etc/krb5.conf.d/ for the configuration", " file created in create_realm.", "" ], "package": "krb5", "version": "1.22.1-2ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2037321 ], "author": "Simon Johnsson ", "date": "Thu, 12 Feb 2026 16:15:24 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libgstreamer1.0-0:riscv64", "from_version": { "source_package_name": "gstreamer1.0", "source_package_version": "1.28.0-2", "version": "1.28.0-2" }, "to_version": { "source_package_name": "gstreamer1.0", "source_package_version": "1.28.1-1", "version": "1.28.1-1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * d/control: update to Standards-Version 4.7.3", " * New upstream version 1.28.1", "" ], "package": "gstreamer1.0", "version": "1.28.1-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Marc Leeman ", "date": "Thu, 26 Feb 2026 09:13:18 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libibverbs1:riscv64", "from_version": { "source_package_name": "rdma-core", "source_package_version": "61.0-2ubuntu1", "version": "61.0-2ubuntu1" }, "to_version": { "source_package_name": "rdma-core", "source_package_version": "61.0-2ubuntu3", "version": "61.0-2ubuntu3" }, "cves": [], "launchpad_bugs_fixed": [ 2140324 ], "changes": [ { "cves": [], "log": [ "", " * d/p/providers-mana-no-check-cqid.patch: Patching from upstream's", " commit for providers/mana: do not check cqid on creation", " (LP: #2140324).", "" ], "package": "rdma-core", "version": "61.0-2ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2140324 ], "author": "Miriam España Acebal ", "date": "Wed, 04 Feb 2026 12:56:19 +0100" }, { "cves": [], "log": [ "", " * No-change rebuild with Python 3.14 as default", "" ], "package": "rdma-core", "version": "61.0-2ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Graham Inggs ", "date": "Thu, 22 Jan 2026 21:54:05 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "libicu78:riscv64", "from_version": { "source_package_name": "icu", "source_package_version": "78.2-1ubuntu1", "version": "78.2-1ubuntu1" }, "to_version": { "source_package_name": "icu", "source_package_version": "78.2-2ubuntu1", "version": "78.2-2ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - d/p/disable-precision-fpmath-tests-on-i386.patch: add a patch to disable", " precision checking tests on i386 where an imprecise FPU hardware is used", "" ], "package": "icu", "version": "78.2-2ubuntu1", "urgency": "low", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Gianfranco Costamagna ", "date": "Mon, 02 Mar 2026 18:55:38 +0100" }, { "cves": [], "log": [ "", " * Upload to Sid.", "" ], "package": "icu", "version": "78.2-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Laszlo Boszormenyi (GCS) ", "date": "Sun, 01 Mar 2026 07:33:36 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libjcat1:riscv64", "from_version": { "source_package_name": "libjcat", "source_package_version": "0.2.5-1", "version": "0.2.5-1" }, "to_version": { "source_package_name": "libjcat", "source_package_version": "0.2.5-1build1", "version": "0.2.5-1build1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild for gpgme1.0 2.0", "" ], "package": "libjcat", "version": "0.2.5-1build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Ural Tunaboyu ", "date": "Thu, 19 Feb 2026 18:55:42 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "libjson-c5:riscv64", "from_version": { "source_package_name": "json-c", "source_package_version": "0.18+ds-2", "version": "0.18+ds-2" }, "to_version": { "source_package_name": "json-c", "source_package_version": "0.18+ds-3", "version": "0.18+ds-3" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * d/watch: fix mangle options for V5", "" ], "package": "json-c", "version": "0.18+ds-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Nicolas Mora ", "date": "Thu, 12 Feb 2026 07:12:58 -0500" } ], "notes": null, "is_version_downgrade": false }, { "name": "libk5crypto3:riscv64", "from_version": { "source_package_name": "krb5", "source_package_version": "1.22.1-2", "version": "1.22.1-2" }, "to_version": { "source_package_name": "krb5", "source_package_version": "1.22.1-2ubuntu4", "version": "1.22.1-2ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [ 2144909, 2142893, 2142451, 2037321 ], "changes": [ { "cves": [], "log": [ "", " * d/p/default-enctype-list.patch: do not default to weak encryption", " algorithms (LP: #2144909)", " * d/NEWS: explain weak algorithms are no longer default options", "" ], "package": "krb5", "version": "1.22.1-2ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144909 ], "author": "Athos Ribeiro ", "date": "Thu, 19 Mar 2026 10:48:16 -0300" }, { "cves": [], "log": [ "", " * d/p/fix-strchr-conformance-to-c23.patch: Fix FTBFS with glibc2.43", " (LP: #2142893)", "" ], "package": "krb5", "version": "1.22.1-2ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142893 ], "author": "Guilherme Puida Moreira ", "date": "Wed, 04 Mar 2026 10:15:11 -0300" }, { "cves": [], "log": [ "", " * Fix FTBFS test t_otp.py (LP: #2142451):", " - d/p/set-fork-start-method-t-otpy.patch: Python 3.14 changes the default", " start method of multiprocessing to 'forkserver'. This introduces issues", " in the test t_otp.py that does not use a main block. Set the start", " method to force 'fork' instead.", "" ], "package": "krb5", "version": "1.22.1-2ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142451 ], "author": "Simon Johnsson ", "date": "Mon, 23 Feb 2026 11:02:32 +0100" }, { "cves": [], "log": [ "", " * Add autopkgtest for includedir-ordering (LP: #2037321):", " - d/tests/includedir-ordering: Add new test.", " - d/tests/kinit: Create /etc/krb5.conf.d/ directory if it doesn't exist.", " - d/tests/util: Prepend includedir /etc/krb5.conf.d/ for the configuration", " file created in create_realm.", "" ], "package": "krb5", "version": "1.22.1-2ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2037321 ], "author": "Simon Johnsson ", "date": "Thu, 12 Feb 2026 16:15:24 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libkrb5-3:riscv64", "from_version": { "source_package_name": "krb5", "source_package_version": "1.22.1-2", "version": "1.22.1-2" }, "to_version": { "source_package_name": "krb5", "source_package_version": "1.22.1-2ubuntu4", "version": "1.22.1-2ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [ 2144909, 2142893, 2142451, 2037321 ], "changes": [ { "cves": [], "log": [ "", " * d/p/default-enctype-list.patch: do not default to weak encryption", " algorithms (LP: #2144909)", " * d/NEWS: explain weak algorithms are no longer default options", "" ], "package": "krb5", "version": "1.22.1-2ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144909 ], "author": "Athos Ribeiro ", "date": "Thu, 19 Mar 2026 10:48:16 -0300" }, { "cves": [], "log": [ "", " * d/p/fix-strchr-conformance-to-c23.patch: Fix FTBFS with glibc2.43", " (LP: #2142893)", "" ], "package": "krb5", "version": "1.22.1-2ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142893 ], "author": "Guilherme Puida Moreira ", "date": "Wed, 04 Mar 2026 10:15:11 -0300" }, { "cves": [], "log": [ "", " * Fix FTBFS test t_otp.py (LP: #2142451):", " - d/p/set-fork-start-method-t-otpy.patch: Python 3.14 changes the default", " start method of multiprocessing to 'forkserver'. This introduces issues", " in the test t_otp.py that does not use a main block. Set the start", " method to force 'fork' instead.", "" ], "package": "krb5", "version": "1.22.1-2ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142451 ], "author": "Simon Johnsson ", "date": "Mon, 23 Feb 2026 11:02:32 +0100" }, { "cves": [], "log": [ "", " * Add autopkgtest for includedir-ordering (LP: #2037321):", " - d/tests/includedir-ordering: Add new test.", " - d/tests/kinit: Create /etc/krb5.conf.d/ directory if it doesn't exist.", " - d/tests/util: Prepend includedir /etc/krb5.conf.d/ for the configuration", " file created in create_realm.", "" ], "package": "krb5", "version": "1.22.1-2ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2037321 ], "author": "Simon Johnsson ", "date": "Thu, 12 Feb 2026 16:15:24 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libkrb5support0:riscv64", "from_version": { "source_package_name": "krb5", "source_package_version": "1.22.1-2", "version": "1.22.1-2" }, "to_version": { "source_package_name": "krb5", "source_package_version": "1.22.1-2ubuntu4", "version": "1.22.1-2ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [ 2144909, 2142893, 2142451, 2037321 ], "changes": [ { "cves": [], "log": [ "", " * d/p/default-enctype-list.patch: do not default to weak encryption", " algorithms (LP: #2144909)", " * d/NEWS: explain weak algorithms are no longer default options", "" ], "package": "krb5", "version": "1.22.1-2ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144909 ], "author": "Athos Ribeiro ", "date": "Thu, 19 Mar 2026 10:48:16 -0300" }, { "cves": [], "log": [ "", " * d/p/fix-strchr-conformance-to-c23.patch: Fix FTBFS with glibc2.43", " (LP: #2142893)", "" ], "package": "krb5", "version": "1.22.1-2ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142893 ], "author": "Guilherme Puida Moreira ", "date": "Wed, 04 Mar 2026 10:15:11 -0300" }, { "cves": [], "log": [ "", " * Fix FTBFS test t_otp.py (LP: #2142451):", " - d/p/set-fork-start-method-t-otpy.patch: Python 3.14 changes the default", " start method of multiprocessing to 'forkserver'. This introduces issues", " in the test t_otp.py that does not use a main block. Set the start", " method to force 'fork' instead.", "" ], "package": "krb5", "version": "1.22.1-2ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142451 ], "author": "Simon Johnsson ", "date": "Mon, 23 Feb 2026 11:02:32 +0100" }, { "cves": [], "log": [ "", " * Add autopkgtest for includedir-ordering (LP: #2037321):", " - d/tests/includedir-ordering: Add new test.", " - d/tests/kinit: Create /etc/krb5.conf.d/ directory if it doesn't exist.", " - d/tests/util: Prepend includedir /etc/krb5.conf.d/ for the configuration", " file created in create_realm.", "" ], "package": "krb5", "version": "1.22.1-2ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2037321 ], "author": "Simon Johnsson ", "date": "Thu, 12 Feb 2026 16:15:24 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "liblastlog2-2:riscv64", "from_version": { "source_package_name": "util-linux", "source_package_version": "2.41.2-4ubuntu3", "version": "2.41.2-4ubuntu3" }, "to_version": { "source_package_name": "util-linux", "source_package_version": "2.41.3-3ubuntu2", "version": "2.41.3-3ubuntu2" }, "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" }, { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2142050 ], "changes": [ { "cves": [], "log": [ "", " * d/p/ubuntu/su-pty-drop-caps.patch: harden 'su --pty' to temporarily lower", " capabilities while proxying between stdin/stdout and the pty master. This", " is to avoid su from being used to exploit kernel vulnerabilities.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Fri, 13 Mar 2026 07:09:23 -0400" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Merge with Debian unstable (LP: #2142050). Remaining changes:", " - Add sulogin-fallback-static-sh.patch", " Add support for /bin/static-sh as fallback if the regular shell fails to", " execute. Patch ported from sysvinit. (see LP #505887)", " - Add sulogin-lockedpwd.patch", " Make sure file systems can be fixed on machines with locked root", " accounts (as Ubuntu does by default). Don't require --force for sulogin.", " - d/rules: disable libmount mountfs support", " Disable brand new feature with --disable-libmount-mountfd-support that", " causes inability to deploy MAAS LP #2037417.", " * Dropped changes applied upstream:", " - SECURITY UPDATE: heap overread with 256-byte usernames", " + debian/patches/CVE-2025-14104-1.patch: add length check in", " login-utils/setpwnam.c.", " + debian/patches/CVE-2025-14104-2.patch: update buflen in", " login-utils/setpwnam.c.", " + CVE-2025-14104", " * Dropped changes as they were no longer necessary:", " - d/p/ubuntu/lp-2030793-make-check-pidfd.patch", " This patch only effected kernel versions below 5.15 which are not", " available on resolute.", " - d/p/u/lp-2112552-tests-mark-mkfds-multiplexing-as-known-fail.patch", " The underlying bug was addressed in rust-coreutils.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142050 ], "author": "Ural Tunaboyu ", "date": "Sun, 15 Feb 2026 17:43:12 -0800" }, { "cves": [], "log": [ "", " * d/libsmartcols1.symbols: drop terminal crap", " * d/rules: make dpkg-gensymbols more strict", " * lintian: ignore groff-message tags", " * lintian: ignore groff-message tags in remaining packages", " * Add upstream patches", " * unshare: fix user namespace bind mounts", " * unshare: remove get_mnt_ino() check in bind_ns_files_from_child()", " * unshare: add --owner to set user namespace owner uid and gid", " * libfdisk: modernize ZFS GPT type description", "" ], "package": "util-linux", "version": "2.41.3-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 31 Dec 2025 13:06:28 +0100" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * util-linux: do not fail postinst/prerm if update-alternatives is missing", "" ], "package": "util-linux", "version": "2.41.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 17 Dec 2025 10:42:28 +0100" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Stop installing lastlog2-import.service", " * New upstream release, fixing CVE-2025-14104. (Closes: #1122058)", "" ], "package": "util-linux", "version": "2.41.3-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Tue, 16 Dec 2025 20:37:41 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libllvm21:riscv64", "from_version": { "source_package_name": "llvm-toolchain-21", "source_package_version": "1:21.1.8-1ubuntu1", "version": "1:21.1.8-1ubuntu1" }, "to_version": { "source_package_name": "llvm-toolchain-21", "source_package_version": "1:21.1.8-4ubuntu2", "version": "1:21.1.8-4ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [ 2138890, 2138890, 2138890 ], "changes": [ { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - Regenerate the control file.", " - Use RVA23U64 profile in clang (LP #2116086).", " - d/rules: Remove i386 from CLANG_GRPC_ARCHS (not built on i386).", "" ], "package": "llvm-toolchain-21", "version": "1:21.1.8-4ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 27 Feb 2026 21:51:56 +0100" }, { "cves": [], "log": [ "", " [ Matthias Klose ]", " * d/rules: Fix self-referencing macro.", " * Stop building packages now built by LLVM 22.", " * d/rules: Don't use lld for backport build, when not available.", " * d/rules: Add safety check for enablement of the RVA23 baseline.", " * d/rules: Only disable Z3 support for Ubuntu when it is in main.", " * Install a lit binary. Closes: #1122910.", " * llvm-tools: Don't install the lit tests. Closes: #1122909.", "", " [ Sylvestre Ledru ]", " * Fix autopkgtest failure with CMake 4. thanks to Adrian Bunk", "" ], "package": "llvm-toolchain-21", "version": "1:21.1.8-4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 27 Feb 2026 17:29:38 +0100" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - Regenerate the control file.", " - Use RVA23U64 profile in clang (LP #2116086).", " - d/rules: Remove i386 from CLANG_GRPC_ARCHS (not built on i386).", " * Stop building packages now built from LLVM 22.", "" ], "package": "llvm-toolchain-21", "version": "1:21.1.8-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 05 Feb 2026 11:23:42 +0100" }, { "cves": [], "log": [ "", " [ Matthias Klose ]", " * d/llvm-X.Y-tools.bcep.in: Fix Python 3.14 byte compilation by adding", " an exception for shtest-encoding.py test file containing non-UTF-8", " characters (Igor Luppi). Closes: #1125352. LP: #2138890.", " * Enable libunwind on s390x (Michael R. Crusoe). Closes: #1126263.", "", " [ Fabian Grünbichler ]", " * d/rules: Work around cmake 4.x compat issue. Closes: #1125733.", "" ], "package": "llvm-toolchain-21", "version": "1:21.1.8-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2138890 ], "author": "Matthias Klose ", "date": "Tue, 03 Feb 2026 12:25:57 +0100" }, { "cves": [], "log": [ "", " * d/llvm-X.Y-tools.bcep.in: fix bcep exception pattern (LP: #2138890).", "" ], "package": "llvm-toolchain-21", "version": "1:21.1.8-2ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2138890 ], "author": "Igor Luppi ", "date": "Mon, 02 Feb 2026 11:59:53 -0300" }, { "cves": [], "log": [ "", " * Cherry-pick change from Debian git", " [ Matthias Klose ]", " * d/llvm-X.Y-tools.bcep.in: Fix Python 3.14 byte compilation by adding", " an exception for shtest-encoding.py test file containing non-UTF-8", " characters (Igor Luppi). LP: #2138890.", "" ], "package": "llvm-toolchain-21", "version": "1:21.1.8-2ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2138890 ], "author": "Gianfranco Costamagna ", "date": "Sat, 31 Jan 2026 19:43:34 +0100" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - Regenerate the control file.", " - Use RVA23U64 profile in clang (LP #2116086).", " - d/rules: Remove i386 from CLANG_GRPC_ARCHS (not built on i386).", "" ], "package": "llvm-toolchain-21", "version": "1:21.1.8-2ubuntu1", "urgency": "low", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Gianfranco Costamagna ", "date": "Mon, 26 Jan 2026 20:25:27 +0100" }, { "cves": [], "log": [ "", " * Stop building multilibs on s390x. Closes: #1125253.", "" ], "package": "llvm-toolchain-21", "version": "1:21.1.8-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 20 Jan 2026 05:14:27 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "liblz4-1:riscv64", "from_version": { "source_package_name": "lz4", "source_package_version": "1.10.0-6", "version": "1.10.0-6" }, "to_version": { "source_package_name": "lz4", "source_package_version": "1.10.0-8", "version": "1.10.0-8" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * d/tests/control: Remove architecture-dependent packages from Depends", "" ], "package": "lz4", "version": "1.10.0-8", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Nobuhiro Iwamatsu ", "date": "Tue, 24 Feb 2026 22:28:42 +0900" }, { "cves": [], "log": [ "", " * debian/tests: Enable Autopkgtest.", "" ], "package": "lz4", "version": "1.10.0-7", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Nobuhiro Iwamatsu ", "date": "Wed, 10 Dec 2025 14:02:54 +0900" } ], "notes": null, "is_version_downgrade": false }, { "name": "libmagic-mgc", "from_version": { "source_package_name": "file", "source_package_version": "1:5.46-5build1", "version": "1:5.46-5build1" }, "to_version": { "source_package_name": "file", "source_package_version": "1:5.46-5build2", "version": "1:5.46-5build2" }, "cves": [], "launchpad_bugs_fixed": [ 2132257 ], "changes": [ { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "file", "version": "1:5.46-5build2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:37:37 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libmagic1t64:riscv64", "from_version": { "source_package_name": "file", "source_package_version": "1:5.46-5build1", "version": "1:5.46-5build1" }, "to_version": { "source_package_name": "file", "source_package_version": "1:5.46-5build2", "version": "1:5.46-5build2" }, "cves": [], "launchpad_bugs_fixed": [ 2132257 ], "changes": [ { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "file", "version": "1:5.46-5build2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:37:37 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libmm-glib0:riscv64", "from_version": { "source_package_name": "modemmanager", "source_package_version": "1.24.2-2fakesync1", "version": "1.24.2-2fakesync1" }, "to_version": { "source_package_name": "modemmanager", "source_package_version": "1.25.95-1ubuntu1", "version": "1.25.95-1ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2130166 ], "changes": [ { "cves": [], "log": [ "", " * Fake sync due to mismatching orig tarball", "" ], "package": "modemmanager", "version": "1.24.2-2fakesync1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Gianfranco Costamagna ", "date": "Fri, 12 Dec 2025 10:22:09 +0100" }, { "cves": [], "log": [ "", " [ Helmut Grohne ]", " * Improve cross building: (Closes: #1087277)", " + Move documentation dependencies to B-D-I.", " + Mark python3-dbus and python3-gi with the nocheck build profile.", "", " [ Arnaud Ferraris ]", " * d/control: fix gobject-introspection dependencies", " `libgirepository1.0-dev shouldn't be used anymore as it isn't", " multiarch-friendly. Instead, use a recent `gobject-introspection` and", " explicitly (build) depend on the needed `gir1.2-*-dev` packages.", " (Closes: #1118899)", " * d/gbp.conf: add default commit messages.", " This makes it more consistent with other packages for which I'm the", " primary maintainer.", " * d/watch: convert to version 5.", " Use the new Gitlab template for easier management, but override the", " matching pattern so we only get stable (pre)releases, which have an even", " minor version number.", " * d/copyright: fix copyright notice for mmcli.", " This is actually GPL-2+, not GPL-3. (Closes: #1116309)", "" ], "package": "modemmanager", "version": "1.24.2-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Arnaud Ferraris ", "date": "Wed, 29 Oct 2025 17:27:49 +0100" }, { "cves": [], "log": [ "", " * Fake sync due to mismatching orig tarball (LP: #2130166)", "" ], "package": "modemmanager", "version": "1.24.2-1fakesync1", "urgency": "medium", "distributions": "resolute-proposed", "launchpad_bugs_fixed": [ 2130166 ], "author": "Jeremy Bícha ", "date": "Tue, 28 Oct 2025 16:54:41 -0400" }, { "cves": [], "log": [ "", " * New upstream release (Closes: #1110197)", " * d/control: drop Rules-Requires-Root.", " This is no longer needed.", "" ], "package": "modemmanager", "version": "1.24.2-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Arnaud Ferraris ", "date": "Mon, 11 Aug 2025 12:00:42 +0200" } ], "notes": null, "is_version_downgrade": true }, { "name": "libmount1:riscv64", "from_version": { "source_package_name": "util-linux", "source_package_version": "2.41.2-4ubuntu3", "version": "2.41.2-4ubuntu3" }, "to_version": { "source_package_name": "util-linux", "source_package_version": "2.41.3-3ubuntu2", "version": "2.41.3-3ubuntu2" }, "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" }, { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2142050 ], "changes": [ { "cves": [], "log": [ "", " * d/p/ubuntu/su-pty-drop-caps.patch: harden 'su --pty' to temporarily lower", " capabilities while proxying between stdin/stdout and the pty master. This", " is to avoid su from being used to exploit kernel vulnerabilities.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Fri, 13 Mar 2026 07:09:23 -0400" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Merge with Debian unstable (LP: #2142050). Remaining changes:", " - Add sulogin-fallback-static-sh.patch", " Add support for /bin/static-sh as fallback if the regular shell fails to", " execute. Patch ported from sysvinit. (see LP #505887)", " - Add sulogin-lockedpwd.patch", " Make sure file systems can be fixed on machines with locked root", " accounts (as Ubuntu does by default). Don't require --force for sulogin.", " - d/rules: disable libmount mountfs support", " Disable brand new feature with --disable-libmount-mountfd-support that", " causes inability to deploy MAAS LP #2037417.", " * Dropped changes applied upstream:", " - SECURITY UPDATE: heap overread with 256-byte usernames", " + debian/patches/CVE-2025-14104-1.patch: add length check in", " login-utils/setpwnam.c.", " + debian/patches/CVE-2025-14104-2.patch: update buflen in", " login-utils/setpwnam.c.", " + CVE-2025-14104", " * Dropped changes as they were no longer necessary:", " - d/p/ubuntu/lp-2030793-make-check-pidfd.patch", " This patch only effected kernel versions below 5.15 which are not", " available on resolute.", " - d/p/u/lp-2112552-tests-mark-mkfds-multiplexing-as-known-fail.patch", " The underlying bug was addressed in rust-coreutils.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142050 ], "author": "Ural Tunaboyu ", "date": "Sun, 15 Feb 2026 17:43:12 -0800" }, { "cves": [], "log": [ "", " * d/libsmartcols1.symbols: drop terminal crap", " * d/rules: make dpkg-gensymbols more strict", " * lintian: ignore groff-message tags", " * lintian: ignore groff-message tags in remaining packages", " * Add upstream patches", " * unshare: fix user namespace bind mounts", " * unshare: remove get_mnt_ino() check in bind_ns_files_from_child()", " * unshare: add --owner to set user namespace owner uid and gid", " * libfdisk: modernize ZFS GPT type description", "" ], "package": "util-linux", "version": "2.41.3-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 31 Dec 2025 13:06:28 +0100" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * util-linux: do not fail postinst/prerm if update-alternatives is missing", "" ], "package": "util-linux", "version": "2.41.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 17 Dec 2025 10:42:28 +0100" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Stop installing lastlog2-import.service", " * New upstream release, fixing CVE-2025-14104. (Closes: #1122058)", "" ], "package": "util-linux", "version": "2.41.3-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Tue, 16 Dec 2025 20:37:41 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libmpathcmd0", "from_version": { "source_package_name": "multipath-tools", "source_package_version": "0.12.0-1ubuntu2", "version": "0.12.0-1ubuntu2" }, "to_version": { "source_package_name": "multipath-tools", "source_package_version": "0.14.3-2ubuntu1", "version": "0.14.3-2ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2144005, 2135118, 2080474, 2142903 ], "changes": [ { "cves": [], "log": [ "", " * Merge with Debian unstable (LP: #2144005). Remaining changes:", " - d/rules: don't build the multipath-tools binary package on i386; only kpartx.", " - d/p/enable-find-multipaths.patch: re-enable find_multipaths by", " default -- see the removed 'add_find-multipaths.patch' (LP 1463046)", " - d/NEWS: add removal of kpartx-boot package", " - d/rules: remove -Bsymbolic-functions from LDFLAGS", " - d/rules: install friendly names multipath.conf by default", " - d/initramfs/scripts/init-top: ensure the bindings file exists before", " calling multipathd -B in the initramfs. This prevents multipathd -B from", " failing and exiting immediately (LP #2120444).", " - d/p/testsuite-no-lto: disable lto to workaround testsuite symbol wrapping", " (LP #2135118)", " * Dropped changes:", " - d/p/multipath-tools-Fix-ISO-C23-errors-with-strchr:", " Fix ISO C23 errors with strchr()", " [upstream in 0.14.0]", " - d/{rules,control}: enable testsuite (LP #2135118)", " [in 0.14.3-1]", " - d/initramfs: move the script stopping multipathd to init-bottom", " [in 0.13.0-1]", " - d/t/initramfs", " + determine extracted main cpio path dynamically", " + drop determine extracted main cpio path dynamically", " [cancel each other out]", "" ], "package": "multipath-tools", "version": "0.14.3-2ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144005 ], "author": "Jonas Jelten ", "date": "Mon, 16 Mar 2026 18:17:43 +0100" }, { "cves": [], "log": [ "", " * [9ef22a2] Run testsuite only during Arch-builds", " * [2a6ef4b] Disable testsuite on loong64", "" ], "package": "multipath-tools", "version": "0.14.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Mon, 02 Mar 2026 11:49:26 +0100" }, { "cves": [], "log": [ "", " [ Jonas Jelten ]", " * [d6c9eba] Enable testsuite (LP: #2135118)", "", " [ Chris Hofstaedtler ]", " * [5c1230c] New upstream version 0.14.3 (Closes: #1128696)", " * [6e2361a] Rebase patches, use WARN_ONLY=1 in make invocation", "" ], "package": "multipath-tools", "version": "0.14.3-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2135118 ], "author": "Chris Hofstaedtler ", "date": "Mon, 02 Mar 2026 10:37:01 +0100" }, { "cves": [], "log": [ "", " * [c8842fd] New upstream version 0.13.0", " * [6951eae] d/rules: enable verbose upstream build", " * [3d82dad] initramfs: stop multipathd in init-bottom, not local-bottom.", " Ubuntu noticed that local-* scripts are not executed on systems with", " disks on network. (LP: #2080474)", " * [fc4b508] d/t/control: add linux-image-generic for Ubuntu", " * [1df3a76] d/libmpathpersist0.symbols: tighten internal symbols", " * [6aff684] initramfs: stop requesting old dmsetup_env hack", "" ], "package": "multipath-tools", "version": "0.13.0-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2080474 ], "author": "Chris Hofstaedtler ", "date": "Sat, 20 Dec 2025 14:16:27 +0100" }, { "cves": [], "log": [ "", " * d/t/initramfs: drop determine extracted main cpio path dynamically", " * multipath-tools: Fix ISO C23 errors with strchr() (LP: #2142903)", "" ], "package": "multipath-tools", "version": "0.12.0-1ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142903 ], "author": "Benjamin Drung ", "date": "Mon, 02 Mar 2026 16:48:20 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libmpathpersist0", "from_version": { "source_package_name": "multipath-tools", "source_package_version": "0.12.0-1ubuntu2", "version": "0.12.0-1ubuntu2" }, "to_version": { "source_package_name": "multipath-tools", "source_package_version": "0.14.3-2ubuntu1", "version": "0.14.3-2ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2144005, 2135118, 2080474, 2142903 ], "changes": [ { "cves": [], "log": [ "", " * Merge with Debian unstable (LP: #2144005). Remaining changes:", " - d/rules: don't build the multipath-tools binary package on i386; only kpartx.", " - d/p/enable-find-multipaths.patch: re-enable find_multipaths by", " default -- see the removed 'add_find-multipaths.patch' (LP 1463046)", " - d/NEWS: add removal of kpartx-boot package", " - d/rules: remove -Bsymbolic-functions from LDFLAGS", " - d/rules: install friendly names multipath.conf by default", " - d/initramfs/scripts/init-top: ensure the bindings file exists before", " calling multipathd -B in the initramfs. This prevents multipathd -B from", " failing and exiting immediately (LP #2120444).", " - d/p/testsuite-no-lto: disable lto to workaround testsuite symbol wrapping", " (LP #2135118)", " * Dropped changes:", " - d/p/multipath-tools-Fix-ISO-C23-errors-with-strchr:", " Fix ISO C23 errors with strchr()", " [upstream in 0.14.0]", " - d/{rules,control}: enable testsuite (LP #2135118)", " [in 0.14.3-1]", " - d/initramfs: move the script stopping multipathd to init-bottom", " [in 0.13.0-1]", " - d/t/initramfs", " + determine extracted main cpio path dynamically", " + drop determine extracted main cpio path dynamically", " [cancel each other out]", "" ], "package": "multipath-tools", "version": "0.14.3-2ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144005 ], "author": "Jonas Jelten ", "date": "Mon, 16 Mar 2026 18:17:43 +0100" }, { "cves": [], "log": [ "", " * [9ef22a2] Run testsuite only during Arch-builds", " * [2a6ef4b] Disable testsuite on loong64", "" ], "package": "multipath-tools", "version": "0.14.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Mon, 02 Mar 2026 11:49:26 +0100" }, { "cves": [], "log": [ "", " [ Jonas Jelten ]", " * [d6c9eba] Enable testsuite (LP: #2135118)", "", " [ Chris Hofstaedtler ]", " * [5c1230c] New upstream version 0.14.3 (Closes: #1128696)", " * [6e2361a] Rebase patches, use WARN_ONLY=1 in make invocation", "" ], "package": "multipath-tools", "version": "0.14.3-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2135118 ], "author": "Chris Hofstaedtler ", "date": "Mon, 02 Mar 2026 10:37:01 +0100" }, { "cves": [], "log": [ "", " * [c8842fd] New upstream version 0.13.0", " * [6951eae] d/rules: enable verbose upstream build", " * [3d82dad] initramfs: stop multipathd in init-bottom, not local-bottom.", " Ubuntu noticed that local-* scripts are not executed on systems with", " disks on network. (LP: #2080474)", " * [fc4b508] d/t/control: add linux-image-generic for Ubuntu", " * [1df3a76] d/libmpathpersist0.symbols: tighten internal symbols", " * [6aff684] initramfs: stop requesting old dmsetup_env hack", "" ], "package": "multipath-tools", "version": "0.13.0-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2080474 ], "author": "Chris Hofstaedtler ", "date": "Sat, 20 Dec 2025 14:16:27 +0100" }, { "cves": [], "log": [ "", " * d/t/initramfs: drop determine extracted main cpio path dynamically", " * multipath-tools: Fix ISO C23 errors with strchr() (LP: #2142903)", "" ], "package": "multipath-tools", "version": "0.12.0-1ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142903 ], "author": "Benjamin Drung ", "date": "Mon, 02 Mar 2026 16:48:20 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libmultipath0", "from_version": { "source_package_name": "multipath-tools", "source_package_version": "0.12.0-1ubuntu2", "version": "0.12.0-1ubuntu2" }, "to_version": { "source_package_name": "multipath-tools", "source_package_version": "0.14.3-2ubuntu1", "version": "0.14.3-2ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2144005, 2135118, 2080474, 2142903 ], "changes": [ { "cves": [], "log": [ "", " * Merge with Debian unstable (LP: #2144005). Remaining changes:", " - d/rules: don't build the multipath-tools binary package on i386; only kpartx.", " - d/p/enable-find-multipaths.patch: re-enable find_multipaths by", " default -- see the removed 'add_find-multipaths.patch' (LP 1463046)", " - d/NEWS: add removal of kpartx-boot package", " - d/rules: remove -Bsymbolic-functions from LDFLAGS", " - d/rules: install friendly names multipath.conf by default", " - d/initramfs/scripts/init-top: ensure the bindings file exists before", " calling multipathd -B in the initramfs. This prevents multipathd -B from", " failing and exiting immediately (LP #2120444).", " - d/p/testsuite-no-lto: disable lto to workaround testsuite symbol wrapping", " (LP #2135118)", " * Dropped changes:", " - d/p/multipath-tools-Fix-ISO-C23-errors-with-strchr:", " Fix ISO C23 errors with strchr()", " [upstream in 0.14.0]", " - d/{rules,control}: enable testsuite (LP #2135118)", " [in 0.14.3-1]", " - d/initramfs: move the script stopping multipathd to init-bottom", " [in 0.13.0-1]", " - d/t/initramfs", " + determine extracted main cpio path dynamically", " + drop determine extracted main cpio path dynamically", " [cancel each other out]", "" ], "package": "multipath-tools", "version": "0.14.3-2ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144005 ], "author": "Jonas Jelten ", "date": "Mon, 16 Mar 2026 18:17:43 +0100" }, { "cves": [], "log": [ "", " * [9ef22a2] Run testsuite only during Arch-builds", " * [2a6ef4b] Disable testsuite on loong64", "" ], "package": "multipath-tools", "version": "0.14.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Mon, 02 Mar 2026 11:49:26 +0100" }, { "cves": [], "log": [ "", " [ Jonas Jelten ]", " * [d6c9eba] Enable testsuite (LP: #2135118)", "", " [ Chris Hofstaedtler ]", " * [5c1230c] New upstream version 0.14.3 (Closes: #1128696)", " * [6e2361a] Rebase patches, use WARN_ONLY=1 in make invocation", "" ], "package": "multipath-tools", "version": "0.14.3-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2135118 ], "author": "Chris Hofstaedtler ", "date": "Mon, 02 Mar 2026 10:37:01 +0100" }, { "cves": [], "log": [ "", " * [c8842fd] New upstream version 0.13.0", " * [6951eae] d/rules: enable verbose upstream build", " * [3d82dad] initramfs: stop multipathd in init-bottom, not local-bottom.", " Ubuntu noticed that local-* scripts are not executed on systems with", " disks on network. (LP: #2080474)", " * [fc4b508] d/t/control: add linux-image-generic for Ubuntu", " * [1df3a76] d/libmpathpersist0.symbols: tighten internal symbols", " * [6aff684] initramfs: stop requesting old dmsetup_env hack", "" ], "package": "multipath-tools", "version": "0.13.0-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2080474 ], "author": "Chris Hofstaedtler ", "date": "Sat, 20 Dec 2025 14:16:27 +0100" }, { "cves": [], "log": [ "", " * d/t/initramfs: drop determine extracted main cpio path dynamically", " * multipath-tools: Fix ISO C23 errors with strchr() (LP: #2142903)", "" ], "package": "multipath-tools", "version": "0.12.0-1ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142903 ], "author": "Benjamin Drung ", "date": "Mon, 02 Mar 2026 16:48:20 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libnetplan1:riscv64", "from_version": { "source_package_name": "netplan.io", "source_package_version": "1.2-1ubuntu1", "version": "1.2-1ubuntu1" }, "to_version": { "source_package_name": "netplan.io", "source_package_version": "1.2-1ubuntu3", "version": "1.2-1ubuntu3" }, "cves": [], "launchpad_bugs_fixed": [ 2139598, 2138802 ], "changes": [ { "cves": [], "log": [ "", " * debian/patches/lp2139598-execute-udev-rules-before-sriov-apply-service.patch:", " execute udev rules before starting sriov apply service (LP: #2139598)", "" ], "package": "netplan.io", "version": "1.2-1ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2139598 ], "author": "Robert Malz ", "date": "Tue, 03 Mar 2026 12:44:43 +0100" }, { "cves": [], "log": [ "", " * d/p/lp-2138802-BlockingIOError-py314.patch: fix \"netplan try\" with python", " 3.14 by handling BlockingIOError in addition to TypeError (LP: #2138802)", "" ], "package": "netplan.io", "version": "1.2-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2138802 ], "author": "Andreas Hasenack ", "date": "Fri, 20 Feb 2026 11:25:14 -0300" } ], "notes": null, "is_version_downgrade": false }, { "name": "libnewt0.52:riscv64", "from_version": { "source_package_name": "newt", "source_package_version": "0.52.25-1ubuntu2", "version": "0.52.25-1ubuntu2" }, "to_version": { "source_package_name": "newt", "source_package_version": "0.52.25-1ubuntu3", "version": "0.52.25-1ubuntu3" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild to drop Python 3.13 bits.", "" ], "package": "newt", "version": "0.52.25-1ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 20 Mar 2026 12:05:30 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libnghttp2-14:riscv64", "from_version": { "source_package_name": "nghttp2", "source_package_version": "1.64.0-1.1ubuntu2", "version": "1.64.0-1.1ubuntu2" }, "to_version": { "source_package_name": "nghttp2", "source_package_version": "1.68.0-2", "version": "1.68.0-2" }, "cves": [], "launchpad_bugs_fixed": [ 2132257, 2125171 ], "changes": [ { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "nghttp2", "version": "1.64.0-1.1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Wed, 11 Feb 2026 23:36:42 +0100" }, { "cves": [], "log": [ "", " * d/p/lp-2125171-remove-invalid-c23-macro.patch: Fix build with gcc15.", " Thanks to Tatsuhiro Tsujikawa . (LP: #2125171)", "" ], "package": "nghttp2", "version": "1.64.0-1.1ubuntu1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 2125171 ], "author": "Renan Rodrigo ", "date": "Fri, 19 Sep 2025 00:33:01 -0300" }, { "cves": [], "log": [ "", " * No-change rebuild for libxml2 soname change.", "" ], "package": "nghttp2", "version": "1.64.0-1.1build1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 20 May 2025 12:24:07 +0200" } ], "notes": null, "is_version_downgrade": true }, { "name": "libnss-systemd:riscv64", "from_version": { "source_package_name": "systemd", "source_package_version": "259-1ubuntu3", "version": "259-1ubuntu3" }, "to_version": { "source_package_name": "systemd", "source_package_version": "259.5-0ubuntu1", "version": "259.5-0ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2144032, 2143010, 2142900, 2142428, 2077538, 2142306, 2139822 ], "changes": [ { "cves": [], "log": [ "", " [ Nick Rosbrook ]", " * New upstream stable version 259.5", " - Update upstream source from tag 'upstream/259.5'", " Update to upstream version '259.5'", " with Debian dir 1076161727931a7063674200c474ec7747a5177f", " - Bug fixes", "", " [ Oliver Reiche ]", " * Fix issue overwriting /tmp on dist-upgrade (LP: #2144032)", "" ], "package": "systemd", "version": "259.5-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144032 ], "author": "Nick Rosbrook ", "date": "Fri, 13 Mar 2026 12:27:31 -0400" }, { "cves": [], "log": [ "", " * New upstream stable version 259.3", " - Update upstream source from tag 'upstream/259.3'", " Update to upstream version '259.3'", " with Debian dir 4fea3198a053eb40e77ea3ad3c3be030151f3f46", " - Bug fixes", "" ], "package": "systemd", "version": "259.3-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Fri, 06 Mar 2026 09:05:25 -0500" }, { "cves": [], "log": [ "", " * Tag KFD and ACCEL devices for uaccess (LP: #2143010)", " * d/control: Add missing dh-dlopenlibdeps to b-d", "" ], "package": "systemd", "version": "259.2-0ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143010 ], "author": "Mario Limonciello ", "date": "Tue, 03 Mar 2026 12:06:36 -0600" }, { "cves": [], "log": [ "", " * New upstream stable version 259.2", " - Bug fixes", " - Update upstream source from tag 'upstream/259.2'", " Update to upstream version '259.2'", " with Debian dir c25e0517a7a4ebd6d9009de0cf949dd265182a67", " - Drop lp2142428-seccomp-util-add-lsm_get_self_attr-and-lsm_list_modules-t.patch.", " Applied upstream: https://github.com/systemd/systemd/commit/515816197e", " * test: use gnuenv to workaround broken --block-signal= (LP: #2142900)", "" ], "package": "systemd", "version": "259.2-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142900 ], "author": "Nick Rosbrook ", "date": "Fri, 27 Feb 2026 09:20:52 -0500" }, { "cves": [], "log": [ "", " [ Nick Rosbrook ]", " * seccomp-util: add lsm_get_self_attr and lsm_list_modules to @default", " (LP: #2142428)", "", " [ Alessandro Astone ]", " * d/p/lp2077538: Grant GPU rendering access to GNOME Remote Desktop", " (LP: #2077538, LP: #2142306)", "" ], "package": "systemd", "version": "259.1-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142428, 2077538, 2142306 ], "author": "Nick Rosbrook ", "date": "Wed, 25 Feb 2026 10:32:56 -0500" }, { "cves": [], "log": [ "", " * Merge with Debian unstable. Remaining changes:", " - debian/systemd.postinst:", " + manually call systemd-tmpfiles --create in postinst", " - debian/control:", " + Add Recommends: systemd-resolved to systemd package", " + Make systemd-cryptsetup Priority: important", " + Give systemd-resolved Priority: important", " + Add Recommends: systemd-hwe-hwdb to udev package", " + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved", " + Do not build systemd-boot-efi-{amd64,arm64}-signed-template", " + d/control: demote systemd-userdbd to Suggests for libnss-systemd", " - d/rules: disable bpf support on riscv64 for now (LP #2099864)", " - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028)", " - Delta for i386:", " + debian/systemd.install: exclude files that are not built for i386", " + debian/systemd.manpages: do not ship un-built manpages on i386", " + debian/rules,debian/control,debian/tests/control:", " Do not build with tpm libraries on i386", " + debian/rules,debian/control,debian/tests/control:", " Do not build with libqrencode on i386", " + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors", " - debian/libnss-systemd.*:", " + debian/libnss-systemd.nss: install after 'compat' too (LP #2125403)", " + debian/libnss-systemd.preinst: force nsswitch.conf update", " Drop systemd instances in nsswitch.conf, and force postinst to", " re-generate the file (LP #2121017)", " + debian/linbnss-systemd.nss: Install systemd service after files.", " As suggested by upstream the systemd NSS service should come just after", " files", " - debian/tests:", " + d/t/boot-and-services: use coreutils tunable in apparmor test (LP #2125614)", " + d/t/upstream: skip TEST-08-INITRD on Ubuntu (LP #2136419)", " - debian/patches:", " + switch-root: use MS_MOVE for /run when switchig from initrd", " + test: skip TEST-50-DISSECT.dissect (LP #2116460)", " + test: skip TEST-13-NSPAWN.{nspawn,machined} (LP #2136413)", " * Dropped changes, included upstream:", " - lp2136497-test-use-journalctl-n-option-instead-of-piping-to-head.patch", " Applied upstream: https://github.com/systemd/systemd/commit/2c661e5f0d", " - lp2136408-test-cope-with-uutils-coreutils-flag-parsing-for-date-com.patch", " Applied upstream: https://github.com/systemd/systemd/commit/a45dad1aa5", " - test-disable-pipefail-again-in-monitor_check_rr.patch", " Applied upstream: https://github.com/systemd/systemd/commit/ce35956b3a", " - resolve-include-current-DNS-server-in-JSON-again.patch", " Applied upstream: https://github.com/systemd/systemd/commit/0de941f937", " - lp2133402-ukify-omit-.osrel-section-when-os-release-is-empty.patch", " Applied upstream: https://github.com/systemd/systemd/commit/798a27a5b4", " * Dropped changes, no longer needed:", " - d/t/upstream: use GNU cp in test setup (LP #2122363)", " Fixed in rust-coreutils 0.5.0", " - lp2136752-test-workaround-uutils-dd-broken-pipe.patch", " Fixed in rust-coreutils 0.6.0", " * New changes:", " - d/libsystemd-shared.preinst: refuse to upgrade without unified cgroupv2 hierarchy", "" ], "package": "systemd", "version": "259.1-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Tue, 10 Feb 2026 14:05:53 -0500" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * Drop dependencies on libcap-dev, no longer used since v259", " * Mark sd-userdbd as Multi-Arch: foreign (Closes: #1123615)", " * Use dh_installsystemd more to manage units. Ensure more units are", " handled as they are added to various packages", " * Use dh_installsystemd to handle journald and networkd", " * Use deb-systemd-invoke to reexec instead of manual calls. Allows the", " tool to handle the complications and use varlink where available", " * Increase number of sections of sd-stub on amd64 too. The default limit", " breaks adding more than 28 sections, which can happen with a UKI with", " many optional profiles. Bump it on amd64 too, at the cost of an extra", " ~80KB in size on the stub.", " * Update upstream source from tag 'upstream/259.1' Update to upstream", " version '259.1' with Debian dir", " f7a9425f1024ef75b5020a216f6be3d0af9ac227", " * Restrict the tpm2-generator manpage to arches where it is built", " * Install ask-password polkit policy file", "", " [ Yu Watanabe ]", " * Drop use of deprecated options. These options are deprecated since", " v258.", "", " [ Nick Rosbrook ]", " * d/control: have systemd-boot depend on efibootmgr for amd64 and arm64", " only", " * d/tests: drop tests-in-lxd", " * d/control: make systemd-container Depends: libarchive13t64. This is", " needed for e.g. systemd-import-generator + rd.systemd.pull= to work", " properly. Dracut would like to be able to use that feature reliably", " when systemd-importd is available, so explicitly depend on libarchive.", " Currently, it is only a Suggests of libsystemd-shared via dlopen", " machinery. (LP: #2139822)", "" ], "package": "systemd", "version": "259.1-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2139822 ], "author": "Luca Boccassi ", "date": "Fri, 06 Feb 2026 18:37:22 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "libnss3:riscv64", "from_version": { "source_package_name": "nss", "source_package_version": "2:3.120-1", "version": "2:3.120-1" }, "to_version": { "source_package_name": "nss", "source_package_version": "2:3.120-1ubuntu2", "version": "2:3.120-1ubuntu2" }, "cves": [ { "cve": "CVE-2026-2781", "url": "https://ubuntu.com/security/CVE-2026-2781", "cve_description": "Integer overflow in the Libraries component in NSS. This vulnerability affects Firefox < 148, Firefox ESR < 140.8, Thunderbird < 148, and Thunderbird < 140.8.", "cve_priority": "medium", "cve_public_date": "2026-02-24 14:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2142897 ], "changes": [ { "cves": [], "log": [ "", " * d/p/c23-const.patch: fix build with glibc 2.43 (LP: #2142897)", "" ], "package": "nss", "version": "2:3.120-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142897 ], "author": "Simon Poirier ", "date": "Wed, 11 Mar 2026 11:31:16 -0400" }, { "cves": [ { "cve": "CVE-2026-2781", "url": "https://ubuntu.com/security/CVE-2026-2781", "cve_description": "Integer overflow in the Libraries component in NSS. This vulnerability affects Firefox < 148, Firefox ESR < 140.8, Thunderbird < 148, and Thunderbird < 140.8.", "cve_priority": "medium", "cve_public_date": "2026-02-24 14:16:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: integer overflow in platform-independent ghash", " - debian/patches/CVE-2026-2781.patch: properly cast len in", " nss/lib/freebl/gcm.c.", " - CVE-2026-2781", "" ], "package": "nss", "version": "2:3.120-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Thu, 26 Feb 2026 12:49:32 -0500" } ], "notes": null, "is_version_downgrade": false }, { "name": "libopeniscsiusr", "from_version": { "source_package_name": "open-iscsi", "source_package_version": "2.1.11-3ubuntu2", "version": "2.1.11-3ubuntu2" }, "to_version": { "source_package_name": "open-iscsi", "source_package_version": "2.1.11-3ubuntu3", "version": "2.1.11-3ubuntu3" }, "cves": [], "launchpad_bugs_fixed": [ 2143886 ], "changes": [ { "cves": [], "log": [ "", " * d/t/patch-image: also look for arch all packages (LP: #2143886)", "" ], "package": "open-iscsi", "version": "2.1.11-3ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143886 ], "author": "Benjamin Drung ", "date": "Thu, 12 Mar 2026 00:48:53 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libp11-kit0:riscv64", "from_version": { "source_package_name": "p11-kit", "source_package_version": "0.25.10-1", "version": "0.25.10-1" }, "to_version": { "source_package_name": "p11-kit", "source_package_version": "0.26.2-2", "version": "0.26.2-2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Upload to unstable.", "" ], "package": "p11-kit", "version": "0.26.2-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Andreas Metzler ", "date": "Sat, 21 Feb 2026 13:58:53 +0100" }, { "cves": [], "log": [ "", " * New upstream version.", " * update debian/copyright", " * [lintian] Drop redundant Priority: optional", " * [lintian] Drop redundant Rules-Requires-Root: no", " * [lintian] Drop now invalid kfreebsd-any arch-string in control file.", "" ], "package": "p11-kit", "version": "0.26.2-1", "urgency": "low", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Andreas Metzler ", "date": "Sun, 08 Feb 2026 16:35:36 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libpam-systemd:riscv64", "from_version": { "source_package_name": "systemd", "source_package_version": "259-1ubuntu3", "version": "259-1ubuntu3" }, "to_version": { "source_package_name": "systemd", "source_package_version": "259.5-0ubuntu1", "version": "259.5-0ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2144032, 2143010, 2142900, 2142428, 2077538, 2142306, 2139822 ], "changes": [ { "cves": [], "log": [ "", " [ Nick Rosbrook ]", " * New upstream stable version 259.5", " - Update upstream source from tag 'upstream/259.5'", " Update to upstream version '259.5'", " with Debian dir 1076161727931a7063674200c474ec7747a5177f", " - Bug fixes", "", " [ Oliver Reiche ]", " * Fix issue overwriting /tmp on dist-upgrade (LP: #2144032)", "" ], "package": "systemd", "version": "259.5-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144032 ], "author": "Nick Rosbrook ", "date": "Fri, 13 Mar 2026 12:27:31 -0400" }, { "cves": [], "log": [ "", " * New upstream stable version 259.3", " - Update upstream source from tag 'upstream/259.3'", " Update to upstream version '259.3'", " with Debian dir 4fea3198a053eb40e77ea3ad3c3be030151f3f46", " - Bug fixes", "" ], "package": "systemd", "version": "259.3-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Fri, 06 Mar 2026 09:05:25 -0500" }, { "cves": [], "log": [ "", " * Tag KFD and ACCEL devices for uaccess (LP: #2143010)", " * d/control: Add missing dh-dlopenlibdeps to b-d", "" ], "package": "systemd", "version": "259.2-0ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143010 ], "author": "Mario Limonciello ", "date": "Tue, 03 Mar 2026 12:06:36 -0600" }, { "cves": [], "log": [ "", " * New upstream stable version 259.2", " - Bug fixes", " - Update upstream source from tag 'upstream/259.2'", " Update to upstream version '259.2'", " with Debian dir c25e0517a7a4ebd6d9009de0cf949dd265182a67", " - Drop lp2142428-seccomp-util-add-lsm_get_self_attr-and-lsm_list_modules-t.patch.", " Applied upstream: https://github.com/systemd/systemd/commit/515816197e", " * test: use gnuenv to workaround broken --block-signal= (LP: #2142900)", "" ], "package": "systemd", "version": "259.2-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142900 ], "author": "Nick Rosbrook ", "date": "Fri, 27 Feb 2026 09:20:52 -0500" }, { "cves": [], "log": [ "", " [ Nick Rosbrook ]", " * seccomp-util: add lsm_get_self_attr and lsm_list_modules to @default", " (LP: #2142428)", "", " [ Alessandro Astone ]", " * d/p/lp2077538: Grant GPU rendering access to GNOME Remote Desktop", " (LP: #2077538, LP: #2142306)", "" ], "package": "systemd", "version": "259.1-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142428, 2077538, 2142306 ], "author": "Nick Rosbrook ", "date": "Wed, 25 Feb 2026 10:32:56 -0500" }, { "cves": [], "log": [ "", " * Merge with Debian unstable. Remaining changes:", " - debian/systemd.postinst:", " + manually call systemd-tmpfiles --create in postinst", " - debian/control:", " + Add Recommends: systemd-resolved to systemd package", " + Make systemd-cryptsetup Priority: important", " + Give systemd-resolved Priority: important", " + Add Recommends: systemd-hwe-hwdb to udev package", " + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved", " + Do not build systemd-boot-efi-{amd64,arm64}-signed-template", " + d/control: demote systemd-userdbd to Suggests for libnss-systemd", " - d/rules: disable bpf support on riscv64 for now (LP #2099864)", " - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028)", " - Delta for i386:", " + debian/systemd.install: exclude files that are not built for i386", " + debian/systemd.manpages: do not ship un-built manpages on i386", " + debian/rules,debian/control,debian/tests/control:", " Do not build with tpm libraries on i386", " + debian/rules,debian/control,debian/tests/control:", " Do not build with libqrencode on i386", " + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors", " - debian/libnss-systemd.*:", " + debian/libnss-systemd.nss: install after 'compat' too (LP #2125403)", " + debian/libnss-systemd.preinst: force nsswitch.conf update", " Drop systemd instances in nsswitch.conf, and force postinst to", " re-generate the file (LP #2121017)", " + debian/linbnss-systemd.nss: Install systemd service after files.", " As suggested by upstream the systemd NSS service should come just after", " files", " - debian/tests:", " + d/t/boot-and-services: use coreutils tunable in apparmor test (LP #2125614)", " + d/t/upstream: skip TEST-08-INITRD on Ubuntu (LP #2136419)", " - debian/patches:", " + switch-root: use MS_MOVE for /run when switchig from initrd", " + test: skip TEST-50-DISSECT.dissect (LP #2116460)", " + test: skip TEST-13-NSPAWN.{nspawn,machined} (LP #2136413)", " * Dropped changes, included upstream:", " - lp2136497-test-use-journalctl-n-option-instead-of-piping-to-head.patch", " Applied upstream: https://github.com/systemd/systemd/commit/2c661e5f0d", " - lp2136408-test-cope-with-uutils-coreutils-flag-parsing-for-date-com.patch", " Applied upstream: https://github.com/systemd/systemd/commit/a45dad1aa5", " - test-disable-pipefail-again-in-monitor_check_rr.patch", " Applied upstream: https://github.com/systemd/systemd/commit/ce35956b3a", " - resolve-include-current-DNS-server-in-JSON-again.patch", " Applied upstream: https://github.com/systemd/systemd/commit/0de941f937", " - lp2133402-ukify-omit-.osrel-section-when-os-release-is-empty.patch", " Applied upstream: https://github.com/systemd/systemd/commit/798a27a5b4", " * Dropped changes, no longer needed:", " - d/t/upstream: use GNU cp in test setup (LP #2122363)", " Fixed in rust-coreutils 0.5.0", " - lp2136752-test-workaround-uutils-dd-broken-pipe.patch", " Fixed in rust-coreutils 0.6.0", " * New changes:", " - d/libsystemd-shared.preinst: refuse to upgrade without unified cgroupv2 hierarchy", "" ], "package": "systemd", "version": "259.1-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Tue, 10 Feb 2026 14:05:53 -0500" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * Drop dependencies on libcap-dev, no longer used since v259", " * Mark sd-userdbd as Multi-Arch: foreign (Closes: #1123615)", " * Use dh_installsystemd more to manage units. Ensure more units are", " handled as they are added to various packages", " * Use dh_installsystemd to handle journald and networkd", " * Use deb-systemd-invoke to reexec instead of manual calls. Allows the", " tool to handle the complications and use varlink where available", " * Increase number of sections of sd-stub on amd64 too. The default limit", " breaks adding more than 28 sections, which can happen with a UKI with", " many optional profiles. Bump it on amd64 too, at the cost of an extra", " ~80KB in size on the stub.", " * Update upstream source from tag 'upstream/259.1' Update to upstream", " version '259.1' with Debian dir", " f7a9425f1024ef75b5020a216f6be3d0af9ac227", " * Restrict the tpm2-generator manpage to arches where it is built", " * Install ask-password polkit policy file", "", " [ Yu Watanabe ]", " * Drop use of deprecated options. These options are deprecated since", " v258.", "", " [ Nick Rosbrook ]", " * d/control: have systemd-boot depend on efibootmgr for amd64 and arm64", " only", " * d/tests: drop tests-in-lxd", " * d/control: make systemd-container Depends: libarchive13t64. This is", " needed for e.g. systemd-import-generator + rd.systemd.pull= to work", " properly. Dracut would like to be able to use that feature reliably", " when systemd-importd is available, so explicitly depend on libarchive.", " Currently, it is only a Suggests of libsystemd-shared via dlopen", " machinery. (LP: #2139822)", "" ], "package": "systemd", "version": "259.1-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2139822 ], "author": "Luca Boccassi ", "date": "Fri, 06 Feb 2026 18:37:22 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "libpcap0.8t64:riscv64", "from_version": { "source_package_name": "libpcap", "source_package_version": "1.10.5-2ubuntu3", "version": "1.10.5-2ubuntu3" }, "to_version": { "source_package_name": "libpcap", "source_package_version": "1.10.6-1ubuntu1", "version": "1.10.6-1ubuntu1" }, "cves": [ { "cve": "CVE-2025-11961", "url": "https://ubuntu.com/security/CVE-2025-11961", "cve_description": "pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.", "cve_priority": "low", "cve_public_date": "2025-12-31 01:15:00 UTC" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - Add Build-Depends on libibverbs-dev to enable RDMA support.", " LP #2006557.", " - Have -dev package depend on libibverbs-dev per pkgconfig", " - Don't require ibverbs on i386", "" ], "package": "libpcap", "version": "1.10.6-1ubuntu1", "urgency": "low", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Gianfranco Costamagna ", "date": "Tue, 17 Feb 2026 09:53:24 +0100" }, { "cves": [ { "cve": "CVE-2025-11961", "url": "https://ubuntu.com/security/CVE-2025-11961", "cve_description": "pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.", "cve_priority": "low", "cve_public_date": "2025-12-31 01:15:00 UTC" } ], "log": [ "", " * Team upload.", " * New upstream version 1.10.6", " - Fixes CVE-2025-11961 (Closes: #1124381)", " * Switch watch file format to version 5", " * Update signing key E089DEF1D9C15D0D (extended until 2026-05-10)", " * Add d/upstream/metadata", " * d/control:", " - Remove redundant \"Rules-Requires-Root: no\"", " - Remove redundant \"Priority: optional\"", " - Bump Standards-Version to 4.7.3 (no changes required)", " * Overhaul d/copyright, rewrite in machine-readable format", "" ], "package": "libpcap", "version": "1.10.6-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Peter Wienemann ", "date": "Sun, 15 Feb 2026 19:18:22 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libperl5.40:riscv64", "from_version": { "source_package_name": "perl", "source_package_version": "5.40.1-6build1", "version": "5.40.1-6build1" }, "to_version": { "source_package_name": "perl", "source_package_version": "5.40.1-7build1", "version": "5.40.1-7build1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Reupload to resolute", "" ], "package": "perl", "version": "5.40.1-7build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Sebastien Bacher ", "date": "Tue, 17 Mar 2026 11:45:39 +0100" }, { "cves": [], "log": [ "", " [ Helmut Grohne ]", " * Add libcrypt-dev to libperl-dev's Depends. (Closes: #1102978)", "" ], "package": "perl", "version": "5.40.1-7", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Niko Tyni ", "date": "Sun, 16 Nov 2025 22:01:11 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "libplymouth5:riscv64", "from_version": { "source_package_name": "plymouth", "source_package_version": "24.004.60+git20250831.4a3c171d-0ubuntu6", "version": "24.004.60+git20250831.4a3c171d-0ubuntu6" }, "to_version": { "source_package_name": "plymouth", "source_package_version": "24.004.60+git20250831.4a3c171d-0ubuntu8", "version": "24.004.60+git20250831.4a3c171d-0ubuntu8" }, "cves": [], "launchpad_bugs_fixed": [ 2116296 ], "changes": [ { "cves": [], "log": [ "", " * d/local/spinner:", " - Update spinner to use Resolute loader", " - Increase number of animation stills to 60", "" ], "package": "plymouth", "version": "24.004.60+git20250831.4a3c171d-0ubuntu8", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Simon Johnsson ", "date": "Thu, 12 Mar 2026 15:27:04 +0100" }, { "cves": [], "log": [ "", " * debian/patches/force-scale-guessing.patch:", " - Always \"guess\" the device scale (LP: #2116296)", "" ], "package": "plymouth", "version": "24.004.60+git20250831.4a3c171d-0ubuntu7", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2116296 ], "author": "Daniel van Vugt ", "date": "Fri, 06 Mar 2026 11:35:01 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libpython3-stdlib:riscv64", "from_version": { "source_package_name": "python3-defaults", "source_package_version": "3.13.9-3", "version": "3.13.9-3" }, "to_version": { "source_package_name": "python3-defaults", "source_package_version": "3.14.3-0ubuntu1", "version": "3.14.3-0ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Remove Python 3.13 as a supported version", " * Bump version to 3.14.3", "" ], "package": "python3-defaults", "version": "3.14.3-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Graham Inggs ", "date": "Fri, 13 Mar 2026 21:32:47 +0000" }, { "cves": [], "log": [ "", " * Upload to experimental.", " * Make Python 3.14 the default version.", "" ], "package": "python3-defaults", "version": "3.14.2-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Stefano Rivera ", "date": "Sun, 11 Jan 2026 07:26:55 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "libpython3.13-minimal:riscv64", "from_version": { "source_package_name": "python3.13", "source_package_version": "3.13.12-1", "version": "3.13.12-1" }, "to_version": { "source_package_name": "python3.13", "source_package_version": "3.13.12-1ubuntu1", "version": "3.13.12-1ubuntu1" }, "cves": [ { "cve": "CVE-2026-0865", "url": "https://ubuntu.com/security/CVE-2026-0865", "cve_description": "User-controlled header names and values containing newlines can allow injecting HTTP headers.", "cve_priority": "medium", "cve_public_date": "2026-01-20 22:15:00 UTC" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-0865", "url": "https://ubuntu.com/security/CVE-2026-0865", "cve_description": "User-controlled header names and values containing newlines can allow injecting HTTP headers.", "cve_priority": "medium", "cve_public_date": "2026-01-20 22:15:00 UTC" } ], "log": [ "", " * SECURITY REGRESSION: Allow HTAB in wsgiref header values", " - debian/patches/CVE-2026-0865-2.patch: Permit HTAB in header values", " (excluding names) in Lib/wsgiref/headers.py, add test coverage.", " - CVE-2026-0865 ", "" ], "package": "python3.13", "version": "3.13.12-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Vyom Yadav ", "date": "Tue, 03 Mar 2026 17:54:15 +0530" } ], "notes": null, "is_version_downgrade": false }, { "name": "libpython3.13-stdlib:riscv64", "from_version": { "source_package_name": "python3.13", "source_package_version": "3.13.12-1", "version": "3.13.12-1" }, "to_version": { "source_package_name": "python3.13", "source_package_version": "3.13.12-1ubuntu1", "version": "3.13.12-1ubuntu1" }, "cves": [ { "cve": "CVE-2026-0865", "url": "https://ubuntu.com/security/CVE-2026-0865", "cve_description": "User-controlled header names and values containing newlines can allow injecting HTTP headers.", "cve_priority": "medium", "cve_public_date": "2026-01-20 22:15:00 UTC" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-0865", "url": "https://ubuntu.com/security/CVE-2026-0865", "cve_description": "User-controlled header names and values containing newlines can allow injecting HTTP headers.", "cve_priority": "medium", "cve_public_date": "2026-01-20 22:15:00 UTC" } ], "log": [ "", " * SECURITY REGRESSION: Allow HTAB in wsgiref header values", " - debian/patches/CVE-2026-0865-2.patch: Permit HTAB in header values", " (excluding names) in Lib/wsgiref/headers.py, add test coverage.", " - CVE-2026-0865 ", "" ], "package": "python3.13", "version": "3.13.12-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Vyom Yadav ", "date": "Tue, 03 Mar 2026 17:54:15 +0530" } ], "notes": null, "is_version_downgrade": false }, { "name": "libpython3.14:riscv64", "from_version": { "source_package_name": "python3.14", "source_package_version": "3.14.3-1", "version": "3.14.3-1" }, "to_version": { "source_package_name": "python3.14", "source_package_version": "3.14.3-3", "version": "3.14.3-3" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Update to the 3.14 branch 2026-03-21.", " * Drop build dependency on blt, gone since 3.13.", "" ], "package": "python3.14", "version": "3.14.3-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sat, 21 Mar 2026 12:37:05 +0100" }, { "cves": [], "log": [ "", " [ Stefano Rivera ]", " * Drop explicit Build-Depends on quilt, it's only used in manual rules", " targets. Closes: #1129933.", " * Use dh_usrlocal to create /usr/local/python3.14/dist-packages.", " Closes: #1127103.", "", " [ Matthias Klose ]", " * Update to the 3.14 branch 2026-03-11.", "" ], "package": "python3.14", "version": "3.14.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Wed, 11 Mar 2026 20:17:30 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libpython3.14-minimal:riscv64", "from_version": { "source_package_name": "python3.14", "source_package_version": "3.14.3-1", "version": "3.14.3-1" }, "to_version": { "source_package_name": "python3.14", "source_package_version": "3.14.3-3", "version": "3.14.3-3" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Update to the 3.14 branch 2026-03-21.", " * Drop build dependency on blt, gone since 3.13.", "" ], "package": "python3.14", "version": "3.14.3-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sat, 21 Mar 2026 12:37:05 +0100" }, { "cves": [], "log": [ "", " [ Stefano Rivera ]", " * Drop explicit Build-Depends on quilt, it's only used in manual rules", " targets. Closes: #1129933.", " * Use dh_usrlocal to create /usr/local/python3.14/dist-packages.", " Closes: #1127103.", "", " [ Matthias Klose ]", " * Update to the 3.14 branch 2026-03-11.", "" ], "package": "python3.14", "version": "3.14.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Wed, 11 Mar 2026 20:17:30 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libpython3.14-stdlib:riscv64", "from_version": { "source_package_name": "python3.14", "source_package_version": "3.14.3-1", "version": "3.14.3-1" }, "to_version": { "source_package_name": "python3.14", "source_package_version": "3.14.3-3", "version": "3.14.3-3" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Update to the 3.14 branch 2026-03-21.", " * Drop build dependency on blt, gone since 3.13.", "" ], "package": "python3.14", "version": "3.14.3-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sat, 21 Mar 2026 12:37:05 +0100" }, { "cves": [], "log": [ "", " [ Stefano Rivera ]", " * Drop explicit Build-Depends on quilt, it's only used in manual rules", " targets. Closes: #1129933.", " * Use dh_usrlocal to create /usr/local/python3.14/dist-packages.", " Closes: #1127103.", "", " [ Matthias Klose ]", " * Update to the 3.14 branch 2026-03-11.", "" ], "package": "python3.14", "version": "3.14.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Wed, 11 Mar 2026 20:17:30 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libreadline8t64:riscv64", "from_version": { "source_package_name": "readline", "source_package_version": "8.3-3", "version": "8.3-3" }, "to_version": { "source_package_name": "readline", "source_package_version": "8.3-4", "version": "8.3-4" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Apply upstream patches 002-0031.", " * Bump standards version.", "" ], "package": "readline", "version": "8.3-4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 13 Feb 2026 11:25:25 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libsasl2-2:riscv64", "from_version": { "source_package_name": "cyrus-sasl2", "source_package_version": "2.1.28+dfsg1-9ubuntu1", "version": "2.1.28+dfsg1-9ubuntu1" }, "to_version": { "source_package_name": "cyrus-sasl2", "source_package_version": "2.1.28+dfsg1-9ubuntu3", "version": "2.1.28+dfsg1-9ubuntu3" }, "cves": [], "launchpad_bugs_fixed": [ 2142320, 2132257 ], "changes": [ { "cves": [], "log": [ "", " * Disable postgresql support in the libsasl2-modules-sql on i386 since", " postgresql is no longer build for that architecture (LP: #2142320):", " - d/control: don't build-depend on libpq-dev on i386", " - d/rules: only enable pgsql if not on i386", "" ], "package": "cyrus-sasl2", "version": "2.1.28+dfsg1-9ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142320 ], "author": "Andreas Hasenack ", "date": "Fri, 20 Feb 2026 15:43:09 -0300" }, { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "cyrus-sasl2", "version": "2.1.28+dfsg1-9ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Fri, 06 Feb 2026 21:12:22 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libsasl2-modules:riscv64", "from_version": { "source_package_name": "cyrus-sasl2", "source_package_version": "2.1.28+dfsg1-9ubuntu1", "version": "2.1.28+dfsg1-9ubuntu1" }, "to_version": { "source_package_name": "cyrus-sasl2", "source_package_version": "2.1.28+dfsg1-9ubuntu3", "version": "2.1.28+dfsg1-9ubuntu3" }, "cves": [], "launchpad_bugs_fixed": [ 2142320, 2132257 ], "changes": [ { "cves": [], "log": [ "", " * Disable postgresql support in the libsasl2-modules-sql on i386 since", " postgresql is no longer build for that architecture (LP: #2142320):", " - d/control: don't build-depend on libpq-dev on i386", " - d/rules: only enable pgsql if not on i386", "" ], "package": "cyrus-sasl2", "version": "2.1.28+dfsg1-9ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142320 ], "author": "Andreas Hasenack ", "date": "Fri, 20 Feb 2026 15:43:09 -0300" }, { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "cyrus-sasl2", "version": "2.1.28+dfsg1-9ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Fri, 06 Feb 2026 21:12:22 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libsasl2-modules-db:riscv64", "from_version": { "source_package_name": "cyrus-sasl2", "source_package_version": "2.1.28+dfsg1-9ubuntu1", "version": "2.1.28+dfsg1-9ubuntu1" }, "to_version": { "source_package_name": "cyrus-sasl2", "source_package_version": "2.1.28+dfsg1-9ubuntu3", "version": "2.1.28+dfsg1-9ubuntu3" }, "cves": [], "launchpad_bugs_fixed": [ 2142320, 2132257 ], "changes": [ { "cves": [], "log": [ "", " * Disable postgresql support in the libsasl2-modules-sql on i386 since", " postgresql is no longer build for that architecture (LP: #2142320):", " - d/control: don't build-depend on libpq-dev on i386", " - d/rules: only enable pgsql if not on i386", "" ], "package": "cyrus-sasl2", "version": "2.1.28+dfsg1-9ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142320 ], "author": "Andreas Hasenack ", "date": "Fri, 20 Feb 2026 15:43:09 -0300" }, { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "cyrus-sasl2", "version": "2.1.28+dfsg1-9ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Fri, 06 Feb 2026 21:12:22 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libseccomp2:riscv64", "from_version": { "source_package_name": "libseccomp", "source_package_version": "2.6.0-2ubuntu4", "version": "2.6.0-2ubuntu4" }, "to_version": { "source_package_name": "libseccomp", "source_package_version": "2.6.0-2ubuntu5", "version": "2.6.0-2ubuntu5" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild to drop Python 3.13 bits.", "" ], "package": "libseccomp", "version": "2.6.0-2ubuntu5", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 20 Mar 2026 11:30:57 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libselinux1:riscv64", "from_version": { "source_package_name": "libselinux", "source_package_version": "3.9-4", "version": "3.9-4" }, "to_version": { "source_package_name": "libselinux", "source_package_version": "3.9-4build1", "version": "3.9-4build1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild to drop Python 3.13 bits.", "" ], "package": "libselinux", "version": "3.9-4build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 20 Mar 2026 12:05:23 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libsemanage-common", "from_version": { "source_package_name": "libsemanage", "source_package_version": "3.9-1", "version": "3.9-1" }, "to_version": { "source_package_name": "libsemanage", "source_package_version": "3.9-1build1", "version": "3.9-1build1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild to drop Python 3.13 bits.", "" ], "package": "libsemanage", "version": "3.9-1build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 20 Mar 2026 11:32:37 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libsemanage2:riscv64", "from_version": { "source_package_name": "libsemanage", "source_package_version": "3.9-1", "version": "3.9-1" }, "to_version": { "source_package_name": "libsemanage", "source_package_version": "3.9-1build1", "version": "3.9-1build1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild to drop Python 3.13 bits.", "" ], "package": "libsemanage", "version": "3.9-1build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 20 Mar 2026 11:32:37 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libsgutils2-1.48:riscv64", "from_version": { "source_package_name": "sg3-utils", "source_package_version": "1.48-3ubuntu2", "version": "1.48-3ubuntu2" }, "to_version": { "source_package_name": "sg3-utils", "source_package_version": "1.48-3ubuntu3", "version": "1.48-3ubuntu3" }, "cves": [], "launchpad_bugs_fixed": [ 2142775 ], "changes": [ { "cves": [], "log": [ "", " * Recommend dracut as default initrd generator (LP: #2142775)", "" ], "package": "sg3-utils", "version": "1.48-3ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142775 ], "author": "Benjamin Drung ", "date": "Fri, 27 Feb 2026 18:12:12 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libsmartcols1:riscv64", "from_version": { "source_package_name": "util-linux", "source_package_version": "2.41.2-4ubuntu3", "version": "2.41.2-4ubuntu3" }, "to_version": { "source_package_name": "util-linux", "source_package_version": "2.41.3-3ubuntu2", "version": "2.41.3-3ubuntu2" }, "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" }, { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2142050 ], "changes": [ { "cves": [], "log": [ "", " * d/p/ubuntu/su-pty-drop-caps.patch: harden 'su --pty' to temporarily lower", " capabilities while proxying between stdin/stdout and the pty master. This", " is to avoid su from being used to exploit kernel vulnerabilities.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Fri, 13 Mar 2026 07:09:23 -0400" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Merge with Debian unstable (LP: #2142050). Remaining changes:", " - Add sulogin-fallback-static-sh.patch", " Add support for /bin/static-sh as fallback if the regular shell fails to", " execute. Patch ported from sysvinit. (see LP #505887)", " - Add sulogin-lockedpwd.patch", " Make sure file systems can be fixed on machines with locked root", " accounts (as Ubuntu does by default). Don't require --force for sulogin.", " - d/rules: disable libmount mountfs support", " Disable brand new feature with --disable-libmount-mountfd-support that", " causes inability to deploy MAAS LP #2037417.", " * Dropped changes applied upstream:", " - SECURITY UPDATE: heap overread with 256-byte usernames", " + debian/patches/CVE-2025-14104-1.patch: add length check in", " login-utils/setpwnam.c.", " + debian/patches/CVE-2025-14104-2.patch: update buflen in", " login-utils/setpwnam.c.", " + CVE-2025-14104", " * Dropped changes as they were no longer necessary:", " - d/p/ubuntu/lp-2030793-make-check-pidfd.patch", " This patch only effected kernel versions below 5.15 which are not", " available on resolute.", " - d/p/u/lp-2112552-tests-mark-mkfds-multiplexing-as-known-fail.patch", " The underlying bug was addressed in rust-coreutils.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142050 ], "author": "Ural Tunaboyu ", "date": "Sun, 15 Feb 2026 17:43:12 -0800" }, { "cves": [], "log": [ "", " * d/libsmartcols1.symbols: drop terminal crap", " * d/rules: make dpkg-gensymbols more strict", " * lintian: ignore groff-message tags", " * lintian: ignore groff-message tags in remaining packages", " * Add upstream patches", " * unshare: fix user namespace bind mounts", " * unshare: remove get_mnt_ino() check in bind_ns_files_from_child()", " * unshare: add --owner to set user namespace owner uid and gid", " * libfdisk: modernize ZFS GPT type description", "" ], "package": "util-linux", "version": "2.41.3-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 31 Dec 2025 13:06:28 +0100" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * util-linux: do not fail postinst/prerm if update-alternatives is missing", "" ], "package": "util-linux", "version": "2.41.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 17 Dec 2025 10:42:28 +0100" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Stop installing lastlog2-import.service", " * New upstream release, fixing CVE-2025-14104. (Closes: #1122058)", "" ], "package": "util-linux", "version": "2.41.3-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Tue, 16 Dec 2025 20:37:41 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libss2:riscv64", "from_version": { "source_package_name": "e2fsprogs", "source_package_version": "1.47.2-3ubuntu2", "version": "1.47.2-3ubuntu2" }, "to_version": { "source_package_name": "e2fsprogs", "source_package_version": "1.47.2-3ubuntu4", "version": "1.47.2-3ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [ 2138219, 2132257 ], "changes": [ { "cves": [], "log": [ "", " * d/rules: fix pkgconfig call that results in inability", " to find udev rules.d in dh_install. Patch supplied by", " Helmut Grohne in Debian bug 1126636. (LP: #2138219)", "" ], "package": "e2fsprogs", "version": "1.47.2-3ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2138219 ], "author": "John Chittum ", "date": "Fri, 13 Feb 2026 07:17:00 -0500" }, { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "e2fsprogs", "version": "1.47.2-3ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:34:31 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libssh2-1t64:riscv64", "from_version": { "source_package_name": "libssh2", "source_package_version": "1.11.1-1build1", "version": "1.11.1-1build1" }, "to_version": { "source_package_name": "libssh2", "source_package_version": "1.11.1-1build2", "version": "1.11.1-1build2" }, "cves": [], "launchpad_bugs_fixed": [ 2132257 ], "changes": [ { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "libssh2", "version": "1.11.1-1build2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:42:48 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libssl3t64:riscv64", "from_version": { "source_package_name": "openssl", "source_package_version": "3.5.3-1ubuntu2", "version": "3.5.3-1ubuntu2" }, "to_version": { "source_package_name": "openssl", "source_package_version": "3.5.5-1ubuntu1", "version": "3.5.5-1ubuntu1" }, "cves": [ { "cve": "CVE-2025-11187", "url": "https://ubuntu.com/security/CVE-2025-11187", "cve_description": "Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification. Impact summary: The stack buffer overflow or NULL pointer dereference may cause a crash leading to Denial of Service for an application that parses untrusted PKCS#12 files. The buffer overflow may also potentially enable code execution depending on platform mitigations. When verifying a PKCS#12 file that uses PBMAC1 for the MAC, the PBKDF2 salt and keylength parameters from the file are used without validation. If the value of keylength exceeds the size of the fixed stack buffer used for the derived key (64 bytes), the key derivation will overflow the buffer. The overflow length is attacker-controlled. Also, if the salt parameter is not an OCTET STRING type this can lead to invalid or NULL pointer dereference. Exploiting this issue requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For this reason the issue was assessed as Moderate severity. The FIPS modules in 3.6, 3.5 and 3.4 are not affected by this issue, as PKCS#12 processing is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5 and 3.4 are vulnerable to this issue. OpenSSL 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue as they do not support PBMAC1 in PKCS#12.", "cve_priority": "medium", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-15467", "url": "https://ubuntu.com/security/CVE-2025-15467", "cve_description": "Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verifying that its length fits the destination. An attacker can supply a crafted CMS message with an oversized IV, causing a stack-based out-of-bounds write before any authentication or tag verification occurs. Applications and services that parse untrusted CMS or PKCS#7 content using AEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable. Because the overflow occurs prior to authentication, no valid key material is required to trigger it. While exploitability to remote code execution depends on platform and toolchain mitigations, the stack-based write primitive represents a severe risk. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not affected by this issue. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS AuthEnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verifying that its length fits the destination. An attacker can supply a crafted CMS message with an oversized IV, causing a stack-based out-of-bounds write before any authentication or tag verification occurs. Applications and services that parse untrusted CMS or PKCS#7 content using AEAD ciphers (e.g., S/MIME AuthEnvelopedData with AES-GCM) are vulnerable. Because the overflow occurs prior to authentication, no valid key material is required to trigger it. While exploitability to remote code execution depends on platform and toolchain mitigations, the stack-based write primitive represents a severe risk. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "medium", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-15468", "url": "https://ubuntu.com/security/CVE-2025-15468", "cve_description": "Issue summary: If an application using the SSL_CIPHER_find() function in a QUIC protocol client or server receives an unknown cipher suite from the peer, a NULL dereference occurs. Impact summary: A NULL pointer dereference leads to abnormal termination of the running process causing Denial of Service. Some applications call SSL_CIPHER_find() from the client_hello_cb callback on the cipher ID received from the peer. If this is done with an SSL object implementing the QUIC protocol, NULL pointer dereference will happen if the examined cipher ID is unknown or unsupported. As it is not very common to call this function in applications using the QUIC protocol and the worst outcome is Denial of Service, the issue was assessed as Low severity. The vulnerable code was introduced in the 3.2 version with the addition of the QUIC protocol support. The FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue, as the QUIC implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-15469", "url": "https://ubuntu.com/security/CVE-2025-15469", "cve_description": "Issue summary: The 'openssl dgst' command-line tool silently truncates input data to 16MB when using one-shot signing algorithms and reports success instead of an error. Impact summary: A user signing or verifying files larger than 16MB with one-shot algorithms (such as Ed25519, Ed448, or ML-DSA) may believe the entire file is authenticated while trailing data beyond 16MB remains unauthenticated. When the 'openssl dgst' command is used with algorithms that only support one-shot signing (Ed25519, Ed448, ML-DSA-44, ML-DSA-65, ML-DSA-87), the input is buffered with a 16MB limit. If the input exceeds this limit, the tool silently truncates to the first 16MB and continues without signaling an error, contrary to what the documentation states. This creates an integrity gap where trailing bytes can be modified without detection if both signing and verification are performed using the same affected codepath. The issue affects only the command-line tool behavior. Verifiers that process the full message using library APIs will reject the signature, so the risk primarily affects workflows that both sign and verify with the affected 'openssl dgst' command. Streaming digest algorithms for 'openssl dgst' and library users are unaffected. The FIPS modules in 3.5 and 3.6 are not affected by this issue, as the command-line tools are outside the OpenSSL FIPS module boundary. OpenSSL 3.5 and 3.6 are vulnerable to this issue. OpenSSL 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-66199", "url": "https://ubuntu.com/security/CVE-2025-66199", "cve_description": "Issue summary: A TLS 1.3 connection using certificate compression can be forced to allocate a large buffer before decompression without checking against the configured certificate size limit. Impact summary: An attacker can cause per-connection memory allocations of up to approximately 22 MiB and extra CPU work, potentially leading to service degradation or resource exhaustion (Denial of Service). In affected configurations, the peer-supplied uncompressed certificate length from a CompressedCertificate message is used to grow a heap buffer prior to decompression. This length is not bounded by the max_cert_list setting, which otherwise constrains certificate message sizes. An attacker can exploit this to cause large per-connection allocations followed by handshake failure. No memory corruption or information disclosure occurs. This issue only affects builds where TLS 1.3 certificate compression is compiled in (i.e., not OPENSSL_NO_COMP_ALG) and at least one compression algorithm (brotli, zlib, or zstd) is available, and where the compression extension is negotiated. Both clients receiving a server CompressedCertificate and servers in mutual TLS scenarios receiving a client CompressedCertificate are affected. Servers that do not request client certificates are not vulnerable to client-initiated attacks. Users can mitigate this issue by setting SSL_OP_NO_RX_CERTIFICATE_COMPRESSION to disable receiving compressed certificates. The FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue, as the TLS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-68160", "url": "https://ubuntu.com/security/CVE-2025-68160", "cve_description": "Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds write. Impact summary: This out-of-bounds write can cause memory corruption which typically results in a crash, leading to Denial of Service for an application. The line-buffering BIO filter (BIO_f_linebuffer) is not used by default in TLS/SSL data paths. In OpenSSL command-line applications, it is typically only pushed onto stdout/stderr on VMS systems. Third-party applications that explicitly use this filter with a BIO chain that can short-write and that write large, newline-free data influenced by an attacker would be affected. However, the circumstances where this could happen are unlikely to be under attacker control, and BIO_f_linebuffer is unlikely to be handling non-curated data controlled by an attacker. For that reason the issue was assessed as Low severity. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the BIO implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Impact summary: This out-of-bounds write can cause memory corruption which typically results in a crash, leading to Denial of Service for an application. The line-buffering BIO filter (BIO_f_linebuffer) is not used by default in TLS/SSL data paths. In OpenSSL command-line applications, it is typically only pushed onto stdout/stderr on VMS systems. Third-party applications that explicitly use this filter with a BIO chain that can short-write and that write large, newline-free data influenced by an attacker would be affected. However, the circumstances where this could happen are unlikely to be under attacker control, and BIO_f_linebuffer is unlikely to be handling non-curated data controlled by an attacker. For that reason the issue was assessed as Low severity. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the BIO implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69418", "url": "https://ubuntu.com/security/CVE-2025-69418", "cve_description": "Issue summary: When using the low-level OCB API directly with AES-NI or
other hardware-accelerated code paths, inputs whose length is not a multiple
of 16 bytes can leave the final partial block unencrypted and unauthenticated.

Impact summary: The trailing 1-15 bytes of a message may be exposed in
cleartext on encryption and are not covered by the authentication tag,
allowing an attacker to read or tamper with those bytes without detection.

The low-level OCB encrypt and decrypt routines in the hardware-accelerated
stream path process full 16-byte blocks but do not advance the input/output
pointers. The subsequent tail-handling code then operates on the original
base pointers, effectively reprocessing the beginning of the buffer while
leaving the actual trailing bytes unprocessed. The authentication checksum
also excludes the true tail bytes.

However, typical OpenSSL consumers using EVP are not affected because the
higher-level EVP and provider OCB implementations split inputs so that full
blocks and trailing partial blocks are processed in separate calls, avoiding
the problematic code path. Additionally, TLS does not use OCB ciphersuites.
The vulnerability only affects applications that call the low-level
CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with
non-block-aligned lengths in a single call on hardware-accelerated builds.
For these reasons the issue was assessed as Low severity.

The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected
by this issue, as OCB mode is not a FIPS-approved algorithm.

OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.

OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69419", "url": "https://ubuntu.com/security/CVE-2025-69419", "cve_description": "Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service. The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12 BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 source byte count as the destination buffer capacity to UTF8_putc(). For BMP code points above U+07FF, UTF-8 requires three bytes, but the forwarded capacity can be just two bytes. UTF8_putc() then returns -1, and this negative value is added to the output length without validation, causing the length to become negative. The subsequent trailing NUL byte is then written at a negative offset, causing write outside of heap allocated buffer. The vulnerability is reachable via the public PKCS12_get_friendlyname() API when parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a different code path that avoids this issue, PKCS12_get_friendlyname() directly invokes the vulnerable function. Exploitation requires an attacker to provide a malicious PKCS#12 file to be parsed by the application and the attacker can just trigger a one zero byte write before the allocated buffer. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue. Impact summary: The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service. The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12 BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 source byte count as the destination buffer capacity to UTF8_putc(). For BMP code points above U+07FF, UTF-8 requires three bytes, but the forwarded capacity can be just two bytes. UTF8_putc() then returns -1, and this negative value is added to the output length without validation, causing the length to become negative. The subsequent trailing NUL byte is then written at a negative offset, causing write outside of heap allocated buffer. The vulnerability is reachable via the public PKCS12_get_friendlyname() API when parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a different code path that avoids this issue, PKCS12_get_friendlyname() directly invokes the vulnerable function. Exploitation requires an attacker to provide a malicious PKCS#12 file to be parsed by the application and the attacker can just trigger a one zero byte write before the allocated buffer. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69420", "url": "https://ubuntu.com/security/CVE-2025-69420", "cve_description": "Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file. Impact summary: An application calling TS_RESP_verify_response() with a malformed TimeStamp Response can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2() access the signing cert attribute value without validating its type. When the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed TimeStamp Response to an application that verifies timestamp responses. The TimeStamp protocol (RFC 3161) is not widely used and the impact of the exploit is just a Denial of Service. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the TimeStamp Response implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue. Impact summary: An application calling TS_RESP_verify_response() with a malformed TimeStamp Response can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2() access the signing cert attribute value without validating its type. When the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed TimeStamp Response to an application that verifies timestamp responses. The TimeStamp protocol (RFC 3161) is not widely used and the impact of the exploit is just a Denial of Service. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the TimeStamp Response implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69421", "url": "https://ubuntu.com/security/CVE-2025-69421", "cve_description": "Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. The PKCS12_item_decrypt_d2i_ex() function does not check whether the oct parameter is NULL before dereferencing it. When called from PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can be NULL, causing a crash. The vulnerability is limited to Denial of Service and cannot be escalated to achieve code execution or memory disclosure. Exploiting this issue requires an attacker to provide a malformed PKCS#12 file to an application that processes it. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. The PKCS12_item_decrypt_d2i_ex() function does not check whether the oct parameter is NULL before dereferencing it. When called from PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can be NULL, causing a crash. The vulnerability is limited to Denial of Service and cannot be escalated to achieve code execution or memory disclosure. Exploiting this issue requires an attacker to provide a malformed PKCS#12 file to an application that processes it. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2026-22795", "url": "https://ubuntu.com/security/CVE-2026-22795", "cve_description": "Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file. Impact summary: An application processing a malformed PKCS#12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting in a Denial of Service. A type confusion vulnerability exists in PKCS#12 parsing code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid pointer read. The location is constrained to a 1-byte address space, meaning any attempted pointer manipulation can only target addresses between 0x00 and 0xFF. This range corresponds to the zero page, which is unmapped on most modern operating systems and will reliably result in a crash, leading only to a Denial of Service. Exploiting this issue also requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For these reasons, the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue. Impact summary: An application processing a malformed PKCS#12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting in a Denial of Service. A type confusion vulnerability exists in PKCS#12 parsing code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid pointer read. The location is constrained to a 1-byte address space, meaning any attempted pointer manipulation can only target addresses between 0x00 and 0xFF. This range corresponds to the zero page, which is unmapped on most modern operating systems and will reliably result in a crash, leading only to a Denial of Service. Exploiting this issue also requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For these reasons, the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2026-22796", "url": "https://ubuntu.com/security/CVE-2026-22796", "cve_description": "Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing malformed PKCS#7 data. Impact summary: An application performing signature verification of PKCS#7 data or calling directly the PKCS7_digest_from_attributes() function can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The function PKCS7_digest_from_attributes() accesses the message digest attribute value without validating its type. When the type is not V_ASN1_OCTET_STRING, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed signed PKCS#7 to an application that verifies it. The impact of the exploit is just a Denial of Service, the PKCS7 API is legacy and applications should be using the CMS API instead. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#7 parsing implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Impact summary: An application performing signature verification of PKCS#7 data or calling directly the PKCS7_digest_from_attributes() function can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The function PKCS7_digest_from_attributes() accesses the message digest attribute value without validating its type. When the type is not V_ASN1_OCTET_STRING, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed signed PKCS#7 to an application that verifies it. The impact of the exploit is just a Denial of Service, the PKCS7 API is legacy and applications should be using the CMS API instead. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#7 parsing implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-9230", "url": "https://ubuntu.com/security/CVE-2025-9230", "cve_description": "Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service or Execution of attacker-supplied code. Although the consequences of a successful exploit of this vulnerability could be severe, the probability that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to our Security Policy. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9231", "url": "https://ubuntu.com/security/CVE-2025-9231", "cve_description": "Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private key by an attacker.. While remote key recovery over a network was not attempted by the reporter, timing measurements revealed a timing signal which may allow such an attack. OpenSSL does not directly support certificates with SM2 keys in TLS, and so this CVE is not relevant in most TLS contexts. However, given that it is possible to add support for such certificates via a custom provider, coupled with the fact that in such a custom provider context the private key may be recoverable via remote timing measurements, we consider this to be a Moderate severity issue. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as SM2 is not an approved algorithm.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9232", "url": "https://ubuntu.com/security/CVE-2025-9232", "cve_description": "Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash which leads to Denial of Service for an application. The OpenSSL HTTP client API functions can be used directly by applications but they are also used by the OCSP client functions and CMP (Certificate Management Protocol) client implementation in OpenSSL. However the URLs used by these implementations are unlikely to be controlled by an attacker. In this vulnerable code the out of bounds read can only trigger a crash. Furthermore the vulnerability requires an attacker-controlled URL to be passed from an application to the OpenSSL function and the user has to have a 'no_proxy' environment variable set. For the aforementioned reasons the issue was assessed as Low severity. The vulnerable code was introduced in the following patch releases: 3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the HTTP client implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "low", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9230", "url": "https://ubuntu.com/security/CVE-2025-9230", "cve_description": "Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service or Execution of attacker-supplied code. Although the consequences of a successful exploit of this vulnerability could be severe, the probability that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to our Security Policy. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9231", "url": "https://ubuntu.com/security/CVE-2025-9231", "cve_description": "Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private key by an attacker.. While remote key recovery over a network was not attempted by the reporter, timing measurements revealed a timing signal which may allow such an attack. OpenSSL does not directly support certificates with SM2 keys in TLS, and so this CVE is not relevant in most TLS contexts. However, given that it is possible to add support for such certificates via a custom provider, coupled with the fact that in such a custom provider context the private key may be recoverable via remote timing measurements, we consider this to be a Moderate severity issue. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as SM2 is not an approved algorithm.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9232", "url": "https://ubuntu.com/security/CVE-2025-9232", "cve_description": "Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash which leads to Denial of Service for an application. The OpenSSL HTTP client API functions can be used directly by applications but they are also used by the OCSP client functions and CMP (Certificate Management Protocol) client implementation in OpenSSL. However the URLs used by these implementations are unlikely to be controlled by an attacker. In this vulnerable code the out of bounds read can only trigger a crash. Furthermore the vulnerability requires an attacker-controlled URL to be passed from an application to the OpenSSL function and the user has to have a 'no_proxy' environment variable set. For the aforementioned reasons the issue was assessed as Low severity. The vulnerable code was introduced in the following patch releases: 3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the HTTP client implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "low", "cve_public_date": "2025-09-30 14:15:00 UTC" } ], "launchpad_bugs_fixed": [ 2141941, 2141708, 2137464, 2133492 ], "changes": [ { "cves": [], "log": [ "", " [ Eric Berry ]", " * Enable CPU jitter fluctuations", " * Detect FIPS jitterentropy mode and load jitterentropy enabled FIPS", " provider (LP: #2141941)", "", " [ Ravi Kant Sharma ]", " * Merge with Debian unstable (LP: #2141708). Remaining changes:", " - d/p/regex_match_ecp_nistp521-ppc64.patch", " - Use perl:native in the autopkgtest for installability on i386.", " - Symlink copyright/changelog.Debian.gz in libssl3* to libssl-dev/openssl", " - Disable LTO with which the codebase is generally incompatible", " (LP #2058017)", " - Default config reads crypto-config and /etc/ssl/openssl.cnf.d dropins", " - Don't enable or package anything FIPS (LP #2087955)", " - Match last filename for output in ecp_nistp521-ppc64.pl (LP #2137464)", " - Enable CPU jitter fluctuations", " - fips patches (debian/patches/fips):", " - crypto: Add kernel FIPS mode detection", " - crypto: Automatically use the FIPS provider...", " - apps/speed: Omit unavailable algorithms in FIPS mode", " - apps: pass -propquery arg to the libctx DRBG fetches", " - test: Ensure encoding runs with the correct context...", " - Add Ubuntu-specific defines to help FIPS certification (LP #2073991)", " + UBUNTU_OSSL_SELF_TEST_DESC_PCT_DH", " + UBUNTU_OSSL_PROV_FIPS_PARAM_UNAPPROVED_USAGE", " - Detect FIPS jitterentropy mode and load jitterentropy enabled FIPS", " provider", " * Refreshed patches", " - fips/test-Ensure-encoding-runs-with-the-correct-context-during.patch", " - fips/two-defines-for-fips-in-libssl-dev-headers.patch", " - fips/crypto-Automatically-use-the-FIPS-provider-when-the-kerne.patch", "" ], "package": "openssl", "version": "3.5.5-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2141941, 2141708 ], "author": "Ravi Kant Sharma ", "date": "Sun, 15 Feb 2026 14:56:21 +0100" }, { "cves": [ { "cve": "CVE-2025-11187", "url": "https://ubuntu.com/security/CVE-2025-11187", "cve_description": "Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification. Impact summary: The stack buffer overflow or NULL pointer dereference may cause a crash leading to Denial of Service for an application that parses untrusted PKCS#12 files. The buffer overflow may also potentially enable code execution depending on platform mitigations. When verifying a PKCS#12 file that uses PBMAC1 for the MAC, the PBKDF2 salt and keylength parameters from the file are used without validation. If the value of keylength exceeds the size of the fixed stack buffer used for the derived key (64 bytes), the key derivation will overflow the buffer. The overflow length is attacker-controlled. Also, if the salt parameter is not an OCTET STRING type this can lead to invalid or NULL pointer dereference. Exploiting this issue requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For this reason the issue was assessed as Moderate severity. The FIPS modules in 3.6, 3.5 and 3.4 are not affected by this issue, as PKCS#12 processing is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5 and 3.4 are vulnerable to this issue. OpenSSL 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue as they do not support PBMAC1 in PKCS#12.", "cve_priority": "medium", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-15467", "url": "https://ubuntu.com/security/CVE-2025-15467", "cve_description": "Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verifying that its length fits the destination. An attacker can supply a crafted CMS message with an oversized IV, causing a stack-based out-of-bounds write before any authentication or tag verification occurs. Applications and services that parse untrusted CMS or PKCS#7 content using AEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable. Because the overflow occurs prior to authentication, no valid key material is required to trigger it. While exploitability to remote code execution depends on platform and toolchain mitigations, the stack-based write primitive represents a severe risk. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not affected by this issue. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS AuthEnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verifying that its length fits the destination. An attacker can supply a crafted CMS message with an oversized IV, causing a stack-based out-of-bounds write before any authentication or tag verification occurs. Applications and services that parse untrusted CMS or PKCS#7 content using AEAD ciphers (e.g., S/MIME AuthEnvelopedData with AES-GCM) are vulnerable. Because the overflow occurs prior to authentication, no valid key material is required to trigger it. While exploitability to remote code execution depends on platform and toolchain mitigations, the stack-based write primitive represents a severe risk. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "medium", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-15468", "url": "https://ubuntu.com/security/CVE-2025-15468", "cve_description": "Issue summary: If an application using the SSL_CIPHER_find() function in a QUIC protocol client or server receives an unknown cipher suite from the peer, a NULL dereference occurs. Impact summary: A NULL pointer dereference leads to abnormal termination of the running process causing Denial of Service. Some applications call SSL_CIPHER_find() from the client_hello_cb callback on the cipher ID received from the peer. If this is done with an SSL object implementing the QUIC protocol, NULL pointer dereference will happen if the examined cipher ID is unknown or unsupported. As it is not very common to call this function in applications using the QUIC protocol and the worst outcome is Denial of Service, the issue was assessed as Low severity. The vulnerable code was introduced in the 3.2 version with the addition of the QUIC protocol support. The FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue, as the QUIC implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-15469", "url": "https://ubuntu.com/security/CVE-2025-15469", "cve_description": "Issue summary: The 'openssl dgst' command-line tool silently truncates input data to 16MB when using one-shot signing algorithms and reports success instead of an error. Impact summary: A user signing or verifying files larger than 16MB with one-shot algorithms (such as Ed25519, Ed448, or ML-DSA) may believe the entire file is authenticated while trailing data beyond 16MB remains unauthenticated. When the 'openssl dgst' command is used with algorithms that only support one-shot signing (Ed25519, Ed448, ML-DSA-44, ML-DSA-65, ML-DSA-87), the input is buffered with a 16MB limit. If the input exceeds this limit, the tool silently truncates to the first 16MB and continues without signaling an error, contrary to what the documentation states. This creates an integrity gap where trailing bytes can be modified without detection if both signing and verification are performed using the same affected codepath. The issue affects only the command-line tool behavior. Verifiers that process the full message using library APIs will reject the signature, so the risk primarily affects workflows that both sign and verify with the affected 'openssl dgst' command. Streaming digest algorithms for 'openssl dgst' and library users are unaffected. The FIPS modules in 3.5 and 3.6 are not affected by this issue, as the command-line tools are outside the OpenSSL FIPS module boundary. OpenSSL 3.5 and 3.6 are vulnerable to this issue. OpenSSL 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-66199", "url": "https://ubuntu.com/security/CVE-2025-66199", "cve_description": "Issue summary: A TLS 1.3 connection using certificate compression can be forced to allocate a large buffer before decompression without checking against the configured certificate size limit. Impact summary: An attacker can cause per-connection memory allocations of up to approximately 22 MiB and extra CPU work, potentially leading to service degradation or resource exhaustion (Denial of Service). In affected configurations, the peer-supplied uncompressed certificate length from a CompressedCertificate message is used to grow a heap buffer prior to decompression. This length is not bounded by the max_cert_list setting, which otherwise constrains certificate message sizes. An attacker can exploit this to cause large per-connection allocations followed by handshake failure. No memory corruption or information disclosure occurs. This issue only affects builds where TLS 1.3 certificate compression is compiled in (i.e., not OPENSSL_NO_COMP_ALG) and at least one compression algorithm (brotli, zlib, or zstd) is available, and where the compression extension is negotiated. Both clients receiving a server CompressedCertificate and servers in mutual TLS scenarios receiving a client CompressedCertificate are affected. Servers that do not request client certificates are not vulnerable to client-initiated attacks. Users can mitigate this issue by setting SSL_OP_NO_RX_CERTIFICATE_COMPRESSION to disable receiving compressed certificates. The FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue, as the TLS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-68160", "url": "https://ubuntu.com/security/CVE-2025-68160", "cve_description": "Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds write. Impact summary: This out-of-bounds write can cause memory corruption which typically results in a crash, leading to Denial of Service for an application. The line-buffering BIO filter (BIO_f_linebuffer) is not used by default in TLS/SSL data paths. In OpenSSL command-line applications, it is typically only pushed onto stdout/stderr on VMS systems. Third-party applications that explicitly use this filter with a BIO chain that can short-write and that write large, newline-free data influenced by an attacker would be affected. However, the circumstances where this could happen are unlikely to be under attacker control, and BIO_f_linebuffer is unlikely to be handling non-curated data controlled by an attacker. For that reason the issue was assessed as Low severity. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the BIO implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Impact summary: This out-of-bounds write can cause memory corruption which typically results in a crash, leading to Denial of Service for an application. The line-buffering BIO filter (BIO_f_linebuffer) is not used by default in TLS/SSL data paths. In OpenSSL command-line applications, it is typically only pushed onto stdout/stderr on VMS systems. Third-party applications that explicitly use this filter with a BIO chain that can short-write and that write large, newline-free data influenced by an attacker would be affected. However, the circumstances where this could happen are unlikely to be under attacker control, and BIO_f_linebuffer is unlikely to be handling non-curated data controlled by an attacker. For that reason the issue was assessed as Low severity. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the BIO implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69418", "url": "https://ubuntu.com/security/CVE-2025-69418", "cve_description": "Issue summary: When using the low-level OCB API directly with AES-NI or
other hardware-accelerated code paths, inputs whose length is not a multiple
of 16 bytes can leave the final partial block unencrypted and unauthenticated.

Impact summary: The trailing 1-15 bytes of a message may be exposed in
cleartext on encryption and are not covered by the authentication tag,
allowing an attacker to read or tamper with those bytes without detection.

The low-level OCB encrypt and decrypt routines in the hardware-accelerated
stream path process full 16-byte blocks but do not advance the input/output
pointers. The subsequent tail-handling code then operates on the original
base pointers, effectively reprocessing the beginning of the buffer while
leaving the actual trailing bytes unprocessed. The authentication checksum
also excludes the true tail bytes.

However, typical OpenSSL consumers using EVP are not affected because the
higher-level EVP and provider OCB implementations split inputs so that full
blocks and trailing partial blocks are processed in separate calls, avoiding
the problematic code path. Additionally, TLS does not use OCB ciphersuites.
The vulnerability only affects applications that call the low-level
CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with
non-block-aligned lengths in a single call on hardware-accelerated builds.
For these reasons the issue was assessed as Low severity.

The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected
by this issue, as OCB mode is not a FIPS-approved algorithm.

OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.

OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69419", "url": "https://ubuntu.com/security/CVE-2025-69419", "cve_description": "Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service. The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12 BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 source byte count as the destination buffer capacity to UTF8_putc(). For BMP code points above U+07FF, UTF-8 requires three bytes, but the forwarded capacity can be just two bytes. UTF8_putc() then returns -1, and this negative value is added to the output length without validation, causing the length to become negative. The subsequent trailing NUL byte is then written at a negative offset, causing write outside of heap allocated buffer. The vulnerability is reachable via the public PKCS12_get_friendlyname() API when parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a different code path that avoids this issue, PKCS12_get_friendlyname() directly invokes the vulnerable function. Exploitation requires an attacker to provide a malicious PKCS#12 file to be parsed by the application and the attacker can just trigger a one zero byte write before the allocated buffer. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue. Impact summary: The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service. The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12 BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 source byte count as the destination buffer capacity to UTF8_putc(). For BMP code points above U+07FF, UTF-8 requires three bytes, but the forwarded capacity can be just two bytes. UTF8_putc() then returns -1, and this negative value is added to the output length without validation, causing the length to become negative. The subsequent trailing NUL byte is then written at a negative offset, causing write outside of heap allocated buffer. The vulnerability is reachable via the public PKCS12_get_friendlyname() API when parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a different code path that avoids this issue, PKCS12_get_friendlyname() directly invokes the vulnerable function. Exploitation requires an attacker to provide a malicious PKCS#12 file to be parsed by the application and the attacker can just trigger a one zero byte write before the allocated buffer. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69420", "url": "https://ubuntu.com/security/CVE-2025-69420", "cve_description": "Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file. Impact summary: An application calling TS_RESP_verify_response() with a malformed TimeStamp Response can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2() access the signing cert attribute value without validating its type. When the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed TimeStamp Response to an application that verifies timestamp responses. The TimeStamp protocol (RFC 3161) is not widely used and the impact of the exploit is just a Denial of Service. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the TimeStamp Response implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue. Impact summary: An application calling TS_RESP_verify_response() with a malformed TimeStamp Response can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2() access the signing cert attribute value without validating its type. When the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed TimeStamp Response to an application that verifies timestamp responses. The TimeStamp protocol (RFC 3161) is not widely used and the impact of the exploit is just a Denial of Service. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the TimeStamp Response implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69421", "url": "https://ubuntu.com/security/CVE-2025-69421", "cve_description": "Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. The PKCS12_item_decrypt_d2i_ex() function does not check whether the oct parameter is NULL before dereferencing it. When called from PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can be NULL, causing a crash. The vulnerability is limited to Denial of Service and cannot be escalated to achieve code execution or memory disclosure. Exploiting this issue requires an attacker to provide a malformed PKCS#12 file to an application that processes it. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. The PKCS12_item_decrypt_d2i_ex() function does not check whether the oct parameter is NULL before dereferencing it. When called from PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can be NULL, causing a crash. The vulnerability is limited to Denial of Service and cannot be escalated to achieve code execution or memory disclosure. Exploiting this issue requires an attacker to provide a malformed PKCS#12 file to an application that processes it. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2026-22795", "url": "https://ubuntu.com/security/CVE-2026-22795", "cve_description": "Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file. Impact summary: An application processing a malformed PKCS#12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting in a Denial of Service. A type confusion vulnerability exists in PKCS#12 parsing code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid pointer read. The location is constrained to a 1-byte address space, meaning any attempted pointer manipulation can only target addresses between 0x00 and 0xFF. This range corresponds to the zero page, which is unmapped on most modern operating systems and will reliably result in a crash, leading only to a Denial of Service. Exploiting this issue also requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For these reasons, the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue. Impact summary: An application processing a malformed PKCS#12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting in a Denial of Service. A type confusion vulnerability exists in PKCS#12 parsing code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid pointer read. The location is constrained to a 1-byte address space, meaning any attempted pointer manipulation can only target addresses between 0x00 and 0xFF. This range corresponds to the zero page, which is unmapped on most modern operating systems and will reliably result in a crash, leading only to a Denial of Service. Exploiting this issue also requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For these reasons, the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2026-22796", "url": "https://ubuntu.com/security/CVE-2026-22796", "cve_description": "Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing malformed PKCS#7 data. Impact summary: An application performing signature verification of PKCS#7 data or calling directly the PKCS7_digest_from_attributes() function can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The function PKCS7_digest_from_attributes() accesses the message digest attribute value without validating its type. When the type is not V_ASN1_OCTET_STRING, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed signed PKCS#7 to an application that verifies it. The impact of the exploit is just a Denial of Service, the PKCS7 API is legacy and applications should be using the CMS API instead. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#7 parsing implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Impact summary: An application performing signature verification of PKCS#7 data or calling directly the PKCS7_digest_from_attributes() function can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The function PKCS7_digest_from_attributes() accesses the message digest attribute value without validating its type. When the type is not V_ASN1_OCTET_STRING, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed signed PKCS#7 to an application that verifies it. The impact of the exploit is just a Denial of Service, the PKCS7 API is legacy and applications should be using the CMS API instead. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#7 parsing implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" } ], "log": [ "", " * Import 3.5.5", " - CVE-2025-11187 (Improper validation of PBMAC1 parameters in PKCS#12 MAC", " verification)", " - CVE-2025-15467 (Stack buffer overflow in CMS AuthEnvelopedData parsing)", " - CVE-2025-15468 (NULL dereference in SSL_CIPHER_find() function on unknown", " cipher ID)", " - CVE-2025-15469 (\"openssl dgst\" one-shot codepath silently truncates inputs", " >16MB)", " - CVE-2025-66199 (TLS 1.3 CompressedCertificate excessive memory allocation)", " - CVE-2025-68160 (Heap out-of-bounds write in BIO_f_linebuffer on short", " writes)", " - CVE-2025-69418 (Unauthenticated/unencrypted trailing bytes with low-level", " OCB function calls)", " - CVE-2025-69419 (Out of bounds write in PKCS12_get_friendlyname() UTF-8", " conversion)", " - CVE-2025-69420 (Missing ASN1_TYPE validation in TS_RESP_verify_response()", " function)", " - CVE-2025-69421 (NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex", " function)", " - CVE-2026-22795 (Missing ASN1_TYPE validation in PKCS#12 parsing)", " - CVE-2026-22796 (ASN1_TYPE Type Confusion in the", " - PKCS7_digest_from_attributes() function)", "" ], "package": "openssl", "version": "3.5.5-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Sebastian Andrzej Siewior ", "date": "Tue, 27 Jan 2026 21:09:55 +0100" }, { "cves": [ { "cve": "CVE-2025-9230", "url": "https://ubuntu.com/security/CVE-2025-9230", "cve_description": "Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service or Execution of attacker-supplied code. Although the consequences of a successful exploit of this vulnerability could be severe, the probability that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to our Security Policy. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9231", "url": "https://ubuntu.com/security/CVE-2025-9231", "cve_description": "Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private key by an attacker.. While remote key recovery over a network was not attempted by the reporter, timing measurements revealed a timing signal which may allow such an attack. OpenSSL does not directly support certificates with SM2 keys in TLS, and so this CVE is not relevant in most TLS contexts. However, given that it is possible to add support for such certificates via a custom provider, coupled with the fact that in such a custom provider context the private key may be recoverable via remote timing measurements, we consider this to be a Moderate severity issue. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as SM2 is not an approved algorithm.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9232", "url": "https://ubuntu.com/security/CVE-2025-9232", "cve_description": "Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash which leads to Denial of Service for an application. The OpenSSL HTTP client API functions can be used directly by applications but they are also used by the OCSP client functions and CMP (Certificate Management Protocol) client implementation in OpenSSL. However the URLs used by these implementations are unlikely to be controlled by an attacker. In this vulnerable code the out of bounds read can only trigger a crash. Furthermore the vulnerability requires an attacker-controlled URL to be passed from an application to the OpenSSL function and the user has to have a 'no_proxy' environment variable set. For the aforementioned reasons the issue was assessed as Low severity. The vulnerable code was introduced in the following patch releases: 3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the HTTP client implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "low", "cve_public_date": "2025-09-30 14:15:00 UTC" } ], "log": [ "", " * Match last filename for output in ecp_nistp521-ppc64.pl (LP: #2137464)", " - d/p/regex_match_ecp_nistp521-ppc64.patch", " * Drop patches, merged upstream", " - d/p/CVE-2025-9230.patch", " - d/p/CVE-2025-9231-1.patch", " - d/p/CVE-2025-9231-2.patch", " - d/p/CVE-2025-9232.patch ", " * Merge with Debian unstable (LP: #2133492). Remaining changes:", " - Use perl:native in the autopkgtest for installability on i386.", " - Symlink copyright/changelog.Debian.gz in libssl3* to libssl-dev/openssl", " - Disable LTO with which the codebase is generally incompatible (LP #2058017)", " - Default config reads crypto-config and /etc/ssl/openssl.cnf.d dropins", " - Don't enable or package anything FIPS (LP #2087955)", " - Match last filename for output in ecp_nistp521-ppc64.pl (LP #2137464)", " - fips patches (debian/patches/fips):", " - crypto: Add kernel FIPS mode detection", " - crypto: Automatically use the FIPS provider...", " - apps/speed: Omit unavailable algorithms in FIPS mode", " - apps: pass -propquery arg to the libctx DRBG fetches", " - test: Ensure encoding runs with the correct context...", " - Add Ubuntu-specific defines to help FIPS certification (LP #2073991)", " + UBUNTU_OSSL_SELF_TEST_DESC_PCT_DH", " + UBUNTU_OSSL_PROV_FIPS_PARAM_UNAPPROVED_USAGE", "" ], "package": "openssl", "version": "3.5.4-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2137464, 2133492 ], "author": "Ravi Kant Sharma ", "date": "Thu, 08 Jan 2026 15:53:39 +0100" }, { "cves": [ { "cve": "CVE-2025-9230", "url": "https://ubuntu.com/security/CVE-2025-9230", "cve_description": "Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service or Execution of attacker-supplied code. Although the consequences of a successful exploit of this vulnerability could be severe, the probability that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to our Security Policy. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9231", "url": "https://ubuntu.com/security/CVE-2025-9231", "cve_description": "Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private key by an attacker.. While remote key recovery over a network was not attempted by the reporter, timing measurements revealed a timing signal which may allow such an attack. OpenSSL does not directly support certificates with SM2 keys in TLS, and so this CVE is not relevant in most TLS contexts. However, given that it is possible to add support for such certificates via a custom provider, coupled with the fact that in such a custom provider context the private key may be recoverable via remote timing measurements, we consider this to be a Moderate severity issue. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as SM2 is not an approved algorithm.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9232", "url": "https://ubuntu.com/security/CVE-2025-9232", "cve_description": "Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash which leads to Denial of Service for an application. The OpenSSL HTTP client API functions can be used directly by applications but they are also used by the OCSP client functions and CMP (Certificate Management Protocol) client implementation in OpenSSL. However the URLs used by these implementations are unlikely to be controlled by an attacker. In this vulnerable code the out of bounds read can only trigger a crash. Furthermore the vulnerability requires an attacker-controlled URL to be passed from an application to the OpenSSL function and the user has to have a 'no_proxy' environment variable set. For the aforementioned reasons the issue was assessed as Low severity. The vulnerable code was introduced in the following patch releases: 3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the HTTP client implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "low", "cve_public_date": "2025-09-30 14:15:00 UTC" } ], "log": [ "", " * Import 3.5.4", " - CVE-2025-9230 (Out-of-bounds read & write in RFC 3211 KEK Unwrap)", " - CVE-2025-9231 (Timing side-channel in SM2 algorithm on 64 bit ARM)", " - CVE-2025-9232 (Out-of-bounds read in HTTP client no_proxy handling)", "" ], "package": "openssl", "version": "3.5.4-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Sebastian Andrzej Siewior ", "date": "Tue, 30 Sep 2025 21:54:39 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "libstdc++6:riscv64", "from_version": { "source_package_name": "gcc-15", "source_package_version": "15.2.0-12ubuntu1", "version": "15.2.0-12ubuntu1" }, "to_version": { "source_package_name": "gcc-16", "source_package_version": "16-20260315-1ubuntu1", "version": "16-20260315-1ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", " - Work-around the 80GB chroot size on the Ubuntu buildds.", "" ], "package": "gcc-16", "version": "16-20260315-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 15 Mar 2026 13:22:54 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260315).", " * Pass configure flags for libgcobol cross builds.", " * For backports, require binutils (>= 2.40) on riscv64.", " * libga68-dev: Depend on libgc-dev. Closes: #1130580.", " * Fix PR ada/107475 also for armhf and s390x.", " * Disable dwz on alpha, see PR dwz/33990.", " * Refresh patches.", " * Update libgcc-s, libcc1, lib*asan, liblsan, libtsan and libgcobol", " symbol files.", "" ], "package": "gcc-16", "version": "16-20260315-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 15 Mar 2026 13:17:23 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260308).", " * On riscv64, default again to RVA23.", " * Disable bootstrap build on riscv64 entirely for a quick build.", "" ], "package": "gcc-16", "version": "16-20260308-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 08 Mar 2026 09:49:05 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260308).", " * Refresh cross-installation-location patch.", "" ], "package": "gcc-16", "version": "16-20260308-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 08 Mar 2026 09:34:40 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260307).", " * libsanitizer/TSan: Fix determining static TLS blocks. Addresses: #1126312.", " * Refresh patches.", "" ], "package": "gcc-16", "version": "16-20260307-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sat, 07 Mar 2026 09:07:18 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260226).", " * On riscv64, default again to RVA23.", "" ], "package": "gcc-16", "version": "16-20260226-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 26 Feb 2026 06:09:01 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260226). Also closes: #1128648.", " * Disable again profiled+lto build on armhf.", " * Fix s390x backport builds.", " * Disable dwz on riscv64, see https://sourceware.org/bugzilla/show_bug.cgi?id=33929.", " * Disable profiled+lto build. See https://gcc.gnu.org/PR124238.", "" ], "package": "gcc-16", "version": "16-20260226-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 26 Feb 2026 06:00:27 +0100" }, { "cves": [], "log": [ "", " * Disable again profiled+lto build on armhf.", "" ], "package": "gcc-16", "version": "16-20260217-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Wed, 18 Feb 2026 08:29:24 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", " - Work-around the 80GB chroot size on the Ubuntu buildds.", " * On riscv64, default to rv64gc, RVA23 is currently broken.", " See PR target/124048.", "" ], "package": "gcc-16", "version": "16-20260217-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 17 Feb 2026 09:09:19 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260217).", " * Fix build when building without common libraries.", " * Re-enable profiled+lto build on armhf to check for PR target/119937.", " * Update GFDL+ doc file removal.", "" ], "package": "gcc-16", "version": "16-20260217-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 17 Feb 2026 08:25:09 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260210).", " * Fix build when building without common libraries.", "" ], "package": "gcc-16", "version": "16-20260210-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 10 Feb 2026 01:42:25 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", " - Work-around the 80GB chroot size on the Ubuntu buildds.", "" ], "package": "gcc-16", "version": "16-20260208-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 08 Feb 2026 13:09:34 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260208).", "" ], "package": "gcc-16", "version": "16-20260208-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 08 Feb 2026 11:23:36 +0100" }, { "cves": [], "log": [ "", " * Ignore dh_shlibdeps failure for libcc1 for now.", "" ], "package": "gcc-16", "version": "16-20260207-2", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sat, 07 Feb 2026 17:11:49 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260207).", " * Update sh4 LRA patches (Adrian Glaubitz). Closes: #1126958.", " * Build again gnat cross compiler for sh4.", " * Update libcc1 and libgphobos symbols files.", "" ], "package": "gcc-16", "version": "16-20260207-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sat, 07 Feb 2026 11:25:14 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", " - Work-around the 80GB chroot size on the Ubuntu buildds.", "" ], "package": "gcc-16", "version": "16-20260203-2ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 03 Feb 2026 17:10:34 +0100" }, { "cves": [], "log": [ "", " * Apply proposed patch for PR d/123953, fixing ftbfs on ppc64le.", "" ], "package": "gcc-16", "version": "16-20260203-2", "urgency": "medium", "distributions": "expperimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 03 Feb 2026 16:45:07 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260203).", " * Update newlib to 4.6.0.20260123.", " * Allow configuring libxml2 include and lib directories.", " * Build-depend on libxml2-source for the cross builds, and generate", " Built-Using for libgcobol built using libxml2-source.", " * Update libga68 and libgcobol symbols files.", " * d/tests/control: Update dependencies for 16 (Michael R. Crusoe).", " Closes: #1126131.", " * Add again build dependency on python3-check-jsonschema, needed for tests.", " * Fix D #22463: SOURCE_DATE_EPOCH parsing incorrectly affected by system", " timezone. Addresses: #1126512.", " * Add the results of the usage-wrapper into the binary packages.", " * Require 6GB memory/CPU for Ubuntu/riscv64 builds. Failing builds without", " build logs.", " * Refresh patches.", " * Update libgphobos7 symbols file for amd64.", "" ], "package": "gcc-16", "version": "16-20260203-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 03 Feb 2026 12:04:58 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", " - Work-around the 80GB chroot size on the Ubuntu buildds.", "" ], "package": "gcc-16", "version": "16-20260119-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Mon, 19 Jan 2026 10:32:42 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260119).", " * lib*gcc-N-dev: Install lib{atomic,gcc_s}_asneeded linker scripts.", " * Import updated sanitizer symbols files from GCC 15.", " * Enable PAC/BTI/GCS on arm64 for libgfortran (Emanuele Rocca).", " Closes: #1123084.", " * Don't complain about missing gccrs and gcobc man pages.", "" ], "package": "gcc-16", "version": "16-20260119-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Mon, 19 Jan 2026 10:29:59 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251214).", " * Log the available disk space for the build.", " * Disable cobol for cross builds for now. Requires a libxml2 build", " for the target.", " * Build liblsan and libtsan on s390x.", " * Work-around the 80GB chroot size on the Ubuntu buildds.", "" ], "package": "gcc-16", "version": "16-20251214-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 14 Dec 2025 09:21:28 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251210).", "" ], "package": "gcc-16", "version": "16-20251210-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Wed, 10 Dec 2025 12:17:05 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251210).", " * Don't rely on python3-check-jsonschema for testing, still having", " unpackaged dependencies.", " * Disable profiled build on powerpc for now.", "" ], "package": "gcc-16", "version": "16-20251210-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Wed, 10 Dec 2025 12:13:23 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251202).", "" ], "package": "gcc-16", "version": "16-20251202-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 02 Dec 2025 16:55:42 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251202).", " * Install Algol-68 upstream changelogs.", " * d/NEWS.html: Update for 16, the test file NEWS.gcc is still for 15.", " * d/p/ada-tv_nsec-size.diff: Update for 16. Upstream status?", " * d/copyright*: Update download locations.", " * Override so wrong lintian error about size of Binary field length.", " * Disabled profiled build on i386, see PR ada/122934.", " * Update libhwasan, liblsan, libtsan and libubsan symbols files.", "" ], "package": "gcc-16", "version": "16-20251202-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 02 Dec 2025 16:51:01 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251130).", "" ], "package": "gcc-16", "version": "16-20251130-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 30 Nov 2025 22:33:13 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251130).", " * Build using amdgcn-tools-21 instead of -19.", " * Update build dependencies for gcobol.", " * Disable profiled build on armhf. See PR target/121821, PR target/122815.", " * Update libga68, libgfortran, libgomp and libstdc++ symbols files.", " * Explicitly bump the libgphobos soname.", " * Refresh patches.", " * Fix some lintian warnings, override some more.", "" ], "package": "gcc-16", "version": "16-20251130-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 30 Nov 2025 15:14:37 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251123).", "" ], "package": "gcc-16", "version": "16-20251123-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 23 Nov 2025 12:49:38 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20251123).", " * Build using amdgcn-tools-21 instead of -19.", "" ], "package": "gcc-16", "version": "16-20251123-1", "urgency": "medium", "distributions": "UNRELEASED", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 23 Nov 2025 08:54:26 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libsystemd-shared:riscv64", "from_version": { "source_package_name": "systemd", "source_package_version": "259-1ubuntu3", "version": "259-1ubuntu3" }, "to_version": { "source_package_name": "systemd", "source_package_version": "259.5-0ubuntu1", "version": "259.5-0ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2144032, 2143010, 2142900, 2142428, 2077538, 2142306, 2139822 ], "changes": [ { "cves": [], "log": [ "", " [ Nick Rosbrook ]", " * New upstream stable version 259.5", " - Update upstream source from tag 'upstream/259.5'", " Update to upstream version '259.5'", " with Debian dir 1076161727931a7063674200c474ec7747a5177f", " - Bug fixes", "", " [ Oliver Reiche ]", " * Fix issue overwriting /tmp on dist-upgrade (LP: #2144032)", "" ], "package": "systemd", "version": "259.5-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144032 ], "author": "Nick Rosbrook ", "date": "Fri, 13 Mar 2026 12:27:31 -0400" }, { "cves": [], "log": [ "", " * New upstream stable version 259.3", " - Update upstream source from tag 'upstream/259.3'", " Update to upstream version '259.3'", " with Debian dir 4fea3198a053eb40e77ea3ad3c3be030151f3f46", " - Bug fixes", "" ], "package": "systemd", "version": "259.3-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Fri, 06 Mar 2026 09:05:25 -0500" }, { "cves": [], "log": [ "", " * Tag KFD and ACCEL devices for uaccess (LP: #2143010)", " * d/control: Add missing dh-dlopenlibdeps to b-d", "" ], "package": "systemd", "version": "259.2-0ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143010 ], "author": "Mario Limonciello ", "date": "Tue, 03 Mar 2026 12:06:36 -0600" }, { "cves": [], "log": [ "", " * New upstream stable version 259.2", " - Bug fixes", " - Update upstream source from tag 'upstream/259.2'", " Update to upstream version '259.2'", " with Debian dir c25e0517a7a4ebd6d9009de0cf949dd265182a67", " - Drop lp2142428-seccomp-util-add-lsm_get_self_attr-and-lsm_list_modules-t.patch.", " Applied upstream: https://github.com/systemd/systemd/commit/515816197e", " * test: use gnuenv to workaround broken --block-signal= (LP: #2142900)", "" ], "package": "systemd", "version": "259.2-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142900 ], "author": "Nick Rosbrook ", "date": "Fri, 27 Feb 2026 09:20:52 -0500" }, { "cves": [], "log": [ "", " [ Nick Rosbrook ]", " * seccomp-util: add lsm_get_self_attr and lsm_list_modules to @default", " (LP: #2142428)", "", " [ Alessandro Astone ]", " * d/p/lp2077538: Grant GPU rendering access to GNOME Remote Desktop", " (LP: #2077538, LP: #2142306)", "" ], "package": "systemd", "version": "259.1-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142428, 2077538, 2142306 ], "author": "Nick Rosbrook ", "date": "Wed, 25 Feb 2026 10:32:56 -0500" }, { "cves": [], "log": [ "", " * Merge with Debian unstable. Remaining changes:", " - debian/systemd.postinst:", " + manually call systemd-tmpfiles --create in postinst", " - debian/control:", " + Add Recommends: systemd-resolved to systemd package", " + Make systemd-cryptsetup Priority: important", " + Give systemd-resolved Priority: important", " + Add Recommends: systemd-hwe-hwdb to udev package", " + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved", " + Do not build systemd-boot-efi-{amd64,arm64}-signed-template", " + d/control: demote systemd-userdbd to Suggests for libnss-systemd", " - d/rules: disable bpf support on riscv64 for now (LP #2099864)", " - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028)", " - Delta for i386:", " + debian/systemd.install: exclude files that are not built for i386", " + debian/systemd.manpages: do not ship un-built manpages on i386", " + debian/rules,debian/control,debian/tests/control:", " Do not build with tpm libraries on i386", " + debian/rules,debian/control,debian/tests/control:", " Do not build with libqrencode on i386", " + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors", " - debian/libnss-systemd.*:", " + debian/libnss-systemd.nss: install after 'compat' too (LP #2125403)", " + debian/libnss-systemd.preinst: force nsswitch.conf update", " Drop systemd instances in nsswitch.conf, and force postinst to", " re-generate the file (LP #2121017)", " + debian/linbnss-systemd.nss: Install systemd service after files.", " As suggested by upstream the systemd NSS service should come just after", " files", " - debian/tests:", " + d/t/boot-and-services: use coreutils tunable in apparmor test (LP #2125614)", " + d/t/upstream: skip TEST-08-INITRD on Ubuntu (LP #2136419)", " - debian/patches:", " + switch-root: use MS_MOVE for /run when switchig from initrd", " + test: skip TEST-50-DISSECT.dissect (LP #2116460)", " + test: skip TEST-13-NSPAWN.{nspawn,machined} (LP #2136413)", " * Dropped changes, included upstream:", " - lp2136497-test-use-journalctl-n-option-instead-of-piping-to-head.patch", " Applied upstream: https://github.com/systemd/systemd/commit/2c661e5f0d", " - lp2136408-test-cope-with-uutils-coreutils-flag-parsing-for-date-com.patch", " Applied upstream: https://github.com/systemd/systemd/commit/a45dad1aa5", " - test-disable-pipefail-again-in-monitor_check_rr.patch", " Applied upstream: https://github.com/systemd/systemd/commit/ce35956b3a", " - resolve-include-current-DNS-server-in-JSON-again.patch", " Applied upstream: https://github.com/systemd/systemd/commit/0de941f937", " - lp2133402-ukify-omit-.osrel-section-when-os-release-is-empty.patch", " Applied upstream: https://github.com/systemd/systemd/commit/798a27a5b4", " * Dropped changes, no longer needed:", " - d/t/upstream: use GNU cp in test setup (LP #2122363)", " Fixed in rust-coreutils 0.5.0", " - lp2136752-test-workaround-uutils-dd-broken-pipe.patch", " Fixed in rust-coreutils 0.6.0", " * New changes:", " - d/libsystemd-shared.preinst: refuse to upgrade without unified cgroupv2 hierarchy", "" ], "package": "systemd", "version": "259.1-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Tue, 10 Feb 2026 14:05:53 -0500" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * Drop dependencies on libcap-dev, no longer used since v259", " * Mark sd-userdbd as Multi-Arch: foreign (Closes: #1123615)", " * Use dh_installsystemd more to manage units. Ensure more units are", " handled as they are added to various packages", " * Use dh_installsystemd to handle journald and networkd", " * Use deb-systemd-invoke to reexec instead of manual calls. Allows the", " tool to handle the complications and use varlink where available", " * Increase number of sections of sd-stub on amd64 too. The default limit", " breaks adding more than 28 sections, which can happen with a UKI with", " many optional profiles. Bump it on amd64 too, at the cost of an extra", " ~80KB in size on the stub.", " * Update upstream source from tag 'upstream/259.1' Update to upstream", " version '259.1' with Debian dir", " f7a9425f1024ef75b5020a216f6be3d0af9ac227", " * Restrict the tpm2-generator manpage to arches where it is built", " * Install ask-password polkit policy file", "", " [ Yu Watanabe ]", " * Drop use of deprecated options. These options are deprecated since", " v258.", "", " [ Nick Rosbrook ]", " * d/control: have systemd-boot depend on efibootmgr for amd64 and arm64", " only", " * d/tests: drop tests-in-lxd", " * d/control: make systemd-container Depends: libarchive13t64. This is", " needed for e.g. systemd-import-generator + rd.systemd.pull= to work", " properly. Dracut would like to be able to use that feature reliably", " when systemd-importd is available, so explicitly depend on libarchive.", " Currently, it is only a Suggests of libsystemd-shared via dlopen", " machinery. (LP: #2139822)", "" ], "package": "systemd", "version": "259.1-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2139822 ], "author": "Luca Boccassi ", "date": "Fri, 06 Feb 2026 18:37:22 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "libsystemd0:riscv64", "from_version": { "source_package_name": "systemd", "source_package_version": "259-1ubuntu3", "version": "259-1ubuntu3" }, "to_version": { "source_package_name": "systemd", "source_package_version": "259.5-0ubuntu1", "version": "259.5-0ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2144032, 2143010, 2142900, 2142428, 2077538, 2142306, 2139822 ], "changes": [ { "cves": [], "log": [ "", " [ Nick Rosbrook ]", " * New upstream stable version 259.5", " - Update upstream source from tag 'upstream/259.5'", " Update to upstream version '259.5'", " with Debian dir 1076161727931a7063674200c474ec7747a5177f", " - Bug fixes", "", " [ Oliver Reiche ]", " * Fix issue overwriting /tmp on dist-upgrade (LP: #2144032)", "" ], "package": "systemd", "version": "259.5-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144032 ], "author": "Nick Rosbrook ", "date": "Fri, 13 Mar 2026 12:27:31 -0400" }, { "cves": [], "log": [ "", " * New upstream stable version 259.3", " - Update upstream source from tag 'upstream/259.3'", " Update to upstream version '259.3'", " with Debian dir 4fea3198a053eb40e77ea3ad3c3be030151f3f46", " - Bug fixes", "" ], "package": "systemd", "version": "259.3-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Fri, 06 Mar 2026 09:05:25 -0500" }, { "cves": [], "log": [ "", " * Tag KFD and ACCEL devices for uaccess (LP: #2143010)", " * d/control: Add missing dh-dlopenlibdeps to b-d", "" ], "package": "systemd", "version": "259.2-0ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143010 ], "author": "Mario Limonciello ", "date": "Tue, 03 Mar 2026 12:06:36 -0600" }, { "cves": [], "log": [ "", " * New upstream stable version 259.2", " - Bug fixes", " - Update upstream source from tag 'upstream/259.2'", " Update to upstream version '259.2'", " with Debian dir c25e0517a7a4ebd6d9009de0cf949dd265182a67", " - Drop lp2142428-seccomp-util-add-lsm_get_self_attr-and-lsm_list_modules-t.patch.", " Applied upstream: https://github.com/systemd/systemd/commit/515816197e", " * test: use gnuenv to workaround broken --block-signal= (LP: #2142900)", "" ], "package": "systemd", "version": "259.2-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142900 ], "author": "Nick Rosbrook ", "date": "Fri, 27 Feb 2026 09:20:52 -0500" }, { "cves": [], "log": [ "", " [ Nick Rosbrook ]", " * seccomp-util: add lsm_get_self_attr and lsm_list_modules to @default", " (LP: #2142428)", "", " [ Alessandro Astone ]", " * d/p/lp2077538: Grant GPU rendering access to GNOME Remote Desktop", " (LP: #2077538, LP: #2142306)", "" ], "package": "systemd", "version": "259.1-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142428, 2077538, 2142306 ], "author": "Nick Rosbrook ", "date": "Wed, 25 Feb 2026 10:32:56 -0500" }, { "cves": [], "log": [ "", " * Merge with Debian unstable. Remaining changes:", " - debian/systemd.postinst:", " + manually call systemd-tmpfiles --create in postinst", " - debian/control:", " + Add Recommends: systemd-resolved to systemd package", " + Make systemd-cryptsetup Priority: important", " + Give systemd-resolved Priority: important", " + Add Recommends: systemd-hwe-hwdb to udev package", " + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved", " + Do not build systemd-boot-efi-{amd64,arm64}-signed-template", " + d/control: demote systemd-userdbd to Suggests for libnss-systemd", " - d/rules: disable bpf support on riscv64 for now (LP #2099864)", " - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028)", " - Delta for i386:", " + debian/systemd.install: exclude files that are not built for i386", " + debian/systemd.manpages: do not ship un-built manpages on i386", " + debian/rules,debian/control,debian/tests/control:", " Do not build with tpm libraries on i386", " + debian/rules,debian/control,debian/tests/control:", " Do not build with libqrencode on i386", " + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors", " - debian/libnss-systemd.*:", " + debian/libnss-systemd.nss: install after 'compat' too (LP #2125403)", " + debian/libnss-systemd.preinst: force nsswitch.conf update", " Drop systemd instances in nsswitch.conf, and force postinst to", " re-generate the file (LP #2121017)", " + debian/linbnss-systemd.nss: Install systemd service after files.", " As suggested by upstream the systemd NSS service should come just after", " files", " - debian/tests:", " + d/t/boot-and-services: use coreutils tunable in apparmor test (LP #2125614)", " + d/t/upstream: skip TEST-08-INITRD on Ubuntu (LP #2136419)", " - debian/patches:", " + switch-root: use MS_MOVE for /run when switchig from initrd", " + test: skip TEST-50-DISSECT.dissect (LP #2116460)", " + test: skip TEST-13-NSPAWN.{nspawn,machined} (LP #2136413)", " * Dropped changes, included upstream:", " - lp2136497-test-use-journalctl-n-option-instead-of-piping-to-head.patch", " Applied upstream: https://github.com/systemd/systemd/commit/2c661e5f0d", " - lp2136408-test-cope-with-uutils-coreutils-flag-parsing-for-date-com.patch", " Applied upstream: https://github.com/systemd/systemd/commit/a45dad1aa5", " - test-disable-pipefail-again-in-monitor_check_rr.patch", " Applied upstream: https://github.com/systemd/systemd/commit/ce35956b3a", " - resolve-include-current-DNS-server-in-JSON-again.patch", " Applied upstream: https://github.com/systemd/systemd/commit/0de941f937", " - lp2133402-ukify-omit-.osrel-section-when-os-release-is-empty.patch", " Applied upstream: https://github.com/systemd/systemd/commit/798a27a5b4", " * Dropped changes, no longer needed:", " - d/t/upstream: use GNU cp in test setup (LP #2122363)", " Fixed in rust-coreutils 0.5.0", " - lp2136752-test-workaround-uutils-dd-broken-pipe.patch", " Fixed in rust-coreutils 0.6.0", " * New changes:", " - d/libsystemd-shared.preinst: refuse to upgrade without unified cgroupv2 hierarchy", "" ], "package": "systemd", "version": "259.1-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Tue, 10 Feb 2026 14:05:53 -0500" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * Drop dependencies on libcap-dev, no longer used since v259", " * Mark sd-userdbd as Multi-Arch: foreign (Closes: #1123615)", " * Use dh_installsystemd more to manage units. Ensure more units are", " handled as they are added to various packages", " * Use dh_installsystemd to handle journald and networkd", " * Use deb-systemd-invoke to reexec instead of manual calls. Allows the", " tool to handle the complications and use varlink where available", " * Increase number of sections of sd-stub on amd64 too. The default limit", " breaks adding more than 28 sections, which can happen with a UKI with", " many optional profiles. Bump it on amd64 too, at the cost of an extra", " ~80KB in size on the stub.", " * Update upstream source from tag 'upstream/259.1' Update to upstream", " version '259.1' with Debian dir", " f7a9425f1024ef75b5020a216f6be3d0af9ac227", " * Restrict the tpm2-generator manpage to arches where it is built", " * Install ask-password polkit policy file", "", " [ Yu Watanabe ]", " * Drop use of deprecated options. These options are deprecated since", " v258.", "", " [ Nick Rosbrook ]", " * d/control: have systemd-boot depend on efibootmgr for amd64 and arm64", " only", " * d/tests: drop tests-in-lxd", " * d/control: make systemd-container Depends: libarchive13t64. This is", " needed for e.g. systemd-import-generator + rd.systemd.pull= to work", " properly. Dracut would like to be able to use that feature reliably", " when systemd-importd is available, so explicitly depend on libarchive.", " Currently, it is only a Suggests of libsystemd-shared via dlopen", " machinery. (LP: #2139822)", "" ], "package": "systemd", "version": "259.1-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2139822 ], "author": "Luca Boccassi ", "date": "Fri, 06 Feb 2026 18:37:22 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "libtirpc-common", "from_version": { "source_package_name": "libtirpc", "source_package_version": "1.3.6+ds-1", "version": "1.3.6+ds-1" }, "to_version": { "source_package_name": "libtirpc", "source_package_version": "1.3.6+ds-1ubuntu1", "version": "1.3.6+ds-1ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2124967 ], "changes": [ { "cves": [], "log": [ "", " * Cherry-pick upstream commits to fix FTBFS with GCC 15", " (LP: #2124967)", "" ], "package": "libtirpc", "version": "1.3.6+ds-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2124967 ], "author": "Graham Inggs ", "date": "Wed, 18 Feb 2026 19:05:07 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "libtirpc3t64:riscv64", "from_version": { "source_package_name": "libtirpc", "source_package_version": "1.3.6+ds-1", "version": "1.3.6+ds-1" }, "to_version": { "source_package_name": "libtirpc", "source_package_version": "1.3.6+ds-1ubuntu1", "version": "1.3.6+ds-1ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2124967 ], "changes": [ { "cves": [], "log": [ "", " * Cherry-pick upstream commits to fix FTBFS with GCC 15", " (LP: #2124967)", "" ], "package": "libtirpc", "version": "1.3.6+ds-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2124967 ], "author": "Graham Inggs ", "date": "Wed, 18 Feb 2026 19:05:07 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "libudev1:riscv64", "from_version": { "source_package_name": "systemd", "source_package_version": "259-1ubuntu3", "version": "259-1ubuntu3" }, "to_version": { "source_package_name": "systemd", "source_package_version": "259.5-0ubuntu1", "version": "259.5-0ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2144032, 2143010, 2142900, 2142428, 2077538, 2142306, 2139822 ], "changes": [ { "cves": [], "log": [ "", " [ Nick Rosbrook ]", " * New upstream stable version 259.5", " - Update upstream source from tag 'upstream/259.5'", " Update to upstream version '259.5'", " with Debian dir 1076161727931a7063674200c474ec7747a5177f", " - Bug fixes", "", " [ Oliver Reiche ]", " * Fix issue overwriting /tmp on dist-upgrade (LP: #2144032)", "" ], "package": "systemd", "version": "259.5-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144032 ], "author": "Nick Rosbrook ", "date": "Fri, 13 Mar 2026 12:27:31 -0400" }, { "cves": [], "log": [ "", " * New upstream stable version 259.3", " - Update upstream source from tag 'upstream/259.3'", " Update to upstream version '259.3'", " with Debian dir 4fea3198a053eb40e77ea3ad3c3be030151f3f46", " - Bug fixes", "" ], "package": "systemd", "version": "259.3-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Fri, 06 Mar 2026 09:05:25 -0500" }, { "cves": [], "log": [ "", " * Tag KFD and ACCEL devices for uaccess (LP: #2143010)", " * d/control: Add missing dh-dlopenlibdeps to b-d", "" ], "package": "systemd", "version": "259.2-0ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143010 ], "author": "Mario Limonciello ", "date": "Tue, 03 Mar 2026 12:06:36 -0600" }, { "cves": [], "log": [ "", " * New upstream stable version 259.2", " - Bug fixes", " - Update upstream source from tag 'upstream/259.2'", " Update to upstream version '259.2'", " with Debian dir c25e0517a7a4ebd6d9009de0cf949dd265182a67", " - Drop lp2142428-seccomp-util-add-lsm_get_self_attr-and-lsm_list_modules-t.patch.", " Applied upstream: https://github.com/systemd/systemd/commit/515816197e", " * test: use gnuenv to workaround broken --block-signal= (LP: #2142900)", "" ], "package": "systemd", "version": "259.2-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142900 ], "author": "Nick Rosbrook ", "date": "Fri, 27 Feb 2026 09:20:52 -0500" }, { "cves": [], "log": [ "", " [ Nick Rosbrook ]", " * seccomp-util: add lsm_get_self_attr and lsm_list_modules to @default", " (LP: #2142428)", "", " [ Alessandro Astone ]", " * d/p/lp2077538: Grant GPU rendering access to GNOME Remote Desktop", " (LP: #2077538, LP: #2142306)", "" ], "package": "systemd", "version": "259.1-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142428, 2077538, 2142306 ], "author": "Nick Rosbrook ", "date": "Wed, 25 Feb 2026 10:32:56 -0500" }, { "cves": [], "log": [ "", " * Merge with Debian unstable. Remaining changes:", " - debian/systemd.postinst:", " + manually call systemd-tmpfiles --create in postinst", " - debian/control:", " + Add Recommends: systemd-resolved to systemd package", " + Make systemd-cryptsetup Priority: important", " + Give systemd-resolved Priority: important", " + Add Recommends: systemd-hwe-hwdb to udev package", " + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved", " + Do not build systemd-boot-efi-{amd64,arm64}-signed-template", " + d/control: demote systemd-userdbd to Suggests for libnss-systemd", " - d/rules: disable bpf support on riscv64 for now (LP #2099864)", " - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028)", " - Delta for i386:", " + debian/systemd.install: exclude files that are not built for i386", " + debian/systemd.manpages: do not ship un-built manpages on i386", " + debian/rules,debian/control,debian/tests/control:", " Do not build with tpm libraries on i386", " + debian/rules,debian/control,debian/tests/control:", " Do not build with libqrencode on i386", " + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors", " - debian/libnss-systemd.*:", " + debian/libnss-systemd.nss: install after 'compat' too (LP #2125403)", " + debian/libnss-systemd.preinst: force nsswitch.conf update", " Drop systemd instances in nsswitch.conf, and force postinst to", " re-generate the file (LP #2121017)", " + debian/linbnss-systemd.nss: Install systemd service after files.", " As suggested by upstream the systemd NSS service should come just after", " files", " - debian/tests:", " + d/t/boot-and-services: use coreutils tunable in apparmor test (LP #2125614)", " + d/t/upstream: skip TEST-08-INITRD on Ubuntu (LP #2136419)", " - debian/patches:", " + switch-root: use MS_MOVE for /run when switchig from initrd", " + test: skip TEST-50-DISSECT.dissect (LP #2116460)", " + test: skip TEST-13-NSPAWN.{nspawn,machined} (LP #2136413)", " * Dropped changes, included upstream:", " - lp2136497-test-use-journalctl-n-option-instead-of-piping-to-head.patch", " Applied upstream: https://github.com/systemd/systemd/commit/2c661e5f0d", " - lp2136408-test-cope-with-uutils-coreutils-flag-parsing-for-date-com.patch", " Applied upstream: https://github.com/systemd/systemd/commit/a45dad1aa5", " - test-disable-pipefail-again-in-monitor_check_rr.patch", " Applied upstream: https://github.com/systemd/systemd/commit/ce35956b3a", " - resolve-include-current-DNS-server-in-JSON-again.patch", " Applied upstream: https://github.com/systemd/systemd/commit/0de941f937", " - lp2133402-ukify-omit-.osrel-section-when-os-release-is-empty.patch", " Applied upstream: https://github.com/systemd/systemd/commit/798a27a5b4", " * Dropped changes, no longer needed:", " - d/t/upstream: use GNU cp in test setup (LP #2122363)", " Fixed in rust-coreutils 0.5.0", " - lp2136752-test-workaround-uutils-dd-broken-pipe.patch", " Fixed in rust-coreutils 0.6.0", " * New changes:", " - d/libsystemd-shared.preinst: refuse to upgrade without unified cgroupv2 hierarchy", "" ], "package": "systemd", "version": "259.1-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Tue, 10 Feb 2026 14:05:53 -0500" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * Drop dependencies on libcap-dev, no longer used since v259", " * Mark sd-userdbd as Multi-Arch: foreign (Closes: #1123615)", " * Use dh_installsystemd more to manage units. Ensure more units are", " handled as they are added to various packages", " * Use dh_installsystemd to handle journald and networkd", " * Use deb-systemd-invoke to reexec instead of manual calls. Allows the", " tool to handle the complications and use varlink where available", " * Increase number of sections of sd-stub on amd64 too. The default limit", " breaks adding more than 28 sections, which can happen with a UKI with", " many optional profiles. Bump it on amd64 too, at the cost of an extra", " ~80KB in size on the stub.", " * Update upstream source from tag 'upstream/259.1' Update to upstream", " version '259.1' with Debian dir", " f7a9425f1024ef75b5020a216f6be3d0af9ac227", " * Restrict the tpm2-generator manpage to arches where it is built", " * Install ask-password polkit policy file", "", " [ Yu Watanabe ]", " * Drop use of deprecated options. These options are deprecated since", " v258.", "", " [ Nick Rosbrook ]", " * d/control: have systemd-boot depend on efibootmgr for amd64 and arm64", " only", " * d/tests: drop tests-in-lxd", " * d/control: make systemd-container Depends: libarchive13t64. This is", " needed for e.g. systemd-import-generator + rd.systemd.pull= to work", " properly. Dracut would like to be able to use that feature reliably", " when systemd-importd is available, so explicitly depend on libarchive.", " Currently, it is only a Suggests of libsystemd-shared via dlopen", " machinery. (LP: #2139822)", "" ], "package": "systemd", "version": "259.1-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2139822 ], "author": "Luca Boccassi ", "date": "Fri, 06 Feb 2026 18:37:22 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "libudisks2-0:riscv64", "from_version": { "source_package_name": "udisks2", "source_package_version": "2.10.91-1ubuntu1", "version": "2.10.91-1ubuntu1" }, "to_version": { "source_package_name": "udisks2", "source_package_version": "2.10.91-1ubuntu2", "version": "2.10.91-1ubuntu2" }, "cves": [ { "cve": "CVE-2026-26103", "url": "https://ubuntu.com/security/CVE-2026-26103", "cve_description": "A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks. The issue allows a local unprivileged user to instruct the root-owned udisks daemon to overwrite encryption metadata on block devices. This can permanently invalidate encryption keys and render encrypted volumes inaccessible. Successful exploitation results in a denial-of-service condition through irreversible data loss.", "cve_priority": "medium", "cve_public_date": "2026-02-25 11:16:00 UTC" }, { "cve": "CVE-2026-26104", "url": "https://ubuntu.com/security/CVE-2026-26104", "cve_description": "A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization. The issue occurs because a privileged D-Bus method responsible for exporting encryption metadata does not perform a policy check. As a result, sensitive cryptographic metadata can be read and written to attacker-controlled locations. This weakens the confidentiality guarantees of encrypted storage volumes.", "cve_priority": "medium", "cve_public_date": "2026-02-25 11:16:00 UTC" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-26103", "url": "https://ubuntu.com/security/CVE-2026-26103", "cve_description": "A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks. The issue allows a local unprivileged user to instruct the root-owned udisks daemon to overwrite encryption metadata on block devices. This can permanently invalidate encryption keys and render encrypted volumes inaccessible. Successful exploitation results in a denial-of-service condition through irreversible data loss.", "cve_priority": "medium", "cve_public_date": "2026-02-25 11:16:00 UTC" }, { "cve": "CVE-2026-26104", "url": "https://ubuntu.com/security/CVE-2026-26104", "cve_description": "A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization. The issue occurs because a privileged D-Bus method responsible for exporting encryption metadata does not perform a policy check. As a result, sensitive cryptographic metadata can be read and written to attacker-controlled locations. This weakens the confidentiality guarantees of encrypted storage volumes.", "cve_priority": "medium", "cve_public_date": "2026-02-25 11:16:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: Missing polkit permission checks", " - debian/patches/CVE-2026-26103.patch: Add missing polkit check for", " RestoreEncryptedHeader().", " - debian/patches/CVE-2026-26104.patch: Add missing polkit check for", " HeaderBackup()", " - CVE-2026-26103", " - CVE-2026-26104", "" ], "package": "udisks2", "version": "2.10.91-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Thu, 26 Feb 2026 13:05:58 -0500" } ], "notes": null, "is_version_downgrade": false }, { "name": "libunistring5:riscv64", "from_version": { "source_package_name": "libunistring", "source_package_version": "1.3-2", "version": "1.3-2" }, "to_version": { "source_package_name": "libunistring", "source_package_version": "1.3-2build1", "version": "1.3-2build1" }, "cves": [], "launchpad_bugs_fixed": [ 2132257 ], "changes": [ { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "libunistring", "version": "1.3-2build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:42:57 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libuuid1:riscv64", "from_version": { "source_package_name": "util-linux", "source_package_version": "2.41.2-4ubuntu3", "version": "2.41.2-4ubuntu3" }, "to_version": { "source_package_name": "util-linux", "source_package_version": "2.41.3-3ubuntu2", "version": "2.41.3-3ubuntu2" }, "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" }, { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2142050 ], "changes": [ { "cves": [], "log": [ "", " * d/p/ubuntu/su-pty-drop-caps.patch: harden 'su --pty' to temporarily lower", " capabilities while proxying between stdin/stdout and the pty master. This", " is to avoid su from being used to exploit kernel vulnerabilities.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Fri, 13 Mar 2026 07:09:23 -0400" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Merge with Debian unstable (LP: #2142050). Remaining changes:", " - Add sulogin-fallback-static-sh.patch", " Add support for /bin/static-sh as fallback if the regular shell fails to", " execute. Patch ported from sysvinit. (see LP #505887)", " - Add sulogin-lockedpwd.patch", " Make sure file systems can be fixed on machines with locked root", " accounts (as Ubuntu does by default). Don't require --force for sulogin.", " - d/rules: disable libmount mountfs support", " Disable brand new feature with --disable-libmount-mountfd-support that", " causes inability to deploy MAAS LP #2037417.", " * Dropped changes applied upstream:", " - SECURITY UPDATE: heap overread with 256-byte usernames", " + debian/patches/CVE-2025-14104-1.patch: add length check in", " login-utils/setpwnam.c.", " + debian/patches/CVE-2025-14104-2.patch: update buflen in", " login-utils/setpwnam.c.", " + CVE-2025-14104", " * Dropped changes as they were no longer necessary:", " - d/p/ubuntu/lp-2030793-make-check-pidfd.patch", " This patch only effected kernel versions below 5.15 which are not", " available on resolute.", " - d/p/u/lp-2112552-tests-mark-mkfds-multiplexing-as-known-fail.patch", " The underlying bug was addressed in rust-coreutils.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142050 ], "author": "Ural Tunaboyu ", "date": "Sun, 15 Feb 2026 17:43:12 -0800" }, { "cves": [], "log": [ "", " * d/libsmartcols1.symbols: drop terminal crap", " * d/rules: make dpkg-gensymbols more strict", " * lintian: ignore groff-message tags", " * lintian: ignore groff-message tags in remaining packages", " * Add upstream patches", " * unshare: fix user namespace bind mounts", " * unshare: remove get_mnt_ino() check in bind_ns_files_from_child()", " * unshare: add --owner to set user namespace owner uid and gid", " * libfdisk: modernize ZFS GPT type description", "" ], "package": "util-linux", "version": "2.41.3-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 31 Dec 2025 13:06:28 +0100" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * util-linux: do not fail postinst/prerm if update-alternatives is missing", "" ], "package": "util-linux", "version": "2.41.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 17 Dec 2025 10:42:28 +0100" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Stop installing lastlog2-import.service", " * New upstream release, fixing CVE-2025-14104. (Closes: #1122058)", "" ], "package": "util-linux", "version": "2.41.3-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Tue, 16 Dec 2025 20:37:41 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libvolume-key1:riscv64", "from_version": { "source_package_name": "volume-key", "source_package_version": "0.3.12-10", "version": "0.3.12-10" }, "to_version": { "source_package_name": "volume-key", "source_package_version": "0.3.12-10build2", "version": "0.3.12-10build2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild for gpgme1.0 2.0", "" ], "package": "volume-key", "version": "0.3.12-10build2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Ural Tunaboyu ", "date": "Thu, 19 Feb 2026 18:57:59 +0000" }, { "cves": [], "log": [ "", " * No-change rebuild with Python 3.14 as default", "" ], "package": "volume-key", "version": "0.3.12-10build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Graham Inggs ", "date": "Thu, 22 Jan 2026 22:05:19 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "libxml2-16:riscv64", "from_version": { "source_package_name": "libxml2", "source_package_version": "2.15.1+dfsg-2ubuntu1", "version": "2.15.1+dfsg-2ubuntu1" }, "to_version": { "source_package_name": "libxml2", "source_package_version": "2.15.2+dfsg-0.1", "version": "2.15.2+dfsg-0.1" }, "cves": [ { "cve": "CVE-2026-1757", "url": "https://ubuntu.com/security/CVE-2026-1757", "cve_description": "A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to free the allocated buffer. Repeating this action causes memory to continuously accumulate. Over time, this can exhaust system memory and terminate the xmllint process, creating a denial-of-service condition on the local system.", "cve_priority": "low", "cve_public_date": "2026-02-02 13:15:00 UTC" }, { "cve": "CVE-2026-0990", "url": "https://ubuntu.com/security/CVE-2026-0990", "cve_description": "A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML catalog contains a delegate URI entry that references itself. A remote attacker could exploit this configuration-dependent issue by providing a specially crafted XML catalog, leading to infinite recursion and call stack exhaustion. This ultimately results in a segmentation fault, causing a Denial of Service (DoS) by crashing affected applications.", "cve_priority": "medium", "cve_public_date": "2026-01-15 15:15:00 UTC" }, { "cve": "CVE-2026-0992", "url": "https://ubuntu.com/security/CVE-2026-0992", "cve_description": "A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition.", "cve_priority": "medium", "cve_public_date": "2026-01-15 15:15:00 UTC" }, { "cve": "CVE-2025-10911", "url": "https://ubuntu.com/security/CVE-2025-10911", "cve_description": "A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.", "cve_priority": "medium", "cve_public_date": "2025-09-25 16:15:00 UTC" }, { "cve": "CVE-2026-0989", "url": "https://ubuntu.com/security/CVE-2026-0989", "cve_description": "A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk.", "cve_priority": "medium", "cve_public_date": "2026-01-15 15:15:00 UTC" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-1757", "url": "https://ubuntu.com/security/CVE-2026-1757", "cve_description": "A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to free the allocated buffer. Repeating this action causes memory to continuously accumulate. Over time, this can exhaust system memory and terminate the xmllint process, creating a denial-of-service condition on the local system.", "cve_priority": "low", "cve_public_date": "2026-02-02 13:15:00 UTC" }, { "cve": "CVE-2026-0990", "url": "https://ubuntu.com/security/CVE-2026-0990", "cve_description": "A flaw was found in libxml2, an XML parsing library. This uncontrolled recursion vulnerability occurs in the xmlCatalogXMLResolveURI function when an XML catalog contains a delegate URI entry that references itself. A remote attacker could exploit this configuration-dependent issue by providing a specially crafted XML catalog, leading to infinite recursion and call stack exhaustion. This ultimately results in a segmentation fault, causing a Denial of Service (DoS) by crashing affected applications.", "cve_priority": "medium", "cve_public_date": "2026-01-15 15:15:00 UTC" }, { "cve": "CVE-2026-0992", "url": "https://ubuntu.com/security/CVE-2026-0992", "cve_description": "A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to redundantly traverse catalog chains. This leads to excessive CPU consumption and degrades application availability, resulting in a denial-of-service condition.", "cve_priority": "medium", "cve_public_date": "2026-01-15 15:15:00 UTC" }, { "cve": "CVE-2025-10911", "url": "https://ubuntu.com/security/CVE-2025-10911", "cve_description": "A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the dereference of expired pointers and application crash.", "cve_priority": "medium", "cve_public_date": "2025-09-25 16:15:00 UTC" }, { "cve": "CVE-2026-0989", "url": "https://ubuntu.com/security/CVE-2026-0989", "cve_description": "A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk.", "cve_priority": "medium", "cve_public_date": "2026-01-15 15:15:00 UTC" } ], "log": [ "", " * Non-maintainer upload.", " * New upstream bug fix release.", " Security issues:", " - CVE-2026-1757 fix: Memory leak in xmllint Shell - shell.c", " - CVE-2026-0990 fix: Prevent infinite recursion in", " xmlCatalogListXMLResolve. Closes: #1125695.", " - CVE-2026-0992 fix: Exponential behavior when handling", " parser: Fix infinite loop in xmlCtxtParseContent. Closes: #1125696.", " - CVE-2025-10911 libxslt related: Ignore next/prev of documents when", " traversing XPath", " - CVE-2026-0989 fix: Add RelaxNG include limit. Closes: #1125691.", " - xmlIO: use size_t for buffer size reallocation", " - uri: fix signed integer overflow in xmlBuildRelativeURISafe", " - schematron: fix memory leaks on error paths in xmlSchematronParseRule", " - catalog: fix stack overflow from self-referencing SGML CATALOG entries", " Improvements", " - fuzz: Make fuzzy encoding match more lenient", " - Fix C14N type confusion", " - meson: Fix build with Meson < 1.3", " - xmllint: Use zlib directly", " - xmllint: New option to separate xpath results using null, --xpath0", " - autotools: Make valgrind actually check for leaks", " - meson: Add valgrind test setup", " - Fix xmlOutputBufferGetContent output when encoder is set", " - threads: don't force _WIN32_WINNT to Vista if it's set to a higher value", " - dist: Add generated documentation to the dist as \"dist-doc\" folder", " to simplify downstream packaging of doc", " - Fix xmlRemoveEntity removing from wrong hash table", " - use duplicating variant in relaxng to mitigate UAF", " - Fix memory leak in xmlTextWriterStartAttributeNS on OOM", " - meson: remove hardcoded buildtype=debug default", " - Fix memory leak of prefix in xmlTextWriterStartElementNS()", " - writer: Add a few extra NULL checks to avoid memory leaks on corrupt", " writer path.", " * Update symbols file.", " * Don't include the sources twice in the libxml2-source package.", " * Bump standards version.", "" ], "package": "libxml2", "version": "2.15.2+dfsg-0.1", "urgency": "high", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Wed, 25 Mar 2026 14:30:48 +0100" }, { "cves": [], "log": [ "", " * No-change rebuild to drop Python 3.13 bits.", "" ], "package": "libxml2", "version": "2.15.1+dfsg-2ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 20 Mar 2026 12:02:28 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "linux-base", "from_version": { "source_package_name": "linux-base", "source_package_version": "4.15ubuntu3", "version": "4.15ubuntu3" }, "to_version": { "source_package_name": "linux-base", "source_package_version": "4.15ubuntu4", "version": "4.15ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * apport/source_linux.py: Always attach 'dpkg --list'", "" ], "package": "linux-base", "version": "4.15ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Juerg Haefliger ", "date": "Tue, 03 Mar 2026 13:01:59 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "linux-headers-generic", "from_version": { "source_package_name": "linux-meta-riscv", "source_package_version": "6.17.0-5.5.1", "version": "6.17.0-5.5.1" }, "to_version": { "source_package_name": "linux-meta-riscv", "source_package_version": "7.0.0-7.7.1", "version": "7.0.0-7.7.1" }, "cves": [], "launchpad_bugs_fixed": [ 1786013, 1786013, 1786013 ], "changes": [ { "cves": [], "log": [ "", " * Main version: 7.0.0-7.7.1", "", " * Packaging resync (LP: #1786013)", " - [Packaging] debian/dkms-versions -- resync from main package", "" ], "package": "linux-meta-riscv", "version": "7.0.0-7.7.1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 1786013 ], "author": "Sarah Emery ", "date": "Thu, 12 Mar 2026 16:49:38 +0100" }, { "cves": [], "log": [ "", " * Main version: 7.0.0-7.7.0", "" ], "package": "linux-meta-riscv", "version": "7.0.0-7.7.0", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Sarah Emery ", "date": "Thu, 12 Mar 2026 15:30:50 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-16.16.1", "", " * Packaging resync (LP: #1786013)", " - [Packaging] debian/dkms-versions -- resync from main package", "" ], "package": "linux-meta-riscv", "version": "6.17.0-16.16.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 1786013 ], "author": "Sarah Emery ", "date": "Thu, 12 Feb 2026 14:49:03 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-14.14.1", "", " * Packaging resync (LP: #1786013)", " - [Packaging] debian/dkms-versions -- resync from main package", "" ], "package": "linux-meta-riscv", "version": "6.17.0-14.14.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 1786013 ], "author": "Sarah Emery ", "date": "Fri, 23 Jan 2026 09:49:19 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-12.12.1", "" ], "package": "linux-meta-riscv", "version": "6.17.0-12.12.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Sarah Emery ", "date": "Thu, 15 Jan 2026 11:09:30 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-9.9.1", "" ], "package": "linux-meta-riscv", "version": "6.17.0-9.9.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Emil Renner Berthing ", "date": "Thu, 04 Dec 2025 16:25:17 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-8.8.1", "" ], "package": "linux-meta-riscv", "version": "6.17.0-8.8.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Sarah Emery ", "date": "Fri, 21 Nov 2025 18:48:31 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-7.7.1", "" ], "package": "linux-meta-riscv", "version": "6.17.0-7.7.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Emil Renner Berthing ", "date": "Tue, 28 Oct 2025 18:47:36 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-6.6.1", "" ], "package": "linux-meta-riscv", "version": "6.17.0-6.6.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Timo Aaltonen ", "date": "Fri, 10 Oct 2025 10:17:11 +0300" } ], "notes": null, "is_version_downgrade": false }, { "name": "linux-headers-virtual", "from_version": { "source_package_name": "linux-meta-riscv", "source_package_version": "6.17.0-5.5.1", "version": "6.17.0-5.5.1" }, "to_version": { "source_package_name": "linux-meta-riscv", "source_package_version": "7.0.0-7.7.1", "version": "7.0.0-7.7.1" }, "cves": [], "launchpad_bugs_fixed": [ 1786013, 1786013, 1786013 ], "changes": [ { "cves": [], "log": [ "", " * Main version: 7.0.0-7.7.1", "", " * Packaging resync (LP: #1786013)", " - [Packaging] debian/dkms-versions -- resync from main package", "" ], "package": "linux-meta-riscv", "version": "7.0.0-7.7.1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 1786013 ], "author": "Sarah Emery ", "date": "Thu, 12 Mar 2026 16:49:38 +0100" }, { "cves": [], "log": [ "", " * Main version: 7.0.0-7.7.0", "" ], "package": "linux-meta-riscv", "version": "7.0.0-7.7.0", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Sarah Emery ", "date": "Thu, 12 Mar 2026 15:30:50 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-16.16.1", "", " * Packaging resync (LP: #1786013)", " - [Packaging] debian/dkms-versions -- resync from main package", "" ], "package": "linux-meta-riscv", "version": "6.17.0-16.16.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 1786013 ], "author": "Sarah Emery ", "date": "Thu, 12 Feb 2026 14:49:03 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-14.14.1", "", " * Packaging resync (LP: #1786013)", " - [Packaging] debian/dkms-versions -- resync from main package", "" ], "package": "linux-meta-riscv", "version": "6.17.0-14.14.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 1786013 ], "author": "Sarah Emery ", "date": "Fri, 23 Jan 2026 09:49:19 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-12.12.1", "" ], "package": "linux-meta-riscv", "version": "6.17.0-12.12.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Sarah Emery ", "date": "Thu, 15 Jan 2026 11:09:30 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-9.9.1", "" ], "package": "linux-meta-riscv", "version": "6.17.0-9.9.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Emil Renner Berthing ", "date": "Thu, 04 Dec 2025 16:25:17 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-8.8.1", "" ], "package": "linux-meta-riscv", "version": "6.17.0-8.8.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Sarah Emery ", "date": "Fri, 21 Nov 2025 18:48:31 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-7.7.1", "" ], "package": "linux-meta-riscv", "version": "6.17.0-7.7.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Emil Renner Berthing ", "date": "Tue, 28 Oct 2025 18:47:36 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-6.6.1", "" ], "package": "linux-meta-riscv", "version": "6.17.0-6.6.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Timo Aaltonen ", "date": "Fri, 10 Oct 2025 10:17:11 +0300" } ], "notes": null, "is_version_downgrade": false }, { "name": "linux-image-virtual", "from_version": { "source_package_name": "linux-meta-riscv", "source_package_version": "6.17.0-5.5.1", "version": "6.17.0-5.5.1" }, "to_version": { "source_package_name": "linux-meta-riscv", "source_package_version": "7.0.0-7.7.1", "version": "7.0.0-7.7.1" }, "cves": [], "launchpad_bugs_fixed": [ 1786013, 1786013, 1786013 ], "changes": [ { "cves": [], "log": [ "", " * Main version: 7.0.0-7.7.1", "", " * Packaging resync (LP: #1786013)", " - [Packaging] debian/dkms-versions -- resync from main package", "" ], "package": "linux-meta-riscv", "version": "7.0.0-7.7.1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 1786013 ], "author": "Sarah Emery ", "date": "Thu, 12 Mar 2026 16:49:38 +0100" }, { "cves": [], "log": [ "", " * Main version: 7.0.0-7.7.0", "" ], "package": "linux-meta-riscv", "version": "7.0.0-7.7.0", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Sarah Emery ", "date": "Thu, 12 Mar 2026 15:30:50 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-16.16.1", "", " * Packaging resync (LP: #1786013)", " - [Packaging] debian/dkms-versions -- resync from main package", "" ], "package": "linux-meta-riscv", "version": "6.17.0-16.16.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 1786013 ], "author": "Sarah Emery ", "date": "Thu, 12 Feb 2026 14:49:03 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-14.14.1", "", " * Packaging resync (LP: #1786013)", " - [Packaging] debian/dkms-versions -- resync from main package", "" ], "package": "linux-meta-riscv", "version": "6.17.0-14.14.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 1786013 ], "author": "Sarah Emery ", "date": "Fri, 23 Jan 2026 09:49:19 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-12.12.1", "" ], "package": "linux-meta-riscv", "version": "6.17.0-12.12.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Sarah Emery ", "date": "Thu, 15 Jan 2026 11:09:30 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-9.9.1", "" ], "package": "linux-meta-riscv", "version": "6.17.0-9.9.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Emil Renner Berthing ", "date": "Thu, 04 Dec 2025 16:25:17 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-8.8.1", "" ], "package": "linux-meta-riscv", "version": "6.17.0-8.8.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Sarah Emery ", "date": "Fri, 21 Nov 2025 18:48:31 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-7.7.1", "" ], "package": "linux-meta-riscv", "version": "6.17.0-7.7.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Emil Renner Berthing ", "date": "Tue, 28 Oct 2025 18:47:36 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-6.6.1", "" ], "package": "linux-meta-riscv", "version": "6.17.0-6.6.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Timo Aaltonen ", "date": "Fri, 10 Oct 2025 10:17:11 +0300" } ], "notes": null, "is_version_downgrade": false }, { "name": "linux-perf", "from_version": { "source_package_name": "linux", "source_package_version": "6.19.0-6.6", "version": "6.19.0-6.6" }, "to_version": { "source_package_name": "linux", "source_package_version": "7.0.0-10.10", "version": "7.0.0-10.10" }, "cves": [], "launchpad_bugs_fixed": [ 2144865, 2144735, 2142775, 2144652, 2143197, 2139276, 2143974, 1990064, 2142956, 2141298, 2028253, 2028253, 2102680, 2028253, 2032602, 2143243, 2143203, 2110092, 2143745, 2143700, 2143181, 2143123, 2141276, 2106681, 2121347, 2138328, 2143020, 2142764, 2142402 ], "changes": [ { "cves": [], "log": [ "", " * resolute/linux: 7.0.0-10.10 -proposed tracker (LP: #2144865)", "", " * Miscellaneous upstream changes", " - Revert \"powerpc: fix KUAP warning in VMX usercopy path\"", "" ], "package": "linux", "version": "7.0.0-10.10", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144865 ], "author": "Paolo Pisati ", "date": "Thu, 19 Mar 2026 09:44:11 +0100" }, { "cves": [], "log": [ "", " * resolute/linux: 7.0.0-9.9 -proposed tracker (LP: #2144735)", "", " * Please make dracut the default initrd generator (LP: #2142775)", " - [Packaging] recommends dracut instead of initramfs-tools", "", " * Miscellaneous Ubuntu changes", " - SAUCE: Change RISC-V target to RVA23 (riscv64a23-unknown-linux-gnu)", "" ], "package": "linux", "version": "7.0.0-9.9", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144735, 2142775 ], "author": "Paolo Pisati ", "date": "Wed, 18 Mar 2026 13:11:06 +0100" }, { "cves": [], "log": [ "", " * resolute/linux: 7.0.0-8.8 -proposed tracker (LP: #2144652)", "", " * UBUNTU: SAUCE: igc: Increase Thunderbolt MAC passthrough delay to 1000ms", " (LP: #2143197)", " - SAUCE: igc: Increase Thunderbolt MAC passthrough delay to 1000ms", "", " * [usrmerge] evaluate kernel owned packages for DEP17 compliance", " (LP: #2139276)", " - [Packaging] Install modules in /usr/lib/modules", "", " * Miscellaneous Ubuntu changes", " - [Config] hardening: enable LIST_HARDENED", " - [Config] hardening: disable LDISC_AUTOLOAD", " - [Config] hardening: disable LEGACY_PTYS", " - [Config] updateconfigs following v7.0-rc4 rebase", "" ], "package": "linux", "version": "7.0.0-8.8", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144652, 2143197, 2139276 ], "author": "Paolo Pisati ", "date": "Tue, 17 Mar 2026 18:01:36 +0100" }, { "cves": [], "log": [ "", " * resolute/linux: 7.0.0-7.7 -proposed tracker (LP: #2143974)", "", " * unconfined profile denies userns_create for chromium based processes", " (LP: #1990064)", " - [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS", "", " * Jellyfin Desktop Flatpak doesn't work with the current AppArmor profile", " (LP: #2142956)", " - SAUCE: apparmor5.0.0 [29/29]: apparmor: fix fine grained inet mediation", " sock_file_perm", "", " * AppArmor blocks write(2) to network sockets with Linux 6.19 (LP: #2141298)", " - SAUCE: apparmor5.0.0 [28/29]: apparmor: fix aa_label_sk_perm to check", " for RULE_MEDIATES_NET", "", " * update apparmor and LSM stacking patch set (LP: #2028253)", " - SAUCE: apparmor5.0.0 [1/29]: Stacking: LSM: Single calls in secid hooks", " - SAUCE: apparmor5.0.0 [2/29]: Stacking: LSM: Exclusive secmark usage", " - SAUCE: apparmor5.0.0 [3/29]: Stacking: AppArmor: Remove the exclusive", " flag", " - SAUCE: apparmor5.0.0 [4/29]: Revert \"apparmor: fix dbus permission", " queries to v9 ABI\"", " - SAUCE: apparmor5.0.0 [5/29]: Revert \"apparmor: gate make fine grained", " unix mediation behind v9 abi\"", " - SAUCE: apparmor5.0.0 [6/29]: apparmor: net: patch to provide", " compatibility with v2.x net rules", " - SAUCE: apparmor5.0.0 [7/29]: apparmor: net: add fine grained ipv4/ipv6", " mediation", " - SAUCE: apparmor5.0.0 [8/29]: apparmor: lift compatibility check out of", " profile_af_perm", " - SAUCE: apparmor5.0.0 [9/29]: apparmor: userns: add unprivileged user ns", " mediation", " - SAUCE: apparmor5.0.0 [10/29]: apparmor: userns: Add sysctls for", " additional controls of unpriv userns restrictions", " - SAUCE: apparmor5.0.0 [12/29]: apparmor: userns: open userns related", " sysctl so lxc can check if restriction are in place", " - SAUCE: apparmor5.0.0 [13/29]: apparmor: userns: allow profile to be", " transitioned when a userns is created", " - SAUCE: apparmor5.0.0 [14/29]: apparmor: mqueue: call", " security_inode_init_security on inode creation", " - SAUCE: apparmor5.0.0 [15/29]: apparmor: mqueue: add fine grained", " mediation of posix mqueues", " - SAUCE: apparmor5.0.0 [16/29]: apparmor: uring: add io_uring mediation", " - SAUCE: apparmor5.0.0 [19/29]: apparmor: prompt: setup slab cache for", " audit data", " - SAUCE: apparmor5.0.0 [20/29]: apparmor: prompt: add the ability for", " profiles to have a learning cache", " - SAUCE: apparmor5.0.0 [21/29]: apparmor: prompt: enable userspace upcall", " for mediation", " - SAUCE: apparmor5.0.0 [22/29]: apparmor: prompt: pass prompt boolean", " through into path_name as well", " - SAUCE: apparmor5.0.0 [23/29]: apparmor: check for supported version in", " notification messages.", " - SAUCE: apparmor5.0.0 [24/29]: apparmor: refactor building notice so it", " is easier to extend", " - SAUCE: apparmor5.0.0 [25/29]: apparmor: switch from ENOTSUPP to", " EPROTONOSUPPORT", " - SAUCE: apparmor5.0.0 [26/29]: apparmor: add support for meta data tags", " - SAUCE: apparmor5.0.0 [27/29]: apparmor: prevent profile->disconnected", " double free in aa_free_profile", "", " * update apparmor and LSM stacking patch set (LP: #2028253) // Installation", " of AppArmor on a 6.14 kernel produces error message \"Illegal number: yes\"", " (LP: #2102680)", " - SAUCE: apparmor5.0.0 [17/29]: apparmor: create an", " AA_SFS_TYPE_BOOLEAN_INTPRINT sysctl variant", " - SAUCE: apparmor5.0.0 [18/29]: apparmor: Use AA_SFS_FILE_BOOLEAN_INTPRINT", " for userns and io_uring sysctls", "", " * update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]", " apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in", " mantic (LP: #2032602)", " - SAUCE: apparmor5.0.0 [11/29]: apparmor: userns - make it so special", " unconfined profiles can mediate user namespaces", "", " * NPU utilization on amdxdna is missing (LP: #2143243)", " - SAUCE: accel/amdxdna: Add IOCTL to retrieve realtime NPU power estimate", " - SAUCE: accel/amdxdna: Support sensors for column utilization", " - SAUCE: accel/amdxdna: Import AMD_PMF namespace", "", " * Adopting dark mode by default for OLED panel (LP: #2143203)", " - SAUCE: drm/connector: Add a new 'panel_type' property", " - SAUCE: drm/amd/display: Attach OLED property to eDP panels", "", " * Support AMD Image Signal Processing (ISP) unit V4.0 (LP: #2110092)", " - SAUCE: media: platform: amd: Introduce amd isp4 capture driver", " - SAUCE: media: platform: amd: low level support for isp4 firmware", " - SAUCE: media: platform: amd: Add isp4 fw and hw interface", " - SAUCE: media: platform: amd: isp4 subdev and firmware loading handling", " added", " - SAUCE: media: platform: amd: isp4 video node and buffers handling added", " - SAUCE: Documentation: add documentation of AMD isp 4 driver", " - SAUCE: media: platform: amd: isp4 debug fs logging and more descriptive", " errors", " - [Config] Enable VIDEO_AMD_ISP4_CAPTURE", "", " * Miscellaneous Ubuntu changes", " - [Config] temporarily disable OBJTOOL_WERROR", "" ], "package": "linux", "version": "7.0.0-7.7", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143974, 1990064, 2142956, 2141298, 2028253, 2028253, 2102680, 2028253, 2032602, 2143243, 2143203, 2110092 ], "author": "Paolo Pisati ", "date": "Thu, 12 Mar 2026 10:49:34 +0100" }, { "cves": [], "log": [ "", " * resolute/linux: 7.0.0-6.6 -proposed tracker (LP: #2143745)", "", " * Miscellaneous Ubuntu changes", " - [Packaging] drop unstable suffix", "" ], "package": "linux", "version": "7.0.0-6.6", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143745 ], "author": "Paolo Pisati ", "date": "Mon, 09 Mar 2026 17:20:26 +0100" }, { "cves": [], "log": [ "", " * resolute/linux-unstable: 7.0.0-5.5 -proposed tracker (LP: #2143700)", "", " * Resolute real-time patchset: 7.0-rc1-rt1 (LP: #2143181)", " - SAUCE: Reapply \"serial: 8250: Switch to nbcon console\"", " - SAUCE: Reapply \"serial: 8250: Revert \"drop lockdep annotation from", " serial8250_clear_IER()\"\"", " - SAUCE: drm/i915: Use preempt_disable/enable_rt() where recommended", " - SAUCE: drm/i915: Don't disable interrupts on PREEMPT_RT during atomic", " updates", " - SAUCE: drm/i915: Disable tracing points on PREEMPT_RT", " - SAUCE: drm/i915/gt: Use spin_lock_irq() instead of local_irq_disable() +", " spin_lock()", " - SAUCE: drm/i915: Drop the irqs_disabled() check", " - SAUCE: drm/i915/guc: Consider also RCU depth in busy loop.", " - SAUCE: drm/i915: Consider RCU read section as atomic.", " - SAUCE: Revert \"drm/i915: Depend on !PREEMPT_RT.\"", " - SAUCE: sysfs: Add /sys/kernel/realtime entry", " - Real-time patchset 7.0-rc1-rt1", "", " * Miscellaneous Ubuntu changes", " - [Config] rust toolchain version update", "" ], "package": "linux", "version": "7.0.0-5.5", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143700, 2143181 ], "author": "Paolo Pisati ", "date": "Mon, 09 Mar 2026 08:10:31 +0100" }, { "cves": [], "log": [ "", " * resolute/linux-unstable: 7.0.0-4.4 -proposed tracker (LP: #2143123)", "", " * efi: Fix swapped arguments to bsearch() in efi_status_to_*() SAUCE patch", " (LP: #2141276)", " - SAUCE efi: Fix swapped arguments to bsearch() in efi_status_to_*()", "", " * Plucky preinstalled server fails to boot on rb3gen2 (LP: #2106681) //", " Questing preinstalled server fails to boot on sa8775p boards", " (LP: #2121347)", " - [Config] move more qcom interconnect/pinctrl/gcc options to builtin", "", " * linux-tools: consider linking perf against LLVM (LP: #2138328)", " - [Packaging] Add llvm-21-dev to build-depends for perf", "", " * Miscellaneous Ubuntu changes", " - [Packaging] Add intel-speed-select to linux-tools", " - [Packaging] remove stale debian/dkms-versions", " - [Packaging] remove stale debian/dkms-versions scripting", "" ], "package": "linux-unstable", "version": "7.0.0-4.4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143123, 2141276, 2106681, 2121347, 2138328 ], "author": "Paolo Pisati ", "date": "Wed, 04 Mar 2026 13:59:02 +0100" }, { "cves": [], "log": [ "", " * resolute/linux-unstable: 7.0.0-3.3 -proposed tracker (LP: #2143020)", "", " * Miscellaneous Ubuntu changes", " - [Config] updateconfig after rebase to v7.0-rc2", " - [Config] switch to PREEMPT_LAZY", "" ], "package": "linux-unstable", "version": "7.0.0-3.3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143020 ], "author": "Paolo Pisati ", "date": "Mon, 02 Mar 2026 09:26:45 +0100" }, { "cves": [], "log": [ "", " * resolute/linux-unstable: 7.0.0-2.2 -proposed tracker (LP: #2142764)", "" ], "package": "linux-unstable", "version": "7.0.0-2.2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142764 ], "author": "Paolo Pisati ", "date": "Fri, 27 Feb 2026 10:25:35 +0100" }, { "cves": [], "log": [ "", " * resolute/linux-unstable: 7.0.0-1.1 -proposed tracker (LP: #2142402)", "", " * Miscellaneous Ubuntu changes", " - [packaging] rename to linux-unstable", " - [Config] updateconfig after rebase to v7.0-rc1", " - Update Changes.md", " - [Packaging] add libbpf-dev to Build-Depends", " - [Config] disable AMD_ISP4, FTBFS", " - [Packaging] debian.master/dkms-versions -- temporarily remove zfs FTBFS", " - [Packaging] debian.master/dkms-versions -- temporarily remove evdi FTBFS", " - [Config] updateconfig after rebase to v7.0-rc1", " - [Config] update toolchain version", "" ], "package": "linux-unstable", "version": "7.0.0-1.1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142402 ], "author": "Paolo Pisati ", "date": "Mon, 23 Feb 2026 08:32:17 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "linux-sysctl-defaults", "from_version": { "source_package_name": "linux-base", "source_package_version": "4.15ubuntu3", "version": "4.15ubuntu3" }, "to_version": { "source_package_name": "linux-base", "source_package_version": "4.15ubuntu4", "version": "4.15ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * apport/source_linux.py: Always attach 'dpkg --list'", "" ], "package": "linux-base", "version": "4.15ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Juerg Haefliger ", "date": "Tue, 03 Mar 2026 13:01:59 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "linux-tools-common", "from_version": { "source_package_name": "linux", "source_package_version": "6.19.0-6.6", "version": "6.19.0-6.6" }, "to_version": { "source_package_name": "linux", "source_package_version": "7.0.0-10.10", "version": "7.0.0-10.10" }, "cves": [], "launchpad_bugs_fixed": [ 2144865, 2144735, 2142775, 2144652, 2143197, 2139276, 2143974, 1990064, 2142956, 2141298, 2028253, 2028253, 2102680, 2028253, 2032602, 2143243, 2143203, 2110092, 2143745, 2143700, 2143181, 2143123, 2141276, 2106681, 2121347, 2138328, 2143020, 2142764, 2142402 ], "changes": [ { "cves": [], "log": [ "", " * resolute/linux: 7.0.0-10.10 -proposed tracker (LP: #2144865)", "", " * Miscellaneous upstream changes", " - Revert \"powerpc: fix KUAP warning in VMX usercopy path\"", "" ], "package": "linux", "version": "7.0.0-10.10", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144865 ], "author": "Paolo Pisati ", "date": "Thu, 19 Mar 2026 09:44:11 +0100" }, { "cves": [], "log": [ "", " * resolute/linux: 7.0.0-9.9 -proposed tracker (LP: #2144735)", "", " * Please make dracut the default initrd generator (LP: #2142775)", " - [Packaging] recommends dracut instead of initramfs-tools", "", " * Miscellaneous Ubuntu changes", " - SAUCE: Change RISC-V target to RVA23 (riscv64a23-unknown-linux-gnu)", "" ], "package": "linux", "version": "7.0.0-9.9", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144735, 2142775 ], "author": "Paolo Pisati ", "date": "Wed, 18 Mar 2026 13:11:06 +0100" }, { "cves": [], "log": [ "", " * resolute/linux: 7.0.0-8.8 -proposed tracker (LP: #2144652)", "", " * UBUNTU: SAUCE: igc: Increase Thunderbolt MAC passthrough delay to 1000ms", " (LP: #2143197)", " - SAUCE: igc: Increase Thunderbolt MAC passthrough delay to 1000ms", "", " * [usrmerge] evaluate kernel owned packages for DEP17 compliance", " (LP: #2139276)", " - [Packaging] Install modules in /usr/lib/modules", "", " * Miscellaneous Ubuntu changes", " - [Config] hardening: enable LIST_HARDENED", " - [Config] hardening: disable LDISC_AUTOLOAD", " - [Config] hardening: disable LEGACY_PTYS", " - [Config] updateconfigs following v7.0-rc4 rebase", "" ], "package": "linux", "version": "7.0.0-8.8", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144652, 2143197, 2139276 ], "author": "Paolo Pisati ", "date": "Tue, 17 Mar 2026 18:01:36 +0100" }, { "cves": [], "log": [ "", " * resolute/linux: 7.0.0-7.7 -proposed tracker (LP: #2143974)", "", " * unconfined profile denies userns_create for chromium based processes", " (LP: #1990064)", " - [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS", "", " * Jellyfin Desktop Flatpak doesn't work with the current AppArmor profile", " (LP: #2142956)", " - SAUCE: apparmor5.0.0 [29/29]: apparmor: fix fine grained inet mediation", " sock_file_perm", "", " * AppArmor blocks write(2) to network sockets with Linux 6.19 (LP: #2141298)", " - SAUCE: apparmor5.0.0 [28/29]: apparmor: fix aa_label_sk_perm to check", " for RULE_MEDIATES_NET", "", " * update apparmor and LSM stacking patch set (LP: #2028253)", " - SAUCE: apparmor5.0.0 [1/29]: Stacking: LSM: Single calls in secid hooks", " - SAUCE: apparmor5.0.0 [2/29]: Stacking: LSM: Exclusive secmark usage", " - SAUCE: apparmor5.0.0 [3/29]: Stacking: AppArmor: Remove the exclusive", " flag", " - SAUCE: apparmor5.0.0 [4/29]: Revert \"apparmor: fix dbus permission", " queries to v9 ABI\"", " - SAUCE: apparmor5.0.0 [5/29]: Revert \"apparmor: gate make fine grained", " unix mediation behind v9 abi\"", " - SAUCE: apparmor5.0.0 [6/29]: apparmor: net: patch to provide", " compatibility with v2.x net rules", " - SAUCE: apparmor5.0.0 [7/29]: apparmor: net: add fine grained ipv4/ipv6", " mediation", " - SAUCE: apparmor5.0.0 [8/29]: apparmor: lift compatibility check out of", " profile_af_perm", " - SAUCE: apparmor5.0.0 [9/29]: apparmor: userns: add unprivileged user ns", " mediation", " - SAUCE: apparmor5.0.0 [10/29]: apparmor: userns: Add sysctls for", " additional controls of unpriv userns restrictions", " - SAUCE: apparmor5.0.0 [12/29]: apparmor: userns: open userns related", " sysctl so lxc can check if restriction are in place", " - SAUCE: apparmor5.0.0 [13/29]: apparmor: userns: allow profile to be", " transitioned when a userns is created", " - SAUCE: apparmor5.0.0 [14/29]: apparmor: mqueue: call", " security_inode_init_security on inode creation", " - SAUCE: apparmor5.0.0 [15/29]: apparmor: mqueue: add fine grained", " mediation of posix mqueues", " - SAUCE: apparmor5.0.0 [16/29]: apparmor: uring: add io_uring mediation", " - SAUCE: apparmor5.0.0 [19/29]: apparmor: prompt: setup slab cache for", " audit data", " - SAUCE: apparmor5.0.0 [20/29]: apparmor: prompt: add the ability for", " profiles to have a learning cache", " - SAUCE: apparmor5.0.0 [21/29]: apparmor: prompt: enable userspace upcall", " for mediation", " - SAUCE: apparmor5.0.0 [22/29]: apparmor: prompt: pass prompt boolean", " through into path_name as well", " - SAUCE: apparmor5.0.0 [23/29]: apparmor: check for supported version in", " notification messages.", " - SAUCE: apparmor5.0.0 [24/29]: apparmor: refactor building notice so it", " is easier to extend", " - SAUCE: apparmor5.0.0 [25/29]: apparmor: switch from ENOTSUPP to", " EPROTONOSUPPORT", " - SAUCE: apparmor5.0.0 [26/29]: apparmor: add support for meta data tags", " - SAUCE: apparmor5.0.0 [27/29]: apparmor: prevent profile->disconnected", " double free in aa_free_profile", "", " * update apparmor and LSM stacking patch set (LP: #2028253) // Installation", " of AppArmor on a 6.14 kernel produces error message \"Illegal number: yes\"", " (LP: #2102680)", " - SAUCE: apparmor5.0.0 [17/29]: apparmor: create an", " AA_SFS_TYPE_BOOLEAN_INTPRINT sysctl variant", " - SAUCE: apparmor5.0.0 [18/29]: apparmor: Use AA_SFS_FILE_BOOLEAN_INTPRINT", " for userns and io_uring sysctls", "", " * update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]", " apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in", " mantic (LP: #2032602)", " - SAUCE: apparmor5.0.0 [11/29]: apparmor: userns - make it so special", " unconfined profiles can mediate user namespaces", "", " * NPU utilization on amdxdna is missing (LP: #2143243)", " - SAUCE: accel/amdxdna: Add IOCTL to retrieve realtime NPU power estimate", " - SAUCE: accel/amdxdna: Support sensors for column utilization", " - SAUCE: accel/amdxdna: Import AMD_PMF namespace", "", " * Adopting dark mode by default for OLED panel (LP: #2143203)", " - SAUCE: drm/connector: Add a new 'panel_type' property", " - SAUCE: drm/amd/display: Attach OLED property to eDP panels", "", " * Support AMD Image Signal Processing (ISP) unit V4.0 (LP: #2110092)", " - SAUCE: media: platform: amd: Introduce amd isp4 capture driver", " - SAUCE: media: platform: amd: low level support for isp4 firmware", " - SAUCE: media: platform: amd: Add isp4 fw and hw interface", " - SAUCE: media: platform: amd: isp4 subdev and firmware loading handling", " added", " - SAUCE: media: platform: amd: isp4 video node and buffers handling added", " - SAUCE: Documentation: add documentation of AMD isp 4 driver", " - SAUCE: media: platform: amd: isp4 debug fs logging and more descriptive", " errors", " - [Config] Enable VIDEO_AMD_ISP4_CAPTURE", "", " * Miscellaneous Ubuntu changes", " - [Config] temporarily disable OBJTOOL_WERROR", "" ], "package": "linux", "version": "7.0.0-7.7", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143974, 1990064, 2142956, 2141298, 2028253, 2028253, 2102680, 2028253, 2032602, 2143243, 2143203, 2110092 ], "author": "Paolo Pisati ", "date": "Thu, 12 Mar 2026 10:49:34 +0100" }, { "cves": [], "log": [ "", " * resolute/linux: 7.0.0-6.6 -proposed tracker (LP: #2143745)", "", " * Miscellaneous Ubuntu changes", " - [Packaging] drop unstable suffix", "" ], "package": "linux", "version": "7.0.0-6.6", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143745 ], "author": "Paolo Pisati ", "date": "Mon, 09 Mar 2026 17:20:26 +0100" }, { "cves": [], "log": [ "", " * resolute/linux-unstable: 7.0.0-5.5 -proposed tracker (LP: #2143700)", "", " * Resolute real-time patchset: 7.0-rc1-rt1 (LP: #2143181)", " - SAUCE: Reapply \"serial: 8250: Switch to nbcon console\"", " - SAUCE: Reapply \"serial: 8250: Revert \"drop lockdep annotation from", " serial8250_clear_IER()\"\"", " - SAUCE: drm/i915: Use preempt_disable/enable_rt() where recommended", " - SAUCE: drm/i915: Don't disable interrupts on PREEMPT_RT during atomic", " updates", " - SAUCE: drm/i915: Disable tracing points on PREEMPT_RT", " - SAUCE: drm/i915/gt: Use spin_lock_irq() instead of local_irq_disable() +", " spin_lock()", " - SAUCE: drm/i915: Drop the irqs_disabled() check", " - SAUCE: drm/i915/guc: Consider also RCU depth in busy loop.", " - SAUCE: drm/i915: Consider RCU read section as atomic.", " - SAUCE: Revert \"drm/i915: Depend on !PREEMPT_RT.\"", " - SAUCE: sysfs: Add /sys/kernel/realtime entry", " - Real-time patchset 7.0-rc1-rt1", "", " * Miscellaneous Ubuntu changes", " - [Config] rust toolchain version update", "" ], "package": "linux", "version": "7.0.0-5.5", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143700, 2143181 ], "author": "Paolo Pisati ", "date": "Mon, 09 Mar 2026 08:10:31 +0100" }, { "cves": [], "log": [ "", " * resolute/linux-unstable: 7.0.0-4.4 -proposed tracker (LP: #2143123)", "", " * efi: Fix swapped arguments to bsearch() in efi_status_to_*() SAUCE patch", " (LP: #2141276)", " - SAUCE efi: Fix swapped arguments to bsearch() in efi_status_to_*()", "", " * Plucky preinstalled server fails to boot on rb3gen2 (LP: #2106681) //", " Questing preinstalled server fails to boot on sa8775p boards", " (LP: #2121347)", " - [Config] move more qcom interconnect/pinctrl/gcc options to builtin", "", " * linux-tools: consider linking perf against LLVM (LP: #2138328)", " - [Packaging] Add llvm-21-dev to build-depends for perf", "", " * Miscellaneous Ubuntu changes", " - [Packaging] Add intel-speed-select to linux-tools", " - [Packaging] remove stale debian/dkms-versions", " - [Packaging] remove stale debian/dkms-versions scripting", "" ], "package": "linux-unstable", "version": "7.0.0-4.4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143123, 2141276, 2106681, 2121347, 2138328 ], "author": "Paolo Pisati ", "date": "Wed, 04 Mar 2026 13:59:02 +0100" }, { "cves": [], "log": [ "", " * resolute/linux-unstable: 7.0.0-3.3 -proposed tracker (LP: #2143020)", "", " * Miscellaneous Ubuntu changes", " - [Config] updateconfig after rebase to v7.0-rc2", " - [Config] switch to PREEMPT_LAZY", "" ], "package": "linux-unstable", "version": "7.0.0-3.3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143020 ], "author": "Paolo Pisati ", "date": "Mon, 02 Mar 2026 09:26:45 +0100" }, { "cves": [], "log": [ "", " * resolute/linux-unstable: 7.0.0-2.2 -proposed tracker (LP: #2142764)", "" ], "package": "linux-unstable", "version": "7.0.0-2.2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142764 ], "author": "Paolo Pisati ", "date": "Fri, 27 Feb 2026 10:25:35 +0100" }, { "cves": [], "log": [ "", " * resolute/linux-unstable: 7.0.0-1.1 -proposed tracker (LP: #2142402)", "", " * Miscellaneous Ubuntu changes", " - [packaging] rename to linux-unstable", " - [Config] updateconfig after rebase to v7.0-rc1", " - Update Changes.md", " - [Packaging] add libbpf-dev to Build-Depends", " - [Config] disable AMD_ISP4, FTBFS", " - [Packaging] debian.master/dkms-versions -- temporarily remove zfs FTBFS", " - [Packaging] debian.master/dkms-versions -- temporarily remove evdi FTBFS", " - [Config] updateconfig after rebase to v7.0-rc1", " - [Config] update toolchain version", "" ], "package": "linux-unstable", "version": "7.0.0-1.1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142402 ], "author": "Paolo Pisati ", "date": "Mon, 23 Feb 2026 08:32:17 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "linux-virtual", "from_version": { "source_package_name": "linux-meta-riscv", "source_package_version": "6.17.0-5.5.1", "version": "6.17.0-5.5.1" }, "to_version": { "source_package_name": "linux-meta-riscv", "source_package_version": "7.0.0-7.7.1", "version": "7.0.0-7.7.1" }, "cves": [], "launchpad_bugs_fixed": [ 1786013, 1786013, 1786013 ], "changes": [ { "cves": [], "log": [ "", " * Main version: 7.0.0-7.7.1", "", " * Packaging resync (LP: #1786013)", " - [Packaging] debian/dkms-versions -- resync from main package", "" ], "package": "linux-meta-riscv", "version": "7.0.0-7.7.1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 1786013 ], "author": "Sarah Emery ", "date": "Thu, 12 Mar 2026 16:49:38 +0100" }, { "cves": [], "log": [ "", " * Main version: 7.0.0-7.7.0", "" ], "package": "linux-meta-riscv", "version": "7.0.0-7.7.0", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Sarah Emery ", "date": "Thu, 12 Mar 2026 15:30:50 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-16.16.1", "", " * Packaging resync (LP: #1786013)", " - [Packaging] debian/dkms-versions -- resync from main package", "" ], "package": "linux-meta-riscv", "version": "6.17.0-16.16.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 1786013 ], "author": "Sarah Emery ", "date": "Thu, 12 Feb 2026 14:49:03 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-14.14.1", "", " * Packaging resync (LP: #1786013)", " - [Packaging] debian/dkms-versions -- resync from main package", "" ], "package": "linux-meta-riscv", "version": "6.17.0-14.14.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 1786013 ], "author": "Sarah Emery ", "date": "Fri, 23 Jan 2026 09:49:19 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-12.12.1", "" ], "package": "linux-meta-riscv", "version": "6.17.0-12.12.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Sarah Emery ", "date": "Thu, 15 Jan 2026 11:09:30 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-9.9.1", "" ], "package": "linux-meta-riscv", "version": "6.17.0-9.9.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Emil Renner Berthing ", "date": "Thu, 04 Dec 2025 16:25:17 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-8.8.1", "" ], "package": "linux-meta-riscv", "version": "6.17.0-8.8.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Sarah Emery ", "date": "Fri, 21 Nov 2025 18:48:31 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-7.7.1", "" ], "package": "linux-meta-riscv", "version": "6.17.0-7.7.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Emil Renner Berthing ", "date": "Tue, 28 Oct 2025 18:47:36 +0100" }, { "cves": [], "log": [ "", " * Main version: 6.17.0-6.6.1", "" ], "package": "linux-meta-riscv", "version": "6.17.0-6.6.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Timo Aaltonen ", "date": "Fri, 10 Oct 2025 10:17:11 +0300" } ], "notes": null, "is_version_downgrade": false }, { "name": "locales", "from_version": { "source_package_name": "glibc", "source_package_version": "2.42-2ubuntu5", "version": "2.42-2ubuntu5" }, "to_version": { "source_package_name": "glibc", "source_package_version": "2.43-2ubuntu1", "version": "2.43-2ubuntu1" }, "cves": [ { "cve": "CVE-2025-15281", "url": "https://ubuntu.com/security/CVE-2025-15281", "cve_description": "Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.", "cve_priority": "medium", "cve_public_date": "2026-01-20 14:16:00 UTC" }, { "cve": "CVE-2026-0861", "url": "https://ubuntu.com/security/CVE-2026-0861", "cve_description": "Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. Note that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this. The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument. This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc. Typically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice. An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments.", "cve_priority": "medium", "cve_public_date": "2026-01-14 21:15:00 UTC" }, { "cve": "CVE-2026-0915", "url": "https://ubuntu.com/security/CVE-2026-0915", "cve_description": "Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.", "cve_priority": "medium", "cve_public_date": "2026-01-15 22:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2143767, 2138256, 2142067 ], "changes": [ { "cves": [], "log": [ "", " * Merge from Debian experimental (LP: #2143767)", " Delta dropped:", " - Don't strip ld.so on armhf. LP #1927192.", " - Enable systemtap support, which is currently disabled in Debian.", " - Fix gconv regression on i386", " - Stop building with --enable-sframe for now.", " - s390x: drop the 32-bit multi-arch variant (LP #2067350)", " * Fixed upstream:", " - NPTL: Optimize trylock for high cache contention workloads (LP: #2138256) ", " * Update from upstream:", " - Don't include directly", " - po: Incorporate translatins (nl updated, ar new)", " * d/watch: modernize watchfile delta to v5", " * Fix broken ldconfig, static-pie binary on riscv64", " Revert RVV memset variant patch. (LP: #2142067)", "" ], "package": "glibc", "version": "2.43-2ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143767, 2138256, 2142067 ], "author": "Simon Poirier ", "date": "Tue, 17 Feb 2026 16:52:35 -0500" }, { "cves": [], "log": [ "", " * debian/testsuite-xfail-debian.mk: Update hurd results.", "" ], "package": "glibc", "version": "2.43-2", "urgency": "medium", "distributions": "UNRELEASED", "launchpad_bugs_fixed": [], "author": "Samuel Thibault ", "date": "Fri, 30 Jan 2026 01:41:14 +0100" }, { "cves": [], "log": [ "", " [ Aurelien Jarno ]", " * New upstream release:", " - debian/copyright: update following upstream changes.", " - debian/symbols.wildcards: add 2.43.", " - debian/patches/git-updates.diff: update from upstream stable branch.", " - debian/patches/hurd-i386/local-enable-ldconfig.diff: rebased.", " - debian/patches/hurd-i386/git-sigreturn-SEGV.diff: upstreamed.", " - debian/patches/hurd-i386/git-rlimit-as.diff: upstreamed.", " - debian/patches/hurd-i386/git-run-iconv-test.sh.diff: upstreamed.", " - debian/patches/hurd-i386/git-elf-ordering.diff: upstreamed.", " - debian/patches/hurd-i386/git-rename.diff: upstreamed.", " - debian/patches/hurd-i386/git-signal-SSE-MMX.diff: upstreamed.", " - debian/patches/hurd-i386/git-sigreturn-xmm.diff: upstreamed.", " - debian/patches/hurd-i386/git-cancel-stack.diff: upstreamed.", " - debian/patches/i386/unsubmitted-quiet-ldconfig.diff: rebased.", " - debian/patches/any/local-asserth-decls.diff: rebased.", " - debian/patches/any/local-tcsetaddr.diff: rebased.", " - debian/patches/any/submitted-nptl-invalid-td.patch: drop, obsolete.", " - debian/patches/any/git-ldd-set-u.diff: upstreamed.", " - debian/patches/any/git-linux-termios.diff: upstreamed.", " - debian/patches/hurd-i386/submitted-net.diff: rebased.", " - debian/patches/hurd-i386/tg-bits_atomic.h_multiple_threads.diff: drop,", " obsolete.", " - debian/patches/hurd-i386/local-clock_gettime_MONOTONIC.diff: rebased.", " - debian/patches/hurd-i386/local-fix-nss.diff: rebased.", " - debian/libc0.3.symbols.hurd-i386: update following the move of symbols", " from libpthread.so.0.3 to libc.so.0.3.", "" ], "package": "glibc", "version": "2.43-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Wed, 28 Jan 2026 22:35:15 +0100" }, { "cves": [], "log": [ "", " [ Samuel Thibault ]", " * debian/testsuite-xfail-debian.mk: ignore new tst-pie-bss-static issue on", " hurd for now.", "", " [ Aurelien Jarno ]", " * debian/control: regenerate. Closes: #1127589.", "" ], "package": "glibc", "version": "2.42-13", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Tue, 10 Feb 2026 18:54:23 +0100" }, { "cves": [], "log": [ "", " [ Samuel Thibault ]", " * debian/patches/hurd-i386/git-fork-gdb.diff: Fix gdb after fork.", " * debian/patches/hurd-i386/local-execstack.diff: Drop, fixed in binutils.", " * debian/patches/hurd-i386/git-sig-sig-mmx-fix.diff: Fix mmx corruption on", " double-signal.", " * debian/patches/hurd-i386/local-intr-msg-clobber.diff: Drop, now fixed.", " * debian/patches/hurd-i386/git-cancel-sig.diff: Fix cancellation points in", " signals during cancellation points.", " * debian/testsuite-xfail-debian.mk: Update accordingly.", "", " [ Aurelien Jarno ]", " * debian/control.in/*, debian/glibc-source.filelist,", " debian/libc6-s390.symbols.s390x, debian/rules.d/control.mk,", " debian/sysdeps/s390x.mk: stop building a 31-bit multilib flavour on s390x.", "" ], "package": "glibc", "version": "2.42-12", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Sat, 07 Feb 2026 22:23:34 +0100" }, { "cves": [ { "cve": "CVE-2025-15281", "url": "https://ubuntu.com/security/CVE-2025-15281", "cve_description": "Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.", "cve_priority": "medium", "cve_public_date": "2026-01-20 14:16:00 UTC" } ], "log": [ "", " [ Samuel Thibault ]", " * debian/patches/hurd-i386/local-execstack.diff: Work around missing execstack", " on libc.so.", "", " [ Aurelien Jarno ]", " * debian/patches/git-updates.diff: update from upstream stable branch:", " - Fix bug in wordexp, which could return uninitialized memory when using", " WRDE_REUSE together with WRDE_APPEND (CVE-2025-15281). Closes: #1126266.", " - Switch currency symbol for the bg_BG locale to euro.", "" ], "package": "glibc", "version": "2.42-11", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Mon, 26 Jan 2026 23:40:35 +0100" }, { "cves": [], "log": [ "", " [ Aurelien Jarno ]", " * debian/sysdeps/{amd64,arm64,i386,x32}.mk: disable SFrame support. Closes:", " #1125944.", " * debian/control.in/{main,libc}: drop versioned Build-Depends and Breaks on", " binutils 2.45, now pointless.", "" ], "package": "glibc", "version": "2.42-10", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Mon, 19 Jan 2026 20:12:24 +0100" }, { "cves": [], "log": [ "", " [ Samuel Thibault ]", " * debian/patches/hurd-i386/git-cancel-stack.diff: Fix crash on cancellation", " with unaligned stack.", "", " [ Aurelien Jarno ]", " * debian/rules.d/debhelper.mk: do not strip ld.so on armhf. Closes:", " #1125796.", "" ], "package": "glibc", "version": "2.42-9", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Sun, 18 Jan 2026 11:52:41 +0100" }, { "cves": [ { "cve": "CVE-2026-0861", "url": "https://ubuntu.com/security/CVE-2026-0861", "cve_description": "Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. Note that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this. The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument. This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc. Typically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice. An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments.", "cve_priority": "medium", "cve_public_date": "2026-01-14 21:15:00 UTC" }, { "cve": "CVE-2026-0915", "url": "https://ubuntu.com/security/CVE-2026-0915", "cve_description": "Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.", "cve_priority": "medium", "cve_public_date": "2026-01-15 22:16:00 UTC" } ], "log": [ "", " [ Samuel Thibault ]", " * debian/testsuite-xfail-debian.mk: Avoid running tst-writev on hurd-amd64.", " * debian/patches/hurd-i386/git-sigreturn-xmm.diff: Fix sigreturn using xmm", " registers in the signal contention case.", " * debian/patches/hurd-i386/local-intr-msg-clobber.diff: Try to re-introduce", " mmx clobber work-around.", " * debian/testsuite-xfail-debian.mk: Update hurd results.", "", " [ Aurelien Jarno ]", " * debian/rules.d/build.mk: do not write BUILD_CXX to configparms, it's", " unused.", " * debian/patches/git-updates.diff: update from upstream stable branch:", " - Fix and integer overflow in _int_memalign leading to heap corruption", " (CVE-2026-0861). Closes: #1125678.", " - Fix stack contents leak in getnetbyaddr (CVE-2026-0915). Closes:", " #1125748.", " - Optimize trylock for high cache contention workloads.", "", " [ Helmut Grohne ]", " * debian/control.in/main: avoid g++ dependency in nocheck builds.", " * debian/control.in/main, rules, rules.d/build.mk: don't build nscd in", " stage2.", "" ], "package": "glibc", "version": "2.42-8", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Fri, 16 Jan 2026 21:50:10 +0100" }, { "cves": [], "log": [ "", " [ Aurelien Jarno ]", " * debian/control.in/libc, debian/rules.d/debhelper.mk: drop libcrypt-dev", " dependency from libc6-dev. Thanks to Helmut Grohne for proposing that,", " doing an archive rebuild and filling the bug reports.", " * debian/control.in/main, debian/sysdeps/linux.mk: enable SystemTap static", " probes.", " * debian/debhelper.in/libc-dev.NEWS: add a NEWS entry about the removal of", " the obsolete termio interface. Closes: #1124068.", " * debian/rules.d/debhelper.mk: ensure that linker scripts work even when", " /usr is unmerged. Closes: #1120508", " * debian/debhelper.in/libc-dev{,-alt}.lintian-overrides,", " source/lintian-overrides, rules.d/debhelper.mk, salsa-ci.yml: drop", " unpack-message-for-{orig,source} overrides, fixed in lintian 2.128.0.", " * debian/control.in/main: drop Rules-Requires-Root: no, this is now the", " default.", " * debian/libc6.symbols.i386, debian/libc6-i386.symbols.{amd64,x32}: remove", " the workaround for GLIBC_ABI_GNU_TLS. Closes: #1122038.", " * debian/control.in/{libc,i386}: ensure that libdpkg-perl is fixed wrt", " GLIBC_ABI_GNU_TLS.", "" ], "package": "glibc", "version": "2.42-7", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Sun, 04 Jan 2026 10:07:24 +0100" }, { "cves": [], "log": [ "", " [ Benjamin Drung ]", " * debian/control: add new lines when concatenating files", " * Update debian/watch to version 5", "", " [ Aurelien Jarno ]", " * debian/symbols.wildcards: adjust ABI flags version:", " - Fix corresponding to GLIBC_ABI_DT_X86_64_PLT was first corrected in 2.36", " - Fix corresponding to GLIBC_ABI_GNU2_TLS as first corrected in 2.40", " * debian/control.in/libc, debian/control.in/main: remove breaks, conflicts", " and (build-)depends already satisfied in bookworm.", " * debian/control.in/amd64, debian/control.in/libc: add a Breaks against", " binutils (<< 2.45) for builds with sframe support enabled.", " * debian/control.in/main, debian/rules: build with GCC 15.", " * debian/patches/git-updates.diff: update from upstream stable branch.", "", " [ Baptiste Jammet ]", " * Update French debconf translation. Closes: #1118006.", "" ], "package": "glibc", "version": "2.42-6", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Fri, 12 Dec 2025 18:37:16 +0100" }, { "cves": [], "log": [ "", " [ Martin Bagge ]", " * Update Swedish debconf translation. Closes: #1121991.", "", " [ Aurelien Jarno ]", " * debian/control.in/main: change libc-gconv-modules-extra to Multi-Arch:", " same as it contains libraries.", " * debian/libc6.symbols.i386, debian/libc6-i386.symbols.{amd64,x32}: force", " the minimum libc6 version to >= 2.42, to ensure GLIBC_ABI_GNU_TLS is", " available, given symbols in .gnu.version_r section are currently not", " handled by dpkg-shlibdeps.", "" ], "package": "glibc", "version": "2.42-5", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Sat, 06 Dec 2025 23:02:46 +0100" }, { "cves": [], "log": [ "", " * Upload to unstable.", "" ], "package": "glibc", "version": "2.42-4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Wed, 03 Dec 2025 23:03:48 +0100" }, { "cves": [], "log": [ "", " [ Aurelien Jarno ]", " * debian/patches/any/git-ldd-set-u.diff: backport fix to allow using", " set -u on ldd. Closes: #1114824.", " * debian/patches/git-updates.diff: update from upstream stable branch.", " * debian/patches/any/git-linux-termios.diff: backport fix for termios", " regression with non-standard baud rate.", "", " [ Samuel Thibault ]", " * debian/patches/hurd-i386/git-sigreturn-SEGV.diff: catch SIGSEGV on", " returning from signal handler.", " * debian/patches/hurd-i386/git-rlimit-as.diff: Support RLIMIT_AS.", " * debian/patches/hurd-i386/local-aux-pagesz.diff: Fix getauxval(AT_PAGESZ).", " * debian/patches/hurd-i386/git-run-iconv-test.sh.diff: Fix running iconv", " tests.", " * debian/patches/hurd-i386/git-elf-ordering.diff: Fix running ELF ordering", " tests.", " * debian/patches/hurd-i386/git-rename.diff: Fix renaming directories with", " trailing slahes.", " * debian/patches/hurd-i386/git-signal-SSE-MMX.diff: Fix signals thrashing", " SSE&MMX state.", "" ], "package": "glibc", "version": "2.42-3", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Sat, 29 Nov 2025 19:36:10 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "login", "from_version": { "source_package_name": "util-linux", "source_package_version": "2.41.2-4ubuntu3", "version": "1:4.16.0-2+really2.41.2-4ubuntu3" }, "to_version": { "source_package_name": "util-linux", "source_package_version": "2.41.3-3ubuntu2", "version": "1:4.16.0-2+really2.41.3-3ubuntu2" }, "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" }, { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2142050 ], "changes": [ { "cves": [], "log": [ "", " * d/p/ubuntu/su-pty-drop-caps.patch: harden 'su --pty' to temporarily lower", " capabilities while proxying between stdin/stdout and the pty master. This", " is to avoid su from being used to exploit kernel vulnerabilities.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Fri, 13 Mar 2026 07:09:23 -0400" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Merge with Debian unstable (LP: #2142050). Remaining changes:", " - Add sulogin-fallback-static-sh.patch", " Add support for /bin/static-sh as fallback if the regular shell fails to", " execute. Patch ported from sysvinit. (see LP #505887)", " - Add sulogin-lockedpwd.patch", " Make sure file systems can be fixed on machines with locked root", " accounts (as Ubuntu does by default). Don't require --force for sulogin.", " - d/rules: disable libmount mountfs support", " Disable brand new feature with --disable-libmount-mountfd-support that", " causes inability to deploy MAAS LP #2037417.", " * Dropped changes applied upstream:", " - SECURITY UPDATE: heap overread with 256-byte usernames", " + debian/patches/CVE-2025-14104-1.patch: add length check in", " login-utils/setpwnam.c.", " + debian/patches/CVE-2025-14104-2.patch: update buflen in", " login-utils/setpwnam.c.", " + CVE-2025-14104", " * Dropped changes as they were no longer necessary:", " - d/p/ubuntu/lp-2030793-make-check-pidfd.patch", " This patch only effected kernel versions below 5.15 which are not", " available on resolute.", " - d/p/u/lp-2112552-tests-mark-mkfds-multiplexing-as-known-fail.patch", " The underlying bug was addressed in rust-coreutils.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142050 ], "author": "Ural Tunaboyu ", "date": "Sun, 15 Feb 2026 17:43:12 -0800" }, { "cves": [], "log": [ "", " * d/libsmartcols1.symbols: drop terminal crap", " * d/rules: make dpkg-gensymbols more strict", " * lintian: ignore groff-message tags", " * lintian: ignore groff-message tags in remaining packages", " * Add upstream patches", " * unshare: fix user namespace bind mounts", " * unshare: remove get_mnt_ino() check in bind_ns_files_from_child()", " * unshare: add --owner to set user namespace owner uid and gid", " * libfdisk: modernize ZFS GPT type description", "" ], "package": "util-linux", "version": "2.41.3-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 31 Dec 2025 13:06:28 +0100" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * util-linux: do not fail postinst/prerm if update-alternatives is missing", "" ], "package": "util-linux", "version": "2.41.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 17 Dec 2025 10:42:28 +0100" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Stop installing lastlog2-import.service", " * New upstream release, fixing CVE-2025-14104. (Closes: #1122058)", "" ], "package": "util-linux", "version": "2.41.3-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Tue, 16 Dec 2025 20:37:41 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "logsave", "from_version": { "source_package_name": "e2fsprogs", "source_package_version": "1.47.2-3ubuntu2", "version": "1.47.2-3ubuntu2" }, "to_version": { "source_package_name": "e2fsprogs", "source_package_version": "1.47.2-3ubuntu4", "version": "1.47.2-3ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [ 2138219, 2132257 ], "changes": [ { "cves": [], "log": [ "", " * d/rules: fix pkgconfig call that results in inability", " to find udev rules.d in dh_install. Patch supplied by", " Helmut Grohne in Debian bug 1126636. (LP: #2138219)", "" ], "package": "e2fsprogs", "version": "1.47.2-3ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2138219 ], "author": "John Chittum ", "date": "Fri, 13 Feb 2026 07:17:00 -0500" }, { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "e2fsprogs", "version": "1.47.2-3ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:34:31 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "lshw", "from_version": { "source_package_name": "lshw", "source_package_version": "02.19.git.2021.06.19.996aaad9c7-2.1ubuntu2", "version": "02.19.git.2021.06.19.996aaad9c7-2.1ubuntu2" }, "to_version": { "source_package_name": "lshw", "source_package_version": "02.19.git.2021.06.19.996aaad9c7-2.1ubuntu3", "version": "02.19.git.2021.06.19.996aaad9c7-2.1ubuntu3" }, "cves": [], "launchpad_bugs_fixed": [ 2127480 ], "changes": [ { "cves": [], "log": [ "", " * Fix incorrect fb detection (LP: #2127480):", " - d/p/lp2127480-0001-improve-fb-detection.patch", " - d/p/lp2127480-0002-another-try-at-fixing-the-Github-fbdev-issue.patch", "" ], "package": "lshw", "version": "02.19.git.2021.06.19.996aaad9c7-2.1ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2127480 ], "author": "Robert Malz ", "date": "Tue, 28 Oct 2025 11:28:27 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "lxd-agent-loader", "from_version": { "source_package_name": "lxd-agent-loader", "source_package_version": "0.9ubuntu0", "version": "0.9ubuntu0" }, "to_version": { "source_package_name": "lxd-agent-loader", "source_package_version": "0.13ubuntu0", "version": "0.13ubuntu0" }, "cves": [], "launchpad_bugs_fixed": [ 2144337, 2142801, 2139197, 2141967 ], "changes": [ { "cves": [], "log": [ "", " * Unconditionally install `udev` rules (LP: #2144337)", "" ], "package": "lxd-agent-loader", "version": "0.13ubuntu0", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144337 ], "author": "Simon Deziel ", "date": "Fri, 13 Mar 2026 12:12:17 -0400" }, { "cves": [], "log": [ "", " * Only install `udev` rules for arches needing them", "" ], "package": "lxd-agent-loader", "version": "0.12ubuntu0", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Simon Deziel ", "date": "Wed, 04 Mar 2026 09:09:16 -0500" }, { "cves": [], "log": [ "", " * Reinstate `udev` rules for arches lacking DMI support (LP: #2142801)", "" ], "package": "lxd-agent-loader", "version": "0.11ubuntu0", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142801 ], "author": "Simon Deziel ", "date": "Sat, 28 Feb 2026 18:34:30 -0500" }, { "cves": [], "log": [ "", " * Update paths for compat with `usrmerge` (LP: #2139197)", " - lxd-agent.service: `lxd-agent-setup` is now under `/usr/lib`", " - debian/install: put files into `/usr/lib`", " * Replace udev activation by system generator (LP: #2141967)", "" ], "package": "lxd-agent-loader", "version": "0.10ubuntu0", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2139197, 2141967 ], "author": "Simon Deziel ", "date": "Wed, 18 Feb 2026 12:06:41 -0500" } ], "notes": null, "is_version_downgrade": false }, { "name": "mdadm", "from_version": { "source_package_name": "mdadm", "source_package_version": "4.4-11ubuntu3", "version": "4.4-11ubuntu3" }, "to_version": { "source_package_name": "mdadm", "source_package_version": "4.5-5ubuntu1", "version": "4.5-5ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2130173, 2144935 ], "changes": [ { "cves": [], "log": [ "", " * Merge with Debian unstable (LP: #2130173). Remaining changes:", " - d/{control,mdadm.install,/finalrd/mdadm.finalrd}: ship a finalrd hook", " * New changes to fix autopkgtests:", " - d/t/control: add allow-stderr restriction", " - d/t/test-installed: disable failing on error and skip tests", " Use same test settings as the upstream github tests to prevent", " failing after error and disable problematic or extra long tests", " - d/p/u/disable-tests-failing-on-ubuntu.patch: disable some tests", " that fail either intermittently or consistently on Ubuntu (LP: #2144935)", "" ], "package": "mdadm", "version": "4.5-5ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2130173, 2144935 ], "author": "Ural Tunaboyu ", "date": "Thu, 19 Feb 2026 15:24:04 -0800" }, { "cves": [], "log": [ "", " * Updating watch file to version 5.", " * Cherry-picking patch from upstream to fix probing non-DDF which in", " turns fixes timeouts in dracut tests, thanks to Benjamin Drung", " for reporting (Closes: #1128401).", "" ], "package": "mdadm", "version": "4.5-5", "urgency": "medium", "distributions": "sid", "launchpad_bugs_fixed": [], "author": "Daniel Baumann ", "date": "Thu, 19 Feb 2026 12:45:48 +0100" }, { "cves": [], "log": [ "", " * Always including efivarfs to have generic initramfs, thanks to Roland", " Clobus (Closes: #1114521).", "" ], "package": "mdadm", "version": "4.5-4", "urgency": "medium", "distributions": "sid", "launchpad_bugs_fixed": [], "author": "Daniel Baumann ", "date": "Thu, 05 Feb 2026 04:17:16 +0100" }, { "cves": [], "log": [ "", " * Cherry-picking patch from upstream to load md_mod first before setting", " module parameter legacy_async_del_gendisk (Closes: #1125390).", "" ], "package": "mdadm", "version": "4.5-3", "urgency": "medium", "distributions": "sid", "launchpad_bugs_fixed": [], "author": "Daniel Baumann ", "date": "Wed, 04 Feb 2026 19:56:52 +0100" }, { "cves": [], "log": [ "", " * Adding Chinese (simplified) debconf translations from Yangfl", " (Closes: #1124731).", " * Adding Chinese (traditional) debconf translations from Yangfl", " (Closes: #1124731).", "" ], "package": "mdadm", "version": "4.5-2", "urgency": "medium", "distributions": "sid", "launchpad_bugs_fixed": [], "author": "Daniel Baumann ", "date": "Tue, 06 Jan 2026 07:34:33 +0100" }, { "cves": [], "log": [ "", " * Updating to standards version 4.7.3.", " * Wrap and sorting debian files.", " * Merging upstream version 4.5.", " * Updating years in copyright for 2026.", " * Refreshing randomize-timers.patch.", " * Removing xmalloc-ftbfs.patch, included upstream.", " * Removing monitor-nonabsolute-devnames.patch, included upstream.", " * Removing monitor-memory-leak.patch, included upstream.", " * Removing manpage-remove-bitmap.patch, included upstream.", "" ], "package": "mdadm", "version": "4.5-1", "urgency": "medium", "distributions": "sid", "launchpad_bugs_fixed": [], "author": "Daniel Baumann ", "date": "Sun, 04 Jan 2026 07:27:28 +0100" }, { "cves": [], "log": [ "", " * Removing rules-requires-root, not needed anymore.", " * Adding updated Swedish debconf translations from Martin Bagge", " (Closes: #1121992).", " * Adding updated Catalan debconf translations from Carles Pina i Estany", " (Closes: #1117573).", "" ], "package": "mdadm", "version": "4.4-14", "urgency": "medium", "distributions": "sid", "launchpad_bugs_fixed": [], "author": "Daniel Baumann ", "date": "Sun, 07 Dec 2025 09:32:47 +0100" }, { "cves": [], "log": [ "", " * Adding patch from QRPp to fix fails", " with with relative ARRAY devnames (Closes: #1114744).", " * Adding patch from Peter Mann to fix memory leak in", " mdadm --monitor --scan (Closes: #1115497).", " * Adding updated Italian debconf translations from Luca Monducci", " (Closes: #1114858).", " * Removing in initramfs hook a reference to old documentation file", " removed by upstream, thanks to Lionel Elie Mamane ", " (Closes: #1112392).", "" ], "package": "mdadm", "version": "4.4-13", "urgency": "medium", "distributions": "sid", "launchpad_bugs_fixed": [], "author": "Daniel Baumann ", "date": "Thu, 18 Sep 2025 15:20:58 +0200" }, { "cves": [], "log": [ "", " * Removing old link to git.debian.org in README.recipes.", " * Correcting wrong file reference in README.recipes.", " * Adding updated Portuguese debconf translations from Américo Monteiro", " (Closes: #1107438).", "" ], "package": "mdadm", "version": "4.4-12", "urgency": "medium", "distributions": "sid", "launchpad_bugs_fixed": [], "author": "Daniel Baumann ", "date": "Wed, 03 Sep 2025 04:12:40 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "modemmanager", "from_version": { "source_package_name": "modemmanager", "source_package_version": "1.24.2-2fakesync1", "version": "1.24.2-2fakesync1" }, "to_version": { "source_package_name": "modemmanager", "source_package_version": "1.25.95-1ubuntu1", "version": "1.25.95-1ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2130166 ], "changes": [ { "cves": [], "log": [ "", " * Fake sync due to mismatching orig tarball", "" ], "package": "modemmanager", "version": "1.24.2-2fakesync1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Gianfranco Costamagna ", "date": "Fri, 12 Dec 2025 10:22:09 +0100" }, { "cves": [], "log": [ "", " [ Helmut Grohne ]", " * Improve cross building: (Closes: #1087277)", " + Move documentation dependencies to B-D-I.", " + Mark python3-dbus and python3-gi with the nocheck build profile.", "", " [ Arnaud Ferraris ]", " * d/control: fix gobject-introspection dependencies", " `libgirepository1.0-dev shouldn't be used anymore as it isn't", " multiarch-friendly. Instead, use a recent `gobject-introspection` and", " explicitly (build) depend on the needed `gir1.2-*-dev` packages.", " (Closes: #1118899)", " * d/gbp.conf: add default commit messages.", " This makes it more consistent with other packages for which I'm the", " primary maintainer.", " * d/watch: convert to version 5.", " Use the new Gitlab template for easier management, but override the", " matching pattern so we only get stable (pre)releases, which have an even", " minor version number.", " * d/copyright: fix copyright notice for mmcli.", " This is actually GPL-2+, not GPL-3. (Closes: #1116309)", "" ], "package": "modemmanager", "version": "1.24.2-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Arnaud Ferraris ", "date": "Wed, 29 Oct 2025 17:27:49 +0100" }, { "cves": [], "log": [ "", " * Fake sync due to mismatching orig tarball (LP: #2130166)", "" ], "package": "modemmanager", "version": "1.24.2-1fakesync1", "urgency": "medium", "distributions": "resolute-proposed", "launchpad_bugs_fixed": [ 2130166 ], "author": "Jeremy Bícha ", "date": "Tue, 28 Oct 2025 16:54:41 -0400" }, { "cves": [], "log": [ "", " * New upstream release (Closes: #1110197)", " * d/control: drop Rules-Requires-Root.", " This is no longer needed.", "" ], "package": "modemmanager", "version": "1.24.2-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Arnaud Ferraris ", "date": "Mon, 11 Aug 2025 12:00:42 +0200" } ], "notes": null, "is_version_downgrade": true }, { "name": "mount", "from_version": { "source_package_name": "util-linux", "source_package_version": "2.41.2-4ubuntu3", "version": "2.41.2-4ubuntu3" }, "to_version": { "source_package_name": "util-linux", "source_package_version": "2.41.3-3ubuntu2", "version": "2.41.3-3ubuntu2" }, "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" }, { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2142050 ], "changes": [ { "cves": [], "log": [ "", " * d/p/ubuntu/su-pty-drop-caps.patch: harden 'su --pty' to temporarily lower", " capabilities while proxying between stdin/stdout and the pty master. This", " is to avoid su from being used to exploit kernel vulnerabilities.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Fri, 13 Mar 2026 07:09:23 -0400" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Merge with Debian unstable (LP: #2142050). Remaining changes:", " - Add sulogin-fallback-static-sh.patch", " Add support for /bin/static-sh as fallback if the regular shell fails to", " execute. Patch ported from sysvinit. (see LP #505887)", " - Add sulogin-lockedpwd.patch", " Make sure file systems can be fixed on machines with locked root", " accounts (as Ubuntu does by default). Don't require --force for sulogin.", " - d/rules: disable libmount mountfs support", " Disable brand new feature with --disable-libmount-mountfd-support that", " causes inability to deploy MAAS LP #2037417.", " * Dropped changes applied upstream:", " - SECURITY UPDATE: heap overread with 256-byte usernames", " + debian/patches/CVE-2025-14104-1.patch: add length check in", " login-utils/setpwnam.c.", " + debian/patches/CVE-2025-14104-2.patch: update buflen in", " login-utils/setpwnam.c.", " + CVE-2025-14104", " * Dropped changes as they were no longer necessary:", " - d/p/ubuntu/lp-2030793-make-check-pidfd.patch", " This patch only effected kernel versions below 5.15 which are not", " available on resolute.", " - d/p/u/lp-2112552-tests-mark-mkfds-multiplexing-as-known-fail.patch", " The underlying bug was addressed in rust-coreutils.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142050 ], "author": "Ural Tunaboyu ", "date": "Sun, 15 Feb 2026 17:43:12 -0800" }, { "cves": [], "log": [ "", " * d/libsmartcols1.symbols: drop terminal crap", " * d/rules: make dpkg-gensymbols more strict", " * lintian: ignore groff-message tags", " * lintian: ignore groff-message tags in remaining packages", " * Add upstream patches", " * unshare: fix user namespace bind mounts", " * unshare: remove get_mnt_ino() check in bind_ns_files_from_child()", " * unshare: add --owner to set user namespace owner uid and gid", " * libfdisk: modernize ZFS GPT type description", "" ], "package": "util-linux", "version": "2.41.3-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 31 Dec 2025 13:06:28 +0100" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * util-linux: do not fail postinst/prerm if update-alternatives is missing", "" ], "package": "util-linux", "version": "2.41.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 17 Dec 2025 10:42:28 +0100" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Stop installing lastlog2-import.service", " * New upstream release, fixing CVE-2025-14104. (Closes: #1122058)", "" ], "package": "util-linux", "version": "2.41.3-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Tue, 16 Dec 2025 20:37:41 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "multipath-tools", "from_version": { "source_package_name": "multipath-tools", "source_package_version": "0.12.0-1ubuntu2", "version": "0.12.0-1ubuntu2" }, "to_version": { "source_package_name": "multipath-tools", "source_package_version": "0.14.3-2ubuntu1", "version": "0.14.3-2ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2144005, 2135118, 2080474, 2142903 ], "changes": [ { "cves": [], "log": [ "", " * Merge with Debian unstable (LP: #2144005). Remaining changes:", " - d/rules: don't build the multipath-tools binary package on i386; only kpartx.", " - d/p/enable-find-multipaths.patch: re-enable find_multipaths by", " default -- see the removed 'add_find-multipaths.patch' (LP 1463046)", " - d/NEWS: add removal of kpartx-boot package", " - d/rules: remove -Bsymbolic-functions from LDFLAGS", " - d/rules: install friendly names multipath.conf by default", " - d/initramfs/scripts/init-top: ensure the bindings file exists before", " calling multipathd -B in the initramfs. This prevents multipathd -B from", " failing and exiting immediately (LP #2120444).", " - d/p/testsuite-no-lto: disable lto to workaround testsuite symbol wrapping", " (LP #2135118)", " * Dropped changes:", " - d/p/multipath-tools-Fix-ISO-C23-errors-with-strchr:", " Fix ISO C23 errors with strchr()", " [upstream in 0.14.0]", " - d/{rules,control}: enable testsuite (LP #2135118)", " [in 0.14.3-1]", " - d/initramfs: move the script stopping multipathd to init-bottom", " [in 0.13.0-1]", " - d/t/initramfs", " + determine extracted main cpio path dynamically", " + drop determine extracted main cpio path dynamically", " [cancel each other out]", "" ], "package": "multipath-tools", "version": "0.14.3-2ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144005 ], "author": "Jonas Jelten ", "date": "Mon, 16 Mar 2026 18:17:43 +0100" }, { "cves": [], "log": [ "", " * [9ef22a2] Run testsuite only during Arch-builds", " * [2a6ef4b] Disable testsuite on loong64", "" ], "package": "multipath-tools", "version": "0.14.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Mon, 02 Mar 2026 11:49:26 +0100" }, { "cves": [], "log": [ "", " [ Jonas Jelten ]", " * [d6c9eba] Enable testsuite (LP: #2135118)", "", " [ Chris Hofstaedtler ]", " * [5c1230c] New upstream version 0.14.3 (Closes: #1128696)", " * [6e2361a] Rebase patches, use WARN_ONLY=1 in make invocation", "" ], "package": "multipath-tools", "version": "0.14.3-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2135118 ], "author": "Chris Hofstaedtler ", "date": "Mon, 02 Mar 2026 10:37:01 +0100" }, { "cves": [], "log": [ "", " * [c8842fd] New upstream version 0.13.0", " * [6951eae] d/rules: enable verbose upstream build", " * [3d82dad] initramfs: stop multipathd in init-bottom, not local-bottom.", " Ubuntu noticed that local-* scripts are not executed on systems with", " disks on network. (LP: #2080474)", " * [fc4b508] d/t/control: add linux-image-generic for Ubuntu", " * [1df3a76] d/libmpathpersist0.symbols: tighten internal symbols", " * [6aff684] initramfs: stop requesting old dmsetup_env hack", "" ], "package": "multipath-tools", "version": "0.13.0-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2080474 ], "author": "Chris Hofstaedtler ", "date": "Sat, 20 Dec 2025 14:16:27 +0100" }, { "cves": [], "log": [ "", " * d/t/initramfs: drop determine extracted main cpio path dynamically", " * multipath-tools: Fix ISO C23 errors with strchr() (LP: #2142903)", "" ], "package": "multipath-tools", "version": "0.12.0-1ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142903 ], "author": "Benjamin Drung ", "date": "Mon, 02 Mar 2026 16:48:20 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "netbase", "from_version": { "source_package_name": "netbase", "source_package_version": "6.5", "version": "6.5" }, "to_version": { "source_package_name": "netbase", "source_package_version": "6.5build1", "version": "6.5build1" }, "cves": [], "launchpad_bugs_fixed": [ 2132257 ], "changes": [ { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "netbase", "version": "6.5build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:29:50 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "netplan-generator", "from_version": { "source_package_name": "netplan.io", "source_package_version": "1.2-1ubuntu1", "version": "1.2-1ubuntu1" }, "to_version": { "source_package_name": "netplan.io", "source_package_version": "1.2-1ubuntu3", "version": "1.2-1ubuntu3" }, "cves": [], "launchpad_bugs_fixed": [ 2139598, 2138802 ], "changes": [ { "cves": [], "log": [ "", " * debian/patches/lp2139598-execute-udev-rules-before-sriov-apply-service.patch:", " execute udev rules before starting sriov apply service (LP: #2139598)", "" ], "package": "netplan.io", "version": "1.2-1ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2139598 ], "author": "Robert Malz ", "date": "Tue, 03 Mar 2026 12:44:43 +0100" }, { "cves": [], "log": [ "", " * d/p/lp-2138802-BlockingIOError-py314.patch: fix \"netplan try\" with python", " 3.14 by handling BlockingIOError in addition to TypeError (LP: #2138802)", "" ], "package": "netplan.io", "version": "1.2-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2138802 ], "author": "Andreas Hasenack ", "date": "Fri, 20 Feb 2026 11:25:14 -0300" } ], "notes": null, "is_version_downgrade": false }, { "name": "netplan.io", "from_version": { "source_package_name": "netplan.io", "source_package_version": "1.2-1ubuntu1", "version": "1.2-1ubuntu1" }, "to_version": { "source_package_name": "netplan.io", "source_package_version": "1.2-1ubuntu3", "version": "1.2-1ubuntu3" }, "cves": [], "launchpad_bugs_fixed": [ 2139598, 2138802 ], "changes": [ { "cves": [], "log": [ "", " * debian/patches/lp2139598-execute-udev-rules-before-sriov-apply-service.patch:", " execute udev rules before starting sriov apply service (LP: #2139598)", "" ], "package": "netplan.io", "version": "1.2-1ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2139598 ], "author": "Robert Malz ", "date": "Tue, 03 Mar 2026 12:44:43 +0100" }, { "cves": [], "log": [ "", " * d/p/lp-2138802-BlockingIOError-py314.patch: fix \"netplan try\" with python", " 3.14 by handling BlockingIOError in addition to TypeError (LP: #2138802)", "" ], "package": "netplan.io", "version": "1.2-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2138802 ], "author": "Andreas Hasenack ", "date": "Fri, 20 Feb 2026 11:25:14 -0300" } ], "notes": null, "is_version_downgrade": false }, { "name": "open-iscsi", "from_version": { "source_package_name": "open-iscsi", "source_package_version": "2.1.11-3ubuntu2", "version": "2.1.11-3ubuntu2" }, "to_version": { "source_package_name": "open-iscsi", "source_package_version": "2.1.11-3ubuntu3", "version": "2.1.11-3ubuntu3" }, "cves": [], "launchpad_bugs_fixed": [ 2143886 ], "changes": [ { "cves": [], "log": [ "", " * d/t/patch-image: also look for arch all packages (LP: #2143886)", "" ], "package": "open-iscsi", "version": "2.1.11-3ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143886 ], "author": "Benjamin Drung ", "date": "Thu, 12 Mar 2026 00:48:53 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "openssh-client", "from_version": { "source_package_name": "openssh", "source_package_version": "1:10.2p1-2ubuntu1", "version": "1:10.2p1-2ubuntu1" }, "to_version": { "source_package_name": "openssh", "source_package_version": "1:10.2p1-2ubuntu3", "version": "1:10.2p1-2ubuntu3" }, "cves": [ { "cve": "CVE-2026-3497", "url": "https://ubuntu.com/security/CVE-2026-3497", "cve_description": "Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on an error, which does not terminate the process, allows an attacker to send an unexpected GSSAPI message type during the GSSAPI key exchange to the server, which will call the underlying function and continue the execution of the program without setting the related connection variables. As the variables are not initialized to NULL the code later accesses those uninitialized variables, accessing random memory, which could lead to undefined behavior. The recommended workaround is to use ssh_packet_disconnect() instead, which does terminate the process. The impact of the vulnerability depends heavily on the compiler flag hardening configuration.", "cve_priority": "medium", "cve_public_date": "2026-03-12 19:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2144812 ], "changes": [ { "cves": [], "log": [ "", " * d/p/gss-api-defaults.patch: do not default to weak GSS-API", " exchange algorithms (LP: #2144812)", "" ], "package": "openssh", "version": "1:10.2p1-2ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144812 ], "author": "Athos Ribeiro ", "date": "Wed, 18 Mar 2026 16:23:48 -0300" }, { "cves": [ { "cve": "CVE-2026-3497", "url": "https://ubuntu.com/security/CVE-2026-3497", "cve_description": "Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on an error, which does not terminate the process, allows an attacker to send an unexpected GSSAPI message type during the GSSAPI key exchange to the server, which will call the underlying function and continue the execution of the program without setting the related connection variables. As the variables are not initialized to NULL the code later accesses those uninitialized variables, accessing random memory, which could lead to undefined behavior. The recommended workaround is to use ssh_packet_disconnect() instead, which does terminate the process. The impact of the vulnerability depends heavily on the compiler flag hardening configuration.", "cve_priority": "medium", "cve_public_date": "2026-03-12 19:16:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: GSSAPI Key Exchange issue", " - debian/patches/gssapi.patch: replace incorrect use of", " sshpkt_disconnect() with ssh_packet_disconnect() and properly", " initialize some vars.", " - CVE-2026-3497", "" ], "package": "openssh", "version": "1:10.2p1-2ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Fri, 13 Mar 2026 07:05:34 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "openssh-server", "from_version": { "source_package_name": "openssh", "source_package_version": "1:10.2p1-2ubuntu1", "version": "1:10.2p1-2ubuntu1" }, "to_version": { "source_package_name": "openssh", "source_package_version": "1:10.2p1-2ubuntu3", "version": "1:10.2p1-2ubuntu3" }, "cves": [ { "cve": "CVE-2026-3497", "url": "https://ubuntu.com/security/CVE-2026-3497", "cve_description": "Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on an error, which does not terminate the process, allows an attacker to send an unexpected GSSAPI message type during the GSSAPI key exchange to the server, which will call the underlying function and continue the execution of the program without setting the related connection variables. As the variables are not initialized to NULL the code later accesses those uninitialized variables, accessing random memory, which could lead to undefined behavior. The recommended workaround is to use ssh_packet_disconnect() instead, which does terminate the process. The impact of the vulnerability depends heavily on the compiler flag hardening configuration.", "cve_priority": "medium", "cve_public_date": "2026-03-12 19:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2144812 ], "changes": [ { "cves": [], "log": [ "", " * d/p/gss-api-defaults.patch: do not default to weak GSS-API", " exchange algorithms (LP: #2144812)", "" ], "package": "openssh", "version": "1:10.2p1-2ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144812 ], "author": "Athos Ribeiro ", "date": "Wed, 18 Mar 2026 16:23:48 -0300" }, { "cves": [ { "cve": "CVE-2026-3497", "url": "https://ubuntu.com/security/CVE-2026-3497", "cve_description": "Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on an error, which does not terminate the process, allows an attacker to send an unexpected GSSAPI message type during the GSSAPI key exchange to the server, which will call the underlying function and continue the execution of the program without setting the related connection variables. As the variables are not initialized to NULL the code later accesses those uninitialized variables, accessing random memory, which could lead to undefined behavior. The recommended workaround is to use ssh_packet_disconnect() instead, which does terminate the process. The impact of the vulnerability depends heavily on the compiler flag hardening configuration.", "cve_priority": "medium", "cve_public_date": "2026-03-12 19:16:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: GSSAPI Key Exchange issue", " - debian/patches/gssapi.patch: replace incorrect use of", " sshpkt_disconnect() with ssh_packet_disconnect() and properly", " initialize some vars.", " - CVE-2026-3497", "" ], "package": "openssh", "version": "1:10.2p1-2ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Fri, 13 Mar 2026 07:05:34 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "openssh-sftp-server", "from_version": { "source_package_name": "openssh", "source_package_version": "1:10.2p1-2ubuntu1", "version": "1:10.2p1-2ubuntu1" }, "to_version": { "source_package_name": "openssh", "source_package_version": "1:10.2p1-2ubuntu3", "version": "1:10.2p1-2ubuntu3" }, "cves": [ { "cve": "CVE-2026-3497", "url": "https://ubuntu.com/security/CVE-2026-3497", "cve_description": "Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on an error, which does not terminate the process, allows an attacker to send an unexpected GSSAPI message type during the GSSAPI key exchange to the server, which will call the underlying function and continue the execution of the program without setting the related connection variables. As the variables are not initialized to NULL the code later accesses those uninitialized variables, accessing random memory, which could lead to undefined behavior. The recommended workaround is to use ssh_packet_disconnect() instead, which does terminate the process. The impact of the vulnerability depends heavily on the compiler flag hardening configuration.", "cve_priority": "medium", "cve_public_date": "2026-03-12 19:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2144812 ], "changes": [ { "cves": [], "log": [ "", " * d/p/gss-api-defaults.patch: do not default to weak GSS-API", " exchange algorithms (LP: #2144812)", "" ], "package": "openssh", "version": "1:10.2p1-2ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144812 ], "author": "Athos Ribeiro ", "date": "Wed, 18 Mar 2026 16:23:48 -0300" }, { "cves": [ { "cve": "CVE-2026-3497", "url": "https://ubuntu.com/security/CVE-2026-3497", "cve_description": "Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on an error, which does not terminate the process, allows an attacker to send an unexpected GSSAPI message type during the GSSAPI key exchange to the server, which will call the underlying function and continue the execution of the program without setting the related connection variables. As the variables are not initialized to NULL the code later accesses those uninitialized variables, accessing random memory, which could lead to undefined behavior. The recommended workaround is to use ssh_packet_disconnect() instead, which does terminate the process. The impact of the vulnerability depends heavily on the compiler flag hardening configuration.", "cve_priority": "medium", "cve_public_date": "2026-03-12 19:16:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: GSSAPI Key Exchange issue", " - debian/patches/gssapi.patch: replace incorrect use of", " sshpkt_disconnect() with ssh_packet_disconnect() and properly", " initialize some vars.", " - CVE-2026-3497", "" ], "package": "openssh", "version": "1:10.2p1-2ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Fri, 13 Mar 2026 07:05:34 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "openssl", "from_version": { "source_package_name": "openssl", "source_package_version": "3.5.3-1ubuntu2", "version": "3.5.3-1ubuntu2" }, "to_version": { "source_package_name": "openssl", "source_package_version": "3.5.5-1ubuntu1", "version": "3.5.5-1ubuntu1" }, "cves": [ { "cve": "CVE-2025-11187", "url": "https://ubuntu.com/security/CVE-2025-11187", "cve_description": "Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification. Impact summary: The stack buffer overflow or NULL pointer dereference may cause a crash leading to Denial of Service for an application that parses untrusted PKCS#12 files. The buffer overflow may also potentially enable code execution depending on platform mitigations. When verifying a PKCS#12 file that uses PBMAC1 for the MAC, the PBKDF2 salt and keylength parameters from the file are used without validation. If the value of keylength exceeds the size of the fixed stack buffer used for the derived key (64 bytes), the key derivation will overflow the buffer. The overflow length is attacker-controlled. Also, if the salt parameter is not an OCTET STRING type this can lead to invalid or NULL pointer dereference. Exploiting this issue requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For this reason the issue was assessed as Moderate severity. The FIPS modules in 3.6, 3.5 and 3.4 are not affected by this issue, as PKCS#12 processing is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5 and 3.4 are vulnerable to this issue. OpenSSL 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue as they do not support PBMAC1 in PKCS#12.", "cve_priority": "medium", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-15467", "url": "https://ubuntu.com/security/CVE-2025-15467", "cve_description": "Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verifying that its length fits the destination. An attacker can supply a crafted CMS message with an oversized IV, causing a stack-based out-of-bounds write before any authentication or tag verification occurs. Applications and services that parse untrusted CMS or PKCS#7 content using AEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable. Because the overflow occurs prior to authentication, no valid key material is required to trigger it. While exploitability to remote code execution depends on platform and toolchain mitigations, the stack-based write primitive represents a severe risk. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not affected by this issue. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS AuthEnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verifying that its length fits the destination. An attacker can supply a crafted CMS message with an oversized IV, causing a stack-based out-of-bounds write before any authentication or tag verification occurs. Applications and services that parse untrusted CMS or PKCS#7 content using AEAD ciphers (e.g., S/MIME AuthEnvelopedData with AES-GCM) are vulnerable. Because the overflow occurs prior to authentication, no valid key material is required to trigger it. While exploitability to remote code execution depends on platform and toolchain mitigations, the stack-based write primitive represents a severe risk. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "medium", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-15468", "url": "https://ubuntu.com/security/CVE-2025-15468", "cve_description": "Issue summary: If an application using the SSL_CIPHER_find() function in a QUIC protocol client or server receives an unknown cipher suite from the peer, a NULL dereference occurs. Impact summary: A NULL pointer dereference leads to abnormal termination of the running process causing Denial of Service. Some applications call SSL_CIPHER_find() from the client_hello_cb callback on the cipher ID received from the peer. If this is done with an SSL object implementing the QUIC protocol, NULL pointer dereference will happen if the examined cipher ID is unknown or unsupported. As it is not very common to call this function in applications using the QUIC protocol and the worst outcome is Denial of Service, the issue was assessed as Low severity. The vulnerable code was introduced in the 3.2 version with the addition of the QUIC protocol support. The FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue, as the QUIC implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-15469", "url": "https://ubuntu.com/security/CVE-2025-15469", "cve_description": "Issue summary: The 'openssl dgst' command-line tool silently truncates input data to 16MB when using one-shot signing algorithms and reports success instead of an error. Impact summary: A user signing or verifying files larger than 16MB with one-shot algorithms (such as Ed25519, Ed448, or ML-DSA) may believe the entire file is authenticated while trailing data beyond 16MB remains unauthenticated. When the 'openssl dgst' command is used with algorithms that only support one-shot signing (Ed25519, Ed448, ML-DSA-44, ML-DSA-65, ML-DSA-87), the input is buffered with a 16MB limit. If the input exceeds this limit, the tool silently truncates to the first 16MB and continues without signaling an error, contrary to what the documentation states. This creates an integrity gap where trailing bytes can be modified without detection if both signing and verification are performed using the same affected codepath. The issue affects only the command-line tool behavior. Verifiers that process the full message using library APIs will reject the signature, so the risk primarily affects workflows that both sign and verify with the affected 'openssl dgst' command. Streaming digest algorithms for 'openssl dgst' and library users are unaffected. The FIPS modules in 3.5 and 3.6 are not affected by this issue, as the command-line tools are outside the OpenSSL FIPS module boundary. OpenSSL 3.5 and 3.6 are vulnerable to this issue. OpenSSL 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-66199", "url": "https://ubuntu.com/security/CVE-2025-66199", "cve_description": "Issue summary: A TLS 1.3 connection using certificate compression can be forced to allocate a large buffer before decompression without checking against the configured certificate size limit. Impact summary: An attacker can cause per-connection memory allocations of up to approximately 22 MiB and extra CPU work, potentially leading to service degradation or resource exhaustion (Denial of Service). In affected configurations, the peer-supplied uncompressed certificate length from a CompressedCertificate message is used to grow a heap buffer prior to decompression. This length is not bounded by the max_cert_list setting, which otherwise constrains certificate message sizes. An attacker can exploit this to cause large per-connection allocations followed by handshake failure. No memory corruption or information disclosure occurs. This issue only affects builds where TLS 1.3 certificate compression is compiled in (i.e., not OPENSSL_NO_COMP_ALG) and at least one compression algorithm (brotli, zlib, or zstd) is available, and where the compression extension is negotiated. Both clients receiving a server CompressedCertificate and servers in mutual TLS scenarios receiving a client CompressedCertificate are affected. Servers that do not request client certificates are not vulnerable to client-initiated attacks. Users can mitigate this issue by setting SSL_OP_NO_RX_CERTIFICATE_COMPRESSION to disable receiving compressed certificates. The FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue, as the TLS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-68160", "url": "https://ubuntu.com/security/CVE-2025-68160", "cve_description": "Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds write. Impact summary: This out-of-bounds write can cause memory corruption which typically results in a crash, leading to Denial of Service for an application. The line-buffering BIO filter (BIO_f_linebuffer) is not used by default in TLS/SSL data paths. In OpenSSL command-line applications, it is typically only pushed onto stdout/stderr on VMS systems. Third-party applications that explicitly use this filter with a BIO chain that can short-write and that write large, newline-free data influenced by an attacker would be affected. However, the circumstances where this could happen are unlikely to be under attacker control, and BIO_f_linebuffer is unlikely to be handling non-curated data controlled by an attacker. For that reason the issue was assessed as Low severity. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the BIO implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Impact summary: This out-of-bounds write can cause memory corruption which typically results in a crash, leading to Denial of Service for an application. The line-buffering BIO filter (BIO_f_linebuffer) is not used by default in TLS/SSL data paths. In OpenSSL command-line applications, it is typically only pushed onto stdout/stderr on VMS systems. Third-party applications that explicitly use this filter with a BIO chain that can short-write and that write large, newline-free data influenced by an attacker would be affected. However, the circumstances where this could happen are unlikely to be under attacker control, and BIO_f_linebuffer is unlikely to be handling non-curated data controlled by an attacker. For that reason the issue was assessed as Low severity. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the BIO implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69418", "url": "https://ubuntu.com/security/CVE-2025-69418", "cve_description": "Issue summary: When using the low-level OCB API directly with AES-NI or
other hardware-accelerated code paths, inputs whose length is not a multiple
of 16 bytes can leave the final partial block unencrypted and unauthenticated.

Impact summary: The trailing 1-15 bytes of a message may be exposed in
cleartext on encryption and are not covered by the authentication tag,
allowing an attacker to read or tamper with those bytes without detection.

The low-level OCB encrypt and decrypt routines in the hardware-accelerated
stream path process full 16-byte blocks but do not advance the input/output
pointers. The subsequent tail-handling code then operates on the original
base pointers, effectively reprocessing the beginning of the buffer while
leaving the actual trailing bytes unprocessed. The authentication checksum
also excludes the true tail bytes.

However, typical OpenSSL consumers using EVP are not affected because the
higher-level EVP and provider OCB implementations split inputs so that full
blocks and trailing partial blocks are processed in separate calls, avoiding
the problematic code path. Additionally, TLS does not use OCB ciphersuites.
The vulnerability only affects applications that call the low-level
CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with
non-block-aligned lengths in a single call on hardware-accelerated builds.
For these reasons the issue was assessed as Low severity.

The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected
by this issue, as OCB mode is not a FIPS-approved algorithm.

OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.

OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69419", "url": "https://ubuntu.com/security/CVE-2025-69419", "cve_description": "Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service. The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12 BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 source byte count as the destination buffer capacity to UTF8_putc(). For BMP code points above U+07FF, UTF-8 requires three bytes, but the forwarded capacity can be just two bytes. UTF8_putc() then returns -1, and this negative value is added to the output length without validation, causing the length to become negative. The subsequent trailing NUL byte is then written at a negative offset, causing write outside of heap allocated buffer. The vulnerability is reachable via the public PKCS12_get_friendlyname() API when parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a different code path that avoids this issue, PKCS12_get_friendlyname() directly invokes the vulnerable function. Exploitation requires an attacker to provide a malicious PKCS#12 file to be parsed by the application and the attacker can just trigger a one zero byte write before the allocated buffer. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue. Impact summary: The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service. The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12 BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 source byte count as the destination buffer capacity to UTF8_putc(). For BMP code points above U+07FF, UTF-8 requires three bytes, but the forwarded capacity can be just two bytes. UTF8_putc() then returns -1, and this negative value is added to the output length without validation, causing the length to become negative. The subsequent trailing NUL byte is then written at a negative offset, causing write outside of heap allocated buffer. The vulnerability is reachable via the public PKCS12_get_friendlyname() API when parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a different code path that avoids this issue, PKCS12_get_friendlyname() directly invokes the vulnerable function. Exploitation requires an attacker to provide a malicious PKCS#12 file to be parsed by the application and the attacker can just trigger a one zero byte write before the allocated buffer. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69420", "url": "https://ubuntu.com/security/CVE-2025-69420", "cve_description": "Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file. Impact summary: An application calling TS_RESP_verify_response() with a malformed TimeStamp Response can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2() access the signing cert attribute value without validating its type. When the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed TimeStamp Response to an application that verifies timestamp responses. The TimeStamp protocol (RFC 3161) is not widely used and the impact of the exploit is just a Denial of Service. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the TimeStamp Response implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue. Impact summary: An application calling TS_RESP_verify_response() with a malformed TimeStamp Response can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2() access the signing cert attribute value without validating its type. When the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed TimeStamp Response to an application that verifies timestamp responses. The TimeStamp protocol (RFC 3161) is not widely used and the impact of the exploit is just a Denial of Service. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the TimeStamp Response implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69421", "url": "https://ubuntu.com/security/CVE-2025-69421", "cve_description": "Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. The PKCS12_item_decrypt_d2i_ex() function does not check whether the oct parameter is NULL before dereferencing it. When called from PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can be NULL, causing a crash. The vulnerability is limited to Denial of Service and cannot be escalated to achieve code execution or memory disclosure. Exploiting this issue requires an attacker to provide a malformed PKCS#12 file to an application that processes it. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. The PKCS12_item_decrypt_d2i_ex() function does not check whether the oct parameter is NULL before dereferencing it. When called from PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can be NULL, causing a crash. The vulnerability is limited to Denial of Service and cannot be escalated to achieve code execution or memory disclosure. Exploiting this issue requires an attacker to provide a malformed PKCS#12 file to an application that processes it. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2026-22795", "url": "https://ubuntu.com/security/CVE-2026-22795", "cve_description": "Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file. Impact summary: An application processing a malformed PKCS#12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting in a Denial of Service. A type confusion vulnerability exists in PKCS#12 parsing code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid pointer read. The location is constrained to a 1-byte address space, meaning any attempted pointer manipulation can only target addresses between 0x00 and 0xFF. This range corresponds to the zero page, which is unmapped on most modern operating systems and will reliably result in a crash, leading only to a Denial of Service. Exploiting this issue also requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For these reasons, the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue. Impact summary: An application processing a malformed PKCS#12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting in a Denial of Service. A type confusion vulnerability exists in PKCS#12 parsing code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid pointer read. The location is constrained to a 1-byte address space, meaning any attempted pointer manipulation can only target addresses between 0x00 and 0xFF. This range corresponds to the zero page, which is unmapped on most modern operating systems and will reliably result in a crash, leading only to a Denial of Service. Exploiting this issue also requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For these reasons, the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2026-22796", "url": "https://ubuntu.com/security/CVE-2026-22796", "cve_description": "Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing malformed PKCS#7 data. Impact summary: An application performing signature verification of PKCS#7 data or calling directly the PKCS7_digest_from_attributes() function can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The function PKCS7_digest_from_attributes() accesses the message digest attribute value without validating its type. When the type is not V_ASN1_OCTET_STRING, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed signed PKCS#7 to an application that verifies it. The impact of the exploit is just a Denial of Service, the PKCS7 API is legacy and applications should be using the CMS API instead. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#7 parsing implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Impact summary: An application performing signature verification of PKCS#7 data or calling directly the PKCS7_digest_from_attributes() function can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The function PKCS7_digest_from_attributes() accesses the message digest attribute value without validating its type. When the type is not V_ASN1_OCTET_STRING, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed signed PKCS#7 to an application that verifies it. The impact of the exploit is just a Denial of Service, the PKCS7 API is legacy and applications should be using the CMS API instead. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#7 parsing implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-9230", "url": "https://ubuntu.com/security/CVE-2025-9230", "cve_description": "Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service or Execution of attacker-supplied code. Although the consequences of a successful exploit of this vulnerability could be severe, the probability that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to our Security Policy. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9231", "url": "https://ubuntu.com/security/CVE-2025-9231", "cve_description": "Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private key by an attacker.. While remote key recovery over a network was not attempted by the reporter, timing measurements revealed a timing signal which may allow such an attack. OpenSSL does not directly support certificates with SM2 keys in TLS, and so this CVE is not relevant in most TLS contexts. However, given that it is possible to add support for such certificates via a custom provider, coupled with the fact that in such a custom provider context the private key may be recoverable via remote timing measurements, we consider this to be a Moderate severity issue. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as SM2 is not an approved algorithm.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9232", "url": "https://ubuntu.com/security/CVE-2025-9232", "cve_description": "Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash which leads to Denial of Service for an application. The OpenSSL HTTP client API functions can be used directly by applications but they are also used by the OCSP client functions and CMP (Certificate Management Protocol) client implementation in OpenSSL. However the URLs used by these implementations are unlikely to be controlled by an attacker. In this vulnerable code the out of bounds read can only trigger a crash. Furthermore the vulnerability requires an attacker-controlled URL to be passed from an application to the OpenSSL function and the user has to have a 'no_proxy' environment variable set. For the aforementioned reasons the issue was assessed as Low severity. The vulnerable code was introduced in the following patch releases: 3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the HTTP client implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "low", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9230", "url": "https://ubuntu.com/security/CVE-2025-9230", "cve_description": "Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service or Execution of attacker-supplied code. Although the consequences of a successful exploit of this vulnerability could be severe, the probability that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to our Security Policy. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9231", "url": "https://ubuntu.com/security/CVE-2025-9231", "cve_description": "Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private key by an attacker.. While remote key recovery over a network was not attempted by the reporter, timing measurements revealed a timing signal which may allow such an attack. OpenSSL does not directly support certificates with SM2 keys in TLS, and so this CVE is not relevant in most TLS contexts. However, given that it is possible to add support for such certificates via a custom provider, coupled with the fact that in such a custom provider context the private key may be recoverable via remote timing measurements, we consider this to be a Moderate severity issue. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as SM2 is not an approved algorithm.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9232", "url": "https://ubuntu.com/security/CVE-2025-9232", "cve_description": "Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash which leads to Denial of Service for an application. The OpenSSL HTTP client API functions can be used directly by applications but they are also used by the OCSP client functions and CMP (Certificate Management Protocol) client implementation in OpenSSL. However the URLs used by these implementations are unlikely to be controlled by an attacker. In this vulnerable code the out of bounds read can only trigger a crash. Furthermore the vulnerability requires an attacker-controlled URL to be passed from an application to the OpenSSL function and the user has to have a 'no_proxy' environment variable set. For the aforementioned reasons the issue was assessed as Low severity. The vulnerable code was introduced in the following patch releases: 3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the HTTP client implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "low", "cve_public_date": "2025-09-30 14:15:00 UTC" } ], "launchpad_bugs_fixed": [ 2141941, 2141708, 2137464, 2133492 ], "changes": [ { "cves": [], "log": [ "", " [ Eric Berry ]", " * Enable CPU jitter fluctuations", " * Detect FIPS jitterentropy mode and load jitterentropy enabled FIPS", " provider (LP: #2141941)", "", " [ Ravi Kant Sharma ]", " * Merge with Debian unstable (LP: #2141708). Remaining changes:", " - d/p/regex_match_ecp_nistp521-ppc64.patch", " - Use perl:native in the autopkgtest for installability on i386.", " - Symlink copyright/changelog.Debian.gz in libssl3* to libssl-dev/openssl", " - Disable LTO with which the codebase is generally incompatible", " (LP #2058017)", " - Default config reads crypto-config and /etc/ssl/openssl.cnf.d dropins", " - Don't enable or package anything FIPS (LP #2087955)", " - Match last filename for output in ecp_nistp521-ppc64.pl (LP #2137464)", " - Enable CPU jitter fluctuations", " - fips patches (debian/patches/fips):", " - crypto: Add kernel FIPS mode detection", " - crypto: Automatically use the FIPS provider...", " - apps/speed: Omit unavailable algorithms in FIPS mode", " - apps: pass -propquery arg to the libctx DRBG fetches", " - test: Ensure encoding runs with the correct context...", " - Add Ubuntu-specific defines to help FIPS certification (LP #2073991)", " + UBUNTU_OSSL_SELF_TEST_DESC_PCT_DH", " + UBUNTU_OSSL_PROV_FIPS_PARAM_UNAPPROVED_USAGE", " - Detect FIPS jitterentropy mode and load jitterentropy enabled FIPS", " provider", " * Refreshed patches", " - fips/test-Ensure-encoding-runs-with-the-correct-context-during.patch", " - fips/two-defines-for-fips-in-libssl-dev-headers.patch", " - fips/crypto-Automatically-use-the-FIPS-provider-when-the-kerne.patch", "" ], "package": "openssl", "version": "3.5.5-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2141941, 2141708 ], "author": "Ravi Kant Sharma ", "date": "Sun, 15 Feb 2026 14:56:21 +0100" }, { "cves": [ { "cve": "CVE-2025-11187", "url": "https://ubuntu.com/security/CVE-2025-11187", "cve_description": "Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification. Impact summary: The stack buffer overflow or NULL pointer dereference may cause a crash leading to Denial of Service for an application that parses untrusted PKCS#12 files. The buffer overflow may also potentially enable code execution depending on platform mitigations. When verifying a PKCS#12 file that uses PBMAC1 for the MAC, the PBKDF2 salt and keylength parameters from the file are used without validation. If the value of keylength exceeds the size of the fixed stack buffer used for the derived key (64 bytes), the key derivation will overflow the buffer. The overflow length is attacker-controlled. Also, if the salt parameter is not an OCTET STRING type this can lead to invalid or NULL pointer dereference. Exploiting this issue requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For this reason the issue was assessed as Moderate severity. The FIPS modules in 3.6, 3.5 and 3.4 are not affected by this issue, as PKCS#12 processing is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5 and 3.4 are vulnerable to this issue. OpenSSL 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue as they do not support PBMAC1 in PKCS#12.", "cve_priority": "medium", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-15467", "url": "https://ubuntu.com/security/CVE-2025-15467", "cve_description": "Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verifying that its length fits the destination. An attacker can supply a crafted CMS message with an oversized IV, causing a stack-based out-of-bounds write before any authentication or tag verification occurs. Applications and services that parse untrusted CMS or PKCS#7 content using AEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable. Because the overflow occurs prior to authentication, no valid key material is required to trigger it. While exploitability to remote code execution depends on platform and toolchain mitigations, the stack-based write primitive represents a severe risk. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not affected by this issue. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS AuthEnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verifying that its length fits the destination. An attacker can supply a crafted CMS message with an oversized IV, causing a stack-based out-of-bounds write before any authentication or tag verification occurs. Applications and services that parse untrusted CMS or PKCS#7 content using AEAD ciphers (e.g., S/MIME AuthEnvelopedData with AES-GCM) are vulnerable. Because the overflow occurs prior to authentication, no valid key material is required to trigger it. While exploitability to remote code execution depends on platform and toolchain mitigations, the stack-based write primitive represents a severe risk. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "medium", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-15468", "url": "https://ubuntu.com/security/CVE-2025-15468", "cve_description": "Issue summary: If an application using the SSL_CIPHER_find() function in a QUIC protocol client or server receives an unknown cipher suite from the peer, a NULL dereference occurs. Impact summary: A NULL pointer dereference leads to abnormal termination of the running process causing Denial of Service. Some applications call SSL_CIPHER_find() from the client_hello_cb callback on the cipher ID received from the peer. If this is done with an SSL object implementing the QUIC protocol, NULL pointer dereference will happen if the examined cipher ID is unknown or unsupported. As it is not very common to call this function in applications using the QUIC protocol and the worst outcome is Denial of Service, the issue was assessed as Low severity. The vulnerable code was introduced in the 3.2 version with the addition of the QUIC protocol support. The FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue, as the QUIC implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-15469", "url": "https://ubuntu.com/security/CVE-2025-15469", "cve_description": "Issue summary: The 'openssl dgst' command-line tool silently truncates input data to 16MB when using one-shot signing algorithms and reports success instead of an error. Impact summary: A user signing or verifying files larger than 16MB with one-shot algorithms (such as Ed25519, Ed448, or ML-DSA) may believe the entire file is authenticated while trailing data beyond 16MB remains unauthenticated. When the 'openssl dgst' command is used with algorithms that only support one-shot signing (Ed25519, Ed448, ML-DSA-44, ML-DSA-65, ML-DSA-87), the input is buffered with a 16MB limit. If the input exceeds this limit, the tool silently truncates to the first 16MB and continues without signaling an error, contrary to what the documentation states. This creates an integrity gap where trailing bytes can be modified without detection if both signing and verification are performed using the same affected codepath. The issue affects only the command-line tool behavior. Verifiers that process the full message using library APIs will reject the signature, so the risk primarily affects workflows that both sign and verify with the affected 'openssl dgst' command. Streaming digest algorithms for 'openssl dgst' and library users are unaffected. The FIPS modules in 3.5 and 3.6 are not affected by this issue, as the command-line tools are outside the OpenSSL FIPS module boundary. OpenSSL 3.5 and 3.6 are vulnerable to this issue. OpenSSL 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-66199", "url": "https://ubuntu.com/security/CVE-2025-66199", "cve_description": "Issue summary: A TLS 1.3 connection using certificate compression can be forced to allocate a large buffer before decompression without checking against the configured certificate size limit. Impact summary: An attacker can cause per-connection memory allocations of up to approximately 22 MiB and extra CPU work, potentially leading to service degradation or resource exhaustion (Denial of Service). In affected configurations, the peer-supplied uncompressed certificate length from a CompressedCertificate message is used to grow a heap buffer prior to decompression. This length is not bounded by the max_cert_list setting, which otherwise constrains certificate message sizes. An attacker can exploit this to cause large per-connection allocations followed by handshake failure. No memory corruption or information disclosure occurs. This issue only affects builds where TLS 1.3 certificate compression is compiled in (i.e., not OPENSSL_NO_COMP_ALG) and at least one compression algorithm (brotli, zlib, or zstd) is available, and where the compression extension is negotiated. Both clients receiving a server CompressedCertificate and servers in mutual TLS scenarios receiving a client CompressedCertificate are affected. Servers that do not request client certificates are not vulnerable to client-initiated attacks. Users can mitigate this issue by setting SSL_OP_NO_RX_CERTIFICATE_COMPRESSION to disable receiving compressed certificates. The FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue, as the TLS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-68160", "url": "https://ubuntu.com/security/CVE-2025-68160", "cve_description": "Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds write. Impact summary: This out-of-bounds write can cause memory corruption which typically results in a crash, leading to Denial of Service for an application. The line-buffering BIO filter (BIO_f_linebuffer) is not used by default in TLS/SSL data paths. In OpenSSL command-line applications, it is typically only pushed onto stdout/stderr on VMS systems. Third-party applications that explicitly use this filter with a BIO chain that can short-write and that write large, newline-free data influenced by an attacker would be affected. However, the circumstances where this could happen are unlikely to be under attacker control, and BIO_f_linebuffer is unlikely to be handling non-curated data controlled by an attacker. For that reason the issue was assessed as Low severity. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the BIO implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Impact summary: This out-of-bounds write can cause memory corruption which typically results in a crash, leading to Denial of Service for an application. The line-buffering BIO filter (BIO_f_linebuffer) is not used by default in TLS/SSL data paths. In OpenSSL command-line applications, it is typically only pushed onto stdout/stderr on VMS systems. Third-party applications that explicitly use this filter with a BIO chain that can short-write and that write large, newline-free data influenced by an attacker would be affected. However, the circumstances where this could happen are unlikely to be under attacker control, and BIO_f_linebuffer is unlikely to be handling non-curated data controlled by an attacker. For that reason the issue was assessed as Low severity. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the BIO implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69418", "url": "https://ubuntu.com/security/CVE-2025-69418", "cve_description": "Issue summary: When using the low-level OCB API directly with AES-NI or
other hardware-accelerated code paths, inputs whose length is not a multiple
of 16 bytes can leave the final partial block unencrypted and unauthenticated.

Impact summary: The trailing 1-15 bytes of a message may be exposed in
cleartext on encryption and are not covered by the authentication tag,
allowing an attacker to read or tamper with those bytes without detection.

The low-level OCB encrypt and decrypt routines in the hardware-accelerated
stream path process full 16-byte blocks but do not advance the input/output
pointers. The subsequent tail-handling code then operates on the original
base pointers, effectively reprocessing the beginning of the buffer while
leaving the actual trailing bytes unprocessed. The authentication checksum
also excludes the true tail bytes.

However, typical OpenSSL consumers using EVP are not affected because the
higher-level EVP and provider OCB implementations split inputs so that full
blocks and trailing partial blocks are processed in separate calls, avoiding
the problematic code path. Additionally, TLS does not use OCB ciphersuites.
The vulnerability only affects applications that call the low-level
CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with
non-block-aligned lengths in a single call on hardware-accelerated builds.
For these reasons the issue was assessed as Low severity.

The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected
by this issue, as OCB mode is not a FIPS-approved algorithm.

OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.

OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69419", "url": "https://ubuntu.com/security/CVE-2025-69419", "cve_description": "Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service. The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12 BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 source byte count as the destination buffer capacity to UTF8_putc(). For BMP code points above U+07FF, UTF-8 requires three bytes, but the forwarded capacity can be just two bytes. UTF8_putc() then returns -1, and this negative value is added to the output length without validation, causing the length to become negative. The subsequent trailing NUL byte is then written at a negative offset, causing write outside of heap allocated buffer. The vulnerability is reachable via the public PKCS12_get_friendlyname() API when parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a different code path that avoids this issue, PKCS12_get_friendlyname() directly invokes the vulnerable function. Exploitation requires an attacker to provide a malicious PKCS#12 file to be parsed by the application and the attacker can just trigger a one zero byte write before the allocated buffer. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue. Impact summary: The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service. The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12 BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 source byte count as the destination buffer capacity to UTF8_putc(). For BMP code points above U+07FF, UTF-8 requires three bytes, but the forwarded capacity can be just two bytes. UTF8_putc() then returns -1, and this negative value is added to the output length without validation, causing the length to become negative. The subsequent trailing NUL byte is then written at a negative offset, causing write outside of heap allocated buffer. The vulnerability is reachable via the public PKCS12_get_friendlyname() API when parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a different code path that avoids this issue, PKCS12_get_friendlyname() directly invokes the vulnerable function. Exploitation requires an attacker to provide a malicious PKCS#12 file to be parsed by the application and the attacker can just trigger a one zero byte write before the allocated buffer. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69420", "url": "https://ubuntu.com/security/CVE-2025-69420", "cve_description": "Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file. Impact summary: An application calling TS_RESP_verify_response() with a malformed TimeStamp Response can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2() access the signing cert attribute value without validating its type. When the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed TimeStamp Response to an application that verifies timestamp responses. The TimeStamp protocol (RFC 3161) is not widely used and the impact of the exploit is just a Denial of Service. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the TimeStamp Response implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue. Impact summary: An application calling TS_RESP_verify_response() with a malformed TimeStamp Response can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2() access the signing cert attribute value without validating its type. When the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed TimeStamp Response to an application that verifies timestamp responses. The TimeStamp protocol (RFC 3161) is not widely used and the impact of the exploit is just a Denial of Service. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the TimeStamp Response implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69421", "url": "https://ubuntu.com/security/CVE-2025-69421", "cve_description": "Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. The PKCS12_item_decrypt_d2i_ex() function does not check whether the oct parameter is NULL before dereferencing it. When called from PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can be NULL, causing a crash. The vulnerability is limited to Denial of Service and cannot be escalated to achieve code execution or memory disclosure. Exploiting this issue requires an attacker to provide a malformed PKCS#12 file to an application that processes it. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. The PKCS12_item_decrypt_d2i_ex() function does not check whether the oct parameter is NULL before dereferencing it. When called from PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can be NULL, causing a crash. The vulnerability is limited to Denial of Service and cannot be escalated to achieve code execution or memory disclosure. Exploiting this issue requires an attacker to provide a malformed PKCS#12 file to an application that processes it. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2026-22795", "url": "https://ubuntu.com/security/CVE-2026-22795", "cve_description": "Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file. Impact summary: An application processing a malformed PKCS#12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting in a Denial of Service. A type confusion vulnerability exists in PKCS#12 parsing code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid pointer read. The location is constrained to a 1-byte address space, meaning any attempted pointer manipulation can only target addresses between 0x00 and 0xFF. This range corresponds to the zero page, which is unmapped on most modern operating systems and will reliably result in a crash, leading only to a Denial of Service. Exploiting this issue also requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For these reasons, the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue. Impact summary: An application processing a malformed PKCS#12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting in a Denial of Service. A type confusion vulnerability exists in PKCS#12 parsing code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid pointer read. The location is constrained to a 1-byte address space, meaning any attempted pointer manipulation can only target addresses between 0x00 and 0xFF. This range corresponds to the zero page, which is unmapped on most modern operating systems and will reliably result in a crash, leading only to a Denial of Service. Exploiting this issue also requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For these reasons, the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2026-22796", "url": "https://ubuntu.com/security/CVE-2026-22796", "cve_description": "Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing malformed PKCS#7 data. Impact summary: An application performing signature verification of PKCS#7 data or calling directly the PKCS7_digest_from_attributes() function can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The function PKCS7_digest_from_attributes() accesses the message digest attribute value without validating its type. When the type is not V_ASN1_OCTET_STRING, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed signed PKCS#7 to an application that verifies it. The impact of the exploit is just a Denial of Service, the PKCS7 API is legacy and applications should be using the CMS API instead. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#7 parsing implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Impact summary: An application performing signature verification of PKCS#7 data or calling directly the PKCS7_digest_from_attributes() function can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The function PKCS7_digest_from_attributes() accesses the message digest attribute value without validating its type. When the type is not V_ASN1_OCTET_STRING, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed signed PKCS#7 to an application that verifies it. The impact of the exploit is just a Denial of Service, the PKCS7 API is legacy and applications should be using the CMS API instead. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#7 parsing implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" } ], "log": [ "", " * Import 3.5.5", " - CVE-2025-11187 (Improper validation of PBMAC1 parameters in PKCS#12 MAC", " verification)", " - CVE-2025-15467 (Stack buffer overflow in CMS AuthEnvelopedData parsing)", " - CVE-2025-15468 (NULL dereference in SSL_CIPHER_find() function on unknown", " cipher ID)", " - CVE-2025-15469 (\"openssl dgst\" one-shot codepath silently truncates inputs", " >16MB)", " - CVE-2025-66199 (TLS 1.3 CompressedCertificate excessive memory allocation)", " - CVE-2025-68160 (Heap out-of-bounds write in BIO_f_linebuffer on short", " writes)", " - CVE-2025-69418 (Unauthenticated/unencrypted trailing bytes with low-level", " OCB function calls)", " - CVE-2025-69419 (Out of bounds write in PKCS12_get_friendlyname() UTF-8", " conversion)", " - CVE-2025-69420 (Missing ASN1_TYPE validation in TS_RESP_verify_response()", " function)", " - CVE-2025-69421 (NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex", " function)", " - CVE-2026-22795 (Missing ASN1_TYPE validation in PKCS#12 parsing)", " - CVE-2026-22796 (ASN1_TYPE Type Confusion in the", " - PKCS7_digest_from_attributes() function)", "" ], "package": "openssl", "version": "3.5.5-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Sebastian Andrzej Siewior ", "date": "Tue, 27 Jan 2026 21:09:55 +0100" }, { "cves": [ { "cve": "CVE-2025-9230", "url": "https://ubuntu.com/security/CVE-2025-9230", "cve_description": "Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service or Execution of attacker-supplied code. Although the consequences of a successful exploit of this vulnerability could be severe, the probability that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to our Security Policy. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9231", "url": "https://ubuntu.com/security/CVE-2025-9231", "cve_description": "Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private key by an attacker.. While remote key recovery over a network was not attempted by the reporter, timing measurements revealed a timing signal which may allow such an attack. OpenSSL does not directly support certificates with SM2 keys in TLS, and so this CVE is not relevant in most TLS contexts. However, given that it is possible to add support for such certificates via a custom provider, coupled with the fact that in such a custom provider context the private key may be recoverable via remote timing measurements, we consider this to be a Moderate severity issue. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as SM2 is not an approved algorithm.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9232", "url": "https://ubuntu.com/security/CVE-2025-9232", "cve_description": "Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash which leads to Denial of Service for an application. The OpenSSL HTTP client API functions can be used directly by applications but they are also used by the OCSP client functions and CMP (Certificate Management Protocol) client implementation in OpenSSL. However the URLs used by these implementations are unlikely to be controlled by an attacker. In this vulnerable code the out of bounds read can only trigger a crash. Furthermore the vulnerability requires an attacker-controlled URL to be passed from an application to the OpenSSL function and the user has to have a 'no_proxy' environment variable set. For the aforementioned reasons the issue was assessed as Low severity. The vulnerable code was introduced in the following patch releases: 3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the HTTP client implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "low", "cve_public_date": "2025-09-30 14:15:00 UTC" } ], "log": [ "", " * Match last filename for output in ecp_nistp521-ppc64.pl (LP: #2137464)", " - d/p/regex_match_ecp_nistp521-ppc64.patch", " * Drop patches, merged upstream", " - d/p/CVE-2025-9230.patch", " - d/p/CVE-2025-9231-1.patch", " - d/p/CVE-2025-9231-2.patch", " - d/p/CVE-2025-9232.patch ", " * Merge with Debian unstable (LP: #2133492). Remaining changes:", " - Use perl:native in the autopkgtest for installability on i386.", " - Symlink copyright/changelog.Debian.gz in libssl3* to libssl-dev/openssl", " - Disable LTO with which the codebase is generally incompatible (LP #2058017)", " - Default config reads crypto-config and /etc/ssl/openssl.cnf.d dropins", " - Don't enable or package anything FIPS (LP #2087955)", " - Match last filename for output in ecp_nistp521-ppc64.pl (LP #2137464)", " - fips patches (debian/patches/fips):", " - crypto: Add kernel FIPS mode detection", " - crypto: Automatically use the FIPS provider...", " - apps/speed: Omit unavailable algorithms in FIPS mode", " - apps: pass -propquery arg to the libctx DRBG fetches", " - test: Ensure encoding runs with the correct context...", " - Add Ubuntu-specific defines to help FIPS certification (LP #2073991)", " + UBUNTU_OSSL_SELF_TEST_DESC_PCT_DH", " + UBUNTU_OSSL_PROV_FIPS_PARAM_UNAPPROVED_USAGE", "" ], "package": "openssl", "version": "3.5.4-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2137464, 2133492 ], "author": "Ravi Kant Sharma ", "date": "Thu, 08 Jan 2026 15:53:39 +0100" }, { "cves": [ { "cve": "CVE-2025-9230", "url": "https://ubuntu.com/security/CVE-2025-9230", "cve_description": "Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service or Execution of attacker-supplied code. Although the consequences of a successful exploit of this vulnerability could be severe, the probability that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to our Security Policy. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9231", "url": "https://ubuntu.com/security/CVE-2025-9231", "cve_description": "Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private key by an attacker.. While remote key recovery over a network was not attempted by the reporter, timing measurements revealed a timing signal which may allow such an attack. OpenSSL does not directly support certificates with SM2 keys in TLS, and so this CVE is not relevant in most TLS contexts. However, given that it is possible to add support for such certificates via a custom provider, coupled with the fact that in such a custom provider context the private key may be recoverable via remote timing measurements, we consider this to be a Moderate severity issue. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as SM2 is not an approved algorithm.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9232", "url": "https://ubuntu.com/security/CVE-2025-9232", "cve_description": "Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash which leads to Denial of Service for an application. The OpenSSL HTTP client API functions can be used directly by applications but they are also used by the OCSP client functions and CMP (Certificate Management Protocol) client implementation in OpenSSL. However the URLs used by these implementations are unlikely to be controlled by an attacker. In this vulnerable code the out of bounds read can only trigger a crash. Furthermore the vulnerability requires an attacker-controlled URL to be passed from an application to the OpenSSL function and the user has to have a 'no_proxy' environment variable set. For the aforementioned reasons the issue was assessed as Low severity. The vulnerable code was introduced in the following patch releases: 3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the HTTP client implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "low", "cve_public_date": "2025-09-30 14:15:00 UTC" } ], "log": [ "", " * Import 3.5.4", " - CVE-2025-9230 (Out-of-bounds read & write in RFC 3211 KEK Unwrap)", " - CVE-2025-9231 (Timing side-channel in SM2 algorithm on 64 bit ARM)", " - CVE-2025-9232 (Out-of-bounds read in HTTP client no_proxy handling)", "" ], "package": "openssl", "version": "3.5.4-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Sebastian Andrzej Siewior ", "date": "Tue, 30 Sep 2025 21:54:39 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "openssl-provider-legacy", "from_version": { "source_package_name": "openssl", "source_package_version": "3.5.3-1ubuntu2", "version": "3.5.3-1ubuntu2" }, "to_version": { "source_package_name": "openssl", "source_package_version": "3.5.5-1ubuntu1", "version": "3.5.5-1ubuntu1" }, "cves": [ { "cve": "CVE-2025-11187", "url": "https://ubuntu.com/security/CVE-2025-11187", "cve_description": "Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification. Impact summary: The stack buffer overflow or NULL pointer dereference may cause a crash leading to Denial of Service for an application that parses untrusted PKCS#12 files. The buffer overflow may also potentially enable code execution depending on platform mitigations. When verifying a PKCS#12 file that uses PBMAC1 for the MAC, the PBKDF2 salt and keylength parameters from the file are used without validation. If the value of keylength exceeds the size of the fixed stack buffer used for the derived key (64 bytes), the key derivation will overflow the buffer. The overflow length is attacker-controlled. Also, if the salt parameter is not an OCTET STRING type this can lead to invalid or NULL pointer dereference. Exploiting this issue requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For this reason the issue was assessed as Moderate severity. The FIPS modules in 3.6, 3.5 and 3.4 are not affected by this issue, as PKCS#12 processing is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5 and 3.4 are vulnerable to this issue. OpenSSL 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue as they do not support PBMAC1 in PKCS#12.", "cve_priority": "medium", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-15467", "url": "https://ubuntu.com/security/CVE-2025-15467", "cve_description": "Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verifying that its length fits the destination. An attacker can supply a crafted CMS message with an oversized IV, causing a stack-based out-of-bounds write before any authentication or tag verification occurs. Applications and services that parse untrusted CMS or PKCS#7 content using AEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable. Because the overflow occurs prior to authentication, no valid key material is required to trigger it. While exploitability to remote code execution depends on platform and toolchain mitigations, the stack-based write primitive represents a severe risk. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not affected by this issue. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS AuthEnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verifying that its length fits the destination. An attacker can supply a crafted CMS message with an oversized IV, causing a stack-based out-of-bounds write before any authentication or tag verification occurs. Applications and services that parse untrusted CMS or PKCS#7 content using AEAD ciphers (e.g., S/MIME AuthEnvelopedData with AES-GCM) are vulnerable. Because the overflow occurs prior to authentication, no valid key material is required to trigger it. While exploitability to remote code execution depends on platform and toolchain mitigations, the stack-based write primitive represents a severe risk. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "medium", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-15468", "url": "https://ubuntu.com/security/CVE-2025-15468", "cve_description": "Issue summary: If an application using the SSL_CIPHER_find() function in a QUIC protocol client or server receives an unknown cipher suite from the peer, a NULL dereference occurs. Impact summary: A NULL pointer dereference leads to abnormal termination of the running process causing Denial of Service. Some applications call SSL_CIPHER_find() from the client_hello_cb callback on the cipher ID received from the peer. If this is done with an SSL object implementing the QUIC protocol, NULL pointer dereference will happen if the examined cipher ID is unknown or unsupported. As it is not very common to call this function in applications using the QUIC protocol and the worst outcome is Denial of Service, the issue was assessed as Low severity. The vulnerable code was introduced in the 3.2 version with the addition of the QUIC protocol support. The FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue, as the QUIC implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-15469", "url": "https://ubuntu.com/security/CVE-2025-15469", "cve_description": "Issue summary: The 'openssl dgst' command-line tool silently truncates input data to 16MB when using one-shot signing algorithms and reports success instead of an error. Impact summary: A user signing or verifying files larger than 16MB with one-shot algorithms (such as Ed25519, Ed448, or ML-DSA) may believe the entire file is authenticated while trailing data beyond 16MB remains unauthenticated. When the 'openssl dgst' command is used with algorithms that only support one-shot signing (Ed25519, Ed448, ML-DSA-44, ML-DSA-65, ML-DSA-87), the input is buffered with a 16MB limit. If the input exceeds this limit, the tool silently truncates to the first 16MB and continues without signaling an error, contrary to what the documentation states. This creates an integrity gap where trailing bytes can be modified without detection if both signing and verification are performed using the same affected codepath. The issue affects only the command-line tool behavior. Verifiers that process the full message using library APIs will reject the signature, so the risk primarily affects workflows that both sign and verify with the affected 'openssl dgst' command. Streaming digest algorithms for 'openssl dgst' and library users are unaffected. The FIPS modules in 3.5 and 3.6 are not affected by this issue, as the command-line tools are outside the OpenSSL FIPS module boundary. OpenSSL 3.5 and 3.6 are vulnerable to this issue. OpenSSL 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-66199", "url": "https://ubuntu.com/security/CVE-2025-66199", "cve_description": "Issue summary: A TLS 1.3 connection using certificate compression can be forced to allocate a large buffer before decompression without checking against the configured certificate size limit. Impact summary: An attacker can cause per-connection memory allocations of up to approximately 22 MiB and extra CPU work, potentially leading to service degradation or resource exhaustion (Denial of Service). In affected configurations, the peer-supplied uncompressed certificate length from a CompressedCertificate message is used to grow a heap buffer prior to decompression. This length is not bounded by the max_cert_list setting, which otherwise constrains certificate message sizes. An attacker can exploit this to cause large per-connection allocations followed by handshake failure. No memory corruption or information disclosure occurs. This issue only affects builds where TLS 1.3 certificate compression is compiled in (i.e., not OPENSSL_NO_COMP_ALG) and at least one compression algorithm (brotli, zlib, or zstd) is available, and where the compression extension is negotiated. Both clients receiving a server CompressedCertificate and servers in mutual TLS scenarios receiving a client CompressedCertificate are affected. Servers that do not request client certificates are not vulnerable to client-initiated attacks. Users can mitigate this issue by setting SSL_OP_NO_RX_CERTIFICATE_COMPRESSION to disable receiving compressed certificates. The FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue, as the TLS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-68160", "url": "https://ubuntu.com/security/CVE-2025-68160", "cve_description": "Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds write. Impact summary: This out-of-bounds write can cause memory corruption which typically results in a crash, leading to Denial of Service for an application. The line-buffering BIO filter (BIO_f_linebuffer) is not used by default in TLS/SSL data paths. In OpenSSL command-line applications, it is typically only pushed onto stdout/stderr on VMS systems. Third-party applications that explicitly use this filter with a BIO chain that can short-write and that write large, newline-free data influenced by an attacker would be affected. However, the circumstances where this could happen are unlikely to be under attacker control, and BIO_f_linebuffer is unlikely to be handling non-curated data controlled by an attacker. For that reason the issue was assessed as Low severity. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the BIO implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Impact summary: This out-of-bounds write can cause memory corruption which typically results in a crash, leading to Denial of Service for an application. The line-buffering BIO filter (BIO_f_linebuffer) is not used by default in TLS/SSL data paths. In OpenSSL command-line applications, it is typically only pushed onto stdout/stderr on VMS systems. Third-party applications that explicitly use this filter with a BIO chain that can short-write and that write large, newline-free data influenced by an attacker would be affected. However, the circumstances where this could happen are unlikely to be under attacker control, and BIO_f_linebuffer is unlikely to be handling non-curated data controlled by an attacker. For that reason the issue was assessed as Low severity. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the BIO implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69418", "url": "https://ubuntu.com/security/CVE-2025-69418", "cve_description": "Issue summary: When using the low-level OCB API directly with AES-NI or
other hardware-accelerated code paths, inputs whose length is not a multiple
of 16 bytes can leave the final partial block unencrypted and unauthenticated.

Impact summary: The trailing 1-15 bytes of a message may be exposed in
cleartext on encryption and are not covered by the authentication tag,
allowing an attacker to read or tamper with those bytes without detection.

The low-level OCB encrypt and decrypt routines in the hardware-accelerated
stream path process full 16-byte blocks but do not advance the input/output
pointers. The subsequent tail-handling code then operates on the original
base pointers, effectively reprocessing the beginning of the buffer while
leaving the actual trailing bytes unprocessed. The authentication checksum
also excludes the true tail bytes.

However, typical OpenSSL consumers using EVP are not affected because the
higher-level EVP and provider OCB implementations split inputs so that full
blocks and trailing partial blocks are processed in separate calls, avoiding
the problematic code path. Additionally, TLS does not use OCB ciphersuites.
The vulnerability only affects applications that call the low-level
CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with
non-block-aligned lengths in a single call on hardware-accelerated builds.
For these reasons the issue was assessed as Low severity.

The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected
by this issue, as OCB mode is not a FIPS-approved algorithm.

OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.

OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69419", "url": "https://ubuntu.com/security/CVE-2025-69419", "cve_description": "Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service. The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12 BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 source byte count as the destination buffer capacity to UTF8_putc(). For BMP code points above U+07FF, UTF-8 requires three bytes, but the forwarded capacity can be just two bytes. UTF8_putc() then returns -1, and this negative value is added to the output length without validation, causing the length to become negative. The subsequent trailing NUL byte is then written at a negative offset, causing write outside of heap allocated buffer. The vulnerability is reachable via the public PKCS12_get_friendlyname() API when parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a different code path that avoids this issue, PKCS12_get_friendlyname() directly invokes the vulnerable function. Exploitation requires an attacker to provide a malicious PKCS#12 file to be parsed by the application and the attacker can just trigger a one zero byte write before the allocated buffer. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue. Impact summary: The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service. The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12 BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 source byte count as the destination buffer capacity to UTF8_putc(). For BMP code points above U+07FF, UTF-8 requires three bytes, but the forwarded capacity can be just two bytes. UTF8_putc() then returns -1, and this negative value is added to the output length without validation, causing the length to become negative. The subsequent trailing NUL byte is then written at a negative offset, causing write outside of heap allocated buffer. The vulnerability is reachable via the public PKCS12_get_friendlyname() API when parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a different code path that avoids this issue, PKCS12_get_friendlyname() directly invokes the vulnerable function. Exploitation requires an attacker to provide a malicious PKCS#12 file to be parsed by the application and the attacker can just trigger a one zero byte write before the allocated buffer. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69420", "url": "https://ubuntu.com/security/CVE-2025-69420", "cve_description": "Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file. Impact summary: An application calling TS_RESP_verify_response() with a malformed TimeStamp Response can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2() access the signing cert attribute value without validating its type. When the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed TimeStamp Response to an application that verifies timestamp responses. The TimeStamp protocol (RFC 3161) is not widely used and the impact of the exploit is just a Denial of Service. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the TimeStamp Response implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue. Impact summary: An application calling TS_RESP_verify_response() with a malformed TimeStamp Response can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2() access the signing cert attribute value without validating its type. When the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed TimeStamp Response to an application that verifies timestamp responses. The TimeStamp protocol (RFC 3161) is not widely used and the impact of the exploit is just a Denial of Service. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the TimeStamp Response implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69421", "url": "https://ubuntu.com/security/CVE-2025-69421", "cve_description": "Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. The PKCS12_item_decrypt_d2i_ex() function does not check whether the oct parameter is NULL before dereferencing it. When called from PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can be NULL, causing a crash. The vulnerability is limited to Denial of Service and cannot be escalated to achieve code execution or memory disclosure. Exploiting this issue requires an attacker to provide a malformed PKCS#12 file to an application that processes it. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. The PKCS12_item_decrypt_d2i_ex() function does not check whether the oct parameter is NULL before dereferencing it. When called from PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can be NULL, causing a crash. The vulnerability is limited to Denial of Service and cannot be escalated to achieve code execution or memory disclosure. Exploiting this issue requires an attacker to provide a malformed PKCS#12 file to an application that processes it. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2026-22795", "url": "https://ubuntu.com/security/CVE-2026-22795", "cve_description": "Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file. Impact summary: An application processing a malformed PKCS#12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting in a Denial of Service. A type confusion vulnerability exists in PKCS#12 parsing code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid pointer read. The location is constrained to a 1-byte address space, meaning any attempted pointer manipulation can only target addresses between 0x00 and 0xFF. This range corresponds to the zero page, which is unmapped on most modern operating systems and will reliably result in a crash, leading only to a Denial of Service. Exploiting this issue also requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For these reasons, the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue. Impact summary: An application processing a malformed PKCS#12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting in a Denial of Service. A type confusion vulnerability exists in PKCS#12 parsing code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid pointer read. The location is constrained to a 1-byte address space, meaning any attempted pointer manipulation can only target addresses between 0x00 and 0xFF. This range corresponds to the zero page, which is unmapped on most modern operating systems and will reliably result in a crash, leading only to a Denial of Service. Exploiting this issue also requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For these reasons, the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2026-22796", "url": "https://ubuntu.com/security/CVE-2026-22796", "cve_description": "Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing malformed PKCS#7 data. Impact summary: An application performing signature verification of PKCS#7 data or calling directly the PKCS7_digest_from_attributes() function can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The function PKCS7_digest_from_attributes() accesses the message digest attribute value without validating its type. When the type is not V_ASN1_OCTET_STRING, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed signed PKCS#7 to an application that verifies it. The impact of the exploit is just a Denial of Service, the PKCS7 API is legacy and applications should be using the CMS API instead. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#7 parsing implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Impact summary: An application performing signature verification of PKCS#7 data or calling directly the PKCS7_digest_from_attributes() function can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The function PKCS7_digest_from_attributes() accesses the message digest attribute value without validating its type. When the type is not V_ASN1_OCTET_STRING, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed signed PKCS#7 to an application that verifies it. The impact of the exploit is just a Denial of Service, the PKCS7 API is legacy and applications should be using the CMS API instead. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#7 parsing implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-9230", "url": "https://ubuntu.com/security/CVE-2025-9230", "cve_description": "Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service or Execution of attacker-supplied code. Although the consequences of a successful exploit of this vulnerability could be severe, the probability that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to our Security Policy. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9231", "url": "https://ubuntu.com/security/CVE-2025-9231", "cve_description": "Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private key by an attacker.. While remote key recovery over a network was not attempted by the reporter, timing measurements revealed a timing signal which may allow such an attack. OpenSSL does not directly support certificates with SM2 keys in TLS, and so this CVE is not relevant in most TLS contexts. However, given that it is possible to add support for such certificates via a custom provider, coupled with the fact that in such a custom provider context the private key may be recoverable via remote timing measurements, we consider this to be a Moderate severity issue. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as SM2 is not an approved algorithm.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9232", "url": "https://ubuntu.com/security/CVE-2025-9232", "cve_description": "Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash which leads to Denial of Service for an application. The OpenSSL HTTP client API functions can be used directly by applications but they are also used by the OCSP client functions and CMP (Certificate Management Protocol) client implementation in OpenSSL. However the URLs used by these implementations are unlikely to be controlled by an attacker. In this vulnerable code the out of bounds read can only trigger a crash. Furthermore the vulnerability requires an attacker-controlled URL to be passed from an application to the OpenSSL function and the user has to have a 'no_proxy' environment variable set. For the aforementioned reasons the issue was assessed as Low severity. The vulnerable code was introduced in the following patch releases: 3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the HTTP client implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "low", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9230", "url": "https://ubuntu.com/security/CVE-2025-9230", "cve_description": "Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service or Execution of attacker-supplied code. Although the consequences of a successful exploit of this vulnerability could be severe, the probability that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to our Security Policy. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9231", "url": "https://ubuntu.com/security/CVE-2025-9231", "cve_description": "Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private key by an attacker.. While remote key recovery over a network was not attempted by the reporter, timing measurements revealed a timing signal which may allow such an attack. OpenSSL does not directly support certificates with SM2 keys in TLS, and so this CVE is not relevant in most TLS contexts. However, given that it is possible to add support for such certificates via a custom provider, coupled with the fact that in such a custom provider context the private key may be recoverable via remote timing measurements, we consider this to be a Moderate severity issue. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as SM2 is not an approved algorithm.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9232", "url": "https://ubuntu.com/security/CVE-2025-9232", "cve_description": "Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash which leads to Denial of Service for an application. The OpenSSL HTTP client API functions can be used directly by applications but they are also used by the OCSP client functions and CMP (Certificate Management Protocol) client implementation in OpenSSL. However the URLs used by these implementations are unlikely to be controlled by an attacker. In this vulnerable code the out of bounds read can only trigger a crash. Furthermore the vulnerability requires an attacker-controlled URL to be passed from an application to the OpenSSL function and the user has to have a 'no_proxy' environment variable set. For the aforementioned reasons the issue was assessed as Low severity. The vulnerable code was introduced in the following patch releases: 3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the HTTP client implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "low", "cve_public_date": "2025-09-30 14:15:00 UTC" } ], "launchpad_bugs_fixed": [ 2141941, 2141708, 2137464, 2133492 ], "changes": [ { "cves": [], "log": [ "", " [ Eric Berry ]", " * Enable CPU jitter fluctuations", " * Detect FIPS jitterentropy mode and load jitterentropy enabled FIPS", " provider (LP: #2141941)", "", " [ Ravi Kant Sharma ]", " * Merge with Debian unstable (LP: #2141708). Remaining changes:", " - d/p/regex_match_ecp_nistp521-ppc64.patch", " - Use perl:native in the autopkgtest for installability on i386.", " - Symlink copyright/changelog.Debian.gz in libssl3* to libssl-dev/openssl", " - Disable LTO with which the codebase is generally incompatible", " (LP #2058017)", " - Default config reads crypto-config and /etc/ssl/openssl.cnf.d dropins", " - Don't enable or package anything FIPS (LP #2087955)", " - Match last filename for output in ecp_nistp521-ppc64.pl (LP #2137464)", " - Enable CPU jitter fluctuations", " - fips patches (debian/patches/fips):", " - crypto: Add kernel FIPS mode detection", " - crypto: Automatically use the FIPS provider...", " - apps/speed: Omit unavailable algorithms in FIPS mode", " - apps: pass -propquery arg to the libctx DRBG fetches", " - test: Ensure encoding runs with the correct context...", " - Add Ubuntu-specific defines to help FIPS certification (LP #2073991)", " + UBUNTU_OSSL_SELF_TEST_DESC_PCT_DH", " + UBUNTU_OSSL_PROV_FIPS_PARAM_UNAPPROVED_USAGE", " - Detect FIPS jitterentropy mode and load jitterentropy enabled FIPS", " provider", " * Refreshed patches", " - fips/test-Ensure-encoding-runs-with-the-correct-context-during.patch", " - fips/two-defines-for-fips-in-libssl-dev-headers.patch", " - fips/crypto-Automatically-use-the-FIPS-provider-when-the-kerne.patch", "" ], "package": "openssl", "version": "3.5.5-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2141941, 2141708 ], "author": "Ravi Kant Sharma ", "date": "Sun, 15 Feb 2026 14:56:21 +0100" }, { "cves": [ { "cve": "CVE-2025-11187", "url": "https://ubuntu.com/security/CVE-2025-11187", "cve_description": "Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification. Impact summary: The stack buffer overflow or NULL pointer dereference may cause a crash leading to Denial of Service for an application that parses untrusted PKCS#12 files. The buffer overflow may also potentially enable code execution depending on platform mitigations. When verifying a PKCS#12 file that uses PBMAC1 for the MAC, the PBKDF2 salt and keylength parameters from the file are used without validation. If the value of keylength exceeds the size of the fixed stack buffer used for the derived key (64 bytes), the key derivation will overflow the buffer. The overflow length is attacker-controlled. Also, if the salt parameter is not an OCTET STRING type this can lead to invalid or NULL pointer dereference. Exploiting this issue requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For this reason the issue was assessed as Moderate severity. The FIPS modules in 3.6, 3.5 and 3.4 are not affected by this issue, as PKCS#12 processing is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5 and 3.4 are vulnerable to this issue. OpenSSL 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue as they do not support PBMAC1 in PKCS#12.", "cve_priority": "medium", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-15467", "url": "https://ubuntu.com/security/CVE-2025-15467", "cve_description": "Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS (Auth)EnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verifying that its length fits the destination. An attacker can supply a crafted CMS message with an oversized IV, causing a stack-based out-of-bounds write before any authentication or tag verification occurs. Applications and services that parse untrusted CMS or PKCS#7 content using AEAD ciphers (e.g., S/MIME (Auth)EnvelopedData with AES-GCM) are vulnerable. Because the overflow occurs prior to authentication, no valid key material is required to trigger it. While exploitability to remote code execution depends on platform and toolchain mitigations, the stack-based write primitive represents a severe risk. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not affected by this issue. Impact summary: A stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution. When parsing CMS AuthEnvelopedData structures that use AEAD ciphers such as AES-GCM, the IV (Initialization Vector) encoded in the ASN.1 parameters is copied into a fixed-size stack buffer without verifying that its length fits the destination. An attacker can supply a crafted CMS message with an oversized IV, causing a stack-based out-of-bounds write before any authentication or tag verification occurs. Applications and services that parse untrusted CMS or PKCS#7 content using AEAD ciphers (e.g., S/MIME AuthEnvelopedData with AES-GCM) are vulnerable. Because the overflow occurs prior to authentication, no valid key material is required to trigger it. While exploitability to remote code execution depends on platform and toolchain mitigations, the stack-based write primitive represents a severe risk. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0 are vulnerable to this issue. OpenSSL 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "medium", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-15468", "url": "https://ubuntu.com/security/CVE-2025-15468", "cve_description": "Issue summary: If an application using the SSL_CIPHER_find() function in a QUIC protocol client or server receives an unknown cipher suite from the peer, a NULL dereference occurs. Impact summary: A NULL pointer dereference leads to abnormal termination of the running process causing Denial of Service. Some applications call SSL_CIPHER_find() from the client_hello_cb callback on the cipher ID received from the peer. If this is done with an SSL object implementing the QUIC protocol, NULL pointer dereference will happen if the examined cipher ID is unknown or unsupported. As it is not very common to call this function in applications using the QUIC protocol and the worst outcome is Denial of Service, the issue was assessed as Low severity. The vulnerable code was introduced in the 3.2 version with the addition of the QUIC protocol support. The FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue, as the QUIC implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-15469", "url": "https://ubuntu.com/security/CVE-2025-15469", "cve_description": "Issue summary: The 'openssl dgst' command-line tool silently truncates input data to 16MB when using one-shot signing algorithms and reports success instead of an error. Impact summary: A user signing or verifying files larger than 16MB with one-shot algorithms (such as Ed25519, Ed448, or ML-DSA) may believe the entire file is authenticated while trailing data beyond 16MB remains unauthenticated. When the 'openssl dgst' command is used with algorithms that only support one-shot signing (Ed25519, Ed448, ML-DSA-44, ML-DSA-65, ML-DSA-87), the input is buffered with a 16MB limit. If the input exceeds this limit, the tool silently truncates to the first 16MB and continues without signaling an error, contrary to what the documentation states. This creates an integrity gap where trailing bytes can be modified without detection if both signing and verification are performed using the same affected codepath. The issue affects only the command-line tool behavior. Verifiers that process the full message using library APIs will reject the signature, so the risk primarily affects workflows that both sign and verify with the affected 'openssl dgst' command. Streaming digest algorithms for 'openssl dgst' and library users are unaffected. The FIPS modules in 3.5 and 3.6 are not affected by this issue, as the command-line tools are outside the OpenSSL FIPS module boundary. OpenSSL 3.5 and 3.6 are vulnerable to this issue. OpenSSL 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-66199", "url": "https://ubuntu.com/security/CVE-2025-66199", "cve_description": "Issue summary: A TLS 1.3 connection using certificate compression can be forced to allocate a large buffer before decompression without checking against the configured certificate size limit. Impact summary: An attacker can cause per-connection memory allocations of up to approximately 22 MiB and extra CPU work, potentially leading to service degradation or resource exhaustion (Denial of Service). In affected configurations, the peer-supplied uncompressed certificate length from a CompressedCertificate message is used to grow a heap buffer prior to decompression. This length is not bounded by the max_cert_list setting, which otherwise constrains certificate message sizes. An attacker can exploit this to cause large per-connection allocations followed by handshake failure. No memory corruption or information disclosure occurs. This issue only affects builds where TLS 1.3 certificate compression is compiled in (i.e., not OPENSSL_NO_COMP_ALG) and at least one compression algorithm (brotli, zlib, or zstd) is available, and where the compression extension is negotiated. Both clients receiving a server CompressedCertificate and servers in mutual TLS scenarios receiving a client CompressedCertificate are affected. Servers that do not request client certificates are not vulnerable to client-initiated attacks. Users can mitigate this issue by setting SSL_OP_NO_RX_CERTIFICATE_COMPRESSION to disable receiving compressed certificates. The FIPS modules in 3.6, 3.5, 3.4 and 3.3 are not affected by this issue, as the TLS implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4 and 3.3 are vulnerable to this issue. OpenSSL 3.0, 1.1.1 and 1.0.2 are not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-68160", "url": "https://ubuntu.com/security/CVE-2025-68160", "cve_description": "Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds write. Impact summary: This out-of-bounds write can cause memory corruption which typically results in a crash, leading to Denial of Service for an application. The line-buffering BIO filter (BIO_f_linebuffer) is not used by default in TLS/SSL data paths. In OpenSSL command-line applications, it is typically only pushed onto stdout/stderr on VMS systems. Third-party applications that explicitly use this filter with a BIO chain that can short-write and that write large, newline-free data influenced by an attacker would be affected. However, the circumstances where this could happen are unlikely to be under attacker control, and BIO_f_linebuffer is unlikely to be handling non-curated data controlled by an attacker. For that reason the issue was assessed as Low severity. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the BIO implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Impact summary: This out-of-bounds write can cause memory corruption which typically results in a crash, leading to Denial of Service for an application. The line-buffering BIO filter (BIO_f_linebuffer) is not used by default in TLS/SSL data paths. In OpenSSL command-line applications, it is typically only pushed onto stdout/stderr on VMS systems. Third-party applications that explicitly use this filter with a BIO chain that can short-write and that write large, newline-free data influenced by an attacker would be affected. However, the circumstances where this could happen are unlikely to be under attacker control, and BIO_f_linebuffer is unlikely to be handling non-curated data controlled by an attacker. For that reason the issue was assessed as Low severity. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the BIO implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69418", "url": "https://ubuntu.com/security/CVE-2025-69418", "cve_description": "Issue summary: When using the low-level OCB API directly with AES-NI or
other hardware-accelerated code paths, inputs whose length is not a multiple
of 16 bytes can leave the final partial block unencrypted and unauthenticated.

Impact summary: The trailing 1-15 bytes of a message may be exposed in
cleartext on encryption and are not covered by the authentication tag,
allowing an attacker to read or tamper with those bytes without detection.

The low-level OCB encrypt and decrypt routines in the hardware-accelerated
stream path process full 16-byte blocks but do not advance the input/output
pointers. The subsequent tail-handling code then operates on the original
base pointers, effectively reprocessing the beginning of the buffer while
leaving the actual trailing bytes unprocessed. The authentication checksum
also excludes the true tail bytes.

However, typical OpenSSL consumers using EVP are not affected because the
higher-level EVP and provider OCB implementations split inputs so that full
blocks and trailing partial blocks are processed in separate calls, avoiding
the problematic code path. Additionally, TLS does not use OCB ciphersuites.
The vulnerability only affects applications that call the low-level
CRYPTO_ocb128_encrypt() or CRYPTO_ocb128_decrypt() functions directly with
non-block-aligned lengths in a single call on hardware-accelerated builds.
For these reasons the issue was assessed as Low severity.

The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected
by this issue, as OCB mode is not a FIPS-approved algorithm.

OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.

OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69419", "url": "https://ubuntu.com/security/CVE-2025-69419", "cve_description": "Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service. The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12 BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 source byte count as the destination buffer capacity to UTF8_putc(). For BMP code points above U+07FF, UTF-8 requires three bytes, but the forwarded capacity can be just two bytes. UTF8_putc() then returns -1, and this negative value is added to the output length without validation, causing the length to become negative. The subsequent trailing NUL byte is then written at a negative offset, causing write outside of heap allocated buffer. The vulnerability is reachable via the public PKCS12_get_friendlyname() API when parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a different code path that avoids this issue, PKCS12_get_friendlyname() directly invokes the vulnerable function. Exploitation requires an attacker to provide a malicious PKCS#12 file to be parsed by the application and the attacker can just trigger a one zero byte write before the allocated buffer. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue. Impact summary: The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service. The OPENSSL_uni2utf8() function performs a two-pass conversion of a PKCS#12 BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, the helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 source byte count as the destination buffer capacity to UTF8_putc(). For BMP code points above U+07FF, UTF-8 requires three bytes, but the forwarded capacity can be just two bytes. UTF8_putc() then returns -1, and this negative value is added to the output length without validation, causing the length to become negative. The subsequent trailing NUL byte is then written at a negative offset, causing write outside of heap allocated buffer. The vulnerability is reachable via the public PKCS12_get_friendlyname() API when parsing attacker-controlled PKCS#12 files. While PKCS12_parse() uses a different code path that avoids this issue, PKCS12_get_friendlyname() directly invokes the vulnerable function. Exploitation requires an attacker to provide a malicious PKCS#12 file to be parsed by the application and the attacker can just trigger a one zero byte write before the allocated buffer. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69420", "url": "https://ubuntu.com/security/CVE-2025-69420", "cve_description": "Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file. Impact summary: An application calling TS_RESP_verify_response() with a malformed TimeStamp Response can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2() access the signing cert attribute value without validating its type. When the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed TimeStamp Response to an application that verifies timestamp responses. The TimeStamp protocol (RFC 3161) is not widely used and the impact of the exploit is just a Denial of Service. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the TimeStamp Response implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue. Impact summary: An application calling TS_RESP_verify_response() with a malformed TimeStamp Response can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The functions ossl_ess_get_signing_cert() and ossl_ess_get_signing_cert_v2() access the signing cert attribute value without validating its type. When the type is not V_ASN1_SEQUENCE, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed TimeStamp Response to an application that verifies timestamp responses. The TimeStamp protocol (RFC 3161) is not widely used and the impact of the exploit is just a Denial of Service. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the TimeStamp Response implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2025-69421", "url": "https://ubuntu.com/security/CVE-2025-69421", "cve_description": "Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. The PKCS12_item_decrypt_d2i_ex() function does not check whether the oct parameter is NULL before dereferencing it. When called from PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can be NULL, causing a crash. The vulnerability is limited to Denial of Service and cannot be escalated to achieve code execution or memory disclosure. Exploiting this issue requires an attacker to provide a malformed PKCS#12 file to an application that processes it. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. The PKCS12_item_decrypt_d2i_ex() function does not check whether the oct parameter is NULL before dereferencing it. When called from PKCS12_unpack_p7encdata() with a malformed PKCS#12 file, this parameter can be NULL, causing a crash. The vulnerability is limited to Denial of Service and cannot be escalated to achieve code execution or memory disclosure. Exploiting this issue requires an attacker to provide a malformed PKCS#12 file to an application that processes it. For that reason the issue was assessed as Low severity according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2026-22795", "url": "https://ubuntu.com/security/CVE-2026-22795", "cve_description": "Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file. Impact summary: An application processing a malformed PKCS#12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting in a Denial of Service. A type confusion vulnerability exists in PKCS#12 parsing code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid pointer read. The location is constrained to a 1-byte address space, meaning any attempted pointer manipulation can only target addresses between 0x00 and 0xFF. This range corresponds to the zero page, which is unmapped on most modern operating systems and will reliably result in a crash, leading only to a Denial of Service. Exploiting this issue also requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For these reasons, the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue. Impact summary: An application processing a malformed PKCS#12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting in a Denial of Service. A type confusion vulnerability exists in PKCS#12 parsing code where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid pointer read. The location is constrained to a 1-byte address space, meaning any attempted pointer manipulation can only target addresses between 0x00 and 0xFF. This range corresponds to the zero page, which is unmapped on most modern operating systems and will reliably result in a crash, leading only to a Denial of Service. Exploiting this issue also requires a user or application to process a maliciously crafted PKCS#12 file. It is uncommon to accept untrusted PKCS#12 files in applications as they are usually used to store private keys which are trusted by definition. For these reasons, the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" }, { "cve": "CVE-2026-22796", "url": "https://ubuntu.com/security/CVE-2026-22796", "cve_description": "Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing malformed PKCS#7 data. Impact summary: An application performing signature verification of PKCS#7 data or calling directly the PKCS7_digest_from_attributes() function can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The function PKCS7_digest_from_attributes() accesses the message digest attribute value without validating its type. When the type is not V_ASN1_OCTET_STRING, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed signed PKCS#7 to an application that verifies it. The impact of the exploit is just a Denial of Service, the PKCS7 API is legacy and applications should be using the CMS API instead. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#7 parsing implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue. Impact summary: An application performing signature verification of PKCS#7 data or calling directly the PKCS7_digest_from_attributes() function can be caused to dereference an invalid or NULL pointer when reading, resulting in a Denial of Service. The function PKCS7_digest_from_attributes() accesses the message digest attribute value without validating its type. When the type is not V_ASN1_OCTET_STRING, this results in accessing invalid memory through the ASN1_TYPE union, causing a crash. Exploiting this vulnerability requires an attacker to provide a malformed signed PKCS#7 to an application that verifies it. The impact of the exploit is just a Denial of Service, the PKCS7 API is legacy and applications should be using the CMS API instead. For these reasons the issue was assessed as Low severity. The FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the PKCS#7 parsing implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4, 3.3, 3.0, 1.1.1 and 1.0.2 are vulnerable to this issue.", "cve_priority": "low", "cve_public_date": "2026-01-27 16:16:00 UTC" } ], "log": [ "", " * Import 3.5.5", " - CVE-2025-11187 (Improper validation of PBMAC1 parameters in PKCS#12 MAC", " verification)", " - CVE-2025-15467 (Stack buffer overflow in CMS AuthEnvelopedData parsing)", " - CVE-2025-15468 (NULL dereference in SSL_CIPHER_find() function on unknown", " cipher ID)", " - CVE-2025-15469 (\"openssl dgst\" one-shot codepath silently truncates inputs", " >16MB)", " - CVE-2025-66199 (TLS 1.3 CompressedCertificate excessive memory allocation)", " - CVE-2025-68160 (Heap out-of-bounds write in BIO_f_linebuffer on short", " writes)", " - CVE-2025-69418 (Unauthenticated/unencrypted trailing bytes with low-level", " OCB function calls)", " - CVE-2025-69419 (Out of bounds write in PKCS12_get_friendlyname() UTF-8", " conversion)", " - CVE-2025-69420 (Missing ASN1_TYPE validation in TS_RESP_verify_response()", " function)", " - CVE-2025-69421 (NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex", " function)", " - CVE-2026-22795 (Missing ASN1_TYPE validation in PKCS#12 parsing)", " - CVE-2026-22796 (ASN1_TYPE Type Confusion in the", " - PKCS7_digest_from_attributes() function)", "" ], "package": "openssl", "version": "3.5.5-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Sebastian Andrzej Siewior ", "date": "Tue, 27 Jan 2026 21:09:55 +0100" }, { "cves": [ { "cve": "CVE-2025-9230", "url": "https://ubuntu.com/security/CVE-2025-9230", "cve_description": "Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service or Execution of attacker-supplied code. Although the consequences of a successful exploit of this vulnerability could be severe, the probability that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to our Security Policy. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9231", "url": "https://ubuntu.com/security/CVE-2025-9231", "cve_description": "Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private key by an attacker.. While remote key recovery over a network was not attempted by the reporter, timing measurements revealed a timing signal which may allow such an attack. OpenSSL does not directly support certificates with SM2 keys in TLS, and so this CVE is not relevant in most TLS contexts. However, given that it is possible to add support for such certificates via a custom provider, coupled with the fact that in such a custom provider context the private key may be recoverable via remote timing measurements, we consider this to be a Moderate severity issue. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as SM2 is not an approved algorithm.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9232", "url": "https://ubuntu.com/security/CVE-2025-9232", "cve_description": "Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash which leads to Denial of Service for an application. The OpenSSL HTTP client API functions can be used directly by applications but they are also used by the OCSP client functions and CMP (Certificate Management Protocol) client implementation in OpenSSL. However the URLs used by these implementations are unlikely to be controlled by an attacker. In this vulnerable code the out of bounds read can only trigger a crash. Furthermore the vulnerability requires an attacker-controlled URL to be passed from an application to the OpenSSL function and the user has to have a 'no_proxy' environment variable set. For the aforementioned reasons the issue was assessed as Low severity. The vulnerable code was introduced in the following patch releases: 3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the HTTP client implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "low", "cve_public_date": "2025-09-30 14:15:00 UTC" } ], "log": [ "", " * Match last filename for output in ecp_nistp521-ppc64.pl (LP: #2137464)", " - d/p/regex_match_ecp_nistp521-ppc64.patch", " * Drop patches, merged upstream", " - d/p/CVE-2025-9230.patch", " - d/p/CVE-2025-9231-1.patch", " - d/p/CVE-2025-9231-2.patch", " - d/p/CVE-2025-9232.patch ", " * Merge with Debian unstable (LP: #2133492). Remaining changes:", " - Use perl:native in the autopkgtest for installability on i386.", " - Symlink copyright/changelog.Debian.gz in libssl3* to libssl-dev/openssl", " - Disable LTO with which the codebase is generally incompatible (LP #2058017)", " - Default config reads crypto-config and /etc/ssl/openssl.cnf.d dropins", " - Don't enable or package anything FIPS (LP #2087955)", " - Match last filename for output in ecp_nistp521-ppc64.pl (LP #2137464)", " - fips patches (debian/patches/fips):", " - crypto: Add kernel FIPS mode detection", " - crypto: Automatically use the FIPS provider...", " - apps/speed: Omit unavailable algorithms in FIPS mode", " - apps: pass -propquery arg to the libctx DRBG fetches", " - test: Ensure encoding runs with the correct context...", " - Add Ubuntu-specific defines to help FIPS certification (LP #2073991)", " + UBUNTU_OSSL_SELF_TEST_DESC_PCT_DH", " + UBUNTU_OSSL_PROV_FIPS_PARAM_UNAPPROVED_USAGE", "" ], "package": "openssl", "version": "3.5.4-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2137464, 2133492 ], "author": "Ravi Kant Sharma ", "date": "Thu, 08 Jan 2026 15:53:39 +0100" }, { "cves": [ { "cve": "CVE-2025-9230", "url": "https://ubuntu.com/security/CVE-2025-9230", "cve_description": "Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service or Execution of attacker-supplied code. Although the consequences of a successful exploit of this vulnerability could be severe, the probability that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to our Security Policy. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9231", "url": "https://ubuntu.com/security/CVE-2025-9231", "cve_description": "Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private key by an attacker.. While remote key recovery over a network was not attempted by the reporter, timing measurements revealed a timing signal which may allow such an attack. OpenSSL does not directly support certificates with SM2 keys in TLS, and so this CVE is not relevant in most TLS contexts. However, given that it is possible to add support for such certificates via a custom provider, coupled with the fact that in such a custom provider context the private key may be recoverable via remote timing measurements, we consider this to be a Moderate severity issue. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as SM2 is not an approved algorithm.", "cve_priority": "medium", "cve_public_date": "2025-09-30 14:15:00 UTC" }, { "cve": "CVE-2025-9232", "url": "https://ubuntu.com/security/CVE-2025-9232", "cve_description": "Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash which leads to Denial of Service for an application. The OpenSSL HTTP client API functions can be used directly by applications but they are also used by the OCSP client functions and CMP (Certificate Management Protocol) client implementation in OpenSSL. However the URLs used by these implementations are unlikely to be controlled by an attacker. In this vulnerable code the out of bounds read can only trigger a crash. Furthermore the vulnerability requires an attacker-controlled URL to be passed from an application to the OpenSSL function and the user has to have a 'no_proxy' environment variable set. For the aforementioned reasons the issue was assessed as Low severity. The vulnerable code was introduced in the following patch releases: 3.0.16, 3.1.8, 3.2.4, 3.3.3, 3.4.0 and 3.5.0. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the HTTP client implementation is outside the OpenSSL FIPS module boundary.", "cve_priority": "low", "cve_public_date": "2025-09-30 14:15:00 UTC" } ], "log": [ "", " * Import 3.5.4", " - CVE-2025-9230 (Out-of-bounds read & write in RFC 3211 KEK Unwrap)", " - CVE-2025-9231 (Timing side-channel in SM2 algorithm on 64 bit ARM)", " - CVE-2025-9232 (Out-of-bounds read in HTTP client no_proxy handling)", "" ], "package": "openssl", "version": "3.5.4-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Sebastian Andrzej Siewior ", "date": "Tue, 30 Sep 2025 21:54:39 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "overlayroot", "from_version": { "source_package_name": "cloud-initramfs-tools", "source_package_version": "0.52", "version": "0.52" }, "to_version": { "source_package_name": "cloud-initramfs-tools", "source_package_version": "0.55", "version": "0.55" }, "cves": [], "launchpad_bugs_fixed": [ 2125790, 2142564 ], "changes": [ { "cves": [], "log": [ "", " [ Benjamin Drung ]", " * copymods: enable by default when using dracut", "" ], "package": "cloud-initramfs-tools", "version": "0.55", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Paride Legovini ", "date": "Thu, 05 Mar 2026 18:59:57 +0100" }, { "cves": [], "log": [ "", " * autopkgtest: explicitly pull in dracut for rooturl test", " * dyn-netconf: support dracut by pulling in systemd-networkd (LP: #2125790)", " * Drop redundant priority optional", " * Bump Standards-Version to 4.7.3", " * Override executable-in-usr-lib lintian warning for Dracut modules dir", "" ], "package": "cloud-initramfs-tools", "version": "0.54", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2125790 ], "author": "Benjamin Drung ", "date": "Fri, 27 Feb 2026 10:31:34 +0100" }, { "cves": [], "log": [ "", " [ Benjamin Drung ]", " * rooturl: use systemd-import on Dracut to support tarballs (LP: #2142564)", "" ], "package": "cloud-initramfs-tools", "version": "0.53", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142564 ], "author": "Paride Legovini ", "date": "Tue, 24 Feb 2026 12:30:44 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "perl", "from_version": { "source_package_name": "perl", "source_package_version": "5.40.1-6build1", "version": "5.40.1-6build1" }, "to_version": { "source_package_name": "perl", "source_package_version": "5.40.1-7build1", "version": "5.40.1-7build1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Reupload to resolute", "" ], "package": "perl", "version": "5.40.1-7build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Sebastien Bacher ", "date": "Tue, 17 Mar 2026 11:45:39 +0100" }, { "cves": [], "log": [ "", " [ Helmut Grohne ]", " * Add libcrypt-dev to libperl-dev's Depends. (Closes: #1102978)", "" ], "package": "perl", "version": "5.40.1-7", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Niko Tyni ", "date": "Sun, 16 Nov 2025 22:01:11 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "perl-base", "from_version": { "source_package_name": "perl", "source_package_version": "5.40.1-6build1", "version": "5.40.1-6build1" }, "to_version": { "source_package_name": "perl", "source_package_version": "5.40.1-7build1", "version": "5.40.1-7build1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Reupload to resolute", "" ], "package": "perl", "version": "5.40.1-7build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Sebastien Bacher ", "date": "Tue, 17 Mar 2026 11:45:39 +0100" }, { "cves": [], "log": [ "", " [ Helmut Grohne ]", " * Add libcrypt-dev to libperl-dev's Depends. (Closes: #1102978)", "" ], "package": "perl", "version": "5.40.1-7", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Niko Tyni ", "date": "Sun, 16 Nov 2025 22:01:11 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "perl-modules-5.40", "from_version": { "source_package_name": "perl", "source_package_version": "5.40.1-6build1", "version": "5.40.1-6build1" }, "to_version": { "source_package_name": "perl", "source_package_version": "5.40.1-7build1", "version": "5.40.1-7build1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Reupload to resolute", "" ], "package": "perl", "version": "5.40.1-7build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Sebastien Bacher ", "date": "Tue, 17 Mar 2026 11:45:39 +0100" }, { "cves": [], "log": [ "", " [ Helmut Grohne ]", " * Add libcrypt-dev to libperl-dev's Depends. (Closes: #1102978)", "" ], "package": "perl", "version": "5.40.1-7", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Niko Tyni ", "date": "Sun, 16 Nov 2025 22:01:11 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "plymouth", "from_version": { "source_package_name": "plymouth", "source_package_version": "24.004.60+git20250831.4a3c171d-0ubuntu6", "version": "24.004.60+git20250831.4a3c171d-0ubuntu6" }, "to_version": { "source_package_name": "plymouth", "source_package_version": "24.004.60+git20250831.4a3c171d-0ubuntu8", "version": "24.004.60+git20250831.4a3c171d-0ubuntu8" }, "cves": [], "launchpad_bugs_fixed": [ 2116296 ], "changes": [ { "cves": [], "log": [ "", " * d/local/spinner:", " - Update spinner to use Resolute loader", " - Increase number of animation stills to 60", "" ], "package": "plymouth", "version": "24.004.60+git20250831.4a3c171d-0ubuntu8", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Simon Johnsson ", "date": "Thu, 12 Mar 2026 15:27:04 +0100" }, { "cves": [], "log": [ "", " * debian/patches/force-scale-guessing.patch:", " - Always \"guess\" the device scale (LP: #2116296)", "" ], "package": "plymouth", "version": "24.004.60+git20250831.4a3c171d-0ubuntu7", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2116296 ], "author": "Daniel van Vugt ", "date": "Fri, 06 Mar 2026 11:35:01 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "plymouth-theme-ubuntu-text", "from_version": { "source_package_name": "plymouth", "source_package_version": "24.004.60+git20250831.4a3c171d-0ubuntu6", "version": "24.004.60+git20250831.4a3c171d-0ubuntu6" }, "to_version": { "source_package_name": "plymouth", "source_package_version": "24.004.60+git20250831.4a3c171d-0ubuntu8", "version": "24.004.60+git20250831.4a3c171d-0ubuntu8" }, "cves": [], "launchpad_bugs_fixed": [ 2116296 ], "changes": [ { "cves": [], "log": [ "", " * d/local/spinner:", " - Update spinner to use Resolute loader", " - Increase number of animation stills to 60", "" ], "package": "plymouth", "version": "24.004.60+git20250831.4a3c171d-0ubuntu8", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Simon Johnsson ", "date": "Thu, 12 Mar 2026 15:27:04 +0100" }, { "cves": [], "log": [ "", " * debian/patches/force-scale-guessing.patch:", " - Always \"guess\" the device scale (LP: #2116296)", "" ], "package": "plymouth", "version": "24.004.60+git20250831.4a3c171d-0ubuntu7", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2116296 ], "author": "Daniel van Vugt ", "date": "Fri, 06 Mar 2026 11:35:01 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python-apt-common", "from_version": { "source_package_name": "python-apt", "source_package_version": "3.1.0", "version": "3.1.0" }, "to_version": { "source_package_name": "python-apt", "source_package_version": "3.1.0build1", "version": "3.1.0build1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild to drop Python 3.13 bits.", "" ], "package": "python-apt", "version": "3.1.0build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 20 Mar 2026 12:05:39 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3", "from_version": { "source_package_name": "python3-defaults", "source_package_version": "3.13.9-3", "version": "3.13.9-3" }, "to_version": { "source_package_name": "python3-defaults", "source_package_version": "3.14.3-0ubuntu1", "version": "3.14.3-0ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Remove Python 3.13 as a supported version", " * Bump version to 3.14.3", "" ], "package": "python3-defaults", "version": "3.14.3-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Graham Inggs ", "date": "Fri, 13 Mar 2026 21:32:47 +0000" }, { "cves": [], "log": [ "", " * Upload to experimental.", " * Make Python 3.14 the default version.", "" ], "package": "python3-defaults", "version": "3.14.2-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Stefano Rivera ", "date": "Sun, 11 Jan 2026 07:26:55 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-apport", "from_version": { "source_package_name": "apport", "source_package_version": "2.33.1-0ubuntu3", "version": "2.33.1-0ubuntu3" }, "to_version": { "source_package_name": "apport", "source_package_version": "2.33.1-0ubuntu7", "version": "2.33.1-0ubuntu7" }, "cves": [], "launchpad_bugs_fixed": [ 2143758, 2132257 ], "changes": [ { "cves": [], "log": [ "", " * Enable Launchpad crash reports for resolute", " * parse_segv.py: ignore registers with unavailable values (like pl3_ssp)", "" ], "package": "apport", "version": "2.33.1-0ubuntu7", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Thu, 26 Mar 2026 17:32:38 +0100" }, { "cves": [], "log": [ "", " * Update apport-kde to Qt6 (LP: 2145946)", "" ], "package": "apport", "version": "2.33.1-0ubuntu6", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Erich Eickmeyer ", "date": "Mon, 23 Mar 2026 20:29:09 -0700" }, { "cves": [], "log": [ "", " * Fix FTBFS due Python 3.14 (LP: #2143758)", "" ], "package": "apport", "version": "2.33.1-0ubuntu5", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143758 ], "author": "Carlos Nihelton ", "date": "Mon, 09 Mar 2026 17:01:15 -0300" }, { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "apport", "version": "2.33.1-0ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:16:39 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-apt", "from_version": { "source_package_name": "python-apt", "source_package_version": "3.1.0", "version": "3.1.0" }, "to_version": { "source_package_name": "python-apt", "source_package_version": "3.1.0build1", "version": "3.1.0build1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild to drop Python 3.13 bits.", "" ], "package": "python-apt", "version": "3.1.0build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 20 Mar 2026 12:05:39 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-bcrypt", "from_version": { "source_package_name": "python-bcrypt", "source_package_version": "5.0.0-3", "version": "5.0.0-3" }, "to_version": { "source_package_name": "python-bcrypt", "source_package_version": "5.0.0-3build1", "version": "5.0.0-3build1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild to drop Python 3.13 bits.", "" ], "package": "python-bcrypt", "version": "5.0.0-3build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 20 Mar 2026 12:04:26 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-bpfcc", "from_version": { "source_package_name": "bpfcc", "source_package_version": "0.35.0+ds-1ubuntu1", "version": "0.35.0+ds-1ubuntu1" }, "to_version": { "source_package_name": "bpfcc", "source_package_version": "0.35.0+ds-1ubuntu2", "version": "0.35.0+ds-1ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild to build with LLVM 21 on amd64v3.", "" ], "package": "bpfcc", "version": "0.35.0+ds-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Mon, 16 Mar 2026 12:30:24 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-cffi-backend:riscv64", "from_version": { "source_package_name": "python-cffi", "source_package_version": "2.0.0-3", "version": "2.0.0-3" }, "to_version": { "source_package_name": "python-cffi", "source_package_version": "2.0.0-3build1", "version": "2.0.0-3build1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild to drop Python 3.13 bits.", "" ], "package": "python-cffi", "version": "2.0.0-3build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 20 Mar 2026 12:05:52 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-cryptography", "from_version": { "source_package_name": "python-cryptography", "source_package_version": "43.0.0-1ubuntu1", "version": "43.0.0-1ubuntu1" }, "to_version": { "source_package_name": "python-cryptography", "source_package_version": "46.0.5-1ubuntu1", "version": "46.0.5-1ubuntu1" }, "cves": [ { "cve": "CVE-2026-26007", "url": "https://ubuntu.com/security/CVE-2026-26007", "cve_description": "cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the public_key_from_numbers (or EllipticCurvePublicNumbers.public_key()), EllipticCurvePublicNumbers.public_key(), load_der_public_key() and load_pem_public_key() functions do not verify that the point belongs to the expected prime-order subgroup of the curve. This missing validation allows an attacker to provide a public key point P from a small-order subgroup. This can lead to security issues in various situations, such as the most commonly used signature verification (ECDSA) and shared key negotiation (ECDH). When the victim computes the shared secret as S = [victim_private_key]P via ECDH, this leaks information about victim_private_key mod (small_subgroup_order). For curves with cofactor > 1, this reveals the least significant bits of the private key. When these weak public keys are used in ECDSA , it's easy to forge signatures on the small subgroup. Only SECT curves are impacted by this. This vulnerability is fixed in 46.0.5.", "cve_priority": "medium", "cve_public_date": "2026-02-10 22:17:00 UTC" } ], "launchpad_bugs_fixed": [ 2144298, 2138182 ], "changes": [ { "cves": [], "log": [ "", " * Merge with Debian unstable (LP: #2144298): Remaining changes:", " - Vendor rust for Ubuntu main", " - Add a recipe in d/rules to generate the vendor tarball", " - Add vendored crates", " - Adjust dependencies version for vendored build", " - Add debian/README.source", "" ], "package": "python-cryptography", "version": "46.0.5-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144298 ], "author": "Ravi Kant Sharma ", "date": "Fri, 13 Mar 2026 13:11:00 +0100" }, { "cves": [ { "cve": "CVE-2026-26007", "url": "https://ubuntu.com/security/CVE-2026-26007", "cve_description": "cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the public_key_from_numbers (or EllipticCurvePublicNumbers.public_key()), EllipticCurvePublicNumbers.public_key(), load_der_public_key() and load_pem_public_key() functions do not verify that the point belongs to the expected prime-order subgroup of the curve. This missing validation allows an attacker to provide a public key point P from a small-order subgroup. This can lead to security issues in various situations, such as the most commonly used signature verification (ECDSA) and shared key negotiation (ECDH). When the victim computes the shared secret as S = [victim_private_key]P via ECDH, this leaks information about victim_private_key mod (small_subgroup_order). For curves with cofactor > 1, this reveals the least significant bits of the private key. When these weak public keys are used in ECDSA , it's easy to forge signatures on the small subgroup. Only SECT curves are impacted by this. This vulnerability is fixed in 46.0.5.", "cve_priority": "medium", "cve_public_date": "2026-02-10 22:17:00 UTC" } ], "log": [ "", " * New upstream version.", " + Fix CVE-2026-26007.", " * Bump Standards-Version to 4.7.3.", "" ], "package": "python-cryptography", "version": "46.0.5-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Andrey Rakhmatullin ", "date": "Sat, 14 Feb 2026 18:51:07 +0500" }, { "cves": [], "log": [ "", " * Merge with Debian unstable (LP: #2138182): Remaining changes:", " - Vendor rust for Ubuntu main", " - Add a recipe in d/rules to generate the vendor tarball", " - Add vendored crates", " - Adjust dependencies version for vendored build", " - Add debian/README.source", "" ], "package": "python-cryptography", "version": "46.0.1-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2138182 ], "author": "Ravi Kant Sharma ", "date": "Thu, 15 Jan 2026 14:54:11 +0100" }, { "cves": [], "log": [ "", " * Upload to unstable.", " * Update for pyo3 0.27 compatibility.", "" ], "package": "python-cryptography", "version": "46.0.1-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Andrey Rakhmatullin ", "date": "Fri, 21 Nov 2025 20:10:21 +0500" }, { "cves": [], "log": [ "", " * Upload to experimental.", " * New upstream version.", "" ], "package": "python-cryptography", "version": "46.0.1-1~exp1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Andrey Rakhmatullin ", "date": "Fri, 14 Nov 2025 00:22:58 +0500" }, { "cves": [], "log": [ "", " * New upstream version.", " * Re-enable tests that required rust-openssl that wasn't yet available.", "" ], "package": "python-cryptography", "version": "45.0.7-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Andrey Rakhmatullin ", "date": "Thu, 13 Nov 2025 13:46:52 +0500" }, { "cves": [], "log": [ "", " * Upload to unstable.", "" ], "package": "python-cryptography", "version": "45.0.6-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Andrey Rakhmatullin ", "date": "Mon, 03 Nov 2025 02:18:52 +0500" }, { "cves": [], "log": [ "", " * Upload to experimental.", " * New upstream version.", " * Drop the Priority field.", "" ], "package": "python-cryptography", "version": "45.0.6-1~exp1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Andrey Rakhmatullin ", "date": "Wed, 29 Oct 2025 23:39:44 +0500" }, { "cves": [], "log": [ "", " * Team upload.", " * Accept pyo3 0.26.", "" ], "package": "python-cryptography", "version": "44.0.2-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Colin Watson ", "date": "Mon, 13 Oct 2025 11:36:34 +0100" }, { "cves": [], "log": [ "", " * New upstream version.", " * Build with rust-pyo3 0.25 (Closes: #1115569).", " * Drop the Priority field.", "" ], "package": "python-cryptography", "version": "44.0.2-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Andrey Rakhmatullin ", "date": "Fri, 19 Sep 2025 11:47:01 +0500" }, { "cves": [], "log": [ "", " [ Peter Michael Green ]", " * Fix overly strict build-dependency for cc crate (Closes: #1104046).", "", " [ Andrey Rakhmatullin ]", " * Bump Standards-Version to 4.7.2.", " * Remove Rules-Requires-Root.", " * Remove no longer needed Python 3 mentions from the package description.", "" ], "package": "python-cryptography", "version": "43.0.0-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Andrey Rakhmatullin ", "date": "Fri, 25 Apr 2025 11:17:42 +0500" }, { "cves": [], "log": [ "", " * Restore B-D: python3-setuptools (Closes: #1100262).", " * Update to librust-asn1-0.20-dev, add upstream patches for compatibility", " with it (Closes: #1101438).", " * Disable DH_VERBOSE.", "" ], "package": "python-cryptography", "version": "43.0.0-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Andrey Rakhmatullin ", "date": "Sat, 29 Mar 2025 01:20:16 +0500" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-dbus", "from_version": { "source_package_name": "dbus-python", "source_package_version": "1.4.0-1build1", "version": "1.4.0-1build1" }, "to_version": { "source_package_name": "dbus-python", "source_package_version": "1.4.0-1build2", "version": "1.4.0-1build2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild to drop Python 3.13 bits.", "" ], "package": "dbus-python", "version": "1.4.0-1build2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 20 Mar 2026 12:19:06 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-debconf", "from_version": { "source_package_name": "debconf", "source_package_version": "1.5.91", "version": "1.5.91" }, "to_version": { "source_package_name": "debconf", "source_package_version": "1.5.92", "version": "1.5.92" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * Add BMP version of debian-logo.", "" ], "package": "debconf", "version": "1.5.92", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Colin Watson ", "date": "Mon, 16 Feb 2026 17:48:32 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-distro-info", "from_version": { "source_package_name": "distro-info", "source_package_version": "1.14build1", "version": "1.14build1" }, "to_version": { "source_package_name": "distro-info", "source_package_version": "1.15", "version": "1.15" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * test: Fix testAlias when SOURCE_DATE_EPOCH is set to 2030 (Closes: #1127115)", " * Remove redundant Rules-Requires-Root", " * Remove redundant priority optional field", " * Bump Standards-Version to 4.7.3", "" ], "package": "distro-info", "version": "1.15", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Mon, 16 Feb 2026 23:18:29 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-distupgrade", "from_version": { "source_package_name": "ubuntu-release-upgrader", "source_package_version": "1:26.04.8", "version": "1:26.04.8" }, "to_version": { "source_package_name": "ubuntu-release-upgrader", "source_package_version": "1:26.04.10", "version": "1:26.04.10" }, "cves": [], "launchpad_bugs_fixed": [ 2144667, 2141637 ], "changes": [ { "cves": [], "log": [ "", " * DistUpgradeQuirks: Don't fail on Pi pre model 4 (LP: #2144667)", "" ], "package": "ubuntu-release-upgrader", "version": "1:26.04.10", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144667 ], "author": "Dave Jones ", "date": "Tue, 24 Mar 2026 21:53:39 +0000" }, { "cves": [], "log": [ "", " * No change rebuild against `update-manager` (LP: #2141637)", "" ], "package": "ubuntu-release-upgrader", "version": "1:26.04.9", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2141637 ], "author": "Florent 'Skia' Jacquet ", "date": "Wed, 25 Feb 2026 12:30:25 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-gdbm", "from_version": { "source_package_name": "python3-defaults", "source_package_version": "3.13.9-3", "version": "3.13.9-3" }, "to_version": { "source_package_name": "python3-defaults", "source_package_version": "3.14.3-0ubuntu1", "version": "3.14.3-0ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Remove Python 3.13 as a supported version", " * Bump version to 3.14.3", "" ], "package": "python3-defaults", "version": "3.14.3-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Graham Inggs ", "date": "Fri, 13 Mar 2026 21:32:47 +0000" }, { "cves": [], "log": [ "", " * Upload to experimental.", " * Make Python 3.14 the default version.", "" ], "package": "python3-defaults", "version": "3.14.2-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Stefano Rivera ", "date": "Sun, 11 Jan 2026 07:26:55 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-gi", "from_version": { "source_package_name": "pygobject", "source_package_version": "3.54.5-7ubuntu1", "version": "3.54.5-7ubuntu1" }, "to_version": { "source_package_name": "pygobject", "source_package_version": "3.56.1-2", "version": "3.56.1-2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Team upload", " * Upload to unstable", "" ], "package": "pygobject", "version": "3.56.1-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Simon McVittie ", "date": "Sun, 15 Mar 2026 17:28:53 +0000" }, { "cves": [], "log": [ "", " * Team upload", " * New upstream release", " * d/patches: Drop all patches, applied upstream", " * Standards-Version: 4.7.3.", " Remove Priority field, no longer required", " * d/source/lintian-overrides: Ignore some references to distutils and pipes.", " These are only used conditionally, so we don't need deprecation warnings.", "" ], "package": "pygobject", "version": "3.56.1-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Simon McVittie ", "date": "Fri, 13 Mar 2026 16:53:32 +0000" }, { "cves": [], "log": [ "", " [ Alessandro Astone ]", " * d/p: Backport patch relaxing a threading assertion that affects tuned", "" ], "package": "pygobject", "version": "3.55.3-3", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Marco Trevisan (Treviño) ", "date": "Wed, 25 Feb 2026 01:04:01 +0100" }, { "cves": [], "log": [ "", " * d/p: Cherry-pick upstream patch to handle caller-allocated C-arrays", " * d/p: Properly parse array length on big-endian", "" ], "package": "pygobject", "version": "3.55.3-2", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Marco Trevisan (Treviño) ", "date": "Wed, 25 Feb 2026 00:27:22 +0100" }, { "cves": [], "log": [ "", " [ Alessandro Astone ]", " * New upstream release", "" ], "package": "pygobject", "version": "3.55.3-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Marco Trevisan (Treviño) ", "date": "Thu, 19 Feb 2026 10:55:00 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-jinja2", "from_version": { "source_package_name": "jinja2", "source_package_version": "3.1.6-1", "version": "3.1.6-1" }, "to_version": { "source_package_name": "jinja2", "source_package_version": "3.1.6-1build1", "version": "3.1.6-1build1" }, "cves": [], "launchpad_bugs_fixed": [ 2132257 ], "changes": [ { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "jinja2", "version": "3.1.6-1build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:28:35 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-markupsafe", "from_version": { "source_package_name": "markupsafe", "source_package_version": "3.0.3-1", "version": "3.0.3-1" }, "to_version": { "source_package_name": "markupsafe", "source_package_version": "3.0.3-1build1", "version": "3.0.3-1build1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild to drop Python 3.13 bits.", "" ], "package": "markupsafe", "version": "3.0.3-1build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 20 Mar 2026 12:05:08 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-minimal", "from_version": { "source_package_name": "python3-defaults", "source_package_version": "3.13.9-3", "version": "3.13.9-3" }, "to_version": { "source_package_name": "python3-defaults", "source_package_version": "3.14.3-0ubuntu1", "version": "3.14.3-0ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Remove Python 3.13 as a supported version", " * Bump version to 3.14.3", "" ], "package": "python3-defaults", "version": "3.14.3-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Graham Inggs ", "date": "Fri, 13 Mar 2026 21:32:47 +0000" }, { "cves": [], "log": [ "", " * Upload to experimental.", " * Make Python 3.14 the default version.", "" ], "package": "python3-defaults", "version": "3.14.2-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Stefano Rivera ", "date": "Sun, 11 Jan 2026 07:26:55 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-netplan", "from_version": { "source_package_name": "netplan.io", "source_package_version": "1.2-1ubuntu1", "version": "1.2-1ubuntu1" }, "to_version": { "source_package_name": "netplan.io", "source_package_version": "1.2-1ubuntu3", "version": "1.2-1ubuntu3" }, "cves": [], "launchpad_bugs_fixed": [ 2139598, 2138802 ], "changes": [ { "cves": [], "log": [ "", " * debian/patches/lp2139598-execute-udev-rules-before-sriov-apply-service.patch:", " execute udev rules before starting sriov apply service (LP: #2139598)", "" ], "package": "netplan.io", "version": "1.2-1ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2139598 ], "author": "Robert Malz ", "date": "Tue, 03 Mar 2026 12:44:43 +0100" }, { "cves": [], "log": [ "", " * d/p/lp-2138802-BlockingIOError-py314.patch: fix \"netplan try\" with python", " 3.14 by handling BlockingIOError in addition to TypeError (LP: #2138802)", "" ], "package": "netplan.io", "version": "1.2-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2138802 ], "author": "Andreas Hasenack ", "date": "Fri, 20 Feb 2026 11:25:14 -0300" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-openssl", "from_version": { "source_package_name": "pyopenssl", "source_package_version": "25.1.0-1", "version": "25.1.0-1" }, "to_version": { "source_package_name": "pyopenssl", "source_package_version": "25.3.0-1ubuntu1", "version": "25.3.0-1ubuntu1" }, "cves": [ { "cve": "CVE-2026-27448", "url": "https://ubuntu.com/security/CVE-2026-27448", "cve_description": "pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for any security-sensitive behavior, this could allow bypassing it. Starting in version 26.0.0, unhandled exceptions now result in rejecting the connection.", "cve_priority": "low", "cve_public_date": "2026-03-18 00:16:00 UTC" }, { "cve": "CVE-2026-27459", "url": "https://ubuntu.com/security/CVE-2026-27459", "cve_description": "pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.", "cve_priority": "medium", "cve_public_date": "2026-03-18 00:16:00 UTC" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-27448", "url": "https://ubuntu.com/security/CVE-2026-27448", "cve_description": "pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 0.14.0 and prior to version 26.0.0, if a user provided callback to `set_tlsext_servername_callback` raised an unhandled exception, this would result in a connection being accepted. If a user was relying on this callback for any security-sensitive behavior, this could allow bypassing it. Starting in version 26.0.0, unhandled exceptions now result in rejecting the connection.", "cve_priority": "low", "cve_public_date": "2026-03-18 00:16:00 UTC" }, { "cve": "CVE-2026-27459", "url": "https://ubuntu.com/security/CVE-2026-27459", "cve_description": "pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to `set_cookie_generate_callback` returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0.0, cookie values that are too long are now rejected.", "cve_priority": "medium", "cve_public_date": "2026-03-18 00:16:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: Unhandled exceptions in set_tlsext_servername_callback", " - debian/patches/CVE-2026-27448.patch: handle exceptions in callbacks", " in src/OpenSSL/SSL.py, tests/test_ssl.py.", " - CVE-2026-27448", " * SECURITY UPDATE: Buffer overflow via DTLS cookie callback", " - debian/patches/CVE-2026-27459.patch: fix buffer overflow in DTLS", " cookie generation callback in src/OpenSSL/SSL.py, tests/test_ssl.py.", " - CVE-2026-27459", "" ], "package": "pyopenssl", "version": "25.3.0-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Wed, 18 Mar 2026 13:22:16 -0400" }, { "cves": [], "log": [ "", " * Rebuild to clear amd64v3 from FTBFS report", "" ], "package": "pyopenssl", "version": "25.3.0-1build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Jeremy Bícha ", "date": "Thu, 12 Feb 2026 08:41:05 -0500" }, { "cves": [], "log": [ "", " * New upstream version.", " * Migrate to pybuild-plugin-pyproject.", "" ], "package": "pyopenssl", "version": "25.3.0-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Andrey Rakhmatullin ", "date": "Fri, 14 Nov 2025 01:50:45 +0500" }, { "cves": [], "log": [ "", " * Fix the maximum supported version of python3-cryptography.", " * Drop the Priority field.", "" ], "package": "pyopenssl", "version": "25.1.0-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Andrey Rakhmatullin ", "date": "Thu, 30 Oct 2025 17:18:11 +0500" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-packaging", "from_version": { "source_package_name": "python-packaging", "source_package_version": "25.0-2", "version": "25.0-2" }, "to_version": { "source_package_name": "python-packaging", "source_package_version": "26.0-1", "version": "26.0-1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Team upload.", " * New upstream release.", " * d/watch: Mangle pre-release versions.", "" ], "package": "python-packaging", "version": "26.0-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Colin Watson ", "date": "Wed, 11 Mar 2026 17:37:30 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-pkg-resources", "from_version": { "source_package_name": "setuptools", "source_package_version": "78.1.1-0.1", "version": "78.1.1-0.1" }, "to_version": { "source_package_name": "setuptools", "source_package_version": "78.1.1-0.1build1", "version": "78.1.1-0.1build1" }, "cves": [], "launchpad_bugs_fixed": [ 2132257 ], "changes": [ { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "setuptools", "version": "78.1.1-0.1build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:41:46 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-problem-report", "from_version": { "source_package_name": "apport", "source_package_version": "2.33.1-0ubuntu3", "version": "2.33.1-0ubuntu3" }, "to_version": { "source_package_name": "apport", "source_package_version": "2.33.1-0ubuntu7", "version": "2.33.1-0ubuntu7" }, "cves": [], "launchpad_bugs_fixed": [ 2143758, 2132257 ], "changes": [ { "cves": [], "log": [ "", " * Enable Launchpad crash reports for resolute", " * parse_segv.py: ignore registers with unavailable values (like pl3_ssp)", "" ], "package": "apport", "version": "2.33.1-0ubuntu7", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Thu, 26 Mar 2026 17:32:38 +0100" }, { "cves": [], "log": [ "", " * Update apport-kde to Qt6 (LP: 2145946)", "" ], "package": "apport", "version": "2.33.1-0ubuntu6", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Erich Eickmeyer ", "date": "Mon, 23 Mar 2026 20:29:09 -0700" }, { "cves": [], "log": [ "", " * Fix FTBFS due Python 3.14 (LP: #2143758)", "" ], "package": "apport", "version": "2.33.1-0ubuntu5", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143758 ], "author": "Carlos Nihelton ", "date": "Mon, 09 Mar 2026 17:01:15 -0300" }, { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "apport", "version": "2.33.1-0ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:16:39 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-pyasn1", "from_version": { "source_package_name": "pyasn1", "source_package_version": "0.6.2-1", "version": "0.6.2-1" }, "to_version": { "source_package_name": "pyasn1", "source_package_version": "0.6.3-1", "version": "0.6.3-1" }, "cves": [ { "cve": "CVE-2026-30922", "url": "https://ubuntu.com/security/CVE-2026-30922", "cve_description": "pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested `SEQUENCE` (`0x30`) or `SET` (`0x31`) tags with \"Indefinite Length\" (`0x80`) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a `RecursionError` or consumes all available memory (OOM), crashing the host application. This is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 (`MAX_OID_ARC_CONTINUATION_OCTETS`) does not mitigate this recursion issue. Version 0.6.3 fixes this specific issue.", "cve_priority": "medium", "cve_public_date": "2026-03-18 04:17:00 UTC" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-30922", "url": "https://ubuntu.com/security/CVE-2026-30922", "cve_description": "pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested `SEQUENCE` (`0x30`) or `SET` (`0x31`) tags with \"Indefinite Length\" (`0x80`) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a `RecursionError` or consumes all available memory (OOM), crashing the host application. This is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 (`MAX_OID_ARC_CONTINUATION_OCTETS`) does not mitigate this recursion issue. Version 0.6.3 fixes this specific issue.", "cve_priority": "medium", "cve_public_date": "2026-03-18 04:17:00 UTC" } ], "log": [ "", " * New upstream version 0.6.3 (Closes: #1131371) with fix for", " CVE-2026-30922: Denial of Service attack caused by uncontrolled recursion", " * Add myself as Uploader", "", " [ Francesco Poli ]", " * update Homepage (Closes: #1126615)", "" ], "package": "pyasn1", "version": "0.6.3-1", "urgency": "high", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Alexandre Detiste ", "date": "Fri, 20 Mar 2026 17:52:40 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-pyparsing", "from_version": { "source_package_name": "pyparsing", "source_package_version": "3.1.3-1build1", "version": "3.1.3-1build1" }, "to_version": { "source_package_name": "pyparsing", "source_package_version": "3.3.2-2", "version": "3.3.2-2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Team Upload", " * Release to unstable (Closes: #1130246)", "" ], "package": "pyparsing", "version": "3.3.2-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Alexandre Detiste ", "date": "Wed, 11 Mar 2026 13:08:07 +0100" }, { "cves": [], "log": [ "", " * Team upload.", " * New upstream version 3.3.2", " * Rewrite d/watch in v5 format", " * Add build-dep on python3-myst-parser", " * Rewrite the example in the description as Python3", " * Drop \"Rules-Requires-Root: no\": it is the default now", " * Bump Standards-Version to 4.7.3, drop Priority: tag", " * Drop build-dep on python3-setuptools, this build with \"flit\"", " * Add debian/salsa-ci.yml", "" ], "package": "pyparsing", "version": "3.3.2-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Alexandre Detiste ", "date": "Thu, 26 Feb 2026 23:33:19 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-setuptools", "from_version": { "source_package_name": "setuptools", "source_package_version": "78.1.1-0.1", "version": "78.1.1-0.1" }, "to_version": { "source_package_name": "setuptools", "source_package_version": "78.1.1-0.1build1", "version": "78.1.1-0.1build1" }, "cves": [], "launchpad_bugs_fixed": [ 2132257 ], "changes": [ { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "setuptools", "version": "78.1.1-0.1build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:41:46 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-systemd", "from_version": { "source_package_name": "python-systemd", "source_package_version": "235-1build8", "version": "235-1build8" }, "to_version": { "source_package_name": "python-systemd", "source_package_version": "235-1build9", "version": "235-1build9" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild to drop Python 3.13 bits.", "" ], "package": "python-systemd", "version": "235-1build9", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 20 Mar 2026 12:04:09 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-typeguard", "from_version": { "source_package_name": "python-typeguard", "source_package_version": "4.4.4-1build1", "version": "4.4.4-1build1" }, "to_version": { "source_package_name": "python-typeguard", "source_package_version": "4.4.4-2", "version": "4.4.4-2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Team upload.", "", " [ Helmut Grohne ]", " * Mark python3-typeguard Multi-Arch: foreign (closes: #1125025).", "", " [ Colin Watson ]", " * Drop \"Rules-Requires-Root: no\", default as of dpkg-dev 1.22.13.", "" ], "package": "python-typeguard", "version": "4.4.4-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Colin Watson ", "date": "Wed, 11 Feb 2026 12:23:46 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-update-manager", "from_version": { "source_package_name": "update-manager", "source_package_version": "1:26.04.2", "version": "1:26.04.2" }, "to_version": { "source_package_name": "update-manager", "source_package_version": "1:26.04.4", "version": "1:26.04.4" }, "cves": [], "launchpad_bugs_fixed": [ 2133012, 2141637, 2133012 ], "changes": [ { "cves": [], "log": [ "", " * Almost completely revert previous change that removed inhibitor of", " shutdown and sleep, but only inhibit sleep now, as a compromise between", " - LP: #2133012: \"Restart now\" has no effect in update-manager; and", " - LP: #2141637: Ubuntu-release-upgrader crashes without inhibit_sleep.", "" ], "package": "update-manager", "version": "1:26.04.4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2133012, 2141637 ], "author": "Nathan Pratta Teodosio ", "date": "Thu, 12 Feb 2026 18:53:14 +0100" }, { "cves": [], "log": [ "", " * Do not inhibit shutdown or sleep. Apt already inhibits shutdown.", " The argument of whether a sleep operation is to be inhibited during package", " installation belongs likewise to Apt. (lp: #2133012).", "" ], "package": "update-manager", "version": "1:26.04.3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2133012 ], "author": "Nathan Pratta Teodosio ", "date": "Tue, 10 Feb 2026 17:16:37 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-urllib3", "from_version": { "source_package_name": "python-urllib3", "source_package_version": "2.5.0-1ubuntu2", "version": "2.5.0-1ubuntu2" }, "to_version": { "source_package_name": "python-urllib3", "source_package_version": "2.6.3-1ubuntu1", "version": "2.6.3-1ubuntu1" }, "cves": [ { "cve": "CVE-2025-66471", "url": "https://ubuntu.com/security/CVE-2025-66471", "cve_description": "urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compressed data. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" }, { "cve": "CVE-2025-66418", "url": "https://ubuntu.com/security/CVE-2025-66418", "cve_description": "urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory allocation for the decompressed data. This vulnerability is fixed in 2.6.0.", "cve_priority": "medium", "cve_public_date": "2025-12-05 16:15:00 UTC" }, { "cve": "CVE-2026-21441", "url": "https://ubuntu.com/security/CVE-2026-21441", "cve_description": "urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.", "cve_priority": "medium", "cve_public_date": "2026-01-07 22:15:00 UTC" }, { "cve": "CVE-2025-66418", "url": "https://ubuntu.com/security/CVE-2025-66418", "cve_description": "urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory allocation for the decompressed data. This vulnerability is fixed in 2.6.0.", "cve_priority": "medium", "cve_public_date": "2025-12-05 16:15:00 UTC" } ], "launchpad_bugs_fixed": [ 2144669 ], "changes": [ { "cves": [], "log": [ "", " * Drop python3-backports.zstd dependency (LP: #2144669)", "" ], "package": "python-urllib3", "version": "2.6.3-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144669 ], "author": "Kat Kuo ", "date": "Tue, 17 Mar 2026 12:04:52 -0400" }, { "cves": [ { "cve": "CVE-2025-66471", "url": "https://ubuntu.com/security/CVE-2025-66471", "cve_description": "urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compressed data. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header (e.g., gzip, deflate, br, or zstd). The library must read compressed data from the network and decompress it until the requested chunk size is met. Any resulting decompressed data that exceeds the requested amount is held in an internal buffer for the next read operation. The decompression logic could cause urllib3 to fully decode a small amount of highly compressed data in a single operation. This can result in excessive resource consumption (high CPU usage and massive memory allocation for the decompressed data.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" }, { "cve": "CVE-2025-66418", "url": "https://ubuntu.com/security/CVE-2025-66418", "cve_description": "urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory allocation for the decompressed data. This vulnerability is fixed in 2.6.0.", "cve_priority": "medium", "cve_public_date": "2025-12-05 16:15:00 UTC" } ], "log": [ "", " * Team upload.", " * New upstream release:", " - CVE-2025-66471: Fixed a security issue where streaming API could", " improperly handle highly compressed HTTP content (\"decompression", " bombs\") leading to excessive resource consumption even when a small", " amount of data was requested. Reading small chunks of compressed data", " is safer and much more efficient now (closes: #1122029).", " - Fixed HTTPResponse.read_chunked() to properly handle leftover data in", " the decoder's buffer when reading compressed chunked responses", " (closes: #1122743).", " * Bump Build-Depends/Suggests on python3-brotli to >= 1.2.0 to improve the", " fix for CVE-2025-66418.", "" ], "package": "python-urllib3", "version": "2.6.3-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Colin Watson ", "date": "Fri, 06 Feb 2026 00:37:49 +0000" }, { "cves": [ { "cve": "CVE-2026-21441", "url": "https://ubuntu.com/security/CVE-2026-21441", "cve_description": "urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding` header (e.g., `gzip`, `deflate`, `br`, or `zstd`). When using the streaming API, the library decompresses only the necessary bytes, enabling partial content consumption. Starting in version 1.22 and prior to version 2.6.3, for HTTP redirect responses, the library would read the entire response body to drain the connection and decompress the content unnecessarily. This decompression occurred even before any read methods were called, and configured read limits did not restrict the amount of decompressed data. As a result, there was no safeguard against decompression bombs. A malicious server could exploit this to trigger excessive resource consumption on the client. Applications and libraries are affected when they stream content from untrusted sources by setting `preload_content=False` when they do not disable redirects. Users should upgrade to at least urllib3 v2.6.3, in which the library does not decode content of redirect responses when `preload_content=False`. If upgrading is not immediately possible, disable redirects by setting `redirect=False` for requests to untrusted source.", "cve_priority": "medium", "cve_public_date": "2026-01-07 22:15:00 UTC" } ], "log": [ "", " * Team upload.", "", " [ Salvatore Bonaccorso ]", " * Fix security issue where decompression-bomb safeguards of the", " streaming API were bypassed when HTTP redirects were followed.", " (CVE-2026-21441) (Closes: #1125062)", "", " [ Santiago Vila ]", " * Drop debian/.gitignore, dpkg-buildpackage dislikes it.", " * d/control: Drop \"Rules-Requires-Root: no\" (default).", " * d/control: Drop \"Priority: optional\" (default).", " * d/control: Update standards-version.", "" ], "package": "python-urllib3", "version": "2.5.0-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Santiago Vila ", "date": "Sat, 10 Jan 2026 18:20:00 +0100" }, { "cves": [ { "cve": "CVE-2025-66418", "url": "https://ubuntu.com/security/CVE-2025-66418", "cve_description": "urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimited number of compression steps leading to high CPU usage and massive memory allocation for the decompressed data. This vulnerability is fixed in 2.6.0.", "cve_priority": "medium", "cve_public_date": "2025-12-05 16:15:00 UTC" } ], "log": [ "", " * Non-maintainer upload.", " * Unbounded number of links in the decompression chain (CVE-2025-66418)", " (Closes: #1122030)", "" ], "package": "python-urllib3", "version": "2.5.0-1.1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Salvatore Bonaccorso ", "date": "Sat, 03 Jan 2026 20:00:44 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-yaml", "from_version": { "source_package_name": "pyyaml", "source_package_version": "6.0.3-1", "version": "6.0.3-1" }, "to_version": { "source_package_name": "pyyaml", "source_package_version": "6.0.3-1build1", "version": "6.0.3-1build1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild to drop Python 3.13 bits.", "" ], "package": "pyyaml", "version": "6.0.3-1build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 20 Mar 2026 12:17:13 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-zope.interface", "from_version": { "source_package_name": "zope.interface", "source_package_version": "8.2-1", "version": "8.2-1" }, "to_version": { "source_package_name": "zope.interface", "source_package_version": "8.2-1build1", "version": "8.2-1build1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild to drop Python 3.13 bits.", "" ], "package": "zope.interface", "version": "8.2-1build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 20 Mar 2026 12:18:44 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3.13", "from_version": { "source_package_name": "python3.13", "source_package_version": "3.13.12-1", "version": "3.13.12-1" }, "to_version": { "source_package_name": "python3.13", "source_package_version": "3.13.12-1ubuntu1", "version": "3.13.12-1ubuntu1" }, "cves": [ { "cve": "CVE-2026-0865", "url": "https://ubuntu.com/security/CVE-2026-0865", "cve_description": "User-controlled header names and values containing newlines can allow injecting HTTP headers.", "cve_priority": "medium", "cve_public_date": "2026-01-20 22:15:00 UTC" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-0865", "url": "https://ubuntu.com/security/CVE-2026-0865", "cve_description": "User-controlled header names and values containing newlines can allow injecting HTTP headers.", "cve_priority": "medium", "cve_public_date": "2026-01-20 22:15:00 UTC" } ], "log": [ "", " * SECURITY REGRESSION: Allow HTAB in wsgiref header values", " - debian/patches/CVE-2026-0865-2.patch: Permit HTAB in header values", " (excluding names) in Lib/wsgiref/headers.py, add test coverage.", " - CVE-2026-0865 ", "" ], "package": "python3.13", "version": "3.13.12-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Vyom Yadav ", "date": "Tue, 03 Mar 2026 17:54:15 +0530" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3.13-minimal", "from_version": { "source_package_name": "python3.13", "source_package_version": "3.13.12-1", "version": "3.13.12-1" }, "to_version": { "source_package_name": "python3.13", "source_package_version": "3.13.12-1ubuntu1", "version": "3.13.12-1ubuntu1" }, "cves": [ { "cve": "CVE-2026-0865", "url": "https://ubuntu.com/security/CVE-2026-0865", "cve_description": "User-controlled header names and values containing newlines can allow injecting HTTP headers.", "cve_priority": "medium", "cve_public_date": "2026-01-20 22:15:00 UTC" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-0865", "url": "https://ubuntu.com/security/CVE-2026-0865", "cve_description": "User-controlled header names and values containing newlines can allow injecting HTTP headers.", "cve_priority": "medium", "cve_public_date": "2026-01-20 22:15:00 UTC" } ], "log": [ "", " * SECURITY REGRESSION: Allow HTAB in wsgiref header values", " - debian/patches/CVE-2026-0865-2.patch: Permit HTAB in header values", " (excluding names) in Lib/wsgiref/headers.py, add test coverage.", " - CVE-2026-0865 ", "" ], "package": "python3.13", "version": "3.13.12-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Vyom Yadav ", "date": "Tue, 03 Mar 2026 17:54:15 +0530" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3.14-gdbm", "from_version": { "source_package_name": "python3.14", "source_package_version": "3.14.3-1", "version": "3.14.3-1" }, "to_version": { "source_package_name": "python3.14", "source_package_version": "3.14.3-3", "version": "3.14.3-3" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Update to the 3.14 branch 2026-03-21.", " * Drop build dependency on blt, gone since 3.13.", "" ], "package": "python3.14", "version": "3.14.3-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sat, 21 Mar 2026 12:37:05 +0100" }, { "cves": [], "log": [ "", " [ Stefano Rivera ]", " * Drop explicit Build-Depends on quilt, it's only used in manual rules", " targets. Closes: #1129933.", " * Use dh_usrlocal to create /usr/local/python3.14/dist-packages.", " Closes: #1127103.", "", " [ Matthias Klose ]", " * Update to the 3.14 branch 2026-03-11.", "" ], "package": "python3.14", "version": "3.14.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Wed, 11 Mar 2026 20:17:30 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "readline-common", "from_version": { "source_package_name": "readline", "source_package_version": "8.3-3", "version": "8.3-3" }, "to_version": { "source_package_name": "readline", "source_package_version": "8.3-4", "version": "8.3-4" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Apply upstream patches 002-0031.", " * Bump standards version.", "" ], "package": "readline", "version": "8.3-4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 13 Feb 2026 11:25:25 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "rsyslog", "from_version": { "source_package_name": "rsyslog", "source_package_version": "8.2512.0-1ubuntu3", "version": "8.2512.0-1ubuntu3" }, "to_version": { "source_package_name": "rsyslog", "source_package_version": "8.2512.0-1ubuntu4", "version": "8.2512.0-1ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [ 2138647, 2143157 ], "changes": [ { "cves": [], "log": [ "", " * Update rsyslog apparmor profile to cope with log sockets in", " chroot directories (LP: #2138647):", " - d/usr.sbin.rsyslogd: add attach_disconnected flag to profile", " - d/t/{control,haproxy-logging}: new test to confirm the fix", " * d/p/fix-curl-ftbfs.patch: fix FTBFS with newer curl headers (LP: #2143157)", "" ], "package": "rsyslog", "version": "8.2512.0-1ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2138647, 2143157 ], "author": "Andreas Hasenack ", "date": "Tue, 10 Mar 2026 12:16:41 -0300" } ], "notes": null, "is_version_downgrade": false }, { "name": "rust-coreutils", "from_version": { "source_package_name": "rust-coreutils", "source_package_version": "0.6.0-0ubuntu1", "version": "0.6.0-0ubuntu1" }, "to_version": { "source_package_name": "rust-coreutils", "source_package_version": "0.7.0-0ubuntu1", "version": "0.7.0-0ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2143711, 2115782, 2125263, 2142588, 2141441 ], "changes": [ { "cves": [], "log": [ "", " * New upstream version 0.7.0 (LP: #2143711)", " * Fixes:", " - `man 1 test` is badly formated (LP: #2115782)", " - cp -r /dev/urandom copies content (LP: #2125263)", " - date: gnu date allows options after format (LP: #2142588)", " - autopkgtest failures in resolute due to readlink (LP: #2141441)", " * Refresh patches:", " - Tweak-release-build-profile.patch", " - dd-ensure-full-writes.patch", " - require-utilities-to-be-invoked-using-matching-path.patch", " - use-l10n-translations-in-makefile.patch", " - workspace-exclude.patch", " * Drop patches:", " - prevent-stty-termios2-on-ppc64el.patch: Fixed upstream.", " * Add patches:", " - use-u32-for-ppc64le.patch: Fix type assumption for ppc64 little-endian.", " This relates to the previous dropped patch about termios2, but upstream", " did not treat little- and big-endian ppc64 differently.", "" ], "package": "rust-coreutils", "version": "0.7.0-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143711, 2115782, 2125263, 2142588, 2141441 ], "author": "Simon Johnsson ", "date": "Mon, 09 Mar 2026 11:33:48 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "sg3-utils", "from_version": { "source_package_name": "sg3-utils", "source_package_version": "1.48-3ubuntu2", "version": "1.48-3ubuntu2" }, "to_version": { "source_package_name": "sg3-utils", "source_package_version": "1.48-3ubuntu3", "version": "1.48-3ubuntu3" }, "cves": [], "launchpad_bugs_fixed": [ 2142775 ], "changes": [ { "cves": [], "log": [ "", " * Recommend dracut as default initrd generator (LP: #2142775)", "" ], "package": "sg3-utils", "version": "1.48-3ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142775 ], "author": "Benjamin Drung ", "date": "Fri, 27 Feb 2026 18:12:12 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "sg3-utils-udev", "from_version": { "source_package_name": "sg3-utils", "source_package_version": "1.48-3ubuntu2", "version": "1.48-3ubuntu2" }, "to_version": { "source_package_name": "sg3-utils", "source_package_version": "1.48-3ubuntu3", "version": "1.48-3ubuntu3" }, "cves": [], "launchpad_bugs_fixed": [ 2142775 ], "changes": [ { "cves": [], "log": [ "", " * Recommend dracut as default initrd generator (LP: #2142775)", "" ], "package": "sg3-utils", "version": "1.48-3ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142775 ], "author": "Benjamin Drung ", "date": "Fri, 27 Feb 2026 18:12:12 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "snapd", "from_version": { "source_package_name": "snapd", "source_package_version": "2.74+ubuntu26.04", "version": "2.74+ubuntu26.04" }, "to_version": { "source_package_name": "snapd", "source_package_version": "2.74.1+ubuntu26.04.3", "version": "2.74.1+ubuntu26.04.3" }, "cves": [ { "cve": "CVE-2026-3888", "url": "https://ubuntu.com/security/CVE-2026-3888", "cve_description": "Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configured to automatically clean up this directory. This issue affects Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS.", "cve_priority": "high", "cve_public_date": "2026-03-17 14:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2138629, 2138629, 2141328, 2139611, 2139300, 2139099, 2141607, 2132084, 2127189, 1851490, 2121853, 2127214, 2127244, 2127766 ], "changes": [ { "cves": [ { "cve": "CVE-2026-3888", "url": "https://ubuntu.com/security/CVE-2026-3888", "cve_description": "Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configured to automatically clean up this directory. This issue affects Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS.", "cve_priority": "high", "cve_public_date": "2026-03-17 14:16:00 UTC" } ], "log": [ "", " * New upstream release, LP: #2138629", " - FDE: secboot fixes", " - Security: CVE-2026-3888", " - Packaging: fix deb package version number", " - Packaging: fix autopkgtest failure to install spread", "" ], "package": "snapd", "version": "2.74.1+ubuntu26.04.3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2138629 ], "author": "Ernest Lotter ", "date": "Thu, 24 Mar 2026 13:46:00 +0200" }, { "cves": [], "log": [ "", " * New upstream release, LP: #2138629", " - FDE: measure DeployedMode and AuditMode variables if they appear", " as disabled in the event log to avoid a potential reseal-failure", " boot loop", " - LP: #2141328 FDE: reuse preinstall check context during install to", " account for user-ignored errors", " - LP: #2139611 FDE: fix db updates by allowing multiple payloads", " - LP: #2139300 snap-confine: add CAP_SYS_RESOURCE to allow raising", " memory lock limit when required", " - LP: #2139099 snap-confine: bump the max element count of the BPF", " map used to store IDs of allowed/matched devices to 1000", " - LP: #2141607 Desktop: revert change that caused user daemons", " declaring the desktop plug to implicitly depend on graphical-", " session.target", " - Interfaces: Added pidfd_open and memfd_secret to seccomp template", " - Interfaces: camera | add locking permission for /dev/video", "" ], "package": "snapd", "version": "2.74.1+ubuntu26.04", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2138629, 2141328, 2139611, 2139300, 2139099, 2141607 ], "author": "Ernest Lotter ", "date": "Thu, 12 Feb 2026 21:27:23 +0200" }, { "cves": [], "log": [ "", " * New upstream release, LP: #2132084", " - FDE: do not save incomplete FDE state when resealing was skipped", " - FDE: warn of inconsistent primary or policy counter", " - Confdb: document confdb in snapctl help messages", " - Confdb: only confdb hooks wait if snaps are disabled", " - Confdb: relax confdb change conflict checks", " - Confdb: remove empty parent when removing last leaf", " - Confdb: support parsing field filters", " - Confdb: wrap confdb write values under \"values\" key", " - dm-verity for essential snaps: add new naming convention for", " verity files", " - dm-verity for essential snaps: add snap integrity discovery", " - dm-verity for essential snaps: fix verity salt calculation", " - Assertions: add hardware identity assertion", " - Assertions: add integrity stanza in snap resources revisions", " - Assertions: add request message assertion required for remote", " device management", " - Assertions: add response-message assertion for secure remote", " device management", " - Assertions: expose WithStackedBackstore in RODatabase", " - Packaging: cross-distro | install upstream NEWS file into relevant", " snapd package doc directory", " - Packaging: cross-distro | tweak how the blocks injecting", " $SNAP_MOUNT_DIR/bin are generated as required for openSUSE", " - Packaging: remove deprecated snap-gdb-shim and all references now", " that snap run --gdb is unsupported and replaced by --gdbserver", " - Preseed: call systemd-tmpfiles instead handle-writable-paths on", " uc26", " - Preseed: do not remove the /snap dir but rather all its contents", " during reset", " - snap-confine: attach name derived from security tag to BPF maps", " and programs", " - snap-confine: ensure permitted capabilities match expectation", " - snap-confine: fix cached snap-confine profile cleanup to report", " the correct error instead of masking backend setup failures", " - snap-confine: Improve validation of user controlled paths", " - snap-confine: tighten snap cgroup checks to ensure a snap cannot", " start another snap in the same cgroup, preventing incorrect", " device-filter installation", " - core-initrd: add 26.04 ubuntu-core-initramfs package", " - core-initrd: add missing order dependency for setting default", " system files", " - core-initrd: avoid scanning loop and mmc boot partitions as the", " boot disk won't be any of these", " - core-initrd: make cpio a Depends and remove from Build-Depends", " - core-initrd: start plymouth sooner and reload when gadget is", " available", " - Cross-distro: modify syscheck to account for differences in", " openSUSE 16.0+", " - Validation sets: use in-flight validation sets when calling", " 'snapctl install' from hook", " - Prompting: enable prompting for the camera interface", " - Prompting: remove polkit authentication when modifying/deleting", " prompting rules", " - LP: #2127189 Prompting: do not record notices for unchanged rules", " on snapd startup", " - AppArmor: add free and pidof to the template", " - AppArmor: adjust interfaces/profiles to cope with coreutils paths", " - Interfaces: add support for compatibility expressions", " - Interfaces: checkbox-support | complete overhaul", " - Interfaces: define vulkan-driver-libs, cuda-driver-libs, egl-", " driver-libs, gbm-driver-libs, opengl-driver-libs, and opengles-", " driver-libs", " - Interfaces: allow snaps on classic access to nvidia graphics", " libraries exported by *-driver-libs interfaces", " - Interfaces: fwupd | broaden access to /boot/efi/EFI", " - Interfaces: gsettings | set dconf-service as profile for", " ca.desrt.dconf.Writer", " - Interfaces: iscsi-initiator, dm-multipath, nvme-control | add new", " interfaces", " - Interfaces: opengl | grant read/write permission to /run/nvidia-", " persistenced/socket", " - interfaces: ros-snapd-support | add access to /v2/changes/", " - Interfaces: system-observe | read access to btrfs/ext4/zfs", " filesystem information", " - Interfaces: system-trace | allow /sys/kernel/tracing/** rw", " - Interfaces: usb-gadget | add support for ffs mounts in attributes", " - Add autocompletion to run command", " - Introduce option for disallowing auto-connection of a specific", " interface", " - Only log errors for user service operations performed as a part of", " snap removal", " - Patch snap names in service requests for parallel installed snaps", " - Simplify traits for eMMC special partitions", " - Strip apparmor_parser from debug symbols shrinking snapd size by", " ~3MB", " - Fix InstallPathMany skipping refresh control", " - Fix waiting for GDB helper to stop before attaching gdbserver", " - Protect the per-snap tmp directory against being reaped by age", " - Prevent disabling base snaps to ensure dependent snaps can be", " removed", " - Modify API endpoint /v2/logs to reject n <= 0 (except for special", " case -1 meaning all)", " - Avoid potential deadlock when task is injected after the change", " was aborted", " - Avoid race between store download stream and cache cleanup", " executing in parallel when invoked by snap download task", " - LP: #1851490 Use \"current\" instead of revision number for icons", " - LP: #2121853 Add snapctl version command", " - LP: #2127214 Ensure no more than one partition on disk can match a", " gadget partition", " - LP: #2127244 snap-confine: update AppArmor profile to allow", " read/write to journal as workaround for snap-confine fd", " inheritance prevented by newer AppArmor", " - LP: #2127766 Add new tracing mechanism with independently running", " strace and shim synchronization", "" ], "package": "snapd", "version": "2.73+ubuntu26.04", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132084, 2127189, 1851490, 2121853, 2127214, 2127244, 2127766 ], "author": "Ernest Lotter ", "date": "Fri, 21 Nov 2025 09:08:02 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "squashfs-tools", "from_version": { "source_package_name": "squashfs-tools", "source_package_version": "1:4.7.4-1", "version": "1:4.7.4-1" }, "to_version": { "source_package_name": "squashfs-tools", "source_package_version": "1:4.7.4-1ubuntu1", "version": "1:4.7.4-1ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2143762 ], "changes": [ { "cves": [], "log": [ "", " * Backport \"mksquashfs: don't create duplicate virtual -> real disk", " mappings\" which causes corrupt squashfs files to be built when building", " Ubuntu Studio (LP: #2143762)", "" ], "package": "squashfs-tools", "version": "1:4.7.4-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143762 ], "author": "Michael Hudson-Doyle ", "date": "Thu, 12 Mar 2026 17:36:38 +1300" } ], "notes": null, "is_version_downgrade": false }, { "name": "strace", "from_version": { "source_package_name": "strace", "source_package_version": "6.16+ds-2ubuntu2", "version": "6.16+ds-2ubuntu2" }, "to_version": { "source_package_name": "strace", "source_package_version": "6.19+ds-0ubuntu3", "version": "6.19+ds-0ubuntu3" }, "cves": [], "launchpad_bugs_fixed": [ 2144022, 2142281, 2142868, 2137458, 2142780, 2142855, 2142890, 2142281, 2142588, 2143059, 2142890, 2132257 ], "changes": [ { "cves": [], "log": [ "", " * d/p/0{1,2,3,4}-linux7.0rc3: fix ftbfs and tests (LP: #2144022)", "" ], "package": "strace", "version": "6.19+ds-0ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144022 ], "author": "Jonas Jelten ", "date": "Fri, 13 Mar 2026 15:33:35 +0100" }, { "cves": [], "log": [ "", " * d/p/color: add check for TERM environment (LP: #2142281)", "" ], "package": "strace", "version": "6.19+ds-0ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142281 ], "author": "Jonas Jelten ", "date": "Wed, 11 Mar 2026 17:00:15 +0100" }, { "cves": [], "log": [ "", " * New upstream version 6.19+ds", " (LP: #2142868, LP: #2137458, LP: #2142780, LP: #2142855, LP: #2142890)", " * d/p/color: add output colors (LP: #2142281)", " * d/p/lp2142588-fix-date-formatting: resolve ftbfs (LP: #2142588)", " * d/p/non-vdso-syscall-filtering: fix test failures due to missing vdso", " (LP: #2143059)", " * d/p/ioctl-fix-ftbfs-c23: resolve ftbfs (LP: #2142890)", " * d/p/0004-Erase-clock_gettime64-calls-on-armhf: drop (LP #2125424)", " [upstream in v6.19]", "" ], "package": "strace", "version": "6.19+ds-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142868, 2137458, 2142780, 2142855, 2142890, 2142281, 2142588, 2143059, 2142890 ], "author": "Jonas Jelten ", "date": "Tue, 03 Mar 2026 12:11:26 +0100" }, { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "strace", "version": "6.16+ds-2ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 09 Feb 2026 23:49:06 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "sudo", "from_version": { "source_package_name": "sudo", "source_package_version": "1.9.17p2-1ubuntu2", "version": "1.9.17p2-1ubuntu2" }, "to_version": { "source_package_name": "sudo", "source_package_version": "1.9.17p2-1ubuntu3", "version": "1.9.17p2-1ubuntu3" }, "cves": [], "launchpad_bugs_fixed": [ 2143042 ], "changes": [ { "cves": [], "log": [ "", " * SECURITY UPDATE: exec_mailer gid issue (LP: #2143042)", " - debian/patches/lp2143042.patch: set group as well as uid when running", " the mailer and make a setuid(), setgid() or setgroups() failure fatal", " in include/sudo_eventlog.h, lib/eventlog/eventlog.c,", " lib/eventlog/eventlog_conf.c, plugins/sudoers/logging.c,", " plugins/sudoers/policy.c.", " - No CVE number", "" ], "package": "sudo", "version": "1.9.17p2-1ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143042 ], "author": "Marc Deslauriers ", "date": "Fri, 13 Mar 2026 07:02:48 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "sudo-rs", "from_version": { "source_package_name": "rust-sudo-rs", "source_package_version": "0.2.12-0ubuntu1", "version": "0.2.12-0ubuntu1" }, "to_version": { "source_package_name": "rust-sudo-rs", "source_package_version": "0.2.13-0ubuntu1", "version": "0.2.13-0ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2143916, 2143125, 2142449, 2145317 ], "changes": [ { "cves": [], "log": [ "", " * New upstream version (LP: #2143916)", " * Fixes:", " - Merge from upstream \"Add error messages on wildcards and accept a 'final'", " wildcard #1463\" (LP: #2143125)", " - sudo-rs does not show the entire version string on Ubuntu (LP: #2142449)", " * Drop patches:", " - enable-pwfeedback-by-default.patch: Upstream enabled pwfeedback by", " default in 0.2.13.", " - correct-backspace-for-multibyte-characters.patch: Upstream fixed", " backspace.", " * Refresh patches:", " - disable-broken-tests.patch", " * New patches:", " - fix-toggle-pwfeedback-tab.patch: Add a patch to fix toggling pwfeedback", " with the TAB key, thanks Marc Schoolderman.", " * Skip tests:", " - traverse_secure_open_negative", "" ], "package": "rust-sudo-rs", "version": "0.2.13-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143916, 2143125, 2142449 ], "author": "Simon Johnsson ", "date": "Wed, 11 Mar 2026 14:27:00 +0100" }, { "cves": [], "log": [ "", " * Disable cargo-auditable on i386", "" ], "package": "rust-sudo-rs", "version": "0.2.12-0ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Florent 'Skia' Jacquet ", "date": "Tue, 24 Mar 2026 11:58:04 +0100" }, { "cves": [], "log": [ "", " * Add cargo-auditable metadata (LP: #2145317)", "" ], "package": "rust-sudo-rs", "version": "0.2.12-0ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2145317 ], "author": "Petrichor Park ", "date": "Fri, 20 Mar 2026 09:15:48 -0500" } ], "notes": null, "is_version_downgrade": false }, { "name": "systemd", "from_version": { "source_package_name": "systemd", "source_package_version": "259-1ubuntu3", "version": "259-1ubuntu3" }, "to_version": { "source_package_name": "systemd", "source_package_version": "259.5-0ubuntu1", "version": "259.5-0ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2144032, 2143010, 2142900, 2142428, 2077538, 2142306, 2139822 ], "changes": [ { "cves": [], "log": [ "", " [ Nick Rosbrook ]", " * New upstream stable version 259.5", " - Update upstream source from tag 'upstream/259.5'", " Update to upstream version '259.5'", " with Debian dir 1076161727931a7063674200c474ec7747a5177f", " - Bug fixes", "", " [ Oliver Reiche ]", " * Fix issue overwriting /tmp on dist-upgrade (LP: #2144032)", "" ], "package": "systemd", "version": "259.5-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144032 ], "author": "Nick Rosbrook ", "date": "Fri, 13 Mar 2026 12:27:31 -0400" }, { "cves": [], "log": [ "", " * New upstream stable version 259.3", " - Update upstream source from tag 'upstream/259.3'", " Update to upstream version '259.3'", " with Debian dir 4fea3198a053eb40e77ea3ad3c3be030151f3f46", " - Bug fixes", "" ], "package": "systemd", "version": "259.3-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Fri, 06 Mar 2026 09:05:25 -0500" }, { "cves": [], "log": [ "", " * Tag KFD and ACCEL devices for uaccess (LP: #2143010)", " * d/control: Add missing dh-dlopenlibdeps to b-d", "" ], "package": "systemd", "version": "259.2-0ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143010 ], "author": "Mario Limonciello ", "date": "Tue, 03 Mar 2026 12:06:36 -0600" }, { "cves": [], "log": [ "", " * New upstream stable version 259.2", " - Bug fixes", " - Update upstream source from tag 'upstream/259.2'", " Update to upstream version '259.2'", " with Debian dir c25e0517a7a4ebd6d9009de0cf949dd265182a67", " - Drop lp2142428-seccomp-util-add-lsm_get_self_attr-and-lsm_list_modules-t.patch.", " Applied upstream: https://github.com/systemd/systemd/commit/515816197e", " * test: use gnuenv to workaround broken --block-signal= (LP: #2142900)", "" ], "package": "systemd", "version": "259.2-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142900 ], "author": "Nick Rosbrook ", "date": "Fri, 27 Feb 2026 09:20:52 -0500" }, { "cves": [], "log": [ "", " [ Nick Rosbrook ]", " * seccomp-util: add lsm_get_self_attr and lsm_list_modules to @default", " (LP: #2142428)", "", " [ Alessandro Astone ]", " * d/p/lp2077538: Grant GPU rendering access to GNOME Remote Desktop", " (LP: #2077538, LP: #2142306)", "" ], "package": "systemd", "version": "259.1-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142428, 2077538, 2142306 ], "author": "Nick Rosbrook ", "date": "Wed, 25 Feb 2026 10:32:56 -0500" }, { "cves": [], "log": [ "", " * Merge with Debian unstable. Remaining changes:", " - debian/systemd.postinst:", " + manually call systemd-tmpfiles --create in postinst", " - debian/control:", " + Add Recommends: systemd-resolved to systemd package", " + Make systemd-cryptsetup Priority: important", " + Give systemd-resolved Priority: important", " + Add Recommends: systemd-hwe-hwdb to udev package", " + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved", " + Do not build systemd-boot-efi-{amd64,arm64}-signed-template", " + d/control: demote systemd-userdbd to Suggests for libnss-systemd", " - d/rules: disable bpf support on riscv64 for now (LP #2099864)", " - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028)", " - Delta for i386:", " + debian/systemd.install: exclude files that are not built for i386", " + debian/systemd.manpages: do not ship un-built manpages on i386", " + debian/rules,debian/control,debian/tests/control:", " Do not build with tpm libraries on i386", " + debian/rules,debian/control,debian/tests/control:", " Do not build with libqrencode on i386", " + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors", " - debian/libnss-systemd.*:", " + debian/libnss-systemd.nss: install after 'compat' too (LP #2125403)", " + debian/libnss-systemd.preinst: force nsswitch.conf update", " Drop systemd instances in nsswitch.conf, and force postinst to", " re-generate the file (LP #2121017)", " + debian/linbnss-systemd.nss: Install systemd service after files.", " As suggested by upstream the systemd NSS service should come just after", " files", " - debian/tests:", " + d/t/boot-and-services: use coreutils tunable in apparmor test (LP #2125614)", " + d/t/upstream: skip TEST-08-INITRD on Ubuntu (LP #2136419)", " - debian/patches:", " + switch-root: use MS_MOVE for /run when switchig from initrd", " + test: skip TEST-50-DISSECT.dissect (LP #2116460)", " + test: skip TEST-13-NSPAWN.{nspawn,machined} (LP #2136413)", " * Dropped changes, included upstream:", " - lp2136497-test-use-journalctl-n-option-instead-of-piping-to-head.patch", " Applied upstream: https://github.com/systemd/systemd/commit/2c661e5f0d", " - lp2136408-test-cope-with-uutils-coreutils-flag-parsing-for-date-com.patch", " Applied upstream: https://github.com/systemd/systemd/commit/a45dad1aa5", " - test-disable-pipefail-again-in-monitor_check_rr.patch", " Applied upstream: https://github.com/systemd/systemd/commit/ce35956b3a", " - resolve-include-current-DNS-server-in-JSON-again.patch", " Applied upstream: https://github.com/systemd/systemd/commit/0de941f937", " - lp2133402-ukify-omit-.osrel-section-when-os-release-is-empty.patch", " Applied upstream: https://github.com/systemd/systemd/commit/798a27a5b4", " * Dropped changes, no longer needed:", " - d/t/upstream: use GNU cp in test setup (LP #2122363)", " Fixed in rust-coreutils 0.5.0", " - lp2136752-test-workaround-uutils-dd-broken-pipe.patch", " Fixed in rust-coreutils 0.6.0", " * New changes:", " - d/libsystemd-shared.preinst: refuse to upgrade without unified cgroupv2 hierarchy", "" ], "package": "systemd", "version": "259.1-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Tue, 10 Feb 2026 14:05:53 -0500" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * Drop dependencies on libcap-dev, no longer used since v259", " * Mark sd-userdbd as Multi-Arch: foreign (Closes: #1123615)", " * Use dh_installsystemd more to manage units. Ensure more units are", " handled as they are added to various packages", " * Use dh_installsystemd to handle journald and networkd", " * Use deb-systemd-invoke to reexec instead of manual calls. Allows the", " tool to handle the complications and use varlink where available", " * Increase number of sections of sd-stub on amd64 too. The default limit", " breaks adding more than 28 sections, which can happen with a UKI with", " many optional profiles. Bump it on amd64 too, at the cost of an extra", " ~80KB in size on the stub.", " * Update upstream source from tag 'upstream/259.1' Update to upstream", " version '259.1' with Debian dir", " f7a9425f1024ef75b5020a216f6be3d0af9ac227", " * Restrict the tpm2-generator manpage to arches where it is built", " * Install ask-password polkit policy file", "", " [ Yu Watanabe ]", " * Drop use of deprecated options. These options are deprecated since", " v258.", "", " [ Nick Rosbrook ]", " * d/control: have systemd-boot depend on efibootmgr for amd64 and arm64", " only", " * d/tests: drop tests-in-lxd", " * d/control: make systemd-container Depends: libarchive13t64. This is", " needed for e.g. systemd-import-generator + rd.systemd.pull= to work", " properly. Dracut would like to be able to use that feature reliably", " when systemd-importd is available, so explicitly depend on libarchive.", " Currently, it is only a Suggests of libsystemd-shared via dlopen", " machinery. (LP: #2139822)", "" ], "package": "systemd", "version": "259.1-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2139822 ], "author": "Luca Boccassi ", "date": "Fri, 06 Feb 2026 18:37:22 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "systemd-cryptsetup", "from_version": { "source_package_name": "systemd", "source_package_version": "259-1ubuntu3", "version": "259-1ubuntu3" }, "to_version": { "source_package_name": "systemd", "source_package_version": "259.5-0ubuntu1", "version": "259.5-0ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2144032, 2143010, 2142900, 2142428, 2077538, 2142306, 2139822 ], "changes": [ { "cves": [], "log": [ "", " [ Nick Rosbrook ]", " * New upstream stable version 259.5", " - Update upstream source from tag 'upstream/259.5'", " Update to upstream version '259.5'", " with Debian dir 1076161727931a7063674200c474ec7747a5177f", " - Bug fixes", "", " [ Oliver Reiche ]", " * Fix issue overwriting /tmp on dist-upgrade (LP: #2144032)", "" ], "package": "systemd", "version": "259.5-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144032 ], "author": "Nick Rosbrook ", "date": "Fri, 13 Mar 2026 12:27:31 -0400" }, { "cves": [], "log": [ "", " * New upstream stable version 259.3", " - Update upstream source from tag 'upstream/259.3'", " Update to upstream version '259.3'", " with Debian dir 4fea3198a053eb40e77ea3ad3c3be030151f3f46", " - Bug fixes", "" ], "package": "systemd", "version": "259.3-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Fri, 06 Mar 2026 09:05:25 -0500" }, { "cves": [], "log": [ "", " * Tag KFD and ACCEL devices for uaccess (LP: #2143010)", " * d/control: Add missing dh-dlopenlibdeps to b-d", "" ], "package": "systemd", "version": "259.2-0ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143010 ], "author": "Mario Limonciello ", "date": "Tue, 03 Mar 2026 12:06:36 -0600" }, { "cves": [], "log": [ "", " * New upstream stable version 259.2", " - Bug fixes", " - Update upstream source from tag 'upstream/259.2'", " Update to upstream version '259.2'", " with Debian dir c25e0517a7a4ebd6d9009de0cf949dd265182a67", " - Drop lp2142428-seccomp-util-add-lsm_get_self_attr-and-lsm_list_modules-t.patch.", " Applied upstream: https://github.com/systemd/systemd/commit/515816197e", " * test: use gnuenv to workaround broken --block-signal= (LP: #2142900)", "" ], "package": "systemd", "version": "259.2-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142900 ], "author": "Nick Rosbrook ", "date": "Fri, 27 Feb 2026 09:20:52 -0500" }, { "cves": [], "log": [ "", " [ Nick Rosbrook ]", " * seccomp-util: add lsm_get_self_attr and lsm_list_modules to @default", " (LP: #2142428)", "", " [ Alessandro Astone ]", " * d/p/lp2077538: Grant GPU rendering access to GNOME Remote Desktop", " (LP: #2077538, LP: #2142306)", "" ], "package": "systemd", "version": "259.1-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142428, 2077538, 2142306 ], "author": "Nick Rosbrook ", "date": "Wed, 25 Feb 2026 10:32:56 -0500" }, { "cves": [], "log": [ "", " * Merge with Debian unstable. Remaining changes:", " - debian/systemd.postinst:", " + manually call systemd-tmpfiles --create in postinst", " - debian/control:", " + Add Recommends: systemd-resolved to systemd package", " + Make systemd-cryptsetup Priority: important", " + Give systemd-resolved Priority: important", " + Add Recommends: systemd-hwe-hwdb to udev package", " + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved", " + Do not build systemd-boot-efi-{amd64,arm64}-signed-template", " + d/control: demote systemd-userdbd to Suggests for libnss-systemd", " - d/rules: disable bpf support on riscv64 for now (LP #2099864)", " - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028)", " - Delta for i386:", " + debian/systemd.install: exclude files that are not built for i386", " + debian/systemd.manpages: do not ship un-built manpages on i386", " + debian/rules,debian/control,debian/tests/control:", " Do not build with tpm libraries on i386", " + debian/rules,debian/control,debian/tests/control:", " Do not build with libqrencode on i386", " + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors", " - debian/libnss-systemd.*:", " + debian/libnss-systemd.nss: install after 'compat' too (LP #2125403)", " + debian/libnss-systemd.preinst: force nsswitch.conf update", " Drop systemd instances in nsswitch.conf, and force postinst to", " re-generate the file (LP #2121017)", " + debian/linbnss-systemd.nss: Install systemd service after files.", " As suggested by upstream the systemd NSS service should come just after", " files", " - debian/tests:", " + d/t/boot-and-services: use coreutils tunable in apparmor test (LP #2125614)", " + d/t/upstream: skip TEST-08-INITRD on Ubuntu (LP #2136419)", " - debian/patches:", " + switch-root: use MS_MOVE for /run when switchig from initrd", " + test: skip TEST-50-DISSECT.dissect (LP #2116460)", " + test: skip TEST-13-NSPAWN.{nspawn,machined} (LP #2136413)", " * Dropped changes, included upstream:", " - lp2136497-test-use-journalctl-n-option-instead-of-piping-to-head.patch", " Applied upstream: https://github.com/systemd/systemd/commit/2c661e5f0d", " - lp2136408-test-cope-with-uutils-coreutils-flag-parsing-for-date-com.patch", " Applied upstream: https://github.com/systemd/systemd/commit/a45dad1aa5", " - test-disable-pipefail-again-in-monitor_check_rr.patch", " Applied upstream: https://github.com/systemd/systemd/commit/ce35956b3a", " - resolve-include-current-DNS-server-in-JSON-again.patch", " Applied upstream: https://github.com/systemd/systemd/commit/0de941f937", " - lp2133402-ukify-omit-.osrel-section-when-os-release-is-empty.patch", " Applied upstream: https://github.com/systemd/systemd/commit/798a27a5b4", " * Dropped changes, no longer needed:", " - d/t/upstream: use GNU cp in test setup (LP #2122363)", " Fixed in rust-coreutils 0.5.0", " - lp2136752-test-workaround-uutils-dd-broken-pipe.patch", " Fixed in rust-coreutils 0.6.0", " * New changes:", " - d/libsystemd-shared.preinst: refuse to upgrade without unified cgroupv2 hierarchy", "" ], "package": "systemd", "version": "259.1-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Tue, 10 Feb 2026 14:05:53 -0500" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * Drop dependencies on libcap-dev, no longer used since v259", " * Mark sd-userdbd as Multi-Arch: foreign (Closes: #1123615)", " * Use dh_installsystemd more to manage units. Ensure more units are", " handled as they are added to various packages", " * Use dh_installsystemd to handle journald and networkd", " * Use deb-systemd-invoke to reexec instead of manual calls. Allows the", " tool to handle the complications and use varlink where available", " * Increase number of sections of sd-stub on amd64 too. The default limit", " breaks adding more than 28 sections, which can happen with a UKI with", " many optional profiles. Bump it on amd64 too, at the cost of an extra", " ~80KB in size on the stub.", " * Update upstream source from tag 'upstream/259.1' Update to upstream", " version '259.1' with Debian dir", " f7a9425f1024ef75b5020a216f6be3d0af9ac227", " * Restrict the tpm2-generator manpage to arches where it is built", " * Install ask-password polkit policy file", "", " [ Yu Watanabe ]", " * Drop use of deprecated options. These options are deprecated since", " v258.", "", " [ Nick Rosbrook ]", " * d/control: have systemd-boot depend on efibootmgr for amd64 and arm64", " only", " * d/tests: drop tests-in-lxd", " * d/control: make systemd-container Depends: libarchive13t64. This is", " needed for e.g. systemd-import-generator + rd.systemd.pull= to work", " properly. Dracut would like to be able to use that feature reliably", " when systemd-importd is available, so explicitly depend on libarchive.", " Currently, it is only a Suggests of libsystemd-shared via dlopen", " machinery. (LP: #2139822)", "" ], "package": "systemd", "version": "259.1-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2139822 ], "author": "Luca Boccassi ", "date": "Fri, 06 Feb 2026 18:37:22 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "systemd-hwe-hwdb", "from_version": { "source_package_name": "systemd-hwe", "source_package_version": "259.0.1", "version": "259.0.1" }, "to_version": { "source_package_name": "systemd-hwe", "source_package_version": "259.5.1ubuntu", "version": "259.5.1ubuntu" }, "cves": [], "launchpad_bugs_fixed": [ 2146571 ], "changes": [ { "cves": [], "log": [ "", " * hwdb.d/90-keyboard-ubuntu.hwdb: drop duplicate rules (LP: #2146571)", "" ], "package": "systemd-hwe", "version": "259.5.1ubuntu", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2146571 ], "author": "Nick Rosbrook ", "date": "Fri, 27 Mar 2026 11:19:11 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "systemd-resolved", "from_version": { "source_package_name": "systemd", "source_package_version": "259-1ubuntu3", "version": "259-1ubuntu3" }, "to_version": { "source_package_name": "systemd", "source_package_version": "259.5-0ubuntu1", "version": "259.5-0ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2144032, 2143010, 2142900, 2142428, 2077538, 2142306, 2139822 ], "changes": [ { "cves": [], "log": [ "", " [ Nick Rosbrook ]", " * New upstream stable version 259.5", " - Update upstream source from tag 'upstream/259.5'", " Update to upstream version '259.5'", " with Debian dir 1076161727931a7063674200c474ec7747a5177f", " - Bug fixes", "", " [ Oliver Reiche ]", " * Fix issue overwriting /tmp on dist-upgrade (LP: #2144032)", "" ], "package": "systemd", "version": "259.5-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144032 ], "author": "Nick Rosbrook ", "date": "Fri, 13 Mar 2026 12:27:31 -0400" }, { "cves": [], "log": [ "", " * New upstream stable version 259.3", " - Update upstream source from tag 'upstream/259.3'", " Update to upstream version '259.3'", " with Debian dir 4fea3198a053eb40e77ea3ad3c3be030151f3f46", " - Bug fixes", "" ], "package": "systemd", "version": "259.3-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Fri, 06 Mar 2026 09:05:25 -0500" }, { "cves": [], "log": [ "", " * Tag KFD and ACCEL devices for uaccess (LP: #2143010)", " * d/control: Add missing dh-dlopenlibdeps to b-d", "" ], "package": "systemd", "version": "259.2-0ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143010 ], "author": "Mario Limonciello ", "date": "Tue, 03 Mar 2026 12:06:36 -0600" }, { "cves": [], "log": [ "", " * New upstream stable version 259.2", " - Bug fixes", " - Update upstream source from tag 'upstream/259.2'", " Update to upstream version '259.2'", " with Debian dir c25e0517a7a4ebd6d9009de0cf949dd265182a67", " - Drop lp2142428-seccomp-util-add-lsm_get_self_attr-and-lsm_list_modules-t.patch.", " Applied upstream: https://github.com/systemd/systemd/commit/515816197e", " * test: use gnuenv to workaround broken --block-signal= (LP: #2142900)", "" ], "package": "systemd", "version": "259.2-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142900 ], "author": "Nick Rosbrook ", "date": "Fri, 27 Feb 2026 09:20:52 -0500" }, { "cves": [], "log": [ "", " [ Nick Rosbrook ]", " * seccomp-util: add lsm_get_self_attr and lsm_list_modules to @default", " (LP: #2142428)", "", " [ Alessandro Astone ]", " * d/p/lp2077538: Grant GPU rendering access to GNOME Remote Desktop", " (LP: #2077538, LP: #2142306)", "" ], "package": "systemd", "version": "259.1-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142428, 2077538, 2142306 ], "author": "Nick Rosbrook ", "date": "Wed, 25 Feb 2026 10:32:56 -0500" }, { "cves": [], "log": [ "", " * Merge with Debian unstable. Remaining changes:", " - debian/systemd.postinst:", " + manually call systemd-tmpfiles --create in postinst", " - debian/control:", " + Add Recommends: systemd-resolved to systemd package", " + Make systemd-cryptsetup Priority: important", " + Give systemd-resolved Priority: important", " + Add Recommends: systemd-hwe-hwdb to udev package", " + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved", " + Do not build systemd-boot-efi-{amd64,arm64}-signed-template", " + d/control: demote systemd-userdbd to Suggests for libnss-systemd", " - d/rules: disable bpf support on riscv64 for now (LP #2099864)", " - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028)", " - Delta for i386:", " + debian/systemd.install: exclude files that are not built for i386", " + debian/systemd.manpages: do not ship un-built manpages on i386", " + debian/rules,debian/control,debian/tests/control:", " Do not build with tpm libraries on i386", " + debian/rules,debian/control,debian/tests/control:", " Do not build with libqrencode on i386", " + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors", " - debian/libnss-systemd.*:", " + debian/libnss-systemd.nss: install after 'compat' too (LP #2125403)", " + debian/libnss-systemd.preinst: force nsswitch.conf update", " Drop systemd instances in nsswitch.conf, and force postinst to", " re-generate the file (LP #2121017)", " + debian/linbnss-systemd.nss: Install systemd service after files.", " As suggested by upstream the systemd NSS service should come just after", " files", " - debian/tests:", " + d/t/boot-and-services: use coreutils tunable in apparmor test (LP #2125614)", " + d/t/upstream: skip TEST-08-INITRD on Ubuntu (LP #2136419)", " - debian/patches:", " + switch-root: use MS_MOVE for /run when switchig from initrd", " + test: skip TEST-50-DISSECT.dissect (LP #2116460)", " + test: skip TEST-13-NSPAWN.{nspawn,machined} (LP #2136413)", " * Dropped changes, included upstream:", " - lp2136497-test-use-journalctl-n-option-instead-of-piping-to-head.patch", " Applied upstream: https://github.com/systemd/systemd/commit/2c661e5f0d", " - lp2136408-test-cope-with-uutils-coreutils-flag-parsing-for-date-com.patch", " Applied upstream: https://github.com/systemd/systemd/commit/a45dad1aa5", " - test-disable-pipefail-again-in-monitor_check_rr.patch", " Applied upstream: https://github.com/systemd/systemd/commit/ce35956b3a", " - resolve-include-current-DNS-server-in-JSON-again.patch", " Applied upstream: https://github.com/systemd/systemd/commit/0de941f937", " - lp2133402-ukify-omit-.osrel-section-when-os-release-is-empty.patch", " Applied upstream: https://github.com/systemd/systemd/commit/798a27a5b4", " * Dropped changes, no longer needed:", " - d/t/upstream: use GNU cp in test setup (LP #2122363)", " Fixed in rust-coreutils 0.5.0", " - lp2136752-test-workaround-uutils-dd-broken-pipe.patch", " Fixed in rust-coreutils 0.6.0", " * New changes:", " - d/libsystemd-shared.preinst: refuse to upgrade without unified cgroupv2 hierarchy", "" ], "package": "systemd", "version": "259.1-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Tue, 10 Feb 2026 14:05:53 -0500" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * Drop dependencies on libcap-dev, no longer used since v259", " * Mark sd-userdbd as Multi-Arch: foreign (Closes: #1123615)", " * Use dh_installsystemd more to manage units. Ensure more units are", " handled as they are added to various packages", " * Use dh_installsystemd to handle journald and networkd", " * Use deb-systemd-invoke to reexec instead of manual calls. Allows the", " tool to handle the complications and use varlink where available", " * Increase number of sections of sd-stub on amd64 too. The default limit", " breaks adding more than 28 sections, which can happen with a UKI with", " many optional profiles. Bump it on amd64 too, at the cost of an extra", " ~80KB in size on the stub.", " * Update upstream source from tag 'upstream/259.1' Update to upstream", " version '259.1' with Debian dir", " f7a9425f1024ef75b5020a216f6be3d0af9ac227", " * Restrict the tpm2-generator manpage to arches where it is built", " * Install ask-password polkit policy file", "", " [ Yu Watanabe ]", " * Drop use of deprecated options. These options are deprecated since", " v258.", "", " [ Nick Rosbrook ]", " * d/control: have systemd-boot depend on efibootmgr for amd64 and arm64", " only", " * d/tests: drop tests-in-lxd", " * d/control: make systemd-container Depends: libarchive13t64. This is", " needed for e.g. systemd-import-generator + rd.systemd.pull= to work", " properly. Dracut would like to be able to use that feature reliably", " when systemd-importd is available, so explicitly depend on libarchive.", " Currently, it is only a Suggests of libsystemd-shared via dlopen", " machinery. (LP: #2139822)", "" ], "package": "systemd", "version": "259.1-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2139822 ], "author": "Luca Boccassi ", "date": "Fri, 06 Feb 2026 18:37:22 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "systemd-sysv", "from_version": { "source_package_name": "systemd", "source_package_version": "259-1ubuntu3", "version": "259-1ubuntu3" }, "to_version": { "source_package_name": "systemd", "source_package_version": "259.5-0ubuntu1", "version": "259.5-0ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2144032, 2143010, 2142900, 2142428, 2077538, 2142306, 2139822 ], "changes": [ { "cves": [], "log": [ "", " [ Nick Rosbrook ]", " * New upstream stable version 259.5", " - Update upstream source from tag 'upstream/259.5'", " Update to upstream version '259.5'", " with Debian dir 1076161727931a7063674200c474ec7747a5177f", " - Bug fixes", "", " [ Oliver Reiche ]", " * Fix issue overwriting /tmp on dist-upgrade (LP: #2144032)", "" ], "package": "systemd", "version": "259.5-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144032 ], "author": "Nick Rosbrook ", "date": "Fri, 13 Mar 2026 12:27:31 -0400" }, { "cves": [], "log": [ "", " * New upstream stable version 259.3", " - Update upstream source from tag 'upstream/259.3'", " Update to upstream version '259.3'", " with Debian dir 4fea3198a053eb40e77ea3ad3c3be030151f3f46", " - Bug fixes", "" ], "package": "systemd", "version": "259.3-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Fri, 06 Mar 2026 09:05:25 -0500" }, { "cves": [], "log": [ "", " * Tag KFD and ACCEL devices for uaccess (LP: #2143010)", " * d/control: Add missing dh-dlopenlibdeps to b-d", "" ], "package": "systemd", "version": "259.2-0ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143010 ], "author": "Mario Limonciello ", "date": "Tue, 03 Mar 2026 12:06:36 -0600" }, { "cves": [], "log": [ "", " * New upstream stable version 259.2", " - Bug fixes", " - Update upstream source from tag 'upstream/259.2'", " Update to upstream version '259.2'", " with Debian dir c25e0517a7a4ebd6d9009de0cf949dd265182a67", " - Drop lp2142428-seccomp-util-add-lsm_get_self_attr-and-lsm_list_modules-t.patch.", " Applied upstream: https://github.com/systemd/systemd/commit/515816197e", " * test: use gnuenv to workaround broken --block-signal= (LP: #2142900)", "" ], "package": "systemd", "version": "259.2-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142900 ], "author": "Nick Rosbrook ", "date": "Fri, 27 Feb 2026 09:20:52 -0500" }, { "cves": [], "log": [ "", " [ Nick Rosbrook ]", " * seccomp-util: add lsm_get_self_attr and lsm_list_modules to @default", " (LP: #2142428)", "", " [ Alessandro Astone ]", " * d/p/lp2077538: Grant GPU rendering access to GNOME Remote Desktop", " (LP: #2077538, LP: #2142306)", "" ], "package": "systemd", "version": "259.1-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142428, 2077538, 2142306 ], "author": "Nick Rosbrook ", "date": "Wed, 25 Feb 2026 10:32:56 -0500" }, { "cves": [], "log": [ "", " * Merge with Debian unstable. Remaining changes:", " - debian/systemd.postinst:", " + manually call systemd-tmpfiles --create in postinst", " - debian/control:", " + Add Recommends: systemd-resolved to systemd package", " + Make systemd-cryptsetup Priority: important", " + Give systemd-resolved Priority: important", " + Add Recommends: systemd-hwe-hwdb to udev package", " + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved", " + Do not build systemd-boot-efi-{amd64,arm64}-signed-template", " + d/control: demote systemd-userdbd to Suggests for libnss-systemd", " - d/rules: disable bpf support on riscv64 for now (LP #2099864)", " - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028)", " - Delta for i386:", " + debian/systemd.install: exclude files that are not built for i386", " + debian/systemd.manpages: do not ship un-built manpages on i386", " + debian/rules,debian/control,debian/tests/control:", " Do not build with tpm libraries on i386", " + debian/rules,debian/control,debian/tests/control:", " Do not build with libqrencode on i386", " + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors", " - debian/libnss-systemd.*:", " + debian/libnss-systemd.nss: install after 'compat' too (LP #2125403)", " + debian/libnss-systemd.preinst: force nsswitch.conf update", " Drop systemd instances in nsswitch.conf, and force postinst to", " re-generate the file (LP #2121017)", " + debian/linbnss-systemd.nss: Install systemd service after files.", " As suggested by upstream the systemd NSS service should come just after", " files", " - debian/tests:", " + d/t/boot-and-services: use coreutils tunable in apparmor test (LP #2125614)", " + d/t/upstream: skip TEST-08-INITRD on Ubuntu (LP #2136419)", " - debian/patches:", " + switch-root: use MS_MOVE for /run when switchig from initrd", " + test: skip TEST-50-DISSECT.dissect (LP #2116460)", " + test: skip TEST-13-NSPAWN.{nspawn,machined} (LP #2136413)", " * Dropped changes, included upstream:", " - lp2136497-test-use-journalctl-n-option-instead-of-piping-to-head.patch", " Applied upstream: https://github.com/systemd/systemd/commit/2c661e5f0d", " - lp2136408-test-cope-with-uutils-coreutils-flag-parsing-for-date-com.patch", " Applied upstream: https://github.com/systemd/systemd/commit/a45dad1aa5", " - test-disable-pipefail-again-in-monitor_check_rr.patch", " Applied upstream: https://github.com/systemd/systemd/commit/ce35956b3a", " - resolve-include-current-DNS-server-in-JSON-again.patch", " Applied upstream: https://github.com/systemd/systemd/commit/0de941f937", " - lp2133402-ukify-omit-.osrel-section-when-os-release-is-empty.patch", " Applied upstream: https://github.com/systemd/systemd/commit/798a27a5b4", " * Dropped changes, no longer needed:", " - d/t/upstream: use GNU cp in test setup (LP #2122363)", " Fixed in rust-coreutils 0.5.0", " - lp2136752-test-workaround-uutils-dd-broken-pipe.patch", " Fixed in rust-coreutils 0.6.0", " * New changes:", " - d/libsystemd-shared.preinst: refuse to upgrade without unified cgroupv2 hierarchy", "" ], "package": "systemd", "version": "259.1-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Tue, 10 Feb 2026 14:05:53 -0500" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * Drop dependencies on libcap-dev, no longer used since v259", " * Mark sd-userdbd as Multi-Arch: foreign (Closes: #1123615)", " * Use dh_installsystemd more to manage units. Ensure more units are", " handled as they are added to various packages", " * Use dh_installsystemd to handle journald and networkd", " * Use deb-systemd-invoke to reexec instead of manual calls. Allows the", " tool to handle the complications and use varlink where available", " * Increase number of sections of sd-stub on amd64 too. The default limit", " breaks adding more than 28 sections, which can happen with a UKI with", " many optional profiles. Bump it on amd64 too, at the cost of an extra", " ~80KB in size on the stub.", " * Update upstream source from tag 'upstream/259.1' Update to upstream", " version '259.1' with Debian dir", " f7a9425f1024ef75b5020a216f6be3d0af9ac227", " * Restrict the tpm2-generator manpage to arches where it is built", " * Install ask-password polkit policy file", "", " [ Yu Watanabe ]", " * Drop use of deprecated options. These options are deprecated since", " v258.", "", " [ Nick Rosbrook ]", " * d/control: have systemd-boot depend on efibootmgr for amd64 and arm64", " only", " * d/tests: drop tests-in-lxd", " * d/control: make systemd-container Depends: libarchive13t64. This is", " needed for e.g. systemd-import-generator + rd.systemd.pull= to work", " properly. Dracut would like to be able to use that feature reliably", " when systemd-importd is available, so explicitly depend on libarchive.", " Currently, it is only a Suggests of libsystemd-shared via dlopen", " machinery. (LP: #2139822)", "" ], "package": "systemd", "version": "259.1-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2139822 ], "author": "Luca Boccassi ", "date": "Fri, 06 Feb 2026 18:37:22 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "tcpdump", "from_version": { "source_package_name": "tcpdump", "source_package_version": "4.99.5-2ubuntu3", "version": "4.99.5-2ubuntu3" }, "to_version": { "source_package_name": "tcpdump", "source_package_version": "4.99.6-1", "version": "4.99.6-1" }, "cves": [ { "cve": "CVE-2024-3094", "url": "https://ubuntu.com/security/CVE-2024-3094", "cve_description": "Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code. This results in a modified liblzma library that can be used by any software linked against this library, intercepting and modifying the data interaction with this library.", "cve_priority": "critical", "cve_public_date": "2024-03-29 17:15:00 UTC" } ], "launchpad_bugs_fixed": [ 2132257, 2115467, 2024017, 1667016 ], "changes": [ { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "tcpdump", "version": "4.99.5-2ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:47:05 +0100" }, { "cves": [], "log": [ "", " * Rebuild to include updated RISC-V base ISA RVA23", "" ], "package": "tcpdump", "version": "4.99.5-2ubuntu2", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Heinrich Schuchardt ", "date": "Sat, 06 Sep 2025 15:35:37 +0000" }, { "cves": [], "log": [ "", " * Merge with Debian unstable (LP: #2115467). Remaining changes:", " - debian/usr.sbin.tcpdump: allow tcpdump printing to stdout/stderr", " when running from a container (LP #1667016)", "" ], "package": "tcpdump", "version": "4.99.5-2ubuntu1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 2115467 ], "author": "Wesley Hershberger ", "date": "Thu, 26 Jun 2025 21:16:30 -0500" }, { "cves": [], "log": [ "", " * No change rebuild against libssl3t64.", "" ], "package": "tcpdump", "version": "4.99.4-3ubuntu4", "urgency": "high", "distributions": "noble", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Mon, 08 Apr 2024 16:50:51 +0200" }, { "cves": [ { "cve": "CVE-2024-3094", "url": "https://ubuntu.com/security/CVE-2024-3094", "cve_description": "Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code. This results in a modified liblzma library that can be used by any software linked against this library, intercepting and modifying the data interaction with this library.", "cve_priority": "critical", "cve_public_date": "2024-03-29 17:15:00 UTC" } ], "log": [ "", " * No-change rebuild for CVE-2024-3094", "" ], "package": "tcpdump", "version": "4.99.4-3ubuntu3", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [], "author": "Steve Langasek ", "date": "Sun, 31 Mar 2024 17:18:58 +0000" }, { "cves": [], "log": [ "", " * No-change rebuild against libssl3t64", "" ], "package": "tcpdump", "version": "4.99.4-3ubuntu2", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [], "author": "Steve Langasek ", "date": "Tue, 05 Mar 2024 01:24:11 +0000" }, { "cves": [], "log": [ "", " * Merge with Debian unstable. Remaining changes:", " - debian/usr.sbin.tcpdump: allow tcpdump printing to stdout/stderr", " when running from a container (LP #1667016)", " * Dropped:", " - d/usr.sbin.tcpdump: Allow pcapng files (LP #2024017)", " [In 4.99.4-3]", "" ], "package": "tcpdump", "version": "4.99.4-3ubuntu1", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [], "author": "Andreas Hasenack ", "date": "Tue, 01 Aug 2023 11:49:37 -0300" }, { "cves": [], "log": [ "", " [ Chris Kuethe ]", " * d/usr.sbin.tcpdump: Allow pcapng files (LP: #2024017)", "" ], "package": "tcpdump", "version": "4.99.3-1ubuntu2", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2024017 ], "author": "Andreas Hasenack ", "date": "Fri, 14 Jul 2023 18:07:50 -0300" }, { "cves": [], "log": [ "", " * debian/usr.sbin.tcpdump: allow tcpdump printing to stdout/stderr when", " running from a container (LP: #1667016)", "" ], "package": "tcpdump", "version": "4.99.3-1ubuntu1", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 1667016 ], "author": "Georgia Garcia ", "date": "Fri, 10 Feb 2023 15:17:18 -0300" } ], "notes": null, "is_version_downgrade": true }, { "name": "trace-cmd", "from_version": { "source_package_name": "trace-cmd", "source_package_version": "3.3.3-1ubuntu1", "version": "3.3.3-1ubuntu1" }, "to_version": { "source_package_name": "trace-cmd", "source_package_version": "3.3.3-1ubuntu2", "version": "3.3.3-1ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild with Python 3.14 as default", "" ], "package": "trace-cmd", "version": "3.3.3-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Graham Inggs ", "date": "Thu, 22 Jan 2026 22:04:08 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "tzdata", "from_version": { "source_package_name": "tzdata", "source_package_version": "2025c-3ubuntu3", "version": "2025c-3ubuntu3" }, "to_version": { "source_package_name": "tzdata", "source_package_version": "2026a-1ubuntu1", "version": "2026a-1ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2143355 ], "changes": [ { "cves": [], "log": [ "", " * Merge with Debian unstable (LP: #2143355). Remaining changes:", " - Ship 2025b ICU timezone data which are utilized by PHP in tzdata-icu", " - Add autopkgtest test case for ICU timezone data", " - Point Vcs-Browser/Git to Launchpad", " - Declare breaking rust-coreutils before version 0.5.0", " * Update the ICU timezone data to 2026a", " * Add autopkgtest test case for ICU timezone data 2026a", "" ], "package": "tzdata", "version": "2026a-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143355 ], "author": "Benjamin Drung ", "date": "Thu, 05 Mar 2026 20:28:03 +0100" }, { "cves": [], "log": [ "", " * New upstream version 2026a:", " - No leap second on 2026-06-30", " - Moldova has used EU transition times since 2022", " * Add autopkgtest test case for 2026a release", " * Bump Standards-Version to 4.7.3 (no changes)", "" ], "package": "tzdata", "version": "2026a-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Tue, 03 Mar 2026 20:45:42 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "ubuntu-kernel-accessories", "from_version": { "source_package_name": "ubuntu-meta", "source_package_version": "1.565", "version": "1.565" }, "to_version": { "source_package_name": "ubuntu-meta", "source_package_version": "1.570", "version": "1.570" }, "cves": [], "launchpad_bugs_fixed": [ 2138618, 2132357, 2137712, 2143727, 2115912 ], "changes": [ { "cves": [], "log": [ "", " * Refreshed dependencies", " * Switched from flash-kernel, flash-kernel-piboot to piboot-try in", " desktop-raspi [arm64 armhf], server-raspi [arm64 armhf] (LP: #2138618)", " * Removed wsl-pro-service from wsl-recommends for architectures not", " supported by Windows / WSL [armhf ppc64el riscv64 s390x] (LP: #2132357)", "" ], "package": "ubuntu-meta", "version": "1.570", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2138618, 2132357 ], "author": "Dave Jones ", "date": "Tue, 24 Mar 2026 11:15:35 +0000" }, { "cves": [], "log": [ "", " * Refreshed dependencies", " * Added gst-audio-thumbnailer to desktop-recommends", " * Added gst-video-thumbnailer to desktop-recommends", " * Removed totem-video-thumbnailer from desktop-recommends", " (LP: #2137712, LP: #2143727)", "" ], "package": "ubuntu-meta", "version": "1.569", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2137712, 2143727 ], "author": "Jeremy Bícha ", "date": "Thu, 12 Mar 2026 09:55:16 -0400" }, { "cves": [], "log": [ "", " * Refreshed dependencies", " * Added showtime to desktop-recommends (LP: #2115912)", " * Added totem-video-thumbnailer to desktop-recommends", " * Removed totem from desktop-recommends", " * Add amd64v3 to architecture list", "" ], "package": "ubuntu-meta", "version": "1.568", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2115912 ], "author": "Jeremy Bícha ", "date": "Tue, 10 Mar 2026 14:11:16 -0400" }, { "cves": [], "log": [ "", " * Refreshed dependencies", " * Added cloud-initramfs-dyn-netconf to server, server-raspi", " * Removed dracut | cloud-initramfs-dyn-netconf from server, server-", " raspi", " * Removed dracut-network | cloud-initramfs-dyn-netconf from server,", " server-raspi", " * Convert debian/copyright to machine-readable format", "" ], "package": "ubuntu-meta", "version": "1.567", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Mon, 02 Mar 2026 12:06:49 +0100" }, { "cves": [], "log": [ "", " * update: also check for git being present", " * Refreshed dependencies", " * Added dracut | cloud-initramfs-dyn-netconf to server, server-raspi", " * Added dracut-network | cloud-initramfs-dyn-netconf to server,", " server-raspi", " * Removed cloud-initramfs-dyn-netconf from server, server-raspi", " * Remove redundant Priority: optional and Rules-Requires-Root: no", " * Bump Standards-Version to 4.7.3", "" ], "package": "ubuntu-meta", "version": "1.566", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Wed, 25 Feb 2026 11:47:20 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "ubuntu-minimal", "from_version": { "source_package_name": "ubuntu-meta", "source_package_version": "1.565", "version": "1.565" }, "to_version": { "source_package_name": "ubuntu-meta", "source_package_version": "1.570", "version": "1.570" }, "cves": [], "launchpad_bugs_fixed": [ 2138618, 2132357, 2137712, 2143727, 2115912 ], "changes": [ { "cves": [], "log": [ "", " * Refreshed dependencies", " * Switched from flash-kernel, flash-kernel-piboot to piboot-try in", " desktop-raspi [arm64 armhf], server-raspi [arm64 armhf] (LP: #2138618)", " * Removed wsl-pro-service from wsl-recommends for architectures not", " supported by Windows / WSL [armhf ppc64el riscv64 s390x] (LP: #2132357)", "" ], "package": "ubuntu-meta", "version": "1.570", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2138618, 2132357 ], "author": "Dave Jones ", "date": "Tue, 24 Mar 2026 11:15:35 +0000" }, { "cves": [], "log": [ "", " * Refreshed dependencies", " * Added gst-audio-thumbnailer to desktop-recommends", " * Added gst-video-thumbnailer to desktop-recommends", " * Removed totem-video-thumbnailer from desktop-recommends", " (LP: #2137712, LP: #2143727)", "" ], "package": "ubuntu-meta", "version": "1.569", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2137712, 2143727 ], "author": "Jeremy Bícha ", "date": "Thu, 12 Mar 2026 09:55:16 -0400" }, { "cves": [], "log": [ "", " * Refreshed dependencies", " * Added showtime to desktop-recommends (LP: #2115912)", " * Added totem-video-thumbnailer to desktop-recommends", " * Removed totem from desktop-recommends", " * Add amd64v3 to architecture list", "" ], "package": "ubuntu-meta", "version": "1.568", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2115912 ], "author": "Jeremy Bícha ", "date": "Tue, 10 Mar 2026 14:11:16 -0400" }, { "cves": [], "log": [ "", " * Refreshed dependencies", " * Added cloud-initramfs-dyn-netconf to server, server-raspi", " * Removed dracut | cloud-initramfs-dyn-netconf from server, server-", " raspi", " * Removed dracut-network | cloud-initramfs-dyn-netconf from server,", " server-raspi", " * Convert debian/copyright to machine-readable format", "" ], "package": "ubuntu-meta", "version": "1.567", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Mon, 02 Mar 2026 12:06:49 +0100" }, { "cves": [], "log": [ "", " * update: also check for git being present", " * Refreshed dependencies", " * Added dracut | cloud-initramfs-dyn-netconf to server, server-raspi", " * Added dracut-network | cloud-initramfs-dyn-netconf to server,", " server-raspi", " * Removed cloud-initramfs-dyn-netconf from server, server-raspi", " * Remove redundant Priority: optional and Rules-Requires-Root: no", " * Bump Standards-Version to 4.7.3", "" ], "package": "ubuntu-meta", "version": "1.566", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Wed, 25 Feb 2026 11:47:20 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "ubuntu-pro-client", "from_version": { "source_package_name": "ubuntu-advantage-tools", "source_package_version": "37.1ubuntu0", "version": "37.1ubuntu0" }, "to_version": { "source_package_name": "ubuntu-advantage-tools", "source_package_version": "37.2ubuntu", "version": "37.2ubuntu" }, "cves": [], "launchpad_bugs_fixed": [ 2131292 ], "changes": [ { "cves": [], "log": [ "", " * d/apparmor/ubuntu_pro_esm_cache.jinja2: fix \"DENIED\" messages when", " devicetree exists (LP: #2131292)", "" ], "package": "ubuntu-advantage-tools", "version": "37.2ubuntu", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2131292 ], "author": "Renan Rodrigo ", "date": "Wed, 11 Mar 2026 10:27:02 -0300" } ], "notes": null, "is_version_downgrade": false }, { "name": "ubuntu-pro-client-l10n", "from_version": { "source_package_name": "ubuntu-advantage-tools", "source_package_version": "37.1ubuntu0", "version": "37.1ubuntu0" }, "to_version": { "source_package_name": "ubuntu-advantage-tools", "source_package_version": "37.2ubuntu", "version": "37.2ubuntu" }, "cves": [], "launchpad_bugs_fixed": [ 2131292 ], "changes": [ { "cves": [], "log": [ "", " * d/apparmor/ubuntu_pro_esm_cache.jinja2: fix \"DENIED\" messages when", " devicetree exists (LP: #2131292)", "" ], "package": "ubuntu-advantage-tools", "version": "37.2ubuntu", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2131292 ], "author": "Renan Rodrigo ", "date": "Wed, 11 Mar 2026 10:27:02 -0300" } ], "notes": null, "is_version_downgrade": false }, { "name": "ubuntu-release-upgrader-core", "from_version": { "source_package_name": "ubuntu-release-upgrader", "source_package_version": "1:26.04.8", "version": "1:26.04.8" }, "to_version": { "source_package_name": "ubuntu-release-upgrader", "source_package_version": "1:26.04.10", "version": "1:26.04.10" }, "cves": [], "launchpad_bugs_fixed": [ 2144667, 2141637 ], "changes": [ { "cves": [], "log": [ "", " * DistUpgradeQuirks: Don't fail on Pi pre model 4 (LP: #2144667)", "" ], "package": "ubuntu-release-upgrader", "version": "1:26.04.10", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144667 ], "author": "Dave Jones ", "date": "Tue, 24 Mar 2026 21:53:39 +0000" }, { "cves": [], "log": [ "", " * No change rebuild against `update-manager` (LP: #2141637)", "" ], "package": "ubuntu-release-upgrader", "version": "1:26.04.9", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2141637 ], "author": "Florent 'Skia' Jacquet ", "date": "Wed, 25 Feb 2026 12:30:25 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "ubuntu-server", "from_version": { "source_package_name": "ubuntu-meta", "source_package_version": "1.565", "version": "1.565" }, "to_version": { "source_package_name": "ubuntu-meta", "source_package_version": "1.570", "version": "1.570" }, "cves": [], "launchpad_bugs_fixed": [ 2138618, 2132357, 2137712, 2143727, 2115912 ], "changes": [ { "cves": [], "log": [ "", " * Refreshed dependencies", " * Switched from flash-kernel, flash-kernel-piboot to piboot-try in", " desktop-raspi [arm64 armhf], server-raspi [arm64 armhf] (LP: #2138618)", " * Removed wsl-pro-service from wsl-recommends for architectures not", " supported by Windows / WSL [armhf ppc64el riscv64 s390x] (LP: #2132357)", "" ], "package": "ubuntu-meta", "version": "1.570", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2138618, 2132357 ], "author": "Dave Jones ", "date": "Tue, 24 Mar 2026 11:15:35 +0000" }, { "cves": [], "log": [ "", " * Refreshed dependencies", " * Added gst-audio-thumbnailer to desktop-recommends", " * Added gst-video-thumbnailer to desktop-recommends", " * Removed totem-video-thumbnailer from desktop-recommends", " (LP: #2137712, LP: #2143727)", "" ], "package": "ubuntu-meta", "version": "1.569", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2137712, 2143727 ], "author": "Jeremy Bícha ", "date": "Thu, 12 Mar 2026 09:55:16 -0400" }, { "cves": [], "log": [ "", " * Refreshed dependencies", " * Added showtime to desktop-recommends (LP: #2115912)", " * Added totem-video-thumbnailer to desktop-recommends", " * Removed totem from desktop-recommends", " * Add amd64v3 to architecture list", "" ], "package": "ubuntu-meta", "version": "1.568", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2115912 ], "author": "Jeremy Bícha ", "date": "Tue, 10 Mar 2026 14:11:16 -0400" }, { "cves": [], "log": [ "", " * Refreshed dependencies", " * Added cloud-initramfs-dyn-netconf to server, server-raspi", " * Removed dracut | cloud-initramfs-dyn-netconf from server, server-", " raspi", " * Removed dracut-network | cloud-initramfs-dyn-netconf from server,", " server-raspi", " * Convert debian/copyright to machine-readable format", "" ], "package": "ubuntu-meta", "version": "1.567", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Mon, 02 Mar 2026 12:06:49 +0100" }, { "cves": [], "log": [ "", " * update: also check for git being present", " * Refreshed dependencies", " * Added dracut | cloud-initramfs-dyn-netconf to server, server-raspi", " * Added dracut-network | cloud-initramfs-dyn-netconf to server,", " server-raspi", " * Removed cloud-initramfs-dyn-netconf from server, server-raspi", " * Remove redundant Priority: optional and Rules-Requires-Root: no", " * Bump Standards-Version to 4.7.3", "" ], "package": "ubuntu-meta", "version": "1.566", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Wed, 25 Feb 2026 11:47:20 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "ubuntu-standard", "from_version": { "source_package_name": "ubuntu-meta", "source_package_version": "1.565", "version": "1.565" }, "to_version": { "source_package_name": "ubuntu-meta", "source_package_version": "1.570", "version": "1.570" }, "cves": [], "launchpad_bugs_fixed": [ 2138618, 2132357, 2137712, 2143727, 2115912 ], "changes": [ { "cves": [], "log": [ "", " * Refreshed dependencies", " * Switched from flash-kernel, flash-kernel-piboot to piboot-try in", " desktop-raspi [arm64 armhf], server-raspi [arm64 armhf] (LP: #2138618)", " * Removed wsl-pro-service from wsl-recommends for architectures not", " supported by Windows / WSL [armhf ppc64el riscv64 s390x] (LP: #2132357)", "" ], "package": "ubuntu-meta", "version": "1.570", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2138618, 2132357 ], "author": "Dave Jones ", "date": "Tue, 24 Mar 2026 11:15:35 +0000" }, { "cves": [], "log": [ "", " * Refreshed dependencies", " * Added gst-audio-thumbnailer to desktop-recommends", " * Added gst-video-thumbnailer to desktop-recommends", " * Removed totem-video-thumbnailer from desktop-recommends", " (LP: #2137712, LP: #2143727)", "" ], "package": "ubuntu-meta", "version": "1.569", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2137712, 2143727 ], "author": "Jeremy Bícha ", "date": "Thu, 12 Mar 2026 09:55:16 -0400" }, { "cves": [], "log": [ "", " * Refreshed dependencies", " * Added showtime to desktop-recommends (LP: #2115912)", " * Added totem-video-thumbnailer to desktop-recommends", " * Removed totem from desktop-recommends", " * Add amd64v3 to architecture list", "" ], "package": "ubuntu-meta", "version": "1.568", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2115912 ], "author": "Jeremy Bícha ", "date": "Tue, 10 Mar 2026 14:11:16 -0400" }, { "cves": [], "log": [ "", " * Refreshed dependencies", " * Added cloud-initramfs-dyn-netconf to server, server-raspi", " * Removed dracut | cloud-initramfs-dyn-netconf from server, server-", " raspi", " * Removed dracut-network | cloud-initramfs-dyn-netconf from server,", " server-raspi", " * Convert debian/copyright to machine-readable format", "" ], "package": "ubuntu-meta", "version": "1.567", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Mon, 02 Mar 2026 12:06:49 +0100" }, { "cves": [], "log": [ "", " * update: also check for git being present", " * Refreshed dependencies", " * Added dracut | cloud-initramfs-dyn-netconf to server, server-raspi", " * Added dracut-network | cloud-initramfs-dyn-netconf to server,", " server-raspi", " * Removed cloud-initramfs-dyn-netconf from server, server-raspi", " * Remove redundant Priority: optional and Rules-Requires-Root: no", " * Bump Standards-Version to 4.7.3", "" ], "package": "ubuntu-meta", "version": "1.566", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Wed, 25 Feb 2026 11:47:20 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "ucf", "from_version": { "source_package_name": "ucf", "source_package_version": "3.0052", "version": "3.0052" }, "to_version": { "source_package_name": "ucf", "source_package_version": "3.0052ubuntu1", "version": "3.0052ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2142754, 2132257 ], "changes": [ { "cves": [], "log": [ "", " * Makefile: quote version string during replacement (LP: #2142754)", "" ], "package": "ucf", "version": "3.0052ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142754 ], "author": "Nick Rosbrook ", "date": "Thu, 26 Feb 2026 09:35:10 -0500" }, { "cves": [], "log": [ "", " * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)", "" ], "package": "ucf", "version": "3.0052build1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2132257 ], "author": "Sebastien Bacher ", "date": "Mon, 02 Feb 2026 21:51:29 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "udev", "from_version": { "source_package_name": "systemd", "source_package_version": "259-1ubuntu3", "version": "259-1ubuntu3" }, "to_version": { "source_package_name": "systemd", "source_package_version": "259.5-0ubuntu1", "version": "259.5-0ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2144032, 2143010, 2142900, 2142428, 2077538, 2142306, 2139822 ], "changes": [ { "cves": [], "log": [ "", " [ Nick Rosbrook ]", " * New upstream stable version 259.5", " - Update upstream source from tag 'upstream/259.5'", " Update to upstream version '259.5'", " with Debian dir 1076161727931a7063674200c474ec7747a5177f", " - Bug fixes", "", " [ Oliver Reiche ]", " * Fix issue overwriting /tmp on dist-upgrade (LP: #2144032)", "" ], "package": "systemd", "version": "259.5-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144032 ], "author": "Nick Rosbrook ", "date": "Fri, 13 Mar 2026 12:27:31 -0400" }, { "cves": [], "log": [ "", " * New upstream stable version 259.3", " - Update upstream source from tag 'upstream/259.3'", " Update to upstream version '259.3'", " with Debian dir 4fea3198a053eb40e77ea3ad3c3be030151f3f46", " - Bug fixes", "" ], "package": "systemd", "version": "259.3-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Fri, 06 Mar 2026 09:05:25 -0500" }, { "cves": [], "log": [ "", " * Tag KFD and ACCEL devices for uaccess (LP: #2143010)", " * d/control: Add missing dh-dlopenlibdeps to b-d", "" ], "package": "systemd", "version": "259.2-0ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143010 ], "author": "Mario Limonciello ", "date": "Tue, 03 Mar 2026 12:06:36 -0600" }, { "cves": [], "log": [ "", " * New upstream stable version 259.2", " - Bug fixes", " - Update upstream source from tag 'upstream/259.2'", " Update to upstream version '259.2'", " with Debian dir c25e0517a7a4ebd6d9009de0cf949dd265182a67", " - Drop lp2142428-seccomp-util-add-lsm_get_self_attr-and-lsm_list_modules-t.patch.", " Applied upstream: https://github.com/systemd/systemd/commit/515816197e", " * test: use gnuenv to workaround broken --block-signal= (LP: #2142900)", "" ], "package": "systemd", "version": "259.2-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142900 ], "author": "Nick Rosbrook ", "date": "Fri, 27 Feb 2026 09:20:52 -0500" }, { "cves": [], "log": [ "", " [ Nick Rosbrook ]", " * seccomp-util: add lsm_get_self_attr and lsm_list_modules to @default", " (LP: #2142428)", "", " [ Alessandro Astone ]", " * d/p/lp2077538: Grant GPU rendering access to GNOME Remote Desktop", " (LP: #2077538, LP: #2142306)", "" ], "package": "systemd", "version": "259.1-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142428, 2077538, 2142306 ], "author": "Nick Rosbrook ", "date": "Wed, 25 Feb 2026 10:32:56 -0500" }, { "cves": [], "log": [ "", " * Merge with Debian unstable. Remaining changes:", " - debian/systemd.postinst:", " + manually call systemd-tmpfiles --create in postinst", " - debian/control:", " + Add Recommends: systemd-resolved to systemd package", " + Make systemd-cryptsetup Priority: important", " + Give systemd-resolved Priority: important", " + Add Recommends: systemd-hwe-hwdb to udev package", " + Drop Recommends: libnss-myhostname libnss-resolve from systemd-resolved", " + Do not build systemd-boot-efi-{amd64,arm64}-signed-template", " + d/control: demote systemd-userdbd to Suggests for libnss-systemd", " - d/rules: disable bpf support on riscv64 for now (LP #2099864)", " - d/extra/dbus-1: remove SetLocale restriction from dbus policy (LP #2102028)", " - Delta for i386:", " + debian/systemd.install: exclude files that are not built for i386", " + debian/systemd.manpages: do not ship un-built manpages on i386", " + debian/rules,debian/control,debian/tests/control:", " Do not build with tpm libraries on i386", " + debian/rules,debian/control,debian/tests/control:", " Do not build with libqrencode on i386", " + debian/rules: Remove unneeded efi artifacts on i386 to avoid debugedit errors", " - debian/libnss-systemd.*:", " + debian/libnss-systemd.nss: install after 'compat' too (LP #2125403)", " + debian/libnss-systemd.preinst: force nsswitch.conf update", " Drop systemd instances in nsswitch.conf, and force postinst to", " re-generate the file (LP #2121017)", " + debian/linbnss-systemd.nss: Install systemd service after files.", " As suggested by upstream the systemd NSS service should come just after", " files", " - debian/tests:", " + d/t/boot-and-services: use coreutils tunable in apparmor test (LP #2125614)", " + d/t/upstream: skip TEST-08-INITRD on Ubuntu (LP #2136419)", " - debian/patches:", " + switch-root: use MS_MOVE for /run when switchig from initrd", " + test: skip TEST-50-DISSECT.dissect (LP #2116460)", " + test: skip TEST-13-NSPAWN.{nspawn,machined} (LP #2136413)", " * Dropped changes, included upstream:", " - lp2136497-test-use-journalctl-n-option-instead-of-piping-to-head.patch", " Applied upstream: https://github.com/systemd/systemd/commit/2c661e5f0d", " - lp2136408-test-cope-with-uutils-coreutils-flag-parsing-for-date-com.patch", " Applied upstream: https://github.com/systemd/systemd/commit/a45dad1aa5", " - test-disable-pipefail-again-in-monitor_check_rr.patch", " Applied upstream: https://github.com/systemd/systemd/commit/ce35956b3a", " - resolve-include-current-DNS-server-in-JSON-again.patch", " Applied upstream: https://github.com/systemd/systemd/commit/0de941f937", " - lp2133402-ukify-omit-.osrel-section-when-os-release-is-empty.patch", " Applied upstream: https://github.com/systemd/systemd/commit/798a27a5b4", " * Dropped changes, no longer needed:", " - d/t/upstream: use GNU cp in test setup (LP #2122363)", " Fixed in rust-coreutils 0.5.0", " - lp2136752-test-workaround-uutils-dd-broken-pipe.patch", " Fixed in rust-coreutils 0.6.0", " * New changes:", " - d/libsystemd-shared.preinst: refuse to upgrade without unified cgroupv2 hierarchy", "" ], "package": "systemd", "version": "259.1-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Tue, 10 Feb 2026 14:05:53 -0500" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * Drop dependencies on libcap-dev, no longer used since v259", " * Mark sd-userdbd as Multi-Arch: foreign (Closes: #1123615)", " * Use dh_installsystemd more to manage units. Ensure more units are", " handled as they are added to various packages", " * Use dh_installsystemd to handle journald and networkd", " * Use deb-systemd-invoke to reexec instead of manual calls. Allows the", " tool to handle the complications and use varlink where available", " * Increase number of sections of sd-stub on amd64 too. The default limit", " breaks adding more than 28 sections, which can happen with a UKI with", " many optional profiles. Bump it on amd64 too, at the cost of an extra", " ~80KB in size on the stub.", " * Update upstream source from tag 'upstream/259.1' Update to upstream", " version '259.1' with Debian dir", " f7a9425f1024ef75b5020a216f6be3d0af9ac227", " * Restrict the tpm2-generator manpage to arches where it is built", " * Install ask-password polkit policy file", "", " [ Yu Watanabe ]", " * Drop use of deprecated options. These options are deprecated since", " v258.", "", " [ Nick Rosbrook ]", " * d/control: have systemd-boot depend on efibootmgr for amd64 and arm64", " only", " * d/tests: drop tests-in-lxd", " * d/control: make systemd-container Depends: libarchive13t64. This is", " needed for e.g. systemd-import-generator + rd.systemd.pull= to work", " properly. Dracut would like to be able to use that feature reliably", " when systemd-importd is available, so explicitly depend on libarchive.", " Currently, it is only a Suggests of libsystemd-shared via dlopen", " machinery. (LP: #2139822)", "" ], "package": "systemd", "version": "259.1-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2139822 ], "author": "Luca Boccassi ", "date": "Fri, 06 Feb 2026 18:37:22 +0000" } ], "notes": null, "is_version_downgrade": false }, { "name": "udisks2", "from_version": { "source_package_name": "udisks2", "source_package_version": "2.10.91-1ubuntu1", "version": "2.10.91-1ubuntu1" }, "to_version": { "source_package_name": "udisks2", "source_package_version": "2.10.91-1ubuntu2", "version": "2.10.91-1ubuntu2" }, "cves": [ { "cve": "CVE-2026-26103", "url": "https://ubuntu.com/security/CVE-2026-26103", "cve_description": "A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks. The issue allows a local unprivileged user to instruct the root-owned udisks daemon to overwrite encryption metadata on block devices. This can permanently invalidate encryption keys and render encrypted volumes inaccessible. Successful exploitation results in a denial-of-service condition through irreversible data loss.", "cve_priority": "medium", "cve_public_date": "2026-02-25 11:16:00 UTC" }, { "cve": "CVE-2026-26104", "url": "https://ubuntu.com/security/CVE-2026-26104", "cve_description": "A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization. The issue occurs because a privileged D-Bus method responsible for exporting encryption metadata does not perform a policy check. As a result, sensitive cryptographic metadata can be read and written to attacker-controlled locations. This weakens the confidentiality guarantees of encrypted storage volumes.", "cve_priority": "medium", "cve_public_date": "2026-02-25 11:16:00 UTC" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-26103", "url": "https://ubuntu.com/security/CVE-2026-26103", "cve_description": "A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks. The issue allows a local unprivileged user to instruct the root-owned udisks daemon to overwrite encryption metadata on block devices. This can permanently invalidate encryption keys and render encrypted volumes inaccessible. Successful exploitation results in a denial-of-service condition through irreversible data loss.", "cve_priority": "medium", "cve_public_date": "2026-02-25 11:16:00 UTC" }, { "cve": "CVE-2026-26104", "url": "https://ubuntu.com/security/CVE-2026-26104", "cve_description": "A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization. The issue occurs because a privileged D-Bus method responsible for exporting encryption metadata does not perform a policy check. As a result, sensitive cryptographic metadata can be read and written to attacker-controlled locations. This weakens the confidentiality guarantees of encrypted storage volumes.", "cve_priority": "medium", "cve_public_date": "2026-02-25 11:16:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: Missing polkit permission checks", " - debian/patches/CVE-2026-26103.patch: Add missing polkit check for", " RestoreEncryptedHeader().", " - debian/patches/CVE-2026-26104.patch: Add missing polkit check for", " HeaderBackup()", " - CVE-2026-26103", " - CVE-2026-26104", "" ], "package": "udisks2", "version": "2.10.91-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Thu, 26 Feb 2026 13:05:58 -0500" } ], "notes": null, "is_version_downgrade": false }, { "name": "unattended-upgrades", "from_version": { "source_package_name": "unattended-upgrades", "source_package_version": "2.12ubuntu5", "version": "2.12ubuntu5" }, "to_version": { "source_package_name": "unattended-upgrades", "source_package_version": "2.12ubuntu7", "version": "2.12ubuntu7" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * unattended-upgrade: cherry-pick upstream change to fix flake8 tests", "" ], "package": "unattended-upgrades", "version": "2.12ubuntu7", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Sebastien Bacher ", "date": "Tue, 10 Feb 2026 11:15:32 +0100" }, { "cves": [], "log": [ "", " * Fixup GLib thread context", "" ], "package": "unattended-upgrades", "version": "2.12ubuntu6", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Alessandro Astone ", "date": "Tue, 10 Feb 2026 10:36:56 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "update-manager-core", "from_version": { "source_package_name": "update-manager", "source_package_version": "1:26.04.2", "version": "1:26.04.2" }, "to_version": { "source_package_name": "update-manager", "source_package_version": "1:26.04.4", "version": "1:26.04.4" }, "cves": [], "launchpad_bugs_fixed": [ 2133012, 2141637, 2133012 ], "changes": [ { "cves": [], "log": [ "", " * Almost completely revert previous change that removed inhibitor of", " shutdown and sleep, but only inhibit sleep now, as a compromise between", " - LP: #2133012: \"Restart now\" has no effect in update-manager; and", " - LP: #2141637: Ubuntu-release-upgrader crashes without inhibit_sleep.", "" ], "package": "update-manager", "version": "1:26.04.4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2133012, 2141637 ], "author": "Nathan Pratta Teodosio ", "date": "Thu, 12 Feb 2026 18:53:14 +0100" }, { "cves": [], "log": [ "", " * Do not inhibit shutdown or sleep. Apt already inhibits shutdown.", " The argument of whether a sleep operation is to be inhibited during package", " installation belongs likewise to Apt. (lp: #2133012).", "" ], "package": "update-manager", "version": "1:26.04.3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2133012 ], "author": "Nathan Pratta Teodosio ", "date": "Tue, 10 Feb 2026 17:16:37 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "util-linux", "from_version": { "source_package_name": "util-linux", "source_package_version": "2.41.2-4ubuntu3", "version": "2.41.2-4ubuntu3" }, "to_version": { "source_package_name": "util-linux", "source_package_version": "2.41.3-3ubuntu2", "version": "2.41.3-3ubuntu2" }, "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" }, { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2142050 ], "changes": [ { "cves": [], "log": [ "", " * d/p/ubuntu/su-pty-drop-caps.patch: harden 'su --pty' to temporarily lower", " capabilities while proxying between stdin/stdout and the pty master. This", " is to avoid su from being used to exploit kernel vulnerabilities.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Fri, 13 Mar 2026 07:09:23 -0400" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Merge with Debian unstable (LP: #2142050). Remaining changes:", " - Add sulogin-fallback-static-sh.patch", " Add support for /bin/static-sh as fallback if the regular shell fails to", " execute. Patch ported from sysvinit. (see LP #505887)", " - Add sulogin-lockedpwd.patch", " Make sure file systems can be fixed on machines with locked root", " accounts (as Ubuntu does by default). Don't require --force for sulogin.", " - d/rules: disable libmount mountfs support", " Disable brand new feature with --disable-libmount-mountfd-support that", " causes inability to deploy MAAS LP #2037417.", " * Dropped changes applied upstream:", " - SECURITY UPDATE: heap overread with 256-byte usernames", " + debian/patches/CVE-2025-14104-1.patch: add length check in", " login-utils/setpwnam.c.", " + debian/patches/CVE-2025-14104-2.patch: update buflen in", " login-utils/setpwnam.c.", " + CVE-2025-14104", " * Dropped changes as they were no longer necessary:", " - d/p/ubuntu/lp-2030793-make-check-pidfd.patch", " This patch only effected kernel versions below 5.15 which are not", " available on resolute.", " - d/p/u/lp-2112552-tests-mark-mkfds-multiplexing-as-known-fail.patch", " The underlying bug was addressed in rust-coreutils.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142050 ], "author": "Ural Tunaboyu ", "date": "Sun, 15 Feb 2026 17:43:12 -0800" }, { "cves": [], "log": [ "", " * d/libsmartcols1.symbols: drop terminal crap", " * d/rules: make dpkg-gensymbols more strict", " * lintian: ignore groff-message tags", " * lintian: ignore groff-message tags in remaining packages", " * Add upstream patches", " * unshare: fix user namespace bind mounts", " * unshare: remove get_mnt_ino() check in bind_ns_files_from_child()", " * unshare: add --owner to set user namespace owner uid and gid", " * libfdisk: modernize ZFS GPT type description", "" ], "package": "util-linux", "version": "2.41.3-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 31 Dec 2025 13:06:28 +0100" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * util-linux: do not fail postinst/prerm if update-alternatives is missing", "" ], "package": "util-linux", "version": "2.41.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 17 Dec 2025 10:42:28 +0100" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Stop installing lastlog2-import.service", " * New upstream release, fixing CVE-2025-14104. (Closes: #1122058)", "" ], "package": "util-linux", "version": "2.41.3-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Tue, 16 Dec 2025 20:37:41 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "util-linux-extra", "from_version": { "source_package_name": "util-linux", "source_package_version": "2.41.2-4ubuntu3", "version": "2.41.2-4ubuntu3" }, "to_version": { "source_package_name": "util-linux", "source_package_version": "2.41.3-3ubuntu2", "version": "2.41.3-3ubuntu2" }, "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" }, { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2142050 ], "changes": [ { "cves": [], "log": [ "", " * d/p/ubuntu/su-pty-drop-caps.patch: harden 'su --pty' to temporarily lower", " capabilities while proxying between stdin/stdout and the pty master. This", " is to avoid su from being used to exploit kernel vulnerabilities.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Fri, 13 Mar 2026 07:09:23 -0400" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Merge with Debian unstable (LP: #2142050). Remaining changes:", " - Add sulogin-fallback-static-sh.patch", " Add support for /bin/static-sh as fallback if the regular shell fails to", " execute. Patch ported from sysvinit. (see LP #505887)", " - Add sulogin-lockedpwd.patch", " Make sure file systems can be fixed on machines with locked root", " accounts (as Ubuntu does by default). Don't require --force for sulogin.", " - d/rules: disable libmount mountfs support", " Disable brand new feature with --disable-libmount-mountfd-support that", " causes inability to deploy MAAS LP #2037417.", " * Dropped changes applied upstream:", " - SECURITY UPDATE: heap overread with 256-byte usernames", " + debian/patches/CVE-2025-14104-1.patch: add length check in", " login-utils/setpwnam.c.", " + debian/patches/CVE-2025-14104-2.patch: update buflen in", " login-utils/setpwnam.c.", " + CVE-2025-14104", " * Dropped changes as they were no longer necessary:", " - d/p/ubuntu/lp-2030793-make-check-pidfd.patch", " This patch only effected kernel versions below 5.15 which are not", " available on resolute.", " - d/p/u/lp-2112552-tests-mark-mkfds-multiplexing-as-known-fail.patch", " The underlying bug was addressed in rust-coreutils.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142050 ], "author": "Ural Tunaboyu ", "date": "Sun, 15 Feb 2026 17:43:12 -0800" }, { "cves": [], "log": [ "", " * d/libsmartcols1.symbols: drop terminal crap", " * d/rules: make dpkg-gensymbols more strict", " * lintian: ignore groff-message tags", " * lintian: ignore groff-message tags in remaining packages", " * Add upstream patches", " * unshare: fix user namespace bind mounts", " * unshare: remove get_mnt_ino() check in bind_ns_files_from_child()", " * unshare: add --owner to set user namespace owner uid and gid", " * libfdisk: modernize ZFS GPT type description", "" ], "package": "util-linux", "version": "2.41.3-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 31 Dec 2025 13:06:28 +0100" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * util-linux: do not fail postinst/prerm if update-alternatives is missing", "" ], "package": "util-linux", "version": "2.41.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 17 Dec 2025 10:42:28 +0100" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Stop installing lastlog2-import.service", " * New upstream release, fixing CVE-2025-14104. (Closes: #1122058)", "" ], "package": "util-linux", "version": "2.41.3-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Tue, 16 Dec 2025 20:37:41 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "uuid-runtime", "from_version": { "source_package_name": "util-linux", "source_package_version": "2.41.2-4ubuntu3", "version": "2.41.2-4ubuntu3" }, "to_version": { "source_package_name": "util-linux", "source_package_version": "2.41.3-3ubuntu2", "version": "2.41.3-3ubuntu2" }, "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" }, { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "launchpad_bugs_fixed": [ 2142050 ], "changes": [ { "cves": [], "log": [ "", " * d/p/ubuntu/su-pty-drop-caps.patch: harden 'su --pty' to temporarily lower", " capabilities while proxying between stdin/stdout and the pty master. This", " is to avoid su from being used to exploit kernel vulnerabilities.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Fri, 13 Mar 2026 07:09:23 -0400" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Merge with Debian unstable (LP: #2142050). Remaining changes:", " - Add sulogin-fallback-static-sh.patch", " Add support for /bin/static-sh as fallback if the regular shell fails to", " execute. Patch ported from sysvinit. (see LP #505887)", " - Add sulogin-lockedpwd.patch", " Make sure file systems can be fixed on machines with locked root", " accounts (as Ubuntu does by default). Don't require --force for sulogin.", " - d/rules: disable libmount mountfs support", " Disable brand new feature with --disable-libmount-mountfd-support that", " causes inability to deploy MAAS LP #2037417.", " * Dropped changes applied upstream:", " - SECURITY UPDATE: heap overread with 256-byte usernames", " + debian/patches/CVE-2025-14104-1.patch: add length check in", " login-utils/setpwnam.c.", " + debian/patches/CVE-2025-14104-2.patch: update buflen in", " login-utils/setpwnam.c.", " + CVE-2025-14104", " * Dropped changes as they were no longer necessary:", " - d/p/ubuntu/lp-2030793-make-check-pidfd.patch", " This patch only effected kernel versions below 5.15 which are not", " available on resolute.", " - d/p/u/lp-2112552-tests-mark-mkfds-multiplexing-as-known-fail.patch", " The underlying bug was addressed in rust-coreutils.", "" ], "package": "util-linux", "version": "2.41.3-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142050 ], "author": "Ural Tunaboyu ", "date": "Sun, 15 Feb 2026 17:43:12 -0800" }, { "cves": [], "log": [ "", " * d/libsmartcols1.symbols: drop terminal crap", " * d/rules: make dpkg-gensymbols more strict", " * lintian: ignore groff-message tags", " * lintian: ignore groff-message tags in remaining packages", " * Add upstream patches", " * unshare: fix user namespace bind mounts", " * unshare: remove get_mnt_ino() check in bind_ns_files_from_child()", " * unshare: add --owner to set user namespace owner uid and gid", " * libfdisk: modernize ZFS GPT type description", "" ], "package": "util-linux", "version": "2.41.3-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 31 Dec 2025 13:06:28 +0100" }, { "cves": [], "log": [ "", " [ Luca Boccassi ]", " * util-linux: do not fail postinst/prerm if update-alternatives is missing", "" ], "package": "util-linux", "version": "2.41.3-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Wed, 17 Dec 2025 10:42:28 +0100" }, { "cves": [ { "cve": "CVE-2025-14104", "url": "https://ubuntu.com/security/CVE-2025-14104", "cve_description": "A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifically within the `setpwnam()` function, affecting SUID (Set User ID) login-utils utilities writing to the password database.", "cve_priority": "medium", "cve_public_date": "2025-12-05 17:16:00 UTC" } ], "log": [ "", " * Stop installing lastlog2-import.service", " * New upstream release, fixing CVE-2025-14104. (Closes: #1122058)", "" ], "package": "util-linux", "version": "2.41.3-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Chris Hofstaedtler ", "date": "Tue, 16 Dec 2025 20:37:41 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "vim", "from_version": { "source_package_name": "vim", "source_package_version": "2:9.1.1882-1ubuntu2", "version": "2:9.1.1882-1ubuntu2" }, "to_version": { "source_package_name": "vim", "source_package_version": "2:9.1.2141-1ubuntu2", "version": "2:9.1.2141-1ubuntu2" }, "cves": [ { "cve": "CVE-2026-26269", "url": "https://ubuntu.com/security/CVE-2026-26269", "cve_description": "Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing the specialKeys command, affecting Vim builds that enable and use the NetBeans feature. The Stack buffer overflow exists in special_keys() (in src/netbeans.c). The while (*tok) loop writes two bytes per iteration into a 64-byte stack buffer (keybuf) with no bounds check. A malicious NetBeans server can overflow keybuf with a single specialKeys command. The issue has been fixed as of Vim patch v9.1.2148.", "cve_priority": "low", "cve_public_date": "2026-02-13 20:17:00 UTC" }, { "cve": "CVE-2026-28420", "url": "https://ubuntu.com/security/CVE-2026-28420", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28422", "url": "https://ubuntu.com/security/CVE-2026-28422", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28417", "url": "https://ubuntu.com/security/CVE-2026-28417", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28418", "url": "https://ubuntu.com/security/CVE-2026-28418", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file, Vim can be tricked into reading up to 7 bytes beyond the allocated memory boundary. Version 9.2.0074 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28419", "url": "https://ubuntu.com/security/CVE-2026-28419", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0075, a heap-based buffer underflow exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file where a delimiter appears at the start of a line, Vim attempts to read memory immediately preceding the allocated buffer. Version 9.2.0075 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28421", "url": "https://ubuntu.com/security/CVE-2026-28421", "cve_description": "Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-25749", "url": "https://ubuntu.com/security/CVE-2026-25749", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132.", "cve_priority": "low", "cve_public_date": "2026-02-06 23:15:00 UTC" } ], "launchpad_bugs_fixed": [ 2142221, 2142681 ], "changes": [ { "cves": [ { "cve": "CVE-2026-26269", "url": "https://ubuntu.com/security/CVE-2026-26269", "cve_description": "Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing the specialKeys command, affecting Vim builds that enable and use the NetBeans feature. The Stack buffer overflow exists in special_keys() (in src/netbeans.c). The while (*tok) loop writes two bytes per iteration into a 64-byte stack buffer (keybuf) with no bounds check. A malicious NetBeans server can overflow keybuf with a single specialKeys command. The issue has been fixed as of Vim patch v9.1.2148.", "cve_priority": "low", "cve_public_date": "2026-02-13 20:17:00 UTC" }, { "cve": "CVE-2026-28420", "url": "https://ubuntu.com/security/CVE-2026-28420", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28422", "url": "https://ubuntu.com/security/CVE-2026-28422", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28417", "url": "https://ubuntu.com/security/CVE-2026-28417", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28418", "url": "https://ubuntu.com/security/CVE-2026-28418", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file, Vim can be tricked into reading up to 7 bytes beyond the allocated memory boundary. Version 9.2.0074 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28419", "url": "https://ubuntu.com/security/CVE-2026-28419", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0075, a heap-based buffer underflow exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file where a delimiter appears at the start of a line, Vim attempts to read memory immediately preceding the allocated buffer. Version 9.2.0075 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28421", "url": "https://ubuntu.com/security/CVE-2026-28421", "cve_description": "Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: Buffer Overflow", " - debian/patches/CVE-2026-26269.patch: Limit writing to max KEYBUFLEN", " bytes to prevent writing out of bounds.", " - debian/patches/CVE-2026-28420.patch: Use VTERM_MAX_CHARS_PER_CELL * 4", " for ga_grow() to ensure sufficient space. Add a boundary check to the", " character loop to prevent index out-of-bounds access.", " - debian/patches/CVE-2026-28422.patch: Update the size check to account", " for the byte length of the fill character (using MB_CHAR2LEN).", " - CVE-2026-26269", " - CVE-2026-28420", " - CVE-2026-28422", " * SECURITY UPDATE: Command Injection", " - debian/patches/CVE-2026-28417.patch: Implement stricter RFC1123", " hostname and IP validation. Use shellescape() for the provided", " hostname and port.", " - debian/patches/fix-test_plugin_netrw-tests.patch: Add missing", " function TestNetrwCaptureRemotePath", " - CVE-2026-28417", " * SECURITY UPDATE: Out of Bounds Read", " - debian/patches/CVE-2026-28418.patch: Check for end of buffer", " and return early.", " - CVE-2026-28418", " * SECURITY UPDATE: Buffer Underflow", " - debian/patches/CVE-2026-28419.patch: Add a check to ensure the", " delimiter (p_7f) is not at the start of the buffer (lbuf) before", " attempting to isolate the tag name.", " - CVE-2026-28419", " * SECURITY UPDATE: Denial of Service", " - debian/patches/CVE-2026-28421.patch: Add bounds checks on", " pe_page_count and pe_bnum against mf_blocknr_max before descending", " into the block tree, and validate pe_old_lnum >= 1 and", " pe_line_count > 0 before calling readfile().", " - CVE-2026-28421", "" ], "package": "vim", "version": "2:9.1.2141-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Bruce Cable ", "date": "Tue, 10 Mar 2026 19:44:16 +1100" }, { "cves": [], "log": [ "", " * Merge with Debian unstable (LP: #2142221). Remaining changes:", " - d/p/0001-fix-flaky-terminal-mode-test.vim:", " Fix flaky Vim terminal mode test", " - d/p/0002-disable-failing-tests-on-ppc64.patch:", " Disable some tests that were failing during build on", " ppc64el. The tests are only disabled when building on ppc64el.", " - d/p/0003-skip-test-failing-on-s390x-only.patch:", " Skip tests failing on s390x", " - d/p/increase_timeout.diff: Increase timeout", " for the Test_pattern_compile_speed patch.", " - d/p/debian/ubuntu-grub-syntax.patch:", " Add Ubuntu-specific \"quiet\" keyword.", " - d/runtime/vimrc: \"syntax on\" is a sane default for non-tiny Vim.", " * New changes:", " - d/p/disable-test-term-gettty.patch: disable a test", " which was failing due to changes outside of vim (LP: #2142681)", "" ], "package": "vim", "version": "2:9.1.2141-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142221, 2142681 ], "author": "Ural Tunaboyu ", "date": "Wed, 25 Feb 2026 07:34:15 -0800" }, { "cves": [ { "cve": "CVE-2026-25749", "url": "https://ubuntu.com/security/CVE-2026-25749", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132.", "cve_priority": "low", "cve_public_date": "2026-02-06 23:15:00 UTC" } ], "log": [ "", " * Merge upstream tag v9.1.2141", " + Security fixes", " - 9.1.2132: Fix buffer-overflow in 'helpfile' option handling,", " CVE-2026-25749", "" ], "package": "vim", "version": "2:9.1.2141-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "James McCoy ", "date": "Mon, 09 Feb 2026 07:06:42 -0500" }, { "cves": [], "log": [ "", " * Merge upstream patch v9.1.2103", " + syntax/debcontrol.vim:", " - Only highlight email addresses in Maintainer / Uploaders fields", " - Add support for highlighting build profiles and architecture", " restrictions (Closes: #1124089)", " * Disable flaky Test_client_server_stopinsert test", " * Remove Rules-Requires-Root, since no is the default value", " * Remove Priority field, since optional is the default value", " * Declare compliance with Policy 4.7.3", "" ], "package": "vim", "version": "2:9.1.2103-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "James McCoy ", "date": "Fri, 23 Jan 2026 06:27:15 -0500" } ], "notes": null, "is_version_downgrade": false }, { "name": "vim-common", "from_version": { "source_package_name": "vim", "source_package_version": "2:9.1.1882-1ubuntu2", "version": "2:9.1.1882-1ubuntu2" }, "to_version": { "source_package_name": "vim", "source_package_version": "2:9.1.2141-1ubuntu2", "version": "2:9.1.2141-1ubuntu2" }, "cves": [ { "cve": "CVE-2026-26269", "url": "https://ubuntu.com/security/CVE-2026-26269", "cve_description": "Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing the specialKeys command, affecting Vim builds that enable and use the NetBeans feature. The Stack buffer overflow exists in special_keys() (in src/netbeans.c). The while (*tok) loop writes two bytes per iteration into a 64-byte stack buffer (keybuf) with no bounds check. A malicious NetBeans server can overflow keybuf with a single specialKeys command. The issue has been fixed as of Vim patch v9.1.2148.", "cve_priority": "low", "cve_public_date": "2026-02-13 20:17:00 UTC" }, { "cve": "CVE-2026-28420", "url": "https://ubuntu.com/security/CVE-2026-28420", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28422", "url": "https://ubuntu.com/security/CVE-2026-28422", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28417", "url": "https://ubuntu.com/security/CVE-2026-28417", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28418", "url": "https://ubuntu.com/security/CVE-2026-28418", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file, Vim can be tricked into reading up to 7 bytes beyond the allocated memory boundary. Version 9.2.0074 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28419", "url": "https://ubuntu.com/security/CVE-2026-28419", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0075, a heap-based buffer underflow exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file where a delimiter appears at the start of a line, Vim attempts to read memory immediately preceding the allocated buffer. Version 9.2.0075 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28421", "url": "https://ubuntu.com/security/CVE-2026-28421", "cve_description": "Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-25749", "url": "https://ubuntu.com/security/CVE-2026-25749", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132.", "cve_priority": "low", "cve_public_date": "2026-02-06 23:15:00 UTC" } ], "launchpad_bugs_fixed": [ 2142221, 2142681 ], "changes": [ { "cves": [ { "cve": "CVE-2026-26269", "url": "https://ubuntu.com/security/CVE-2026-26269", "cve_description": "Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing the specialKeys command, affecting Vim builds that enable and use the NetBeans feature. The Stack buffer overflow exists in special_keys() (in src/netbeans.c). The while (*tok) loop writes two bytes per iteration into a 64-byte stack buffer (keybuf) with no bounds check. A malicious NetBeans server can overflow keybuf with a single specialKeys command. The issue has been fixed as of Vim patch v9.1.2148.", "cve_priority": "low", "cve_public_date": "2026-02-13 20:17:00 UTC" }, { "cve": "CVE-2026-28420", "url": "https://ubuntu.com/security/CVE-2026-28420", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28422", "url": "https://ubuntu.com/security/CVE-2026-28422", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28417", "url": "https://ubuntu.com/security/CVE-2026-28417", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28418", "url": "https://ubuntu.com/security/CVE-2026-28418", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file, Vim can be tricked into reading up to 7 bytes beyond the allocated memory boundary. Version 9.2.0074 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28419", "url": "https://ubuntu.com/security/CVE-2026-28419", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0075, a heap-based buffer underflow exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file where a delimiter appears at the start of a line, Vim attempts to read memory immediately preceding the allocated buffer. Version 9.2.0075 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28421", "url": "https://ubuntu.com/security/CVE-2026-28421", "cve_description": "Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: Buffer Overflow", " - debian/patches/CVE-2026-26269.patch: Limit writing to max KEYBUFLEN", " bytes to prevent writing out of bounds.", " - debian/patches/CVE-2026-28420.patch: Use VTERM_MAX_CHARS_PER_CELL * 4", " for ga_grow() to ensure sufficient space. Add a boundary check to the", " character loop to prevent index out-of-bounds access.", " - debian/patches/CVE-2026-28422.patch: Update the size check to account", " for the byte length of the fill character (using MB_CHAR2LEN).", " - CVE-2026-26269", " - CVE-2026-28420", " - CVE-2026-28422", " * SECURITY UPDATE: Command Injection", " - debian/patches/CVE-2026-28417.patch: Implement stricter RFC1123", " hostname and IP validation. Use shellescape() for the provided", " hostname and port.", " - debian/patches/fix-test_plugin_netrw-tests.patch: Add missing", " function TestNetrwCaptureRemotePath", " - CVE-2026-28417", " * SECURITY UPDATE: Out of Bounds Read", " - debian/patches/CVE-2026-28418.patch: Check for end of buffer", " and return early.", " - CVE-2026-28418", " * SECURITY UPDATE: Buffer Underflow", " - debian/patches/CVE-2026-28419.patch: Add a check to ensure the", " delimiter (p_7f) is not at the start of the buffer (lbuf) before", " attempting to isolate the tag name.", " - CVE-2026-28419", " * SECURITY UPDATE: Denial of Service", " - debian/patches/CVE-2026-28421.patch: Add bounds checks on", " pe_page_count and pe_bnum against mf_blocknr_max before descending", " into the block tree, and validate pe_old_lnum >= 1 and", " pe_line_count > 0 before calling readfile().", " - CVE-2026-28421", "" ], "package": "vim", "version": "2:9.1.2141-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Bruce Cable ", "date": "Tue, 10 Mar 2026 19:44:16 +1100" }, { "cves": [], "log": [ "", " * Merge with Debian unstable (LP: #2142221). Remaining changes:", " - d/p/0001-fix-flaky-terminal-mode-test.vim:", " Fix flaky Vim terminal mode test", " - d/p/0002-disable-failing-tests-on-ppc64.patch:", " Disable some tests that were failing during build on", " ppc64el. The tests are only disabled when building on ppc64el.", " - d/p/0003-skip-test-failing-on-s390x-only.patch:", " Skip tests failing on s390x", " - d/p/increase_timeout.diff: Increase timeout", " for the Test_pattern_compile_speed patch.", " - d/p/debian/ubuntu-grub-syntax.patch:", " Add Ubuntu-specific \"quiet\" keyword.", " - d/runtime/vimrc: \"syntax on\" is a sane default for non-tiny Vim.", " * New changes:", " - d/p/disable-test-term-gettty.patch: disable a test", " which was failing due to changes outside of vim (LP: #2142681)", "" ], "package": "vim", "version": "2:9.1.2141-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142221, 2142681 ], "author": "Ural Tunaboyu ", "date": "Wed, 25 Feb 2026 07:34:15 -0800" }, { "cves": [ { "cve": "CVE-2026-25749", "url": "https://ubuntu.com/security/CVE-2026-25749", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132.", "cve_priority": "low", "cve_public_date": "2026-02-06 23:15:00 UTC" } ], "log": [ "", " * Merge upstream tag v9.1.2141", " + Security fixes", " - 9.1.2132: Fix buffer-overflow in 'helpfile' option handling,", " CVE-2026-25749", "" ], "package": "vim", "version": "2:9.1.2141-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "James McCoy ", "date": "Mon, 09 Feb 2026 07:06:42 -0500" }, { "cves": [], "log": [ "", " * Merge upstream patch v9.1.2103", " + syntax/debcontrol.vim:", " - Only highlight email addresses in Maintainer / Uploaders fields", " - Add support for highlighting build profiles and architecture", " restrictions (Closes: #1124089)", " * Disable flaky Test_client_server_stopinsert test", " * Remove Rules-Requires-Root, since no is the default value", " * Remove Priority field, since optional is the default value", " * Declare compliance with Policy 4.7.3", "" ], "package": "vim", "version": "2:9.1.2103-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "James McCoy ", "date": "Fri, 23 Jan 2026 06:27:15 -0500" } ], "notes": null, "is_version_downgrade": false }, { "name": "vim-runtime", "from_version": { "source_package_name": "vim", "source_package_version": "2:9.1.1882-1ubuntu2", "version": "2:9.1.1882-1ubuntu2" }, "to_version": { "source_package_name": "vim", "source_package_version": "2:9.1.2141-1ubuntu2", "version": "2:9.1.2141-1ubuntu2" }, "cves": [ { "cve": "CVE-2026-26269", "url": "https://ubuntu.com/security/CVE-2026-26269", "cve_description": "Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing the specialKeys command, affecting Vim builds that enable and use the NetBeans feature. The Stack buffer overflow exists in special_keys() (in src/netbeans.c). The while (*tok) loop writes two bytes per iteration into a 64-byte stack buffer (keybuf) with no bounds check. A malicious NetBeans server can overflow keybuf with a single specialKeys command. The issue has been fixed as of Vim patch v9.1.2148.", "cve_priority": "low", "cve_public_date": "2026-02-13 20:17:00 UTC" }, { "cve": "CVE-2026-28420", "url": "https://ubuntu.com/security/CVE-2026-28420", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28422", "url": "https://ubuntu.com/security/CVE-2026-28422", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28417", "url": "https://ubuntu.com/security/CVE-2026-28417", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28418", "url": "https://ubuntu.com/security/CVE-2026-28418", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file, Vim can be tricked into reading up to 7 bytes beyond the allocated memory boundary. Version 9.2.0074 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28419", "url": "https://ubuntu.com/security/CVE-2026-28419", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0075, a heap-based buffer underflow exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file where a delimiter appears at the start of a line, Vim attempts to read memory immediately preceding the allocated buffer. Version 9.2.0075 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28421", "url": "https://ubuntu.com/security/CVE-2026-28421", "cve_description": "Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-25749", "url": "https://ubuntu.com/security/CVE-2026-25749", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132.", "cve_priority": "low", "cve_public_date": "2026-02-06 23:15:00 UTC" } ], "launchpad_bugs_fixed": [ 2142221, 2142681 ], "changes": [ { "cves": [ { "cve": "CVE-2026-26269", "url": "https://ubuntu.com/security/CVE-2026-26269", "cve_description": "Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing the specialKeys command, affecting Vim builds that enable and use the NetBeans feature. The Stack buffer overflow exists in special_keys() (in src/netbeans.c). The while (*tok) loop writes two bytes per iteration into a 64-byte stack buffer (keybuf) with no bounds check. A malicious NetBeans server can overflow keybuf with a single specialKeys command. The issue has been fixed as of Vim patch v9.1.2148.", "cve_priority": "low", "cve_public_date": "2026-02-13 20:17:00 UTC" }, { "cve": "CVE-2026-28420", "url": "https://ubuntu.com/security/CVE-2026-28420", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28422", "url": "https://ubuntu.com/security/CVE-2026-28422", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28417", "url": "https://ubuntu.com/security/CVE-2026-28417", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28418", "url": "https://ubuntu.com/security/CVE-2026-28418", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file, Vim can be tricked into reading up to 7 bytes beyond the allocated memory boundary. Version 9.2.0074 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28419", "url": "https://ubuntu.com/security/CVE-2026-28419", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0075, a heap-based buffer underflow exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file where a delimiter appears at the start of a line, Vim attempts to read memory immediately preceding the allocated buffer. Version 9.2.0075 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28421", "url": "https://ubuntu.com/security/CVE-2026-28421", "cve_description": "Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: Buffer Overflow", " - debian/patches/CVE-2026-26269.patch: Limit writing to max KEYBUFLEN", " bytes to prevent writing out of bounds.", " - debian/patches/CVE-2026-28420.patch: Use VTERM_MAX_CHARS_PER_CELL * 4", " for ga_grow() to ensure sufficient space. Add a boundary check to the", " character loop to prevent index out-of-bounds access.", " - debian/patches/CVE-2026-28422.patch: Update the size check to account", " for the byte length of the fill character (using MB_CHAR2LEN).", " - CVE-2026-26269", " - CVE-2026-28420", " - CVE-2026-28422", " * SECURITY UPDATE: Command Injection", " - debian/patches/CVE-2026-28417.patch: Implement stricter RFC1123", " hostname and IP validation. Use shellescape() for the provided", " hostname and port.", " - debian/patches/fix-test_plugin_netrw-tests.patch: Add missing", " function TestNetrwCaptureRemotePath", " - CVE-2026-28417", " * SECURITY UPDATE: Out of Bounds Read", " - debian/patches/CVE-2026-28418.patch: Check for end of buffer", " and return early.", " - CVE-2026-28418", " * SECURITY UPDATE: Buffer Underflow", " - debian/patches/CVE-2026-28419.patch: Add a check to ensure the", " delimiter (p_7f) is not at the start of the buffer (lbuf) before", " attempting to isolate the tag name.", " - CVE-2026-28419", " * SECURITY UPDATE: Denial of Service", " - debian/patches/CVE-2026-28421.patch: Add bounds checks on", " pe_page_count and pe_bnum against mf_blocknr_max before descending", " into the block tree, and validate pe_old_lnum >= 1 and", " pe_line_count > 0 before calling readfile().", " - CVE-2026-28421", "" ], "package": "vim", "version": "2:9.1.2141-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Bruce Cable ", "date": "Tue, 10 Mar 2026 19:44:16 +1100" }, { "cves": [], "log": [ "", " * Merge with Debian unstable (LP: #2142221). Remaining changes:", " - d/p/0001-fix-flaky-terminal-mode-test.vim:", " Fix flaky Vim terminal mode test", " - d/p/0002-disable-failing-tests-on-ppc64.patch:", " Disable some tests that were failing during build on", " ppc64el. The tests are only disabled when building on ppc64el.", " - d/p/0003-skip-test-failing-on-s390x-only.patch:", " Skip tests failing on s390x", " - d/p/increase_timeout.diff: Increase timeout", " for the Test_pattern_compile_speed patch.", " - d/p/debian/ubuntu-grub-syntax.patch:", " Add Ubuntu-specific \"quiet\" keyword.", " - d/runtime/vimrc: \"syntax on\" is a sane default for non-tiny Vim.", " * New changes:", " - d/p/disable-test-term-gettty.patch: disable a test", " which was failing due to changes outside of vim (LP: #2142681)", "" ], "package": "vim", "version": "2:9.1.2141-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142221, 2142681 ], "author": "Ural Tunaboyu ", "date": "Wed, 25 Feb 2026 07:34:15 -0800" }, { "cves": [ { "cve": "CVE-2026-25749", "url": "https://ubuntu.com/security/CVE-2026-25749", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132.", "cve_priority": "low", "cve_public_date": "2026-02-06 23:15:00 UTC" } ], "log": [ "", " * Merge upstream tag v9.1.2141", " + Security fixes", " - 9.1.2132: Fix buffer-overflow in 'helpfile' option handling,", " CVE-2026-25749", "" ], "package": "vim", "version": "2:9.1.2141-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "James McCoy ", "date": "Mon, 09 Feb 2026 07:06:42 -0500" }, { "cves": [], "log": [ "", " * Merge upstream patch v9.1.2103", " + syntax/debcontrol.vim:", " - Only highlight email addresses in Maintainer / Uploaders fields", " - Add support for highlighting build profiles and architecture", " restrictions (Closes: #1124089)", " * Disable flaky Test_client_server_stopinsert test", " * Remove Rules-Requires-Root, since no is the default value", " * Remove Priority field, since optional is the default value", " * Declare compliance with Policy 4.7.3", "" ], "package": "vim", "version": "2:9.1.2103-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "James McCoy ", "date": "Fri, 23 Jan 2026 06:27:15 -0500" } ], "notes": null, "is_version_downgrade": false }, { "name": "vim-tiny", "from_version": { "source_package_name": "vim", "source_package_version": "2:9.1.1882-1ubuntu2", "version": "2:9.1.1882-1ubuntu2" }, "to_version": { "source_package_name": "vim", "source_package_version": "2:9.1.2141-1ubuntu2", "version": "2:9.1.2141-1ubuntu2" }, "cves": [ { "cve": "CVE-2026-26269", "url": "https://ubuntu.com/security/CVE-2026-26269", "cve_description": "Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing the specialKeys command, affecting Vim builds that enable and use the NetBeans feature. The Stack buffer overflow exists in special_keys() (in src/netbeans.c). The while (*tok) loop writes two bytes per iteration into a 64-byte stack buffer (keybuf) with no bounds check. A malicious NetBeans server can overflow keybuf with a single specialKeys command. The issue has been fixed as of Vim patch v9.1.2148.", "cve_priority": "low", "cve_public_date": "2026-02-13 20:17:00 UTC" }, { "cve": "CVE-2026-28420", "url": "https://ubuntu.com/security/CVE-2026-28420", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28422", "url": "https://ubuntu.com/security/CVE-2026-28422", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28417", "url": "https://ubuntu.com/security/CVE-2026-28417", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28418", "url": "https://ubuntu.com/security/CVE-2026-28418", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file, Vim can be tricked into reading up to 7 bytes beyond the allocated memory boundary. Version 9.2.0074 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28419", "url": "https://ubuntu.com/security/CVE-2026-28419", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0075, a heap-based buffer underflow exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file where a delimiter appears at the start of a line, Vim attempts to read memory immediately preceding the allocated buffer. Version 9.2.0075 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28421", "url": "https://ubuntu.com/security/CVE-2026-28421", "cve_description": "Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-25749", "url": "https://ubuntu.com/security/CVE-2026-25749", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132.", "cve_priority": "low", "cve_public_date": "2026-02-06 23:15:00 UTC" } ], "launchpad_bugs_fixed": [ 2142221, 2142681 ], "changes": [ { "cves": [ { "cve": "CVE-2026-26269", "url": "https://ubuntu.com/security/CVE-2026-26269", "cve_description": "Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing the specialKeys command, affecting Vim builds that enable and use the NetBeans feature. The Stack buffer overflow exists in special_keys() (in src/netbeans.c). The while (*tok) loop writes two bytes per iteration into a 64-byte stack buffer (keybuf) with no bounds check. A malicious NetBeans server can overflow keybuf with a single specialKeys command. The issue has been fixed as of Vim patch v9.1.2148.", "cve_priority": "low", "cve_public_date": "2026-02-13 20:17:00 UTC" }, { "cve": "CVE-2026-28420", "url": "https://ubuntu.com/security/CVE-2026-28420", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28422", "url": "https://ubuntu.com/security/CVE-2026-28422", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28417", "url": "https://ubuntu.com/security/CVE-2026-28417", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28418", "url": "https://ubuntu.com/security/CVE-2026-28418", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file, Vim can be tricked into reading up to 7 bytes beyond the allocated memory boundary. Version 9.2.0074 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28419", "url": "https://ubuntu.com/security/CVE-2026-28419", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0075, a heap-based buffer underflow exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file where a delimiter appears at the start of a line, Vim attempts to read memory immediately preceding the allocated buffer. Version 9.2.0075 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28421", "url": "https://ubuntu.com/security/CVE-2026-28421", "cve_description": "Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: Buffer Overflow", " - debian/patches/CVE-2026-26269.patch: Limit writing to max KEYBUFLEN", " bytes to prevent writing out of bounds.", " - debian/patches/CVE-2026-28420.patch: Use VTERM_MAX_CHARS_PER_CELL * 4", " for ga_grow() to ensure sufficient space. Add a boundary check to the", " character loop to prevent index out-of-bounds access.", " - debian/patches/CVE-2026-28422.patch: Update the size check to account", " for the byte length of the fill character (using MB_CHAR2LEN).", " - CVE-2026-26269", " - CVE-2026-28420", " - CVE-2026-28422", " * SECURITY UPDATE: Command Injection", " - debian/patches/CVE-2026-28417.patch: Implement stricter RFC1123", " hostname and IP validation. Use shellescape() for the provided", " hostname and port.", " - debian/patches/fix-test_plugin_netrw-tests.patch: Add missing", " function TestNetrwCaptureRemotePath", " - CVE-2026-28417", " * SECURITY UPDATE: Out of Bounds Read", " - debian/patches/CVE-2026-28418.patch: Check for end of buffer", " and return early.", " - CVE-2026-28418", " * SECURITY UPDATE: Buffer Underflow", " - debian/patches/CVE-2026-28419.patch: Add a check to ensure the", " delimiter (p_7f) is not at the start of the buffer (lbuf) before", " attempting to isolate the tag name.", " - CVE-2026-28419", " * SECURITY UPDATE: Denial of Service", " - debian/patches/CVE-2026-28421.patch: Add bounds checks on", " pe_page_count and pe_bnum against mf_blocknr_max before descending", " into the block tree, and validate pe_old_lnum >= 1 and", " pe_line_count > 0 before calling readfile().", " - CVE-2026-28421", "" ], "package": "vim", "version": "2:9.1.2141-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Bruce Cable ", "date": "Tue, 10 Mar 2026 19:44:16 +1100" }, { "cves": [], "log": [ "", " * Merge with Debian unstable (LP: #2142221). Remaining changes:", " - d/p/0001-fix-flaky-terminal-mode-test.vim:", " Fix flaky Vim terminal mode test", " - d/p/0002-disable-failing-tests-on-ppc64.patch:", " Disable some tests that were failing during build on", " ppc64el. The tests are only disabled when building on ppc64el.", " - d/p/0003-skip-test-failing-on-s390x-only.patch:", " Skip tests failing on s390x", " - d/p/increase_timeout.diff: Increase timeout", " for the Test_pattern_compile_speed patch.", " - d/p/debian/ubuntu-grub-syntax.patch:", " Add Ubuntu-specific \"quiet\" keyword.", " - d/runtime/vimrc: \"syntax on\" is a sane default for non-tiny Vim.", " * New changes:", " - d/p/disable-test-term-gettty.patch: disable a test", " which was failing due to changes outside of vim (LP: #2142681)", "" ], "package": "vim", "version": "2:9.1.2141-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142221, 2142681 ], "author": "Ural Tunaboyu ", "date": "Wed, 25 Feb 2026 07:34:15 -0800" }, { "cves": [ { "cve": "CVE-2026-25749", "url": "https://ubuntu.com/security/CVE-2026-25749", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132.", "cve_priority": "low", "cve_public_date": "2026-02-06 23:15:00 UTC" } ], "log": [ "", " * Merge upstream tag v9.1.2141", " + Security fixes", " - 9.1.2132: Fix buffer-overflow in 'helpfile' option handling,", " CVE-2026-25749", "" ], "package": "vim", "version": "2:9.1.2141-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "James McCoy ", "date": "Mon, 09 Feb 2026 07:06:42 -0500" }, { "cves": [], "log": [ "", " * Merge upstream patch v9.1.2103", " + syntax/debcontrol.vim:", " - Only highlight email addresses in Maintainer / Uploaders fields", " - Add support for highlighting build profiles and architecture", " restrictions (Closes: #1124089)", " * Disable flaky Test_client_server_stopinsert test", " * Remove Rules-Requires-Root, since no is the default value", " * Remove Priority field, since optional is the default value", " * Declare compliance with Policy 4.7.3", "" ], "package": "vim", "version": "2:9.1.2103-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "James McCoy ", "date": "Fri, 23 Jan 2026 06:27:15 -0500" } ], "notes": null, "is_version_downgrade": false }, { "name": "whiptail", "from_version": { "source_package_name": "newt", "source_package_version": "0.52.25-1ubuntu2", "version": "0.52.25-1ubuntu2" }, "to_version": { "source_package_name": "newt", "source_package_version": "0.52.25-1ubuntu3", "version": "0.52.25-1ubuntu3" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild to drop Python 3.13 bits.", "" ], "package": "newt", "version": "0.52.25-1ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 20 Mar 2026 12:05:30 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "wireless-regdb", "from_version": { "source_package_name": "wireless-regdb", "source_package_version": "2025.10.07-0ubuntu1", "version": "2025.10.07-0ubuntu1" }, "to_version": { "source_package_name": "wireless-regdb", "source_package_version": "2026.02.04-0ubuntu1", "version": "2026.02.04-0ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2144719 ], "changes": [ { "cves": [], "log": [ "", " * New upstream version 2026.02.04 (LP: #2144719)", "" ], "package": "wireless-regdb", "version": "2026.02.04-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2144719 ], "author": "Noah Wager ", "date": "Wed, 18 Mar 2026 00:03:10 -0700" } ], "notes": null, "is_version_downgrade": false }, { "name": "xkb-data", "from_version": { "source_package_name": "xkeyboard-config", "source_package_version": "2.42-1ubuntu2", "version": "2.42-1ubuntu2" }, "to_version": { "source_package_name": "xkeyboard-config", "source_package_version": "2.46-2", "version": "2.46-2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Migrate /usr/lib/X11/xkb dir to symlink. (Closes: #1122650)", "" ], "package": "xkeyboard-config", "version": "2.46-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Timo Aaltonen ", "date": "Thu, 18 Dec 2025 15:35:35 +0200" }, { "cves": [], "log": [ "", " [ Dylan Aïssi ]", " * Team upload.", " * debian/copyright: Convert to machine-readable format", "", " [ Timo Aaltonen ]", " * New upstream release.", " * rules: Drop obsolete xkb-base build-option.", " * watch: Updated to version 5.", " * source: Switch to format 3.0 (quilt).", "" ], "package": "xkeyboard-config", "version": "2.46-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Timo Aaltonen ", "date": "Thu, 11 Dec 2025 16:47:05 +0200" }, { "cves": [], "log": [ "", " * New upstream release. (Closes: #1091993)", " * copyright: Fix a typo in the URL. (Closes: #1070293)", " * rules: Enable non-latin-layouts-list. (Closes: #1085452)", " - control: Add libxkbcommon-tools and python3-yaml to build-depends.", " * rules: Drop dh_clean override, unnecessary.", "" ], "package": "xkeyboard-config", "version": "2.44-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Timo Aaltonen ", "date": "Mon, 28 Jul 2025 17:41:00 +0300" } ], "notes": null, "is_version_downgrade": false }, { "name": "xxd", "from_version": { "source_package_name": "vim", "source_package_version": "2:9.1.1882-1ubuntu2", "version": "2:9.1.1882-1ubuntu2" }, "to_version": { "source_package_name": "vim", "source_package_version": "2:9.1.2141-1ubuntu2", "version": "2:9.1.2141-1ubuntu2" }, "cves": [ { "cve": "CVE-2026-26269", "url": "https://ubuntu.com/security/CVE-2026-26269", "cve_description": "Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing the specialKeys command, affecting Vim builds that enable and use the NetBeans feature. The Stack buffer overflow exists in special_keys() (in src/netbeans.c). The while (*tok) loop writes two bytes per iteration into a 64-byte stack buffer (keybuf) with no bounds check. A malicious NetBeans server can overflow keybuf with a single specialKeys command. The issue has been fixed as of Vim patch v9.1.2148.", "cve_priority": "low", "cve_public_date": "2026-02-13 20:17:00 UTC" }, { "cve": "CVE-2026-28420", "url": "https://ubuntu.com/security/CVE-2026-28420", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28422", "url": "https://ubuntu.com/security/CVE-2026-28422", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28417", "url": "https://ubuntu.com/security/CVE-2026-28417", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28418", "url": "https://ubuntu.com/security/CVE-2026-28418", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file, Vim can be tricked into reading up to 7 bytes beyond the allocated memory boundary. Version 9.2.0074 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28419", "url": "https://ubuntu.com/security/CVE-2026-28419", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0075, a heap-based buffer underflow exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file where a delimiter appears at the start of a line, Vim attempts to read memory immediately preceding the allocated buffer. Version 9.2.0075 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28421", "url": "https://ubuntu.com/security/CVE-2026-28421", "cve_description": "Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-25749", "url": "https://ubuntu.com/security/CVE-2026-25749", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132.", "cve_priority": "low", "cve_public_date": "2026-02-06 23:15:00 UTC" } ], "launchpad_bugs_fixed": [ 2142221, 2142681 ], "changes": [ { "cves": [ { "cve": "CVE-2026-26269", "url": "https://ubuntu.com/security/CVE-2026-26269", "cve_description": "Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans integration when processing the specialKeys command, affecting Vim builds that enable and use the NetBeans feature. The Stack buffer overflow exists in special_keys() (in src/netbeans.c). The while (*tok) loop writes two bytes per iteration into a 64-byte stack buffer (keybuf) with no bounds check. A malicious NetBeans server can overflow keybuf with a single specialKeys command. The issue has been fixed as of Vim patch v9.1.2148.", "cve_priority": "low", "cve_public_date": "2026-02-13 20:17:00 UTC" }, { "cve": "CVE-2026-28420", "url": "https://ubuntu.com/security/CVE-2026-28420", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0076, a heap-based buffer overflow WRITE and an out-of-bounds READ exist in Vim's terminal emulator when processing maximum combining characters from Unicode supplementary planes. Version 9.2.0076 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28422", "url": "https://ubuntu.com/security/CVE-2026-28422", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0078, a stack-buffer-overflow occurs in `build_stl_str_hl()` when rendering a statusline with a multi-byte fill character on a very wide terminal. Version 9.2.0078 patches the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28417", "url": "https://ubuntu.com/security/CVE-2026-28417", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28418", "url": "https://ubuntu.com/security/CVE-2026-28418", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file, Vim can be tricked into reading up to 7 bytes beyond the allocated memory boundary. Version 9.2.0074 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28419", "url": "https://ubuntu.com/security/CVE-2026-28419", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.2.0075, a heap-based buffer underflow exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file where a delimiter appears at the start of a line, Vim attempts to read memory immediately preceding the allocated buffer. Version 9.2.0075 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" }, { "cve": "CVE-2026-28421", "url": "https://ubuntu.com/security/CVE-2026-28421", "cve_description": "Vim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-02-27 22:16:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: Buffer Overflow", " - debian/patches/CVE-2026-26269.patch: Limit writing to max KEYBUFLEN", " bytes to prevent writing out of bounds.", " - debian/patches/CVE-2026-28420.patch: Use VTERM_MAX_CHARS_PER_CELL * 4", " for ga_grow() to ensure sufficient space. Add a boundary check to the", " character loop to prevent index out-of-bounds access.", " - debian/patches/CVE-2026-28422.patch: Update the size check to account", " for the byte length of the fill character (using MB_CHAR2LEN).", " - CVE-2026-26269", " - CVE-2026-28420", " - CVE-2026-28422", " * SECURITY UPDATE: Command Injection", " - debian/patches/CVE-2026-28417.patch: Implement stricter RFC1123", " hostname and IP validation. Use shellescape() for the provided", " hostname and port.", " - debian/patches/fix-test_plugin_netrw-tests.patch: Add missing", " function TestNetrwCaptureRemotePath", " - CVE-2026-28417", " * SECURITY UPDATE: Out of Bounds Read", " - debian/patches/CVE-2026-28418.patch: Check for end of buffer", " and return early.", " - CVE-2026-28418", " * SECURITY UPDATE: Buffer Underflow", " - debian/patches/CVE-2026-28419.patch: Add a check to ensure the", " delimiter (p_7f) is not at the start of the buffer (lbuf) before", " attempting to isolate the tag name.", " - CVE-2026-28419", " * SECURITY UPDATE: Denial of Service", " - debian/patches/CVE-2026-28421.patch: Add bounds checks on", " pe_page_count and pe_bnum against mf_blocknr_max before descending", " into the block tree, and validate pe_old_lnum >= 1 and", " pe_line_count > 0 before calling readfile().", " - CVE-2026-28421", "" ], "package": "vim", "version": "2:9.1.2141-1ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Bruce Cable ", "date": "Tue, 10 Mar 2026 19:44:16 +1100" }, { "cves": [], "log": [ "", " * Merge with Debian unstable (LP: #2142221). Remaining changes:", " - d/p/0001-fix-flaky-terminal-mode-test.vim:", " Fix flaky Vim terminal mode test", " - d/p/0002-disable-failing-tests-on-ppc64.patch:", " Disable some tests that were failing during build on", " ppc64el. The tests are only disabled when building on ppc64el.", " - d/p/0003-skip-test-failing-on-s390x-only.patch:", " Skip tests failing on s390x", " - d/p/increase_timeout.diff: Increase timeout", " for the Test_pattern_compile_speed patch.", " - d/p/debian/ubuntu-grub-syntax.patch:", " Add Ubuntu-specific \"quiet\" keyword.", " - d/runtime/vimrc: \"syntax on\" is a sane default for non-tiny Vim.", " * New changes:", " - d/p/disable-test-term-gettty.patch: disable a test", " which was failing due to changes outside of vim (LP: #2142681)", "" ], "package": "vim", "version": "2:9.1.2141-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2142221, 2142681 ], "author": "Ural Tunaboyu ", "date": "Wed, 25 Feb 2026 07:34:15 -0800" }, { "cves": [ { "cve": "CVE-2026-25749", "url": "https://ubuntu.com/security/CVE-2026-25749", "cve_description": "Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been patched in version 9.1.2132.", "cve_priority": "low", "cve_public_date": "2026-02-06 23:15:00 UTC" } ], "log": [ "", " * Merge upstream tag v9.1.2141", " + Security fixes", " - 9.1.2132: Fix buffer-overflow in 'helpfile' option handling,", " CVE-2026-25749", "" ], "package": "vim", "version": "2:9.1.2141-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "James McCoy ", "date": "Mon, 09 Feb 2026 07:06:42 -0500" }, { "cves": [], "log": [ "", " * Merge upstream patch v9.1.2103", " + syntax/debcontrol.vim:", " - Only highlight email addresses in Maintainer / Uploaders fields", " - Add support for highlighting build profiles and architecture", " restrictions (Closes: #1124089)", " * Disable flaky Test_client_server_stopinsert test", " * Remove Rules-Requires-Root, since no is the default value", " * Remove Priority field, since optional is the default value", " * Declare compliance with Policy 4.7.3", "" ], "package": "vim", "version": "2:9.1.2103-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "James McCoy ", "date": "Fri, 23 Jan 2026 06:27:15 -0500" } ], "notes": null, "is_version_downgrade": false } ], "snap": [] }, "added": { "deb": [ { "name": "binutils", "from_version": { "source_package_name": null, "source_package_version": null, "version": null }, "to_version": { "source_package_name": "binutils", "source_package_version": "2.46-3ubuntu2", "version": "2.46-3ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild for glibc 2.46.", "" ], "package": "binutils", "version": "2.46-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 15 Mar 2026 02:33:01 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "binutils", "version": "2.46-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 05 Mar 2026 12:26:02 +0100" }, { "cves": [], "log": [ "", " * Fix PR demangler/106641, taken from the trunk.", " * Drop build dependency on quilt. Closes: #1129263.", " * Update libgprofng symbols file.", "" ], "package": "binutils", "version": "2.46-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 05 Mar 2026 12:22:39 +0100" } ], "notes": "For a newly added package only the three most recent changelog entries are shown.", "is_version_downgrade": false }, { "name": "binutils-common:riscv64", "from_version": { "source_package_name": null, "source_package_version": null, "version": null }, "to_version": { "source_package_name": "binutils", "source_package_version": "2.46-3ubuntu2", "version": "2.46-3ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild for glibc 2.46.", "" ], "package": "binutils", "version": "2.46-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 15 Mar 2026 02:33:01 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "binutils", "version": "2.46-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 05 Mar 2026 12:26:02 +0100" }, { "cves": [], "log": [ "", " * Fix PR demangler/106641, taken from the trunk.", " * Drop build dependency on quilt. Closes: #1129263.", " * Update libgprofng symbols file.", "" ], "package": "binutils", "version": "2.46-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 05 Mar 2026 12:22:39 +0100" } ], "notes": "For a newly added package only the three most recent changelog entries are shown.", "is_version_downgrade": false }, { "name": "binutils-riscv64-linux-gnu", "from_version": { "source_package_name": null, "source_package_version": null, "version": null }, "to_version": { "source_package_name": "binutils", "source_package_version": "2.46-3ubuntu2", "version": "2.46-3ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild for glibc 2.46.", "" ], "package": "binutils", "version": "2.46-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 15 Mar 2026 02:33:01 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "binutils", "version": "2.46-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 05 Mar 2026 12:26:02 +0100" }, { "cves": [], "log": [ "", " * Fix PR demangler/106641, taken from the trunk.", " * Drop build dependency on quilt. Closes: #1129263.", " * Update libgprofng symbols file.", "" ], "package": "binutils", "version": "2.46-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 05 Mar 2026 12:22:39 +0100" } ], "notes": "For a newly added package only the three most recent changelog entries are shown.", "is_version_downgrade": false }, { "name": "bpftrace", "from_version": { "source_package_name": null, "source_package_version": null, "version": null }, "to_version": { "source_package_name": "bpftrace", "source_package_version": "0.25.0-1ubuntu1", "version": "0.25.0-1ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Enable the testsuite (LP #2052809)", " The testsuite is only enabled for autopkgtest, not at build time.", " This adds one build dependency: pahole, needed to build the tests.", " - Add symbol dumps for bpftrace and bpftrace-aotrt", " + d/helpers/dump_debug_symbols.sh: a shell script", " to be used in d/rules to dump the debug symbols of bpftrace", " and bpftrace-aotrt.", " + d/rules: uses the shell script created by the above patch to", " dump the debug symbols, which was not happening earlier due to", " exclusion from dh_strip and custom strip commands.", " (LP #2069953)", " - debian/patches/disable-armhf.patch:", " Comment out some tests failing to build on armhf", " - debian/patches/disable_failing_tests.patch", " debian/tests/control", " Disable some failing tests to have the whole testsuite passing.", " - d/control: Build-Depends: bpftool (LP #2139018)", "" ], "package": "bpftrace", "version": "0.25.0-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 15 Mar 2026 17:32:29 +0100" }, { "cves": [], "log": [ "", " * New upstream release.", " * d/patches: remove patches applied upstream.", " * d/rules: use system libbpf.", "" ], "package": "bpftrace", "version": "0.25.0-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Vincent Bernat ", "date": "Sun, 15 Mar 2026 00:19:50 +0100" }, { "cves": [], "log": [ "", " * d/helpers: make dump_debug_symbols.sh executable again", "" ], "package": "bpftrace", "version": "0.24.1-1.1ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Thu, 26 Feb 2026 12:57:50 -0500" } ], "notes": "For a newly added package only the three most recent changelog entries are shown.", "is_version_downgrade": false }, { "name": "dracut", "from_version": { "source_package_name": null, "source_package_version": null, "version": null }, "to_version": { "source_package_name": "dracut", "source_package_version": "110-7", "version": "110-7" }, "cves": [], "launchpad_bugs_fixed": [ 2143264, 2143030 ], "changes": [ { "cves": [], "log": [ "", " * correct fix(base): move initrd.target.wants symlink creation to wait_for_dev", " (Closes: #1131416)", "" ], "package": "dracut", "version": "110-7", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Sat, 21 Mar 2026 21:55:34 +0100" }, { "cves": [], "log": [ "", " * Cherry-pick upstream commits:", " - fix(crypt): use -d instead of -f to check for $NEWROOT/proc directory", " - feat(overlayfs): support tmpfs size parameter in rd.overlay", " - fix(systemd-networkd): create /run/systemd/network if missing", " - test(SYSTEMD-INITRD): increase device timeout to infinity", " * fix(base): move initrd.target.wants symlink creation to wait_for_dev", " * fix(crypt): use systemd generator for setting the timeout (LP: #2143264)", " * fix(kernel-modules): install mmc drivers on all architectures (LP: #2143030)", " * autopkgtest:", " - double timeout to 20 min for arm64", " - skip slow 31-livenet and 45-systemd-import on riscv64", " - skip 50-network on riscv64 due to systemd-networkd-wait-online timeout", "" ], "package": "dracut", "version": "110-6", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2143264, 2143030 ], "author": "Benjamin Drung ", "date": "Thu, 19 Mar 2026 23:19:30 +0100" }, { "cves": [], "log": [ "", " * fix(crypt): honor timeout setting when using UUID, LABEL, etc", " * autopkgtest:", " - increase timeout to 30 min for riscv64", " - skip time-consuming tests on riscv64", " * dracut-core: Declare breaking rust-coreutils before version 0.5.0", " * dracut-network: demote nbd-client, nfs-common, open-iscsi to suggests", "" ], "package": "dracut", "version": "110-5", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Fri, 13 Mar 2026 15:57:36 +0100" } ], "notes": "For a newly added package only the three most recent changelog entries are shown.", "is_version_downgrade": false }, { "name": "dracut-core", "from_version": { "source_package_name": null, "source_package_version": null, "version": null }, "to_version": { "source_package_name": "dracut", "source_package_version": "110-7", "version": "110-7" }, "cves": [], "launchpad_bugs_fixed": [ 2143264, 2143030 ], "changes": [ { "cves": [], "log": [ "", " * correct fix(base): move initrd.target.wants symlink creation to wait_for_dev", " (Closes: #1131416)", "" ], "package": "dracut", "version": "110-7", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Sat, 21 Mar 2026 21:55:34 +0100" }, { "cves": [], "log": [ "", " * Cherry-pick upstream commits:", " - fix(crypt): use -d instead of -f to check for $NEWROOT/proc directory", " - feat(overlayfs): support tmpfs size parameter in rd.overlay", " - fix(systemd-networkd): create /run/systemd/network if missing", " - test(SYSTEMD-INITRD): increase device timeout to infinity", " * fix(base): move initrd.target.wants symlink creation to wait_for_dev", " * fix(crypt): use systemd generator for setting the timeout (LP: #2143264)", " * fix(kernel-modules): install mmc drivers on all architectures (LP: #2143030)", " * autopkgtest:", " - double timeout to 20 min for arm64", " - skip slow 31-livenet and 45-systemd-import on riscv64", " - skip 50-network on riscv64 due to systemd-networkd-wait-online timeout", "" ], "package": "dracut", "version": "110-6", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2143264, 2143030 ], "author": "Benjamin Drung ", "date": "Thu, 19 Mar 2026 23:19:30 +0100" }, { "cves": [], "log": [ "", " * fix(crypt): honor timeout setting when using UUID, LABEL, etc", " * autopkgtest:", " - increase timeout to 30 min for riscv64", " - skip time-consuming tests on riscv64", " * dracut-core: Declare breaking rust-coreutils before version 0.5.0", " * dracut-network: demote nbd-client, nfs-common, open-iscsi to suggests", "" ], "package": "dracut", "version": "110-5", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Fri, 13 Mar 2026 15:57:36 +0100" } ], "notes": "For a newly added package only the three most recent changelog entries are shown.", "is_version_downgrade": false }, { "name": "dracut-network", "from_version": { "source_package_name": null, "source_package_version": null, "version": null }, "to_version": { "source_package_name": "dracut", "source_package_version": "110-7", "version": "110-7" }, "cves": [], "launchpad_bugs_fixed": [ 2143264, 2143030 ], "changes": [ { "cves": [], "log": [ "", " * correct fix(base): move initrd.target.wants symlink creation to wait_for_dev", " (Closes: #1131416)", "" ], "package": "dracut", "version": "110-7", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Sat, 21 Mar 2026 21:55:34 +0100" }, { "cves": [], "log": [ "", " * Cherry-pick upstream commits:", " - fix(crypt): use -d instead of -f to check for $NEWROOT/proc directory", " - feat(overlayfs): support tmpfs size parameter in rd.overlay", " - fix(systemd-networkd): create /run/systemd/network if missing", " - test(SYSTEMD-INITRD): increase device timeout to infinity", " * fix(base): move initrd.target.wants symlink creation to wait_for_dev", " * fix(crypt): use systemd generator for setting the timeout (LP: #2143264)", " * fix(kernel-modules): install mmc drivers on all architectures (LP: #2143030)", " * autopkgtest:", " - double timeout to 20 min for arm64", " - skip slow 31-livenet and 45-systemd-import on riscv64", " - skip 50-network on riscv64 due to systemd-networkd-wait-online timeout", "" ], "package": "dracut", "version": "110-6", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2143264, 2143030 ], "author": "Benjamin Drung ", "date": "Thu, 19 Mar 2026 23:19:30 +0100" }, { "cves": [], "log": [ "", " * fix(crypt): honor timeout setting when using UUID, LABEL, etc", " * autopkgtest:", " - increase timeout to 30 min for riscv64", " - skip time-consuming tests on riscv64", " * dracut-core: Declare breaking rust-coreutils before version 0.5.0", " * dracut-network: demote nbd-client, nfs-common, open-iscsi to suggests", "" ], "package": "dracut", "version": "110-5", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Fri, 13 Mar 2026 15:57:36 +0100" } ], "notes": "For a newly added package only the three most recent changelog entries are shown.", "is_version_downgrade": false }, { "name": "gcc-16-base:riscv64", "from_version": { "source_package_name": null, "source_package_version": null, "version": null }, "to_version": { "source_package_name": "gcc-16", "source_package_version": "16-20260315-1ubuntu1", "version": "16-20260315-1ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", " - Work-around the 80GB chroot size on the Ubuntu buildds.", "" ], "package": "gcc-16", "version": "16-20260315-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 15 Mar 2026 13:22:54 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260315).", " * Pass configure flags for libgcobol cross builds.", " * For backports, require binutils (>= 2.40) on riscv64.", " * libga68-dev: Depend on libgc-dev. Closes: #1130580.", " * Fix PR ada/107475 also for armhf and s390x.", " * Disable dwz on alpha, see PR dwz/33990.", " * Refresh patches.", " * Update libgcc-s, libcc1, lib*asan, liblsan, libtsan and libgcobol", " symbol files.", "" ], "package": "gcc-16", "version": "16-20260315-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 15 Mar 2026 13:17:23 +0100" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk (20260308).", " * On riscv64, default again to RVA23.", " * Disable bootstrap build on riscv64 entirely for a quick build.", "" ], "package": "gcc-16", "version": "16-20260308-1ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 08 Mar 2026 09:49:05 +0100" } ], "notes": "For a newly added package only the three most recent changelog entries are shown.", "is_version_downgrade": false }, { "name": "libbinutils:riscv64", "from_version": { "source_package_name": null, "source_package_version": null, "version": null }, "to_version": { "source_package_name": "binutils", "source_package_version": "2.46-3ubuntu2", "version": "2.46-3ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild for glibc 2.46.", "" ], "package": "binutils", "version": "2.46-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 15 Mar 2026 02:33:01 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "binutils", "version": "2.46-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 05 Mar 2026 12:26:02 +0100" }, { "cves": [], "log": [ "", " * Fix PR demangler/106641, taken from the trunk.", " * Drop build dependency on quilt. Closes: #1129263.", " * Update libgprofng symbols file.", "" ], "package": "binutils", "version": "2.46-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 05 Mar 2026 12:22:39 +0100" } ], "notes": "For a newly added package only the three most recent changelog entries are shown.", "is_version_downgrade": false }, { "name": "libc-dev-bin", "from_version": { "source_package_name": null, "source_package_version": null, "version": null }, "to_version": { "source_package_name": "glibc", "source_package_version": "2.43-2ubuntu1", "version": "2.43-2ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2143767, 2138256, 2142067 ], "changes": [ { "cves": [], "log": [ "", " * Merge from Debian experimental (LP: #2143767)", " Delta dropped:", " - Don't strip ld.so on armhf. LP #1927192.", " - Enable systemtap support, which is currently disabled in Debian.", " - Fix gconv regression on i386", " - Stop building with --enable-sframe for now.", " - s390x: drop the 32-bit multi-arch variant (LP #2067350)", " * Fixed upstream:", " - NPTL: Optimize trylock for high cache contention workloads (LP: #2138256) ", " * Update from upstream:", " - Don't include directly", " - po: Incorporate translatins (nl updated, ar new)", " * d/watch: modernize watchfile delta to v5", " * Fix broken ldconfig, static-pie binary on riscv64", " Revert RVV memset variant patch. (LP: #2142067)", "" ], "package": "glibc", "version": "2.43-2ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143767, 2138256, 2142067 ], "author": "Simon Poirier ", "date": "Tue, 17 Feb 2026 16:52:35 -0500" }, { "cves": [], "log": [ "", " * debian/testsuite-xfail-debian.mk: Update hurd results.", "" ], "package": "glibc", "version": "2.43-2", "urgency": "medium", "distributions": "UNRELEASED", "launchpad_bugs_fixed": [], "author": "Samuel Thibault ", "date": "Fri, 30 Jan 2026 01:41:14 +0100" }, { "cves": [], "log": [ "", " [ Aurelien Jarno ]", " * New upstream release:", " - debian/copyright: update following upstream changes.", " - debian/symbols.wildcards: add 2.43.", " - debian/patches/git-updates.diff: update from upstream stable branch.", " - debian/patches/hurd-i386/local-enable-ldconfig.diff: rebased.", " - debian/patches/hurd-i386/git-sigreturn-SEGV.diff: upstreamed.", " - debian/patches/hurd-i386/git-rlimit-as.diff: upstreamed.", " - debian/patches/hurd-i386/git-run-iconv-test.sh.diff: upstreamed.", " - debian/patches/hurd-i386/git-elf-ordering.diff: upstreamed.", " - debian/patches/hurd-i386/git-rename.diff: upstreamed.", " - debian/patches/hurd-i386/git-signal-SSE-MMX.diff: upstreamed.", " - debian/patches/hurd-i386/git-sigreturn-xmm.diff: upstreamed.", " - debian/patches/hurd-i386/git-cancel-stack.diff: upstreamed.", " - debian/patches/i386/unsubmitted-quiet-ldconfig.diff: rebased.", " - debian/patches/any/local-asserth-decls.diff: rebased.", " - debian/patches/any/local-tcsetaddr.diff: rebased.", " - debian/patches/any/submitted-nptl-invalid-td.patch: drop, obsolete.", " - debian/patches/any/git-ldd-set-u.diff: upstreamed.", " - debian/patches/any/git-linux-termios.diff: upstreamed.", " - debian/patches/hurd-i386/submitted-net.diff: rebased.", " - debian/patches/hurd-i386/tg-bits_atomic.h_multiple_threads.diff: drop,", " obsolete.", " - debian/patches/hurd-i386/local-clock_gettime_MONOTONIC.diff: rebased.", " - debian/patches/hurd-i386/local-fix-nss.diff: rebased.", " - debian/libc0.3.symbols.hurd-i386: update following the move of symbols", " from libpthread.so.0.3 to libc.so.0.3.", "" ], "package": "glibc", "version": "2.43-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Wed, 28 Jan 2026 22:35:15 +0100" } ], "notes": "For a newly added package only the three most recent changelog entries are shown.", "is_version_downgrade": false }, { "name": "libc6-dev:riscv64", "from_version": { "source_package_name": null, "source_package_version": null, "version": null }, "to_version": { "source_package_name": "glibc", "source_package_version": "2.43-2ubuntu1", "version": "2.43-2ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2143767, 2138256, 2142067 ], "changes": [ { "cves": [], "log": [ "", " * Merge from Debian experimental (LP: #2143767)", " Delta dropped:", " - Don't strip ld.so on armhf. LP #1927192.", " - Enable systemtap support, which is currently disabled in Debian.", " - Fix gconv regression on i386", " - Stop building with --enable-sframe for now.", " - s390x: drop the 32-bit multi-arch variant (LP #2067350)", " * Fixed upstream:", " - NPTL: Optimize trylock for high cache contention workloads (LP: #2138256) ", " * Update from upstream:", " - Don't include directly", " - po: Incorporate translatins (nl updated, ar new)", " * d/watch: modernize watchfile delta to v5", " * Fix broken ldconfig, static-pie binary on riscv64", " Revert RVV memset variant patch. (LP: #2142067)", "" ], "package": "glibc", "version": "2.43-2ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143767, 2138256, 2142067 ], "author": "Simon Poirier ", "date": "Tue, 17 Feb 2026 16:52:35 -0500" }, { "cves": [], "log": [ "", " * debian/testsuite-xfail-debian.mk: Update hurd results.", "" ], "package": "glibc", "version": "2.43-2", "urgency": "medium", "distributions": "UNRELEASED", "launchpad_bugs_fixed": [], "author": "Samuel Thibault ", "date": "Fri, 30 Jan 2026 01:41:14 +0100" }, { "cves": [], "log": [ "", " [ Aurelien Jarno ]", " * New upstream release:", " - debian/copyright: update following upstream changes.", " - debian/symbols.wildcards: add 2.43.", " - debian/patches/git-updates.diff: update from upstream stable branch.", " - debian/patches/hurd-i386/local-enable-ldconfig.diff: rebased.", " - debian/patches/hurd-i386/git-sigreturn-SEGV.diff: upstreamed.", " - debian/patches/hurd-i386/git-rlimit-as.diff: upstreamed.", " - debian/patches/hurd-i386/git-run-iconv-test.sh.diff: upstreamed.", " - debian/patches/hurd-i386/git-elf-ordering.diff: upstreamed.", " - debian/patches/hurd-i386/git-rename.diff: upstreamed.", " - debian/patches/hurd-i386/git-signal-SSE-MMX.diff: upstreamed.", " - debian/patches/hurd-i386/git-sigreturn-xmm.diff: upstreamed.", " - debian/patches/hurd-i386/git-cancel-stack.diff: upstreamed.", " - debian/patches/i386/unsubmitted-quiet-ldconfig.diff: rebased.", " - debian/patches/any/local-asserth-decls.diff: rebased.", " - debian/patches/any/local-tcsetaddr.diff: rebased.", " - debian/patches/any/submitted-nptl-invalid-td.patch: drop, obsolete.", " - debian/patches/any/git-ldd-set-u.diff: upstreamed.", " - debian/patches/any/git-linux-termios.diff: upstreamed.", " - debian/patches/hurd-i386/submitted-net.diff: rebased.", " - debian/patches/hurd-i386/tg-bits_atomic.h_multiple_threads.diff: drop,", " obsolete.", " - debian/patches/hurd-i386/local-clock_gettime_MONOTONIC.diff: rebased.", " - debian/patches/hurd-i386/local-fix-nss.diff: rebased.", " - debian/libc0.3.symbols.hurd-i386: update following the move of symbols", " from libpthread.so.0.3 to libc.so.0.3.", "" ], "package": "glibc", "version": "2.43-1", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Aurelien Jarno ", "date": "Wed, 28 Jan 2026 22:35:15 +0100" } ], "notes": "For a newly added package only the three most recent changelog entries are shown.", "is_version_downgrade": false }, { "name": "libclang1-21", "from_version": { "source_package_name": null, "source_package_version": null, "version": null }, "to_version": { "source_package_name": "llvm-toolchain-21", "source_package_version": "1:21.1.8-4ubuntu2", "version": "1:21.1.8-4ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - Regenerate the control file.", " - Use RVA23U64 profile in clang (LP #2116086).", " - d/rules: Remove i386 from CLANG_GRPC_ARCHS (not built on i386).", "" ], "package": "llvm-toolchain-21", "version": "1:21.1.8-4ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 27 Feb 2026 21:51:56 +0100" }, { "cves": [], "log": [ "", " [ Matthias Klose ]", " * d/rules: Fix self-referencing macro.", " * Stop building packages now built by LLVM 22.", " * d/rules: Don't use lld for backport build, when not available.", " * d/rules: Add safety check for enablement of the RVA23 baseline.", " * d/rules: Only disable Z3 support for Ubuntu when it is in main.", " * Install a lit binary. Closes: #1122910.", " * llvm-tools: Don't install the lit tests. Closes: #1122909.", "", " [ Sylvestre Ledru ]", " * Fix autopkgtest failure with CMake 4. thanks to Adrian Bunk", "" ], "package": "llvm-toolchain-21", "version": "1:21.1.8-4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 27 Feb 2026 17:29:38 +0100" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - Regenerate the control file.", " - Use RVA23U64 profile in clang (LP #2116086).", " - d/rules: Remove i386 from CLANG_GRPC_ARCHS (not built on i386).", " * Stop building packages now built from LLVM 22.", "" ], "package": "llvm-toolchain-21", "version": "1:21.1.8-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 05 Feb 2026 11:23:42 +0100" } ], "notes": "For a newly added package only the three most recent changelog entries are shown.", "is_version_downgrade": false }, { "name": "libctf-nobfd0:riscv64", "from_version": { "source_package_name": null, "source_package_version": null, "version": null }, "to_version": { "source_package_name": "binutils", "source_package_version": "2.46-3ubuntu2", "version": "2.46-3ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild for glibc 2.46.", "" ], "package": "binutils", "version": "2.46-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 15 Mar 2026 02:33:01 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "binutils", "version": "2.46-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 05 Mar 2026 12:26:02 +0100" }, { "cves": [], "log": [ "", " * Fix PR demangler/106641, taken from the trunk.", " * Drop build dependency on quilt. Closes: #1129263.", " * Update libgprofng symbols file.", "" ], "package": "binutils", "version": "2.46-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 05 Mar 2026 12:22:39 +0100" } ], "notes": "For a newly added package only the three most recent changelog entries are shown.", "is_version_downgrade": false }, { "name": "libctf0:riscv64", "from_version": { "source_package_name": null, "source_package_version": null, "version": null }, "to_version": { "source_package_name": "binutils", "source_package_version": "2.46-3ubuntu2", "version": "2.46-3ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild for glibc 2.46.", "" ], "package": "binutils", "version": "2.46-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 15 Mar 2026 02:33:01 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "binutils", "version": "2.46-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 05 Mar 2026 12:26:02 +0100" }, { "cves": [], "log": [ "", " * Fix PR demangler/106641, taken from the trunk.", " * Drop build dependency on quilt. Closes: #1129263.", " * Update libgprofng symbols file.", "" ], "package": "binutils", "version": "2.46-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 05 Mar 2026 12:22:39 +0100" } ], "notes": "For a newly added package only the three most recent changelog entries are shown.", "is_version_downgrade": false }, { "name": "libgpgme45:riscv64", "from_version": { "source_package_name": "gpgme1.0", "source_package_version": "1.24.2-3ubuntu2", "version": null }, "to_version": { "source_package_name": "gpgme1.0", "source_package_version": "2.0.1-2build1", "version": "2.0.1-2build1" }, "cves": [ { "cve": "CVE-2024-3094", "url": "https://ubuntu.com/security/CVE-2024-3094", "cve_description": "Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code. This results in a modified liblzma library that can be used by any software linked against this library, intercepting and modifying the data interaction with this library.", "cve_priority": "critical", "cve_public_date": "2024-03-29 17:15:00 UTC" } ], "launchpad_bugs_fixed": [ 2112007, 1872474, 1872474, 1872474, 1872474, 1872474, 1872474, 1872474, 1808109, 1762384, 1647204, 1647204 ], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild with Python 3.14 as supported version", "" ], "package": "gpgme1.0", "version": "1.24.2-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Graham Inggs ", "date": "Sat, 18 Oct 2025 13:19:01 +0000" }, { "cves": [], "log": [ "", " * Merge with Debian unstable (LP: #2112007). Remaining changes:", " - d/rules: drop qt6 dependencies on i386", " * Dropped changes, as they are no longer needed:", " - d/rules: ignore test results for a first build (armhf, i386)", "" ], "package": "gpgme1.0", "version": "1.24.2-3ubuntu1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 2112007 ], "author": "Ural Tunaboyu ", "date": "Fri, 13 Jun 2025 14:32:24 -0700" }, { "cves": [], "log": [ "", " * No-change rebuild with Python 3.13 only", "" ], "package": "gpgme1.0", "version": "1.24.2-1ubuntu2", "urgency": "medium", "distributions": "plucky", "launchpad_bugs_fixed": [], "author": "Graham Inggs ", "date": "Tue, 04 Mar 2025 19:54:37 +0000" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - drop qt6 dependencies on i386", " - Ignore test results for a first build (armhf, i386).", "" ], "package": "gpgme1.0", "version": "1.24.2-1ubuntu1", "urgency": "low", "distributions": "plucky", "launchpad_bugs_fixed": [], "author": "Gianfranco Costamagna ", "date": "Mon, 17 Feb 2025 15:36:03 +0100" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - drop qt6 dependencies on i386", " - Ignore test results for a first build (armhf, i386).", "" ], "package": "gpgme1.0", "version": "1.24.1-4ubuntu1", "urgency": "low", "distributions": "plucky", "launchpad_bugs_fixed": [], "author": "Gianfranco Costamagna ", "date": "Thu, 06 Feb 2025 14:45:46 +0100" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - drop qt6 dependencies on i386", " - Ignore test results for a first build (armhf, i386).", "" ], "package": "gpgme1.0", "version": "1.24.1-3ubuntu1", "urgency": "low", "distributions": "plucky", "launchpad_bugs_fixed": [], "author": "Gianfranco Costamagna ", "date": "Mon, 03 Feb 2025 10:17:08 +0100" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - drop qt6 dependencies on i386", " - Ignore test results for a first build (armhf, i386).", "" ], "package": "gpgme1.0", "version": "1.24.1-2ubuntu1", "urgency": "low", "distributions": "plucky", "launchpad_bugs_fixed": [], "author": "Gianfranco Costamagna ", "date": "Tue, 24 Dec 2024 15:48:06 +0100" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - drop qt6 dependencies on i386", " - Ignore test results for a first build (armhf, i386).", "" ], "package": "gpgme1.0", "version": "1.24.0-2ubuntu1", "urgency": "low", "distributions": "plucky", "launchpad_bugs_fixed": [], "author": "Gianfranco Costamagna ", "date": "Thu, 14 Nov 2024 13:15:31 +0100" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - drop qt6 dependencies on i386", " - Ignore test results for a first build (armhf, i386).", "" ], "package": "gpgme1.0", "version": "1.23.2-5ubuntu4", "urgency": "low", "distributions": "plucky", "launchpad_bugs_fixed": [], "author": "Gianfranco Costamagna ", "date": "Wed, 30 Oct 2024 09:58:49 +0100" }, { "cves": [ { "cve": "CVE-2024-3094", "url": "https://ubuntu.com/security/CVE-2024-3094", "cve_description": "Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code. This results in a modified liblzma library that can be used by any software linked against this library, intercepting and modifying the data interaction with this library.", "cve_priority": "critical", "cve_public_date": "2024-03-29 17:15:00 UTC" } ], "log": [ "", " * No-change rebuild for CVE-2024-3094", "" ], "package": "gpgme1.0", "version": "1.18.0-4.1ubuntu4", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [], "author": "Steve Langasek ", "date": "Sun, 31 Mar 2024 01:14:47 +0000" }, { "cves": [], "log": [ "", " * No-change rebuild against libqt5core5t64", "" ], "package": "gpgme1.0", "version": "1.18.0-4.1ubuntu3", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [], "author": "Steve Langasek ", "date": "Fri, 15 Mar 2024 04:30:58 +0000" }, { "cves": [], "log": [ "", " * Ignore test results for a first build (armhf, i386).", "" ], "package": "gpgme1.0", "version": "1.18.0-4.1ubuntu2", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 12 Mar 2024 17:00:23 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Enable gpgme-json LP #1872474", " - Add integration with Google Chrome.", " - Reinstate build-dependency on dh-exec", "" ], "package": "gpgme1.0", "version": "1.18.0-4.1ubuntu1", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 07 Mar 2024 11:13:09 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Enable gpgme-json LP: #1872474", " - Add integration with Google Chrome.", " - Reinstate build-dependency on dh-exec", "" ], "package": "gpgme1.0", "version": "1.18.0-4ubuntu1", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 1872474 ], "author": "Matthias Klose ", "date": "Tue, 07 Nov 2023 09:21:11 +0100" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - Enable gpgme-json LP: #1872474", " - Add integration with Google Chrome.", " - Reinstate build-dependency on dh-exec", "" ], "package": "gpgme1.0", "version": "1.18.0-3ubuntu1", "urgency": "low", "distributions": "lunar", "launchpad_bugs_fixed": [ 1872474 ], "author": "Gianfranco Costamagna ", "date": "Wed, 23 Nov 2022 14:51:00 +0100" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - Enable gpgme-json LP: #1872474", " - Add integration with Google Chrome.", " - Reinstate build-dependency on dh-exec", "" ], "package": "gpgme1.0", "version": "1.17.1-4.1ubuntu1", "urgency": "low", "distributions": "kinetic", "launchpad_bugs_fixed": [ 1872474 ], "author": "Gianfranco Costamagna ", "date": "Mon, 12 Sep 2022 14:04:44 +0200" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - Enable gpgme-json LP: #1872474", " - Add integration with Google Chrome.", " - Reinstate build-dependency on dh-exec", " - 0007-lang-python-tests-Fix-FTBFS-caused-by-missing-PYTHON.patch", "" ], "package": "gpgme1.0", "version": "1.17.1-4ubuntu1", "urgency": "low", "distributions": "kinetic", "launchpad_bugs_fixed": [ 1872474 ], "author": "Gianfranco Costamagna ", "date": "Mon, 25 Jul 2022 11:12:29 +0200" }, { "cves": [], "log": [ "", " * d/patches:", " + 0007-lang-python-tests-Fix-FTBFS-caused-by-missing-PYTHON.patch", "" ], "package": "gpgme1.0", "version": "1.16.0-1.2ubuntu4", "urgency": "medium", "distributions": "jammy", "launchpad_bugs_fixed": [], "author": "Alexandre Ghiti ", "date": "Thu, 31 Mar 2022 13:59:19 +0200" }, { "cves": [], "log": [ "", " * No-change rebuild with Python 3.10 only.", "" ], "package": "gpgme1.0", "version": "1.16.0-1.2ubuntu3", "urgency": "medium", "distributions": "jammy", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 17 Mar 2022 15:06:25 +0100" }, { "cves": [], "log": [ "", " * Comment out 0006-PIC-and-shared.patch, not needed anymore.", "" ], "package": "gpgme1.0", "version": "1.16.0-1.2ubuntu2", "urgency": "medium", "distributions": "jammy", "launchpad_bugs_fixed": [], "author": "Gianfranco Costamagna ", "date": "Thu, 27 Jan 2022 10:53:06 +0100" }, { "cves": [], "log": [ "", " * Merge from Debian unstable, remaining changes:", " + debian/patches/0006-PIC-and-shared.patch: Libs are -fPIC and -shared.", " (Closes: #870383)", " + Enable gpgme-json LP: #1872474", " + Add integration with Google Chrome.", " + d/patches/0001-core-Support-closefrom-also-for-glibc.patch: backport", " support for using closefrom from glibc.", " * Reinstate build-dependency on dh-exec", "" ], "package": "gpgme1.0", "version": "1.16.0-1.2ubuntu1", "urgency": "medium", "distributions": "jammy", "launchpad_bugs_fixed": [ 1872474 ], "author": "Graham Inggs ", "date": "Fri, 10 Dec 2021 12:38:30 +0000" }, { "cves": [], "log": [ "", " * No-change rebuild with fixed py3versions", "" ], "package": "gpgme1.0", "version": "1.14.0-1ubuntu6", "urgency": "medium", "distributions": "jammy", "launchpad_bugs_fixed": [], "author": "Graham Inggs ", "date": "Sat, 06 Nov 2021 08:28:18 +0000" }, { "cves": [], "log": [ "", " * No-change rebuild to add python3.10.", "" ], "package": "gpgme1.0", "version": "1.14.0-1ubuntu5", "urgency": "medium", "distributions": "jammy", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sat, 16 Oct 2021 06:56:23 +0000" }, { "cves": [], "log": [ "", " * d/patches/0001-core-Support-closefrom-also-for-glibc.patch: backport", " support for using closefrom from glibc.", "" ], "package": "gpgme1.0", "version": "1.14.0-1ubuntu4", "urgency": "medium", "distributions": "impish", "launchpad_bugs_fixed": [], "author": "Michael Hudson-Doyle ", "date": "Tue, 10 Aug 2021 16:36:16 +1200" }, { "cves": [], "log": [ "", " * No-change rebuild to drop python3.8 extensions.", "" ], "package": "gpgme1.0", "version": "1.14.0-1ubuntu3", "urgency": "medium", "distributions": "hirsute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Mon, 07 Dec 2020 18:45:47 +0100" }, { "cves": [], "log": [ "", " * No-change rebuild to build with python3.9 as supported", "" ], "package": "gpgme1.0", "version": "1.14.0-1ubuntu2", "urgency": "medium", "distributions": "hirsute", "launchpad_bugs_fixed": [], "author": "Steve Langasek ", "date": "Tue, 27 Oct 2020 18:32:15 +0000" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - debian/patches/0006-PIC-and-shared.patch: Libs are -fPIC and -shared.", " (Closes: #870383)", " - Enable gpgme-json LP: #1872474", " - Add integration with Google Chrome.", "" ], "package": "gpgme1.0", "version": "1.14.0-1ubuntu1", "urgency": "low", "distributions": "groovy", "launchpad_bugs_fixed": [ 1872474 ], "author": "Gianfranco Costamagna ", "date": "Tue, 11 Aug 2020 12:32:10 +0200" }, { "cves": [], "log": [ "", " * Enable gpgme-json LP: #1872474", " * Add integration with Google Chrome.", "" ], "package": "gpgme1.0", "version": "1.13.1-9ubuntu2", "urgency": "medium", "distributions": "groovy", "launchpad_bugs_fixed": [ 1872474 ], "author": "Dimitri John Ledkov ", "date": "Sat, 18 Jul 2020 21:46:38 +0100" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - debian/patches/0006-PIC-and-shared.patch: Libs are -fPIC and -shared.", " (Closes: #870383)", "" ], "package": "gpgme1.0", "version": "1.13.1-9ubuntu1", "urgency": "low", "distributions": "groovy", "launchpad_bugs_fixed": [], "author": "Gianfranco Costamagna ", "date": "Thu, 02 Jul 2020 14:47:27 +0200" }, { "cves": [], "log": [ "", " * Fix test sadness on 32bit systems due to bad bash syntax.", "" ], "package": "gpgme1.0", "version": "1.13.1-8ubuntu2", "urgency": "medium", "distributions": "groovy", "launchpad_bugs_fixed": [], "author": "Gianfranco Costamagna ", "date": "Fri, 26 Jun 2020 23:44:40 +0200" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - debian/patches/0006-PIC-and-shared.patch: Libs are -fPIC and -shared.", " (Closes: #870383)", " * Drop changes, not useful anymore, since kf5-kdepim-apps-libs seems to be", " not using that link anymore:", " - Add in libgpgme-dev a libgpgme-pthread.so pointing to libgpgme.so, this", " will fix the build failures of kf5-kdepim-apps-libs when built against", " this gpgme package.", "" ], "package": "gpgme1.0", "version": "1.13.1-8ubuntu1", "urgency": "low", "distributions": "groovy", "launchpad_bugs_fixed": [], "author": "Gianfranco Costamagna ", "date": "Fri, 26 Jun 2020 10:16:00 +0200" }, { "cves": [], "log": [ "", " * Don't fail a test that is supposed to fail on 32bit systems", "" ], "package": "gpgme1.0", "version": "1.13.1-7ubuntu2", "urgency": "medium", "distributions": "focal", "launchpad_bugs_fixed": [], "author": "Gianfranco Costamagna ", "date": "Thu, 12 Mar 2020 17:52:51 +0100" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - debian/patches/0006-PIC-and-shared.patch: Libs are -fPIC and -shared.", " - Add in libgpgme-dev a libgpgme-pthread.so pointing to libgpgme.so, this", " will fix the build failures of kf5-kdepim-apps-libs when built against", " this gpgme package.", "" ], "package": "gpgme1.0", "version": "1.13.1-7ubuntu1", "urgency": "medium", "distributions": "focal", "launchpad_bugs_fixed": [], "author": "Gianfranco Costamagna ", "date": "Mon, 09 Mar 2020 21:24:25 +0100" }, { "cves": [], "log": [ "", " * No-change rebuild to drop python3.7.", "" ], "package": "gpgme1.0", "version": "1.13.1-6ubuntu2", "urgency": "medium", "distributions": "focal", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 18 Feb 2020 10:32:46 +0100" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - debian/patches/0006-PIC-and-shared.patch: Libs are -fPIC and -shared.", " - Add in libgpgme-dev a libgpgme-pthread.so pointing to libgpgme.so, this", " will fix the build failures of kf5-kdepim-apps-libs when built against", " this gpgme package.", " * Dropped changes, no longer needed:", " - Bump libgpg-error-dev build dependency to 1.28 for new gpgrt API", " - debian/patch/0007-Python-Versions.patch: won't work now that python2", " support is dropped, and doesn't appear to be needed.", " * Dropped changes, superseded in Debian:", " - Update test dependency for python->python2 move", "" ], "package": "gpgme1.0", "version": "1.13.1-6ubuntu1", "urgency": "low", "distributions": "focal", "launchpad_bugs_fixed": [], "author": "Steve Langasek ", "date": "Thu, 13 Feb 2020 16:43:13 -0800" }, { "cves": [], "log": [ "", " * Update test dependency for python->python2 move", "" ], "package": "gpgme1.0", "version": "1.12.0-6ubuntu3", "urgency": "medium", "distributions": "focal", "launchpad_bugs_fixed": [], "author": "Gianfranco Costamagna ", "date": "Thu, 24 Oct 2019 11:31:47 +0200" }, { "cves": [], "log": [ "", " * No-change rebuild to build with python3.8.", "" ], "package": "gpgme1.0", "version": "1.12.0-6ubuntu2", "urgency": "medium", "distributions": "focal", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 18 Oct 2019 18:07:19 +0000" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - debian/patch/0007-Python-Versions.patch: Use py{,3}versions detection.", " - debian/patches/0006-PIC-and-shared.patch: Libs are -fPIC and -shared.", " - Add in libgpgme-dev a libgpgme-pthread.so pointing to libgpgme.so, this", " will fix the build failures of kf5-kdepim-apps-libs when built against this", " gpgme package.", " - Bump libgpg-error-dev build dependency to 1.28 for new gpgrt API", "" ], "package": "gpgme1.0", "version": "1.12.0-6ubuntu1", "urgency": "low", "distributions": "eoan", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Tue, 23 Apr 2019 10:05:42 +0200" }, { "cves": [], "log": [ "", " * Merge from Debian unstable (LP: #1808109). Remaining changes:", " - debian/patch/0007-Python-Versions.patch: Use py{,3}versions detection.", " - debian/patches/0006-PIC-and-shared.patch: Libs are -fPIC and -shared.", " - Add in libgpgme-dev a libgpgme-pthread.so pointing to libgpgme.so, this", " will fix the build failures of kf5-kdepim-apps-libs when built against this", " gpgme package.", " - Bump libgpg-error-dev build dependency to 1.28 for new gpgrt API", " - Drop versioned python tests - 3.5 is not shipped anymore; and it", " makes transitions harder for dubious benefits.", " * qt-Use-tofu-conflict-test-keys-without-expiry.patch: Cherry pick", " upstream fix for expiry dates in test suite.", "" ], "package": "gpgme1.0", "version": "1.12.0-4ubuntu1", "urgency": "low", "distributions": "disco", "launchpad_bugs_fixed": [ 1808109 ], "author": "Julian Andres Klode ", "date": "Mon, 14 Jan 2019 17:36:53 +0100" }, { "cves": [], "log": [ "", " * No-change rebuild to build without python3.6 support.", "" ], "package": "gpgme1.0", "version": "1.11.1-1ubuntu4", "urgency": "medium", "distributions": "disco", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sat, 03 Nov 2018 12:07:06 +0000" }, { "cves": [], "log": [ "", " * Fix Build-Depends to use python3-all-dev instead of python3-dev", "" ], "package": "gpgme1.0", "version": "1.11.1-1ubuntu3", "urgency": "medium", "distributions": "cosmic", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Tue, 14 Aug 2018 16:32:44 +0200" }, { "cves": [], "log": [ "", " * Mak debian/libgpgme-dev.links executable, it uses dh-exec (LP: #1762384)", "" ], "package": "gpgme1.0", "version": "1.11.1-1ubuntu2", "urgency": "medium", "distributions": "cosmic", "launchpad_bugs_fixed": [ 1762384 ], "author": "Julian Andres Klode ", "date": "Tue, 14 Aug 2018 14:52:40 +0200" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - debian/patch/0007-Python-Versions.patch: Use py{,3}versions detection.", " - debian/patches/0006-PIC-and-shared.patch: Libs are -fPIC and -shared.", " - Add in libgpgme-dev a libgpgme-pthread.so pointing to libgpgme.so, this", " will fix the build failures of kf5-kdepim-apps-libs when built against this", " gpgme package.", " * Bump libgpg-error-dev build dependency to 1.28 for new gpgrt API", " * Drop versioned python tests - 3.5 is not shipped anymore; and it", " makes transitions harder for dubious benefits.", "" ], "package": "gpgme1.0", "version": "1.11.1-1ubuntu1", "urgency": "low", "distributions": "cosmic", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Mon, 07 May 2018 15:52:27 +0200" }, { "cves": [], "log": [ "", " * Merge from Debian unstable. Remaining changes:", " - debian/patch/0007-Python-Versions.patch: Use py{,3}versions detection.", " - debian/patches/0006-PIC-and-shared.patch: Libs are -fPIC and -shared.", " - Add in libgpgme-dev a libgpgme-pthread.so pointing to libgpgme.so, this ", " will fix the build failures of kf5-kdepim-apps-libs when built against this ", " gpgme package.", "" ], "package": "gpgme1.0", "version": "1.10.0-1ubuntu1", "urgency": "low", "distributions": "bionic", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Mon, 15 Jan 2018 14:22:11 +0100" }, { "cves": [], "log": [ "", " * No change rebuild to drop Python 3.5 support.", "" ], "package": "gpgme1.0", "version": "1.8.0-3ubuntu5", "urgency": "medium", "distributions": "artful", "launchpad_bugs_fixed": [], "author": "Michael Hudson-Doyle ", "date": "Fri, 04 Aug 2017 18:48:34 +1200" }, { "cves": [], "log": [ "", " * debian/patch/0007-Python-Versions.patch: Use py{,3}versions detection.", "" ], "package": "gpgme1.0", "version": "1.8.0-3ubuntu4", "urgency": "medium", "distributions": "artful", "launchpad_bugs_fixed": [], "author": "Adam Conrad ", "date": "Fri, 12 May 2017 03:54:43 -0600" }, { "cves": [], "log": [ "", " * debian/patch/0007-Python-Versions.patch: Use py{,3}versions detection.", " * debian/patches/0006-PIC-and-shared.patch: Libs are -fPIC and -shared.", " * debian/rules: Stop explicitly setting LDFLAGS, this messes with PIE.", " * debian/rules: Stop disabling PIE, the above CFLAGS changes should do.", "" ], "package": "gpgme1.0", "version": "1.8.0-3ubuntu3", "urgency": "medium", "distributions": "artful", "launchpad_bugs_fixed": [], "author": "Adam Conrad ", "date": "Fri, 12 May 2017 01:22:23 -0600" }, { "cves": [], "log": [ "", " * Add in libgpgme-dev a libgpgme-pthread.so pointing to libgpgme.so, this", " will fix the build failures of kf5-kdepim-apps-libs when built against this", " gpgme package.", " * Set LDFLAGS=-Wl,-z,relro in debian/rules, this avoids passing", " \"-Bsymbolic-functions\" which seems to be the cause of FTBFS'es for some", " architectures.", " * Add 0005-tests-Reduce-iterations-threads.patch, this fixes another cause of", " FTBFS'es on some architectures.", " * Previous two changes fix (LP: #1647204)", " * Thank you to Rik Mills for his help fixing the above problems.", "" ], "package": "gpgme1.0", "version": "1.8.0-3ubuntu2", "urgency": "medium", "distributions": "zesty", "launchpad_bugs_fixed": [ 1647204 ], "author": "José Manuel Santamaría Lema ", "date": "Sat, 18 Feb 2017 22:22:02 +0100" }, { "cves": [], "log": [ "", " [ José Manuel Santamaría Lema ]", " * Pass '-fPIC' to gcc, otherwise this package will fail to build on Ubuntu", " with this error:", " /usr/include/*/qt5/QtCore/qglobal.h:1087:4: error:", " #error \"You must build your code with position independent code if Qt was", " built with -reduce-relocations. \" \"Compile your code with -fPIC (-fPIE is", " not enough).\"", "", " [ Rik Mills ]", " * Apply upstream patch to fix build hang on launchpad-buildd and speed up", " tests on low entropy systems. (LP: #1647204)", "", " [ Andre Hinecke ]", " * Apply another upstream patch to fix build hang on launchpad-buildd if", " gpg is gpg2.", "", " [ Barry Warsaw ]", " * d/control: update-maintainer", "" ], "package": "gpgme1.0", "version": "1.8.0-3ubuntu1", "urgency": "medium", "distributions": "zesty", "launchpad_bugs_fixed": [ 1647204 ], "author": "Rik Mills ", "date": "Mon, 30 Jan 2017 09:08:10 +0000" } ], "notes": "libgpgme45:riscv64 version '2.0.1-2build1' (source package gpgme1.0 version '2.0.1-2build1') was added. libgpgme45:riscv64 version '2.0.1-2build1' has the same source package name, gpgme1.0, as removed package libgpgme11t64:riscv64. As such we can use the source package version of the removed package, '1.24.2-3ubuntu2', as the starting point in our changelog diff. Kernel packages are an example of where the binary package name changes for the same source package. Using the removed package source package version as our starting point means we can still get meaningful changelog diffs even for what appears to be a new package.", "is_version_downgrade": false }, { "name": "libgprofng0:riscv64", "from_version": { "source_package_name": null, "source_package_version": null, "version": null }, "to_version": { "source_package_name": "binutils", "source_package_version": "2.46-3ubuntu2", "version": "2.46-3ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild for glibc 2.46.", "" ], "package": "binutils", "version": "2.46-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 15 Mar 2026 02:33:01 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "binutils", "version": "2.46-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 05 Mar 2026 12:26:02 +0100" }, { "cves": [], "log": [ "", " * Fix PR demangler/106641, taken from the trunk.", " * Drop build dependency on quilt. Closes: #1129263.", " * Update libgprofng symbols file.", "" ], "package": "binutils", "version": "2.46-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 05 Mar 2026 12:22:39 +0100" } ], "notes": "For a newly added package only the three most recent changelog entries are shown.", "is_version_downgrade": false }, { "name": "libnvme1t64:riscv64", "from_version": { "source_package_name": "libnvme", "source_package_version": "1.16.1-2", "version": null }, "to_version": { "source_package_name": "libnvme", "source_package_version": "1.16.1-4", "version": "1.16.1-4" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Also marking library dev package multi-arch same.", "" ], "package": "libnvme", "version": "1.16.1-4", "urgency": "medium", "distributions": "sid", "launchpad_bugs_fixed": [], "author": "Daniel Baumann ", "date": "Sun, 15 Feb 2026 09:00:22 +0100" }, { "cves": [], "log": [ "", " * Updating to standards version 4.7.3.", " * Wrap and sorting debian files.", " * Sorting fields in control.", " * Marking library package multi-arch same.", " * Updating year in copyright for 2026.", "" ], "package": "libnvme", "version": "1.16.1-3", "urgency": "medium", "distributions": "sid", "launchpad_bugs_fixed": [], "author": "Daniel Baumann ", "date": "Sun, 08 Feb 2026 08:10:16 +0100" } ], "notes": "libnvme1t64:riscv64 version '1.16.1-4' (source package libnvme version '1.16.1-4') was added. libnvme1t64:riscv64 version '1.16.1-4' has the same source package name, libnvme, as removed package libnvme1t64. As such we can use the source package version of the removed package, '1.16.1-2', as the starting point in our changelog diff. Kernel packages are an example of where the binary package name changes for the same source package. Using the removed package source package version as our starting point means we can still get meaningful changelog diffs even for what appears to be a new package.", "is_version_downgrade": false }, { "name": "libsframe3:riscv64", "from_version": { "source_package_name": null, "source_package_version": null, "version": null }, "to_version": { "source_package_name": "binutils", "source_package_version": "2.46-3ubuntu2", "version": "2.46-3ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * No-change rebuild for glibc 2.46.", "" ], "package": "binutils", "version": "2.46-3ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 15 Mar 2026 02:33:01 +0100" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "binutils", "version": "2.46-3ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 05 Mar 2026 12:26:02 +0100" }, { "cves": [], "log": [ "", " * Fix PR demangler/106641, taken from the trunk.", " * Drop build dependency on quilt. Closes: #1129263.", " * Update libgprofng symbols file.", "" ], "package": "binutils", "version": "2.46-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 05 Mar 2026 12:22:39 +0100" } ], "notes": "For a newly added package only the three most recent changelog entries are shown.", "is_version_downgrade": false }, { "name": "linux-headers-7.0.0-7-generic", "from_version": { "source_package_name": "linux-riscv", "source_package_version": "6.17.0-5.5.1", "version": null }, "to_version": { "source_package_name": "linux-riscv", "source_package_version": "7.0.0-7.7.1", "version": "7.0.0-7.7.1" }, "cves": [ { "cve": "CVE-2023-31248", "url": "https://ubuntu.com/security/CVE-2023-31248", "cve_description": "Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace", "cve_priority": "high", "cve_public_date": "2023-07-05 19:15:00 UTC" }, { "cve": "CVE-2023-35001", "url": "https://ubuntu.com/security/CVE-2023-35001", "cve_description": "Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace", "cve_priority": "high", "cve_public_date": "2023-07-05 19:15:00 UTC" }, { "cve": "CVE-2023-2640", "url": "https://ubuntu.com/security/CVE-2023-2640", "cve_description": "On Ubuntu kernels carrying both c914c0e27eb0 and \"UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs\", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks.", "cve_priority": "high", "cve_public_date": "2023-07-26 02:15:00 UTC" }, { "cve": "CVE-2023-32629", "url": "https://ubuntu.com/security/CVE-2023-32629", "cve_description": "Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels", "cve_priority": "high", "cve_public_date": "2023-07-26 02:15:00 UTC" }, { "cve": "CVE-2023-2612", "url": "https://ubuntu.com/security/CVE-2023-2612", "cve_description": "Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when handling inode locking in some situations. A local attacker could use this to cause a denial of service (kernel deadlock).", "cve_priority": "medium", "cve_public_date": "2023-05-31 00:15:00 UTC" }, { "cve": "CVE-2023-0179", "url": "https://ubuntu.com/security/CVE-2023-0179", "cve_description": "A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.", "cve_priority": "high", "cve_public_date": "2023-03-27 22:15:00 UTC" }, { "cve": "CVE-2022-25636", "url": "https://ubuntu.com/security/CVE-2022-25636", "cve_description": "net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nf_tables_offload.", "cve_priority": "high", "cve_public_date": "2022-02-24 15:15:00 UTC" }, { "cve": "CVE-2021-4155", "url": "https://ubuntu.com/security/CVE-2021-4155", "cve_description": "A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS filesystem otherwise not accessible to them.", "cve_priority": "medium", "cve_public_date": "2022-08-24 16:15:00 UTC" }, { "cve": "CVE-2022-0185", "url": "https://ubuntu.com/security/CVE-2022-0185", "cve_description": "A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.", "cve_priority": "high", "cve_public_date": "2022-02-11 18:15:00 UTC" }, { "cve": "CVE-2020-26541", "url": "https://ubuntu.com/security/CVE-2020-26541", "cve_description": "The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.", "cve_priority": "medium", "cve_public_date": "2020-10-02 19:15:00 UTC" }, { "cve": "CVE-2021-3492", "url": "https://ubuntu.com/security/CVE-2021-3492", "cve_description": "Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could use this to cause a denial of service (kernel memory exhaustion) or gain privileges via executing arbitrary code. AKA ZDI-CAN-13562.", "cve_priority": "high", "cve_public_date": "2021-04-17 05:15:00 UTC" }, { "cve": "CVE-2021-1052", "url": "https://ubuntu.com/security/CVE-2021-1052", "cve_description": "NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which user-mode clients can access legacy privileged APIs, which may lead to denial of service, escalation of privileges, and information disclosure.", "cve_priority": "medium", "cve_public_date": "2021-01-08 01:15:00 UTC" }, { "cve": "CVE-2021-1053", "url": "https://ubuntu.com/security/CVE-2021-1053", "cve_description": "NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which improper validation of a user pointer may lead to denial of service.", "cve_priority": "medium", "cve_public_date": "2021-01-08 01:15:00 UTC" }, { "cve": "CVE-2020-16119", "url": "https://ubuntu.com/security/CVE-2020-16119", "cve_description": "Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccps_hc_tx_ccid object as a listener after being released. Fixed in Ubuntu Linux kernel 5.4.0-51.56, 5.3.0-68.63, 4.15.0-121.123, 4.4.0-193.224, 3.13.0.182.191 and 3.2.0-149.196.", "cve_priority": "high", "cve_public_date": "2021-01-14 01:15:00 UTC" }, { "cve": "CVE-2020-11935", "url": "https://ubuntu.com/security/CVE-2020-11935", "cve_description": "It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. A local attacker could use this vulnerability to cause a denial of service attack.", "cve_priority": "medium", "cve_public_date": "2023-04-07 02:15:00 UTC" }, { "cve": "CVE-2019-16089", "url": "https://ubuntu.com/security/CVE-2019-16089", "cve_description": "An issue was discovered in the Linux kernel through 5.2.13. nbd_genl_status in drivers/block/nbd.c does not check the nla_nest_start_noflag return value.", "cve_priority": "low", "cve_public_date": "2019-09-06 23:15:00 UTC" }, { "cve": "CVE-2018-6559", "url": "https://ubuntu.com/security/CVE-2018-6559", "cve_description": "The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally be able to access via an overlayfs mount inside of a user namespace.", "cve_priority": "low", "cve_public_date": "2018-10-26 17:29:00 UTC" }, { "cve": "CVE-2019-14901", "url": "https://ubuntu.com/security/CVE-2019-14901", "cve_description": "A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a system crash, resulting in a denial of service, or execute arbitrary code. The highest threat with this vulnerability is with the availability of the system. If code execution occurs, the code will run with the permissions of root. This will affect both confidentiality and integrity of files on the system.", "cve_priority": "medium", "cve_public_date": "2019-11-29 15:15:00 UTC" }, { "cve": "CVE-2019-14896", "url": "https://ubuntu.com/security/CVE-2019-14896", "cve_description": "A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called after a STA connects to an AP.", "cve_priority": "medium", "cve_public_date": "2019-11-27 09:15:00 UTC" }, { "cve": "CVE-2019-14897", "url": "https://ubuntu.com/security/CVE-2019-14897", "cve_description": "A stack-based buffer overflow was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. An attacker is able to cause a denial of service (system crash) or, possibly execute arbitrary code, when a STA works in IBSS mode (allows connecting stations together without the use of an AP) and connects to another STA.", "cve_priority": "medium", "cve_public_date": "2019-11-29 15:15:00 UTC" }, { "cve": "CVE-2019-14895", "url": "https://ubuntu.com/security/CVE-2019-14895", "cve_description": "A heap-based buffer overflow was discovered in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The flaw could occur when the station attempts a connection negotiation during the handling of the remote devices country settings. This could allow the remote device to cause a denial of service (system crash) or possibly execute arbitrary code.", "cve_priority": "medium", "cve_public_date": "2019-11-29 14:15:00 UTC" }, { "cve": "CVE-2019-19050", "url": "https://ubuntu.com/security/CVE-2019-19050", "cve_description": "A memory leak in the crypto_reportstat() function in crypto/crypto_user_stat.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering crypto_reportstat_alg() failures, aka CID-c03b04dcdba1.", "cve_priority": "medium", "cve_public_date": "2019-11-18 06:15:00 UTC" }, { "cve": "CVE-2019-15793", "url": "https://ubuntu.com/security/CVE-2019-15793", "cve_description": "In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, several locations which shift ids translate user/group ids before performing operations in the lower filesystem were translating them into init_user_ns, whereas they should have been translated into the s_user_ns for the lower filesystem. This resulted in using ids other than the intended ones in the lower fs, which likely did not map into the shifts s_user_ns. A local attacker could use this to possibly bypass discretionary access control permissions.", "cve_priority": "medium", "cve_public_date": "2020-04-24 00:15:00 UTC" }, { "cve": "CVE-2019-15792", "url": "https://ubuntu.com/security/CVE-2019-15792", "cve_description": "In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() calls fdget(oldfd), then without further checks passes the resulting file* into shiftfs_real_fdget(), which casts file->private_data, a void* that points to a filesystem-dependent type, to a \"struct shiftfs_file_info *\". As the private_data is not required to be a pointer, an attacker can use this to cause a denial of service or possibly execute arbitrary code.", "cve_priority": "medium", "cve_public_date": "2020-04-24 00:15:00 UTC" }, { "cve": "CVE-2019-15791", "url": "https://ubuntu.com/security/CVE-2019-15791", "cve_description": "In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() installs an fd referencing a file from the lower filesystem without taking an additional reference to that file. After the btrfs ioctl completes this fd is closed, which then puts a reference to that file, leading to a refcount underflow.", "cve_priority": "medium", "cve_public_date": "2020-04-24 00:15:00 UTC" }, { "cve": "CVE-2019-15794", "url": "https://ubuntu.com/security/CVE-2019-15794", "cve_description": "Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma->vm_file in their mmap handlers. On error the original value is not restored, and the reference is put for the file to which vm_file points. On upstream kernels this is not an issue, as no callers dereference vm_file following after call_mmap() returns an error. However, the aufs patchs change mmap_region() to replace the fput() using a local variable with vma_fput(), which will fput() vm_file, leading to a refcount underflow.", "cve_priority": "medium", "cve_public_date": "2020-04-24 00:15:00 UTC" }, { "cve": "CVE-2019-17666", "url": "https://ubuntu.com/security/CVE-2019-17666", "cve_description": "rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow.", "cve_priority": "medium", "cve_public_date": "2019-10-17 02:15:00 UTC" }, { "cve": "CVE-2019-17056", "url": "https://ubuntu.com/security/CVE-2019-17056", "cve_description": "llcp_sock_create in net/nfc/llcp_sock.c in the AF_NFC network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176.", "cve_priority": "medium", "cve_public_date": "2019-10-01 14:15:00 UTC" }, { "cve": "CVE-2019-17055", "url": "https://ubuntu.com/security/CVE-2019-17055", "cve_description": "base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21.", "cve_priority": "medium", "cve_public_date": "2019-10-01 14:15:00 UTC" }, { "cve": "CVE-2019-17054", "url": "https://ubuntu.com/security/CVE-2019-17054", "cve_description": "atalk_create in net/appletalk/ddp.c in the AF_APPLETALK network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-6cc03e8aa36c.", "cve_priority": "medium", "cve_public_date": "2019-10-01 14:15:00 UTC" }, { "cve": "CVE-2019-17053", "url": "https://ubuntu.com/security/CVE-2019-17053", "cve_description": "ieee802154_create in net/ieee802154/socket.c in the AF_IEEE802154 network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-e69dbd4619e7.", "cve_priority": "medium", "cve_public_date": "2019-10-01 14:15:00 UTC" }, { "cve": "CVE-2019-17052", "url": "https://ubuntu.com/security/CVE-2019-17052", "cve_description": "ax25_create in net/ax25/af_ax25.c in the AF_AX25 network module in the Linux kernel 3.16 through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768.", "cve_priority": "medium", "cve_public_date": "2019-10-01 14:15:00 UTC" }, { "cve": "CVE-2019-15098", "url": "https://ubuntu.com/security/CVE-2019-15098", "cve_description": "drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.", "cve_priority": "medium", "cve_public_date": "2019-08-16 02:15:00 UTC" }, { "cve": "CVE-2019-12614", "url": "https://ubuntu.com/security/CVE-2019-12614", "cve_description": "An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel through 5.1.6. There is an unchecked kstrdup of prop->name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash).", "cve_priority": "low", "cve_public_date": "2019-06-03 22:29:00 UTC" }, { "cve": "CVE-2019-3874", "url": "https://ubuntu.com/security/CVE-2019-3874", "cve_description": "The SCTP socket buffer used by a userspace application is not accounted by the cgroups subsystem. An attacker can use this flaw to cause a denial of service attack. Kernel 3.10.x and 4.18.x branches are believed to be vulnerable.", "cve_priority": "medium", "cve_public_date": "2019-03-25 19:29:00 UTC" }, { "cve": "CVE-2019-9857", "url": "https://ubuntu.com/security/CVE-2019-9857", "cve_description": "In the Linux kernel through 5.0.2, the function inotify_update_existing_watch() in fs/notify/inotify/inotify_user.c neglects to call fsnotify_put_mark() with IN_MASK_CREATE after fsnotify_find_mark(), which will cause a memory leak (aka refcount leak). Finally, this will cause a denial of service.", "cve_priority": "medium", "cve_public_date": "2019-03-21 16:01:00 UTC" }, { "cve": "CVE-2019-8980", "url": "https://ubuntu.com/security/CVE-2019-8980", "cve_description": "A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cause a denial of service (memory consumption) by triggering vfs_read failures.", "cve_priority": "medium", "cve_public_date": "2019-02-21 05:29:00 UTC" }, { "cve": "CVE-2019-3460", "url": "https://ubuntu.com/security/CVE-2019-3460", "cve_description": "A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1.", "cve_priority": "medium", "cve_public_date": "2019-04-11 16:29:00 UTC" }, { "cve": "CVE-2019-3459", "url": "https://ubuntu.com/security/CVE-2019-3459", "cve_description": "A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1.", "cve_priority": "medium", "cve_public_date": "2019-04-11 16:29:00 UTC" }, { "cve": "CVE-2018-6559", "url": "https://ubuntu.com/security/CVE-2018-6559", "cve_description": "The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally be able to access via an overlayfs mount inside of a user namespace.", "cve_priority": "low", "cve_public_date": "2018-10-26 17:29:00 UTC" }, { "cve": "CVE-2018-19407", "url": "https://ubuntu.com/security/CVE-2018-19407", "cve_description": "The vcpu_scan_ioapic function in arch/x86/kvm/x86.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) via crafted system calls that reach a situation where ioapic is uninitialized.", "cve_priority": "medium", "cve_public_date": "2018-11-21 00:29:00 UTC" }, { "cve": "CVE-2018-18955", "url": "https://ubuntu.com/security/CVE-2018-18955", "cve_description": "In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalation because it mishandles nested user namespaces with more than 5 UID or GID ranges. A user who has CAP_SYS_ADMIN in an affected user namespace can bypass access controls on resources outside the namespace, as demonstrated by reading /etc/shadow. This occurs because an ID transformation takes place properly for the namespaced-to-kernel direction but not for the kernel-to-namespaced direction.", "cve_priority": "medium", "cve_public_date": "2018-11-16 20:29:00 UTC" }, { "cve": "CVE-2018-6559", "url": "https://ubuntu.com/security/CVE-2018-6559", "cve_description": "The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally be able to access via an overlayfs mount inside of a user namespace.", "cve_priority": "low", "cve_public_date": "2018-10-26 17:29:00 UTC" }, { "cve": "CVE-2017-5715", "url": "https://ubuntu.com/security/CVE-2017-5715", "cve_description": "Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.", "cve_priority": "high", "cve_public_date": "2018-01-04 13:29:00 UTC" }, { "cve": "CVE-2018-9363", "url": "https://ubuntu.com/security/CVE-2018-9363", "cve_description": "In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-65853588 References: Upstream kernel.", "cve_priority": "medium", "cve_public_date": "2018-11-06 17:29:00 UTC" }, { "cve": "CVE-2018-7755", "url": "https://ubuntu.com/security/CVE-2018-7755", "cve_description": "An issue was discovered in the fd_locked_ioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the FDGETPRM ioctl. An attacker can send the FDGETPRM ioctl and use the obtained kernel pointer to discover the location of kernel code and data and bypass kernel security protections such as KASLR.", "cve_priority": "low", "cve_public_date": "2018-03-08 07:29:00 UTC" }, { "cve": "CVE-2017-5715", "url": "https://ubuntu.com/security/CVE-2017-5715", "cve_description": "Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.", "cve_priority": "high", "cve_public_date": "2018-01-04 13:29:00 UTC" }, { "cve": "CVE-2017-5753", "url": "https://ubuntu.com/security/CVE-2017-5753", "cve_description": "Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.", "cve_priority": "high", "cve_public_date": "2018-01-04 13:29:00 UTC" }, { "cve": "CVE-2017-5754", "url": "https://ubuntu.com/security/CVE-2017-5754", "cve_description": "Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.", "cve_priority": "critical", "cve_public_date": "2018-01-04 13:29:00 UTC" }, { "cve": "CVE-2018-1000026", "url": "https://ubuntu.com/security/CVE-2018-1000026", "cve_description": "Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS: Network card firmware assertion takes card off-line. This attack appear to be exploitable via An attacker on a must pass a very large, specially crafted packet to the bnx2x card. This can be done from an untrusted guest VM..", "cve_priority": "medium", "cve_public_date": "2018-02-09 23:29:00 UTC" }, { "cve": "CVE-2017-5715", "url": "https://ubuntu.com/security/CVE-2017-5715", "cve_description": "Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.", "cve_priority": "high", "cve_public_date": "2018-01-04 13:29:00 UTC" }, { "cve": "CVE-2017-1000405", "url": "https://ubuntu.com/security/CVE-2017-1000405", "cve_description": "The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in the touch_pmd() function inside the THP implementation. touch_pmd() can be reached by get_user_pages(). In such case, the pmd will become dirty. This scenario breaks the new can_follow_write_pmd()'s logic - pmd can become dirty without going through a COW cycle. This bug is not as severe as the original \"Dirty cow\" because an ext4 file (or any other regular file) cannot be mapped using THP. Nevertheless, it does allow us to overwrite read-only huge pages. For example, the zero huge page and sealed shmem files can be overwritten (since their mapping can be populated using THP). Note that after the first write page-fault to the zero page, it will be replaced with a new fresh (and zeroed) thp.", "cve_priority": "high", "cve_public_date": "2017-11-30 22:29:00 UTC" }, { "cve": "CVE-2017-1000251", "url": "https://ubuntu.com/security/CVE-2017-1000251", "cve_description": "The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space.", "cve_priority": "high", "cve_public_date": "2017-09-12 17:29:00 UTC" }, { "cve": "CVE-2014-9900", "url": "https://ubuntu.com/security/CVE-2014-9900", "cve_description": "The ethtool_get_wol function in net/core/ethtool.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not initialize a certain data structure, which allows local users to obtain sensitive information via a crafted application, aka Android internal bug 28803952 and Qualcomm internal bug CR570754.", "cve_priority": "medium", "cve_public_date": "2016-08-06 10:59:00 UTC" }, { "cve": "CVE-2017-0605", "url": "https://ubuntu.com/security/CVE-2017-0605", "cve_description": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none", "cve_priority": "medium", "cve_public_date": "2017-05-12 15:29:00 UTC" } ], "launchpad_bugs_fixed": [ 2125324, 1786013, 2125319, 1786013, 2122310, 2125053, 2124257, 2122554, 2110092, 2121477, 2119713, 2122574, 1786013, 1964335, 1981437, 2122321, 2114963, 2115758, 2121873, 2118499, 2049357, 1786013, 2049182, 1786013, 2046440, 2048859, 1786013, 2048919, 2031412, 2033406, 2039439, 2036587, 2019040, 2037398, 2036968, 2008882, 2021364, 1975592, 2013232, 1967130, 1945989, 2030525, 2002226, 2034061, 2048118, 1786013, 2047807, 1990064, 2040194, 2040192, 2040250, 2040245, 2028253, 2028253, 2032602, 2016908, 2028253, 2042385, 2045562, 2046192, 1786013, 2046060, 2046040, 2035971, 2045492, 2044512, 2038582, 2038584, 2038587, 2042853, 2045593, 2045107, 2044069, 1786013, 2043664, 2043480, 1786013, 2043088, 2042897, 2041852, 2041735, 2040194, 2040192, 2040250, 2040245, 2038567, 2028253, 2028253, 2032602, 2017903, 2028253, 2016908, 2028253, 2040243, 2040147, 1983357, 2039780, 2038899, 2038423, 2037622, 2034546, 1786013, 2034042, 1786013, 2033904, 1786013, 2026833, 2033240, 2029281, 2033025, 2025672, 2032750, 1786013, 2032959, 2032174, 2032767, 2028122, 2032704, 2017980, 2030745, 2029086, 2028779, 2007654, 1786013, 2028746, 2028568, 2028253, 2017903, 2028253, 2016908, 2028253, 1989983, 2028253, 2027953, 2025265, 2022361, 2026689, 2025195, 1786013, 2007654, 2025018, 2024338, 2023966, 1786013, 2023629, 2021949, 2012776, 2018591, 2022886, 2021597, 2021497, 1786013, 2020531, 2020356, 2020330, 2017444, 2011768, 2019965, 1786013, 2015867, 2017788, 2017776, 1685291, 2015498, 2007745, 2011389, 2016877, 2016876, 2016249, 2015741, 2015429, 1786013, 2015361, 2013209, 2013014, 2012488, 2012776, 2012136, 1989983, 2012136, 1937133, 2009325, 2011750, 2011748, 2011593, 2011413, 2011379, 2009014, 2011431, 2011430, 2011428, 2011425, 2009914, 2009355, 2009283, 2008519, 2009856, 2009704, 1786013, 2009642, 2009698, 2009697, 2009673, 1786013, 2007654, 2009024, 2009621, 1786013, 1989983, 2009358, 2009127, 2009118, 2009065, 1993561, 2007516, 1982378, 2003637, 1814234, 2003394, 2007818, 2007530, 2007069, 2004429, 2002089, 1990849, 2004229, 2004142, 2004138, 2003682, 2003348, 2002812, 2003547, 1956780, 2003051, 2002939, 1987394, 2001892, 2000030, 2000904, 1786013, 2000704, 1786013, 2000706, 1996892, 1998727, 1998419, 1998882, 1998885, 1993148, 1989041, 1997686, 1991608, 1994179, 1994078, 1989046, 1639924, 1988733, 1987345, 1951861, 1937004, 1919321, 1897755, 1855312, 1999750, 1999556, 1999569, 1997944, 1996112, 1999534, 1999528, 1999411, 1999373, 1786013, 1998078, 1997357, 1990700, 1996731, 1996616, 1995875, 1981089, 1995500, 1995041, 1982833, 1993120, 1994037, 1993350, 1193172, 1993118, 1967889, 1967130, 1991790, 1988984, 1991951, 1991664, 1990964, 1991521, 1786013, 1990101, 1989331, 1786013, 1980861, 1988706, 1988120, 1988019, 1987998, 1981437, 1987517, 1942999, 1987241, 1959890, 1786013, 1986844, 1986784, 1983640, 1983335, 1983273, 1983033, 1971418, 1982741, 1786013, 1982726, 1786013, 1953613, 1968016, 1956509, 1942160, 1982013, 1972802, 1981437, 1965241, 1956086, 1971667, 1980622, 1980482, 1980484, 1980056, 1786013, 1980061, 1979647, 1979948, 1786013, 1979611, 1979177, 1978439, 1978313, 1786013, 1642368, 1976327, 1975458, 1974442, 1969434, 1973620, 1857257, 1967924, 1973587, 1969434, 1967702, 1786013, 1972162, 1971699, 1971340, 1786013, 1969476, 1969016, 1786013, 1968988, 1965766, 1958004, 1968986, 1968984, 1968982, 1965731, 1958918, 1964766, 1786013, 1963880, 1962450, 1956780, 1933179, 1962137, 1786013, 1960516, 1960509, 1959879, 1959376, 1927808, 1959376, 1958418, 1953008, 1951563, 1941893, 1956443, 1956926, 1958638, 1953334, 1956585, 1957809, 1956820, 1786013, 1956780, 1956314, 1786013, 1927808, 1955686, 1955790, 1955443, 1938531, 1956305, 1945590, 1956305, 1956302, 1956301, 1955161, 1954646, 1953286, 1950974, 1953540, 1954930, 1954931, 1951784, 1954931, 1953192, 1950013, 1954369, 1949321, 1949516, 1954300, 1954627, 1953731, 1947206, 1953370, 1953208, 1952583, 1786013, 1952579, 1951861, 1951767, 1951868, 1951810, 1951820, 1951822, 1947557, 1951822, 1909814, 1951822, 1951440, 1945590, 1950948, 1786013, 1942215, 1950949, 1867570, 1950133, 1950131, 1949876, 1786013, 1949063, 1949436, 1786013, 1947709, 1934293, 1945989, 1947174, 1946433, 1945967, 1945932, 1948038, 1948770, 1947565, 1945938, 1786013, 1946338, 1945953, 1945556, 1944944, 1786013, 1944423, 1786013, 1928921, 1943022, 1786013, 1941887, 1941696, 1941036, 1932029, 1937897, 1931725, 1914685, 1855340, 1940392, 1936682, 1939541, 1937252, 1940204, 1915117, 1936771, 1935850, 1939638, 1939308, 1939301, 1936708, 1938689, 1936998, 1915117, 1938566, 1786013, 1937004, 1936296, 1786013, 1786013, 1933854, 1786013, 1932029, 1933795, 1932367, 1931725, 1933070, 1912789, 1929504, 1932081, 1931147, 1932018, 1786013, 1931725, 1931840, 1786013, 1931240, 1930713, 1931071, 1930713, 1921870, 1928715, 1920180, 1929217, 1928838, 1921632, 1930205, 1786013, 1929404, 1786013, 1928679, 1928679, 1928655, 1927094, 1786013, 1927094, 1925075, 1927094, 1926792, 1927094, 1926579, 1927094, 1924997, 1927094, 1925415, 1927094, 1786013, 1924238, 1922403, 1905466, 1918793, 1922768, 1786013, 1922372, 1921140, 1922033, 1921757, 1786013, 1920747, 1919930, 1855668, 1786013, 1914411, 1919321, 1917433, 1919123, 1918134, 1918427, 1786013, 1918471, 1918378, 1916554, 1917843, 1786013, 1916095, 1786013, 1909457, 1911001, 1898716, 1786013, 1914543, 1914604, 1786013, 1911359, 1913263, 1913691, 1912803, 1913200, 1910211, 1865402, 1786013, 1906168, 1910965, 1835660, 1786013, 1911359, 1911359, 1910639, 1908992, 1878897, 1786013, 1908529, 1906851, 1907200, 1906370, 1905663, 1908144, 1906839, 1908144, 1786013, 1786013, 1904067, 1902957, 1897751, 1904906, 1786013, 1903293, 1786013, 1786013, 1902687, 1902004, 1786013, 1900847, 1786013, 1899726, 1899519, 1899586, 1896801, 1898903, 1898865, 1897501, 1897755, 1888331, 1896598, 1893914, 1863116, 1895718, 1891233, 1891177, 1891085, 1786013, 1812620, 1890441, 1890317, 1890306, 1890222, 1889481, 1889375, 1872383, 1886908, 1889336, 1889316, 1889140, 1786013, 1889104, 1786013, 1887674, 1881137, 1887734, 1886668, 1886908, 1886140, 1786013, 1887397, 1886188, 1885896, 1885757, 1786013, 1884635, 1872757, 1884767, 1884251, 1881710, 1786013, 1879690, 1786013, 1786013, 1879327, 1786013, 1879704, 1786013, 1879688, 1881576, 1878147, 1881046, 1802691, 1880656, 1879321, 1874056, 1876699, 1786013, 1876044, 1786013, 1873325, 1876859, 1874685, 1875665, 1876645, 1786013, 1349028, 1855668, 1866909, 1786013, 1860754, 1873506, 1875601, 1850958, 1875888, 1870543, 1628889, 1793458, 1865570, 1868936, 1851901, 1861610, 1857257, 1874359, 1874286, 1873315, 1872569, 1872757, 1872094, 1855668, 1780590, 1871300, 1786013, 1786013, 1864754, 1861359, 1865359, 1865570, 1868217, 1867790, 1780590, 1867753, 1835531, 1866734, 1866772, 1867099, 1786013, 1863621, 1830208, 1866056, 1865332, 1865452, 1864626, 1864198, 1864576, 1864284, 1863880, 1863874, 1863810, 1862885, 1849947, 1844245, 1845959, 1860231, 1850540, 1855341, 1855339, 1855338, 1855337, 1855336, 1855335, 1855334, 1860041, 1859561, 1858988, 1858761, 1858487, 1857541, 1770845, 1850540, 1786013, 1856134, 1855685, 1855312, 1855448, 1853180, 1853843, 1852581, 1854432, 1854401, 1847450, 1847454, 1853791, 1824407, 1847451, 1825222, 1846539, 1852663, 1854974, 1853991, 1836858, 1846335, 1855326, 1852386, 1853192, 1849721, 1851901, 1827961, 1852216, 1850867, 1850867, 1850867, 1851810, 1849281, 1850958, 1840239, 1849483, 1849482, 1852070, 1813877, 1851677, 1850994, 1840835, 1850234, 1837525, 1849281, 1848481, 1848492, 1848555, 1847744, 1847192, 1847118, 1844186, 1846272, 1848490, 1848788, 1848236, 1846265, 1846704, 1846641, 1846470, 1846508, 1845820, 1846219, 1846204, 1846143, 1845987, 1845714, 1840704, 1845808, 1845454, 1845728, 1845714, 1845572, 1845323, 1845584, 1845355, 1845391, 1845383, 1845317, 1844680, 1844668, 1842774, 1845642, 1840704, 1842382, 1845105, 1786013, 1840934, 1844144, 1838751, 1843961, 1843960, 1840934, 1837726, 1843232, 1842265, 1840236, 1774815, 1842393, 1842059, 1841977, 1841396, 1842050, 1786013, 1840934, 1838133, 1831482, 1840075, 1826716, 1839622, 1837231, 1837223, 1786013, 1786013, 1784665, 1796292, 1838677, 1835001, 1837332, 1820530, 1786013, 1786013, 1836752, 1835001, 1836916, 1836836, 1836760, 1836914, 1762940, 1836755, 1835054, 1836308, 1836177, 1836020, 1836152, 1829563, 1832082, 1836622, 1835700, 1829652, 1830815, 1833484, 1833387, 1834479, 1832048, 1757218, 1832316, 1823753, 1761379, 1786013, 1829050, 1829046, 1827122, 1826410, 1828092, 1824259, 1827967, 1824864, 1766201, 1806380, 1825210, 1824333, 1825487, 1824812, 1820868, 1824819, 1824677, 1824735, 1824726, 1824216, 1824717, 1824383, 1824194, 1823862, 1824354, 1824350, 1820063, 1823936, 1823379, 1813244, 1823228, 1786013, 1820187, 1823186, 1821820, 1823060, 1822897, 1823056, 1787775, 1822680, 1818552, 1820868, 1822671, 1822385, 1822267, 1812845, 1795857, 1822026, 1821863, 1822005, 1821408, 1818204, 1811815, 1818547, 1821053, 1821620, 1821607, 1821271, 1819881, 1820990, 1820930, 1817786, 1396654, 1817676, 1821074, 1820318, 1819759, 1819500, 1819535, 1764792, 1819515, 1807259, 1809843, 1819515, 1813607, 1818519, 1786013, 1815733, 1817585, 1786013, 1817321, 1817063, 1817058, 1814982, 1816716, 1803206, 1814684, 1813060, 1815831, 1806380, 1752072, 1813955, 1813733, 1804481, 1793901, 1804265, 1812812, 1810797, 1799467, 1811803, 1811929, 1764792, 1807334, 1806472, 1786013, 1805607, 1807378, 1793458, 1806952, 1806838, 1806818, 1806532, 1805775, 1806909, 1806380, 1770256, 1805465, 1805085, 1805079, 1805079, 1805248, 1805461, 1805195, 1804481, 1805081, 1804588, 1805159, 1805158, 1805154, 1802341, 1797367, 1803410, 1787405, 1789161, 1801924, 1797990, 1802248, 1801875, 1801739, 1800664, 1799794, 1786013, 1798182, 1799281, 1793458, 1797963, 1798332, 1798330, 1797314, 1792957, 1797292, 1797143, 1727235, 1783964, 1794346, 1793430, 1793463, 1793461, 1793338, 1769937, 1792099, 1791663, 1791660, 1789924, 1789934, 1791105, 1790480, 1784331, 1788097, 1774366, 1787477, 1786878, 1785780, 1789358, 1773940, 1789145, 1783651, 1787945, 1786902, 1789459, 1789436, 1788881, 1787440, 1786729, 1788874, 1787898, 1787281, 1787635, 1787058, 1788454, 1788453, 1788452, 1788452, 1739107, 1787264, 1785816, 1774950, 1783138, 1784501, 1780227, 1781436, 1782689, 1782540, 1782166, 1782116, 1781364, 1780137, 1780062, 1777736, 1777734, 1777727, 1777696, 1779399, 1775786, 1771823, 1776967, 1773520, 1779124, 1778997, 1778646, 1775390, 1774471, 1764645, 1776750, 1776491, 1774636, 1775856, 1775884, 1770974, 1771844, 1772610, 1768103, 1771780, 1770970, 1770231, 1766055, 1768431, 1774466, 1774467, 1774472, 1774336, 1774306, 1768670, 1766052, 1775391, 1776389, 1779117, 1779116, 1776276, 1772516, 1770849, 1763748, 1770770, 1728238, 1769899, 1768761, 1767490, 1766054, 1768526, 1734130, 1685712, 1763388, 1758507, 1763388, 1763040, 1763062, 1720779, 1763062, 1762755, 1762758, 1762448, 1762462, 1759791, 1729128, 1762695, 1762353, 1762719, 1760099, 1760099, 1760099, 1760099, 1761610, 1761534, 1760712, 1762367, 1763170, 1759893, 1760106, 1752026, 1730775, 1748345, 1759511, 1757228, 1752182, 1729145, 1760876, 1759547, 1759848, 1759848, 1754584, 1754584, 1754584, 1754584, 1755073, 1752672, 1736393, 1751796, 1751796, 1753708, 1758856, 1755857, 1756103, 1756094, 1753424, 1755158, 1755158, 1753288, 1726362, 1730832, 1752655, 1745927, 1677319, 1751021, 1749250, 1749202, 1748922, 1744058, 1723913, 1748807, 1749191, 1715519, 1748567, 1712031, 1743383, 1748244, 1748075, 1748072, 1747792, 1747746, 1747523, 1732463, 1747169, 1744712, 1746463, 1745338, 1569925, 1744077, 1743638, 1742759, 1726519, 1739939, 1741166, 1738523, 1733281, 1737752, 1734147, 1521712, 1545542, 1737176, 1736168, 1732463, 1735843, 1734901, 1734728, 1734695, 1734694, 1734693, 1730660, 1732627, 1723986, 1721070, 1715833, 1719290, 1720466, 1720045, 1716091, 1718679, 1718734, 1717920, 1716699, 1708399, 1716287, 1716093, 1716284, 1678477, 1715073, 1715578, 1714571, 1703339, 1715064, 1715145, 1714112, 1713103, 1701137, 1709257, 1710904, 1712481, 1712345, 1712024, 1709220, 1712168, 1708432, 1711298, 1708630, 1709171, 1700972, 1708120, 1703339, 1703430, 1705495, 1704158, 1704479, 1673564, 1704146, 1703437, 1703742, 1703858, 1702521, 1700747, 1698706, 1702749, 1702159, 1701316, 1701575, 1699004, 1700819, 1700521, 1700077, 1699651, 1689980, 1698700, 1698954, 1698844, 1671360, 1693504, 1693337, 1677319, 1674325, 1691614, 1690914, 1672819, 1690999, 1645037, 1660846, 1660845, 1660842, 1679704, 1678032, 1678023, 1678030, 1677959, 1669611, 1690814, 1690908, 1689856, 1689661, 1690155, 1688259, 1677297, 1470091, 1684971, 1470250, 1615665, 1630990, 1681429, 1680888, 1680156, 1680315, 1591053 ], "changes": [ { "cves": [], "log": [ "", " * questing/linux-riscv: 6.17.0-5.5.1 -proposed tracker (LP: #2125324)", "", " * Packaging resync (LP: #1786013)", " - [Packaging] debian.riscv/dkms-versions -- update from kernel-versions", " (main/d2025.09.08)", "", " [ Ubuntu: 6.17.0-5.5 ]", "", " * questing/linux: 6.17.0-5.5 -proposed tracker (LP: #2125319)", " * Packaging resync (LP: #1786013)", " - [Packaging] resync git-ubuntu-log", " - [Packaging] debian.master/dkms-versions -- update from kernel-versions", " (main/d2025.09.22)", " * [SRU] Failed to create source package: Unmet build dependencies:", " bpftool:native (LP: #2122310)", " - [Packaging] fix build profile spec for bpftool", " * UBUNTU: fan: fail to check kmalloc() return could cause a NULL pointer", " dereference (LP: #2125053)", " - SAUCE: fan: vxlan: check memory allocation for map", " * iproute2 breaking netplan DEP-8 tests in Questing, unexpected \"fan-map\" in", " JSON output (LP: #2124257)", " - SAUCE: fan: don't enforce a specific enum value for IFLA_VXLAN_FAN_MAP", " * memory leaks when configuring a small rate limit in audit (LP: #2122554)", " - SAUCE: audit: fix skb leak when audit rate limit is exceeded", " * Support AMD Image Signal Processing (ISP) unit V4.0 (LP: #2110092)", " - SAUCE: media: platform: amd: Introduce amd isp4 capture driver", " - SAUCE: media: platform: amd: low level support for isp4 firmware", " - SAUCE: media: platform: amd: Add isp4 fw and hw interface", " - SAUCE: media: platform: amd: isp4 subdev and firmware loading handling", " added", " - SAUCE: media: platform: amd: isp4 video node and buffers handling added", " - SAUCE: media: platform: amd: isp4 debug fs logging and more descriptive", " errors", " - SAUCE: Documentation: add documentation of AMD isp 4 driver", " - [Config] Enable AMD_ISP4", " * 25.10 Snapdragon X Elite: Sync concept kernel changes (LP: #2121477)", " - phy: qcom: qmp-combo: Rename 'mode' to 'phy_mode'", " - phy: qcom: qmp-combo: store DP phy power state", " - phy: qcom: qmp-combo: introduce QMPPHY_MODE", " - phy: qcom: qmp-combo: register a typec mux to change the QMPPHY_MODE", " - arm64: dts: qcom: x1e80100-crd: Add USB multiport fingerprint reader", " - dt-bindings: arm: qcom: Add Dell Latitude 7455", " - dt-bindings: display: panel: samsung,atna40cu11: document ATNA40CU11", " - dt-bindings: display: panel: samsung,atna40ct06: document ATNA40CT06", " - drm/panel-edp: Add BOE NV140WUM-N64", " - arm64: dts: qcom: x1-crd: Enable HBR3 on external DPs", " - SAUCE: drm/dp: drm_edp_backlight_set_level: do not always send 3-byte", " commands", " - SAUCE: drm/edp-panel: Add touchscreen panel used by Lenovo X13s", " - SAUCE: net: qrtr: mhi: synchronize qrtr and mhi preparation", " - SAUCE: arm64: dts: qcom: x1e78100-t14s-oled: add eDP panel", " - SAUCE: wip: arm64: dts: qcom: x1e80100-crd: Add WiFi/BT pwrseq", " - SAUCE: wip: arm64: dts: qcom: x1e78100-t14s: enable bluetooth", " - SAUCE: drm/dp: clamp PWM bit count to advertised MIN and MAX", " capabilities", " - SAUCE: arm64: dts: qcom: x1e80100-pmics: Disable pm8010 by default", " - SAUCE: arm64: dts: qcom: x1e80100-dell-xps13-9345: Add Left/Right", " Speakers and Tweeter", " - SAUCE: arm64: dts: qcom: x1e80100-dell-xps13-9345: enable MICs LDO", " - SAUCE: arm64: dts: qcom: x1e80100-dell-xps13-9345: Mark audio channels", " as left-right swapped", " - SAUCE: arm64: dts: qcom: sc8280xp-lenovo-thinkpad-x13: Set up 4-lane DP", " - SAUCE: dt-bindings: phy: qcom,sc8280xp-qmp-usb43dp-phy: Document default", " phy mode", " - SAUCE: phy: qcom: qmp-combo: get default qmpphy_mode from DT", " - SAUCE: arm64: dts: qcom: x1e78100-lenovo-thinkpad-t14s: add HDMI nodes", " - SAUCE: dt-bindings: phy: qcom,sc8280xp-qmp-usb43dp: Reference usb-", " switch.yaml to allow mode-switch", " - SAUCE: dt-bindings: arm: qcom: Add Asus Zenbook A14 UX3407QA LCD/OLED", " variants", " - SAUCE: arm64: dts: qcom: Rework X1-based Asus Zenbook A14's displays", " - SAUCE: arm64: dts: qcom: x1e80100-asus-zenbook-a14: Enable WiFi,", " Bluetooth", " - SAUCE: arm64: dts: qcom: Add support for Dell Inspiron 7441 / Latitude", " 7455", " - SAUCE: firmware: qcom: scm: Allow QSEECOM on Dell Inspiron 7441 /", " Latitude 7455", " - SAUCE: dt-bindings: arm: qcom: Add Acer Swift 14 AI", " - SAUCE: arm64: dts: qcom: x1-acer-swift-14: Add support for Acer Swift 14", " - SAUCE: arm64: dts: qcom: x1e80100: allow mode-switch events to reach the", " QMP Combo PHYs", " - SAUCE: arm64: dts: qcom: x1e80100: move dp0/1/2 data-lanes to SoC dtsi", " - SAUCE: arm64: dts: qcom: x1e80100: Set up 4-lane DP", " - SAUCE: arm64: dts: qcom: x1e80100: move remaining dp0/1/2 data-lanes to", " SoC dtsi", " - Revert \"UBUNTU: SAUCE: Change: cracking sound fix\"", " * UBSAN: shift-out-of-bounds in drivers/edac/skx_common.c:452:16", " (LP: #2119713)", " - EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller", " * Miscellaneous Ubuntu changes", " - [Config] updateconfigs for v6.17-rc6 rebase", "" ], "package": "linux-riscv", "version": "6.17.0-5.5.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 2125324, 1786013, 2125319, 1786013, 2122310, 2125053, 2124257, 2122554, 2110092, 2121477, 2119713 ], "author": "Timo Aaltonen ", "date": "Mon, 22 Sep 2025 13:03:44 +0300" }, { "cves": [], "log": [ "", " * questing/linux-riscv: 6.17.0-4.4.1 -proposed tracker (LP: #2122574)", "", " * Packaging resync (LP: #1786013)", " - [Packaging] debian.riscv/dkms-versions -- update from kernel-versions", " (main/d2025.09.08)", "", " * Excessive size of kernel modules on RISC-V - modules unstripped", " (LP: #1964335)", " - SAUCE: scripts/Makefile.modinst discard-locals from modules", "", " * RISC-V kernel config is out of sync with other archs (LP: #1981437)", " - [Config] riscv64: Sync config with other architectures", "", " * Miscellaneous Ubuntu changes", " - [Config] riscv64: Update EFI_SBAT_FILE", " - [Config] riscv64: Enable EFI_ZBOOT", " - [Config] riscv64: Disable support for non-RVA23 SoCs", " - [Config] riscv64: Disable RISCV_ISA_FALLBACK", " - [Packaging] Create linux-riscv sameport", "", " [ Ubuntu: 6.17.0-4.4 ]", "", " * questing/linux: 6.17.0-4.4 -proposed tracker (LP: #2122321)", " * [SRU] Do not instantiate SPD5118 sensors on i801 SMBus controllers", " (LP: #2114963)", " - SAUCE: i2c: i801: Do not instantiate spd5118 under SPD Write Disable", " * initramfs-tools: autopkgtest fails on arm64 with Possible missing firmware", " /lib/firmware/apple/dfrmtfw-*.bin for built-in driver apple_z2", " (LP: #2115758)", " - [Config] Set TOUCHSCREEN_APPLE_Z2=m (arm64)", " * Support TDX host in questing (LP: #2121873)", " - SAUCE: x86/kexec: Consolidate relocate_kernel() function parameters", " - SAUCE: x86/sme: Use percpu boolean to control WBINVD during kexec", " - SAUCE: x86/virt/tdx: Mark memory cache state incoherent when making", " SEAMCALL", " - SAUCE: x86/kexec: Disable kexec/kdump on platforms with TDX partial", " write erratum", " - SAUCE: x86/virt/tdx: Remove the !KEXEC_CORE dependency", " - SAUCE: x86/virt/tdx: Update the kexec section in the TDX documentation", " - SAUCE: KVM: TDX: Explicitly do WBINVD when no more TDX SEAMCALLs", " - [Config] enable TDX host support", " * minimal kernel lacks modules for blk disk in arm64 openstack environments", " where config_drive is required (LP: #2118499)", " - [Config] Enable SYM53C8XX_2 on arm64", " * Miscellaneous Ubuntu changes", " - [Config] Re-enable Rust support, and make sure it doesn't get disabled", " by accident", " - [Config] updateconfigs for v6.17-rc5 rebase", "" ], "package": "linux-riscv", "version": "6.17.0-4.4.1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 2122574, 1786013, 1964335, 1981437, 2122321, 2114963, 2115758, 2121873, 2118499 ], "author": "Timo Aaltonen ", "date": "Thu, 11 Sep 2025 12:21:31 +0300" }, { "cves": [], "log": [ "", " * Create linux-riscv sameport", "", " [ Ubuntu: 6.17.0-3.3 ]", "" ], "package": "linux-riscv", "version": "6.17.0-3.3.0", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Emil Renner Berthing ", "date": "Fri, 29 Aug 2025 17:54:38 +0200" }, { "cves": [], "log": [ "", " * noble/linux-unstable: 6.7.0-7.7 -proposed tracker (LP: #2049357)", "", " * Packaging resync (LP: #1786013)", " - [Packaging] update variants", "", " * Miscellaneous Ubuntu changes", " - [Packaging] re-enable signing for s390x and ppc64el", "" ], "package": "linux-unstable", "version": "6.7.0-7.7", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2049357, 1786013 ], "author": "Andrea Righi ", "date": "Mon, 15 Jan 2024 08:41:11 +0100" }, { "cves": [], "log": [ "", " * Empty entry.", "" ], "package": "linux-unstable", "version": "6.7.0-6.6", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [], "author": "Andrea Righi ", "date": "Mon, 15 Jan 2024 08:30:50 +0100" }, { "cves": [], "log": [ "", " * noble/linux: 6.7.0-2.2 -proposed tracker (LP: #2049182)", "", " * Packaging resync (LP: #1786013)", " - [Packaging] resync getabis", "", " * Enforce RETPOLINE and SLS mitigrations (LP: #2046440)", " - SAUCE: objtool: Make objtool check actually fatal upon fatal errors", " - SAUCE: objtool: make objtool SLS validation fatal when building with", " CONFIG_SLS=y", " - SAUCE: objtool: make objtool RETPOLINE validation fatal when building with", " CONFIG_RETPOLINE=y", " - SAUCE: scripts: remove generating .o-ur objects", " - [Packaging] Remove all custom retpoline-extract code", " - Revert \"UBUNTU: SAUCE: vga_set_mode -- avoid jump tables\"", " - Revert \"UBUNTU: SAUCE: early/late -- annotate indirect calls in early/late", " initialisation code\"", " - Revert \"UBUNTU: SAUCE: apm -- annotate indirect calls within", " firmware_restrict_branch_speculation_{start,end}\"", "", " * Miscellaneous Ubuntu changes", " - [Packaging] temporarily disable riscv64 builds", " - [Packaging] temporarily disable Rust dependencies on riscv64", "" ], "package": "linux", "version": "6.7.0-2.2", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2049182, 1786013, 2046440 ], "author": "Andrea Righi ", "date": "Fri, 12 Jan 2024 09:21:57 +0100" }, { "cves": [], "log": [ "", " * noble/linux: 6.7.0-1.1 -proposed tracker (LP: #2048859)", "", " * Packaging resync (LP: #1786013)", " - [Packaging] update variants", " - debian/dkms-versions -- update from kernel-versions (main/d2024.01.02)", "", " * [UBUNTU 23.04] Regression: Ubuntu 23.04/23.10 do not include uvdevice", " anymore (LP: #2048919)", " - [Config] Enable S390_UV_UAPI (built-in)", "", " * Support mipi camera on Intel Meteor Lake platform (LP: #2031412)", " - SAUCE: iommu: intel-ipu: use IOMMU passthrough mode for Intel IPUs on Meteor", " Lake", " - SAUCE: platform/x86: int3472: Add handshake GPIO function", "", " * [SRU][J/L/M] UBUNTU: [Packaging] Make WWAN driver a loadable module", " (LP: #2033406)", " - [Packaging] Make WWAN driver loadable modules", "", " * usbip: error: failed to open /usr/share/hwdata//usb.ids (LP: #2039439)", " - [Packaging] Make linux-tools-common depend on hwdata", "", " * [Mediatek] mt8195-demo: enable CONFIG_MTK_IOMMU as module for multimedia and", " PCIE peripherals (LP: #2036587)", " - [Config] Enable CONFIG_MTK_IOMMU on arm64", "", " * linux-*: please enable dm-verity kconfigs to allow MoK/db verified root", " images (LP: #2019040)", " - [Config] CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_SECONDARY_KEYRING=y", "", " * kexec enable to load/kdump zstd compressed zimg (LP: #2037398)", " - [Packaging] Revert arm64 image format to Image.gz", "", " * Mantic minimized/minimal cloud images do not receive IP address during", " provisioning; systemd regression with wait-online (LP: #2036968)", " - [Config] Enable virtio-net as built-in to avoid race", "", " * Make backlight module auto detect dell_uart_backlight (LP: #2008882)", " - SAUCE: ACPI: video: Dell AIO UART backlight detection", "", " * Linux 6.2 fails to reboot with current u-boot-nezha (LP: #2021364)", " - [Config] Default to performance CPUFreq governor on riscv64", "", " * Enable Nezha board (LP: #1975592)", " - [Config] Build in D1 clock drivers on riscv64", " - [Config] Enable CONFIG_SUN6I_RTC_CCU on riscv64", " - [Config] Enable CONFIG_SUNXI_WATCHDOG on riscv64", " - [Config] Disable SUN50I_DE2_BUS on riscv64", " - [Config] Disable unneeded sunxi pinctrl drivers on riscv64", "", " * Enable StarFive VisionFive 2 board (LP: #2013232)", " - [Config] Enable CONFIG_PINCTRL_STARFIVE_JH7110_SYS on riscv64", " - [Config] Enable CONFIG_STARFIVE_WATCHDOG on riscv64", "", " * rcu_sched detected stalls on CPUs/tasks (LP: #1967130)", " - [Config] Enable virtually mapped stacks on riscv64", "", " * Check for changes relevant for security certifications (LP: #1945989)", " - [Packaging] Add a new fips-checks script", "", " * Installation support for SMARC RZ/G2L platform (LP: #2030525)", " - [Config] build Renesas RZ/G2L USBPHY control driver statically", "", " * Add support for kernels compiled with CONFIG_EFI_ZBOOT (LP: #2002226)", " - [Config]: Turn on CONFIG_EFI_ZBOOT on ARM64", "", " * Default module signing algo should be accelerated (LP: #2034061)", " - [Config] Default module signing algo should be accelerated", "", " * Miscellaneous Ubuntu changes", " - [Config] annotations clean-up", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.7", "" ], "package": "linux", "version": "6.7.0-1.1", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2048859, 1786013, 2048919, 2031412, 2033406, 2039439, 2036587, 2019040, 2037398, 2036968, 2008882, 2021364, 1975592, 2013232, 1967130, 1945989, 2030525, 2002226, 2034061 ], "author": "Andrea Righi ", "date": "Thu, 11 Jan 2024 11:49:07 +0100" }, { "cves": [], "log": [ "", " * Empty entry", "" ], "package": "linux", "version": "6.7.0-0.0", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [], "author": "Andrea Righi ", "date": "Tue, 09 Jan 2024 09:27:23 +0100" }, { "cves": [], "log": [ "", " * noble/linux-unstable: 6.7.0-5.5 -proposed tracker (LP: #2048118)", "", " * Packaging resync (LP: #1786013)", " - debian/dkms-versions -- update from kernel-versions (main/d2024.01.02)", "", " * Miscellaneous Ubuntu changes", " - [Packaging] re-enable Rust support", " - [Packaging] temporarily disable riscv64 builds", "" ], "package": "linux-unstable", "version": "6.7.0-5.5", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2048118, 1786013 ], "author": "Andrea Righi ", "date": "Fri, 05 Jan 2024 12:33:10 +0100" }, { "cves": [], "log": [ "", " * noble/linux-unstable: 6.7.0-4.4 -proposed tracker (LP: #2047807)", "", " * unconfined profile denies userns_create for chromium based processes", " (LP: #1990064)", " - [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS", "", " * apparmor restricts read access of user namespace mediation sysctls to root", " (LP: #2040194)", " - SAUCE: apparmor4.0.0 [69/69]: apparmor: open userns related sysctl so lxc", " can check if restriction are in place", "", " * AppArmor spams kernel log with assert when auditing (LP: #2040192)", " - SAUCE: apparmor4.0.0 [68/69]: apparmor: fix request field from a prompt", " reply that denies all access", "", " * apparmor notification files verification (LP: #2040250)", " - SAUCE: apparmor4.0.0 [67/69]: apparmor: fix notification header size", "", " * apparmor oops when racing to retrieve a notification (LP: #2040245)", " - SAUCE: apparmor4.0.0 [66/69]: apparmor: fix oops when racing to retrieve", " notification", "", " * update apparmor and LSM stacking patch set (LP: #2028253)", " - SAUCE: apparmor4.0.0 [01/69]: add/use fns to print hash string hex value", " - SAUCE: apparmor4.0.0 [02/69]: patch to provide compatibility with v2.x net", " rules", " - SAUCE: apparmor4.0.0 [03/69]: add unpriviled user ns mediation", " - SAUCE: apparmor4.0.0 [04/69]: Add sysctls for additional controls of unpriv", " userns restrictions", " - SAUCE: apparmor4.0.0 [05/69]: af_unix mediation", " - SAUCE: apparmor4.0.0 [06/69]: Add fine grained mediation of posix mqueues", " - SAUCE: apparmor4.0.0 [07/69]: Stacking v38: LSM: Identify modules by more", " than name", " - SAUCE: apparmor4.0.0 [08/69]: Stacking v38: LSM: Add an LSM identifier for", " external use", " - SAUCE: apparmor4.0.0 [09/69]: Stacking v38: LSM: Identify the process", " attributes for each module", " - SAUCE: apparmor4.0.0 [10/69]: Stacking v38: LSM: Maintain a table of LSM", " attribute data", " - SAUCE: apparmor4.0.0 [11/69]: Stacking v38: proc: Use lsmids instead of lsm", " names for attrs", " - SAUCE: apparmor4.0.0 [12/69]: Stacking v38: integrity: disassociate", " ima_filter_rule from security_audit_rule", " - SAUCE: apparmor4.0.0 [13/69]: Stacking v38: LSM: Infrastructure management", " of the sock security", " - SAUCE: apparmor4.0.0 [14/69]: Stacking v38: LSM: Add the lsmblob data", " structure.", " - SAUCE: apparmor4.0.0 [15/69]: Stacking v38: LSM: provide lsm name and id", " slot mappings", " - SAUCE: apparmor4.0.0 [16/69]: Stacking v38: IMA: avoid label collisions with", " stacked LSMs", " - SAUCE: apparmor4.0.0 [17/69]: Stacking v38: LSM: Use lsmblob in", " security_audit_rule_match", " - SAUCE: apparmor4.0.0 [18/69]: Stacking v38: LSM: Use lsmblob in", " security_kernel_act_as", " - SAUCE: apparmor4.0.0 [19/69]: Stacking v38: LSM: Use lsmblob in", " security_secctx_to_secid", " - SAUCE: apparmor4.0.0 [20/69]: Stacking v38: LSM: Use lsmblob in", " security_secid_to_secctx", " - SAUCE: apparmor4.0.0 [21/69]: Stacking v38: LSM: Use lsmblob in", " security_ipc_getsecid", " - SAUCE: apparmor4.0.0 [22/69]: Stacking v38: LSM: Use lsmblob in", " security_current_getsecid", " - SAUCE: apparmor4.0.0 [23/69]: Stacking v38: LSM: Use lsmblob in", " security_inode_getsecid", " - SAUCE: apparmor4.0.0 [24/69]: Stacking v38: LSM: Use lsmblob in", " security_cred_getsecid", " - SAUCE: apparmor4.0.0 [25/69]: Stacking v38: LSM: Specify which LSM to", " display", " - SAUCE: apparmor4.0.0 [27/69]: Stacking v38: LSM: Ensure the correct LSM", " context releaser", " - SAUCE: apparmor4.0.0 [28/69]: Stacking v38: LSM: Use lsmcontext in", " security_secid_to_secctx", " - SAUCE: apparmor4.0.0 [29/69]: Stacking v38: LSM: Use lsmcontext in", " security_inode_getsecctx", " - SAUCE: apparmor4.0.0 [30/69]: Stacking v38: Use lsmcontext in", " security_dentry_init_security", " - SAUCE: apparmor4.0.0 [31/69]: Stacking v38: LSM: security_secid_to_secctx in", " netlink netfilter", " - SAUCE: apparmor4.0.0 [32/69]: Stacking v38: NET: Store LSM netlabel data in", " a lsmblob", " - SAUCE: apparmor4.0.0 [33/69]: Stacking v38: binder: Pass LSM identifier for", " confirmation", " - SAUCE: apparmor4.0.0 [34/69]: Stacking v38: LSM: security_secid_to_secctx", " module selection", " - SAUCE: apparmor4.0.0 [35/69]: Stacking v38: Audit: Keep multiple LSM data in", " audit_names", " - SAUCE: apparmor4.0.0 [36/69]: Stacking v38: Audit: Create audit_stamp", " structure", " - SAUCE: apparmor4.0.0 [37/69]: Stacking v38: LSM: Add a function to report", " multiple LSMs", " - SAUCE: apparmor4.0.0 [38/69]: Stacking v38: Audit: Allow multiple records in", " an audit_buffer", " - SAUCE: apparmor4.0.0 [39/69]: Stacking v38: Audit: Add record for multiple", " task security contexts", " - SAUCE: apparmor4.0.0 [40/69]: Stacking v38: audit: multiple subject lsm", " values for netlabel", " - SAUCE: apparmor4.0.0 [41/69]: Stacking v38: Audit: Add record for multiple", " object contexts", " - SAUCE: apparmor4.0.0 [42/69]: Stacking v38: netlabel: Use a struct lsmblob", " in audit data", " - SAUCE: apparmor4.0.0 [43/69]: Stacking v38: LSM: Removed scaffolding", " function lsmcontext_init", " - SAUCE: apparmor4.0.0 [44/69]: Stacking v38: AppArmor: Remove the exclusive", " flag", " - SAUCE: apparmor4.0.0 [45/69]: setup slab cache for audit data", " - SAUCE: apparmor4.0.0 [46/69]: Improve debug print infrastructure", " - SAUCE: apparmor4.0.0 [47/69]: add the ability for profiles to have a", " learning cache", " - SAUCE: apparmor4.0.0 [48/69]: enable userspace upcall for mediation", " - SAUCE: apparmor4.0.0 [49/69]: prompt - lock down prompt interface", " - SAUCE: apparmor4.0.0 [50/69]: prompt - allow controlling of caching of a", " prompt response", " - SAUCE: apparmor4.0.0 [51/69]: prompt - add refcount to audit_node in prep or", " reuse and delete", " - SAUCE: apparmor4.0.0 [52/69]: prompt - refactor to moving caching to", " uresponse", " - SAUCE: apparmor4.0.0 [53/69]: prompt - Improve debug statements", " - SAUCE: apparmor4.0.0 [54/69]: prompt - fix caching", " - SAUCE: apparmor4.0.0 [55/69]: prompt - rework build to use append fn, to", " simplify adding strings", " - SAUCE: apparmor4.0.0 [56/69]: prompt - refcount notifications", " - SAUCE: apparmor4.0.0 [57/69]: prompt - add the ability to reply with a", " profile name", " - SAUCE: apparmor4.0.0 [58/69]: prompt - fix notification cache when updating", " - SAUCE: apparmor4.0.0 [59/69]: prompt - add tailglob on name for cache", " support", " - SAUCE: apparmor4.0.0 [60/69]: prompt - allow profiles to set prompts as", " interruptible", " - SAUCE: apparmor4.0.0 [64/69]: advertise disconnected.path is available", " - SAUCE: apparmor4.0.0 [65/69]: add io_uring mediation", "", " * update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]", " apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in mantic", " (LP: #2032602)", " - SAUCE: apparmor4.0.0 [61/69]: prompt - add support for advanced filtering of", " notifications", " - SAUCE: apparmor4.0.0 [62/69]: userns - add the ability to reference a global", " variable for a feature value", " - SAUCE: apparmor4.0.0 [63/69]: userns - make it so special unconfined", " profiles can mediate user namespaces", "", " * udev fails to make prctl() syscall with apparmor=0 (as used by maas by", " default) (LP: #2016908) // update apparmor and LSM stacking patch set", " (LP: #2028253)", " - SAUCE: apparmor4.0.0 [26/69]: Stacking v38: Fix prctl() syscall with", " apparmor=0", "", " * Fix RPL-U CPU C-state always keep at C3 when system run PHM with idle screen", " on (LP: #2042385)", " - SAUCE: r8169: Add quirks to enable ASPM on Dell platforms", "", " * [Debian] autoreconstruct - Do not generate chmod -x for deleted files", " (LP: #2045562)", " - [Debian] autoreconstruct - Do not generate chmod -x for deleted files", "", " * Disable Legacy TIOCSTI (LP: #2046192)", " - [Config]: disable CONFIG_LEGACY_TIOCSTI", "", " * Packaging resync (LP: #1786013)", " - [Packaging] update variants", " - [Packaging] remove helper scripts", " - [Packaging] update annotations scripts", "", " * Miscellaneous Ubuntu changes", " - [Packaging] rules: Remove unused dkms make variables", " - [Config] update annotations after rebase to v6.7-rc8", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.7-rc8", "" ], "package": "linux-unstable", "version": "6.7.0-4.4", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2047807, 1990064, 2040194, 2040192, 2040250, 2040245, 2028253, 2028253, 2032602, 2016908, 2028253, 2042385, 2045562, 2046192, 1786013 ], "author": "Andrea Righi ", "date": "Tue, 02 Jan 2024 14:57:21 +0100" }, { "cves": [], "log": [ "", " * noble/linux-unstable: 6.7.0-3.3 -proposed tracker (LP: #2046060)", "", " * enable CONFIG_INTEL_TDX_HOST in linux >= 6.7 for noble (LP: #2046040)", " - [Config] enable CONFIG_INTEL_TDX_HOST", "", " * linux tools packages for derived kernels refuse to install simultaneously", " due to libcpupower name collision (LP: #2035971)", " - [Packaging] Statically link libcpupower into cpupower tool", "", " * make lazy RCU a boot time option (LP: #2045492)", " - SAUCE: rcu: Provide a boot time parameter to control lazy RCU", "", " * Build failure if run in a console (LP: #2044512)", " - [Packaging] Fix kernel module compression failures", "", " * Turning COMPAT_32BIT_TIME off on arm64 (64k & derivatives) (LP: #2038582)", " - [Config] y2038: Turn off COMPAT and COMPAT_32BIT_TIME on arm64 64k", "", " * Turning COMPAT_32BIT_TIME off on riscv64 (LP: #2038584)", " - [Config] y2038: Disable COMPAT_32BIT_TIME on riscv64", "", " * Turning COMPAT_32BIT_TIME off on ppc64el (LP: #2038587)", " - [Config] y2038: Disable COMPAT and COMPAT_32BIT_TIME on ppc64le", "", " * [UBUNTU 23.04] Kernel config option missing for s390x PCI passthrough", " (LP: #2042853)", " - [Config] CONFIG_VFIO_PCI_ZDEV_KVM=y", "", " * back-out zstd module compression automatic for backports (LP: #2045593)", " - [Packaging] make ZSTD module compression conditional", "", " * Miscellaneous Ubuntu changes", " - [Packaging] Remove do_full_source variable", " - [Packaging] Remove obsolete config handling", " - [Packaging] Remove support for sub-flavors", " - [Packaging] Remove old linux-libc-dev version hack", " - [Packaging] Remove obsolete scripts", " - [Packaging] Remove README.inclusion-list", " - [Packaging] make $(stampdir)/stamp-build-perarch depend on build-arch", " - [Packaging] Enable rootless builds", " - [Packaging] Allow to run debian/rules without (fake)root", " - [Packaging] remove unneeded trailing slash for INSTALL_MOD_PATH", " - [Packaging] override KERNELRELEASE instead of KERNELVERSION", " - [Config] update toolchain versions in annotations", " - [Packaging] drop useless linux-doc", " - [Packaging] scripts: Rewrite insert-ubuntu-changes in Python", " - [Packaging] enable riscv64 builds", " - [Packaging] remove the last sub-flavours bit", " - [Packaging] check debian.env to determine do_libc_dev_package", " - [Packaging] remove debian.*/variants", " - [Packaging] remove do_libc_dev_package variable", " - [Packaging] move linux-libc-dev.stub to debian/control.d/", " - [Packaging] Update check to build linux-libc-dev to the source package name", " - [Packaging] rules: Remove startnewrelease target", " - [Packaging] Remove debian/commit-templates", " - [Config] update annotations after rebase to v6.7-rc4", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.7-rc4", "" ], "package": "linux-unstable", "version": "6.7.0-3.3", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2046060, 2046040, 2035971, 2045492, 2044512, 2038582, 2038584, 2038587, 2042853, 2045593 ], "author": "Andrea Righi ", "date": "Mon, 11 Dec 2023 15:56:11 +0100" }, { "cves": [], "log": [ "", " * noble/linux-unstable: 6.7.0-2.2 -proposed tracker (LP: #2045107)", "", " * Miscellaneous Ubuntu changes", " - [Packaging] re-enable Rust", " - [Config] enable Rust in annotations", " - [Packaging] Remove do_enforce_all variable", " - [Config] disable Softlogic 6x10 capture card driver on armhf", " - [Packaging] disable Rust support", " - [Config] update annotations after rebase to v6.7-rc3", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.7-rc3", "" ], "package": "linux-unstable", "version": "6.7.0-2.2", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2045107 ], "author": "Andrea Righi ", "date": "Wed, 29 Nov 2023 07:51:17 +0100" }, { "cves": [], "log": [ "", " * noble/linux-unstable: 6.7.0-1.1 -proposed tracker (LP: #2044069)", "", " * Packaging resync (LP: #1786013)", " - [Packaging] update annotations scripts", " - [Packaging] update helper scripts", "", " * Miscellaneous Ubuntu changes", " - [Config] update annotations after rebase to v6.7-rc2", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.7-rc2", "" ], "package": "linux-unstable", "version": "6.7.0-1.1", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2044069, 1786013 ], "author": "Andrea Righi ", "date": "Tue, 21 Nov 2023 10:45:24 +0100" }, { "cves": [], "log": [ "", " * Empty entry", "" ], "package": "linux-unstable", "version": "6.7.0-0.0", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [], "author": "Andrea Righi ", "date": "Tue, 21 Nov 2023 07:26:46 +0100" }, { "cves": [], "log": [ "", " * noble/linux-unstable: 6.6.0-12.12 -proposed tracker (LP: #2043664)", "", " * Miscellaneous Ubuntu changes", " - [Packaging] temporarily disable zfs dkms", "" ], "package": "linux-unstable", "version": "6.6.0-12.12", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2043664 ], "author": "Paolo Pisati ", "date": "Thu, 16 Nov 2023 10:20:26 +0100" }, { "cves": [], "log": [ "", " * noble/linux-unstable: 6.6.0-11.11 -proposed tracker (LP: #2043480)", "", " * Packaging resync (LP: #1786013)", " - [Packaging] resync git-ubuntu-log", " - [Packaging] resync update-dkms-versions helper", " - [Packaging] update variants", " - debian/dkms-versions -- update from kernel-versions (main/d2023.11.14)", "", " * Miscellaneous Ubuntu changes", " - [Packaging] move to Noble", " - [Config] toolchain version update", "" ], "package": "linux-unstable", "version": "6.6.0-11.11", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2043480, 1786013 ], "author": "Paolo Pisati ", "date": "Wed, 15 Nov 2023 14:50:40 +0100" }, { "cves": [], "log": [ "", " * mantic/linux-unstable: 6.6.0-10.10 -proposed tracker (LP: #2043088)", "", " * Bump arm64's CONFIG_NR_CPUS to 512 (LP: #2042897)", " - [Config] Bump CONFIG_NR_CPUS to 512 for arm64", "", " * Miscellaneous Ubuntu changes", " - [Config] Include a note for the NR_CPUS setting on riscv64", " - SAUCE: apparmor4.0.0 [83/83]: Fix inode_init for changed prototype", "" ], "package": "linux-unstable", "version": "6.6.0-10.10", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2043088, 2042897 ], "author": "Paolo Pisati ", "date": "Thu, 09 Nov 2023 12:05:11 +0200" }, { "cves": [], "log": [ "", " * mantic/linux-unstable: 6.6.0-9.9 -proposed tracker (LP: #2041852)", "", " * Switch IMA default hash to sha256 (LP: #2041735)", " - [Config] Switch IMA_DEFAULT_HASH from sha1 to sha256", "", " * apparmor restricts read access of user namespace mediation sysctls to root", " (LP: #2040194)", " - SAUCE: apparmor4.0.0 [82/82]: apparmor: open userns related sysctl so lxc", " can check if restriction are in place", "", " * AppArmor spams kernel log with assert when auditing (LP: #2040192)", " - SAUCE: apparmor4.0.0 [81/82]: apparmor: fix request field from a prompt", " reply that denies all access", "", " * apparmor notification files verification (LP: #2040250)", " - SAUCE: apparmor4.0.0 [80/82]: apparmor: fix notification header size", "", " * apparmor oops when racing to retrieve a notification (LP: #2040245)", " - SAUCE: apparmor4.0.0 [79/82]: apparmor: fix oops when racing to retrieve", " notification", "", " * Disable restricting unprivileged change_profile by default, due to LXD", " latest/stable not yet compatible with this new apparmor feature", " (LP: #2038567)", " - SAUCE: apparmor4.0.0 [78/82]: apparmor: Make", " apparmor_restrict_unprivileged_unconfined opt-in", "", " * update apparmor and LSM stacking patch set (LP: #2028253)", " - SAUCE: apparmor4.0.0 [01/82]: add/use fns to print hash string hex value", " - SAUCE: apparmor4.0.0 [02/82]: rename SK_CTX() to aa_sock and make it an", " inline fn", " - SAUCE: apparmor4.0.0 [03/82]: patch to provide compatibility with v2.x net", " rules", " - SAUCE: apparmor4.0.0 [04/82]: add user namespace creation mediation", " - SAUCE: apparmor4.0.0 [05/82]: Add sysctls for additional controls of unpriv", " userns restrictions", " - SAUCE: apparmor4.0.0 [06/82]: af_unix mediation", " - SAUCE: apparmor4.0.0 [07/82]: Add fine grained mediation of posix mqueues", " - SAUCE: apparmor4.0.0 [08/82]: Stacking v38: LSM: Identify modules by more", " than name", " - SAUCE: apparmor4.0.0 [09/82]: Stacking v38: LSM: Add an LSM identifier for", " external use", " - SAUCE: apparmor4.0.0 [10/82]: Stacking v38: LSM: Identify the process", " attributes for each module", " - SAUCE: apparmor4.0.0 [11/82]: Stacking v38: LSM: Maintain a table of LSM", " attribute data", " - SAUCE: apparmor4.0.0 [12/82]: Stacking v38: proc: Use lsmids instead of lsm", " names for attrs", " - SAUCE: apparmor4.0.0 [13/82]: Stacking v38: integrity: disassociate", " ima_filter_rule from security_audit_rule", " - SAUCE: apparmor4.0.0 [14/82]: Stacking v38: LSM: Infrastructure management", " of the sock security", " - SAUCE: apparmor4.0.0 [15/82]: Stacking v38: LSM: Add the lsmblob data", " structure.", " - SAUCE: apparmor4.0.0 [16/82]: Stacking v38: LSM: provide lsm name and id", " slot mappings", " - SAUCE: apparmor4.0.0 [17/82]: Stacking v38: IMA: avoid label collisions with", " stacked LSMs", " - SAUCE: apparmor4.0.0 [18/82]: Stacking v38: LSM: Use lsmblob in", " security_audit_rule_match", " - SAUCE: apparmor4.0.0 [19/82]: Stacking v38: LSM: Use lsmblob in", " security_kernel_act_as", " - SAUCE: apparmor4.0.0 [20/82]: Stacking v38: LSM: Use lsmblob in", " security_secctx_to_secid", " - SAUCE: apparmor4.0.0 [21/82]: Stacking v38: LSM: Use lsmblob in", " security_secid_to_secctx", " - SAUCE: apparmor4.0.0 [22/82]: Stacking v38: LSM: Use lsmblob in", " security_ipc_getsecid", " - SAUCE: apparmor4.0.0 [23/82]: Stacking v38: LSM: Use lsmblob in", " security_current_getsecid", " - SAUCE: apparmor4.0.0 [24/82]: Stacking v38: LSM: Use lsmblob in", " security_inode_getsecid", " - SAUCE: apparmor4.0.0 [25/82]: Stacking v38: LSM: Use lsmblob in", " security_cred_getsecid", " - SAUCE: apparmor4.0.0 [26/82]: Stacking v38: LSM: Specify which LSM to", " display", " - SAUCE: apparmor4.0.0 [28/82]: Stacking v38: LSM: Ensure the correct LSM", " context releaser", " - SAUCE: apparmor4.0.0 [29/82]: Stacking v38: LSM: Use lsmcontext in", " security_secid_to_secctx", " - SAUCE: apparmor4.0.0 [30/82]: Stacking v38: LSM: Use lsmcontext in", " security_inode_getsecctx", " - SAUCE: apparmor4.0.0 [31/82]: Stacking v38: Use lsmcontext in", " security_dentry_init_security", " - SAUCE: apparmor4.0.0 [32/82]: Stacking v38: LSM: security_secid_to_secctx in", " netlink netfilter", " - SAUCE: apparmor4.0.0 [33/82]: Stacking v38: NET: Store LSM netlabel data in", " a lsmblob", " - SAUCE: apparmor4.0.0 [34/82]: Stacking v38: binder: Pass LSM identifier for", " confirmation", " - SAUCE: apparmor4.0.0 [35/82]: Stacking v38: LSM: security_secid_to_secctx", " module selection", " - SAUCE: apparmor4.0.0 [36/82]: Stacking v38: Audit: Keep multiple LSM data in", " audit_names", " - SAUCE: apparmor4.0.0 [37/82]: Stacking v38: Audit: Create audit_stamp", " structure", " - SAUCE: apparmor4.0.0 [38/82]: Stacking v38: LSM: Add a function to report", " multiple LSMs", " - SAUCE: apparmor4.0.0 [39/82]: Stacking v38: Audit: Allow multiple records in", " an audit_buffer", " - SAUCE: apparmor4.0.0 [40/82]: Stacking v38: Audit: Add record for multiple", " task security contexts", " - SAUCE: apparmor4.0.0 [41/82]: Stacking v38: audit: multiple subject lsm", " values for netlabel", " - SAUCE: apparmor4.0.0 [42/82]: Stacking v38: Audit: Add record for multiple", " object contexts", " - SAUCE: apparmor4.0.0 [43/82]: Stacking v38: netlabel: Use a struct lsmblob", " in audit data", " - SAUCE: apparmor4.0.0 [44/82]: Stacking v38: LSM: Removed scaffolding", " function lsmcontext_init", " - SAUCE: apparmor4.0.0 [45/82]: Stacking v38: AppArmor: Remove the exclusive", " flag", " - SAUCE: apparmor4.0.0 [46/82]: combine common_audit_data and", " apparmor_audit_data", " - SAUCE: apparmor4.0.0 [47/82]: setup slab cache for audit data", " - SAUCE: apparmor4.0.0 [48/82]: rename audit_data->label to", " audit_data->subj_label", " - SAUCE: apparmor4.0.0 [49/82]: pass cred through to audit info.", " - SAUCE: apparmor4.0.0 [50/82]: Improve debug print infrastructure", " - SAUCE: apparmor4.0.0 [51/82]: add the ability for profiles to have a", " learning cache", " - SAUCE: apparmor4.0.0 [52/82]: enable userspace upcall for mediation", " - SAUCE: apparmor4.0.0 [53/82]: cache buffers on percpu list if there is lock", " contention", " - SAUCE: apparmor4.0.0 [54/82]: advertise availability of exended perms", " - SAUCE: apparmor4.0.0 [56/82]: cleanup: provide separate audit messages for", " file and policy checks", " - SAUCE: apparmor4.0.0 [57/82]: prompt - lock down prompt interface", " - SAUCE: apparmor4.0.0 [58/82]: prompt - ref count pdb", " - SAUCE: apparmor4.0.0 [59/82]: prompt - allow controlling of caching of a", " prompt response", " - SAUCE: apparmor4.0.0 [60/82]: prompt - add refcount to audit_node in prep or", " reuse and delete", " - SAUCE: apparmor4.0.0 [61/82]: prompt - refactor to moving caching to", " uresponse", " - SAUCE: apparmor4.0.0 [62/82]: prompt - Improve debug statements", " - SAUCE: apparmor4.0.0 [63/82]: prompt - fix caching", " - SAUCE: apparmor4.0.0 [64/82]: prompt - rework build to use append fn, to", " simplify adding strings", " - SAUCE: apparmor4.0.0 [65/82]: prompt - refcount notifications", " - SAUCE: apparmor4.0.0 [66/82]: prompt - add the ability to reply with a", " profile name", " - SAUCE: apparmor4.0.0 [67/82]: prompt - fix notification cache when updating", " - SAUCE: apparmor4.0.0 [68/82]: prompt - add tailglob on name for cache", " support", " - SAUCE: apparmor4.0.0 [69/82]: prompt - allow profiles to set prompts as", " interruptible", " - SAUCE: apparmor4.0.0 [74/82]: advertise disconnected.path is available", " - SAUCE: apparmor4.0.0 [75/82]: fix invalid reference on profile->disconnected", " - SAUCE: apparmor4.0.0 [76/82]: add io_uring mediation", " - SAUCE: apparmor4.0.0 [77/82]: apparmor: Fix regression in mount mediation", "", " * update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]", " apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in mantic", " (LP: #2032602)", " - SAUCE: apparmor4.0.0 [70/82]: prompt - add support for advanced filtering of", " notifications", " - SAUCE: apparmor4.0.0 [71/82]: userns - add the ability to reference a global", " variable for a feature value", " - SAUCE: apparmor4.0.0 [72/82]: userns - make it so special unconfined", " profiles can mediate user namespaces", " - SAUCE: apparmor4.0.0 [73/82]: userns - allow restricting unprivileged", " change_profile", "", " * LSM stacking and AppArmor for 6.2: additional fixes (LP: #2017903) // update", " apparmor and LSM stacking patch set (LP: #2028253)", " - SAUCE: apparmor4.0.0 [55/82]: fix profile verification and enable it", "", " * udev fails to make prctl() syscall with apparmor=0 (as used by maas by", " default) (LP: #2016908) // update apparmor and LSM stacking patch set", " (LP: #2028253)", " - SAUCE: apparmor4.0.0 [27/82]: Stacking v38: Fix prctl() syscall with", " apparmor=0", "", " * Miscellaneous Ubuntu changes", " - [Config] SECURITY_APPARMOR_RESTRICT_USERNS=y", "" ], "package": "linux-unstable", "version": "6.6.0-9.9", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2041852, 2041735, 2040194, 2040192, 2040250, 2040245, 2038567, 2028253, 2028253, 2032602, 2017903, 2028253, 2016908, 2028253 ], "author": "Paolo Pisati ", "date": "Fri, 03 Nov 2023 11:59:12 +0100" }, { "cves": [], "log": [ "", " * mantic/linux-unstable: 6.6.0-8.8 -proposed tracker (LP: #2040243)", "", " * Miscellaneous Ubuntu changes", " - abi: gc reference to phy-rtk-usb2/phy-rtk-usb3", "" ], "package": "linux-unstable", "version": "6.6.0-8.8", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2040243 ], "author": "Paolo Pisati ", "date": "Tue, 24 Oct 2023 10:55:34 +0200" }, { "cves": [], "log": [ "", " * mantic/linux-unstable: 6.6.0-7.7 -proposed tracker (LP: #2040147)", "", " * test_021_aslr_dapper_libs from ubuntu_qrt_kernel_security failed on K-5.19 /", " J-OEM-6.1 / J-6.2 AMD64 (LP: #1983357)", " - [Config]: set ARCH_MMAP_RND_{COMPAT_, }BITS to the maximum", "", " * Miscellaneous Ubuntu changes", " - [Config] updateconfigs following v6.6-rc7 rebase", "" ], "package": "linux-unstable", "version": "6.6.0-7.7", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2040147, 1983357 ], "author": "Paolo Pisati ", "date": "Mon, 23 Oct 2023 11:51:14 +0200" }, { "cves": [], "log": [ "", " * mantic/linux-unstable: 6.6.0-6.6 -proposed tracker (LP: #2039780)", "", " * Miscellaneous Ubuntu changes", " - rebase on v6.6-rc6", " - [Config] updateconfigs following v6.6-rc6 rebase", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.6-rc6", "" ], "package": "linux-unstable", "version": "6.6.0-6.6", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2039780 ], "author": "Paolo Pisati ", "date": "Thu, 19 Oct 2023 12:09:16 +0200" }, { "cves": [], "log": [ "", " * mantic/linux-unstable: 6.6.0-5.5 -proposed tracker (LP: #2038899)", "", " * Miscellaneous Ubuntu changes", " - rebase on v6.6-rc5", " - [Config] updateconfigs following v6.6-rc5 rebase", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.6-rc5", "" ], "package": "linux-unstable", "version": "6.6.0-5.5", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2038899 ], "author": "Paolo Pisati ", "date": "Tue, 10 Oct 2023 11:18:41 +0200" }, { "cves": [], "log": [ "", " * mantic/linux-unstable: 6.6.0-4.4 -proposed tracker (LP: #2038423)", "", " * Miscellaneous Ubuntu changes", " - rebase on v6.6-rc4", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.6-rc4", "" ], "package": "linux-unstable", "version": "6.6.0-4.4", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2038423 ], "author": "Paolo Pisati ", "date": "Wed, 04 Oct 2023 11:16:25 +0200" }, { "cves": [], "log": [ "", " * mantic/linux-unstable: 6.6.0-3.3 -proposed tracker (LP: #2037622)", "", " * Miscellaneous Ubuntu changes", " - [Config] updateconfigs following v6.6-rc3 rebase", "", " * Miscellaneous upstream changes", " - Revert \"UBUNTU: SAUCE: enforce rust availability only on x86_64\"", " - arm64: rust: Enable Rust support for AArch64", " - arm64: rust: Enable PAC support for Rust.", " - arm64: Restrict Rust support to little endian only.", "" ], "package": "linux-unstable", "version": "6.6.0-3.3", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2037622 ], "author": "Paolo Pisati ", "date": "Thu, 28 Sep 2023 10:45:38 +0200" }, { "cves": [], "log": [ "", " * Miscellaneous upstream changes", " - UBUBNTU: [Config] build all COMEDI drivers as modules", "" ], "package": "linux-unstable", "version": "6.6.0-2.2", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [], "author": "Paolo Pisati ", "date": "Mon, 18 Sep 2023 14:42:56 +0200" }, { "cves": [], "log": [ "", " * Miscellaneous Ubuntu changes", " - [Packaging] move linux to linux-unstable", " - [Packaging] rebase on v6.6-rc1", " - [Config] updateconfigs following v6.6-rc1 rebase", " - [packaging] skip ABI, modules and retpoline checks", " - update dropped.txt", " - [Config] SHIFT_FS FTBFS with Linux 6.6, disable it", " - [Config] DELL_UART_BACKLIGHT FTBFS with Linux 6.6, disable it", " - [Packaging] debian/dkms-versions: temporarily disable dkms", " - [Packaging] temporarily disable signing for s390x", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.6-rc1", "" ], "package": "linux-unstable", "version": "6.6.0-1.1", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [], "author": "Paolo Pisati ", "date": "Fri, 15 Sep 2023 14:42:18 +0200" }, { "cves": [], "log": [ "", " * Empty entry", "" ], "package": "linux-unstable", "version": "6.6.0-0.0", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [], "author": "Paolo Pisati ", "date": "Thu, 14 Sep 2023 15:03:19 +0200" }, { "cves": [], "log": [ "", " * mantic/linux: 6.5.0-5.5 -proposed tracker (LP: #2034546)", "", " * Packaging resync (LP: #1786013)", " - [Packaging] update helper scripts", " - debian/dkms-versions -- update from kernel-versions (main/d2023.08.23)", "", "", "linux (6.5.0-4.4) mantic; urgency=medium", "", " * mantic/linux: 6.5.0-4.4 -proposed tracker (LP: #2034042)", "", " * Packaging resync (LP: #1786013)", " - debian/dkms-versions -- update from kernel-versions (main/d2023.08.23)", "" ], "package": "linux", "version": "6.5.0-5.5", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2034546, 1786013, 2034042, 1786013 ], "author": "Andrea Righi ", "date": "Mon, 04 Sep 2023 16:55:44 +0200" }, { "cves": [], "log": [ "", " * mantic/linux: 6.5.0-3.3 -proposed tracker (LP: #2033904)", "", " * Packaging resync (LP: #1786013)", " - debian/dkms-versions -- update from kernel-versions (main/d2023.08.23)", "", " * [23.10] Please test secure-boot and lockdown on the early 6.5 kernel (s390x)", " (LP: #2026833)", " - [Packaging] re-enable signing for s390x", "", " * Miscellaneous upstream changes", " - module/decompress: use vmalloc() for zstd decompression workspace", "" ], "package": "linux", "version": "6.5.0-3.3", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2033904, 1786013, 2026833 ], "author": "Andrea Righi ", "date": "Fri, 01 Sep 2023 16:15:33 +0200" }, { "cves": [], "log": [ "", " * mantic/linux: 6.5.0-2.2 -proposed tracker (LP: #2033240)", "", " * Soundwire support for Dell SKU0C87 devices (LP: #2029281)", " - SAUCE: ASoC: Intel: soc-acpi: add support for Dell SKU0C87 devices", "", " * Fix numerous AER related issues (LP: #2033025)", " - SAUCE: PCI/AER: Disable AER service during suspend, again", " - SAUCE: PCI/DPC: Disable DPC service during suspend, again", "", " * Support Realtek RTL8852CE WiFi 6E/BT Combo (LP: #2025672)", " - wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set()", " - Bluetooth: btrtl: Load FW v2 otherwise FW v1 for RTL8852C", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.5", "" ], "package": "linux", "version": "6.5.0-2.2", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2033240, 2029281, 2033025, 2025672 ], "author": "Andrea Righi ", "date": "Mon, 28 Aug 2023 08:53:19 +0200" }, { "cves": [], "log": [ "", " * mantic/linux: 6.5.0-1.1 -proposed tracker (LP: #2032750)", "", " * Packaging resync (LP: #1786013)", " - [Packaging] resync update-dkms-versions helper", " - [Packaging] update variants", " - debian/dkms-versions -- update from kernel-versions (main/d2023.07.26)", "", " * ceph: support idmapped mounts (LP: #2032959)", " - SAUCE: libceph: add spinlock around osd->o_requests", " - SAUCE: libceph: define struct ceph_sparse_extent and add some helpers", " - SAUCE: libceph: new sparse_read op, support sparse reads on msgr2 crc", " codepath", " - SAUCE: libceph: support sparse reads on msgr2 secure codepath", " - SAUCE: libceph: add sparse read support to msgr1", " - SAUCE: libceph: add sparse read support to OSD client", " - SAUCE: ceph: add new mount option to enable sparse reads", " - SAUCE: ceph: preallocate inode for ops that may create one", " - SAUCE: ceph: make ceph_msdc_build_path use ref-walk", " - SAUCE: libceph: add new iov_iter-based ceph_msg_data_type and", " ceph_osd_data_type", " - SAUCE: ceph: use osd_req_op_extent_osd_iter for netfs reads", " - SAUCE: ceph: fscrypt_auth handling for ceph", " - SAUCE: ceph: implement -o test_dummy_encryption mount option", " - SAUCE: ceph: add fscrypt ioctls and ceph.fscrypt.auth vxattr", " - SAUCE: ceph: make ioctl cmds more readable in debug log", " - SAUCE: ceph: add base64 endcoding routines for encrypted names", " - SAUCE: ceph: encode encrypted name in ceph_mdsc_build_path and dentry", " release", " - SAUCE: ceph: send alternate_name in MClientRequest", " - SAUCE: ceph: decode alternate_name in lease info", " - SAUCE: ceph: set DCACHE_NOKEY_NAME flag in ceph_lookup/atomic_open()", " - SAUCE: ceph: make d_revalidate call fscrypt revalidator for encrypted", " dentries", " - SAUCE: ceph: add helpers for converting names for userland presentation", " - SAUCE: ceph: make ceph_fill_trace and ceph_get_name decrypt names", " - SAUCE: ceph: pass the request to parse_reply_info_readdir()", " - SAUCE: ceph: add support to readdir for encrypted names", " - SAUCE: ceph: create symlinks with encrypted and base64-encoded targets", " - SAUCE: ceph: add some fscrypt guardrails", " - SAUCE: ceph: allow encrypting a directory while not having Ax caps", " - SAUCE: ceph: mark directory as non-complete after loading key", " - SAUCE: ceph: size handling in MClientRequest, cap updates and inode traces", " - SAUCE: ceph: handle fscrypt fields in cap messages from MDS", " - SAUCE: ceph: add infrastructure for file encryption and decryption", " - SAUCE: libceph: add CEPH_OSD_OP_ASSERT_VER support", " - SAUCE: libceph: allow ceph_osdc_new_request to accept a multi-op read", " - SAUCE: ceph: add object version support for sync read", " - SAUCE: ceph: add truncate size handling support for fscrypt", " - SAUCE: ceph: don't use special DIO path for encrypted inodes", " - SAUCE: ceph: align data in pages in ceph_sync_write", " - SAUCE: ceph: add read/modify/write to ceph_sync_write", " - SAUCE: ceph: add encryption support to writepage and writepages", " - SAUCE: ceph: plumb in decryption during reads", " - SAUCE: ceph: invalidate pages when doing direct/sync writes", " - SAUCE: ceph: add support for encrypted snapshot names", " - SAUCE: ceph: prevent snapshot creation in encrypted locked directories", " - SAUCE: ceph: update documentation regarding snapshot naming limitations", " - SAUCE: ceph: drop messages from MDS when unmounting", " - SAUCE: ceph: wait for OSD requests' callbacks to finish when unmounting", " - SAUCE: ceph: fix updating i_truncate_pagecache_size for fscrypt", " - SAUCE: ceph: switch ceph_lookup/atomic_open() to use new fscrypt helper", " - SAUCE: libceph: do not include crypto/algapi.h", " - SAUCE: rbd: bump RBD_MAX_PARENT_CHAIN_LEN to 128", " - SAUCE: ceph: dump info about cap flushes when we're waiting too long for", " them", " - SAUCE: mm: BUG if filemap_alloc_folio gives us a folio with a non-NULL", " ->private", " - SAUCE: ceph: make sure all the files successfully put before unmounting", " - SAUCE: ceph: BUG if MDS changed truncate_seq with client caps still", " outstanding", " - SAUCE: ceph: add the *_client debug macros support", " - SAUCE: ceph: pass the mdsc to several helpers", " - SAUCE: ceph: rename _to_client() to _to_fs_client()", " - SAUCE: ceph: move mdsmap.h to fs/ceph/", " - SAUCE: ceph: add ceph_inode_to_client() helper support", " - SAUCE: ceph: print the client global_id in all the debug logs", " - SAUCE: ceph: make the members in struct ceph_mds_request_args_ext an union", " - SAUCE: ceph: make num_fwd and num_retry to __u32", " - SAUCE: fs: export mnt_idmap_get/mnt_idmap_put", " - SAUCE: ceph: stash idmapping in mdsc request", " - SAUCE: ceph: handle idmapped mounts in create_request_message()", " - SAUCE: ceph: add enable_unsafe_idmap module parameter", " - SAUCE: ceph: pass an idmapping to mknod/symlink/mkdir", " - SAUCE: ceph: allow idmapped getattr inode op", " - SAUCE: ceph: allow idmapped permission inode op", " - SAUCE: ceph: pass idmap to __ceph_setattr", " - SAUCE: ceph: allow idmapped setattr inode op", " - SAUCE: ceph/acl: allow idmapped set_acl inode op", " - SAUCE: ceph/file: allow idmapped atomic_open inode op", " - SAUCE: ceph: allow idmapped mounts", "", " * Got soft lockup CPU if dell_uart_backlight is probed (LP: #2032174)", " - SAUCE: platform/x86: dell-uart-backlight: replace chars_in_buffer() with", " flush_chars()", "", " * Fix ACPI TAD on some Intel based systems (LP: #2032767)", " - ACPI: TAD: Install SystemCMOS address space handler for ACPI000E", "", " * Fix unreliable ethernet cable detection on I219 NIC (LP: #2028122)", " - e1000e: Use PME poll to circumvent unreliable ACPI wake", "", " * Fix panel brightness issues on HP laptops (LP: #2032704)", " - ACPI: video: Put ACPI video and its child devices into D0 on boot", "", " * FATAL:credentials.cc(127)] Check failed: . : Permission denied (13)", " (LP: #2017980)", " - [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS", "", " * Support initrdless boot on default qemu virt models and openstack", " (LP: #2030745)", " - [Config] set VIRTIO_BLK=y for default qemu/openstack boot", "", " * Miscellaneous Ubuntu changes", " - [Packaging] rust: use Rust 1.68.2", " - [Packaging] depend on clang/libclang-15 for Rust", " - [Config] update toolchain versions in annotations", " - [Config] update annotations after rebase to v6.5-rc6", " - [Config] update toolchain version in annotations", " - [Packaging] temporarily disable Rust support", " - [Packaging] temporarily disable signing for ppc64el", " - [Packaging] temporarily disable signing for s390x", "" ], "package": "linux", "version": "6.5.0-1.1", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2032750, 1786013, 2032959, 2032174, 2032767, 2028122, 2032704, 2017980, 2030745 ], "author": "Andrea Righi ", "date": "Thu, 24 Aug 2023 17:47:10 +0200" }, { "cves": [], "log": [ "", " * Empty entry", "" ], "package": "linux", "version": "6.5.0-0.0", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [], "author": "Andrea Righi ", "date": "Wed, 23 Aug 2023 08:14:48 +0200" }, { "cves": [], "log": [ "", " * mantic/linux-unstable: 6.5.0-4.4 -proposed tracker (LP: #2029086)", "", " * Miscellaneous Ubuntu changes", " - [Packaging] Add .NOTPARALLEL", " - [Packaging] Remove meaningless $(header_arch)", " - [Packaging] Fix File exists error in install-arch-headers", " - [Packaging] clean debian/linux-* directories", " - [Packaging] remove hmake", " - [Packaging] install headers to debian/linux-libc-dev directly", " - [Config] define CONFIG options for arm64 instead of arm64-generic", " - [Config] update annotations after rebase to v6.5-rc4", " - [Packaging] temporarily disable Rust support", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.5-rc4", "" ], "package": "linux-unstable", "version": "6.5.0-4.4", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2029086 ], "author": "Andrea Righi ", "date": "Mon, 31 Jul 2023 08:41:59 +0200" }, { "cves": [], "log": [ "", " * mantic/linux-unstable: 6.5.0-3.3 -proposed tracker (LP: #2028779)", "", " * enable Rust support in the kernel (LP: #2007654)", " - SAUCE: rust: support rustc-1.69.0", " - [Packaging] depend on rustc-1.69.0", "", " * Packaging resync (LP: #1786013)", " - [Packaging] resync update-dkms-versions helper", " - [Packaging] resync getabis", "", " * Fix UBSAN in Intel EDAC driver (LP: #2028746)", " - EDAC/i10nm: Skip the absent memory controllers", "", " * Ship kernel modules Zstd compressed (LP: #2028568)", " - SAUCE: Support but do not require compressed modules", " - [Config] Enable support for ZSTD compressed modules", " - [Packaging] ZSTD compress modules", "", " * update apparmor and LSM stacking patch set (LP: #2028253)", " - SAUCE: apparmor3.2.0 [02/60]: rename SK_CTX() to aa_sock and make it an", " inline fn", " - SAUCE: apparmor3.2.0 [05/60]: Add sysctls for additional controls of unpriv", " userns restrictions", " - SAUCE: apparmor3.2.0 [08/60]: Stacking v38: LSM: Identify modules by more", " than name", " - SAUCE: apparmor3.2.0 [09/60]: Stacking v38: LSM: Add an LSM identifier for", " external use", " - SAUCE: apparmor3.2.0 [10/60]: Stacking v38: LSM: Identify the process", " attributes for each module", " - SAUCE: apparmor3.2.0 [11/60]: Stacking v38: LSM: Maintain a table of LSM", " attribute data", " - SAUCE: apparmor3.2.0 [12/60]: Stacking v38: proc: Use lsmids instead of lsm", " names for attrs", " - SAUCE: apparmor3.2.0 [13/60]: Stacking v38: integrity: disassociate", " ima_filter_rule from security_audit_rule", " - SAUCE: apparmor3.2.0 [14/60]: Stacking v38: LSM: Infrastructure management", " of the sock security", " - SAUCE: apparmor3.2.0 [15/60]: Stacking v38: LSM: Add the lsmblob data", " structure.", " - SAUCE: apparmor3.2.0 [16/60]: Stacking v38: LSM: provide lsm name and id", " slot mappings", " - SAUCE: apparmor3.2.0 [17/60]: Stacking v38: IMA: avoid label collisions with", " stacked LSMs", " - SAUCE: apparmor3.2.0 [18/60]: Stacking v38: LSM: Use lsmblob in", " security_audit_rule_match", " - SAUCE: apparmor3.2.0 [19/60]: Stacking v38: LSM: Use lsmblob in", " security_kernel_act_as", " - SAUCE: apparmor3.2.0 [20/60]: Stacking v38: LSM: Use lsmblob in", " security_secctx_to_secid", " - SAUCE: apparmor3.2.0 [21/60]: Stacking v38: LSM: Use lsmblob in", " security_secid_to_secctx", " - SAUCE: apparmor3.2.0 [22/60]: Stacking v38: LSM: Use lsmblob in", " security_ipc_getsecid", " - SAUCE: apparmor3.2.0 [23/60]: Stacking v38: LSM: Use lsmblob in", " security_current_getsecid", " - SAUCE: apparmor3.2.0 [24/60]: Stacking v38: LSM: Use lsmblob in", " security_inode_getsecid", " - SAUCE: apparmor3.2.0 [25/60]: Stacking v38: LSM: Use lsmblob in", " security_cred_getsecid", " - SAUCE: apparmor3.2.0 [26/60]: Stacking v38: LSM: Specify which LSM to", " display", " - SAUCE: apparmor3.2.0 [28/60]: Stacking v38: LSM: Ensure the correct LSM", " context releaser", " - SAUCE: apparmor3.2.0 [29/60]: Stacking v38: LSM: Use lsmcontext in", " security_secid_to_secctx", " - SAUCE: apparmor3.2.0 [30/60]: Stacking v38: LSM: Use lsmcontext in", " security_inode_getsecctx", " - SAUCE: apparmor3.2.0 [31/60]: Stacking v38: Use lsmcontext in", " security_dentry_init_security", " - SAUCE: apparmor3.2.0 [32/60]: Stacking v38: LSM: security_secid_to_secctx in", " netlink netfilter", " - SAUCE: apparmor3.2.0 [33/60]: Stacking v38: NET: Store LSM netlabel data in", " a lsmblob", " - SAUCE: apparmor3.2.0 [34/60]: Stacking v38: binder: Pass LSM identifier for", " confirmation", " - SAUCE: apparmor3.2.0 [35/60]: Stacking v38: LSM: security_secid_to_secctx", " module selection", " - SAUCE: apparmor3.2.0 [36/60]: Stacking v38: Audit: Keep multiple LSM data in", " audit_names", " - SAUCE: apparmor3.2.0 [37/60]: Stacking v38: Audit: Create audit_stamp", " structure", " - SAUCE: apparmor3.2.0 [38/60]: Stacking v38: LSM: Add a function to report", " multiple LSMs", " - SAUCE: apparmor3.2.0 [39/60]: Stacking v38: Audit: Allow multiple records in", " an audit_buffer", " - SAUCE: apparmor3.2.0 [40/60]: Stacking v38: Audit: Add record for multiple", " task security contexts", " - SAUCE: apparmor3.2.0 [41/60]: Stacking v38: audit: multiple subject lsm", " values for netlabel", " - SAUCE: apparmor3.2.0 [42/60]: Stacking v38: Audit: Add record for multiple", " object contexts", " - SAUCE: apparmor3.2.0 [43/60]: Stacking v38: netlabel: Use a struct lsmblob", " in audit data", " - SAUCE: apparmor3.2.0 [44/60]: Stacking v38: LSM: Removed scaffolding", " function lsmcontext_init", " - SAUCE: apparmor3.2.0 [45/60]: Stacking v38: AppArmor: Remove the exclusive", " flag", " - SAUCE: apparmor3.2.0 [46/60]: combine common_audit_data and", " apparmor_audit_data", " - SAUCE: apparmor3.2.0 [47/60]: setup slab cache for audit data", " - SAUCE: apparmor3.2.0 [48/60]: rename audit_data->label to", " audit_data->subj_label", " - SAUCE: apparmor3.2.0 [49/60]: pass cred through to audit info.", " - SAUCE: apparmor3.2.0 [50/60]: Improve debug print infrastructure", " - SAUCE: apparmor3.2.0 [51/60]: add the ability for profiles to have a", " learning cache", " - SAUCE: apparmor3.2.0 [52/60]: enable userspace upcall for mediation", " - SAUCE: apparmor3.2.0 [53/60]: cache buffers on percpu list if there is lock", " contention", " - SAUCE: apparmor3.2.0 [55/60]: advertise availability of exended perms", " - SAUCE: apparmor3.2.0 [60/60]: [Config] enable", " CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS", "", " * LSM stacking and AppArmor for 6.2: additional fixes (LP: #2017903) // update", " apparmor and LSM stacking patch set (LP: #2028253)", " - SAUCE: apparmor3.2.0 [57/60]: fix profile verification and enable it", "", " * udev fails to make prctl() syscall with apparmor=0 (as used by maas by", " default) (LP: #2016908) // update apparmor and LSM stacking patch set", " (LP: #2028253)", " - SAUCE: apparmor3.2.0 [27/60]: Stacking v38: Fix prctl() syscall with", " apparmor=0", "", " * kinetic: apply new apparmor and LSM stacking patch set (LP: #1989983) //", " update apparmor and LSM stacking patch set (LP: #2028253)", " - SAUCE: apparmor3.2.0 [01/60]: add/use fns to print hash string hex value", " - SAUCE: apparmor3.2.0 [03/60]: patch to provide compatibility with v2.x net", " rules", " - SAUCE: apparmor3.2.0 [04/60]: add user namespace creation mediation", " - SAUCE: apparmor3.2.0 [06/60]: af_unix mediation", " - SAUCE: apparmor3.2.0 [07/60]: Add fine grained mediation of posix mqueues", "", " * Miscellaneous Ubuntu changes", " - [Packaging] Use consistent llvm/clang for rust", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.5-rc3", "" ], "package": "linux-unstable", "version": "6.5.0-3.3", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2028779, 2007654, 1786013, 2028746, 2028568, 2028253, 2017903, 2028253, 2016908, 2028253, 1989983, 2028253 ], "author": "Andrea Righi ", "date": "Fri, 28 Jul 2023 07:44:20 +0200" }, { "cves": [], "log": [ "", " * mantic/linux-unstable: 6.5.0-2.2 -proposed tracker (LP: #2027953)", "", " * Remove non-LPAE kernel flavor (LP: #2025265)", " - [Packaging] Rename armhf generic-lpae flavor to generic", "", " * Please enable Renesas RZ platform serial installer (LP: #2022361)", " - [Config] enable hihope RZ/G2M serial console", "", " * Miscellaneous Ubuntu changes", " - [Packaging] snap: Remove old configs handling", " - [Packaging] checks/final-checks: Remove old configs handling", " - [Packaging] checks/final-checks: check existance of Makefile first", " - [Packaging] checks/final-checks: Fix shellcheck issues", " - [Packaging] add libstdc++-dev to the build dependencies", " - [Config] update annotations after rebase to v6.5-rc2", "", " * Miscellaneous upstream changes", " - kbuild: rust: avoid creating temporary files", " - rust: fix bindgen build error with UBSAN_BOUNDS_STRICT", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.5-rc2", "" ], "package": "linux-unstable", "version": "6.5.0-2.2", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2027953, 2025265, 2022361 ], "author": "Andrea Righi ", "date": "Tue, 18 Jul 2023 10:14:14 +0200" }, { "cves": [ { "cve": "CVE-2023-31248", "url": "https://ubuntu.com/security/CVE-2023-31248", "cve_description": "Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace", "cve_priority": "high", "cve_public_date": "2023-07-05 19:15:00 UTC" }, { "cve": "CVE-2023-35001", "url": "https://ubuntu.com/security/CVE-2023-35001", "cve_description": "Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace", "cve_priority": "high", "cve_public_date": "2023-07-05 19:15:00 UTC" }, { "cve": "CVE-2023-2640", "url": "https://ubuntu.com/security/CVE-2023-2640", "cve_description": "On Ubuntu kernels carrying both c914c0e27eb0 and \"UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs\", an unprivileged user may set privileged extended attributes on the mounted files, leading them to be set on the upper files without the appropriate security checks.", "cve_priority": "high", "cve_public_date": "2023-07-26 02:15:00 UTC" }, { "cve": "CVE-2023-32629", "url": "https://ubuntu.com/security/CVE-2023-32629", "cve_description": "Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels", "cve_priority": "high", "cve_public_date": "2023-07-26 02:15:00 UTC" }, { "cve": "CVE-2023-2612", "url": "https://ubuntu.com/security/CVE-2023-2612", "cve_description": "Jean-Baptiste Cayrou discovered that the shiftfs file system in the Ubuntu Linux kernel contained a race condition when handling inode locking in some situations. A local attacker could use this to cause a denial of service (kernel deadlock).", "cve_priority": "medium", "cve_public_date": "2023-05-31 00:15:00 UTC" } ], "log": [ "", " * mantic/linux-unstable: 6.5.0-1.1 -proposed tracker (LP: #2026689)", "", " * CVE-2023-31248", " - netfilter: nf_tables: do not ignore genmask when looking up chain by id", "", " * CVE-2023-35001", " - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval", "", " * HDMI output with More than one child device for port B in VBT error", " (LP: #2025195)", " - SAUCE: drm/i915/quirks: Add multiple VBT quirk for HP ZBook Power G10", "", " * CVE-2023-2640 // CVE-2023-32629", " - SAUCE: overlayfs: default to userxattr when mounted from non initial user", " namespace", "", " * Packaging resync (LP: #1786013)", " - [Packaging] resync update-dkms-versions helper", "", " * enable Rust support in the kernel (LP: #2007654)", " - SAUCE: btf, scripts: rust: drop is_rust_module.sh", " - [Packaging] add rust dependencies", "", " * CVE-2023-2612", " - SAUCE: shiftfs: prevent lock unbalance in shiftfs_create_object()", "", " * Miscellaneous Ubuntu changes", " - SAUCE: shiftfs: support linux 6.5", " - [Config] update annotations after rebase to v6.5-rc1", " - [Config] temporarily disable Rust", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.5-rc1", "" ], "package": "linux-unstable", "version": "6.5.0-1.1", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2026689, 2025195, 1786013, 2007654 ], "author": "Andrea Righi ", "date": "Mon, 10 Jul 2023 09:15:26 +0200" }, { "cves": [], "log": [ "", " * Empty entry", "" ], "package": "linux-unstable", "version": "6.5.0-0.0", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [], "author": "Andrea Righi ", "date": "Wed, 05 Jul 2023 12:48:39 +0200" }, { "cves": [], "log": [ "", " * mantic/linux-unstable: 6.4.0-8.8 -proposed tracker (LP: #2025018)", "", " * Miscellaneous Ubuntu changes", " - [Config] update toolchain version (gcc) in annotations", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.4", "" ], "package": "linux-unstable", "version": "6.4.0-8.8", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2025018 ], "author": "Andrea Righi ", "date": "Mon, 26 Jun 2023 09:14:02 +0200" }, { "cves": [], "log": [ "", " * mantic/linux-unstable: 6.4.0-7.7 -proposed tracker (LP: #2024338)", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.4-rc7", "" ], "package": "linux-unstable", "version": "6.4.0-7.7", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2024338 ], "author": "Andrea Righi ", "date": "Mon, 19 Jun 2023 08:51:27 +0200" }, { "cves": [], "log": [ "", " * mantic/linux-unstable: 6.4.0-6.6 -proposed tracker (LP: #2023966)", "", " * Packaging resync (LP: #1786013)", " - [Packaging] update annotations scripts", "", " * enable multi-gen LRU by default (LP: #2023629)", " - [Config] enable multi-gen LRU by default", "", " * Fix Monitor lost after replug WD19TBS to SUT port with VGA/DVI to type-C", " dongle (LP: #2021949)", " - thunderbolt: Do not touch CL state configuration during discovery", " - thunderbolt: Increase DisplayPort Connection Manager handshake timeout", "", " * Neuter signing tarballs (LP: #2012776)", " - [Packaging] remove the signing tarball support", "", " * Enable Tracing Configs for OSNOISE and TIMERLAT (LP: #2018591)", " - [Config] Enable OSNOISE_TRACER and TIMERLAT_TRACER configs", "", " * Miscellaneous Ubuntu changes", " - [Config] Add CONFIG_AS_HAS_NON_CONST_LEB128 on riscv64", " - [Packaging] introduce do_lib_rust and enable it only on generic amd64", " - [Config] update annotations after rebase to v6.4-rc6", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.4-rc6", "" ], "package": "linux-unstable", "version": "6.4.0-6.6", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2023966, 1786013, 2023629, 2021949, 2012776, 2018591 ], "author": "Andrea Righi ", "date": "Thu, 15 Jun 2023 20:11:07 +0200" }, { "cves": [], "log": [ "", " * mantic/linux-unstable: 6.4.0-5.5 -proposed tracker (LP: #2022886)", "", " * Miscellaneous Ubuntu changes", " - [Packaging] update getabis to support linux-unstable", " - UBUNTU [Config]: disable hibernation on riscv64", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.4-rc5", "" ], "package": "linux-unstable", "version": "6.4.0-5.5", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2022886 ], "author": "Andrea Righi ", "date": "Tue, 06 Jun 2023 08:18:01 +0200" }, { "cves": [], "log": [ "", " * mantic/linux-unstable: 6.4.0-4.4 -proposed tracker (LP: #2021597)", "", " * Miscellaneous Ubuntu changes", " - [Config] udpate annotations after rebase to v6.4-rc4", "" ], "package": "linux-unstable", "version": "6.4.0-4.4", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2021597 ], "author": "Andrea Righi ", "date": "Tue, 30 May 2023 11:55:41 +0200" }, { "cves": [], "log": [ "", " * mantic/linux-unstable: 6.4.0-3.3 -proposed tracker (LP: #2021497)", "", " * Packaging resync (LP: #1786013)", " - [Packaging] resync git-ubuntu-log", " - [Packaging] resync getabis", "", " * support python < 3.9 with annotations (LP: #2020531)", " - [Packaging] kconfig/annotations.py: support older way of merging dicts", "", " * generate linux-lib-rust only on amd64 (LP: #2020356)", " - [Packaging] generate linux-lib-rust only on amd64", "", " * Miscellaneous Ubuntu changes", " - [Packaging] annotations: never drop configs that have notes different than", " the parent", " - [Config] drop CONFIG_SMBFS_COMMON from annotations", " - [Packaging] perf: build without libtraceevent", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.4-rc4", "" ], "package": "linux-unstable", "version": "6.4.0-3.3", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2021497, 1786013, 2020531, 2020356 ], "author": "Andrea Righi ", "date": "Tue, 30 May 2023 08:38:10 +0200" }, { "cves": [], "log": [ "", " * mantic/linux-unstable: 6.4.0-2.2 -proposed tracker (LP: #2020330)", "", " * Computer with Intel Atom CPU will not boot with Kernel 6.2.0-20", " (LP: #2017444)", " - [Config]: Disable CONFIG_INTEL_ATOMISP", "", " * Fix NVME storage with RAID ON disappeared under Dell factory WINPE", " environment (LP: #2011768)", " - SAUCE: PCI: vmd: Reset VMD config register between soft reboots", "", " * Miscellaneous Ubuntu changes", " - [Packaging] Drop support of old config handling", " - [Config] update annotations after rebase to v6.4-rc3", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.4-rc3", "" ], "package": "linux-unstable", "version": "6.4.0-2.2", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2020330, 2017444, 2011768 ], "author": "Andrea Righi ", "date": "Mon, 22 May 2023 11:22:14 +0200" }, { "cves": [], "log": [ "", " * mantic/linux-unstable: 6.4.0-1.1 -proposed tracker (LP: #2019965)", "", " * Packaging resync (LP: #1786013)", " - [Packaging] update variants", " - [Packaging] update helper scripts", "", " * Kernel 6.1 bumped the disk consumption on default images by 15%", " (LP: #2015867)", " - [Packaging] introduce a separate linux-lib-rust package", "", " * Miscellaneous Ubuntu changes", " - [Config] enable CONFIG_BLK_DEV_UBLK on amd64", " - [Packaging] annotations: use python3 in the shebang", " - SAUCE: blk-throttle: Fix io statistics for cgroup v1", " - [Packaging] move to v6.4 and rename to linux-unstable", " - [Config] update annotations after rebase to v6.4-rc1", " - [Packaging] temporarily disable perf", " - [Packaging] temporarily disable bpftool", " - [Config] ppc64el: reduce CONFIG_ARCH_FORCE_MAX_ORDER from 9 to 8", " - SAUCE: perf: explicitly disable libtraceevent", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.4-rc2", "" ], "package": "linux-unstable", "version": "6.4.0-1.1", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [ 2019965, 1786013, 2015867 ], "author": "Andrea Righi ", "date": "Thu, 18 May 2023 07:34:09 +0200" }, { "cves": [], "log": [ "", " * Empty entry", "" ], "package": "linux-unstable", "version": "6.4.0-0.0", "urgency": "medium", "distributions": "mantic", "launchpad_bugs_fixed": [], "author": "Andrea Righi ", "date": "Wed, 17 May 2023 15:29:25 +0200" }, { "cves": [], "log": [ "", " * lunar/linux-unstable: 6.3.0-2.2 -proposed tracker (LP: #2017788)", "", " * Miscellaneous Ubuntu changes", " - [Packaging] move python3-dev to build-depends", "" ], "package": "linux-unstable", "version": "6.3.0-2.2", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2017788 ], "author": "Andrea Righi ", "date": "Wed, 26 Apr 2023 21:52:12 +0200" }, { "cves": [], "log": [ "", " * lunar/linux-unstable: 6.3.0-1.1 -proposed tracker (LP: #2017776)", "", " * RFC: virtio and virtio-scsi should be built in (LP: #1685291)", " - [Config] Mark CONFIG_SCSI_VIRTIO built-in", "", " * Debian autoreconstruct Fix restoration of execute permissions (LP: #2015498)", " - [Debian] autoreconstruct - fix restoration of execute permissions", "", " * [SRU][Jammy] CONFIG_PCI_MESON is not enabled (LP: #2007745)", " - [Config] arm64: Enable PCI_MESON module", "", " * vmd may fail to create sysfs entry while `pci_rescan_bus()` called in some", " other drivers like wwan (LP: #2011389)", " - SAUCE: PCI: vmd: guard device addition and removal", "", " * Lunar update: v6.2.9 upstream stable release (LP: #2016877)", " - [Config] ppc64: updateconfigs following v6.2.9 stable updates", "", " * Lunar update: v6.2.8 upstream stable release (LP: #2016876)", " - [Config] ppc64: updateconfigs following v6.2.8 stable updates", "", " * Miscellaneous Ubuntu changes", " - [Packaging] Move final-checks script to debian/scripts/checks", " - [Packaging] checks/final-checks: Honor 'do_skip_checks'", " - [Packaging] Drop wireguard DKMS", " - [Packaging] Remove update-version-dkms", " - [Packaging] debian/rules: Add DKMS info to 'printenv' output", " - [Packaging] ignore KBUILD_VERBOSE in arch-has-odm-enabled.sh", " - SAUCE: shiftfs: support linux 6.3", " - [Packaging] move to v6.3 and rename to linux-unstable", " - [Config] latency-related optimizations", " - [Config] update annotations after rebase to v6.3", " - [Packaging] temporarily disable dkms", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.3", "" ], "package": "linux-unstable", "version": "6.3.0-1.1", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2017776, 1685291, 2015498, 2007745, 2011389, 2016877, 2016876 ], "author": "Andrea Righi ", "date": "Wed, 26 Apr 2023 14:53:52 +0200" }, { "cves": [], "log": [ "", " * Empty entry", "" ], "package": "linux-unstable", "version": "6.3.0-0.0", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [], "author": "Andrea Righi ", "date": "Tue, 25 Apr 2023 10:24:12 +0200" }, { "cves": [], "log": [ "", " * lunar/linux: 6.2.0-21.21 -proposed tracker (LP: #2016249)", "", " * efivarfs:efivarfs.sh in ubuntu_kernel_selftests crash L-6.2 ARM64 node", " dazzle (rcu_preempt detected stalls) (LP: #2015741)", " - efi/libstub: smbios: Use length member instead of record struct size", " - arm64: efi: Use SMBIOS processor version to key off Ampere quirk", " - efi/libstub: smbios: Drop unused 'recsize' parameter", "", " * Miscellaneous Ubuntu changes", " - SAUCE: selftests/bpf: ignore pointer types check with clang", " - SAUCE: selftests/bpf: avoid conflicting data types in profiler.inc.h", " - [Packaging] get rid of unnecessary artifacts in linux-headers", "", " * Miscellaneous upstream changes", " - Revert \"UBUNTU: SAUCE: Revert \"efi: random: refresh non-volatile random seed", " when RNG is initialized\"\"", " - Revert \"UBUNTU: SAUCE: Revert \"efi: random: fix NULL-deref when refreshing", " seed\"\"", "" ], "package": "linux", "version": "6.2.0-21.21", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2016249, 2015741 ], "author": "Andrea Righi ", "date": "Fri, 14 Apr 2023 12:11:49 +0200" }, { "cves": [], "log": [ "", " * lunar/linux: 6.2.0-20.20 -proposed tracker (LP: #2015429)", "", " * Packaging resync (LP: #1786013)", " - debian/dkms-versions -- update from kernel-versions (main/master)", "", " * FTBFS with different dkms or when makeflags are set (LP: #2015361)", " - [Packaging] FTBFS with different dkms or when makeflags are set", "", " * expoline.o is packaged unconditionally for s390x (LP: #2013209)", " - [Packaging] Copy expoline.o only when produced by the build", "", " * net:l2tp.sh failure with lunar:linux 6.2 (LP: #2013014)", " - SAUCE: l2tp: generate correct module alias strings", "", " * Miscellaneous Ubuntu changes", " - [Packaging] annotations: prevent duplicate include lines", "" ], "package": "linux", "version": "6.2.0-20.20", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2015429, 1786013, 2015361, 2013209, 2013014 ], "author": "Andrea Righi ", "date": "Thu, 06 Apr 2023 08:33:14 +0200" }, { "cves": [], "log": [ "", " * lunar/linux: 6.2.0-19.19 -proposed tracker (LP: #2012488)", "", " * Neuter signing tarballs (LP: #2012776)", " - [Packaging] neuter the signing tarball", "", " * LSM stacking and AppArmor refresh for 6.2 kernel (LP: #2012136)", " - Revert \"UBUNTU: [Config] define CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS\"", " - Revert \"UBUNTU: SAUCE: apparmor: add user namespace creation mediation\"", " - Revert \"UBUNTU: SAUCE: apparmor: Add fine grained mediation of posix", " mqueues\"", " - Revert \"UBUNTU: SAUCE: Revert \"apparmor: make __aa_path_perm() static\"\"", " - Revert \"UBUNTU: SAUCE: LSM: Specify which LSM to display (using struct cred", " as input)\"", " - Revert \"UBUNTU: SAUCE: apparmor: Fix build error, make sk parameter const\"", " - Revert \"UBUNTU: SAUCE: LSM: Use lsmblob in smk_netlbl_mls()\"", " - Revert \"UBUNTU: SAUCE: LSM: change ima_read_file() to use lsmblob\"", " - Revert \"UBUNTU: SAUCE: apparmor: rename kzfree() to kfree_sensitive()\"", " - Revert \"UBUNTU: SAUCE: AppArmor: Remove the exclusive flag\"", " - Revert \"UBUNTU: SAUCE: LSM: Add /proc attr entry for full LSM context\"", " - Revert \"UBUNTU: SAUCE: Audit: Fix incorrect static inline function", " declration.\"", " - Revert \"UBUNTU: SAUCE: Audit: Fix for missing NULL check\"", " - Revert \"UBUNTU: SAUCE: Audit: Add a new record for multiple object LSM", " attributes\"", " - Revert \"UBUNTU: SAUCE: Audit: Add new record for multiple process LSM", " attributes\"", " - Revert \"UBUNTU: SAUCE: NET: Store LSM netlabel data in a lsmblob\"", " - Revert \"UBUNTU: SAUCE: LSM: security_secid_to_secctx in netlink netfilter\"", " - Revert \"UBUNTU: SAUCE: LSM: Use lsmcontext in security_inode_getsecctx\"", " - Revert \"UBUNTU: SAUCE: LSM: Use lsmcontext in security_secid_to_secctx\"", " - Revert \"UBUNTU: SAUCE: LSM: Ensure the correct LSM context releaser\"", " - Revert \"UBUNTU: SAUCE: LSM: Specify which LSM to display\"", " - Revert \"UBUNTU: SAUCE: IMA: Change internal interfaces to use lsmblobs\"", " - Revert \"UBUNTU: SAUCE: LSM: Use lsmblob in security_cred_getsecid\"", " - Revert \"UBUNTU: SAUCE: LSM: Use lsmblob in security_inode_getsecid\"", " - Revert \"UBUNTU: SAUCE: LSM: Use lsmblob in security_task_getsecid\"", " - Revert \"UBUNTU: SAUCE: LSM: Use lsmblob in security_ipc_getsecid\"", " - Revert \"UBUNTU: SAUCE: LSM: Use lsmblob in security_secid_to_secctx\"", " - Revert \"UBUNTU: SAUCE: LSM: Use lsmblob in security_secctx_to_secid\"", " - Revert \"UBUNTU: SAUCE: net: Prepare UDS for security module stacking\"", " - Revert \"UBUNTU: SAUCE: LSM: Use lsmblob in security_kernel_act_as\"", " - Revert \"UBUNTU: SAUCE: LSM: Use lsmblob in security_audit_rule_match\"", " - Revert \"UBUNTU: SAUCE: LSM: Create and manage the lsmblob data structure.\"", " - Revert \"UBUNTU: SAUCE: LSM: Infrastructure management of the sock security\"", " - Revert \"UBUNTU: SAUCE: apparmor: LSM stacking: switch from SK_CTX() to", " aa_sock()\"", " - Revert \"UBUNTU: SAUCE: apparmor: rename aa_sock() to aa_unix_sk()\"", " - Revert \"UBUNTU: SAUCE: apparmor: disable showing the mode as part of a secid", " to secctx\"", " - Revert \"UBUNTU: SAUCE: apparmor: fix use after free in sk_peer_label\"", " - Revert \"UBUNTU: SAUCE: apparmor: af_unix mediation\"", " - Revert \"UBUNTU: SAUCE: apparmor: patch to provide compatibility with v2.x", " net rules\"", " - Revert \"UBUNTU: SAUCE: apparmor: add/use fns to print hash string hex value\"", " - SAUCE: apparmor: rename SK_CTX() to aa_sock and make it an inline fn", " - SAUCE: apparmor: Add sysctls for additional controls of unpriv userns", " restrictions", " - SAUCE: Stacking v38: LSM: Identify modules by more than name", " - SAUCE: Stacking v38: LSM: Add an LSM identifier for external use", " - SAUCE: Stacking v38: LSM: Identify the process attributes for each module", " - SAUCE: Stacking v38: LSM: Maintain a table of LSM attribute data", " - SAUCE: Stacking v38: proc: Use lsmids instead of lsm names for attrs", " - SAUCE: Stacking v38: integrity: disassociate ima_filter_rule from", " security_audit_rule", " - SAUCE: Stacking v38: LSM: Infrastructure management of the sock security", " - SAUCE: Stacking v38: LSM: Add the lsmblob data structure.", " - SAUCE: Stacking v38: LSM: provide lsm name and id slot mappings", " - SAUCE: Stacking v38: IMA: avoid label collisions with stacked LSMs", " - SAUCE: Stacking v38: LSM: Use lsmblob in security_audit_rule_match", " - SAUCE: Stacking v38: LSM: Use lsmblob in security_kernel_act_as", " - SAUCE: Stacking v38: LSM: Use lsmblob in security_secctx_to_secid", " - SAUCE: Stacking v38: LSM: Use lsmblob in security_secid_to_secctx", " - SAUCE: Stacking v38: LSM: Use lsmblob in security_ipc_getsecid", " - SAUCE: Stacking v38: LSM: Use lsmblob in security_current_getsecid", " - SAUCE: Stacking v38: LSM: Use lsmblob in security_inode_getsecid", " - SAUCE: Stacking v38: LSM: Use lsmblob in security_cred_getsecid", " - SAUCE: Stacking v38: LSM: Specify which LSM to display", " - SAUCE: Stacking v38: LSM: Ensure the correct LSM context releaser", " - SAUCE: Stacking v38: LSM: Use lsmcontext in security_secid_to_secctx", " - SAUCE: Stacking v38: LSM: Use lsmcontext in security_inode_getsecctx", " - SAUCE: Stacking v38: Use lsmcontext in security_dentry_init_security", " - SAUCE: Stacking v38: LSM: security_secid_to_secctx in netlink netfilter", " - SAUCE: Stacking v38: NET: Store LSM netlabel data in a lsmblob", " - SAUCE: Stacking v38: binder: Pass LSM identifier for confirmation", " - SAUCE: Stacking v38: LSM: security_secid_to_secctx module selection", " - SAUCE: Stacking v38: Audit: Keep multiple LSM data in audit_names", " - SAUCE: Stacking v38: Audit: Create audit_stamp structure", " - SAUCE: Stacking v38: LSM: Add a function to report multiple LSMs", " - SAUCE: Stacking v38: Audit: Allow multiple records in an audit_buffer", " - SAUCE: Stacking v38: Audit: Add record for multiple task security contexts", " - SAUCE: Stacking v38: audit: multiple subject lsm values for netlabel", " - SAUCE: Stacking v38: Audit: Add record for multiple object contexts", " - SAUCE: Stacking v38: netlabel: Use a struct lsmblob in audit data", " - SAUCE: Stacking v38: LSM: Removed scaffolding function lsmcontext_init", " - SAUCE: Stacking v38: AppArmor: Remove the exclusive flag", " - SAUCE: apparmor: combine common_audit_data and apparmor_audit_data", " - SAUCE: apparmor: setup slab cache for audit data", " - SAUCE: apparmor: rename audit_data->label to audit_data->subj_label", " - SAUCE: apparmor: pass cred through to audit info.", " - SAUCE: apparmor: Improve debug print infrastructure", " - SAUCE: apparmor: add the ability for profiles to have a learning cache", " - SAUCE: apparmor: enable userspace upcall for mediation", " - SAUCE: apparmor: cache buffers on percpu list if there is lock contention", " - SAUCE: apparmor: fix policy_compat permission remap with extended", " permissions", " - SAUCE: apparmor: advertise availability of exended perms", " - [Config] define CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS", "", " * kinetic: apply new apparmor and LSM stacking patch set (LP: #1989983) // LSM", " stacking and AppArmor refresh for 6.2 kernel (LP: #2012136)", " - SAUCE: apparmor: add/use fns to print hash string hex value", " - SAUCE: apparmor: patch to provide compatibility with v2.x net rules", " - SAUCE: apparmor: add user namespace creation mediation", " - SAUCE: apparmor: af_unix mediation", " - SAUCE: apparmor: Add fine grained mediation of posix mqueues", "", " * devlink_port_split from ubuntu_kernel_selftests.net fails on hirsute", " (KeyError: 'flavour') (LP: #1937133)", " - selftests: net: devlink_port_split.py: skip test if no suitable device", " available", "", " * NFS deathlock with last Kernel 5.4.0-144.161 and 5.15.0-67.74 (LP: #2009325)", " - NFS: Correct timing for assigning access cache timestamp", "" ], "package": "linux", "version": "6.2.0-19.19", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2012488, 2012776, 2012136, 1989983, 2012136, 1937133, 2009325 ], "author": "Andrea Righi ", "date": "Sat, 25 Mar 2023 07:37:30 +0100" }, { "cves": [], "log": [ "", " * lunar/linux: 6.2.0-18.18 -proposed tracker (LP: #2011750)", "", " * lunar/linux 6.2 fails to boot on arm64 (LP: #2011748)", " - SAUCE: Revert \"efi: random: fix NULL-deref when refreshing seed\"", " - SAUCE: Revert \"efi: random: refresh non-volatile random seed when RNG is", " initialized\"", "" ], "package": "linux", "version": "6.2.0-18.18", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2011750, 2011748 ], "author": "Andrea Righi ", "date": "Wed, 15 Mar 2023 23:54:18 +0100" }, { "cves": [], "log": [ "", " * lunar/linux: 6.2.0-17.17 -proposed tracker (LP: #2011593)", "", " * lunar/linux 6.2 fails to boot on ppc64el (LP: #2011413)", " - SAUCE: Revert \"powerpc: remove STACK_FRAME_OVERHEAD\"", " - SAUCE: Revert \"powerpc/pseries: hvcall stack frame overhead\"", "", " * Speaker / Audio/Mic mute LED don't work on a HP platform (LP: #2011379)", " - SAUCE: ALSA: hda/realtek: fix speaker, mute/micmute LEDs not work on a HP", " platform", "", " * Some QHD panels fail to refresh when PSR2 enabled (LP: #2009014)", " - SAUCE: drm/i915/psr: Use calculated io and fast wake lines", "", " * Lunar update: v6.2.6 upstream stable release (LP: #2011431)", " - tpm: disable hwrng for fTPM on some AMD designs", " - wifi: cfg80211: Partial revert \"wifi: cfg80211: Fix use after free for wext\"", " - staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script", " - staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh", " - Linux 6.2.6", "", " * Lunar update: v6.2.5 upstream stable release (LP: #2011430)", " - net/sched: Retire tcindex classifier", " - auxdisplay: hd44780: Fix potential memory leak in hd44780_remove()", " - fs/jfs: fix shift exponent db_agl2size negative", " - driver: soc: xilinx: fix memory leak in xlnx_add_cb_for_notify_event()", " - f2fs: don't rely on F2FS_MAP_* in f2fs_iomap_begin", " - f2fs: fix to avoid potential deadlock", " - objtool: Fix memory leak in create_static_call_sections()", " - soc: mediatek: mtk-pm-domains: Allow mt8186 ADSP default power on", " - soc: qcom: socinfo: Fix soc_id order", " - memory: renesas-rpc-if: Split-off private data from struct rpcif", " - memory: renesas-rpc-if: Move resource acquisition to .probe()", " - soc: mediatek: mtk-svs: Enable the IRQ later", " - pwm: sifive: Always let the first pwm_apply_state succeed", " - pwm: stm32-lp: fix the check on arr and cmp registers update", " - f2fs: introduce trace_f2fs_replace_atomic_write_block", " - f2fs: clear atomic_write_task in f2fs_abort_atomic_write()", " - soc: mediatek: mtk-svs: restore default voltages when svs_init02() fail", " - soc: mediatek: mtk-svs: reset svs when svs_resume() fail", " - soc: mediatek: mtk-svs: Use pm_runtime_resume_and_get() in svs_init01()", " - f2fs: fix to do sanity check on extent cache correctly", " - fs: f2fs: initialize fsdata in pagecache_write()", " - f2fs: allow set compression option of files without blocks", " - f2fs: fix to abort atomic write only during do_exist()", " - um: vector: Fix memory leak in vector_config", " - ubi: ensure that VID header offset + VID header size <= alloc, size", " - ubifs: Fix build errors as symbol undefined", " - ubifs: Fix memory leak in ubifs_sysfs_init()", " - ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted", " - ubifs: Rectify space budget for ubifs_xrename()", " - ubifs: Fix wrong dirty space budget for dirty inode", " - ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1", " - ubifs: Reserve one leb for each journal head while doing budget", " - ubi: Fix use-after-free when volume resizing failed", " - ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume()", " - ubifs: Fix memory leak in alloc_wbufs()", " - ubi: Fix possible null-ptr-deref in ubi_free_volume()", " - ubifs: Re-statistic cleaned znode count if commit failed", " - ubifs: dirty_cow_znode: Fix memleak in error handling path", " - ubifs: ubifs_writepage: Mark page dirty after writing inode failed", " - ubifs: ubifs_releasepage: Remove ubifs_assert(0) to valid this process", " - ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling", " fastmap", " - ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()", " - ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed", " - f2fs: fix to handle F2FS_IOC_START_ATOMIC_REPLACE in f2fs_compat_ioctl()", " - f2fs: fix to avoid potential memory corruption in __update_iostat_latency()", " - f2fs: fix to update age extent correctly during truncation", " - f2fs: fix to update age extent in f2fs_do_zero_range()", " - soc: qcom: stats: Populate all subsystem debugfs files", " - f2fs: introduce IS_F2FS_IPU_* macro", " - f2fs: fix to set ipu policy", " - ext4: use ext4_fc_tl_mem in fast-commit replay path", " - ext4: don't show commit interval if it is zero", " - netfilter: nf_tables: allow to fetch set elements when table has an owner", " - x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list", " - um: virtio_uml: free command if adding to virtqueue failed", " - um: virtio_uml: mark device as unregistered when breaking it", " - um: virtio_uml: move device breaking into workqueue", " - um: virt-pci: properly remove PCI device from bus", " - f2fs: synchronize atomic write aborts", " - watchdog: rzg2l_wdt: Issue a reset before we put the PM clocks", " - watchdog: rzg2l_wdt: Handle TYPE-B reset for RZ/V2M", " - watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in", " error path", " - watchdog: Fix kmemleak in watchdog_cdev_register", " - watchdog: pcwd_usb: Fix attempting to access uninitialized memory", " - watchdog: sbsa_wdog: Make sure the timeout programming is within the limits", " - netfilter: ctnetlink: fix possible refcount leak in", " ctnetlink_create_conntrack()", " - netfilter: conntrack: fix rmmod double-free race", " - netfilter: ip6t_rpfilter: Fix regression with VRF interfaces", " - netfilter: ebtables: fix table blob use-after-free", " - netfilter: xt_length: use skb len to match in length_mt6", " - netfilter: ctnetlink: make event listener tracking global", " - netfilter: x_tables: fix percpu counter block leak on error path when", " creating new netns", " - swiotlb: mark swiotlb_memblock_alloc() as __init", " - ptp: vclock: use mutex to fix \"sleep on atomic\" bug", " - drm/i915: move a Kconfig symbol to unbreak the menu presentation", " - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation", " - drm/i915/xelpmp: Consider GSI offset when doing MCR lookups", " - octeontx2-pf: Recalculate UDP checksum for ptp 1-step sync packet", " - net: sunhme: Fix region request", " - sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop", " - octeontx2-pf: Use correct struct reference in test condition", " - net: fix __dev_kfree_skb_any() vs drop monitor", " - 9p/xen: fix version parsing", " - 9p/xen: fix connection sequence", " - 9p/rdma: unmap receive dma buffer in rdma_request()/post_recv()", " - spi: tegra210-quad: Fix validate combined sequence", " - mlx5: fix skb leak while fifo resync and push", " - mlx5: fix possible ptp queue fifo use-after-free", " - net/mlx5: ECPF, wait for VF pages only after disabling host PFs", " - net/mlx5e: Verify flow_source cap before using it", " - net/mlx5: Geneve, Fix handling of Geneve object id as error code", " - ext4: fix incorrect options show of original mount_opt and extend mount_opt2", " - nfc: fix memory leak of se_io context in nfc_genl_se_io", " - net/sched: transition act_pedit to rcu and percpu stats", " - net/sched: act_pedit: fix action bind logic", " - net/sched: act_mpls: fix action bind logic", " - net/sched: act_sample: fix action bind logic", " - net: dsa: seville: ignore mscc-miim read errors from Lynx PCS", " - net: dsa: felix: fix internal MDIO controller resource length", " - ARM: dts: aspeed: p10bmc: Update battery node name", " - ARM: dts: spear320-hmi: correct STMPE GPIO compatible", " - tcp: tcp_check_req() can be called from process context", " - vc_screen: modify vcs_size() handling in vcs_read()", " - spi: tegra210-quad: Fix iterator outside loop", " - rtc: sun6i: Always export the internal oscillator", " - genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()", " - scsi: ipr: Work around fortify-string warning", " - scsi: mpi3mr: Fix an issue found by KASAN", " - scsi: mpi3mr: Use number of bits to manage bitmap sizes", " - rtc: allow rtc_read_alarm without read_alarm callback", " - io_uring: fix size calculation when registering buf ring", " - loop: loop_set_status_from_info() check before assignment", " - ASoC: adau7118: don't disable regulators on device unbind", " - ASoC: apple: mca: Fix final status read on SERDES reset", " - ASoC: apple: mca: Fix SERDES reset sequence", " - ASoC: apple: mca: Improve handling of unavailable DMA channels", " - nvme: bring back auto-removal of deleted namespaces during sequential scan", " - nvme-tcp: don't access released socket during error recovery", " - nvme-fabrics: show well known discovery name", " - ASoC: zl38060 add gpiolib dependency", " - ASoC: mediatek: mt8195: add missing initialization", " - thermal: intel: quark_dts: fix error pointer dereference", " - thermal: intel: BXT_PMIC: select REGMAP instead of depending on it", " - cpufreq: apple-soc: Fix an IS_ERR() vs NULL check", " - tracing: Add NULL checks for buffer in ring_buffer_free_read_page()", " - kernel/printk/index.c: fix memory leak with using debugfs_lookup()", " - firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3", " - bootconfig: Increase max nodes of bootconfig from 1024 to 8192 for DCC", " support", " - mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak", " - IB/hfi1: Update RMT size calculation", " - iommu: Remove deferred attach check from __iommu_detach_device()", " - PCI/ACPI: Account for _S0W of the target bridge in acpi_pci_bridge_d3()", " - media: uvcvideo: Remove format descriptions", " - media: uvcvideo: Handle cameras with invalid descriptors", " - media: uvcvideo: Handle errors from calls to usb_string", " - media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910", " - media: uvcvideo: Silence memcpy() run-time false positive warnings", " - USB: fix memory leak with using debugfs_lookup()", " - cacheinfo: Fix shared_cpu_map to handle shared caches at different levels", " - usb: fotg210: List different variants", " - dt-bindings: usb: Add device id for Genesys Logic hub controller", " - staging: emxx_udc: Add checks for dma_alloc_coherent()", " - tty: fix out-of-bounds access in tty_driver_lookup_tty()", " - tty: serial: fsl_lpuart: disable the CTS when send break signal", " - serial: sc16is7xx: setup GPIO controller later in probe", " - mei: bus-fixup:upon error print return values of send and receive", " - tools/iio/iio_utils:fix memory leak", " - bus: mhi: ep: Fix the debug message for MHI_PKT_TYPE_RESET_CHAN_CMD cmd", " - iio: accel: mma9551_core: Prevent uninitialized variable in", " mma9551_read_status_word()", " - iio: accel: mma9551_core: Prevent uninitialized variable in", " mma9551_read_config_word()", " - media: uvcvideo: Add GUID for BGRA/X 8:8:8:8", " - soundwire: bus_type: Avoid lockdep assert in sdw_drv_probe()", " - PCI/portdrv: Prevent LS7A Bus Master clearing on shutdown", " - PCI: loongson: Prevent LS7A MRRS increases", " - staging: pi433: fix memory leak with using debugfs_lookup()", " - USB: dwc3: fix memory leak with using debugfs_lookup()", " - USB: chipidea: fix memory leak with using debugfs_lookup()", " - USB: ULPI: fix memory leak with using debugfs_lookup()", " - USB: uhci: fix memory leak with using debugfs_lookup()", " - USB: sl811: fix memory leak with using debugfs_lookup()", " - USB: fotg210: fix memory leak with using debugfs_lookup()", " - USB: isp116x: fix memory leak with using debugfs_lookup()", " - USB: isp1362: fix memory leak with using debugfs_lookup()", " - USB: gadget: gr_udc: fix memory leak with using debugfs_lookup()", " - USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup()", " - USB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup()", " - USB: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup()", " - USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup()", " - usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer", " math", " - USB: ene_usb6250: Allocate enough memory for full object", " - usb: uvc: Enumerate valid values for color matching", " - usb: gadget: uvc: Make bSourceID read/write", " - PCI: Align extra resources for hotplug bridges properly", " - PCI: Take other bus devices into account when distributing resources", " - PCI: Distribute available resources for root buses, too", " - tty: pcn_uart: fix memory leak with using debugfs_lookup()", " - misc: vmw_balloon: fix memory leak with using debugfs_lookup()", " - drivers: base: component: fix memory leak with using debugfs_lookup()", " - drivers: base: dd: fix memory leak with using debugfs_lookup()", " - kernel/fail_function: fix memory leak with using debugfs_lookup()", " - PCI: loongson: Add more devices that need MRRS quirk", " - PCI: Add ACS quirk for Wangxun NICs", " - PCI: pciehp: Add Qualcomm quirk for Command Completed erratum", " - phy: rockchip-typec: Fix unsigned comparison with less than zero", " - RDMA/cma: Distinguish between sockaddr_in and sockaddr_in6 by size", " - soundwire: cadence: Remove wasted space in response_buf", " - soundwire: cadence: Drain the RX FIFO after an IO timeout", " - eth: fealnx: bring back this old driver", " - net: tls: avoid hanging tasks on the tx_lock", " - x86/resctl: fix scheduler confusion with 'current'", " - vDPA/ifcvf: decouple hw features manipulators from the adapter", " - vDPA/ifcvf: decouple config space ops from the adapter", " - vDPA/ifcvf: alloc the mgmt_dev before the adapter", " - vDPA/ifcvf: decouple vq IRQ releasers from the adapter", " - vDPA/ifcvf: decouple config IRQ releaser from the adapter", " - vDPA/ifcvf: decouple vq irq requester from the adapter", " - vDPA/ifcvf: decouple config/dev IRQ requester and vectors allocator from the", " adapter", " - vDPA/ifcvf: ifcvf_request_irq works on ifcvf_hw", " - vDPA/ifcvf: manage ifcvf_hw in the mgmt_dev", " - vDPA/ifcvf: allocate the adapter in dev_add()", " - drm/display/dp_mst: Add drm_atomic_get_old_mst_topology_state()", " - drm/display/dp_mst: Fix down/up message handling after sink disconnect", " - drm/display/dp_mst: Fix down message handling after a packet reception error", " - drm/display/dp_mst: Fix payload addition on a disconnected sink", " - drm/i915/dp_mst: Add the MST topology state for modesetted CRTCs", " - drm/display/dp_mst: Handle old/new payload states in drm_dp_remove_payload()", " - drm/i915/dp_mst: Fix payload removal during output disabling", " - drm/i915: Fix system suspend without fbdev being initialized", " - media: uvcvideo: Fix race condition with usb_kill_urb", " - arm64: efi: Make efi_rt_lock a raw_spinlock", " - usb: gadget: uvc: fix missing mutex_unlock() if kstrtou8() fails", " - Linux 6.2.5", "", " * Lunar update: v6.2.4 upstream stable release (LP: #2011428)", " - Revert \"blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and", " blkcg_deactivate_policy()\"", " - Revert \"blk-cgroup: dropping parent refcount after pd_free_fn() is done\"", " - Linux 6.2.4", "", " * Lunar update: v6.2.3 upstream stable release (LP: #2011425)", " - HID: asus: use spinlock to protect concurrent accesses", " - HID: asus: use spinlock to safely schedule workers", " - iommu/amd: Fix error handling for pdev_pri_ats_enable()", " - iommu/amd: Skip attach device domain is same as new domain", " - iommu/amd: Improve page fault error reporting", " - iommu: Attach device group to old domain in error path", " - powerpc/mm: Rearrange if-else block to avoid clang warning", " - ata: ahci: Revert \"ata: ahci: Add Tiger Lake UP{3,4} AHCI controller\"", " - ARM: OMAP2+: Fix memory leak in realtime_counter_init()", " - arm64: dts: qcom: qcs404: use symbol names for PCIe resets", " - arm64: dts: qcom: msm8996-tone: Fix USB taking 6 minutes to wake up", " - arm64: dts: qcom: sm6115: Fix UFS node", " - arm64: dts: qcom: sm6115: Provide xo clk to rpmcc", " - arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k", " - arm64: dts: qcom: pmi8950: Correct rev_1250v channel label to mv", " - arm64: dts: qcom: sm6350: Fix up the ramoops node", " - arm64: dts: qcom: sdm670-google-sargo: keep pm660 ldo8 on", " - arm64: dts: qcom: Re-enable resin on MSM8998 and SDM845 boards", " - arm64: dts: qcom: sm8350-sagami: Configure SLG51000 PMIC on PDX215", " - arm64: dts: qcom: sm8350-sagami: Add GPIO line names for PMIC GPIOs", " - arm64: dts: qcom: sm8350-sagami: Rectify GPIO keys", " - arm64: dts: qcom: sm6350-lena: Flatten gpio-keys pinctrl state", " - arm64: dts: qcom: sm6125: Reorder HSUSB PHY clocks to match bindings", " - arm64: dts: qcom: sm6125-seine: Clean up gpio-keys (volume down)", " - arm64: dts: imx8m: Align SoC unique ID node unit address", " - ARM: zynq: Fix refcount leak in zynq_early_slcr_init", " - fs: dlm: fix return value check in dlm_memory_init()", " - arm64: dts: mediatek: mt8195: Add power domain to U3PHY1 T-PHY", " - arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description", " - arm64: dts: mediatek: mt8192: Fix systimer 13 MHz clock description", " - arm64: dts: mediatek: mt8195: Fix systimer 13 MHz clock description", " - arm64: dts: mediatek: mt8186: Fix systimer 13 MHz clock description", " - arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name", " - arm64: dts: qcom: sdm845-xiaomi-beryllium: fix audio codec interrupt pin", " name", " - x86/acpi/boot: Do not register processors that cannot be onlined for x2APIC", " - arm64: dts: qcom: sc7180: correct SPMI bus address cells", " - arm64: dts: qcom: sc7280: correct SPMI bus address cells", " - arm64: dts: qcom: sc8280xp: correct SPMI bus address cells", " - arm64: dts: qcom: sm8450: correct Soundwire wakeup interrupt name", " - arm64: dts: qcom: sdm845: make DP node follow the schema", " - arm64: dts: qcom: msm8996-oneplus-common: drop vdda-supply from DSI PHY", " - arm64: dts: qcom: sc8280xp: Vote for CX in USB controllers", " - arm64: dts: meson-gxl: jethub-j80: Fix WiFi MAC address node", " - arm64: dts: meson-gxl: jethub-j80: Fix Bluetooth MAC node name", " - arm64: dts: meson-axg: jethub-j1xx: Fix MAC address node names", " - arm64: dts: meson-gx: Fix Ethernet MAC address unit name", " - arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name", " - arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address", " - cpuidle, intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE *again*", " - arm64: dts: ti: k3-am62-main: Fix clocks for McSPI", " - arm64: tegra: Fix duplicate regulator on Jetson TX1", " - arm64: dts: qcom: msm8992-bullhead: Fix cont_splash_mem size", " - arm64: dts: qcom: msm8992-bullhead: Disable dfps_data_mem", " - arm64: dts: qcom: msm8956: use SoC-specific compat for tsens", " - arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names", " - arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY", " - arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY", " - arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges", " - arm64: dts: qcom: ipq8074: fix Gen3 PCIe node", " - arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names", " - arm64: dts: meson: remove CPU opps below 1GHz for G12A boards", " - ARM: OMAP1: call platform_device_put() in error case in", " omap1_dm_timer_init()", " - arm64: dts: mediatek: mt8192: Mark scp_adsp clock as broken", " - ARM: bcm2835_defconfig: Enable the framebuffer", " - ARM: s3c: fix s3c64xx_set_timer_source prototype", " - arm64: dts: ti: k3-j7200: Fix wakeup pinmux range", " - ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato", " - ARM: imx: Call ida_simple_remove() for ida_simple_get", " - arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name", " - arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name", " - arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible", " - arm64: dts: amlogic: meson-axg-jethome-jethub-j1xx: fix supply name of USB", " controller node", " - arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names", " property", " - arm64: dts: amlogic: meson-gx: add missing unit address to rng node name", " - arm64: dts: amlogic: meson-gxl-s905w-jethome-jethub-j80: fix invalid rtc", " node name", " - arm64: dts: amlogic: meson-axg-jethome-jethub-j1xx: fix invalid rtc node", " name", " - arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node", " name", " - arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name", " - arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names", " - arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name", " - arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name", " - arm64: dts: amlogic: meson-g12b-odroid-go-ultra: fix rk818 pmic properties", " - arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip", " - locking/rwsem: Disable preemption in all down_read*() and up_read() code", " paths", " - arm64: tegra: Mark host1x as dma-coherent on Tegra194/234", " - arm64: dts: renesas: beacon-renesom: Fix gpio expander reference", " - arm64: dts: meson: radxa-zero: allow usb otg mode", " - arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN", " - ARM: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference", " - ublk_drv: remove nr_aborted_queues from ublk_device", " - ublk_drv: don't probe partitions if the ubq daemon isn't trusted", " - ARM: dts: imx7s: correct iomuxc gpr mux controller cells", " - sbitmap: remove redundant check in __sbitmap_queue_get_batch", " - sbitmap: correct wake_batch recalculation to avoid potential IO hung", " - arm64: dts: mt8195: Fix CPU map for single-cluster SoC", " - arm64: dts: mt8192: Fix CPU map for single-cluster SoC", " - arm64: dts: mt8186: Fix CPU map for single-cluster SoC", " - arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node", " - arm64: dts: mediatek: mt8186: Fix watchdog compatible", " - arm64: dts: mediatek: mt8195: Fix watchdog compatible", " - arm64: dts: mediatek: mt7986: Fix watchdog compatible", " - ARM: dts: stm32: Update part number NVMEM description on stm32mp131", " - arm64: dts: qcom: sm8450-nagara: Correct firmware paths", " - blk-mq: avoid sleep in blk_mq_alloc_request_hctx", " - blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx", " - blk-mq: wait on correct sbitmap_queue in blk_mq_mark_tag_wait", " - blk-mq: Fix potential io hung for shared sbitmap per tagset", " - blk-mq: correct stale comment of .get_budget", " - arm64: dts: qcom: msm8996: support using GPLL0 as kryocc input", " - arm64: dts: qcom: msm8996 switch from RPM_SMD_BB_CLK1 to RPM_SMD_XO_CLK_SRC", " - arm64: dts: qcom: sm8350: drop incorrect cells from serial", " - arm64: dts: qcom: sm8450: drop incorrect cells from serial", " - arm64: dts: qcom: msm8992-lg-bullhead: Correct memory overlaps with the SMEM", " and MPSS memory regions", " - arm64: dts: qcom: msm8953: correct TLMM gpio-ranges", " - arm64: dts: qcom: sm6115: correct TLMM gpio-ranges", " - arm64: dts: qcom: msm8992-lg-bullhead: Enable regulators", " - s390/dasd: Fix potential memleak in dasd_eckd_init()", " - io_uring,audit: don't log IORING_OP_MADVISE", " - sched/rt: pick_next_rt_entity(): check list_entry", " - perf/x86/intel/ds: Fix the conversion from TSC to perf time", " - x86/perf/zhaoxin: Add stepping check for ZXC", " - KEYS: asymmetric: Fix ECDSA use via keyctl uapi", " - block: ublk: check IO buffer based on flag need_get_data", " - arm64: dts: qcom: pmk8350: Use the correct PON compatible", " - erofs: relinquish volume with mutex held", " - block: sync mixed merged request's failfast with 1st bio's", " - block: Fix io statistics for cgroup in throttle path", " - block: bio-integrity: Copy flags when bio_integrity_payload is cloned", " - block: use proper return value from bio_failfast()", " - wifi: mt76: mt7915: add missing of_node_put()", " - wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host", " - wifi: mt76: mt7915: fix mt7915_rate_txpower_get() resource leaks", " - wifi: mt76: mt7996: fix insecure data handling of mt7996_mcu_ie_countdown()", " - wifi: mt76: mt7996: fix insecure data handling of", " mt7996_mcu_rx_radar_detected()", " - wifi: mt76: mt7996: fix integer handling issue of mt7996_rf_regval_set()", " - wifi: mt76: mt7915: check return value before accessing free_block_num", " - wifi: mt76: mt7996: check return value before accessing free_block_num", " - wifi: mt76: mt7915: drop always true condition of __mt7915_reg_addr()", " - wifi: mt76: mt7996: drop always true condition of __mt7996_reg_addr()", " - wifi: mt76: mt7996: fix endianness warning in mt7996_mcu_sta_he_tlv", " - wifi: mt76: mt76x0: fix oob access in mt76x0_phy_get_target_power", " - wifi: mt76: mt7996: fix unintended sign extension of mt7996_hw_queue_read()", " - wifi: mt76: mt7915: fix unintended sign extension of mt7915_hw_queue_read()", " - wifi: mt76: fix coverity uninit_use_in_call in", " mt76_connac2_reverse_frag0_hdr_trans()", " - wifi: mt76: mt7921: resource leaks at mt7921_check_offload_capability()", " - wifi: rsi: Fix memory leak in rsi_coex_attach()", " - wifi: rtlwifi: rtl8821ae: don't call kfree_skb() under spin_lock_irqsave()", " - wifi: rtlwifi: rtl8188ee: don't call kfree_skb() under spin_lock_irqsave()", " - wifi: rtlwifi: rtl8723be: don't call kfree_skb() under spin_lock_irqsave()", " - wifi: iwlegacy: common: don't call dev_kfree_skb() under spin_lock_irqsave()", " - wifi: libertas: fix memory leak in lbs_init_adapter()", " - wifi: rtl8xxxu: Fix assignment to bit field priv->pi_enabled", " - wifi: rtl8xxxu: Fix assignment to bit field priv->cck_agc_report_type", " - wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave()", " - wifi: rtw89: 8852c: rfk: correct DACK setting", " - wifi: rtw89: 8852c: rfk: correct DPK settings", " - wifi: rtlwifi: Fix global-out-of-bounds bug in", " _rtl8812ae_phy_set_txpower_limit()", " - libbpf: Fix single-line struct definition output in btf_dump", " - libbpf: Fix btf__align_of() by taking into account field offsets", " - wifi: ipw2x00: don't call dev_kfree_skb() under spin_lock_irqsave()", " - wifi: ipw2200: fix memory leak in ipw_wdev_init()", " - wifi: wilc1000: fix potential memory leak in wilc_mac_xmit()", " - wifi: wilc1000: add missing unregister_netdev() in wilc_netdev_ifc_init()", " - wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()", " - wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid()", " - wifi: libertas_tf: don't call kfree_skb() under spin_lock_irqsave()", " - wifi: libertas: if_usb: don't call kfree_skb() under spin_lock_irqsave()", " - wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave()", " - wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave()", " - wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave()", " - libbpf: Fix invalid return address register in s390", " - crypto: x86/ghash - fix unaligned access in ghash_setkey()", " - crypto: ux500 - update debug config after ux500 cryp driver removal", " - ACPICA: Drop port I/O validation for some regions", " - genirq: Fix the return type of kstat_cpu_irqs_sum()", " - rcu-tasks: Improve comments explaining tasks_rcu_exit_srcu purpose", " - rcu-tasks: Remove preemption disablement around srcu_read_[un]lock() calls", " - rcu-tasks: Fix synchronize_rcu_tasks() VS zap_pid_ns_processes()", " - lib/mpi: Fix buffer overrun when SG is too long", " - crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2", " - platform/chrome: cros_ec_typec: Update port DP VDO", " - ACPICA: nsrepair: handle cases without a return value correctly", " - libbpf: Fix map creation flags sanitization", " - bpf_doc: Fix build error with older python versions", " - selftests/xsk: print correct payload for packet dump", " - selftests/xsk: print correct error codes when exiting", " - arm64/cpufeature: Fix field sign for DIT hwcap detection", " - arm64/sysreg: Fix errors in 32 bit enumeration values", " - kselftest/arm64: Fix syscall-abi for systems without 128 bit SME", " - workqueue: Protects wq_unbound_cpumask with wq_pool_attach_mutex", " - s390/early: fix sclp_early_sccb variable lifetime", " - s390/vfio-ap: fix an error handling path in vfio_ap_mdev_probe_queue()", " - x86/signal: Fix the value returned by strict_sas_size()", " - thermal/drivers/tsens: Drop msm8976-specific defines", " - thermal/drivers/tsens: Sort out msm8976 vs msm8956 data", " - thermal/drivers/tsens: fix slope values for msm8939", " - thermal/drivers/tsens: limit num_sensors to 9 for msm8939", " - wifi: rtw89: fix potential leak in rtw89_append_probe_req_ie()", " - wifi: rtw89: Add missing check for alloc_workqueue", " - wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU", " - wifi: orinoco: check return value of hermes_write_wordrec()", " - wifi: rtw88: Use rtw_iterate_vifs() for rtw_vif_watch_dog_iter()", " - wifi: rtw88: Use non-atomic sta iterator in rtw_ra_mask_info_update()", " - thermal/drivers/imx_sc_thermal: Fix the loop condition", " - wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback", " function", " - wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails", " - wifi: ath9k: Fix potential stack-out-of-bounds write in", " ath9k_wmi_rsp_callback()", " - wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup", " - wifi: cfg80211: Fix extended KCK key length check in", " nl80211_set_rekey_data()", " - ACPI: battery: Fix missing NUL-termination with large strings", " - selftests/bpf: Fix build errors if CONFIG_NF_CONNTRACK=m", " - crypto: ccp - Failure on re-initialization due to duplicate sysfs filename", " - crypto: essiv - Handle EBUSY correctly", " - crypto: seqiv - Handle EBUSY correctly", " - powercap: fix possible name leak in powercap_register_zone()", " - bpf: Fix state pruning for STACK_DYNPTR stack slots", " - bpf: Fix missing var_off check for ARG_PTR_TO_DYNPTR", " - bpf: Fix partial dynptr stack slot reads/writes", " - x86/microcode: Add a parameter to microcode_check() to store CPU", " capabilities", " - x86/microcode: Check CPU capabilities after late microcode update correctly", " - x86/microcode: Adjust late loading result reporting message", " - net: ethernet: ti: am65-cpsw/cpts: Fix CPTS release action", " - selftests/bpf: Fix vmtest static compilation error", " - crypto: xts - Handle EBUSY correctly", " - leds: led-class: Add missing put_device() to led_put()", " - drm/nouveau/disp: Fix nvif_outp_acquire_dp() argument size", " - s390/bpf: Add expoline to tail calls", " - wifi: iwlwifi: mei: fix compilation errors in rfkill()", " - kselftest/arm64: Fix enumeration of systems without 128 bit SME", " - can: rcar_canfd: Fix R-Car V3U CAN mode selection", " - can: rcar_canfd: Fix R-Car V3U GAFLCFG field accesses", " - selftests/bpf: Initialize tc in xdp_synproxy", " - crypto: ccp - Flush the SEV-ES TMR memory before giving it to firmware", " - bpftool: profile online CPUs instead of possible", " - wifi: mt76: mt7921: fix deadlock in mt7921_abort_roc", " - wifi: mt76: mt7915: call mt7915_mcu_set_thermal_throttling() only after", " init_work", " - wifi: mt76: mt7915: rework mt7915_mcu_set_thermal_throttling", " - wifi: mt76: mt7915: rework mt7915_thermal_temp_store()", " - wifi: mt76: mt7921: fix channel switch fail in monitor mode", " - wifi: mt76: mt7996: fix chainmask calculation in mt7996_set_antenna()", " - wifi: mt76: mt7996: update register for CFEND_RATE", " - wifi: mt76: connac: fix POWER_CTRL command name typo", " - wifi: mt76: mt7921: fix invalid remain_on_channel duration", " - wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit", " - wifi: mt76: mt7996: fix memory leak in mt7996_mcu_exit", " - wifi: mt76: dma: fix memory leak running mt76_dma_tx_cleanup", " - wifi: mt76: fix switch default case in mt7996_reverse_frag0_hdr_trans", " - wifi: mt76: mt7915: fix WED TxS reporting", " - wifi: mt76: add memory barrier to SDIO queue kick", " - wifi: mt76: mt7996: rely on mt76_connac2_mac_tx_rate_val", " - net/mlx5: Enhance debug print in page allocation failure", " - irqchip: Fix refcount leak in platform_irqchip_probe", " - irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains", " - irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe", " - irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probe", " - s390/mem_detect: fix detect_memory() error handling", " - s390/vmem: fix empty page tables cleanup under KASAN", " - s390/boot: cleanup decompressor header files", " - s390/mem_detect: rely on diag260() if sclp_early_get_memsize() fails", " - s390/boot: fix mem_detect extended area allocation", " - net: add sock_init_data_uid()", " - tun: tun_chr_open(): correctly initialize socket uid", " - tap: tap_open(): correctly initialize socket uid", " - rxrpc: Fix overwaking on call poking", " - OPP: fix error checking in opp_migrate_dentry()", " - cpufreq: davinci: Fix clk use after free", " - Bluetooth: hci_conn: Refactor hci_bind_bis() since it always succeeds", " - Bluetooth: L2CAP: Fix potential user-after-free", " - Bluetooth: hci_qca: get wakeup status from serdev device handle", " - net: ipa: generic command param fix", " - s390: vfio-ap: tighten the NIB validity check", " - s390/ap: fix status returned by ap_aqic()", " - s390/ap: fix status returned by ap_qact()", " - libbpf: Fix alen calculation in libbpf_nla_dump_errormsg()", " - xen/grant-dma-iommu: Implement a dummy probe_device() callback", " - rds: rds_rm_zerocopy_callback() correct order for list_add_tail()", " - crypto: rsa-pkcs1pad - Use akcipher_request_complete", " - m68k: /proc/hardware should depend on PROC_FS", " - RISC-V: time: initialize hrtimer based broadcast clock event device", " - clocksource/drivers/riscv: Patch riscv_clock_next_event() jump before first", " use", " - wifi: iwl3945: Add missing check for create_singlethread_workqueue", " - wifi: iwl4965: Add missing check for create_singlethread_workqueue()", " - wifi: brcmfmac: Rename Cypress 89459 to BCM4355", " - wifi: brcmfmac: pcie: Add IDs/properties for BCM4355", " - wifi: brcmfmac: pcie: Add IDs/properties for BCM4377", " - wifi: brcmfmac: pcie: Perform correct BCM4364 firmware selection", " - wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize()", " - wifi: rtw89: fix parsing offset for MCC C2H", " - selftests/bpf: Fix out-of-srctree build", " - ACPI: resource: Add IRQ overrides for MAINGEAR Vector Pro 2 models", " - ACPI: resource: Do IRQ override on all TongFang GMxRGxx", " - crypto: octeontx2 - Fix objects shared between several modules", " - crypto: crypto4xx - Call dma_unmap_page when done", " - vfio/ccw: remove WARN_ON during shutdown", " - wifi: mac80211: move color collision detection report in a delayed work", " - wifi: mac80211: make rate u32 in sta_set_rate_info_rx()", " - wifi: mac80211: fix non-MLO station association", " - wifi: mac80211: Don't translate MLD addresses for multicast", " - wifi: mac80211: avoid u32_encode_bits() warning", " - wifi: mac80211: fix off-by-one link setting", " - tools/lib/thermal: Fix thermal_sampling_exit()", " - thermal/drivers/hisi: Drop second sensor hi3660", " - selftests/bpf: Fix map_kptr test.", " - wifi: mac80211: pass 'sta' to ieee80211_rx_data_set_sta()", " - bpf: Zeroing allocated object from slab in bpf memory allocator", " - selftests/bpf: Fix xdp_do_redirect on s390x", " - can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a", " bus error", " - can: esd_usb: Make use of can_change_state() and relocate checking skb for", " NULL", " - xsk: check IFF_UP earlier in Tx path", " - LoongArch, bpf: Use 4 instructions for function address in JIT", " - bpf: Fix global subprog context argument resolution logic", " - irqchip/irq-brcmstb-l2: Set IRQ_LEVEL for level triggered interrupts", " - irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts", " - net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link()", " - net/smc: fix application data exception", " - selftests/net: Interpret UDP_GRO cmsg data as an int value", " - l2tp: Avoid possible recursive deadlock in l2tp_tunnel_register()", " - net: bcmgenet: fix MoCA LED control", " - net: lan966x: Fix possible deadlock inside PTP", " - net/mlx4_en: Introduce flexible array to silence overflow warning", " - net/mlx5e: Align IPsec ASO result memory to be as required by hardware", " - selftest: fib_tests: Always cleanup before exit", " - sefltests: netdevsim: wait for devlink instance after netns removal", " - drm: Fix potential null-ptr-deref due to drmm_mode_config_init()", " - drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats", " - drm/bridge: ti-sn65dsi83: Fix delay after reset deassert to match spec", " - drm: mxsfb: DRM_IMX_LCDIF should depend on ARCH_MXC", " - drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC", " - drm/bridge: megachips: Fix error handling in i2c_register_driver()", " - drm/vkms: Fix memory leak in vkms_init()", " - drm/vkms: Fix null-ptr-deref in vkms_release()", " - drm/modes: Use strscpy() to copy command-line mode name", " - drm/vc4: dpi: Fix format mapping for RGB565", " - drm/bridge: it6505: Guard bridge power in IRQ handler", " - drm: tidss: Fix pixel format definition", " - gpu: ipu-v3: common: Add of_node_put() for reference returned by", " of_graph_get_port_by_id()", " - drm/ast: Init iosys_map pointer as I/O memory for damage handling", " - drm/vc4: drop all currently held locks if deadlock happens", " - hwmon: (ftsteutates) Fix scaling of measurements", " - drm/msm/dpu: check for null return of devm_kzalloc() in dpu_writeback_init()", " - drm/msm/hdmi: Add missing check for alloc_ordered_workqueue", " - pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins", " - pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain", " - pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups", " - drm/vc4: hvs: Configure the HVS COB allocations", " - drm/vc4: hvs: Set AXI panic modes", " - drm/vc4: hvs: SCALER_DISPBKGND_AUTOHS is only valid on HVS4", " - drm/vc4: hvs: Correct interrupt masking bit assignment for HVS5", " - drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5", " - drm/vc4: hdmi: Correct interlaced timings again", " - drm/msm: clean event_thread->worker in case of an error", " - drm/panel-edp: fix name for IVO product id 854b", " - scsi: qla2xxx: Fix exchange oversubscription", " - scsi: qla2xxx: Fix exchange oversubscription for management commands", " - scsi: qla2xxx: edif: Fix clang warning", " - ASoC: fsl_sai: initialize is_dsp_mode flag", " - drm/bridge: tc358767: Set default CLRSIPO count", " - drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup()", " - ALSA: hda/ca0132: minor fix for allocation size", " - drm/amdgpu: Use the sched from entity for amdgpu_cs trace", " - drm/msm/gem: Add check for kmalloc", " - drm/msm/dpu: Disallow unallocated resources to be returned", " - drm/bridge: lt9611: fix sleep mode setup", " - drm/bridge: lt9611: fix HPD reenablement", " - drm/bridge: lt9611: fix polarity programming", " - drm/bridge: lt9611: fix programming of video modes", " - drm/bridge: lt9611: fix clock calculation", " - drm/bridge: lt9611: pass a pointer to the of node", " - regulator: tps65219: use IS_ERR() to detect an error pointer", " - drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness", " - drm: exynos: dsi: Fix MIPI_DSI*_NO_* mode flags", " - drm/msm/dsi: Allow 2 CTRLs on v2.5.0", " - scsi: ufs: exynos: Fix DMA alignment for PAGE_SIZE != 4096", " - drm/msm/dpu: sc7180: add missing WB2 clock control", " - drm/msm: use strscpy instead of strncpy", " - drm/msm/dpu: Add check for cstate", " - drm/msm/dpu: Add check for pstates", " - drm/msm/mdp5: Add check for kzalloc", " - habanalabs: bugs fixes in timestamps buff alloc", " - pinctrl: bcm2835: Remove of_node_put() in bcm2835_of_gpio_ranges_fallback()", " - pinctrl: mediatek: Initialize variable pullen and pullup to zero", " - pinctrl: mediatek: Initialize variable *buf to zero", " - gpu: host1x: Fix mask for syncpoint increment register", " - gpu: host1x: Don't skip assigning syncpoints to channels", " - drm/tegra: firewall: Check for is_addr_reg existence in IMM check", " - drm/i915/mtl: Add initial gt workarounds", " - drm/i915/xehp: GAM registers don't need to be re-applied on engine resets", " - pinctrl: renesas: rzg2l: Fix configuring the GPIO pins as interrupts", " - drm/i915/xehp: Annotate a couple more workaround registers as MCR", " - drm/msm/dpu: set pdpu->is_rt_pipe early in dpu_plane_sspp_atomic_update()", " - drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd", " - drm/mediatek: Use NULL instead of 0 for NULL pointer", " - drm/mediatek: Drop unbalanced obj unref", " - drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc", " - drm/mediatek: Clean dangling pointer on bind error path", " - ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress()", " - dt-bindings: display: mediatek: Fix the fallback for mediatek,mt8186-disp-", " ccorr", " - gpio: pca9570: rename platform_data to chip_data", " - gpio: vf610: connect GPIO label to dev name", " - ASoC: topology: Properly access value coming from topology file", " - spi: dw_bt1: fix MUX_MMIO dependencies", " - ASoC: mchp-spdifrx: fix controls which rely on rsr register", " - ASoC: mchp-spdifrx: fix return value in case completion times out", " - ASoC: mchp-spdifrx: fix controls that works with completion mechanism", " - ASoC: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove()", " - dm: improve shrinker debug names", " - regmap: apply reg_base and reg_downshift for single register ops", " - accel: fix CONFIG_DRM dependencies", " - ASoC: rsnd: fixup #endif position", " - ASoC: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params()", " - ASoC: dt-bindings: meson: fix gx-card codec node regex", " - regulator: tps65219: use generic set_bypass()", " - hwmon: (asus-ec-sensors) add missing mutex path", " - hwmon: (ltc2945) Handle error case in ltc2945_value_store", " - ALSA: hda: Fix the control element identification for multiple codecs", " - drm/amdgpu: fix enum odm_combine_mode mismatch", " - scsi: mpt3sas: Fix a memory leak", " - scsi: aic94xx: Add missing check for dma_map_single()", " - HID: multitouch: Add quirks for flipped axes", " - HID: retain initial quirks set up when creating HID devices", " - ASoC: qcom: q6apm-lpass-dai: unprepare stream if its already prepared", " - ASoC: qcom: q6apm-dai: fix race condition while updating the position", " pointer", " - ASoC: qcom: q6apm-dai: Add SNDRV_PCM_INFO_BATCH flag", " - ASoC: codecs: lpass: register mclk after runtime pm", " - ASoC: codecs: lpass: fix incorrect mclk rate", " - drm/amd/display: don't call dc_interrupt_set() for disabled crtcs", " - HID: logitech-hidpp: Hard-code HID++ 1.0 fast scroll support", " - spi: bcm63xx-hsspi: Fix multi-bit mode setting", " - hwmon: (mlxreg-fan) Return zero speed for broken fan", " - ASoC: tlv320adcx140: fix 'ti,gpio-config' DT property init", " - dm: remove flush_scheduled_work() during local_exit()", " - nfs4trace: fix state manager flag printing", " - NFS: fix disabling of swap", " - drm/i915/pvc: Implement recommended caching policy", " - drm/i915/pvc: Annotate two more workaround/tuning registers as MCR", " - drm/i915: Fix GEN8_MISCCPCTL", " - spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one()", " - ASoC: soc-dapm.h: fixup warning struct snd_pcm_substream not declared", " - HID: bigben: use spinlock to protect concurrent accesses", " - HID: bigben_worker() remove unneeded check on report_field", " - HID: bigben: use spinlock to safely schedule workers", " - hid: bigben_probe(): validate report count", " - ALSA: hda/hdmi: Register with vga_switcheroo on Dual GPU Macbooks", " - drm/shmem-helper: Fix locking for drm_gem_shmem_get_pages_sgt()", " - NFSD: enhance inter-server copy cleanup", " - NFSD: fix leaked reference count of nfsd4_ssc_umount_item", " - nfsd: fix race to check ls_layouts", " - nfsd: clean up potential nfsd_file refcount leaks in COPY codepath", " - NFSD: fix problems with cleanup on errors in nfsd4_copy", " - nfsd: fix courtesy client with deny mode handling in nfs4_upgrade_open", " - nfsd: don't fsync nfsd_files on last close", " - NFSD: copy the whole verifier in nfsd_copy_write_verifier", " - cifs: Fix lost destroy smbd connection when MR allocate failed", " - cifs: Fix warning and UAF when destroy the MR list", " - cifs: use tcon allocation functions even for dummy tcon", " - gfs2: jdata writepage fix", " - perf llvm: Fix inadvertent file creation", " - leds: led-core: Fix refcount leak in of_led_get()", " - leds: is31fl319x: Wrap mutex_destroy() for devm_add_action_or_rest()", " - leds: simatic-ipc-leds-gpio: Make sure we have the GPIO providing driver", " - tools/tracing/rtla: osnoise_hist: use total duration for average calculation", " - perf inject: Use perf_data__read() for auxtrace", " - perf intel-pt: Do not try to queue auxtrace data on pipe", " - perf stat: Hide invalid uncore event output for aggr mode", " - perf jevents: Correct bad character encoding", " - perf test bpf: Skip test if kernel-debuginfo is not present", " - perf tools: Fix auto-complete on aarch64", " - perf stat: Avoid merging/aggregating metric counts twice", " - sparc: allow PM configs for sparc32 COMPILE_TEST", " - selftests: find echo binary to use -ne options", " - selftests/ftrace: Fix bash specific \"==\" operator", " - selftests: use printf instead of echo -ne", " - perf record: Fix segfault with --overwrite and --max-size", " - printf: fix errname.c list", " - perf tests stat_all_metrics: Change true workload to sleep workload for", " system wide check", " - objtool: add UACCESS exceptions for __tsan_volatile_read/write", " - selftests/ftrace: Fix probepoint testcase to ignore __pfx_* symbols", " - sysctl: fix proc_dobool() usability", " - mfd: rk808: Re-add rk808-clkout to RK818", " - mfd: cs5535: Don't build on UML", " - mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read()", " - dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0", " - RDMA/erdma: Fix refcount leak in erdma_mmap", " - dmaengine: HISI_DMA should depend on ARCH_HISI", " - RDMA/hns: Fix refcount leak in hns_roce_mmap", " - iio: light: tsl2563: Do not hardcode interrupt trigger type", " - usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe()", " - i2c: designware: fix i2c_dw_clk_rate() return size to be u32", " - i2c: qcom-geni: change i2c_master_hub to static", " - soundwire: cadence: Don't overflow the command FIFOs", " - driver core: fix potential null-ptr-deref in device_add()", " - kobject: Fix slab-out-of-bounds in fill_kobj_path()", " - alpha/boot/tools/objstrip: fix the check for ELF header", " - media: uvcvideo: Check for INACTIVE in uvc_ctrl_is_accessible()", " - media: uvcvideo: Implement mask for V4L2_CTRL_TYPE_MENU", " - media: uvcvideo: Refactor uvc_ctrl_mappings_uvcXX", " - media: uvcvideo: Refactor power_line_frequency_controls_limited", " - coresight: etm4x: Fix accesses to TRCSEQRSTEVR and TRCSEQSTR", " - coresight: cti: Prevent negative values of enable count", " - coresight: cti: Add PM runtime call in enable_store", " - usb: typec: intel_pmc_mux: Don't leak the ACPI device reference count", " - PCI/IOV: Enlarge virtfn sysfs name buffer", " - PCI: switchtec: Return -EFAULT for copy_to_user() errors", " - PCI: endpoint: pci-epf-vntb: Add epf_ntb_mw_bar_clear() num_mws kernel-doc", " - hwtracing: hisi_ptt: Only add the supported devices to the filters list", " - tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown()", " - tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown()", " - serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init()", " - Revert \"char: pcmcia: cm4000_cs: Replace mdelay with usleep_range in", " set_protocol\"", " - eeprom: idt_89hpesx: Fix error handling in idt_init()", " - applicom: Fix PCI device refcount leak in applicom_init()", " - firmware: stratix10-svc: add missing gen_pool_destroy() in", " stratix10_svc_drv_probe()", " - firmware: stratix10-svc: fix error handle while alloc/add device failed", " - VMCI: check context->notify_page after call to get_user_pages_fast() to", " avoid GPF", " - mei: pxp: Use correct macros to initialize uuid_le", " - misc/mei/hdcp: Use correct macros to initialize uuid_le", " - misc: fastrpc: Fix an error handling path in fastrpc_rpmsg_probe()", " - iommu/exynos: Fix error handling in exynos_iommu_init()", " - driver core: fix resource leak in device_add()", " - driver core: location: Free struct acpi_pld_info *pld before return false", " - drivers: base: transport_class: fix possible memory leak", " - drivers: base: transport_class: fix resource leak when", " transport_add_device() fails", " - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle", " - selftests: iommu: Fix test_cmd_destroy_access() call in user_copy", " - iommufd: Add three missing structures in ucmd_buffer", " - fotg210-udc: Add missing completion handler", " - dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers", " - fpga: microchip-spi: move SPI I/O buffers out of stack", " - fpga: microchip-spi: rewrite status polling in a time measurable way", " - usb: early: xhci-dbc: Fix a potential out-of-bound memory access", " - tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case", " - RDMA/cxgb4: add null-ptr-check after ip_dev_find()", " - usb: musb: mediatek: don't unregister something that wasn't registered", " - usb: gadget: configfs: Restrict symlink creation is UDC already binded", " - phy: mediatek: remove temporary variable @mask_", " - PCI: mt7621: Delay phy ports initialization", " - iommu/vt-d: Set No Execute Enable bit in PASID table entry", " - power: supply: remove faulty cooling logic", " - RDMA/siw: Fix user page pinning accounting", " - RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish()", " - usb: max-3421: Fix setting of I/O pins", " - RDMA/irdma: Cap MSIX used to online CPUs + 1", " - serial: fsl_lpuart: fix RS485 RTS polariy inverse issue", " - tty: serial: imx: disable Ageing Timer interrupt request irq", " - driver core: fw_devlink: Add DL_FLAG_CYCLE support to device links", " - driver core: fw_devlink: Don't purge child fwnode's consumer links", " - driver core: fw_devlink: Allow marking a fwnode link as being part of a", " cycle", " - driver core: fw_devlink: Consolidate device link flag computation", " - driver core: fw_devlink: Improve check for fwnode with no device/driver", " - driver core: fw_devlink: Make cycle detection more robust", " - mtd: mtdpart: Don't create platform device that'll never probe", " - usb: host: fsl-mph-dr-of: reuse device_set_of_node_from_dev", " - dmaengine: dw-edma: Fix readq_ch() return value truncation", " - PCI: Fix dropping valid root bus resources with .end = zero", " - phy: rockchip-typec: fix tcphy_get_mode error case", " - PCI: qcom: Fix host-init error handling", " - iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry()", " - iommu: Fix error unwind in iommu_group_alloc()", " - iommu/amd: Do not identity map v2 capable device when snp is enabled", " - dmaengine: sf-pdma: pdma_desc memory leak fix", " - dmaengine: dw-axi-dmac: Do not dereference NULL structure", " - dmaengine: ptdma: check for null desc before calling pt_cmd_callback", " - iommu/vt-d: Fix error handling in sva enable/disable paths", " - iommu/vt-d: Allow to use flush-queue when first level is default", " - RDMA/rxe: Cleanup mr_check_range", " - RDMA/rxe: Move rxe_map_mr_sg to rxe_mr.c", " - RDMA-rxe: Isolate mr code from atomic_reply()", " - RDMA-rxe: Isolate mr code from atomic_write_reply()", " - RDMA/rxe: Cleanup page variables in rxe_mr.c", " - RDMA/rxe: Replace rxe_map and rxe_phys_buf by xarray", " - Subject: RDMA/rxe: Handle zero length rdma", " - RDMA/mana_ib: Fix a bug when the PF indicates more entries for registering", " memory on first packet", " - RDMA/rxe: Fix missing memory barriers in rxe_queue.h", " - IB/hfi1: Fix math bugs in hfi1_can_pin_pages()", " - IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors", " - Revert \"remoteproc: qcom_q6v5_mss: map/unmap metadata region before/after", " use\"", " - remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers", " - media: ti: cal: fix possible memory leak in cal_ctx_create()", " - media: platform: ti: Add missing check for devm_regulator_get", " - media: imx: imx7-media-csi: fix missing clk_disable_unprepare() in", " imx7_csi_init()", " - powerpc: Remove linker flag from KBUILD_AFLAGS", " - s390/vdso: Drop '-shared' from KBUILD_CFLAGS_64", " - builddeb: clean generated package content", " - media: max9286: Fix memleak in max9286_v4l2_register()", " - media: ov2740: Fix memleak in ov2740_init_controls()", " - media: ov5675: Fix memleak in ov5675_init_controls()", " - media: i2c: tc358746: fix missing return assignment", " - media: i2c: tc358746: fix ignoring read error in g_register callback", " - media: i2c: tc358746: fix possible endianness issue", " - media: ov5640: Fix soft reset sequence and timings", " - media: ov5640: Handle delays when no reset_gpio set", " - media: mc: Get media_device directly from pad", " - media: i2c: ov772x: Fix memleak in ov772x_probe()", " - media: i2c: imx219: Split common registers from mode tables", " - media: i2c: imx219: Fix binning for RAW8 capture", " - media: platform: mtk-mdp3: Fix return value check in mdp_probe()", " - media: camss: csiphy-3ph: avoid undefined behavior", " - media: platform: mtk-mdp3: fix Kconfig dependencies", " - media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data", " - media: v4l2-jpeg: ignore the unknown APP14 marker", " - media: hantro: Fix JPEG encoder ENUM_FRMSIZE on RK3399", " - media: imx-jpeg: Apply clk_bulk api instead of operating specific clk", " - media: amphion: correct the unspecified color space", " - media: drivers/media/v4l2-core/v4l2-h264 : add detection of null pointers", " - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()", " - media: atomisp: fix videobuf2 Kconfig depenendency", " - media: atomisp: Only set default_run_mode on first open of a stream/asd", " - media: i2c: ov7670: 0 instead of -EINVAL was returned", " - media: usb: siano: Fix use after free bugs caused by do_submit_urb", " - media: saa7134: Use video_unregister_device for radio_dev", " - rpmsg: glink: Avoid infinite loop on intent for missing channel", " - rpmsg: glink: Release driver_override", " - ARM: OMAP2+: omap4-common: Fix refcount leak bug", " - arm64: dts: qcom: msm8996: Add additional A2NoC clocks", " - udf: Define EFSCORRUPTED error code", " - context_tracking: Fix noinstr vs KASAN", " - exit: Detect and fix irq disabled state in oops", " - ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy", " - fs: Use CHECK_DATA_CORRUPTION() when kernel bugs are detected", " - blk-iocost: fix divide by 0 error in calc_lcoefs()", " - blk-cgroup: dropping parent refcount after pd_free_fn() is done", " - blk-cgroup: synchronize pd_free_fn() from blkg_free_workfn() and", " blkcg_deactivate_policy()", " - trace/blktrace: fix memory leak with using debugfs_lookup()", " - btrfs: scrub: improve tree block error reporting", " - arm64: zynqmp: Enable hs termination flag for USB dwc3 controller", " - cpuidle, intel_idle: Fix CPUIDLE_FLAG_INIT_XSTATE", " - x86/fpu: Don't set TIF_NEED_FPU_LOAD for PF_IO_WORKER threads", " - cpuidle: drivers: firmware: psci: Dont instrument suspend code", " - cpuidle: lib/bug: Disable rcu_is_watching() during WARN/BUG", " - perf/x86/intel/uncore: Add Meteor Lake support", " - wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect()", " - wifi: ath11k: fix monitor mode bringup crash", " - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds()", " - rcu: Make RCU_LOCKDEP_WARN() avoid early lockdep checks", " - rcu: Suppress smp_processor_id() complaint in", " synchronize_rcu_expedited_wait()", " - srcu: Delegate work to the boot cpu if using SRCU_SIZE_SMALL", " - rcu-tasks: Make rude RCU-Tasks work well with CPU hotplug", " - rcu-tasks: Handle queue-shrink/callback-enqueue race condition", " - wifi: ath11k: debugfs: fix to work with multiple PCI devices", " - thermal: intel: Fix unsigned comparison with less than zero", " - timers: Prevent union confusion from unexpected restart_syscall()", " - x86/bugs: Reset speculation control settings on init", " - bpftool: Always disable stack protection for BPF objects", " - wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-", " of-bounds", " - wifi: rtw89: fix assignation of TX BD RAM table", " - wifi: mt7601u: fix an integer underflow", " - inet: fix fast path in __inet_hash_connect()", " - ice: restrict PTP HW clock freq adjustments to 100, 000, 000 PPB", " - ice: add missing checks for PF vsi type", " - Compiler attributes: GCC cold function alignment workarounds", " - ACPI: Don't build ACPICA with '-Os'", " - bpf, docs: Fix modulo zero, division by zero, overflow, and underflow", " - thermal: intel: intel_pch: Add support for Wellsburg PCH", " - clocksource: Suspend the watchdog temporarily when high read latency", " detected", " - crypto: hisilicon: Wipe entire pool on error", " - net: bcmgenet: Add a check for oversized packets", " - m68k: Check syscall_trace_enter() return code", " - s390/mm,ptdump: avoid Kasan vs Memcpy Real markers swapping", " - netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj()", " - can: isotp: check CAN address family in isotp_bind()", " - gcc-plugins: drop -std=gnu++11 to fix GCC 13 build", " - tools/power/x86/intel-speed-select: Add Emerald Rapid quirk", " - platform/x86: dell-ddv: Add support for interface version 3", " - wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup", " - ACPI: video: Fix Lenovo Ideapad Z570 DMI match", " - net/mlx5: fw_tracer: Fix debug print", " - coda: Avoid partial allocation of sig_inputArgs", " - uaccess: Add minimum bounds check on kernel buffer size", " - s390/idle: mark arch_cpu_idle() noinstr", " - time/debug: Fix memory leak with using debugfs_lookup()", " - PM: domains: fix memory leak with using debugfs_lookup()", " - PM: EM: fix memory leak with using debugfs_lookup()", " - Bluetooth: Fix issue with Actions Semi ATS2851 based devices", " - Bluetooth: btusb: Add new PID/VID 0489:e0f2 for MT7921", " - Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE", " - wifi: rtw89: debug: avoid invalid access on RTW89_DBG_SEL_MAC_30", " - hv_netvsc: Check status in SEND_RNDIS_PKT completion message", " - s390/kfence: fix page fault reporting", " - devlink: Fix TP_STRUCT_entry in trace of devlink health report", " - scm: add user copy checks to put_cmsg()", " - drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Tab 3 X90F", " - drm: panel-orientation-quirks: Add quirk for DynaBook K50", " - drm/amd/display: Reduce expected sdp bandwidth for dcn321", " - drm/amd/display: Revert Reduce delay when sink device not able to ACK 00340h", " write", " - drm/amd/display: Fix potential null-deref in dm_resume", " - drm/omap: dsi: Fix excessive stack usage", " - HID: Add Mapping for System Microphone Mute", " - drm/tiny: ili9486: Do not assume 8-bit only SPI controllers", " - drm/amd/display: Defer DIG FIFO disable after VID stream enable", " - drm/radeon: free iio for atombios when driver shutdown", " - drm/amd: Avoid BUG() for case of SRIOV missing IP version", " - drm/amdkfd: Page aligned memory reserve size", " - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write", " - Revert \"fbcon: don't lose the console font across generic->chip driver", " switch\"", " - drm/amd: Avoid ASSERT for some message failures", " - drm: amd: display: Fix memory leakage", " - drm/amd/display: fix mapping to non-allocated address", " - HID: uclogic: Add frame type quirk", " - HID: uclogic: Add battery quirk", " - HID: uclogic: Add support for XP-PEN Deco Pro SW", " - HID: uclogic: Add support for XP-PEN Deco Pro MW", " - drm/msm/dsi: Add missing check for alloc_ordered_workqueue", " - drm: rcar-du: Add quirk for H3 ES1.x pclk workaround", " - drm: rcar-du: Fix setting a reserved bit in DPLLCR", " - drm/drm_print: correct format problem", " - drm/amd/display: Set hvm_enabled flag for S/G mode", " - drm/client: Test for connectors before sending hotplug event", " - habanalabs: extend fatal messages to contain PCI info", " - habanalabs: fix bug in timestamps registration code", " - docs/scripts/gdb: add necessary make scripts_gdb step", " - drm/msm/dpu: Add DSC hardware blocks to register snapshot", " - ASoC: soc-compress: Reposition and add pcm_mutex", " - ASoC: kirkwood: Iterate over array indexes instead of using pointer math", " - regulator: max77802: Bounds check regulator id against opmode", " - regulator: s5m8767: Bounds check id indexing into arrays", " - Revert \"drm/amdgpu: TA unload messages are not actually sent to psp when", " amdgpu is uninstalled\"", " - drm/amd/display: fix FCLK pstate change underflow", " - gfs2: Improve gfs2_make_fs_rw error handling", " - hwmon: (coretemp) Simplify platform device handling", " - hwmon: (nct6775) Directly call ASUS ACPI WMI method", " - hwmon: (nct6775) B650/B660/X670 ASUS boards support", " - pinctrl: at91: use devm_kasprintf() to avoid potential leaks", " - drm/amd/display: Do not commit pipe when updating DRR", " - scsi: snic: Fix memory leak with using debugfs_lookup()", " - scsi: ufs: core: Fix device management cmd timeout flow", " - HID: logitech-hidpp: Don't restart communication if not necessary", " - drm/amd/display: Enable P-state validation checks for DCN314", " - drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5", " - drm/amd/display: Disable HUBP/DPP PG on DCN314 for now", " - drm/amd/display: disable SubVP + DRR to prevent underflow", " - dm thin: add cond_resched() to various workqueue loops", " - dm cache: add cond_resched() to various workqueue loops", " - nfsd: zero out pointers after putting nfsd_files on COPY setup error", " - nfsd: don't hand out delegation on setuid files being opened for write", " - cifs: prevent data race in smb2_reconnect()", " - drm/i915/mtl: Correct implementation of Wa_18018781329", " - drm/shmem-helper: Revert accidental non-GPL export", " - driver core: fw_devlink: Avoid spurious error message", " - wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu", " - firmware: coreboot: framebuffer: Ignore reserved pixel color bits", " - block: don't allow multiple bios for IOCB_NOWAIT issue", " - block: clear bio->bi_bdev when putting a bio back in the cache", " - block: be a bit more careful in checking for NULL bdev while polling", " - rtc: pm8xxx: fix set-alarm race", " - ipmi: ipmb: Fix the MODULE_PARM_DESC associated to 'retry_time_ms'", " - ipmi:ssif: resend_msg() cannot fail", " - ipmi_ssif: Rename idle state and check", " - ipmi:ssif: Add a timer between request retries", " - io_uring: Replace 0-length array with flexible array", " - io_uring: use user visible tail in io_uring_poll()", " - io_uring: handle TIF_NOTIFY_RESUME when checking for task_work", " - io_uring: add a conditional reschedule to the IOPOLL cancelation loop", " - io_uring: add reschedule point to handle_tw_list()", " - io_uring/rsrc: disallow multi-source reg buffers", " - io_uring: remove MSG_NOSIGNAL from recvmsg", " - io_uring/poll: allow some retries for poll triggering spuriously", " - io_uring: fix fget leak when fs don't support nowait buffered read", " - s390/extmem: return correct segment type in __segment_load()", " - s390: discard .interp section", " - s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler", " - s390/kprobes: fix current_kprobe never cleared after kprobes reenter", " - KVM: s390: disable migration mode when dirty tracking is disabled", " - cifs: improve checking of DFS links over STATUS_OBJECT_NAME_INVALID", " - cifs: Fix uninitialized memory read in smb3_qfs_tcon()", " - cifs: Fix uninitialized memory reads for oparms.mode", " - cifs: fix mount on old smb servers", " - cifs: introduce cifs_io_parms in smb2_async_writev()", " - cifs: split out smb3_use_rdma_offload() helper", " - cifs: don't try to use rdma offload on encrypted connections", " - cifs: Check the lease context if we actually got a lease", " - cifs: return a single-use cfid if we did not get a lease", " - scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization", " - scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info()", " - scsi: mpi3mr: Remove unnecessary memcpy() to alltgt_info->dmi", " - btrfs: hold block group refcount during async discard", " - btrfs: sysfs: update fs features directory asynchronously", " - locking/rwsem: Prevent non-first waiter from spinning in down_write()", " slowpath", " - ksmbd: fix wrong data area length for smb2 lock request", " - ksmbd: do not allow the actual frame length to be smaller than the rfc1002", " length", " - ksmbd: fix possible memory leak in smb2_lock()", " - torture: Fix hang during kthread shutdown phase", " - ARM: dts: exynos: correct HDMI phy compatible in Exynos4", " - io_uring: mark task TASK_RUNNING before handling resume/task work", " - hfs: fix missing hfs_bnode_get() in __hfs_bnode_create", " - fs: hfsplus: fix UAF issue in hfsplus_put_super", " - exfat: fix reporting fs error when reading dir beyond EOF", " - exfat: fix unexpected EOF while reading dir", " - exfat: redefine DIR_DELETED as the bad cluster number", " - exfat: fix inode->i_blocks for non-512 byte sector size device", " - fs: dlm: start midcomms before scand", " - fs: dlm: fix use after free in midcomms commit", " - fs: dlm: be sure to call dlm_send_queue_flush()", " - fs: dlm: fix race setting stop tx flag", " - fs: dlm: don't set stop rx flag after node reset", " - fs: dlm: move sending fin message into state change handling", " - fs: dlm: send FIN ack back in right cases", " - f2fs: fix information leak in f2fs_move_inline_dirents()", " - f2fs: retry to update the inode page given data corruption", " - f2fs: fix cgroup writeback accounting with fs-layer encryption", " - f2fs: fix kernel crash due to null io->bio", " - f2fs: Revert \"f2fs: truncate blocks in batch in __complete_revoke_list()\"", " - ocfs2: fix defrag path triggering jbd2 ASSERT", " - ocfs2: fix non-auto defrag path not working issue", " - fs/cramfs/inode.c: initialize file_ra_state", " - selftests/landlock: Skip overlayfs tests when not supported", " - selftests/landlock: Test ptrace as much as possible with Yama", " - udf: Truncate added extents on failed expansion", " - udf: Do not bother merging very long extents", " - udf: Do not update file length for failed writes to inline files", " - udf: Preserve link count of system files", " - udf: Detect system inodes linked into directory hierarchy", " - udf: Fix file corruption when appending just after end of preallocated", " extent", " - md: don't update recovery_cp when curr_resync is ACTIVE", " - KVM: Destroy target device if coalesced MMIO unregistration fails", " - KVM: VMX: Fix crash due to uninitialized current_vmcs", " - KVM: Register /dev/kvm as the _very_ last thing during initialization", " - KVM: x86: Purge \"highest ISR\" cache when updating APICv state", " - KVM: x86: Blindly get current x2APIC reg value on \"nodecode write\" traps", " - KVM: x86: Don't inhibit APICv/AVIC on xAPIC ID \"change\" if APIC is disabled", " - KVM: x86: Don't inhibit APICv/AVIC if xAPIC ID mismatch is due to 32-bit ID", " - KVM: SVM: Flush the \"current\" TLB when activating AVIC", " - KVM: SVM: Process ICR on AVIC IPI delivery failure due to invalid target", " - KVM: SVM: Don't put/load AVIC when setting virtual APIC mode", " - KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI", " - KVM: x86: Inject #GP on x2APIC WRMSR that sets reserved bits 63:32", " - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data()", " - KVM: SVM: hyper-v: placate modpost section mismatch error", " - selftests: x86: Fix incorrect kernel headers search path", " - x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows)", " - x86/crash: Disable virt in core NMI crash handler to avoid double shootdown", " - x86/reboot: Disable virtualization in an emergency if SVM is supported", " - x86/reboot: Disable SVM, not just VMX, when stopping CPUs", " - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic", " - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe", " range", " - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter", " - x86/microcode/AMD: Add a @cpu parameter to the reloading functions", " - x86/microcode/AMD: Fix mixed steppings support", " - x86/speculation: Allow enabling STIBP with legacy IBRS", " - Documentation/hw-vuln: Document the interaction between IBRS and STIBP", " - virt/sev-guest: Return -EIO if certificate buffer is not large enough", " - brd: mark as nowait compatible", " - brd: return 0/-error from brd_insert_page()", " - brd: check for REQ_NOWAIT and set correct page allocation mask", " - ima: fix error handling logic when file measurement failed", " - ima: Align ima_file_mmap() parameters with mmap_file LSM hook", " - selftests/powerpc: Fix incorrect kernel headers search path", " - selftests/ftrace: Fix eprobe syntax test case to check filter support", " - selftests: sched: Fix incorrect kernel headers search path", " - selftests: core: Fix incorrect kernel headers search path", " - selftests: pid_namespace: Fix incorrect kernel headers search path", " - selftests: arm64: Fix incorrect kernel headers search path", " - selftests: clone3: Fix incorrect kernel headers search path", " - selftests: pidfd: Fix incorrect kernel headers search path", " - selftests: membarrier: Fix incorrect kernel headers search path", " - selftests: kcmp: Fix incorrect kernel headers search path", " - selftests: media_tests: Fix incorrect kernel headers search path", " - selftests: gpio: Fix incorrect kernel headers search path", " - selftests: filesystems: Fix incorrect kernel headers search path", " - selftests: user_events: Fix incorrect kernel headers search path", " - selftests: ptp: Fix incorrect kernel headers search path", " - selftests: sync: Fix incorrect kernel headers search path", " - selftests: rseq: Fix incorrect kernel headers search path", " - selftests: move_mount_set_group: Fix incorrect kernel headers search path", " - selftests: mount_setattr: Fix incorrect kernel headers search path", " - selftests: perf_events: Fix incorrect kernel headers search path", " - selftests: ipc: Fix incorrect kernel headers search path", " - selftests: futex: Fix incorrect kernel headers search path", " - selftests: drivers: Fix incorrect kernel headers search path", " - selftests: dmabuf-heaps: Fix incorrect kernel headers search path", " - selftests: vm: Fix incorrect kernel headers search path", " - selftests: seccomp: Fix incorrect kernel headers search path", " - irqdomain: Fix association race", " - irqdomain: Fix disassociation race", " - irqdomain: Look for existing mapping only once", " - irqdomain: Drop bogus fwspec-mapping error handling", " - irqdomain: Refactor __irq_domain_alloc_irqs()", " - irqdomain: Fix mapping-creation race", " - irqdomain: Fix domain registration race", " - crypto: qat - fix out-of-bounds read", " - mm/damon/paddr: fix missing folio_put()", " - ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls()", " - ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC", " - jbd2: fix data missing when reusing bh which is ready to be checkpointed", " - ext4: optimize ea_inode block expansion", " - ext4: refuse to create ea block when umounted", " - cxl/pmem: Fix nvdimm registration races", " - Input: exc3000 - properly stop timer on shutdown", " - mtd: spi-nor: sfdp: Fix index value for SCCR dwords", " - mtd: spi-nor: spansion: Consider reserved bits in CFR5 register", " - dm: send just one event on resize, not two", " - dm: add cond_resched() to dm_wq_work()", " - dm: add cond_resched() to dm_wq_requeue_work()", " - wifi: rtw88: use RTW_FLAG_POWERON flag to prevent to power on/off twice", " - wifi: rtl8xxxu: Use a longer retry limit of 48", " - wifi: ath11k: allow system suspend to survive ath11k", " - wifi: cfg80211: Fix use after free for wext", " - wifi: cfg80211: Set SSID if it is not already set", " - cpuidle: add ARCH_SUSPEND_POSSIBLE dependencies", " - qede: fix interrupt coalescing configuration", " - thermal: intel: powerclamp: Fix cur_state for multi package system", " - dm flakey: fix logic when corrupting a bio", " - dm cache: free background tracker's queued work in btracker_destroy", " - dm flakey: don't corrupt the zero page", " - dm flakey: fix a bug with 32-bit highmem systems", " - hwmon: (peci/cputemp) Fix off-by-one in coretemp_label allocation", " - hwmon: (nct6775) Fix incorrect parenthesization in nct6775_write_fan_div()", " - spi: intel: Check number of chip selects after reading the descriptor", " - ARM: dts: qcom: sdx65: Add Qcom SMMU-500 as the fallback for IOMMU node", " - ARM: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node", " - ARM: dts: exynos: correct TMU phandle in Exynos4210", " - ARM: dts: exynos: correct TMU phandle in Exynos4", " - ARM: dts: exynos: correct TMU phandle in Odroid XU3 family", " - ARM: dts: exynos: correct TMU phandle in Exynos5250", " - ARM: dts: exynos: correct TMU phandle in Odroid XU", " - ARM: dts: exynos: correct TMU phandle in Odroid HC1", " - arm64: acpi: Fix possible memory leak of ffh_ctxt", " - arm64: mm: hugetlb: Disable HUGETLB_PAGE_OPTIMIZE_VMEMMAP", " - arm64: Reset KASAN tag in copy_highpage with HW tags only", " - fuse: add inode/permission checks to fileattr_get/fileattr_set", " - rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails", " - ceph: update the time stamps and try to drop the suid/sgid", " - regulator: core: Use ktime_get_boottime() to determine how long a regulator", " was off", " - panic: fix the panic_print NMI backtrace setting", " - mm/hwpoison: convert TTU_IGNORE_HWPOISON to TTU_HWPOISON", " - genirq/msi, platform-msi: Ensure that MSI descriptors are unreferenced", " - genirq/msi: Take the per-device MSI lock before validating the control", " structure", " - spi: spi-sn-f-ospi: fix duplicate flag while assigning to mode_bits", " - alpha: fix FEN fault handling", " - dax/kmem: Fix leak of memory-hotplug resources", " - mips: fix syscall_get_nr", " - media: ipu3-cio2: Fix PM runtime usage_count in driver unbind", " - remoteproc/mtk_scp: Move clk ops outside send_lock", " - vfio: Fix NULL pointer dereference caused by uninitialized group->iommufd", " - docs: gdbmacros: print newest record", " - mm: memcontrol: deprecate charge moving", " - mm/thp: check and bail out if page in deferred queue already", " - ktest.pl: Give back console on Ctrt^C on monitor", " - kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list", " - ktest.pl: Fix missing \"end_monitor\" when machine check fails", " - ktest.pl: Add RUN_TIMEOUT option with default unlimited", " - memory tier: release the new_memtier in find_create_memory_tier()", " - ring-buffer: Handle race between rb_move_tail and rb_check_pages", " - tools/bootconfig: fix single & used for logical condition", " - tracing/eprobe: Fix to add filter on eprobe description in README file", " - iommu/amd: Add a length limitation for the ivrs_acpihid command-line", " parameter", " - scsi: aacraid: Allocate cmd_priv with scsicmd", " - scsi: qla2xxx: Fix link failure in NPIV environment", " - scsi: qla2xxx: Check if port is online before sending ELS", " - scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests", " - scsi: qla2xxx: Remove unintended flag clearing", " - scsi: qla2xxx: Fix erroneous link down", " - scsi: qla2xxx: Remove increment of interface err cnt", " - scsi: ses: Don't attach if enclosure has no components", " - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()", " - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses", " - scsi: ses: Fix possible desc_ptr out-of-bounds accesses", " - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()", " - RISC-V: add a spin_shadow_stack declaration", " - riscv: Avoid enabling interrupts in die()", " - riscv: mm: fix regression due to update_mmu_cache change", " - riscv: jump_label: Fixup unaligned arch_static_branch function", " - riscv: ftrace: Fixup panic by disabling preemption", " - riscv, mm: Perform BPF exhandler fixup on page fault", " - riscv: ftrace: Remove wasted nops for !RISCV_ISA_C", " - riscv: ftrace: Reduce the detour code size to half", " - MIPS: DTS: CI20: fix otg power gpio", " - PCI/PM: Observe reset delay irrespective of bridge_d3", " - PCI: Unify delay handling for reset and resume", " - PCI: hotplug: Allow marking devices as disconnected during bind/unbind", " - PCI: Avoid FLR for AMD FCH AHCI adapters", " - PCI/DPC: Await readiness of secondary bus after reset", " - bus: mhi: ep: Only send -ENOTCONN status if client driver is available", " - bus: mhi: ep: Move chan->lock to the start of processing queued ch ring", " - bus: mhi: ep: Save channel state locally during suspend and resume", " - iommufd: Make sure to zero vfio_iommu_type1_info before copying to user", " - iommufd: Do not add the same hwpt to the ioas->hwpt_list twice", " - iommu/vt-d: Avoid superfluous IOTLB tracking in lazy mode", " - iommu/vt-d: Fix PASID directory pointer coherency", " - vfio/type1: exclude mdevs from VFIO_UPDATE_VADDR", " - vfio/type1: prevent underflow of locked_vm via exec()", " - vfio/type1: track locked_vm per dma", " - vfio/type1: restore locked_vm", " - drm/amd: Fix initialization for nbio 7.5.1", " - drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv", " - drm/radeon: Fix eDP for single-display iMac11,2", " - drm/i915: Don't use stolen memory for ring buffers with LLC", " - drm/i915: Don't use BAR mappings for ring buffers with LLC", " - drm/gud: Fix UBSAN warning", " - drm/edid: fix AVI infoframe aspect ratio handling", " - drm/edid: fix parsing of 3D modes from HDMI VSDB", " - qede: avoid uninitialized entries in coal_entry array", " - brd: use radix_tree_maybe_preload instead of radix_tree_preload", " - net: avoid double iput when sock_alloc_file fails", " - Linux 6.2.3", "", " * Miscellaneous Ubuntu changes", " - [Config] update annotations after applying 6.2.3 stable patches", " - [Config] update annotations after applying 6.2.6 stable patches", "" ], "package": "linux", "version": "6.2.0-17.17", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2011593, 2011413, 2011379, 2009014, 2011431, 2011430, 2011428, 2011425 ], "author": "Andrea Righi ", "date": "Tue, 14 Mar 2023 16:43:44 +0100" }, { "cves": [], "log": [ "", " * lunar/linux: 6.2.0-16.16 -proposed tracker (LP: #2009914)", "", " * linux-libc-dev is no longer multi-arch safe (LP: #2009355)", " - Revert \"UBUNTU: [Packaging] install headers to debian/linux-libc-dev", " directly\"", "", " * linux: CONFIG_SERIAL_8250_MID=y (LP: #2009283)", " - [Config] enable CONFIG_SERIAL_8250_MID=y", "", " * cpufreq: intel_pstate: Update Balance performance EPP for Sapphire Rapids", " (LP: #2008519)", " - cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids", "" ], "package": "linux", "version": "6.2.0-16.16", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2009914, 2009355, 2009283, 2008519 ], "author": "Andrea Righi ", "date": "Fri, 10 Mar 2023 18:34:28 +0100" }, { "cves": [], "log": [ "", " * Miscellaneous Ubuntu changes", " - [Packaging] annotations: document annotations headers", "" ], "package": "linux", "version": "6.2.0-15.15", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [], "author": "Andrea Righi ", "date": "Fri, 10 Mar 2023 07:36:59 +0100" }, { "cves": [], "log": [ "", " * lunar/linux: 6.2.0-14.14 -proposed tracker (LP: #2009856)", "", " * Miscellaneous Ubuntu changes", " - [Packaging] rust: add rust build dependencies to all arches", " - [Packaging] Support skipped dkms modules", " - [Packaging] actually enforce set -e in dkms-build--nvidia-N", " - [Packaging] Preserve the correct log file variable value", " - [Packaging] update getabis", "" ], "package": "linux", "version": "6.2.0-14.14", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2009856 ], "author": "Andrea Righi ", "date": "Thu, 09 Mar 2023 16:40:36 +0100" }, { "cves": [], "log": [ "", " * lunar/linux: 6.2.0-13.13 -proposed tracker (LP: #2009704)", "", " * Packaging resync (LP: #1786013)", " - debian/dkms-versions -- update from kernel-versions (main/master)", "", " * mt7921: add support of MTFG table (LP: #2009642)", " - wifi: mt76: mt7921: add support to update fw capability with MTFG table", "" ], "package": "linux", "version": "6.2.0-13.13", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2009704, 1786013, 2009642 ], "author": "Andrea Righi ", "date": "Wed, 08 Mar 2023 14:40:25 +0100" }, { "cves": [], "log": [ "", " * lunar/linux: 6.2.0-12.12 -proposed tracker (LP: #2009698)", "", " * Miscellaneous Ubuntu changes", " - SAUCE: enforce rust availability only on x86_64", " - [Config] update CONFIG_RUST_IS_AVAILABLE", "" ], "package": "linux", "version": "6.2.0-12.12", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2009698 ], "author": "Andrea Righi ", "date": "Wed, 08 Mar 2023 12:50:15 +0100" }, { "cves": [], "log": [ "", " * lunar/linux: 6.2.0-11.11 -proposed tracker (LP: #2009697)", "", " * Miscellaneous Ubuntu changes", " - [Packaging] do not stop the build if rust is not available", "" ], "package": "linux", "version": "6.2.0-11.11", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2009697 ], "author": "Andrea Righi ", "date": "Wed, 08 Mar 2023 12:24:55 +0100" }, { "cves": [], "log": [ "", " * lunar/linux: 6.2.0-10.10 -proposed tracker (LP: #2009673)", "", " * Packaging resync (LP: #1786013)", " - debian/dkms-versions -- update from kernel-versions (main/master)", "", " * enable Rust support in the kernel (LP: #2007654)", " - [Packaging] propagate makefile variables to kernelconfig", " - SAUCE: rust: fix regexp in scripts/is_rust_module.sh", " - SAUCE: scripts: rust: drop is_rust_module.sh", " - SAUCE: rust: allow to use INIT_STACK_ALL_ZERO", " - SAUCE: scripts: Exclude Rust CUs with pahole", " - SAUCE: modpost: support arbitrary symbol length in modversion", " - SAUCE: allows to enable Rust with modversions", " - SAUCE: rust: properly detect the version of libclang used by bindgen", " - [Packaging] rust: add the proper make flags to enable rust support", " - [Packaging] add rust dependencies", " - [Packaging] bpftool: always use vmlinux to generate headers", " - [Packaging] run rustavailable target as debugging before build", " - [Config] enable Rust support", "", " * Fail to output sound to external monitor which connects via docking station", " (LP: #2009024)", " - [Config] Enable CONFIG_SND_HDA_INTEL_HDMI_SILENT_STREAM", "", " * Miscellaneous Ubuntu changes", " - SAUCE: Makefile: replace rsync with tar", "" ], "package": "linux", "version": "6.2.0-10.10", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2009673, 1786013, 2007654, 2009024 ], "author": "Andrea Righi ", "date": "Wed, 08 Mar 2023 12:01:56 +0100" }, { "cves": [], "log": [ "", " * lunar/linux: 6.2.0-1.1 -proposed tracker (LP: #2009621)", "", " * Packaging resync (LP: #1786013)", " - [Packaging] update variants", " - debian/dkms-versions -- update from kernel-versions (main/master)", "", " * kinetic: apply new apparmor and LSM stacking patch set (LP: #1989983)", " - SAUCE: apparmor: Add fine grained mediation of posix mqueues", " - SAUCE: apparmor: add user namespace creation mediation", "", " * Lunar update: v6.2.2 upstream stable release (LP: #2009358)", " - ALSA: hda: cs35l41: Correct error condition handling", " - crypto: arm64/sm4-gcm - Fix possible crash in GCM cryption", " - bpf: bpf_fib_lookup should not return neigh in NUD_FAILED state", " - vc_screen: don't clobber return value in vcs_read", " - drm/amd/display: Move DCN314 DOMAIN power control to DMCUB", " - drm/amd/display: Properly reuse completion structure", " - scripts/tags.sh: fix incompatibility with PCRE2", " - wifi: rtw88: usb: Set qsel correctly", " - wifi: rtw88: usb: send Zero length packets if necessary", " - wifi: rtw88: usb: drop now unnecessary URB size check", " - usb: dwc3: pci: add support for the Intel Meteor Lake-M", " - USB: serial: option: add support for VW/Skoda \"Carstick LTE\"", " - usb: gadget: u_serial: Add null pointer check in gserial_resume", " - arm64: dts: uniphier: Fix property name in PXs3 USB node", " - usb: typec: pd: Remove usb_suspend_supported sysfs from sink PDO", " - USB: core: Don't hold device lock while reading the \"descriptors\" sysfs file", " - Linux 6.2.2", "", " * Lunar update: v6.2.1 upstream stable release (LP: #2009127)", " - uaccess: Add speculation barrier to copy_from_user()", " - x86/alternatives: Introduce int3_emulate_jcc()", " - x86/alternatives: Teach text_poke_bp() to patch Jcc.d32 instructions", " - x86/static_call: Add support for Jcc tail-calls", " - HID: mcp-2221: prevent UAF in delayed work", " - wifi: mwifiex: Add missing compatible string for SD8787", " - audit: update the mailing list in MAINTAINERS", " - platform/x86/amd/pmf: Add depends on CONFIG_POWER_SUPPLY", " - platform/x86: nvidia-wmi-ec-backlight: Add force module parameter", " - ext4: Fix function prototype mismatch for ext4_feat_ktype", " - randstruct: disable Clang 15 support", " - bpf: add missing header file include", " - Linux 6.2.1", "", " * Fix mediatek wifi driver crash when loading wrong SAR table (LP: #2009118)", " - wifi: mt76: mt7921: fix error code of return in mt7921_acpi_read", "", " * overlayfs mounts as R/O over idmapped mount (LP: #2009065)", " - SAUCE: overlayfs: handle idmapped mounts in ovl_do_(set|remove)xattr", "", " * RaptorLake: Fix the Screen is shaking by onboard HDMI port in mirror mode", " (LP: #1993561)", " - drm/i915/display: Drop check for doublescan mode in modevalid", " - drm/i915/display: Prune Interlace modes for Display >=12", "", " * screen flicker after PSR2 enabled (LP: #2007516)", " - SAUCE: drm/i915/display/psr: Disable PSR2 sel fetch on panel SHP 5457", "", " * [23.04 FEAT] Support for new IBM Z Hardware (IBM z16) - Reset DAT-Protection", " facility support (LP: #1982378)", " - s390/mm: add support for RDP (Reset DAT-Protection)", "", " * [23.04 FEAT] zcrypt DD: AP command filtering (LP: #2003637)", " - s390/zcrypt: introduce ctfm field in struct CPRBX", "", " * rtcpie in timers from ubuntu_kernel_selftests randomly failing", " (LP: #1814234)", " - SAUCE: selftest: rtcpie: Force passing unreliable subtest", "", " * [23.04 FEAT] Support for List-Directed IPL and re-IPL from ECKD DASD", " (LP: #2003394)", " - s390/ipl: add DEFINE_GENERIC_LOADPARM()", " - s390/ipl: add loadparm parameter to eckd ipl/reipl data", "", " * Miscellaneous Ubuntu changes", " - SAUCE: drm/i915/sseu: fix max_subslices array-index-out-of-bounds access", " - SAUCE: mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type", " - SAUCE: Revert \"fbdev: Make registered_fb[] private to fbmem.c\"", " - [Packaging] disable signing for ppc64el", " - [Config] define CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS", " - SAUCE: Revert \"arm64/fpsimd: Make kernel_neon_ API _GPL\"", "" ], "package": "linux", "version": "6.2.0-1.1", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2009621, 1786013, 1989983, 2009358, 2009127, 2009118, 2009065, 1993561, 2007516, 1982378, 2003637, 1814234, 2003394 ], "author": "Andrea Righi ", "date": "Tue, 07 Mar 2023 18:45:31 +0100" }, { "cves": [], "log": [ "", " * Empty entry", "" ], "package": "linux", "version": "6.2.0-0.0", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [], "author": "Andrea Righi ", "date": "Fri, 03 Mar 2023 08:42:43 +0100" }, { "cves": [], "log": [ "", " * lunar/linux-unstable: 6.2.0-10.10 -proposed tracker (LP: #2007818)", "", " * Built-in camera device dies after runtime suspended (LP: #2007530)", " - SAUCE: usb: xhci: Workaround for runpm issue on AMD xHC", "", " * Miscellaneous Ubuntu changes", " - [Config] update annotations after rebase to v6.2", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.2", "" ], "package": "linux-unstable", "version": "6.2.0-10.10", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2007818, 2007530 ], "author": "Andrea Righi ", "date": "Mon, 20 Feb 2023 10:36:20 +0100" }, { "cves": [], "log": [ "", " * lunar/linux-unstable: 6.2.0-9.9 -proposed tracker (LP: #2007069)", "", " * Move kernel ADT tests to python3 (LP: #2004429)", " - [Debian] Use a python3 compatable kernel-testing repo", "", " * Mediatek FM350-GL wwan module failed to init: Invalid device status 0x1", " (LP: #2002089)", " - SAUCE: Revert \"net: wwan: t7xx: Add AP CLDMA\"", " - SAUCE: net: wwan: t7xx: Add AP CLDMA", " - SAUCE: net: wwan: t7xx: Infrastructure for early port configuration", " - SAUCE: net: wwan: t7xx: PCIe reset rescan", " - SAUCE: net: wwan: t7xx: Enable devlink based fw flashing and coredump", " collection", " - SAUCE: net: wwan: t7xx: Devlink documentation", "", " * LXD containers using shiftfs on ZFS or TMPFS broken on 5.15.0-48.54", " (LP: #1990849)", " - SAUCE: shiftfs: fix -EOVERFLOW inside the container", "", " * Miscellaneous Ubuntu changes", " - [Packaging] annotations: do not drop undefined configs in derivatives", " - [Packaging]: annotations: fix _remove_entry() logic", " - [Packaging] rsync no longer available on lunar", " - [Packaging] annotations: Handle single-line annoation rules", " - [Packaging] annotations: Preserve single-line annotation rules", " - [Packaging] annotations: Fix linter errors", " - [Packaging] annotations: Clean up policy writes", " - [Packaging] annotations: Handle tabs in annotations file", " - [Packaging] annotations: Fail on invalid lines", " - [Packaging] annotations: Write out annotations with notes first", " - [Packaging] annotations: Check validity of FLAVOUR_DEP", " - [Config] update annotations to split configs with/without notes", " - [Packaging] annotations: various code cleanups", " - [Config] update annotations after rebase to v6.2-rc8", "", " * Miscellaneous upstream changes", " - selftests/net: mv bpf/nat6to4.c to net folder", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.1-rc8", "" ], "package": "linux-unstable", "version": "6.2.0-9.9", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2007069, 2004429, 2002089, 1990849 ], "author": "Andrea Righi ", "date": "Mon, 13 Feb 2023 09:32:18 +0100" }, { "cves": [], "log": [ "", " * lunar/linux-unstable: 6.2.0-8.8 -proposed tracker (LP: #2004229)", "", " * Miscellaneous Ubuntu changes", " - [Packaging] re-enable signing for ppc64el and s390x", " - SAUCE: s390/decompressor: specify __decompress() buf len to avoid overflow", "" ], "package": "linux-unstable", "version": "6.2.0-8.8", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2004229 ], "author": "Andrea Righi ", "date": "Tue, 31 Jan 2023 08:21:21 +0100" }, { "cves": [], "log": [ "", " * lunar/linux-unstable: 6.2.0-7.7 -proposed tracker (LP: #2004142)", "" ], "package": "linux-unstable", "version": "6.2.0-7.7", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2004142 ], "author": "Andrea Righi ", "date": "Mon, 30 Jan 2023 10:23:15 +0100" }, { "cves": [], "log": [ "", " * lunar/linux-unstable: 6.2.0-6.6 -proposed tracker (LP: #2004138)", "", " * Miscellaneous Ubuntu changes", " - [Packaging] debian/rules: Bring back 'editconfigs'", " - [Packaging] debian/rules: 1-maintainer.mk -- Use make's if-else", " - [Packaging] annotations: make sure to always drop undefined configs", " - [Config] update annotations after rebase to v6.2-rc6", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.1-rc6", "" ], "package": "linux-unstable", "version": "6.2.0-6.6", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2004138 ], "author": "Andrea Righi ", "date": "Mon, 30 Jan 2023 09:20:26 +0100" }, { "cves": [ { "cve": "CVE-2023-0179", "url": "https://ubuntu.com/security/CVE-2023-0179", "cve_description": "A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.", "cve_priority": "high", "cve_public_date": "2023-03-27 22:15:00 UTC" } ], "log": [ "", " * lunar/linux-unstable: 6.2.0-5.5 -proposed tracker (LP: #2003682)", "", " * [23.04] Kernel 6.2 does not boot on s390x (LP: #2003348)", " - SAUCE Revert \"zstd: import usptream v1.5.2\"", " - SAUCE: Revert \"zstd: Move zstd-common module exports to", " zstd_common_module.c\"", "", " * Revoke & rotate to new signing key (LP: #2002812)", " - [Packaging] Revoke and rotate to new signing key", "", " * CVE-2023-0179", " - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits", "", " * [23.04] net/smc: Alibaba patches about tunable buffer sizes may cause errors", " and need to be removed (kernel 6.2) (LP: #2003547)", " - SAUCE: Revert \"net/smc: Unbind r/w buffer size from clcsock and make them", " tunable\"", " - SAUCE: Revert \"net/smc: Introduce a specific sysctl for TEST_LINK time\"", "", " * 5.15 stuck at boot on c4.large (LP: #1956780)", " - SAUCE: Revert \"PCI/MSI: Mask MSI-X vectors only on success\"", "", " * Miscellaneous Ubuntu changes", " - [Packaging] scripts/misc/kernelconfig: Disable config checks for mainline", " builds", " - [Packaging] annotations: add CONFIG_GCC_VERSION to the list of ignored", " configs", "" ], "package": "linux-unstable", "version": "6.2.0-5.5", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2003682, 2003348, 2002812, 2003547, 1956780 ], "author": "Andrea Righi ", "date": "Mon, 23 Jan 2023 08:20:26 +0100" }, { "cves": [], "log": [ "", " * lunar/linux-unstable: 6.2.0-4.4 -proposed tracker (LP: #2003051)", "", " * Miscellaneous Ubuntu changes", " - [Packaging] add python3 as a build dependency", " - [Packaging] scripts/misc/kernelconfig: Rewrite", "" ], "package": "linux-unstable", "version": "6.2.0-4.4", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2003051 ], "author": "Andrea Righi ", "date": "Tue, 17 Jan 2023 09:18:54 +0100" }, { "cves": [], "log": [ "", " * lunar/linux-unstable: 6.2.0-3.3 -proposed tracker (LP: #2002939)", "", " * Enable kernel config for P2PDMA (LP: #1987394)", " - [Config] Enable CONFIG_HSA_AMD_P2P", "", " * Miscellaneous Ubuntu changes", " - SAUCE: (no-up) Remove obj- += foo.o hack", " - SAUCE: (no-up) re-add ubuntu/ directory", " - [Config] enable EFI handover protocol", " - [Packaging] Fix module-check error when modules are compressed", " - SAUCE: (no-up) do not remove debian directory by 'make mrproper'", " - [Packaging] debian/rules: Drop AUTOBUILD", " - [Packaging] debian/rules: Drop NOKERNLOG and PRINTSHAS env variables", " - [Packaging] debian/rules: Replace skip variables with skip_checks", " - [Packaging] checks/retpoline-check: Make 'skipretpoline' argument optional", " - [Packaging] checks/module-signature-check: Add 'skip_checks' argument", " - [Packaging] debian/rules: Rename 'skip_dbg' to 'do_dbgsym_package'", " - [Packaging] debian/rules: Rename 'skip_checks' to 'do_skip_checks'", " - [Packaging] debian/rules: Rename 'full_build' to 'do_full_build'", " - [Packaging] debian/rules: Fix PPA debug package builds", " - [Packaging] debian/rules: Remove debug package install directory earlier", " - [Packaging] debian/rules: Remove unnecessary 'lockme_' variables", " - [Packaging] debian/rules: Remove unused target 'diffupstream'", " - [Packaging] debian/rules: Mark PHONY targets individually", " - [Packaging] debian/rules: Clean up 'help' target output", " - [Packaging] debian/rules: Clean up 'printenv' target output", " - [Packaging] debian/rules: Add missing 'do_' variables to 'printenv'", " - [Config] update annotations after rebase to v6.2-rc4", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.1-rc4", "" ], "package": "linux-unstable", "version": "6.2.0-3.3", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2002939, 1987394 ], "author": "Andrea Righi ", "date": "Mon, 16 Jan 2023 16:01:40 +0100" }, { "cves": [], "log": [ "", " * lunar/linux-unstable: 6.2.0-2.2 -proposed tracker (LP: #2001892)", "", " * Soundwire support for the Intel RPL Gen 0C40/0C11 platforms (LP: #2000030)", " - SAUCE: ASoC: Intel: soc-acpi: add configuration for variant of 0C40 product", " - SAUCE: ASoC: Intel: soc-acpi: add configuration for variant of 0C11 product", "", " * Miscellaneous Ubuntu changes", " - [Config] update toolchain version in annotations", "", " * Miscellaneous upstream changes", " - Revert \"UBUNTU: [Packaging] Support skipped dkms modules\"", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.1-rc2", "" ], "package": "linux-unstable", "version": "6.2.0-2.2", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2001892, 2000030 ], "author": "Andrea Righi ", "date": "Thu, 05 Jan 2023 09:19:55 +0100" }, { "cves": [], "log": [ "", " * lunar/linux-unstable: 6.2.0-1.1 -proposed tracker (LP: #2000904)", "", " * Packaging resync (LP: #1786013)", " - [Packaging] update variants", "", " * Miscellaneous Ubuntu changes", " - [Packaging] annotations: remove configs that are undefined across all", " arches/flavours", " - SAUCE: Revert \"apparmor: make __aa_path_perm() static\"", " - [Packaging] abi-check: ignore failures when abi check is skipped", " - [Packaging] temporarily disable zfs dkms", " - [Config] update annotations after rebase to 6.2-rc1", "", " [ Upstream Kernel Changes ]", "", " * Rebase to v6.1-rc1", "" ], "package": "linux-unstable", "version": "6.2.0-1.1", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2000904, 1786013 ], "author": "Andrea Righi ", "date": "Wed, 04 Jan 2023 12:08:32 +0100" }, { "cves": [], "log": [ "", " * Empty entry", "" ], "package": "linux-unstable", "version": "6.2.0-0.0", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [], "author": "Andrea Righi ", "date": "Sun, 01 Jan 2023 10:16:00 +0100" }, { "cves": [], "log": [ "", " * lunar/linux: 6.1.0-11.11 -proposed tracker (LP: #2000704)", "", " * Packaging resync (LP: #1786013)", " - [Packaging] update helper scripts", "", " * Lunar update: v6.1.1 upstream stable release (LP: #2000706)", " - x86/vdso: Conditionally export __vdso_sgx_enter_enclave()", " - libbpf: Fix uninitialized warning in btf_dump_dump_type_data", " - PCI: mt7621: Add sentinel to quirks table", " - mips: ralink: mt7621: define MT7621_SYSC_BASE with __iomem", " - mips: ralink: mt7621: soc queries and tests as functions", " - mips: ralink: mt7621: do not use kzalloc too early", " - irqchip/ls-extirq: Fix endianness detection", " - udf: Discard preallocation before extending file with a hole", " - udf: Fix preallocation discarding at indirect extent boundary", " - udf: Do not bother looking for prealloc extents if i_lenExtents matches", " i_size", " - udf: Fix extending file within last block", " - usb: gadget: uvc: Prevent buffer overflow in setup handler", " - USB: serial: option: add Quectel EM05-G modem", " - USB: serial: cp210x: add Kamstrup RF sniffer PIDs", " - USB: serial: f81232: fix division by zero on line-speed change", " - USB: serial: f81534: fix division by zero on line-speed change", " - xhci: Apply XHCI_RESET_TO_DEFAULT quirk to ADL-N", " - staging: r8188eu: fix led register settings", " - igb: Initialize mailbox message for VF reset", " - usb: typec: ucsi: Resume in separate work", " - usb: dwc3: pci: Update PCIe device ID for USB3 controller on CPU sub-system", " for Raptor Lake", " - cifs: fix oops during encryption", " - KEYS: encrypted: fix key instantiation with user-provided data", " - Linux 6.1.1", "", " * Expose built-in trusted and revoked certificates (LP: #1996892)", " - [Packaging] Expose built-in trusted and revoked certificates", "", " * Fix System cannot detect bluetooth after running suspend stress test", " (LP: #1998727)", " - wifi: rtw88: 8821c: enable BT device recovery mechanism", "", " * Gnome doesn't run smooth when performing normal usage with RPL-P CPU", " (LP: #1998419)", " - drm/i915/rpl-p: Add stepping info", "", " * Mute/mic LEDs no function on a HP platfrom (LP: #1998882)", " - ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook", "", " * Add additional Mediatek MT7922 BT device ID (LP: #1998885)", " - Bluetooth: btusb: Add a new VID/PID 0489/e0f2 for MT7922", "", " * Support Icicle Kit reference design v2022.10 (LP: #1993148)", " - SAUCE: riscv: dts: microchip: Disable PCIe on the Icicle Kit", "", " * Add iommu passthrough quirk for Intel IPU6 on RaptorLake (LP: #1989041)", " - SAUCE: iommu: intel-ipu: use IOMMU passthrough mode for Intel IPUs on Raptor", " Lake", "", " * Enable Intel FM350 wwan CCCI driver port logging (LP: #1997686)", " - net: wwan: t7xx: use union to group port type specific data", " - net: wwan: t7xx: Add port for modem logging", "", " * TEE Support for CCP driver (LP: #1991608)", " - crypto: ccp - Add support for TEE for PCI ID 0x14CA", "", " * Kinetic update: v5.19.17 upstream stable release (LP: #1994179)", " - Revert \"fs: check FMODE_LSEEK to control internal pipe splicing\"", " - kbuild: Add skip_encoding_btf_enum64 option to pahole", "", " * Kinetic update: v5.19.15 upstream stable release (LP: #1994078)", " - Revert \"clk: ti: Stop using legacy clkctrl names for omap4 and 5\"", "", " * support independent clock and LED GPIOs for Intel IPU6 platforms", " (LP: #1989046)", " - SAUCE: platform/x86: int3472: support independent clock and LED GPIOs", "", " * Kernel livepatch support for for s390x (LP: #1639924)", " - [Config] Enable EXPOLINE_EXTERN on s390x", "", " * Kinetic update: v5.19.7 upstream stable release (LP: #1988733)", " - Revert \"PCI/portdrv: Don't disable AER reporting in", " get_port_device_capability()\"", "", " * Kinetic update: v5.19.3 upstream stable release (LP: #1987345)", " - Revert \"mm: kfence: apply kmemleak_ignore_phys on early allocated pool\"", "", " * Fix non-working e1000e device after resume (LP: #1951861)", " - SAUCE: Revert \"e1000e: Add polling mechanism to indicate CSME DPG exit\"", "", " * Add additional Mediatek MT7921 WiFi/BT device IDs (LP: #1937004)", " - SAUCE: Bluetooth: btusb: Add support for Foxconn Mediatek Chip", "", " * Fix system sleep on TGL systems with Intel ME (LP: #1919321)", " - SAUCE: PCI: Serialize TGL e1000e PM ops", "", " * Fix broken e1000e device after S3 (LP: #1897755)", " - SAUCE: e1000e: Increase polling timeout on MDIC ready bit", "", " * Fix unusable USB hub on Dell TB16 after S3 (LP: #1855312)", " - SAUCE: USB: core: Make port power cycle a seperate helper function", " - SAUCE: USB: core: Attempt power cycle port when it's in eSS.Disabled state", "", " * Set explicit CC in the headers package (LP: #1999750)", " - [Packaging] Set explicit CC in the headers package", "", " * commit cf58599cded35cf4affed1e659c0e2c742d3fda7 seems to be missing in", " kinetic master to remove \"hio\" reference from Makefile (LP: #1999556)", " - SAUCE: remove leftover reference to ubuntu/hio driver", "", " * Miscellaneous Ubuntu changes", " - [Packaging] kernelconfig: always complete all config checks", " - [Packaging] annotations: unify same rule across all flavour within the same", " arch", " - [Config] annotations: compact annotations file", " - [Config] disable EFI_ZBOOT", " - SAUCE: input: i8042: fix section mismatch warning", " - debian/dkms-versions -- re-enable zfs", " - [Packaging] old-kernelconfig: update config-check path", " - [Packaging] update getabis", " - [Packaging] update Ubuntu.md", "", " * Miscellaneous upstream changes", " - Revert \"drm/i915/opregion: check port number bounds for SWSCI display power", " state\"", "" ], "package": "linux", "version": "6.1.0-11.11", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 2000704, 1786013, 2000706, 1996892, 1998727, 1998419, 1998882, 1998885, 1993148, 1989041, 1997686, 1991608, 1994179, 1994078, 1989046, 1639924, 1988733, 1987345, 1951861, 1937004, 1919321, 1897755, 1855312, 1999750, 1999556 ], "author": "Andrea Righi ", "date": "Fri, 30 Dec 2022 11:23:16 +0100" }, { "cves": [], "log": [ "", " * lunar/linux: 6.1.0-10.10 -proposed tracker (LP: #1999569)", "", " * Soundwire support for the Intel RPL Gen platforms (LP: #1997944)", " - ASoC: Intel: sof_sdw: Add support for SKU 0C10 product", " - ASoC: Intel: soc-acpi: add SKU 0C10 SoundWire configuration", " - ASoC: Intel: sof_sdw: Add support for SKU 0C40 product", " - ASoC: Intel: soc-acpi: add SKU 0C40 SoundWire configuration", " - ASoC: Intel: sof_sdw: Add support for SKU 0C4F product", " - ASoC: rt1318: Add RT1318 SDCA vendor-specific driver", " - ASoC: intel: sof_sdw: add rt1318 codec support.", " - ASoC: Intel: sof_sdw: Add support for SKU 0C11 product", " - ASoC: Intel: soc-acpi: add SKU 0C11 SoundWire configuration", " - SAUCE: ASoC: Intel: soc-acpi: update codec addr on 0C11/0C4F product", " - [Config] enable CONFIG_SND_SOC_RT1318_SDW", "", " * Virtual GPU driver packaging regression (LP: #1996112)", " - [Packaging] Reintroduce VM DRM drivers into modules", "" ], "package": "linux", "version": "6.1.0-10.10", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 1999569, 1997944, 1996112 ], "author": "Andrea Righi ", "date": "Tue, 13 Dec 2022 22:14:08 +0100" }, { "cves": [], "log": [ "", " * Empty entry (ABI bump)", "" ], "package": "linux", "version": "6.1.0-9.9", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [], "author": "Andrea Righi ", "date": "Tue, 13 Dec 2022 21:31:08 +0100" }, { "cves": [], "log": [ "", " * lunar/linux: 6.1.0-3.3 -proposed tracker (LP: #1999534)", "", " * [DEP-8] Run ADT regression suite for lowlatency kernels Jammy and later", " (LP: #1999528)", " - [DEP-8] Fix regression suite to run on lowlatency", "", " * Miscellaneous Ubuntu changes", " - [Packaging] annotations: do not add constraints on toolchain versions", "" ], "package": "linux", "version": "6.1.0-3.3", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 1999534, 1999528 ], "author": "Andrea Righi ", "date": "Tue, 13 Dec 2022 16:45:59 +0100" }, { "cves": [], "log": [ "", " * lunar/linux: 6.1.0-2.2 -proposed tracker (LP: #1999411)", "", " * Miscellaneous Ubuntu changes", " - [Packaging] annotations: do not enforce toolchain versions", "" ], "package": "linux", "version": "6.1.0-2.2", "urgency": "medium", "distributions": "lunar", "launchpad_bugs_fixed": [ 1999411 ], "author": "Andrea Righi ", "date": "Mon, 12 Dec 2022 17:05:59 +0100" }, { "cves": [], "log": [ "", " * lunar/linux: 6.1.0-1.1 -proposed tracker (LP: #1999373)", "", " * Packaging resync (LP: #1786013)", " - [Packaging] update variants", "", " * Miscellaneous Ubuntu changes", " - [Packaging] annotations: set and delete configs from command line", " - [Packaging] migrateconfigs: ignore README.rst if it doesn't exist", " - [Packaging] migrate-annotations: properly determine arches in derivatives", " - [Packaging] annotations: allow to set note to config options directly", " - [Packaging] annotations: assume --query as default command", " - [Packaging] annotations: allow to query using CONFIG_