UbuntuUpdates.org

Latest Changelogs for all releases

All releases Jammy Noble Plucky Resolute
Include all PPAs Exclude daily builds PPAs Exclude all PPAs
Include levels: securityupdatesproposedbackportsbase

Note: Only updates for "head" packages where the changelog is available are shown on this page (view all).

mysql-8.0 Aug 31st 15:07
Release: jammy Repo: universe Level: updates New version: 8.0.46-0ubuntu0.22.04.4
Packages in group:  mysql-router mysql-source-8.0 mysql-testsuite mysql-testsuite-8.0

mysql-8.0 (8.0.46-0ubuntu0.22.04.4) jammy-security; urgency=medium

  * SECURITY UPDATE: July 2026 security issues
    - debian/patches/2026-07-security.patch
    - CVE-2026-46936, CVE-2026-47012, CVE-2026-47023, CVE-2026-47052,
      CVE-2026-47064, CVE-2026-60145, CVE-2026-60163, CVE-2026-60177,
      CVE-2026-60178, CVE-2026-60182, CVE-2026-60183, CVE-2026-60184,
      CVE-2026-60185, CVE-2026-60186, CVE-2026-60187, CVE-2026-60188,
      CVE-2026-60189, CVE-2026-60190, CVE-2026-60191, CVE-2026-60315,
      CVE-2026-60316, CVE-2026-60331, CVE-2026-60332, CVE-2026-60585,
      CVE-2026-60747, CVE-2026-61081, CVE-2026-61094, CVE-2026-61096,
      CVE-2026-61109

 -- Marc Deslauriers Wed, 26 Aug 2026 08:43:05 -0400
CVE-2026-46936 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are MySQL Se
CVE-2026-47012 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are My
CVE-2026-47023 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are
CVE-2026-47052 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:
CVE-2026-47064 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are My
More...

zfs-linux Aug 31st 15:07
Release: jammy Repo: universe Level: security New version: 2.1.5-1ubuntu6~22.04.7
Packages in group:  libpam-zfs zfs-dkms zfs-dracut zfs-test

zfs-linux (2.1.5-1ubuntu6~22.04.7) jammy-security; urgency=medium

  * Fixes for unprivileged user access to pool operations (LP: #2164774)
    - debian/patches:
      - adding
        - ubuntu/0004-secpolicy_nfs-remove-not-used.patch
        - ubuntu/0005-secpolicy_zinject-only-permit-a-global-zone-credenti.patch
        - ubuntu/0006-secpolicy_sys_config-only-permit-a-global-zone-crede.patch
        - ubuntu/0007-secpolicy_zfs-add-a-note-about-the-power-of-CAP_SYS_.patch

 -- John Cabaj Fri, 21 Aug 2026 15:34:37 -0500
2164774 OpenZFS Linux open zpool manipulation and escapes via unprivileged userns

cpio Aug 31st 15:07
Release: jammy Repo: universe Level: security New version: 2.13+dfsg-7ubuntu0.2
Packages in group:  cpio-win32

cpio (2.13+dfsg-7ubuntu0.2) jammy-security; urgency=medium

  * SECURITY UPDATE: Unbounded stack allocation
    - debian/patches/CVE-2026-66485.patch: Minor fixes in src/makepath.c,
      src/userspec.c.
    - CVE-2026-66485
  * SECURITY UPDATE: Hard link to file outside intended directory
    - debian/patches/CVE-2026-66484.patch: The --no-absolute-filenames option
      affects hard link targets too. in src/tar.c.
    - CVE-2026-66484
  * SECURITY UPDATE: Unescaped output
    - debian/patches/CVE-2026-66486.patch: Quote file names in error messages
      and in listings. in src/copyin.c, src/copyout.c, src/copypass.c,
      src/main.c, tests/CVE-2019-14866.at, tests/testsuite.
    - CVE-2026-66486

 -- Isabel Garcia Contreras Tue, 18 Aug 2026 16:46:57 -0400
CVE-2026-66485 GNU cpio is vulnerable to an uncontrolled memory allocation in the make_path function at src/makepath.c. The function uses alloca to allocate stack m
CVE-2026-66484 GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the
CVE-2026-66486 GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality. When listing archive members via cpio
CVE-2019-14866 In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives fro

libssh Aug 31st 15:07
Release: jammy Repo: main Level: updates New version: 0.9.6-2ubuntu0.22.04.8
Packages in group:  libssh-4 libssh-dev libssh-doc libssh-gcrypt-4 libssh-gcrypt-dev

libssh (0.9.6-2ubuntu0.22.04.8) jammy-security; urgency=medium

  * SECURITY UPDATE: Denial of service via zero advertised channel packet size
    - debian/patches/CVE-2026-59843-1.patch: channels: Fail when receiving max
      packet size 0 in src/channels.c, src/messages.c.
    - debian/patches/CVE-2026-59843-2.patch: tests: Verify zero max packet size
      in channel open is rejected in tests/unittests/torture_channel.c.
    - CVE-2026-59843
  * SECURITY UPDATE: Denial of service via unchecked ProxyCommand fork() failure
    - debian/patches/CVE-2026-59845.patch: socket: Properly check fork() return
      code in src/socket.c.
    - CVE-2026-59845
  * SECURITY UPDATE: Information disclosure via ProxyCommand %r username
    expansion
    - debian/patches/CVE-2026-59846-pre1.patch: misc: Add function to check
      username syntax in include/libssh/misc.h, src/misc.c,
      tests/unittests/torture_misc.c.
    - debian/patches/CVE-2026-59846.patch: Block shell metacharacters from
      usernames in include/libssh/priv.h, src/misc.c.
    - CVE-2026-59846
  * SECURITY UPDATE: Integrity downgrade via OpenSSL AES-GCM tag verification
    - debian/patches/CVE-2026-59847-1.patch: libcrypto: Fix tag verification of
      AES-GCM ciphers in src/libcrypto.c.
    - debian/patches/CVE-2026-59847-2.patch: libcrypto: Fix symmetric issue
      during encryption in src/libcrypto.c.
    - CVE-2026-59847
  * SECURITY UPDATE: Denial of service via SFTP responses with unknown request
    IDs
    - debian/patches/CVE-2026-59848-1.patch: sftp: handle responses with unknown
      request IDs in include/libssh/sftp.h, src/sftp.c,
      tests/client/torture_sftp_request_id.c, tests/client/CMakeLists.txt.
    - debian/patches/CVE-2026-59848-2.patch: sftp: Initialize sftp_request_queue
      ptr in sftp_free in src/sftp.c.
    - CVE-2026-59848
  * SECURITY UPDATE: Use-after-free via data callbacks on closed channels
    - debian/patches/CVE-2026-59850.patch: channels: Avoid processing DATA
      packets on closed channels in src/channels.c.
    - CVE-2026-59850

 -- Marc Deslauriers Mon, 24 Aug 2026 11:20:14 -0400
CVE-2026-59843 A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel write
CVE-2026-59845 A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then b
CVE-2026-59846 A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment v
CVE-2026-59847 A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, al
CVE-2026-59848 A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing
More...

mysql-8.0 Aug 31st 15:07
Release: jammy Repo: main Level: updates New version: 8.0.46-0ubuntu0.22.04.4
Packages in group:  libmysqlclient21 libmysqlclient-dev mysql-client mysql-client-8.0 mysql-client-core-8.0 mysql-server mysql-server-8.0 mysql-server-core-8.0

mysql-8.0 (8.0.46-0ubuntu0.22.04.4) jammy-security; urgency=medium

  * SECURITY UPDATE: July 2026 security issues
    - debian/patches/2026-07-security.patch
    - CVE-2026-46936, CVE-2026-47012, CVE-2026-47023, CVE-2026-47052,
      CVE-2026-47064, CVE-2026-60145, CVE-2026-60163, CVE-2026-60177,
      CVE-2026-60178, CVE-2026-60182, CVE-2026-60183, CVE-2026-60184,
      CVE-2026-60185, CVE-2026-60186, CVE-2026-60187, CVE-2026-60188,
      CVE-2026-60189, CVE-2026-60190, CVE-2026-60191, CVE-2026-60315,
      CVE-2026-60316, CVE-2026-60331, CVE-2026-60332, CVE-2026-60585,
      CVE-2026-60747, CVE-2026-61081, CVE-2026-61094, CVE-2026-61096,
      CVE-2026-61109

 -- Marc Deslauriers Wed, 26 Aug 2026 08:43:05 -0400
CVE-2026-46936 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are MySQL Se
CVE-2026-47012 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are My
CVE-2026-47023 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are
CVE-2026-47052 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:
CVE-2026-47064 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are My
More...

coreutils Aug 31st 15:07
Release: jammy Repo: main Level: updates New version: 8.32-4.1ubuntu1.4
Packages in group: 

coreutils (8.32-4.1ubuntu1.4) jammy-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds read in sort
    - debian/patches/CVE-2025-5278.patch: sort: fix buffer under-read in
      src/sort.c, tests/local.mk, tests/misc/sort-field-limit.sh,
      Makefile.in.
    - CVE-2025-5278

 -- Marc Deslauriers Tue, 25 Aug 2026 11:12:51 -0400
CVE-2025-5278 A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory ou

zfs-linux Aug 31st 15:07
Release: jammy Repo: main Level: security New version: 2.1.5-1ubuntu6~22.04.7
Packages in group:  libnvpair3linux libuutil3linux libzfs4linux libzfsbootenv1linux libzfslinux-dev libzpool5linux python3-pyzfs pyzfs-doc zfs-initramfs zfsutils-linux zfs-zed (... see all)

zfs-linux (2.1.5-1ubuntu6~22.04.7) jammy-security; urgency=medium

  * Fixes for unprivileged user access to pool operations (LP: #2164774)
    - debian/patches:
      - adding
        - ubuntu/0004-secpolicy_nfs-remove-not-used.patch
        - ubuntu/0005-secpolicy_zinject-only-permit-a-global-zone-credenti.patch
        - ubuntu/0006-secpolicy_sys_config-only-permit-a-global-zone-crede.patch
        - ubuntu/0007-secpolicy_zfs-add-a-note-about-the-power-of-CAP_SYS_.patch

 -- John Cabaj Fri, 21 Aug 2026 15:34:37 -0500
2164774 OpenZFS Linux open zpool manipulation and escapes via unprivileged userns

cpio Aug 31st 15:07
Release: jammy Repo: main Level: security New version: 2.13+dfsg-7ubuntu0.2
Packages in group: 

cpio (2.13+dfsg-7ubuntu0.2) jammy-security; urgency=medium

  * SECURITY UPDATE: Unbounded stack allocation
    - debian/patches/CVE-2026-66485.patch: Minor fixes in src/makepath.c,
      src/userspec.c.
    - CVE-2026-66485
  * SECURITY UPDATE: Hard link to file outside intended directory
    - debian/patches/CVE-2026-66484.patch: The --no-absolute-filenames option
      affects hard link targets too. in src/tar.c.
    - CVE-2026-66484
  * SECURITY UPDATE: Unescaped output
    - debian/patches/CVE-2026-66486.patch: Quote file names in error messages
      and in listings. in src/copyin.c, src/copyout.c, src/copypass.c,
      src/main.c, tests/CVE-2019-14866.at, tests/testsuite.
    - CVE-2026-66486

 -- Isabel Garcia Contreras Tue, 18 Aug 2026 16:46:57 -0400
CVE-2026-66485 GNU cpio is vulnerable to an uncontrolled memory allocation in the make_path function at src/makepath.c. The function uses alloca to allocate stack m
CVE-2026-66484 GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the
CVE-2026-66486 GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality. When listing archive members via cpio
CVE-2019-14866 In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives fro

openjdk-25-crac Aug 31st 14:07
Release: resolute Repo: universe Level: updates New version: 25.0.4+7-0ubuntu1~26.04
Packages in group:  openjdk-25-crac-dbg openjdk-25-crac-demo openjdk-25-crac-doc openjdk-25-crac-jdk openjdk-25-crac-jdk-headless openjdk-25-crac-jre openjdk-25-crac-jre-headless openjdk-25-crac-jre-zero openjdk-25-crac-source openjdk-25-crac-testsupport

openjdk-25-crac (25.0.4+7-0ubuntu1~26.04) resolute-security; urgency=medium

  * Upload to Ubuntu 26.04.

openjdk-21-crac Aug 31st 14:07
Release: resolute Repo: universe Level: updates New version: 21.0.12+8-0ubuntu1~26.04
Packages in group:  openjdk-21-crac-dbg openjdk-21-crac-demo openjdk-21-crac-doc openjdk-21-crac-jdk openjdk-21-crac-jdk-headless openjdk-21-crac-jre openjdk-21-crac-jre-headless openjdk-21-crac-jre-zero openjdk-21-crac-source openjdk-21-crac-testsupport

openjdk-21-crac (21.0.12+8-0ubuntu1~26.04) resolute-security; urgency=medium

  * Upload to Ubuntu 26.04.

openjdk-17-crac Aug 31st 14:07
Release: resolute Repo: universe Level: updates New version: 17.0.20+8-0ubuntu1~26.04
Packages in group:  openjdk-17-crac-dbg openjdk-17-crac-demo openjdk-17-crac-doc openjdk-17-crac-jdk openjdk-17-crac-jdk-headless openjdk-17-crac-jre openjdk-17-crac-jre-headless openjdk-17-crac-jre-zero openjdk-17-crac-source

openjdk-17-crac (17.0.20+8-0ubuntu1~26.04) resolute-security; urgency=medium

  * Upload to Ubuntu 26.04.

crac-criu Aug 31st 14:07
Release: resolute Repo: universe Level: updates New version: 4.2.1-0ubuntu1~26.04
Packages in group: 

crac-criu (4.2.1-0ubuntu1~26.04) resolute-security; urgency=medium

  * Upload to Ubuntu 26.04.

udisks2 Aug 31st 14:07
Release: resolute Repo: universe Level: security New version: 2.10.91-1ubuntu2.1
Packages in group:  udisks2-btrfs udisks2-lvm2

udisks2 (2.10.91-1ubuntu2.1) resolute-security; urgency=medium

  * SECURITY UPDATE: Privilege escalation via mount point injection
    - debian/patches/CVE-2026-7867-1.patch: udiskslinuxfilesystem: Separate real
      caller identity from as-user target in src/udiskslinuxfilesystem.c.
    - debian/patches/CVE-2026-7867-2.patch: udiskslinuxfilesystem: Rework fstab
      mount authorization for as-user in data/org.freedesktop.UDisks2.xml,
      src/udiskslinuxfilesystem.c.
    - debian/patches/CVE-2026-7867-3.patch: udiskslinuxfilesystem: Log real
      caller uid for as-user mounts in src/udiskslinuxfilesystem.c.
    - debian/patches/CVE-2026-7867-4.patch: udisksdaemonutil: Pass as-user
      target to polkit details in src/udisksdaemonutil.c.
    - debian/patches/CVE-2026-7867-5.patch: tests: Add security tests for as-
      user mount authorization in src/tests/dbus-tests/test_80_filesystem.py.
    - CVE-2026-7867

 -- Marc Deslauriers Mon, 17 Aug 2026 10:41:39 -0400
CVE-2026-7867 A flaw was found in udisks2. A local attacker with an active console session can exploit insufficient authorization checking on the 'as-user' option

util-linux Aug 31st 14:07
Release: resolute Repo: universe Level: security New version: 2.41.3-3ubuntu2.2
Packages in group:  bsdextrautils-dbgsym bsdutils-dbgsym eject-dbgsym fdisk-dbgsym lastlog2 lastlog2-dbgsym libblkid1-dbgsym libfdisk1-dbgsym liblastlog2-2-dbgsym libmount1-dbgsym libpam-lastlog2 (... see all)

util-linux (2.41.3-3ubuntu2.2) resolute-security; urgency=medium

  * SECURITY UPDATE: Heap use-after-free via crafted block device image
    - debian/patches/CVE-2026-13595.patch: libblkid: fix use-after-free in
      nested partition probing in libblkid/src/partitions/partitions.c.
    - CVE-2026-13595
  * SECURITY UPDATE: TOCTOU in mount utility
    - debian/patches/CVE-2026-27456.patch: loopdev: add LOOPDEV_FL_NOFOLLOW to
      prevent symlink attacks in include/loopdev.h, lib/loopdev.c,
      libmount/src/hook_loopdev.c.
    - CVE-2026-27456
  * SECURITY UPDATE: Improper hostname canonicalization in login
    - debian/patches/CVE-2026-3184.patch: login: use original FQDN for PAM_RHOST
      in login-utils/login.c.
    - CVE-2026-3184
  * SECURITY UPDATE: Local Privilege Escalation via TOCTOU in mount
    - debian/patches/CVE-2026-53612.patch: libmount: use fd-based fchownat/chmod
      in hook_owner in libmount/src/hook_owner.c.
    - CVE-2026-53612
  * SECURITY UPDATE: Another local Privilege Escalation via TOCTOU in mount
    - debian/patches/CVE-2026-53613-pre1.patch: lib/fileutils: add
      ul_open_no_symlinks() in configure.ac, include/fileutils.h,
      lib/fileutils.c, meson.build.
    - debian/patches/CVE-2026-53613.patch: libmount: add fd_target to context
      for TOCTOU prevention in libmount/src/context.c,
      libmount/src/context_mount.c, libmount/src/hook_mount.c,
      libmount/src/hook_mount_legacy.c, libmount/src/mountP.h.
    - CVE-2026-53613
  * SECURITY UPDATE: Local Privilege Escalation via LIBMOUNT_FORCE_MOUNT2
    Environment Variable
    - debian/patches/CVE-2026-53614.patch: libmount: fix SUID bypass via
      LIBMOUNT_FORCE_MOUNT2 and legacy mount path in libmount/src/hook_mount.c,
      libmount/src/hook_mount_legacy.c.
    - CVE-2026-53614
  * SECURITY UPDATE: Integer Overflow or Wraparound in dos.c
    - debian/patches/CVE-2026-53615.patch: libblkid: dos: validate EBR data and
      links within extended partition in libblkid/src/partitions/dos.c.
    - CVE-2026-53615
  * debian/patches/tests-fincore-force-the-use-of-GNU-dd-over-uutils.patch:
    fix ftbfs on arm64 and armhf.

 -- Marc Deslauriers Wed, 19 Aug 2026 10:23:36 -0400

 (See more...)
CVE-2026-13595 A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition probers
CVE-2026-27456 util-linux is a random collection of Linux utilities. Prior to version 2.41.4, a TOCTOU (Time-of-Check-Time-of-Use) vulnerability has been identified
CVE-2026-3184 A flaw was found in util-linux. Improper hostname canonicalization in the `login(1)` utility, when invoked with the `-h` option, can modify the suppl
CVE-2026-53612 Local Privilege Escalation via TOCTOU in mount(8) hook_owner.c chmod/chown
CVE-2026-53613 Local Privilege Escalation via TOCTOU in mount(8) - Target Path Redirection
More...

webkit2gtk Aug 31st 14:07
Release: resolute Repo: universe Level: security New version: 2.52.6-0ubuntu0.26.04.1
Packages in group:  libjavascriptcoregtk-bin webkitgtk-webdriver

webkit2gtk (2.52.6-0ubuntu0.26.04.1) resolute-security; urgency=medium

  * Update to 2.52.6 to fix security issues.
    - CVE-2026-28847, CVE-2026-28883, CVE-2026-28901, CVE-2026-28902,
      CVE-2026-28903, CVE-2026-28904, CVE-2026-28905, CVE-2026-28907,
      CVE-2026-28942, CVE-2026-28946, CVE-2026-28947, CVE-2026-28953,
      CVE-2026-28955, CVE-2026-28958, CVE-2026-28984, CVE-2026-39872,
      CVE-2026-43658, CVE-2026-43660, CVE-2026-43663, CVE-2026-43676,
      CVE-2026-43699, CVE-2026-43701, CVE-2026-43705, CVE-2026-43707,
      CVE-2026-43712, CVE-2026-43713, CVE-2026-43715, CVE-2026-43716,
      CVE-2026-43720, CVE-2026-43721, CVE-2026-43725, CVE-2026-43726,
      CVE-2026-43727, CVE-2026-43731, CVE-2026-43732, CVE-2026-43734,
      CVE-2026-43740, CVE-2026-43742, CVE-2026-43745, CVE-2026-43804,
      CVE-2026-64713, CVE-2026-64719, CVE-2026-64728, CVE-2026-64730,
      CVE-2026-64757, CVE-2026-64783, CVE-2026-64787
  * Remove patches included in new version:
    - debian/patches/fix-atomics-detection.patch
    - debian/patches/fix-big-endian-string.patch

 -- Marc Deslauriers Fri, 21 Aug 2026 13:04:27 -0400
CVE-2026-28847 The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, ma
CVE-2026-28883 A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5,
CVE-2026-28901 The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, vis
CVE-2026-28902 The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, vis
CVE-2026-28903 The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, ma
More...


About   -   Send Feedback to @ubuntu_updates