{ "summary": { "snap": { "added": [], "removed": [], "diff": [] }, "deb": { "added": [], "removed": [], "diff": [ "dracut-install", "fwupd", "initramfs-tools", "initramfs-tools-bin", "initramfs-tools-core", "libfwupd2", "libopeniscsiusr", "libxml2", "open-iscsi", "pollinate" ] } }, "diff": { "deb": [ { "name": "dracut-install", "from_version": { "source_package_name": "dracut", "source_package_version": "103-1ubuntu3", "version": "103-1ubuntu3" }, "to_version": { "source_package_name": "dracut", "source_package_version": "103-1ubuntu3.1", "version": "103-1ubuntu3.1" }, "cves": [], "launchpad_bugs_fixed": [ 2095518 ], "changes": [ { "cves": [], "log": [ "", " * Fix missing compressed blobs that match wildcard fwpath (LP: #2095518)", "" ], "package": "dracut", "version": "103-1ubuntu3.1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [ 2095518 ], "author": "You-Sheng Yang ", "date": "Thu, 13 Feb 2025 15:16:38 +0100" } ], "notes": null }, { "name": "fwupd", "from_version": { "source_package_name": "fwupd", "source_package_version": "1.9.27-0ubuntu1~24.10.1", "version": "1.9.27-0ubuntu1~24.10.1" }, "to_version": { "source_package_name": "fwupd", "source_package_version": "1.9.28-0ubuntu1~24.10.1", "version": "1.9.28-0ubuntu1~24.10.1" }, "cves": [], "launchpad_bugs_fixed": [ 2097728 ], "changes": [ { "cves": [], "log": [ "", " * New upstream version (1.9.28)", " - Fix updating dell dock PD F/W (LP: #2097728)", "" ], "package": "fwupd", "version": "1.9.28-0ubuntu1~24.10.1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [ 2097728 ], "author": "Mario Limonciello ", "date": "Mon, 10 Feb 2025 08:19:44 -0600" } ], "notes": null }, { "name": "initramfs-tools", "from_version": { "source_package_name": "initramfs-tools", "source_package_version": "0.142ubuntu34.1", "version": "0.142ubuntu34.1" }, "to_version": { "source_package_name": "initramfs-tools", "source_package_version": "0.142ubuntu34.2", "version": "0.142ubuntu34.2" }, "cves": [], "launchpad_bugs_fixed": [ 2091904 ], "changes": [ { "cves": [], "log": [ "", " * configure_networking: Configure IPv4 or IPv6 based on iBFT IP address", " (LP: #2091904)", " * test:", " - support setting a disk label in build_fs_ext2", " - test-common: move disc logic out of _run_qemu", " - move wait_for_server_startup to test-common", " - check for QEMU PID in wait_for_server_startup", " - Add qemu-net-iscsi autopkgtest for iBFT test cases", "" ], "package": "initramfs-tools", "version": "0.142ubuntu34.2", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [ 2091904 ], "author": "Benjamin Drung ", "date": "Fri, 07 Feb 2025 11:03:37 +0100" } ], "notes": null }, { "name": "initramfs-tools-bin", "from_version": { "source_package_name": "initramfs-tools", "source_package_version": "0.142ubuntu34.1", "version": "0.142ubuntu34.1" }, "to_version": { "source_package_name": "initramfs-tools", "source_package_version": "0.142ubuntu34.2", "version": "0.142ubuntu34.2" }, "cves": [], "launchpad_bugs_fixed": [ 2091904 ], "changes": [ { "cves": [], "log": [ "", " * configure_networking: Configure IPv4 or IPv6 based on iBFT IP address", " (LP: #2091904)", " * test:", " - support setting a disk label in build_fs_ext2", " - test-common: move disc logic out of _run_qemu", " - move wait_for_server_startup to test-common", " - check for QEMU PID in wait_for_server_startup", " - Add qemu-net-iscsi autopkgtest for iBFT test cases", "" ], "package": "initramfs-tools", "version": "0.142ubuntu34.2", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [ 2091904 ], "author": "Benjamin Drung ", "date": "Fri, 07 Feb 2025 11:03:37 +0100" } ], "notes": null }, { "name": "initramfs-tools-core", "from_version": { "source_package_name": "initramfs-tools", "source_package_version": "0.142ubuntu34.1", "version": "0.142ubuntu34.1" }, "to_version": { "source_package_name": "initramfs-tools", "source_package_version": "0.142ubuntu34.2", "version": "0.142ubuntu34.2" }, "cves": [], "launchpad_bugs_fixed": [ 2091904 ], "changes": [ { "cves": [], "log": [ "", " * configure_networking: Configure IPv4 or IPv6 based on iBFT IP address", " (LP: #2091904)", " * test:", " - support setting a disk label in build_fs_ext2", " - test-common: move disc logic out of _run_qemu", " - move wait_for_server_startup to test-common", " - check for QEMU PID in wait_for_server_startup", " - Add qemu-net-iscsi autopkgtest for iBFT test cases", "" ], "package": "initramfs-tools", "version": "0.142ubuntu34.2", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [ 2091904 ], "author": "Benjamin Drung ", "date": "Fri, 07 Feb 2025 11:03:37 +0100" } ], "notes": null }, { "name": "libfwupd2", "from_version": { "source_package_name": "fwupd", "source_package_version": "1.9.27-0ubuntu1~24.10.1", "version": "1.9.27-0ubuntu1~24.10.1" }, "to_version": { "source_package_name": "fwupd", "source_package_version": "1.9.28-0ubuntu1~24.10.1", "version": "1.9.28-0ubuntu1~24.10.1" }, "cves": [], "launchpad_bugs_fixed": [ 2097728 ], "changes": [ { "cves": [], "log": [ "", " * New upstream version (1.9.28)", " - Fix updating dell dock PD F/W (LP: #2097728)", "" ], "package": "fwupd", "version": "1.9.28-0ubuntu1~24.10.1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [ 2097728 ], "author": "Mario Limonciello ", "date": "Mon, 10 Feb 2025 08:19:44 -0600" } ], "notes": null }, { "name": "libopeniscsiusr", "from_version": { "source_package_name": "open-iscsi", "source_package_version": "2.1.10-1ubuntu1", "version": "2.1.10-1ubuntu1" }, "to_version": { "source_package_name": "open-iscsi", "source_package_version": "2.1.10-1ubuntu1.1", "version": "2.1.10-1ubuntu1.1" }, "cves": [], "launchpad_bugs_fixed": [ 2097808 ], "changes": [ { "cves": [], "log": [ "", " * IPv6 support for iBFT iSCSI boot (LP: #2097808)", " - d/p/lp2097808-IPv6-support-for-iBFT-iSCSI-boot-493.patch", "" ], "package": "open-iscsi", "version": "2.1.10-1ubuntu1.1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [ 2097808 ], "author": "Chengen Du ", "date": "Tue, 11 Feb 2025 03:28:23 +0000" } ], "notes": null }, { "name": "libxml2", "from_version": { "source_package_name": "libxml2", "source_package_version": "2.12.7+dfsg-3ubuntu0.1", "version": "2.12.7+dfsg-3ubuntu0.1" }, "to_version": { "source_package_name": "libxml2", "source_package_version": "2.12.7+dfsg-3ubuntu0.2", "version": "2.12.7+dfsg-3ubuntu0.2" }, "cves": [ { "cve": "CVE-2024-56171", "url": "https://ubuntu.com/security/CVE-2024-56171", "cve_description": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.", "cve_priority": "medium", "cve_public_date": "2025-02-18 22:15:00 UTC" }, { "cve": "CVE-2025-24928", "url": "https://ubuntu.com/security/CVE-2025-24928", "cve_description": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.", "cve_priority": "medium", "cve_public_date": "2025-02-18 23:15:00 UTC" }, { "cve": "CVE-2025-27113", "url": "https://ubuntu.com/security/CVE-2025-27113", "cve_description": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.", "cve_priority": "medium", "cve_public_date": "2025-02-18 23:15:00 UTC" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2024-56171", "url": "https://ubuntu.com/security/CVE-2024-56171", "cve_description": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.", "cve_priority": "medium", "cve_public_date": "2025-02-18 22:15:00 UTC" }, { "cve": "CVE-2025-24928", "url": "https://ubuntu.com/security/CVE-2025-24928", "cve_description": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.", "cve_priority": "medium", "cve_public_date": "2025-02-18 23:15:00 UTC" }, { "cve": "CVE-2025-27113", "url": "https://ubuntu.com/security/CVE-2025-27113", "cve_description": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.", "cve_priority": "medium", "cve_public_date": "2025-02-18 23:15:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: use-after-free", " - debian/patches/CVE-2024-56171.patch: Fix use-after-free after", " xmlSchemaItemListAdd.", " - CVE-2024-56171", " * SECURITY UPDATE: stack-based buffer overflow", " - debian/patches/CVE-2025-24928-pre1.patch: Check for NULL node->name", " in xmlSnprintfElements.", " - debian/patches/CVE-2025-24928.patch: Fix stack-buffer-overflow in", " xmlSnprintfElements.", " - CVE-2025-24928", " * SECURITY UPDATE: NULL pointer dereference", " - debian/patches/CVE-2025-27113.patch: Fix compilation of explicit", " child axis.", " - CVE-2025-27113", "" ], "package": "libxml2", "version": "2.12.7+dfsg-3ubuntu0.2", "urgency": "medium", "distributions": "oracular-security", "launchpad_bugs_fixed": [], "author": "Fabian Toepfer ", "date": "Thu, 20 Feb 2025 13:23:34 +0100" } ], "notes": null }, { "name": "open-iscsi", "from_version": { "source_package_name": "open-iscsi", "source_package_version": "2.1.10-1ubuntu1", "version": "2.1.10-1ubuntu1" }, "to_version": { "source_package_name": "open-iscsi", "source_package_version": "2.1.10-1ubuntu1.1", "version": "2.1.10-1ubuntu1.1" }, "cves": [], "launchpad_bugs_fixed": [ 2097808 ], "changes": [ { "cves": [], "log": [ "", " * IPv6 support for iBFT iSCSI boot (LP: #2097808)", " - d/p/lp2097808-IPv6-support-for-iBFT-iSCSI-boot-493.patch", "" ], "package": "open-iscsi", "version": "2.1.10-1ubuntu1.1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [ 2097808 ], "author": "Chengen Du ", "date": "Tue, 11 Feb 2025 03:28:23 +0000" } ], "notes": null }, { "name": "pollinate", "from_version": { "source_package_name": "pollinate", "source_package_version": "4.33-4ubuntu1", "version": "4.33-4ubuntu1" }, "to_version": { "source_package_name": "pollinate", "source_package_version": "4.33-4ubuntu1.1", "version": "4.33-4ubuntu1.1" }, "cves": [], "launchpad_bugs_fixed": [ 2097596 ], "changes": [ { "cves": [], "log": [ "", " * Relicensing check_pollen (LP: #2097596)", " - d/p/check-pollen-to-pollinate.patch: update to match latest upstream", " - d/copyright: drop AGPL stanza", "" ], "package": "pollinate", "version": "4.33-4ubuntu1.1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [ 2097596 ], "author": "Christian Ehrhardt ", "date": "Fri, 07 Feb 2025 09:14:31 +0100" } ], "notes": null } ], "snap": [] }, "added": { "deb": [], "snap": [] }, "removed": { "deb": [], "snap": [] }, "notes": "Changelog diff for Ubuntu 24.10 oracular image from release image serial 20250224 to 20250227", "from_series": "oracular", "to_series": "oracular", "from_serial": "20250224", "to_serial": "20250227", "from_manifest_filename": "release_manifest.previous", "to_manifest_filename": "manifest.current" }