UbuntuUpdates.org

Latest Changelogs for all releases

All releases Jammy Noble Plucky Resolute
Include all PPAs Exclude daily builds PPAs Exclude all PPAs
Include levels: securityupdatesproposedbackportsbase

Note: Only updates for "head" packages where the changelog is available are shown on this page (view all).

mysql-8.4 Aug 31st 13:07
Release: resolute Repo: universe Level: security New version: 8.4.11-0ubuntu0.26.04.1
Packages in group:  mysql-router mysql-source mysql-testsuite

mysql-8.4 (8.4.11-0ubuntu0.26.04.1) resolute-security; urgency=medium

  * SECURITY UPDATE: Update to 8.4.11 to fix security issues
    - CVE-2026-46936, CVE-2026-47012, CVE-2026-47023, CVE-2026-47052,
      CVE-2026-47064, CVE-2026-60145, CVE-2026-60163, CVE-2026-60177,
      CVE-2026-60178, CVE-2026-60182, CVE-2026-60183, CVE-2026-60184,
      CVE-2026-60185, CVE-2026-60186, CVE-2026-60187, CVE-2026-60188,
      CVE-2026-60189, CVE-2026-60190, CVE-2026-60191, CVE-2026-60315,
      CVE-2026-60316, CVE-2026-60331, CVE-2026-60332, CVE-2026-60585,
      CVE-2026-60747, CVE-2026-61081, CVE-2026-61094, CVE-2026-61096,
      CVE-2026-61109

 -- Marc Deslauriers Wed, 26 Aug 2026 08:40:36 -0400
CVE-2026-46936 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are MySQL Se
CVE-2026-47012 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are My
CVE-2026-47023 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are
CVE-2026-47052 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:
CVE-2026-47064 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are My
More...

zlib Aug 31st 13:07
Release: resolute Repo: universe Level: security New version: 1:1.3.dfsg+really1.3.1-1ubuntu3.1
Packages in group:  libminizip1t64 libminizip-dev minizip

zlib (1:1.3.dfsg+really1.3.1-1ubuntu3.1) resolute-security; urgency=medium

  * SECURITY UPDATE: resource consumption via infinite loop
    - debian/patches/CVE-2026-27171.patch: add negative length checks to
      crc32_combine64 and crc32_combine_gen64 functions in crc32.c
    - CVE-2026-27171
  * Thanks to Mark Adler for the upstream fix.

 -- Chrisa Oikonomou Tue, 25 Aug 2026 13:41:32 +0300
CVE-2026-27171 zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no te

freerdp3 Aug 31st 13:07
Release: resolute Repo: universe Level: security New version: 3.31.0+dfsg-0ubuntu0.26.04.1
Packages in group:  freerdp3-proxy freerdp3-proxy-modules freerdp3-sdl freerdp3-shadow-x11 freerdp3-wayland freerdp3-x11 freerdp-proxy freerdp-proxy-modules freerdp-sdl freerdp-shadow-x11 freerdp-wayland (... see all)

freerdp3 (3.31.0+dfsg-0ubuntu0.26.04.1) resolute-security; urgency=medium

  * SECURITY UPDATE: Updated to upstream 3.31.0 to fix multiple security
    issues (LP: #2165413)
    - debian/patches/lp2161573.patch: removed, included in new version.
    - debian/*.symbols: added new 3.31.0 symbols.
    - CVE numbers pending

 -- Marc Deslauriers Thu, 27 Aug 2026 12:56:28 -0400
2165413 freerdp3 3.31.0 security update tracking bug

libssh Aug 31st 13:07
Release: resolute Repo: main Level: security New version: 0.11.3-1ubuntu2.1
Packages in group:  libssh-4 libssh-dev libssh-doc

libssh (0.11.3-1ubuntu2.1) resolute-security; urgency=medium

  * SECURITY UPDATE: Stack buffer overflow in SFTP server longname construction
    - debian/patches/CVE-2026-15370-1.patch: sftpserver: Avoid stack buffer
      overrun while processing long filenames in src/sftpserver.c.
    - debian/patches/CVE-2026-15370-2.patch: tests: verify the SFTP longname is
      in expected format in tests/server/torture_sftpserver.c.
    - CVE-2026-15370
  * SECURITY UPDATE: Denial of service via zero advertised channel packet size
    - debian/patches/CVE-2026-59843-1.patch: channels: Fail when receiving max
      packet size 0 in src/channels.c, src/messages.c.
    - debian/patches/CVE-2026-59843-2.patch: tests: Verify zero max packet size
      in channel open is rejected in tests/unittests/torture_channel.c.
    - CVE-2026-59843
  * SECURITY UPDATE: Denial of service via oversized SFTP read length
    - debian/patches/CVE-2026-59844.patch: sftpserver: cap accepted values of
      len in SSH_FXP_READ in src/sftpserver.c.
    - CVE-2026-59844
  * SECURITY UPDATE: Denial of service via unchecked ProxyCommand fork() failure
    - debian/patches/CVE-2026-59845.patch: socket: Properly check fork() return
      code in src/socket.c.
    - CVE-2026-59845
  * SECURITY UPDATE: Information disclosure via ProxyCommand %r username
    expansion
    - debian/patches/CVE-2026-59846.patch: Block shell metacharacters from
      usernames in include/libssh/priv.h, src/misc.c.
    - CVE-2026-59846
  * SECURITY UPDATE: Integrity downgrade via OpenSSL AES-GCM tag verification
    - debian/patches/CVE-2026-59847-1.patch: libcrypto: Fix tag verification of
      AES-GCM ciphers in src/libcrypto.c.
    - debian/patches/CVE-2026-59847-2.patch: libcrypto: Fix symmetric issue
      during encryption in src/libcrypto.c.
    - CVE-2026-59847
  * SECURITY UPDATE: Denial of service via SFTP responses with unknown request
    IDs
    - debian/patches/CVE-2026-59848-1.patch: sftp: handle responses with unknown
      request IDs in include/libssh/sftp.h, include/libssh/sftp_priv.h,
      src/sftp.c, src/sftp_aio.c, src/sftp_common.c,
      tests/client/torture_sftp_request_id.c, tests/client/CMakeLists.txt.
    - debian/patches/CVE-2026-59848-2.patch: sftp: Initialize sftp_request_queue
      ptr in sftp_free in src/sftp.c.
    - CVE-2026-59848
  * SECURITY UPDATE: Denial of service via automatic certificate authentication
    loop
    - debian/patches/CVE-2026-59849-1.patch: auth: Move certificate iterator on
      failure to prevent infinite loop in src/auth.c.
    - debian/patches/CVE-2026-59849-2.patch: auth: Fix state machine to aovid
      infinite loop in src/auth.c.
    - debian/patches/CVE-2026-59849-3.patch: tests: Reproducer for infinite
      loops with non-default configurations in tests/client/torture_auth_cert.c.
    - CVE-2026-59849
  * SECURITY UPDATE: Use-after-free via data callbacks on closed channels
    - debian/patches/CVE-2026-59850-1.patch: channels: Avoid proce

 (See more...)
CVE-2026-15370 A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack
CVE-2026-59843 A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel write
CVE-2026-59844 A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with an arbitrarily large length, causing a libssh SFTP ser
CVE-2026-59845 A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then b
CVE-2026-59846 A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment v
More...

mysql-8.4 Aug 31st 13:07
Release: resolute Repo: main Level: security New version: 8.4.11-0ubuntu0.26.04.1
Packages in group:  libmysqlclient24 libmysqlclient-dev mysql-client mysql-client-core mysql-server mysql-server-core

mysql-8.4 (8.4.11-0ubuntu0.26.04.1) resolute-security; urgency=medium

  * SECURITY UPDATE: Update to 8.4.11 to fix security issues
    - CVE-2026-46936, CVE-2026-47012, CVE-2026-47023, CVE-2026-47052,
      CVE-2026-47064, CVE-2026-60145, CVE-2026-60163, CVE-2026-60177,
      CVE-2026-60178, CVE-2026-60182, CVE-2026-60183, CVE-2026-60184,
      CVE-2026-60185, CVE-2026-60186, CVE-2026-60187, CVE-2026-60188,
      CVE-2026-60189, CVE-2026-60190, CVE-2026-60191, CVE-2026-60315,
      CVE-2026-60316, CVE-2026-60331, CVE-2026-60332, CVE-2026-60585,
      CVE-2026-60747, CVE-2026-61081, CVE-2026-61094, CVE-2026-61096,
      CVE-2026-61109

 -- Marc Deslauriers Wed, 26 Aug 2026 08:40:36 -0400
CVE-2026-46936 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are MySQL Se
CVE-2026-47012 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are My
CVE-2026-47023 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are
CVE-2026-47052 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:
CVE-2026-47064 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are My
More...

zlib Aug 31st 13:07
Release: resolute Repo: main Level: security New version: 1:1.3.dfsg+really1.3.1-1ubuntu3.1
Packages in group:  lib32z1 lib32z1-dev libx32z1 libx32z1-dev zlib1g zlib1g-dev

zlib (1:1.3.dfsg+really1.3.1-1ubuntu3.1) resolute-security; urgency=medium

  * SECURITY UPDATE: resource consumption via infinite loop
    - debian/patches/CVE-2026-27171.patch: add negative length checks to
      crc32_combine64 and crc32_combine_gen64 functions in crc32.c
    - CVE-2026-27171
  * Thanks to Mark Adler for the upstream fix.

 -- Chrisa Oikonomou Tue, 25 Aug 2026 13:41:32 +0300
CVE-2026-27171 zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no te

coreutils Aug 31st 13:07
Release: resolute Repo: main Level: security New version: 9.7-3ubuntu2.1
Packages in group:  gnu-coreutils

coreutils (9.7-3ubuntu2.1) resolute-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds read in sort
    - debian/patches/CVE-2025-5278.patch: sort: fix buffer under-read in
      src/sort.c, tests/local.mk, tests/sort/sort-field-limit.sh,
      Makefile.in.
    - CVE-2025-5278
  * SECURITY UPDATE: out���of���bounds read in uniq
    - debian/patches/CVE-2026-56391.patch: uniq: fix read overrun with -w in
      src/uniq.c, tests/uniq/uniq.pl.
    - CVE-2026-56391

 -- Marc Deslauriers Tue, 25 Aug 2026 11:07:27 -0400
CVE-2025-5278 A flaw was found in GNU Coreutils. The sort utility's begfield() function is vulnerable to a heap buffer under-read. The program may access memory ou
CVE-2026-56391 GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. Th

freerdp3 Aug 31st 13:07
Release: resolute Repo: main Level: security New version: 3.31.0+dfsg-0ubuntu0.26.04.1
Packages in group:  freerdp3-dev libfreerdp3-3 libfreerdp-client3-3 libfreerdp-server3-3 libfreerdp-server-proxy3-3 libfreerdp-shadow3-3 libfreerdp-shadow-subsystem3-3 libwinpr3-3 libwinpr3-dev libwinpr-tools3-3 winpr-utils (... see all)

freerdp3 (3.31.0+dfsg-0ubuntu0.26.04.1) resolute-security; urgency=medium

  * SECURITY UPDATE: Updated to upstream 3.31.0 to fix multiple security
    issues (LP: #2165413)
    - debian/patches/lp2161573.patch: removed, included in new version.
    - debian/*.symbols: added new 3.31.0 symbols.
    - CVE numbers pending

 -- Marc Deslauriers Thu, 27 Aug 2026 12:56:28 -0400
2165413 freerdp3 3.31.0 security update tracking bug

mysql-8.0 Aug 31st 13:07
Release: noble Repo: universe Level: security New version: 8.0.46-0ubuntu0.24.04.4
Packages in group:  mysql-router mysql-source-8.0 mysql-testsuite mysql-testsuite-8.0

mysql-8.0 (8.0.46-0ubuntu0.24.04.4) noble-security; urgency=medium

  * SECURITY UPDATE: July 2026 security issues
    - debian/patches/2026-07-security.patch
    - CVE-2026-46936, CVE-2026-47012, CVE-2026-47023, CVE-2026-47052,
      CVE-2026-47064, CVE-2026-60145, CVE-2026-60163, CVE-2026-60177,
      CVE-2026-60178, CVE-2026-60182, CVE-2026-60183, CVE-2026-60184,
      CVE-2026-60185, CVE-2026-60186, CVE-2026-60187, CVE-2026-60188,
      CVE-2026-60189, CVE-2026-60190, CVE-2026-60191, CVE-2026-60315,
      CVE-2026-60316, CVE-2026-60331, CVE-2026-60332, CVE-2026-60585,
      CVE-2026-60747, CVE-2026-61081, CVE-2026-61094, CVE-2026-61096,
      CVE-2026-61109

 -- Marc Deslauriers Wed, 26 Aug 2026 08:41:48 -0400
CVE-2026-46936 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are MySQL Se
CVE-2026-47012 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are My
CVE-2026-47023 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are
CVE-2026-47052 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:
CVE-2026-47064 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are My
More...

zlib Aug 31st 13:07
Release: noble Repo: universe Level: security New version: 1:1.3.dfsg-3.1ubuntu2.2
Packages in group:  libminizip1t64 libminizip-dev minizip

zlib (1:1.3.dfsg-3.1ubuntu2.2) noble-security; urgency=medium

  * SECURITY UPDATE: resource consumption via infinite loop
    - debian/patches/CVE-2026-27171.patch: add negative length checks to
      crc32_combine64 and crc32_combine_gen64 functions in crc32.c
    - CVE-2026-27171

 -- Chrisa Oikonomou Tue, 25 Aug 2026 13:41:30 +0300
CVE-2026-27171 zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no te

freerdp3 Aug 31st 13:07
Release: noble Repo: universe Level: security New version: 3.31.0+dfsg-0ubuntu0.24.04.1
Packages in group:  freerdp3-dev freerdp3-shadow-x11 freerdp3-wayland freerdp3-x11 libfreerdp-shadow3-3 libfreerdp-shadow-subsystem3-3 winpr3-utils

freerdp3 (3.31.0+dfsg-0ubuntu0.24.04.1) noble-security; urgency=medium

  * SECURITY UPDATE: Updated to upstream 3.31.0 to fix multiple security
    issues (LP: #2165413)
    - debian/patches/lp2161573.patch: removed, included in new version.
    - debian/*.symbols: added new 3.31.0 symbols.
    - CVE numbers pending

 -- Marc Deslauriers Thu, 27 Aug 2026 12:56:28 -0400
2165413 freerdp3 3.31.0 security update tracking bug

libssh Aug 31st 13:07
Release: noble Repo: main Level: security New version: 0.10.6-2ubuntu0.5
Packages in group:  libssh-4 libssh-dev libssh-doc libssh-gcrypt-4 libssh-gcrypt-dev

libssh (0.10.6-2ubuntu0.5) noble-security; urgency=medium

  * SECURITY UPDATE: Denial of service via zero advertised channel packet size
    - debian/patches/CVE-2026-59843-1.patch: channels: Fail when receiving max
      packet size 0 in src/channels.c, src/messages.c.
    - debian/patches/CVE-2026-59843-2.patch: tests: Verify zero max packet size
      in channel open is rejected in tests/unittests/torture_channel.c.
    - CVE-2026-59843
  * SECURITY UPDATE: Denial of service via unchecked ProxyCommand fork() failure
    - debian/patches/CVE-2026-59845.patch: socket: Properly check fork() return
      code in src/socket.c.
    - CVE-2026-59845
  * SECURITY UPDATE: Information disclosure via ProxyCommand %r username
    expansion
    - debian/patches/CVE-2026-59846-pre1.patch: misc: Add function to check
      username syntax in include/libssh/misc.h, src/misc.c,
      tests/unittests/torture_misc.c.
    - debian/patches/CVE-2026-59846.patch: Block shell metacharacters from
      usernames in include/libssh/priv.h, src/misc.c.
    - CVE-2026-59846
  * SECURITY UPDATE: Integrity downgrade via OpenSSL AES-GCM tag verification
    - debian/patches/CVE-2026-59847-1.patch: libcrypto: Fix tag verification of
      AES-GCM ciphers in src/libcrypto.c.
    - debian/patches/CVE-2026-59847-2.patch: libcrypto: Fix symmetric issue
      during encryption in src/libcrypto.c.
    - CVE-2026-59847
  * SECURITY UPDATE: Denial of service via SFTP responses with unknown request
    IDs
    - debian/patches/CVE-2026-59848-1.patch: sftp: handle responses with unknown
      request IDs in include/libssh/sftp.h, src/sftp.c,
      tests/client/torture_sftp_request_id.c, tests/client/CMakeLists.txt.
    - debian/patches/CVE-2026-59848-2.patch: sftp: Initialize sftp_request_queue
      ptr in sftp_free in src/sftp.c.
    - CVE-2026-59848
  * SECURITY UPDATE: Use-after-free via data callbacks on closed channels
    - debian/patches/CVE-2026-59850.patch: channels: Avoid processing DATA
      packets on closed channels in src/channels.c.
    - CVE-2026-59850

 -- Marc Deslauriers Mon, 24 Aug 2026 10:59:34 -0400
CVE-2026-59843 A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in SSH_MSG_CHANNEL_OPEN, causing later channel write
CVE-2026-59845 A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then b
CVE-2026-59846 A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can inject shell metacharacters, exposing environment v
CVE-2026-59847 A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, al
CVE-2026-59848 A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing
More...

mysql-8.0 Aug 31st 13:07
Release: noble Repo: main Level: security New version: 8.0.46-0ubuntu0.24.04.4
Packages in group:  libmysqlclient21 libmysqlclient-dev mysql-client mysql-client-8.0 mysql-client-core-8.0 mysql-server mysql-server-8.0 mysql-server-core-8.0

mysql-8.0 (8.0.46-0ubuntu0.24.04.4) noble-security; urgency=medium

  * SECURITY UPDATE: July 2026 security issues
    - debian/patches/2026-07-security.patch
    - CVE-2026-46936, CVE-2026-47012, CVE-2026-47023, CVE-2026-47052,
      CVE-2026-47064, CVE-2026-60145, CVE-2026-60163, CVE-2026-60177,
      CVE-2026-60178, CVE-2026-60182, CVE-2026-60183, CVE-2026-60184,
      CVE-2026-60185, CVE-2026-60186, CVE-2026-60187, CVE-2026-60188,
      CVE-2026-60189, CVE-2026-60190, CVE-2026-60191, CVE-2026-60315,
      CVE-2026-60316, CVE-2026-60331, CVE-2026-60332, CVE-2026-60585,
      CVE-2026-60747, CVE-2026-61081, CVE-2026-61094, CVE-2026-61096,
      CVE-2026-61109

 -- Marc Deslauriers Wed, 26 Aug 2026 08:41:48 -0400
CVE-2026-46936 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are MySQL Se
CVE-2026-47012 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are My
CVE-2026-47023 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are
CVE-2026-47052 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server:
CVE-2026-47064 Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are My
More...

freerdp3 Aug 31st 13:07
Release: noble Repo: main Level: security New version: 3.31.0+dfsg-0ubuntu0.24.04.1
Packages in group:  libfreerdp3-3 libfreerdp-client3-3 libfreerdp-server3-3 libwinpr3-3 libwinpr3-dev libwinpr-tools3-3

freerdp3 (3.31.0+dfsg-0ubuntu0.24.04.1) noble-security; urgency=medium

  * SECURITY UPDATE: Updated to upstream 3.31.0 to fix multiple security
    issues (LP: #2165413)
    - debian/patches/lp2161573.patch: removed, included in new version.
    - debian/*.symbols: added new 3.31.0 symbols.
    - CVE numbers pending

 -- Marc Deslauriers Thu, 27 Aug 2026 12:56:28 -0400
2165413 freerdp3 3.31.0 security update tracking bug

zlib Aug 31st 13:07
Release: noble Repo: main Level: security New version: 1:1.3.dfsg-3.1ubuntu2.2
Packages in group:  lib32z1 lib32z1-dev libx32z1 libx32z1-dev zlib1g zlib1g-dev

zlib (1:1.3.dfsg-3.1ubuntu2.2) noble-security; urgency=medium

  * SECURITY UPDATE: resource consumption via infinite loop
    - debian/patches/CVE-2026-27171.patch: add negative length checks to
      crc32_combine64 and crc32_combine_gen64 functions in crc32.c
    - CVE-2026-27171

 -- Chrisa Oikonomou Tue, 25 Aug 2026 13:41:30 +0300
CVE-2026-27171 zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no te


About   -   Send Feedback to @ubuntu_updates