Latest Changelogs for all releases
Note: Only updates for "head" packages where the changelog is available are shown on this page (view all).
| php8.5 | Sep 10th 14:07 | ||
|---|---|---|---|
| Release: resolute | Repo: universe | Level: security | New version: 8.5.4-0ubuntu1.3 |
| Packages in group: | libphp8.5-embed php8.5-bcmath php8.5-bz2 php8.5-dba php8.5-enchant php8.5-fpm php8.5-interbase php8.5-intl php8.5-litespeed php8.5-phpdbg php8.5-soap (... see all) | ||
|
php8.5 (8.5.4-0ubuntu1.3) resolute-security; urgency=medium * SECURITY UPDATE: SQL injection via improper escaping of backslashes
-- Marc Deslauriers Wed, 02 Sep 2026 10:42:18 -0400 |
|||
| CVE-2026-17543 | Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from | ||
| CVE-2026-17544 | Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and | ||
| CVE-2026-7260 | Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from | ||
| php8.5 | Sep 10th 14:07 | ||
|---|---|---|---|
| Release: resolute | Repo: main | Level: security | New version: 8.5.4-0ubuntu1.3 |
| Packages in group: | libapache2-mod-php8.5 php8.5-cgi php8.5-cli php8.5-common php8.5-curl php8.5-dev php8.5-gd php8.5-gmp php8.5-ldap php8.5-mbstring php8.5-mysql (... see all) | ||
|
php8.5 (8.5.4-0ubuntu1.3) resolute-security; urgency=medium * SECURITY UPDATE: SQL injection via improper escaping of backslashes
-- Marc Deslauriers Wed, 02 Sep 2026 10:42:18 -0400 |
|||
| CVE-2026-17543 | Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from | ||
| CVE-2026-17544 | Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and | ||
| CVE-2026-7260 | Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from | ||
| python3.12 | Sep 10th 14:07 | ||
|---|---|---|---|
| Release: noble | Repo: universe | Level: updates | New version: 3.12.3-1ubuntu0.17 |
| Packages in group: | idle-python3.12 libpython3.12-testsuite python3.12-full python3.12-nopie python3.12-venv | ||
|
python3.12 (3.12.3-1ubuntu0.17) noble-security; urgency=medium * SECURITY UPDATE: Incomplete filter application in tarfile extraction
-- Allen Huang Mon, 31 Aug 2026 11:18:26 +0100 |
|||
| CVE-2026-4360 | In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content fr | ||
| CVE-2026-15308 | The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processi | ||
| php8.3 | Sep 10th 14:07 | ||
|---|---|---|---|
| Release: noble | Repo: universe | Level: security | New version: 8.3.6-0ubuntu0.24.04.11 |
| Packages in group: | libphp8.3-embed php8.3-bcmath php8.3-bz2 php8.3-dba php8.3-enchant php8.3-fpm php8.3-imap php8.3-interbase php8.3-intl php8.3-phpdbg php8.3-soap (... see all) | ||
|
php8.3 (8.3.6-0ubuntu0.24.04.11) noble-security; urgency=medium * SECURITY UPDATE: SQL injection via improper escaping of backslashes
-- Marc Deslauriers Wed, 02 Sep 2026 08:56:02 -0400 |
|||
| CVE-2026-17543 | Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from | ||
| CVE-2026-7260 | Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from | ||
| glibc | Sep 10th 14:07 | ||
|---|---|---|---|
| Release: noble | Repo: universe | Level: security | New version: 2.39-0ubuntu8.9 |
| Packages in group: | glibc-source locales-all nscd | ||
|
glibc (2.39-0ubuntu8.9) noble-security; urgency=medium * SECURITY UPDATE: Buffer overflow in strfmon right-justification padding
-- Marc Deslauriers Thu, 03 Sep 2026 10:15:12 -0400 |
|||
| CVE-2026-19542 | Out-of-bounds stack array access in tdelete | ||
| CVE-2026-6368 | Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the we_wordv me | ||
| CVE-2026-6791 | When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the username to determine the use | ||
| python3.12 | Sep 10th 14:07 | ||
|---|---|---|---|
| Release: noble | Repo: main | Level: updates | New version: 3.12.3-1ubuntu0.17 |
| Packages in group: | libpython3.12-dev libpython3.12-minimal libpython3.12-stdlib libpython3.12t64 libpython3.12t64-dbg python3.12-dbg python3.12-dev python3.12-doc python3.12-examples python3.12-minimal | ||
|
python3.12 (3.12.3-1ubuntu0.17) noble-security; urgency=medium * SECURITY UPDATE: Incomplete filter application in tarfile extraction
-- Allen Huang Mon, 31 Aug 2026 11:18:26 +0100 |
|||
| CVE-2026-4360 | In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks. An affected system that extracts content fr | ||
| CVE-2026-15308 | The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processi | ||
| glibc | Sep 10th 14:07 | ||
|---|---|---|---|
| Release: noble | Repo: main | Level: security | New version: 2.39-0ubuntu8.9 |
| Packages in group: | glibc-doc libc6 libc6-dbg libc6-dev libc6-dev-i386 libc6-dev-x32 libc6-i386 libc6-x32 libc-bin libc-dev-bin libc-devtools (... see all) | ||
|
glibc (2.39-0ubuntu8.9) noble-security; urgency=medium * SECURITY UPDATE: Buffer overflow in strfmon right-justification padding
-- Marc Deslauriers Thu, 03 Sep 2026 10:15:12 -0400 |
|||
| CVE-2026-19542 | Out-of-bounds stack array access in tdelete | ||
| CVE-2026-6368 | Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the we_wordv me | ||
| CVE-2026-6791 | When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the username to determine the use | ||
| php8.3 | Sep 10th 14:07 | ||
|---|---|---|---|
| Release: noble | Repo: main | Level: security | New version: 8.3.6-0ubuntu0.24.04.11 |
| Packages in group: | libapache2-mod-php8.3 php8.3-cgi php8.3-cli php8.3-common php8.3-curl php8.3-dev php8.3-gd php8.3-gmp php8.3-ldap php8.3-mbstring php8.3-mysql (... see all) | ||
|
php8.3 (8.3.6-0ubuntu0.24.04.11) noble-security; urgency=medium * SECURITY UPDATE: SQL injection via improper escaping of backslashes
-- Marc Deslauriers Wed, 02 Sep 2026 08:56:02 -0400 |
|||
| CVE-2026-17543 | Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from | ||
| CVE-2026-7260 | Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from | ||
| php8.1 | Sep 10th 14:07 | ||
|---|---|---|---|
| Release: jammy | Repo: universe | Level: security | New version: 8.1.2-1ubuntu2.26 |
| Packages in group: | libapache2-mod-php7.4 libapache2-mod-php8.0 libphp8.1-embed php8.1-bcmath php8.1-bz2 php8.1-dba php8.1-enchant php8.1-fpm php8.1-imap php8.1-interbase php8.1-intl (... see all) | ||
|
php8.1 (8.1.2-1ubuntu2.26) jammy-security; urgency=medium * SECURITY UPDATE: SQL injection via improper escaping of backslashes
-- Marc Deslauriers Wed, 02 Sep 2026 08:42:10 -0400 |
|||
| CVE-2026-17543 | Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from | ||
| CVE-2026-7260 | Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from | ||
| php8.1 | Sep 10th 14:07 | ||
|---|---|---|---|
| Release: jammy | Repo: main | Level: security | New version: 8.1.2-1ubuntu2.26 |
| Packages in group: | libapache2-mod-php8.1 php8.1-cgi php8.1-cli php8.1-common php8.1-curl php8.1-dev php8.1-gd php8.1-gmp php8.1-ldap php8.1-mbstring php8.1-mysql (... see all) | ||
|
php8.1 (8.1.2-1ubuntu2.26) jammy-security; urgency=medium * SECURITY UPDATE: SQL injection via improper escaping of backslashes
-- Marc Deslauriers Wed, 02 Sep 2026 08:42:10 -0400 |
|||
| CVE-2026-17543 | Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from | ||
| CVE-2026-7260 | Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from | ||
| firefox-esr | Sep 10th 13:08 | This package belongs to a PPA: Mozilla ESR | |
|---|---|---|---|
| Release: noble | Repo: main | Level: base | New version: 140.16.0esr+ |
| Packages in group: | firefox-esr-dbg firefox-esr-dev firefox-esr-geckodriver firefox-esr-locale-af firefox-esr-locale-an firefox-esr-locale-ar firefox-esr-locale-as firefox-esr-locale-ast firefox-esr-locale-az firefox-esr-locale-be firefox-esr-locale-bg (... see all) | ||
|
firefox-esr (140.16.0esr+build1-0ubuntu0.24.04.1~mt1) noble; urgency=medium
|
|||
| sos | Sep 10th 13:07 | ||
|---|---|---|---|
| Release: resolute | Repo: universe | Level: updates | New version: 4.11.2-0ubuntu0.1 |
| Packages in group: | sosreport | ||
|
sos (4.11.2-0ubuntu0.1) resolute; urgency=medium * New 4.11.2 upstream release. (LP: #2156921) * For more details, full release note is available here:
* d/t/simple.sh: Remove Failure if /proc/timer* not Captured * d/control:
* d/copyright: Aligned copyright with Debian -- Bryan Fraschetti Wed, 17 Jun 2026 11:43:07 +0200 |
|||
| 2156921 | [sru] sos upstream 4.11.2 | ||
| linux-restricted-signatures-ibm | Sep 10th 13:07 | ||
|---|---|---|---|
| Release: resolute | Repo: restricted | Level: proposed | New version: 7.0.0-1013.13+1 |
| Packages in group: | linux-modules-nvidia-580-open-7.0.0-1008-ibm linux-modules-nvidia-580-open-7.0.0-1010-ibm linux-modules-nvidia-580-open-7.0.0-1013-ibm linux-modules-nvidia-580-server-open-7.0.0-1008-ibm linux-modules-nvidia-580-server-open-7.0.0-1010-ibm linux-modules-nvidia-580-server-open-7.0.0-1013-ibm linux-modules-nvidia-595-open-7.0.0-1008-ibm linux-modules-nvidia-595-open-7.0.0-1010-ibm linux-modules-nvidia-595-open-7.0.0-1013-ibm linux-modules-nvidia-595-server-open-7.0.0-1008-ibm linux-modules-nvidia-595-server-open-7.0.0-1010-ibm (... see all) | ||
|
linux-restricted-signatures-ibm (7.0.0-1013.13+1) resolute; urgency=medium * Packaging resync (LP: #1786013)
-- Andy Whitcroft Tue, 08 Sep 2026 08:49:35 +0100 |
|||
| 1786013 | Packaging resync | ||
| linux-restricted-signatures-vmware | Sep 10th 13:07 | ||
|---|---|---|---|
| Release: resolute | Repo: restricted | Level: proposed | New version: 7.0.0-1003.3+1 |
| Packages in group: | linux-modules-nvidia-580-open-7.0.0-1003-vmware linux-modules-nvidia-580-server-open-7.0.0-1003-vmware linux-modules-nvidia-595-open-7.0.0-1003-vmware linux-modules-nvidia-595-server-open-7.0.0-1003-vmware linux-modules-nvidia-610-open-7.0.0-1003-vmware linux-signatures-nvidia-7.0.0-1003-vmware | ||
|
linux-restricted-signatures-vmware (7.0.0-1003.3+1) resolute; urgency=medium * Packaging resync (LP: #1786013)
-- Andy Whitcroft Tue, 08 Sep 2026 08:46:07 +0100 |
|||
| 1786013 | Packaging resync | ||
| linux-restricted-modules-vmware | Sep 10th 13:07 | ||
|---|---|---|---|
| Release: resolute | Repo: restricted | Level: proposed | New version: 7.0.0-1003.3+1 |
| Packages in group: | linux-modules-nvidia-525-server-open-vmware linux-modules-nvidia-525-server-open-vmware-7.0 linux-modules-nvidia-525-server-vmware linux-modules-nvidia-525-server-vmware-7.0 linux-modules-nvidia-535-open-vmware linux-modules-nvidia-535-open-vmware-7.0 linux-modules-nvidia-535-server-open-vmware linux-modules-nvidia-535-server-open-vmware-7.0 linux-modules-nvidia-535-server-vmware linux-modules-nvidia-535-server-vmware-7.0 linux-modules-nvidia-535-vmware (... see all) | ||
|
linux-restricted-modules-vmware (7.0.0-1003.3+1) resolute; urgency=medium * Packaging resync (LP: #1786013)
-- Andy Whitcroft Tue, 08 Sep 2026 08:46:07 +0100 |
|||
| 1786013 | Packaging resync | ||