{ "summary": { "snap": { "added": [], "removed": [], "diff": [] }, "deb": { "added": [ "linux-image-6.8.0-47-generic", "linux-modules-6.8.0-47-generic" ], "removed": [ "linux-image-6.8.0-45-generic", "linux-modules-6.8.0-45-generic" ], "diff": [ "amd64-microcode", "gcc-14-base", "libgcc-s1", "libproc2-0", "libstdc++6", "linux-image-virtual", "login", "passwd", "procps", "python3-update-manager", "snapd" ] } }, "diff": { "deb": [ { "name": "amd64-microcode", "from_version": { "source_package_name": "amd64-microcode", "source_package_version": "3.20231019.1ubuntu2", "version": "3.20231019.1ubuntu2" }, "to_version": { "source_package_name": "amd64-microcode", "source_package_version": "3.20231019.1ubuntu2.1", "version": "3.20231019.1ubuntu2.1" }, "cves": [ { "cve": "CVE-2023-31315", "url": "https://ubuntu.com/security/CVE-2023-31315", "cve_description": "Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.", "cve_priority": "medium", "cve_public_date": "2024-08-12 13:38:00 UTC" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2023-31315", "url": "https://ubuntu.com/security/CVE-2023-31315", "cve_description": "Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.", "cve_priority": "medium", "cve_public_date": "2024-08-12 13:38:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: arbitrary code execution via improper MSR access", " - amd-ucode/microcode_amd_fam{17,19}h.bin{,.asc}: add updated AMD", " fam17h and fam19h CPU microcodes", " - Updated microcodes:", " Family=0x17 Model=0x01 Stepping=0x02: Patch=0x0800126f Length=3200 bytes", " Family=0x17 Model=0x31 Stepping=0x00: Patch=0x0830107c Length=3200 bytes", " Family=0x19 Model=0x01 Stepping=0x00: Patch=0x0a00107a Length=5568 bytes", " Family=0x19 Model=0x01 Stepping=0x01: Patch=0x0a0011d5 Length=5568 bytes", " Family=0x19 Model=0x01 Stepping=0x02: Patch=0x0a001238 Length=5568 bytes", " Family=0x19 Model=0x11 Stepping=0x01: Patch=0x0a101148 Length=5568 bytes", " Family=0x19 Model=0x11 Stepping=0x02: Patch=0x0a101248 Length=5568 bytes", " Family=0x19 Model=0xa0 Stepping=0x02: Patch=0x0aa00215 Length=5568 bytes", " - CVE-2023-31315", "" ], "package": "amd64-microcode", "version": "3.20231019.1ubuntu2.1", "urgency": "medium", "distributions": "noble-security", "launchpad_bugs_fixed": [], "author": "Alex Murray ", "date": "Wed, 16 Oct 2024 15:45:37 +1030" } ], "notes": null }, { "name": "gcc-14-base", "from_version": { "source_package_name": "gcc-14", "source_package_version": "14-20240412-0ubuntu1", "version": "14-20240412-0ubuntu1" }, "to_version": { "source_package_name": "gcc-14", "source_package_version": "14.2.0-4ubuntu2~24.04", "version": "14.2.0-4ubuntu2~24.04" }, "cves": [], "launchpad_bugs_fixed": [ 2073390, 2075567, 2071605, 2052929, 2060619 ], "changes": [ { "cves": [], "log": [ "", " * SRU: LP: #2073390: Backport GCC 14.2 to Ubuntu 24.04 LTS.", "" ], "package": "gcc-14", "version": "14.2.0-4ubuntu2~24.04", "urgency": "medium", "distributions": "noble-proposed", "launchpad_bugs_fixed": [ 2073390 ], "author": "Matthias Klose ", "date": "Mon, 09 Sep 2024 15:21:53 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240908 from the gcc-14 branch.", " - Fix PR ipa/116410, PR tree-optimization/116501, PR c++/116219,", " PR target/112108 (AArch64), PR target/116512 (x86), PR c++/116567,", " PR c++/116606, PR fortran/116530, PR libstdc++/113663,", " PR libstdc++/116549, PR libstdc++/116381, PR lto/116361.", " * Build again gccrs on Ubuntu/i386.", "" ], "package": "gcc-14", "version": "14.2.0-4ubuntu2", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 08 Sep 2024 17:50:09 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.2.0-4ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 30 Aug 2024 12:23:25 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240829 from the gcc-14 branch.", " - Fix PR target/116390 (AVR), PR target/116407 (AVR),", " PR c++/116384 (closes: #1078786).", " * Disable running the tests on alpha and arm64, hanging on the buildds.", " * gcc/configure.ac enables some features based on the binutils version. The", " most recently checked binutils version is 2.36 for GCC 14. For now it is", " safe to derive the binutils runtime dependency from the binutils build", " dependency.", "" ], "package": "gcc-14", "version": "14.2.0-4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 30 Aug 2024 12:17:39 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.2.0-3ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 18 Aug 2024 19:13:32 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240817 from the gcc-14 branch.", " - Fix PR target/85624 (AVR), PR target/115464 (AArch64),", " PR target/116174 (x86), PR c++/116327, PR c++/104981, PR c++/115550.", " - s390: Fix high-level builtins vec_gfmsum{,_accum}_128. LP: #2075567.", " * Don't build gccrs on the Hurd.", " * Disable building gnat on hurd-amd64, until it gets bootstrapped.", " * Don't run dwz on hurd-*.", " * Update symbols files for libasan, libgccjit, libstdc++ and libgphobos.", " Closes: #1077492.", "" ], "package": "gcc-14", "version": "14.2.0-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2075567 ], "author": "Matthias Klose ", "date": "Sun, 18 Aug 2024 19:10:28 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.2.0-2ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 11 Aug 2024 04:00:40 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240811 from the gcc-14 branch.", " - Fix PR target/116287 (x86), PR target/116295 (AVR), PR target/113384 (PA),", " PR tree-optimization/116224, PR target/116189 (SH),", " PR target/116033 (RISCV), PR tree-optimization/116156,", " PR target/116043 (x86), PR target/115981 (x86), PR c++/116223,", " PR c++/112632, PR c++/116071, PR c++/88313, PR c++/115897,", " PR c++/115656, PR c++/115296, PR c++/112288, PR fortran/108889,", " PR target/116007, PR libstdc++/116038, PR libstdc++/115399,", " PR libstdc++/114387, PR libstdc++/115854, PR libstdc++/116070,", " PR libstdc++/116070.", " * Fix two lintian warnings for the control file.", " * Build-depend on pkgconf instead of pkg-config.", " * gnat: Use the GNATBIND/GNATMAKE passed from the toplevel makefile.", " Provide local unversioned symlinks gnatmake and gnatbind for the build.", " Closes: #1078144.", "" ], "package": "gcc-14", "version": "14.2.0-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 11 Aug 2024 03:56:24 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.2.0-1ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 02 Aug 2024 02:07:48 +0200" }, { "cves": [], "log": [ "", " * GCC 14.2.0 release.", "", " * Update to git 20240801 from the gcc-14 branch.", " - Fix PR target/115981 (x86).", " * Show bootstrap compilers in the build log.", " * Configure with --disable-multilib on loong64.", " * Use the versioned gnatbind and gnatmake binaries for the build.", " * Emit the config.log when the configure step fails.", " * Refresh patches.", "" ], "package": "gcc-14", "version": "14.2.0-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 01 Aug 2024 17:43:39 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.1.0-5ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 19 Jul 2024 12:16:59 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240719 from the gcc-14 branch.", " - Fix PR c++/115865, PR rtl-optimization/115049, PR target/115351 (x86),", " PR ipa/113787, PR tree-optimization/113673, PR target/115526 (alpha),", " PR middle-end/115887, PR middle-end/115527, PR tree-optimization/115382,", " PR tree-optimization/115868, PR tree-optimization/115841,", " PR tree-optimization/115843, PR tree-optimization/115701,", " PR tree-optimization/115701, PR tree-optimization/115867,", " PR tree-optimization/115843, PR target/115459 (alpha),", " PR target/115554 (RISCV), PR target/115562 (RISCV),", " PR target/113719 (x86), PR target/113719 (x86), PR target/115872,", " PR target/115752 (loongarch), PR target/115840 (RISCV),", " PR target/115611 (ARM), PR middle-end/115836, PR target/113715 (RISCV),", " PR analyzer/114899, PR c++/115476, PR c++/115165, PR c++/111890,", " PR c++/115897, PR c++/106760, PR c++/115754, PR c++/99242, PR c++/99241,", " PR fortran/93635, PR fortran/99798, PR fortran/103312,", " PR libstdc++/113376, PR libstdc++/115522.", " * On loong64, also build-depend on the gdc-14 frontend.", " * Build libitm1 on loong64 and riscv64.", " * Disable running the tests on x32, hanging on the buildds.", "" ], "package": "gcc-14", "version": "14.1.0-5", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 19 Jul 2024 12:09:39 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.1.0-4ubuntu2", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Wed, 10 Jul 2024 12:32:01 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240710 from the gcc-14 branch.", " - Fix PR target/115591 (RISCV), PR target/115188 (ARM),", " PR target/87376 (AVR), PR target/115475 (AArch64),", " PR target/115691 (PARISC), PR target/98762 (AVR), PR target/106069 (PPC),", " PR target/115355 (PPC), PR target/114936 (AArch64),", " PR target/88236 (AVR), PR target/115726 (AVR), PR pch/115312,", " PR c/114930, PR c/115502, PR c++/115623, PR fortran/114019,", " PR fortran/55978, PR fortran/115390, PR target/114890 (AArch64),", " PR target/115153 (ARM), PR target/115763 (RISCV),", " PR tree-optimization/115723, PR tree-optimization/115694,", " PR tree-optimization/115669, PR tree-optimization/115646,", " PR fortran/84006, PR fortran/100027, PR fortran/98534, PR fortran/115700,", " PR libstdc++/115807, PR libstdc++/115585.", " * d/p/0009-Ada-select-64-bits-time-functions-from-GNU-libc-when.diff:", " Adjust for the new glibc behaviour of defining __USE_TIME_BITS64 also", " on native 64-bits platforms (Simon Chopin). Addresses: #1074577.", " LP: #2071605.", " * Pass --package-metadata on distros with supporting linkers (starting", " with Debian trixie and Ubuntu noble).", " The package metadata is constructed from the environment variables", " ELF_PACKAGE_METADATA.", " Setting NO_PKG_METADATA=1 disables the generation of the package metadata.", " * Build target libraries with -mbranch-protection=standard to enable PAC/BTI", " support on arm64 (Emanuele Rocca). Addresses: #1055711.", " * Build target libraries with -fno-omit-frame-pointer, when enabled in", " dpkg-buildflags.", " * Strip again the executables.", "" ], "package": "gcc-14", "version": "14.1.0-4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2071605 ], "author": "Matthias Klose ", "date": "Wed, 10 Jul 2024 12:12:12 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.1.0-3ubuntu2", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 30 Jun 2024 17:09:43 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240630 from the gcc-14 branch.", " - Fix PR tree-optimization/115278, PR target/114846 (PPC),", " PR tree-optimization/115508, PR driver/115440, PR target/115342 (AArch64),", " PR target/106069 (PPC), PR target/115355 (PPC), PR target/114846 (PPC),", " PR c++/115624, PR c/115587, PR c++/115504, PR c++/115198, PR c++/115358,", " PR libstdc++/115668, PR libstdc++/115575, PR libstdc++/115454.", " - Backport a fix for an ICE on riscv64. Closes: #1071140.", " * Fix typo for loong64 build dependencies.", " * Disable running the tests on the Ubuntu arm64 buildds (times out).", " * Starting with Ubuntu 24.10, stop building s390x multilibs.", " * Fix gccrs build dependencies on the Hurd. Closes: #1073830.", " * Drop the sys-auxv-header patch. Closes: #1071555.", "" ], "package": "gcc-14", "version": "14.1.0-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 30 Jun 2024 16:27:40 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.1.0-2ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 21 Jun 2024 11:39:52 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240619 from the gcc-14 branch.", " - Fix PR target/109549 (S390), PR target/115253 (ARM),", " PR rtl-optimization/115281, PR target/115353 (ARM),", " PR middle-end/115352, PR tree-optimization/115337, PR middle-end/108789,", " PR target/115324 (PPC), PR rtl-optimization/114902,", " PR rtl-optimization/115092, PR tree-optimization/115307,", " PR target/115297 (alpha), PR tree-optimization/115192,", " PR target/113719 (x86), PR tree-optimization/115149,", " PR tree-optimization/115197, PR tree-optimization/114921,", " PR target/115169 (loongarch), PR tree-optimization/115232,", " PR rtl-optimization/115038, PR tree-optimization/115152,", " PR sanitizer/115172, PR target/115069 (x86), PR tree-optimization/115154,", " PR tree-optimization/115143, PR tree-optimization/114998,", " PR middle-end/114931, PR middle-end/114931, PR ada/114708,", " PR ada/115270, PR c/115290, PR middle-end/114931, PR c/114493,", " PR target/111343 PR c++/115511, PR c++/99678, PR c++/115239,", " PR c++/115283, PR c++/115378, PR c++/115187, PR c++/114868,", " PR c++/105320, PR c++/114275, PR c++/114983, PR libstdc++/107800,", " PR c++/115139, PR c++/115114, PR c++/114994, PR fortran/83865,", " PR fortran/115150, PR fortran/86100, PR fortran/115039,", " PR fortran/114874, PR jit/115442, PR target/115360 (ARM),", " PR target/115065 (AVR), PR libstdc++/115308, PR libstdc++/115247,", " PR libstdc++/114958, PR libstdc++/115335, PR libstdc++/111641,", " PR libstdc++/109849, PR libstdc++/115269, PR libstdc++/114940,", " PR libstdc++/115099, PR libstdc++/115119, PR libstdc++/115015,", " PR libstdc++/115063, PR libstdc++/114891, PR libstdc++/114866.", " * Configure again with --enable-checking=release. Closes: #1072519.", " * On loong64, build-depend on GCC 14 frontends. Closes: #1072635.", " * Build gccrs on x32. Closes: #1072345, #1072327.", " * Don't build Ada on sparc (32bit). Closes: #1072328.", "" ], "package": "gcc-14", "version": "14.1.0-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Wed, 19 Jun 2024 09:44:29 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.1.0-1ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 14 May 2024 09:37:49 +0200" }, { "cves": [], "log": [ "", " * GCC 14.1.0 release.", " * Update to git 20240514 from the gcc-14 branch.", " - Fix PR target/114975 (AVR), PR tree-optimization/114965,", " PR middle-end/114907, PR sanitizer/114956, PR tree-optimization/114876,", " PR ipa/92606, PR c++/89224, PR c++/114856, PR c++/114889,", " PR target/69374, PR target/112959, PR target/114968 (x86),", " PR driver/114980, PR c++/114974, PR c++/114901, PR c++/114903,", " PR fortran/114827, PR target/114981 (AVR).", "", " [ Nicolas Boulenguez ]", " * Improve the ada-lib-info-source-date-epoch patch.", " * Ada: remove duplicate unused patches", " * ada-749574.diff: update and apply again.", " * Refresh the autogen part of ada-{armel-libatomic,link-lib}.diff.", " * Ada: fix a typo in patch for PR ada/114065 breaking the build on hurd.", "", " [ Matthias Klose ]", " * Refresh patches.", " * Update NEWS files.", " * gcc-14: Depend on cpp-14, lost with the -for-build/-for-host changes.", " * Run the tests again during the build.", " * Turn on again PGO and LTO builds.", "" ], "package": "gcc-14", "version": "14.1.0-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 14 May 2024 09:22:26 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14-20240429-1ubuntu1", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Mon, 29 Apr 2024 11:23:43 +0200" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk 20240429.", "", " * Apply proposed patch for PR libquadmath/114533 (Simon Chopin).", " Closes: #1064426. LP: #2052929.", " * Don't build the libstdc++-doc package when the nodoc profile is enabled.", " * Clean up some version restrictions on build-dependencies.", " * Don't set the _FILE_OFFSET_BITS and _TIME_BITS macros, if the", " _DISTRO_EVADE_TIME_BITS macro is defined.", " See https://sourceware.org/bugzilla/show_bug.cgi?id=31624.", " * Build-depend on amdgcn-tools-18, required for new gcn offload targets.", " * Package the new gfx1030, gfx1036, gfx1100 and gfx1103 offload targets.", " LP: #2060619.", " * rs now requires cargo to bootstrap. Disable building gccrs on architectures", " which don't have cargo.", " Disable gccrs cross compilers. Not working upstream, more constraints", " on rust macros.", " * Build gnat, gdc and gm2 on loong64. Closes: #1069708.", " * Integrate gnat patches from Nicolas:", " - Update the ada-lib-info-source-date-epoch patch.", " - Remove the pr114065-proposed patch.", " - Add patches (v7) from PR ada/114065. Addresses: #1067453.", "" ], "package": "gcc-14", "version": "14-20240429-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2052929, 2060619 ], "author": "Matthias Klose ", "date": "Mon, 29 Apr 2024 11:15:28 +0200" } ], "notes": null }, { "name": "libgcc-s1", "from_version": { "source_package_name": "gcc-14", "source_package_version": "14-20240412-0ubuntu1", "version": "14-20240412-0ubuntu1" }, "to_version": { "source_package_name": "gcc-14", "source_package_version": "14.2.0-4ubuntu2~24.04", "version": "14.2.0-4ubuntu2~24.04" }, "cves": [], "launchpad_bugs_fixed": [ 2073390, 2075567, 2071605, 2052929, 2060619 ], "changes": [ { "cves": [], "log": [ "", " * SRU: LP: #2073390: Backport GCC 14.2 to Ubuntu 24.04 LTS.", "" ], "package": "gcc-14", "version": "14.2.0-4ubuntu2~24.04", "urgency": "medium", "distributions": "noble-proposed", "launchpad_bugs_fixed": [ 2073390 ], "author": "Matthias Klose ", "date": "Mon, 09 Sep 2024 15:21:53 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240908 from the gcc-14 branch.", " - Fix PR ipa/116410, PR tree-optimization/116501, PR c++/116219,", " PR target/112108 (AArch64), PR target/116512 (x86), PR c++/116567,", " PR c++/116606, PR fortran/116530, PR libstdc++/113663,", " PR libstdc++/116549, PR libstdc++/116381, PR lto/116361.", " * Build again gccrs on Ubuntu/i386.", "" ], "package": "gcc-14", "version": "14.2.0-4ubuntu2", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 08 Sep 2024 17:50:09 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.2.0-4ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 30 Aug 2024 12:23:25 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240829 from the gcc-14 branch.", " - Fix PR target/116390 (AVR), PR target/116407 (AVR),", " PR c++/116384 (closes: #1078786).", " * Disable running the tests on alpha and arm64, hanging on the buildds.", " * gcc/configure.ac enables some features based on the binutils version. The", " most recently checked binutils version is 2.36 for GCC 14. For now it is", " safe to derive the binutils runtime dependency from the binutils build", " dependency.", "" ], "package": "gcc-14", "version": "14.2.0-4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 30 Aug 2024 12:17:39 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.2.0-3ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 18 Aug 2024 19:13:32 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240817 from the gcc-14 branch.", " - Fix PR target/85624 (AVR), PR target/115464 (AArch64),", " PR target/116174 (x86), PR c++/116327, PR c++/104981, PR c++/115550.", " - s390: Fix high-level builtins vec_gfmsum{,_accum}_128. LP: #2075567.", " * Don't build gccrs on the Hurd.", " * Disable building gnat on hurd-amd64, until it gets bootstrapped.", " * Don't run dwz on hurd-*.", " * Update symbols files for libasan, libgccjit, libstdc++ and libgphobos.", " Closes: #1077492.", "" ], "package": "gcc-14", "version": "14.2.0-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2075567 ], "author": "Matthias Klose ", "date": "Sun, 18 Aug 2024 19:10:28 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.2.0-2ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 11 Aug 2024 04:00:40 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240811 from the gcc-14 branch.", " - Fix PR target/116287 (x86), PR target/116295 (AVR), PR target/113384 (PA),", " PR tree-optimization/116224, PR target/116189 (SH),", " PR target/116033 (RISCV), PR tree-optimization/116156,", " PR target/116043 (x86), PR target/115981 (x86), PR c++/116223,", " PR c++/112632, PR c++/116071, PR c++/88313, PR c++/115897,", " PR c++/115656, PR c++/115296, PR c++/112288, PR fortran/108889,", " PR target/116007, PR libstdc++/116038, PR libstdc++/115399,", " PR libstdc++/114387, PR libstdc++/115854, PR libstdc++/116070,", " PR libstdc++/116070.", " * Fix two lintian warnings for the control file.", " * Build-depend on pkgconf instead of pkg-config.", " * gnat: Use the GNATBIND/GNATMAKE passed from the toplevel makefile.", " Provide local unversioned symlinks gnatmake and gnatbind for the build.", " Closes: #1078144.", "" ], "package": "gcc-14", "version": "14.2.0-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 11 Aug 2024 03:56:24 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.2.0-1ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 02 Aug 2024 02:07:48 +0200" }, { "cves": [], "log": [ "", " * GCC 14.2.0 release.", "", " * Update to git 20240801 from the gcc-14 branch.", " - Fix PR target/115981 (x86).", " * Show bootstrap compilers in the build log.", " * Configure with --disable-multilib on loong64.", " * Use the versioned gnatbind and gnatmake binaries for the build.", " * Emit the config.log when the configure step fails.", " * Refresh patches.", "" ], "package": "gcc-14", "version": "14.2.0-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 01 Aug 2024 17:43:39 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.1.0-5ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 19 Jul 2024 12:16:59 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240719 from the gcc-14 branch.", " - Fix PR c++/115865, PR rtl-optimization/115049, PR target/115351 (x86),", " PR ipa/113787, PR tree-optimization/113673, PR target/115526 (alpha),", " PR middle-end/115887, PR middle-end/115527, PR tree-optimization/115382,", " PR tree-optimization/115868, PR tree-optimization/115841,", " PR tree-optimization/115843, PR tree-optimization/115701,", " PR tree-optimization/115701, PR tree-optimization/115867,", " PR tree-optimization/115843, PR target/115459 (alpha),", " PR target/115554 (RISCV), PR target/115562 (RISCV),", " PR target/113719 (x86), PR target/113719 (x86), PR target/115872,", " PR target/115752 (loongarch), PR target/115840 (RISCV),", " PR target/115611 (ARM), PR middle-end/115836, PR target/113715 (RISCV),", " PR analyzer/114899, PR c++/115476, PR c++/115165, PR c++/111890,", " PR c++/115897, PR c++/106760, PR c++/115754, PR c++/99242, PR c++/99241,", " PR fortran/93635, PR fortran/99798, PR fortran/103312,", " PR libstdc++/113376, PR libstdc++/115522.", " * On loong64, also build-depend on the gdc-14 frontend.", " * Build libitm1 on loong64 and riscv64.", " * Disable running the tests on x32, hanging on the buildds.", "" ], "package": "gcc-14", "version": "14.1.0-5", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 19 Jul 2024 12:09:39 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.1.0-4ubuntu2", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Wed, 10 Jul 2024 12:32:01 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240710 from the gcc-14 branch.", " - Fix PR target/115591 (RISCV), PR target/115188 (ARM),", " PR target/87376 (AVR), PR target/115475 (AArch64),", " PR target/115691 (PARISC), PR target/98762 (AVR), PR target/106069 (PPC),", " PR target/115355 (PPC), PR target/114936 (AArch64),", " PR target/88236 (AVR), PR target/115726 (AVR), PR pch/115312,", " PR c/114930, PR c/115502, PR c++/115623, PR fortran/114019,", " PR fortran/55978, PR fortran/115390, PR target/114890 (AArch64),", " PR target/115153 (ARM), PR target/115763 (RISCV),", " PR tree-optimization/115723, PR tree-optimization/115694,", " PR tree-optimization/115669, PR tree-optimization/115646,", " PR fortran/84006, PR fortran/100027, PR fortran/98534, PR fortran/115700,", " PR libstdc++/115807, PR libstdc++/115585.", " * d/p/0009-Ada-select-64-bits-time-functions-from-GNU-libc-when.diff:", " Adjust for the new glibc behaviour of defining __USE_TIME_BITS64 also", " on native 64-bits platforms (Simon Chopin). Addresses: #1074577.", " LP: #2071605.", " * Pass --package-metadata on distros with supporting linkers (starting", " with Debian trixie and Ubuntu noble).", " The package metadata is constructed from the environment variables", " ELF_PACKAGE_METADATA.", " Setting NO_PKG_METADATA=1 disables the generation of the package metadata.", " * Build target libraries with -mbranch-protection=standard to enable PAC/BTI", " support on arm64 (Emanuele Rocca). Addresses: #1055711.", " * Build target libraries with -fno-omit-frame-pointer, when enabled in", " dpkg-buildflags.", " * Strip again the executables.", "" ], "package": "gcc-14", "version": "14.1.0-4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2071605 ], "author": "Matthias Klose ", "date": "Wed, 10 Jul 2024 12:12:12 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.1.0-3ubuntu2", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 30 Jun 2024 17:09:43 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240630 from the gcc-14 branch.", " - Fix PR tree-optimization/115278, PR target/114846 (PPC),", " PR tree-optimization/115508, PR driver/115440, PR target/115342 (AArch64),", " PR target/106069 (PPC), PR target/115355 (PPC), PR target/114846 (PPC),", " PR c++/115624, PR c/115587, PR c++/115504, PR c++/115198, PR c++/115358,", " PR libstdc++/115668, PR libstdc++/115575, PR libstdc++/115454.", " - Backport a fix for an ICE on riscv64. Closes: #1071140.", " * Fix typo for loong64 build dependencies.", " * Disable running the tests on the Ubuntu arm64 buildds (times out).", " * Starting with Ubuntu 24.10, stop building s390x multilibs.", " * Fix gccrs build dependencies on the Hurd. Closes: #1073830.", " * Drop the sys-auxv-header patch. Closes: #1071555.", "" ], "package": "gcc-14", "version": "14.1.0-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 30 Jun 2024 16:27:40 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.1.0-2ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 21 Jun 2024 11:39:52 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240619 from the gcc-14 branch.", " - Fix PR target/109549 (S390), PR target/115253 (ARM),", " PR rtl-optimization/115281, PR target/115353 (ARM),", " PR middle-end/115352, PR tree-optimization/115337, PR middle-end/108789,", " PR target/115324 (PPC), PR rtl-optimization/114902,", " PR rtl-optimization/115092, PR tree-optimization/115307,", " PR target/115297 (alpha), PR tree-optimization/115192,", " PR target/113719 (x86), PR tree-optimization/115149,", " PR tree-optimization/115197, PR tree-optimization/114921,", " PR target/115169 (loongarch), PR tree-optimization/115232,", " PR rtl-optimization/115038, PR tree-optimization/115152,", " PR sanitizer/115172, PR target/115069 (x86), PR tree-optimization/115154,", " PR tree-optimization/115143, PR tree-optimization/114998,", " PR middle-end/114931, PR middle-end/114931, PR ada/114708,", " PR ada/115270, PR c/115290, PR middle-end/114931, PR c/114493,", " PR target/111343 PR c++/115511, PR c++/99678, PR c++/115239,", " PR c++/115283, PR c++/115378, PR c++/115187, PR c++/114868,", " PR c++/105320, PR c++/114275, PR c++/114983, PR libstdc++/107800,", " PR c++/115139, PR c++/115114, PR c++/114994, PR fortran/83865,", " PR fortran/115150, PR fortran/86100, PR fortran/115039,", " PR fortran/114874, PR jit/115442, PR target/115360 (ARM),", " PR target/115065 (AVR), PR libstdc++/115308, PR libstdc++/115247,", " PR libstdc++/114958, PR libstdc++/115335, PR libstdc++/111641,", " PR libstdc++/109849, PR libstdc++/115269, PR libstdc++/114940,", " PR libstdc++/115099, PR libstdc++/115119, PR libstdc++/115015,", " PR libstdc++/115063, PR libstdc++/114891, PR libstdc++/114866.", " * Configure again with --enable-checking=release. Closes: #1072519.", " * On loong64, build-depend on GCC 14 frontends. Closes: #1072635.", " * Build gccrs on x32. Closes: #1072345, #1072327.", " * Don't build Ada on sparc (32bit). Closes: #1072328.", "" ], "package": "gcc-14", "version": "14.1.0-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Wed, 19 Jun 2024 09:44:29 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.1.0-1ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 14 May 2024 09:37:49 +0200" }, { "cves": [], "log": [ "", " * GCC 14.1.0 release.", " * Update to git 20240514 from the gcc-14 branch.", " - Fix PR target/114975 (AVR), PR tree-optimization/114965,", " PR middle-end/114907, PR sanitizer/114956, PR tree-optimization/114876,", " PR ipa/92606, PR c++/89224, PR c++/114856, PR c++/114889,", " PR target/69374, PR target/112959, PR target/114968 (x86),", " PR driver/114980, PR c++/114974, PR c++/114901, PR c++/114903,", " PR fortran/114827, PR target/114981 (AVR).", "", " [ Nicolas Boulenguez ]", " * Improve the ada-lib-info-source-date-epoch patch.", " * Ada: remove duplicate unused patches", " * ada-749574.diff: update and apply again.", " * Refresh the autogen part of ada-{armel-libatomic,link-lib}.diff.", " * Ada: fix a typo in patch for PR ada/114065 breaking the build on hurd.", "", " [ Matthias Klose ]", " * Refresh patches.", " * Update NEWS files.", " * gcc-14: Depend on cpp-14, lost with the -for-build/-for-host changes.", " * Run the tests again during the build.", " * Turn on again PGO and LTO builds.", "" ], "package": "gcc-14", "version": "14.1.0-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 14 May 2024 09:22:26 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14-20240429-1ubuntu1", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Mon, 29 Apr 2024 11:23:43 +0200" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk 20240429.", "", " * Apply proposed patch for PR libquadmath/114533 (Simon Chopin).", " Closes: #1064426. LP: #2052929.", " * Don't build the libstdc++-doc package when the nodoc profile is enabled.", " * Clean up some version restrictions on build-dependencies.", " * Don't set the _FILE_OFFSET_BITS and _TIME_BITS macros, if the", " _DISTRO_EVADE_TIME_BITS macro is defined.", " See https://sourceware.org/bugzilla/show_bug.cgi?id=31624.", " * Build-depend on amdgcn-tools-18, required for new gcn offload targets.", " * Package the new gfx1030, gfx1036, gfx1100 and gfx1103 offload targets.", " LP: #2060619.", " * rs now requires cargo to bootstrap. Disable building gccrs on architectures", " which don't have cargo.", " Disable gccrs cross compilers. Not working upstream, more constraints", " on rust macros.", " * Build gnat, gdc and gm2 on loong64. Closes: #1069708.", " * Integrate gnat patches from Nicolas:", " - Update the ada-lib-info-source-date-epoch patch.", " - Remove the pr114065-proposed patch.", " - Add patches (v7) from PR ada/114065. Addresses: #1067453.", "" ], "package": "gcc-14", "version": "14-20240429-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2052929, 2060619 ], "author": "Matthias Klose ", "date": "Mon, 29 Apr 2024 11:15:28 +0200" } ], "notes": null }, { "name": "libproc2-0", "from_version": { "source_package_name": "procps", "source_package_version": "2:4.0.4-4ubuntu3.1", "version": "2:4.0.4-4ubuntu3.1" }, "to_version": { "source_package_name": "procps", "source_package_version": "2:4.0.4-4ubuntu3.2", "version": "2:4.0.4-4ubuntu3.2" }, "cves": [], "launchpad_bugs_fixed": [ 2080518 ], "changes": [ { "cves": [], "log": [ "", " * ps: Don't crash when using short option (LP: #2080518)", "" ], "package": "procps", "version": "2:4.0.4-4ubuntu3.2", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2080518 ], "author": "Shengjing Zhu ", "date": "Thu, 26 Sep 2024 16:44:05 +0800" } ], "notes": null }, { "name": "libstdc++6", "from_version": { "source_package_name": "gcc-14", "source_package_version": "14-20240412-0ubuntu1", "version": "14-20240412-0ubuntu1" }, "to_version": { "source_package_name": "gcc-14", "source_package_version": "14.2.0-4ubuntu2~24.04", "version": "14.2.0-4ubuntu2~24.04" }, "cves": [], "launchpad_bugs_fixed": [ 2073390, 2075567, 2071605, 2052929, 2060619 ], "changes": [ { "cves": [], "log": [ "", " * SRU: LP: #2073390: Backport GCC 14.2 to Ubuntu 24.04 LTS.", "" ], "package": "gcc-14", "version": "14.2.0-4ubuntu2~24.04", "urgency": "medium", "distributions": "noble-proposed", "launchpad_bugs_fixed": [ 2073390 ], "author": "Matthias Klose ", "date": "Mon, 09 Sep 2024 15:21:53 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240908 from the gcc-14 branch.", " - Fix PR ipa/116410, PR tree-optimization/116501, PR c++/116219,", " PR target/112108 (AArch64), PR target/116512 (x86), PR c++/116567,", " PR c++/116606, PR fortran/116530, PR libstdc++/113663,", " PR libstdc++/116549, PR libstdc++/116381, PR lto/116361.", " * Build again gccrs on Ubuntu/i386.", "" ], "package": "gcc-14", "version": "14.2.0-4ubuntu2", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 08 Sep 2024 17:50:09 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.2.0-4ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 30 Aug 2024 12:23:25 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240829 from the gcc-14 branch.", " - Fix PR target/116390 (AVR), PR target/116407 (AVR),", " PR c++/116384 (closes: #1078786).", " * Disable running the tests on alpha and arm64, hanging on the buildds.", " * gcc/configure.ac enables some features based on the binutils version. The", " most recently checked binutils version is 2.36 for GCC 14. For now it is", " safe to derive the binutils runtime dependency from the binutils build", " dependency.", "" ], "package": "gcc-14", "version": "14.2.0-4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 30 Aug 2024 12:17:39 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.2.0-3ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 18 Aug 2024 19:13:32 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240817 from the gcc-14 branch.", " - Fix PR target/85624 (AVR), PR target/115464 (AArch64),", " PR target/116174 (x86), PR c++/116327, PR c++/104981, PR c++/115550.", " - s390: Fix high-level builtins vec_gfmsum{,_accum}_128. LP: #2075567.", " * Don't build gccrs on the Hurd.", " * Disable building gnat on hurd-amd64, until it gets bootstrapped.", " * Don't run dwz on hurd-*.", " * Update symbols files for libasan, libgccjit, libstdc++ and libgphobos.", " Closes: #1077492.", "" ], "package": "gcc-14", "version": "14.2.0-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2075567 ], "author": "Matthias Klose ", "date": "Sun, 18 Aug 2024 19:10:28 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.2.0-2ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 11 Aug 2024 04:00:40 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240811 from the gcc-14 branch.", " - Fix PR target/116287 (x86), PR target/116295 (AVR), PR target/113384 (PA),", " PR tree-optimization/116224, PR target/116189 (SH),", " PR target/116033 (RISCV), PR tree-optimization/116156,", " PR target/116043 (x86), PR target/115981 (x86), PR c++/116223,", " PR c++/112632, PR c++/116071, PR c++/88313, PR c++/115897,", " PR c++/115656, PR c++/115296, PR c++/112288, PR fortran/108889,", " PR target/116007, PR libstdc++/116038, PR libstdc++/115399,", " PR libstdc++/114387, PR libstdc++/115854, PR libstdc++/116070,", " PR libstdc++/116070.", " * Fix two lintian warnings for the control file.", " * Build-depend on pkgconf instead of pkg-config.", " * gnat: Use the GNATBIND/GNATMAKE passed from the toplevel makefile.", " Provide local unversioned symlinks gnatmake and gnatbind for the build.", " Closes: #1078144.", "" ], "package": "gcc-14", "version": "14.2.0-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 11 Aug 2024 03:56:24 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.2.0-1ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 02 Aug 2024 02:07:48 +0200" }, { "cves": [], "log": [ "", " * GCC 14.2.0 release.", "", " * Update to git 20240801 from the gcc-14 branch.", " - Fix PR target/115981 (x86).", " * Show bootstrap compilers in the build log.", " * Configure with --disable-multilib on loong64.", " * Use the versioned gnatbind and gnatmake binaries for the build.", " * Emit the config.log when the configure step fails.", " * Refresh patches.", "" ], "package": "gcc-14", "version": "14.2.0-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Thu, 01 Aug 2024 17:43:39 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.1.0-5ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 19 Jul 2024 12:16:59 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240719 from the gcc-14 branch.", " - Fix PR c++/115865, PR rtl-optimization/115049, PR target/115351 (x86),", " PR ipa/113787, PR tree-optimization/113673, PR target/115526 (alpha),", " PR middle-end/115887, PR middle-end/115527, PR tree-optimization/115382,", " PR tree-optimization/115868, PR tree-optimization/115841,", " PR tree-optimization/115843, PR tree-optimization/115701,", " PR tree-optimization/115701, PR tree-optimization/115867,", " PR tree-optimization/115843, PR target/115459 (alpha),", " PR target/115554 (RISCV), PR target/115562 (RISCV),", " PR target/113719 (x86), PR target/113719 (x86), PR target/115872,", " PR target/115752 (loongarch), PR target/115840 (RISCV),", " PR target/115611 (ARM), PR middle-end/115836, PR target/113715 (RISCV),", " PR analyzer/114899, PR c++/115476, PR c++/115165, PR c++/111890,", " PR c++/115897, PR c++/106760, PR c++/115754, PR c++/99242, PR c++/99241,", " PR fortran/93635, PR fortran/99798, PR fortran/103312,", " PR libstdc++/113376, PR libstdc++/115522.", " * On loong64, also build-depend on the gdc-14 frontend.", " * Build libitm1 on loong64 and riscv64.", " * Disable running the tests on x32, hanging on the buildds.", "" ], "package": "gcc-14", "version": "14.1.0-5", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 19 Jul 2024 12:09:39 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.1.0-4ubuntu2", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Wed, 10 Jul 2024 12:32:01 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240710 from the gcc-14 branch.", " - Fix PR target/115591 (RISCV), PR target/115188 (ARM),", " PR target/87376 (AVR), PR target/115475 (AArch64),", " PR target/115691 (PARISC), PR target/98762 (AVR), PR target/106069 (PPC),", " PR target/115355 (PPC), PR target/114936 (AArch64),", " PR target/88236 (AVR), PR target/115726 (AVR), PR pch/115312,", " PR c/114930, PR c/115502, PR c++/115623, PR fortran/114019,", " PR fortran/55978, PR fortran/115390, PR target/114890 (AArch64),", " PR target/115153 (ARM), PR target/115763 (RISCV),", " PR tree-optimization/115723, PR tree-optimization/115694,", " PR tree-optimization/115669, PR tree-optimization/115646,", " PR fortran/84006, PR fortran/100027, PR fortran/98534, PR fortran/115700,", " PR libstdc++/115807, PR libstdc++/115585.", " * d/p/0009-Ada-select-64-bits-time-functions-from-GNU-libc-when.diff:", " Adjust for the new glibc behaviour of defining __USE_TIME_BITS64 also", " on native 64-bits platforms (Simon Chopin). Addresses: #1074577.", " LP: #2071605.", " * Pass --package-metadata on distros with supporting linkers (starting", " with Debian trixie and Ubuntu noble).", " The package metadata is constructed from the environment variables", " ELF_PACKAGE_METADATA.", " Setting NO_PKG_METADATA=1 disables the generation of the package metadata.", " * Build target libraries with -mbranch-protection=standard to enable PAC/BTI", " support on arm64 (Emanuele Rocca). Addresses: #1055711.", " * Build target libraries with -fno-omit-frame-pointer, when enabled in", " dpkg-buildflags.", " * Strip again the executables.", "" ], "package": "gcc-14", "version": "14.1.0-4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2071605 ], "author": "Matthias Klose ", "date": "Wed, 10 Jul 2024 12:12:12 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.1.0-3ubuntu2", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 30 Jun 2024 17:09:43 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240630 from the gcc-14 branch.", " - Fix PR tree-optimization/115278, PR target/114846 (PPC),", " PR tree-optimization/115508, PR driver/115440, PR target/115342 (AArch64),", " PR target/106069 (PPC), PR target/115355 (PPC), PR target/114846 (PPC),", " PR c++/115624, PR c/115587, PR c++/115504, PR c++/115198, PR c++/115358,", " PR libstdc++/115668, PR libstdc++/115575, PR libstdc++/115454.", " - Backport a fix for an ICE on riscv64. Closes: #1071140.", " * Fix typo for loong64 build dependencies.", " * Disable running the tests on the Ubuntu arm64 buildds (times out).", " * Starting with Ubuntu 24.10, stop building s390x multilibs.", " * Fix gccrs build dependencies on the Hurd. Closes: #1073830.", " * Drop the sys-auxv-header patch. Closes: #1071555.", "" ], "package": "gcc-14", "version": "14.1.0-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 30 Jun 2024 16:27:40 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.1.0-2ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Fri, 21 Jun 2024 11:39:52 +0200" }, { "cves": [], "log": [ "", " * Update to git 20240619 from the gcc-14 branch.", " - Fix PR target/109549 (S390), PR target/115253 (ARM),", " PR rtl-optimization/115281, PR target/115353 (ARM),", " PR middle-end/115352, PR tree-optimization/115337, PR middle-end/108789,", " PR target/115324 (PPC), PR rtl-optimization/114902,", " PR rtl-optimization/115092, PR tree-optimization/115307,", " PR target/115297 (alpha), PR tree-optimization/115192,", " PR target/113719 (x86), PR tree-optimization/115149,", " PR tree-optimization/115197, PR tree-optimization/114921,", " PR target/115169 (loongarch), PR tree-optimization/115232,", " PR rtl-optimization/115038, PR tree-optimization/115152,", " PR sanitizer/115172, PR target/115069 (x86), PR tree-optimization/115154,", " PR tree-optimization/115143, PR tree-optimization/114998,", " PR middle-end/114931, PR middle-end/114931, PR ada/114708,", " PR ada/115270, PR c/115290, PR middle-end/114931, PR c/114493,", " PR target/111343 PR c++/115511, PR c++/99678, PR c++/115239,", " PR c++/115283, PR c++/115378, PR c++/115187, PR c++/114868,", " PR c++/105320, PR c++/114275, PR c++/114983, PR libstdc++/107800,", " PR c++/115139, PR c++/115114, PR c++/114994, PR fortran/83865,", " PR fortran/115150, PR fortran/86100, PR fortran/115039,", " PR fortran/114874, PR jit/115442, PR target/115360 (ARM),", " PR target/115065 (AVR), PR libstdc++/115308, PR libstdc++/115247,", " PR libstdc++/114958, PR libstdc++/115335, PR libstdc++/111641,", " PR libstdc++/109849, PR libstdc++/115269, PR libstdc++/114940,", " PR libstdc++/115099, PR libstdc++/115119, PR libstdc++/115015,", " PR libstdc++/115063, PR libstdc++/114891, PR libstdc++/114866.", " * Configure again with --enable-checking=release. Closes: #1072519.", " * On loong64, build-depend on GCC 14 frontends. Closes: #1072635.", " * Build gccrs on x32. Closes: #1072345, #1072327.", " * Don't build Ada on sparc (32bit). Closes: #1072328.", "" ], "package": "gcc-14", "version": "14.1.0-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Wed, 19 Jun 2024 09:44:29 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14.1.0-1ubuntu1", "urgency": "medium", "distributions": "oracular", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 14 May 2024 09:37:49 +0200" }, { "cves": [], "log": [ "", " * GCC 14.1.0 release.", " * Update to git 20240514 from the gcc-14 branch.", " - Fix PR target/114975 (AVR), PR tree-optimization/114965,", " PR middle-end/114907, PR sanitizer/114956, PR tree-optimization/114876,", " PR ipa/92606, PR c++/89224, PR c++/114856, PR c++/114889,", " PR target/69374, PR target/112959, PR target/114968 (x86),", " PR driver/114980, PR c++/114974, PR c++/114901, PR c++/114903,", " PR fortran/114827, PR target/114981 (AVR).", "", " [ Nicolas Boulenguez ]", " * Improve the ada-lib-info-source-date-epoch patch.", " * Ada: remove duplicate unused patches", " * ada-749574.diff: update and apply again.", " * Refresh the autogen part of ada-{armel-libatomic,link-lib}.diff.", " * Ada: fix a typo in patch for PR ada/114065 breaking the build on hurd.", "", " [ Matthias Klose ]", " * Refresh patches.", " * Update NEWS files.", " * gcc-14: Depend on cpp-14, lost with the -for-build/-for-host changes.", " * Run the tests again during the build.", " * Turn on again PGO and LTO builds.", "" ], "package": "gcc-14", "version": "14.1.0-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Tue, 14 May 2024 09:22:26 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian; remaining changes:", " - Build from upstream sources.", "" ], "package": "gcc-14", "version": "14-20240429-1ubuntu1", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Mon, 29 Apr 2024 11:23:43 +0200" }, { "cves": [], "log": [ "", " * Snapshot, taken from the trunk 20240429.", "", " * Apply proposed patch for PR libquadmath/114533 (Simon Chopin).", " Closes: #1064426. LP: #2052929.", " * Don't build the libstdc++-doc package when the nodoc profile is enabled.", " * Clean up some version restrictions on build-dependencies.", " * Don't set the _FILE_OFFSET_BITS and _TIME_BITS macros, if the", " _DISTRO_EVADE_TIME_BITS macro is defined.", " See https://sourceware.org/bugzilla/show_bug.cgi?id=31624.", " * Build-depend on amdgcn-tools-18, required for new gcn offload targets.", " * Package the new gfx1030, gfx1036, gfx1100 and gfx1103 offload targets.", " LP: #2060619.", " * rs now requires cargo to bootstrap. Disable building gccrs on architectures", " which don't have cargo.", " Disable gccrs cross compilers. Not working upstream, more constraints", " on rust macros.", " * Build gnat, gdc and gm2 on loong64. Closes: #1069708.", " * Integrate gnat patches from Nicolas:", " - Update the ada-lib-info-source-date-epoch patch.", " - Remove the pr114065-proposed patch.", " - Add patches (v7) from PR ada/114065. Addresses: #1067453.", "" ], "package": "gcc-14", "version": "14-20240429-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [ 2052929, 2060619 ], "author": "Matthias Klose ", "date": "Mon, 29 Apr 2024 11:15:28 +0200" } ], "notes": null }, { "name": "linux-image-virtual", "from_version": { "source_package_name": "linux-meta", "source_package_version": "6.8.0-45.45", "version": "6.8.0-45.45" }, "to_version": { "source_package_name": "linux-meta", "source_package_version": "6.8.0-47.47", "version": "6.8.0-47.47" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Main version: 6.8.0-47.47", "" ], "package": "linux-meta", "version": "6.8.0-47.47", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [], "author": "Manuel Diewald ", "date": "Fri, 27 Sep 2024 20:47:45 +0200" }, { "cves": [], "log": [ "", " * Main version: 6.8.0-46.46", "" ], "package": "linux-meta", "version": "6.8.0-46.46", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [], "author": "Stefan Bader ", "date": "Fri, 13 Sep 2024 15:21:50 +0200" } ], "notes": null }, { "name": "login", "from_version": { "source_package_name": "shadow", "source_package_version": "1:4.13+dfsg1-4ubuntu3", "version": "1:4.13+dfsg1-4ubuntu3" }, "to_version": { "source_package_name": "shadow", "source_package_version": "1:4.13+dfsg1-4ubuntu3.2", "version": "1:4.13+dfsg1-4ubuntu3.2" }, "cves": [], "launchpad_bugs_fixed": [ 2063200, 2063200 ], "changes": [ { "cves": [], "log": [ "", " * d/p/lp2063200/*: amend the patch to fix `useradd -D` breakage", " (LP: #2063200)", "" ], "package": "shadow", "version": "1:4.13+dfsg1-4ubuntu3.2", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2063200 ], "author": "Simon Chopin ", "date": "Thu, 30 May 2024 16:52:35 +0200" }, { "cves": [], "log": [ "", " * Add some cursory tests for the extrausers features", " * d/p/lp2063200: fix useradd group validation with extrausers (LP: #2063200)", "" ], "package": "shadow", "version": "1:4.13+dfsg1-4ubuntu3.1", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2063200 ], "author": "Simon Chopin ", "date": "Wed, 22 May 2024 17:06:23 +0200" } ], "notes": null }, { "name": "passwd", "from_version": { "source_package_name": "shadow", "source_package_version": "1:4.13+dfsg1-4ubuntu3", "version": "1:4.13+dfsg1-4ubuntu3" }, "to_version": { "source_package_name": "shadow", "source_package_version": "1:4.13+dfsg1-4ubuntu3.2", "version": "1:4.13+dfsg1-4ubuntu3.2" }, "cves": [], "launchpad_bugs_fixed": [ 2063200, 2063200 ], "changes": [ { "cves": [], "log": [ "", " * d/p/lp2063200/*: amend the patch to fix `useradd -D` breakage", " (LP: #2063200)", "" ], "package": "shadow", "version": "1:4.13+dfsg1-4ubuntu3.2", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2063200 ], "author": "Simon Chopin ", "date": "Thu, 30 May 2024 16:52:35 +0200" }, { "cves": [], "log": [ "", " * Add some cursory tests for the extrausers features", " * d/p/lp2063200: fix useradd group validation with extrausers (LP: #2063200)", "" ], "package": "shadow", "version": "1:4.13+dfsg1-4ubuntu3.1", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2063200 ], "author": "Simon Chopin ", "date": "Wed, 22 May 2024 17:06:23 +0200" } ], "notes": null }, { "name": "procps", "from_version": { "source_package_name": "procps", "source_package_version": "2:4.0.4-4ubuntu3.1", "version": "2:4.0.4-4ubuntu3.1" }, "to_version": { "source_package_name": "procps", "source_package_version": "2:4.0.4-4ubuntu3.2", "version": "2:4.0.4-4ubuntu3.2" }, "cves": [], "launchpad_bugs_fixed": [ 2080518 ], "changes": [ { "cves": [], "log": [ "", " * ps: Don't crash when using short option (LP: #2080518)", "" ], "package": "procps", "version": "2:4.0.4-4ubuntu3.2", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2080518 ], "author": "Shengjing Zhu ", "date": "Thu, 26 Sep 2024 16:44:05 +0800" } ], "notes": null }, { "name": "python3-update-manager", "from_version": { "source_package_name": "update-manager", "source_package_version": "1:24.04.8", "version": "1:24.04.8" }, "to_version": { "source_package_name": "update-manager", "source_package_version": "1:24.04.9", "version": "1:24.04.9" }, "cves": [], "launchpad_bugs_fixed": [ 2041831 ], "changes": [ { "cves": [], "log": [ "", " * Fix crash when packages get un-selected (LP: #2041831).", "" ], "package": "update-manager", "version": "1:24.04.9", "urgency": "high", "distributions": "noble", "launchpad_bugs_fixed": [ 2041831 ], "author": "Nathan Pratta Teodosio ", "date": "Thu, 26 Sep 2024 16:35:37 +0200" } ], "notes": null }, { "name": "snapd", "from_version": { "source_package_name": "snapd", "source_package_version": "2.63.1+24.04", "version": "2.63.1+24.04" }, "to_version": { "source_package_name": "snapd", "source_package_version": "2.65.3+24.04", "version": "2.65.3+24.04" }, "cves": [], "launchpad_bugs_fixed": [ 2077473, 2077473, 2077473, 2077473, 2072986 ], "changes": [ { "cves": [], "log": [ "", " * New upstream release, LP: #2077473", " - Fix missing aux info from store on snap setup", "" ], "package": "snapd", "version": "2.65.3+24.04", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2077473 ], "author": "Ernest Lotter ", "date": "Thu, 12 Sep 2024 09:40:17 +0200" }, { "cves": [], "log": [ "", " * New upstream release, LP: #2077473", " - Bump squashfuse from version 0.5.0 to 0.5.2 (used in snapd deb", " only)", "" ], "package": "snapd", "version": "2.65.2", "urgency": "medium", "distributions": "xenial", "launchpad_bugs_fixed": [ 2077473 ], "author": "Ernest Lotter ", "date": "Fri, 06 Sep 2024 17:08:45 +0200" }, { "cves": [], "log": [ "", " * New upstream release, LP: #2077473", " - Support building snapd using base Core22 (Snapcraft 8.x)", " - FIPS: support building FIPS complaint snapd variant that switches", " to FIPS mode when the system boots with FIPS enabled", " - AppArmor: update to latest 4.0.2 release", " - AppArmor: enable using ABI 4.0 from host parser", " - AppArmor: fix parser lookup", " - AppArmor: support AppArmor snippet priorities", " - AppArmor: allow reading cgroup memory.max file", " - AppArmor: allow using snap-exec coming from the snapd snap when", " starting a confined process with jailmode", " - AppArmor prompting (experimental): add checks for prompting", " support, include prompting status in system key, and restart snapd", " if prompting flag changes", " - AppArmor prompting (experimental): include prompt prefix in", " AppArmor rules if prompting is supported and enabled", " - AppArmor prompting (experimental): add common types, constraints,", " and mappings from AppArmor permissions to abstract permissions", " - AppArmor prompting (experimental): add path pattern parsing and", " matching", " - AppArmor prompting (experimental): add path pattern precedence", " based on specificity", " - AppArmor prompting (experimental): add packages to manage", " outstanding request prompts and rules", " - AppArmor prompting (experimental): add prompting API and notice", " types, which require snap-interfaces-requests-control interface", " - AppArmor prompting (experimental): feature flag can only be", " enabled if prompting is supported, handler service connected, and", " the service can be started", " - Registry views (experimental): rename from aspects to registries", " - Registry views (experimental): support reading registry views and", " setting/unsetting registry data using snapctl", " - Registry views (experimental): fetch and refresh registry", " assertions as needed", " - Registry views (experimental): restrict view paths from using a", " number as first character and view names to storage path style", " patterns", " - Snap components: support installing snaps and components from", " files at the same time (no REST API/CLI)", " - Snap components: support downloading components related assertions", " from the store", " - Snap components: support installing components from the store", " - Snap components: support removing components individually and", " during snap removal", " - Snap components: support kernel modules as components", " - Snap components: support for component install, pre-refresh and", " post-refresh hooks", " - Snap components: initial support for building systems that contain", " components", " - Refresh app awareness (experimental): add data field for", " /v2/changes REST API to allow associating each task with affected", " snaps", " - Refresh app awareness (experimental): use the app name from", " .desktop file in notifications", " - Refresh app awareness (experimental): give snap-refresh-observe", " interface access to /v2/snaps/{name} endpoint", " - Improve snap-confine compatibility with nvidia drivers", " - Allow re-exec when SNAP_REEXEC is set for unlisted distros to", " simplify testing", " - Allow mixing revision and channel on snap install", " - Generate GNU build ID for Go binaries", " - Add missing etelpmoc.sh for shell completion", " - Do not attempt to run snapd on classic when re-exec is disabled", " - Packaging/build maintenance for Debian sid, Fedora, Arch, openSuse", " - Add snap debug API command to enable running raw queries", " - Enable snap-confine snap mount directory detection", " - Replace global seccomp filter with deny rules in standard seccomp", " template", " - Remove support for Ubuntu Core Launcher (superseded by snap-", " confine)", " - Support creating pending serial bound users after serial assertion", " becomes available", " - Support disabling cloud-init using kernel command-line", " - In hybrid systems, apps can refresh without waiting for restarts", " required by essential snaps", " - Ship snap-debug-info.sh script used for system diagnostics", " - Improve error messages when attempting to run non-existent snap", " - Switch to -u UID:GID for strace-static", " - Support enabling snapd logging with snap set system", " debug.snapd.{log,log-level}", " - Add options system.coredump.enable and system.coredump.maxuse to", " support using systemd-coredump on Ubuntu Core", " - Provide documentation URL for 'snap interface '", " - Fix snapd riscv64 build", " - Fix restarting activated services instead of their activator units", " (i.e. sockets, timers)", " - Fix potential unexpected auto-refresh of snap on managed schedule", " - Fix potential segfault by guarding against kernel command-line", " changes on classic system", " - Fix proxy entries in /etc/environment with missing newline that", " caused later manual entries to not be usable", " - Fix offline remodelling by ignoring prerequisites that will", " otherwise be downloaded from store", " - Fix devmode seccomp deny regression that caused spamming the log", " instead of actual denies", " - Fix snap lock leak during refresh", " - Fix not re-pinning validation sets that were already pinned when", " enforcing new validation sets", " - Fix handling of unexpected snapd runtime failure", " - Fix /v2/notices REST API skipping notices with duplicate", " timestamps", " - Fix comparing systemd versions that may contain pre-release", " suffixes", " - Fix udev potentially starting before snap-device-helper is made", " available", " - Fix race in snap seed metadata loading", " - Fix treating cloud-init exit status 2 as error", " - Fix to prevent sending refresh complete notification if snap snap-", " refresh-observe interface is connected", " - Fix to queue snapctl service commands if run from the default-", " configure hook to ensure they get up-to-date config values", " - Fix stop service failure when the service is not actually running", " anymore", " - Fix parsing /proc/PID/mounts with spaces", " - Add registry interface that provides snaps access to a particular", " registry view", " - Add snap-interfaces-requests-control interface to enable prompting", " client snaps", " - steam-support interface: remove all AppArmor and seccomp", " restrictions to improve user experience", " - opengl interface: improve compatibility with nvidia drivers", " - home interface: autoconnect home on Ubuntu Core Desktop", " - serial-port interface: support RPMsg tty", " - display-control interface: allow changing LVDS backlight power and", " brightness", " - power-control interface: support for battery charging thesholds,", " type/status and AC type/status", " - cpu-control interface: allow CPU C-state control", " - raw-usb interface: support RPi5 and Thinkpad x13s", " - custom-device interface: allow device file locking", " - lxd-support interface: allow LXD to self-manage its own cgroup", " - network-manager interface: support MPTCP sockets", " - network-control interface: allow plug/slot access to gnutls config", " and systemd resolved cache flushing via D-Bus", " - network-control interface: allow wpa_supplicant dbus api", " - gpio-control interface: support gpiochip* devices", " - polkit interface: fix \"rw\" mount option check", " - u2f-devices interface: enable additional security keys", " - desktop interface: enable kde theming support", "" ], "package": "snapd", "version": "2.65.1", "urgency": "medium", "distributions": "xenial", "launchpad_bugs_fixed": [ 2077473 ], "author": "Ernest Lotter ", "date": "Sat, 24 Aug 2024 10:31:20 +0200" }, { "cves": [], "log": [ "", " * New upstream release, LP: #2077473", " - Support building snapd using base Core22 (Snapcraft 8.x)", " - FIPS: support building FIPS complaint snapd variant that switches", " to FIPS mode when the system boots with FIPS enabled", " - AppArmor: update to latest 4.0.2 release", " - AppArmor: enable using ABI 4.0 from host parser", " - AppArmor: fix parser lookup", " - AppArmor: support AppArmor snippet priorities", " - AppArmor: allow reading cgroup memory.max file", " - AppArmor: allow using snap-exec coming from the snapd snap when", " starting a confined process with jailmode", " - AppArmor prompting (experimental): add checks for prompting", " support, include prompting status in system key, and restart snapd", " if prompting flag changes", " - AppArmor prompting (experimental): include prompt prefix in", " AppArmor rules if prompting is supported and enabled", " - AppArmor prompting (experimental): add common types, constraints,", " and mappings from AppArmor permissions to abstract permissions", " - AppArmor prompting (experimental): add path pattern parsing and", " matching", " - AppArmor prompting (experimental): add path pattern precedence", " based on specificity", " - AppArmor prompting (experimental): add packages to manage", " outstanding request prompts and rules", " - AppArmor prompting (experimental): add prompting API and notice", " types, which require snap-interfaces-requests-control interface", " - AppArmor prompting (experimental): feature flag can only be", " enabled if prompting is supported, handler service connected, and", " the service can be started", " - Registry views (experimental): rename from aspects to registries", " - Registry views (experimental): support reading registry views and", " setting/unsetting registry data using snapctl", " - Registry views (experimental): fetch and refresh registry", " assertions as needed", " - Registry views (experimental): restrict view paths from using a", " number as first character and view names to storage path style", " patterns", " - Snap components: support installing snaps and components from", " files at the same time (no REST API/CLI)", " - Snap components: support downloading components related assertions", " from the store", " - Snap components: support installing components from the store", " - Snap components: support removing components individually and", " during snap removal", " - Snap components: support kernel modules as components", " - Snap components: support for component install, pre-refresh and", " post-refresh hooks", " - Snap components: initial support for building systems that contain", " components", " - Refresh app awareness (experimental): add data field for", " /v2/changes REST API to allow associating each task with affected", " snaps", " - Refresh app awareness (experimental): use the app name from", " .desktop file in notifications", " - Refresh app awareness (experimental): give snap-refresh-observe", " interface access to /v2/snaps/{name} endpoint", " - Improve snap-confine compatibility with nvidia drivers", " - Allow re-exec when SNAP_REEXEC is set for unlisted distros to", " simplify testing", " - Allow mixing revision and channel on snap install", " - Generate GNU build ID for Go binaries", " - Add missing etelpmoc.sh for shell completion", " - Do not attempt to run snapd on classic when re-exec is disabled", " - Packaging/build maintenance for Debian sid, Fedora, Arch, openSuse", " - Add snap debug API command to enable running raw queries", " - Enable snap-confine snap mount directory detection", " - Replace global seccomp filter with deny rules in standard seccomp", " template", " - Remove support for Ubuntu Core Launcher (superseded by snap-", " confine)", " - Support creating pending serial bound users after serial assertion", " becomes available", " - Support disabling cloud-init using kernel command-line", " - In hybrid systems, apps can refresh without waiting for restarts", " required by essential snaps", " - Ship snap-debug-info.sh script used for system diagnostics", " - Improve error messages when attempting to run non-existent snap", " - Switch to -u UID:GID for strace-static", " - Support enabling snapd logging with snap set system", " debug.snapd.{log,log-level}", " - Add options system.coredump.enable and system.coredump.maxuse to", " support using systemd-coredump on Ubuntu Core", " - Provide documentation URL for 'snap interface '", " - Fix restarting activated services instead of their activator units", " (i.e. sockets, timers)", " - Fix potential unexpected auto-refresh of snap on managed schedule", " - Fix potential segfault by guarding against kernel command-line", " changes on classic system", " - Fix proxy entries in /etc/environment with missing newline that", " caused later manual entries to not be usable", " - Fix offline remodelling by ignoring prerequisites that will", " otherwise be downloaded from store", " - Fix devmode seccomp deny regression that caused spamming the log", " instead of actual denies", " - Fix snap lock leak during refresh", " - Fix not re-pinning validation sets that were already pinned when", " enforcing new validation sets", " - Fix handling of unexpected snapd runtime failure", " - Fix /v2/notices REST API skipping notices with duplicate", " timestamps", " - Fix comparing systemd versions that may contain pre-release", " suffixes", " - Fix udev potentially starting before snap-device-helper is made", " available", " - Fix race in snap seed metadata loading", " - Fix treating cloud-init exit status 2 as error", " - Fix to prevent sending refresh complete notification if snap snap-", " refresh-observe interface is connected", " - Fix to queue snapctl service commands if run from the default-", " configure hook to ensure they get up-to-date config values", " - Fix stop service failure when the service is not actually running", " anymore", " - Fix parsing /proc/PID/mounts with spaces", " - Add registry interface that provides snaps access to a particular", " registry view", " - Add snap-interfaces-requests-control interface to enable prompting", " client snaps", " - steam-support interface: remove all AppArmor and seccomp", " restrictions to improve user experience", " - opengl interface: improve compatibility with nvidia drivers", " - home interface: autoconnect home on Ubuntu Core Desktop", " - serial-port interface: support RPMsg tty", " - display-control interface: allow changing LVDS backlight power and", " brightness", " - power-control interface: support for battery charging thesholds,", " type/status and AC type/status", " - cpu-control interface: allow CPU C-state control", " - raw-usb interface: support RPi5 and Thinkpad x13s", " - custom-device interface: allow device file locking", " - lxd-support interface: allow LXD to self-manage its own cgroup", " - network-manager interface: support MPTCP sockets", " - network-control interface: allow plug/slot access to gnutls config", " and systemd resolved cache flushing via D-Bus", " - network-control interface: allow wpa_supplicant dbus api", " - gpio-control interface: support gpiochip* devices", " - polkit interface: fix \"rw\" mount option check", " - u2f-devices interface: enable additional security keys", " - desktop interface: enable kde theming support", "" ], "package": "snapd", "version": "2.65", "urgency": "medium", "distributions": "xenial", "launchpad_bugs_fixed": [ 2077473 ], "author": "Ernest Lotter ", "date": "Fri, 23 Aug 2024 08:49:28 +0200" }, { "cves": [], "log": [ "", " * New upstream release, LP: #2072986", " - Support building snapd using base Core22 (Snapcraft 8.x)", " - FIPS: support building FIPS complaint snapd variant that switches", " to FIPS mode when the system boots with FIPS enabled", " - AppArmor: update to AppArmor 4.0.1", " - AppArmor: support AppArmor snippet priorities", " - AppArmor prompting: add checks for prompting support, include", " prompting status in system key, and restart snapd if prompting", " flag changes", " - AppArmor prompting: include prompt prefix in AppArmor rules if", " prompting is supported and enabled", " - AppArmor prompting: add common types, constraints, and mappings", " from AppArmor permissions to abstract permissions", " - AppArmor prompting: add path pattern parsing and matching", " - Registry views (experimental): rename from aspects to registries", " - Registry views (experimental): support reading registry views", " using snapctl", " - Registry views (experimental): restrict view paths from using a", " number as first character and view names to storage path style", " patterns", " - Snap components: support installing snaps and components from", " files at the same time (no REST API/CLI)", " - Snap components: support downloading components related assertions", " from the store", " - Snap components: support installing components from the store (no", " REST API/CLI)", " - Snap components: support removing components (REST API, no CLI)", " - Snap components: started support for component hooks", " - Snap components: support kernel modules as components", " - Refresh app awareness (experimental): add data field for", " /v2/changes REST API to allow associating each task with affected", " snaps", " - Refresh app awareness (experimental): use the app name from", " .desktop file in notifications", " - Refresh app awareness (experimental): give snap-refresh-observe", " interface access to /v2/snaps/{name} endpoint", " - Allow re-exec when SNAP_REEXEC is set for unlisted distros to", " simplify testing", " - Generate GNU build ID for Go binaries", " - Add missing etelpmoc.sh for shell completion", " - Do not attempt to run snapd on classic when re-exec is disabled", " - Packaging/build maintenance for Debian sid, Fedora, Arch, openSuse", " - Add snap debug api command to enable running raw queries", " - Enable snap-confine snap mount directory detection", " - Replace global seccomp filter with deny rules in standard seccomp", " template", " - Remove support for Ubuntu Core Launcher (superseded by snap-", " confine)", " - Support creating pending serial bound users after serial assertion", " becomes available", " - Support disabling cloud-init using kernel command-line", " - In hybrid systems, apps can refresh without waiting for restarts", " required by essential snaps", " - Ship snap-debug-info.sh script used for system diagnostics", " - Improve error messages when attempting to run non-existent snap", " - Switch to -u UID:GID for strace-static", " - Support enabling snapd logging with snap set system", " debug.snapd.{log,log-level}", " - Fix restarting activated services instead of their activator units", " (i.e. sockets, timers)", " - Fix potential unexpected auto-refresh of snap on managed schedule", " - Fix potential segfault by guarding against kernel command-line", " changes on classic system", " - Fix proxy entries in /etc/environment with missing newline that", " caused later manual entries to not be usable", " - Fix offline remodelling by ignoring prerequisites that will", " otherwise be downloaded from store", " - Fix devmode seccomp deny regression that caused spamming the log", " instead of actual denies", " - Fix snap lock leak during refresh", " - Fix not re-pinning validation sets that were already pinned when", " enforcing new validation sets", " - Fix handling of unexpected snapd runtime failure", " - Fix /v2/notices REST API skipping notices with duplicate", " timestamps", " - Fix comparing systemd versions that may contain pre-release", " suffixes", " - Fix udev potentially starting before snap-device-helper is made", " available", " - Fix race in snap seed metadata loading", " - Fix treating cloud-init exit status 2 as error", " - Fix to prevent sending refresh complete notification if snap snap-", " refresh-observe interface is connected", " - Fix to queue snapctl service commands if run from the default-", " configure hook to ensure they get up-to-date config values", " - Fix stop service failure when the service is not actually running", " anymore", " - Add registry interface that provides snaps access to a particular", " registry view", " - steam-support interface: relaxed AppArmor and seccomp restrictions", " to improve user experience", " - home interface: autoconnect home on Ubuntu Core Desktop", " - serial-port interface: support RPMsg tty", " - display-control interface: allow changing LVDS backlight power and", " brightness", " - power-control interface: support for battery charging thesholds,", " type/status and AC type/status", " - cpu-control interface: allow CPU C-state control", " - raw-usb interface: support RPi5 and Thinkpad x13s", " - custom-device interface: allow device file locking", " - lxd-support interface: allow LXD to self-manage its own cgroup", " - network-manager interface: support MPTCP sockets", " - network-control interface: allow plug/slot access to gnutls config", " and systemd resolved cache flushing via D-Bus", "" ], "package": "snapd", "version": "2.64", "urgency": "medium", "distributions": "xenial", "launchpad_bugs_fixed": [ 2072986 ], "author": "Ernest Lotter ", "date": "Wed, 24 Jul 2024 21:11:59 +0200" } ], "notes": null } ], "snap": [] }, "added": { "deb": [ { "name": "linux-image-6.8.0-47-generic", "from_version": { "source_package_name": "linux-signed", "source_package_version": "6.8.0-45.45", "version": null }, "to_version": { "source_package_name": "linux-signed", "source_package_version": "6.8.0-47.47", "version": "6.8.0-47.47" }, "cves": [], "launchpad_bugs_fixed": [ 1786013, 1786013 ], "changes": [ { "cves": [], "log": [ "", " * Main version: 6.8.0-47.47", "", " * Packaging resync (LP: #1786013)", " - [Packaging] debian/tracking-bug -- resync from main package", "" ], "package": "linux-signed", "version": "6.8.0-47.47", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 1786013 ], "author": "Manuel Diewald ", "date": "Fri, 27 Sep 2024 20:47:53 +0200" }, { "cves": [], "log": [ "", " * Main version: 6.8.0-46.46", "", " * Packaging resync (LP: #1786013)", " - [Packaging] debian/tracking-bug -- resync from main package", "" ], "package": "linux-signed", "version": "6.8.0-46.46", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 1786013 ], "author": "Stefan Bader ", "date": "Fri, 13 Sep 2024 15:20:42 +0200" } ], "notes": "linux-image-6.8.0-47-generic version '6.8.0-47.47' (source package linux-signed version '6.8.0-47.47') was added. linux-image-6.8.0-47-generic version '6.8.0-47.47' has the same source package name, linux-signed, as removed package linux-image-6.8.0-45-generic. As such we can use the source package version of the removed package, '6.8.0-45.45', as the starting point in our changelog diff. Kernel packages are an example of where the binary package name changes for the same source package. Using the removed package source package version as our starting point means we can still get meaningful changelog diffs even for what appears to be a new package." }, { "name": "linux-modules-6.8.0-47-generic", "from_version": { "source_package_name": "linux", "source_package_version": "6.8.0-45.45", "version": null }, "to_version": { "source_package_name": "linux", "source_package_version": "6.8.0-47.47", "version": "6.8.0-47.47" }, "cves": [ { "cve": "CVE-2024-45016", "url": "https://ubuntu.com/security/CVE-2024-45016", "cve_description": "In the Linux kernel, the following vulnerability has been resolved: netem: fix return value if duplicate enqueue fails There is a bug in netem_enqueue() introduced by commit 5845f706388a (\"net: netem: fix skb length BUG_ON in __skb_to_sgvec\") that can lead to a use-after-free. This commit made netem_enqueue() always return NET_XMIT_SUCCESS when a packet is duplicated, which can cause the parent qdisc's q.qlen to be mistakenly incremented. When this happens qlen_notify() may be skipped on the parent during destruction, leaving a dangling pointer for some classful qdiscs like DRR. There are two ways for the bug happen: - If the duplicated packet is dropped by rootq->enqueue() and then the original packet is also dropped. - If rootq->enqueue() sends the duplicated packet to a different qdisc and the original packet is dropped. In both cases NET_XMIT_SUCCESS is returned even though no packets are enqueued at the netem qdisc. The fix is to defer the enqueue of the duplicate packet until after the original packet has been guaranteed to return NET_XMIT_SUCCESS.", "cve_priority": "medium", "cve_public_date": "2024-09-11 16:15:00 UTC" } ], "launchpad_bugs_fixed": [ 2082118 ], "changes": [ { "cves": [ { "cve": "CVE-2024-45016", "url": "https://ubuntu.com/security/CVE-2024-45016", "cve_description": "In the Linux kernel, the following vulnerability has been resolved: netem: fix return value if duplicate enqueue fails There is a bug in netem_enqueue() introduced by commit 5845f706388a (\"net: netem: fix skb length BUG_ON in __skb_to_sgvec\") that can lead to a use-after-free. This commit made netem_enqueue() always return NET_XMIT_SUCCESS when a packet is duplicated, which can cause the parent qdisc's q.qlen to be mistakenly incremented. When this happens qlen_notify() may be skipped on the parent during destruction, leaving a dangling pointer for some classful qdiscs like DRR. There are two ways for the bug happen: - If the duplicated packet is dropped by rootq->enqueue() and then the original packet is also dropped. - If rootq->enqueue() sends the duplicated packet to a different qdisc and the original packet is dropped. In both cases NET_XMIT_SUCCESS is returned even though no packets are enqueued at the netem qdisc. The fix is to defer the enqueue of the duplicate packet until after the original packet has been guaranteed to return NET_XMIT_SUCCESS.", "cve_priority": "medium", "cve_public_date": "2024-09-11 16:15:00 UTC" } ], "log": [ "", " * noble/linux: 6.8.0-47.47 -proposed tracker (LP: #2082118)", "", " * CVE-2024-45016", " - netem: fix return value if duplicate enqueue fails", "" ], "package": "linux", "version": "6.8.0-47.47", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2082118 ], "author": "Manuel Diewald ", "date": "Fri, 27 Sep 2024 19:21:30 +0200" } ], "notes": "linux-modules-6.8.0-47-generic version '6.8.0-47.47' (source package linux version '6.8.0-47.47') was added. linux-modules-6.8.0-47-generic version '6.8.0-47.47' has the same source package name, linux, as removed package linux-modules-6.8.0-45-generic. As such we can use the source package version of the removed package, '6.8.0-45.45', as the starting point in our changelog diff. Kernel packages are an example of where the binary package name changes for the same source package. Using the removed package source package version as our starting point means we can still get meaningful changelog diffs even for what appears to be a new package." } ], "snap": [] }, "removed": { "deb": [ { "name": "linux-image-6.8.0-45-generic", "from_version": { "source_package_name": "linux-signed", "source_package_version": "6.8.0-45.45", "version": "6.8.0-45.45" }, "to_version": { "source_package_name": null, "source_package_version": null, "version": null }, "cves": [], "launchpad_bugs_fixed": [], "changes": [], "notes": null }, { "name": "linux-modules-6.8.0-45-generic", "from_version": { "source_package_name": "linux", "source_package_version": "6.8.0-45.45", "version": "6.8.0-45.45" }, "to_version": { "source_package_name": null, "source_package_version": null, "version": null }, "cves": [], "launchpad_bugs_fixed": [], "changes": [], "notes": null } ], "snap": [] }, "notes": "Changelog diff for Ubuntu 24.04 noble image from release image serial 20241001 to 20241021", "from_series": "noble", "to_series": "noble", "from_serial": "20241001", "to_serial": "20241021", "from_manifest_filename": "release_manifest.previous", "to_manifest_filename": "manifest.current" }