{ "summary": { "snap": { "added": [], "removed": [], "diff": [] }, "deb": { "added": [], "removed": [], "diff": [ "libnss-systemd", "libpam-systemd", "libpng16-16", "libsystemd0", "libudev1", "systemd", "systemd-sysv", "systemd-timesyncd", "udev" ] } }, "diff": { "deb": [ { "name": "libnss-systemd", "from_version": { "source_package_name": "systemd", "source_package_version": "249.11-0ubuntu3.21", "version": "249.11-0ubuntu3.21" }, "to_version": { "source_package_name": "systemd", "source_package_version": "249.11-0ubuntu3.22", "version": "249.11-0ubuntu3.22" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * SECURITY UPDATE: systemd: crash triggered by unprivileged users in various", " components via Varlink", " - GHSA-5rm9-cc37-35gq.patch", " - GHSA-5rm9-cc37-35gq", " * SECURITY UPDATE: udev: local root execution via malicious iscsi devices", " and unsanitized kernel output", " - GHSA-m8q3-73v4-wvg7.patch", " - GHSA-m8q3-73v4-wvg7", " * SECURITY UPDATE: crash triggered by unprivileged users in various", " components via D-Bus/Varlink", " - basic-strv-add-optimizable-version-of-strv_push-consume-e.patch", " - core-limit-the-number-of-units-that-can-be-requested-over.patch", " - dbus-limit-the-number-of-env-variables-to-something-reaso.patch", " - dbus-manager-limit-the-number-of-states-patterns-per-quer.patch", " - resolve-enforce-the-search-domain-limit-earlier.patch", " - resolve-limit-the-number-NTAs-to-something-sensible.patch", " - sd-bus-store-the-strv-size-when-extending-it.patch", " - sd-json-user-record-store-the-strv-size-when-extending-it.patch", " - GHSA-3jgj-3phh-hx5j", "" ], "package": "systemd", "version": "249.11-0ubuntu3.22", "urgency": "medium", "distributions": "jammy-security", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Wed, 29 Jul 2026 09:41:27 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "libpam-systemd", "from_version": { "source_package_name": "systemd", "source_package_version": "249.11-0ubuntu3.21", "version": "249.11-0ubuntu3.21" }, "to_version": { "source_package_name": "systemd", "source_package_version": "249.11-0ubuntu3.22", "version": "249.11-0ubuntu3.22" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * SECURITY UPDATE: systemd: crash triggered by unprivileged users in various", " components via Varlink", " - GHSA-5rm9-cc37-35gq.patch", " - GHSA-5rm9-cc37-35gq", " * SECURITY UPDATE: udev: local root execution via malicious iscsi devices", " and unsanitized kernel output", " - GHSA-m8q3-73v4-wvg7.patch", " - GHSA-m8q3-73v4-wvg7", " * SECURITY UPDATE: crash triggered by unprivileged users in various", " components via D-Bus/Varlink", " - basic-strv-add-optimizable-version-of-strv_push-consume-e.patch", " - core-limit-the-number-of-units-that-can-be-requested-over.patch", " - dbus-limit-the-number-of-env-variables-to-something-reaso.patch", " - dbus-manager-limit-the-number-of-states-patterns-per-quer.patch", " - resolve-enforce-the-search-domain-limit-earlier.patch", " - resolve-limit-the-number-NTAs-to-something-sensible.patch", " - sd-bus-store-the-strv-size-when-extending-it.patch", " - sd-json-user-record-store-the-strv-size-when-extending-it.patch", " - GHSA-3jgj-3phh-hx5j", "" ], "package": "systemd", "version": "249.11-0ubuntu3.22", "urgency": "medium", "distributions": "jammy-security", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Wed, 29 Jul 2026 09:41:27 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "libpng16-16", "from_version": { "source_package_name": "libpng1.6", "source_package_version": "1.6.37-3ubuntu0.5", "version": "1.6.37-3ubuntu0.5" }, "to_version": { "source_package_name": "libpng1.6", "source_package_version": "1.6.37-3ubuntu0.6", "version": "1.6.37-3ubuntu0.6" }, "cves": [ { "cve": "CVE-2026-40930", "url": "https://ubuntu.com/security/CVE-2026-40930", "cve_description": "LIBPNG is a reference library for use in applications that process PNG (Portable Network Graphics) raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG parser clear the chunk-header flag without consuming the chunk body and CRC, allowing attacker-controlled bytes inside an ignored ancillary chunk to be reinterpreted as a fresh chunk header on the next call to `png_process_data`. Commit faf06924688b62d7c1654b5ceddedbde66ffadb4 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-06-04 16:16:00 UTC" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-40930", "url": "https://ubuntu.com/security/CVE-2026-40930", "cve_description": "LIBPNG is a reference library for use in applications that process PNG (Portable Network Graphics) raster image files. In version 1.8.0, three inter-frame chunk discard paths in the push-mode APNG parser clear the chunk-header flag without consuming the chunk body and CRC, allowing attacker-controlled bytes inside an ignored ancillary chunk to be reinterpreted as a fresh chunk header on the next call to `png_process_data`. Commit faf06924688b62d7c1654b5ceddedbde66ffadb4 fixes the issue.", "cve_priority": "medium", "cve_public_date": "2026-06-04 16:16:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: Interpretation conflict in APNG parser", " paths.", " - debian/patches/CVE-2026-40930.patch: Restructure the trailing-fdAT", " path in pngpread.c", " - debian/patches/CVE-2026-40930-post1.patch: Fix hardcoded length in", " png_ensure_sequence_number in pngpread.c", " - CVE-2026-40930", "" ], "package": "libpng1.6", "version": "1.6.37-3ubuntu0.6", "urgency": "medium", "distributions": "jammy-security", "launchpad_bugs_fixed": [], "author": "Kyle Kernick ", "date": "Thu, 13 Aug 2026 10:20:26 -0600" } ], "notes": null, "is_version_downgrade": false }, { "name": "libsystemd0", "from_version": { "source_package_name": "systemd", "source_package_version": "249.11-0ubuntu3.21", "version": "249.11-0ubuntu3.21" }, "to_version": { "source_package_name": "systemd", "source_package_version": "249.11-0ubuntu3.22", "version": "249.11-0ubuntu3.22" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * SECURITY UPDATE: systemd: crash triggered by unprivileged users in various", " components via Varlink", " - GHSA-5rm9-cc37-35gq.patch", " - GHSA-5rm9-cc37-35gq", " * SECURITY UPDATE: udev: local root execution via malicious iscsi devices", " and unsanitized kernel output", " - GHSA-m8q3-73v4-wvg7.patch", " - GHSA-m8q3-73v4-wvg7", " * SECURITY UPDATE: crash triggered by unprivileged users in various", " components via D-Bus/Varlink", " - basic-strv-add-optimizable-version-of-strv_push-consume-e.patch", " - core-limit-the-number-of-units-that-can-be-requested-over.patch", " - dbus-limit-the-number-of-env-variables-to-something-reaso.patch", " - dbus-manager-limit-the-number-of-states-patterns-per-quer.patch", " - resolve-enforce-the-search-domain-limit-earlier.patch", " - resolve-limit-the-number-NTAs-to-something-sensible.patch", " - sd-bus-store-the-strv-size-when-extending-it.patch", " - sd-json-user-record-store-the-strv-size-when-extending-it.patch", " - GHSA-3jgj-3phh-hx5j", "" ], "package": "systemd", "version": "249.11-0ubuntu3.22", "urgency": "medium", "distributions": "jammy-security", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Wed, 29 Jul 2026 09:41:27 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "libudev1", "from_version": { "source_package_name": "systemd", "source_package_version": "249.11-0ubuntu3.21", "version": "249.11-0ubuntu3.21" }, "to_version": { "source_package_name": "systemd", "source_package_version": "249.11-0ubuntu3.22", "version": "249.11-0ubuntu3.22" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * SECURITY UPDATE: systemd: crash triggered by unprivileged users in various", " components via Varlink", " - GHSA-5rm9-cc37-35gq.patch", " - GHSA-5rm9-cc37-35gq", " * SECURITY UPDATE: udev: local root execution via malicious iscsi devices", " and unsanitized kernel output", " - GHSA-m8q3-73v4-wvg7.patch", " - GHSA-m8q3-73v4-wvg7", " * SECURITY UPDATE: crash triggered by unprivileged users in various", " components via D-Bus/Varlink", " - basic-strv-add-optimizable-version-of-strv_push-consume-e.patch", " - core-limit-the-number-of-units-that-can-be-requested-over.patch", " - dbus-limit-the-number-of-env-variables-to-something-reaso.patch", " - dbus-manager-limit-the-number-of-states-patterns-per-quer.patch", " - resolve-enforce-the-search-domain-limit-earlier.patch", " - resolve-limit-the-number-NTAs-to-something-sensible.patch", " - sd-bus-store-the-strv-size-when-extending-it.patch", " - sd-json-user-record-store-the-strv-size-when-extending-it.patch", " - GHSA-3jgj-3phh-hx5j", "" ], "package": "systemd", "version": "249.11-0ubuntu3.22", "urgency": "medium", "distributions": "jammy-security", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Wed, 29 Jul 2026 09:41:27 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "systemd", "from_version": { "source_package_name": "systemd", "source_package_version": "249.11-0ubuntu3.21", "version": "249.11-0ubuntu3.21" }, "to_version": { "source_package_name": "systemd", "source_package_version": "249.11-0ubuntu3.22", "version": "249.11-0ubuntu3.22" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * SECURITY UPDATE: systemd: crash triggered by unprivileged users in various", " components via Varlink", " - GHSA-5rm9-cc37-35gq.patch", " - GHSA-5rm9-cc37-35gq", " * SECURITY UPDATE: udev: local root execution via malicious iscsi devices", " and unsanitized kernel output", " - GHSA-m8q3-73v4-wvg7.patch", " - GHSA-m8q3-73v4-wvg7", " * SECURITY UPDATE: crash triggered by unprivileged users in various", " components via D-Bus/Varlink", " - basic-strv-add-optimizable-version-of-strv_push-consume-e.patch", " - core-limit-the-number-of-units-that-can-be-requested-over.patch", " - dbus-limit-the-number-of-env-variables-to-something-reaso.patch", " - dbus-manager-limit-the-number-of-states-patterns-per-quer.patch", " - resolve-enforce-the-search-domain-limit-earlier.patch", " - resolve-limit-the-number-NTAs-to-something-sensible.patch", " - sd-bus-store-the-strv-size-when-extending-it.patch", " - sd-json-user-record-store-the-strv-size-when-extending-it.patch", " - GHSA-3jgj-3phh-hx5j", "" ], "package": "systemd", "version": "249.11-0ubuntu3.22", "urgency": "medium", "distributions": "jammy-security", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Wed, 29 Jul 2026 09:41:27 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "systemd-sysv", "from_version": { "source_package_name": "systemd", "source_package_version": "249.11-0ubuntu3.21", "version": "249.11-0ubuntu3.21" }, "to_version": { "source_package_name": "systemd", "source_package_version": "249.11-0ubuntu3.22", "version": "249.11-0ubuntu3.22" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * SECURITY UPDATE: systemd: crash triggered by unprivileged users in various", " components via Varlink", " - GHSA-5rm9-cc37-35gq.patch", " - GHSA-5rm9-cc37-35gq", " * SECURITY UPDATE: udev: local root execution via malicious iscsi devices", " and unsanitized kernel output", " - GHSA-m8q3-73v4-wvg7.patch", " - GHSA-m8q3-73v4-wvg7", " * SECURITY UPDATE: crash triggered by unprivileged users in various", " components via D-Bus/Varlink", " - basic-strv-add-optimizable-version-of-strv_push-consume-e.patch", " - core-limit-the-number-of-units-that-can-be-requested-over.patch", " - dbus-limit-the-number-of-env-variables-to-something-reaso.patch", " - dbus-manager-limit-the-number-of-states-patterns-per-quer.patch", " - resolve-enforce-the-search-domain-limit-earlier.patch", " - resolve-limit-the-number-NTAs-to-something-sensible.patch", " - sd-bus-store-the-strv-size-when-extending-it.patch", " - sd-json-user-record-store-the-strv-size-when-extending-it.patch", " - GHSA-3jgj-3phh-hx5j", "" ], "package": "systemd", "version": "249.11-0ubuntu3.22", "urgency": "medium", "distributions": "jammy-security", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Wed, 29 Jul 2026 09:41:27 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "systemd-timesyncd", "from_version": { "source_package_name": "systemd", "source_package_version": "249.11-0ubuntu3.21", "version": "249.11-0ubuntu3.21" }, "to_version": { "source_package_name": "systemd", "source_package_version": "249.11-0ubuntu3.22", "version": "249.11-0ubuntu3.22" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * SECURITY UPDATE: systemd: crash triggered by unprivileged users in various", " components via Varlink", " - GHSA-5rm9-cc37-35gq.patch", " - GHSA-5rm9-cc37-35gq", " * SECURITY UPDATE: udev: local root execution via malicious iscsi devices", " and unsanitized kernel output", " - GHSA-m8q3-73v4-wvg7.patch", " - GHSA-m8q3-73v4-wvg7", " * SECURITY UPDATE: crash triggered by unprivileged users in various", " components via D-Bus/Varlink", " - basic-strv-add-optimizable-version-of-strv_push-consume-e.patch", " - core-limit-the-number-of-units-that-can-be-requested-over.patch", " - dbus-limit-the-number-of-env-variables-to-something-reaso.patch", " - dbus-manager-limit-the-number-of-states-patterns-per-quer.patch", " - resolve-enforce-the-search-domain-limit-earlier.patch", " - resolve-limit-the-number-NTAs-to-something-sensible.patch", " - sd-bus-store-the-strv-size-when-extending-it.patch", " - sd-json-user-record-store-the-strv-size-when-extending-it.patch", " - GHSA-3jgj-3phh-hx5j", "" ], "package": "systemd", "version": "249.11-0ubuntu3.22", "urgency": "medium", "distributions": "jammy-security", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Wed, 29 Jul 2026 09:41:27 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "udev", "from_version": { "source_package_name": "systemd", "source_package_version": "249.11-0ubuntu3.21", "version": "249.11-0ubuntu3.21" }, "to_version": { "source_package_name": "systemd", "source_package_version": "249.11-0ubuntu3.22", "version": "249.11-0ubuntu3.22" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * SECURITY UPDATE: systemd: crash triggered by unprivileged users in various", " components via Varlink", " - GHSA-5rm9-cc37-35gq.patch", " - GHSA-5rm9-cc37-35gq", " * SECURITY UPDATE: udev: local root execution via malicious iscsi devices", " and unsanitized kernel output", " - GHSA-m8q3-73v4-wvg7.patch", " - GHSA-m8q3-73v4-wvg7", " * SECURITY UPDATE: crash triggered by unprivileged users in various", " components via D-Bus/Varlink", " - basic-strv-add-optimizable-version-of-strv_push-consume-e.patch", " - core-limit-the-number-of-units-that-can-be-requested-over.patch", " - dbus-limit-the-number-of-env-variables-to-something-reaso.patch", " - dbus-manager-limit-the-number-of-states-patterns-per-quer.patch", " - resolve-enforce-the-search-domain-limit-earlier.patch", " - resolve-limit-the-number-NTAs-to-something-sensible.patch", " - sd-bus-store-the-strv-size-when-extending-it.patch", " - sd-json-user-record-store-the-strv-size-when-extending-it.patch", " - GHSA-3jgj-3phh-hx5j", "" ], "package": "systemd", "version": "249.11-0ubuntu3.22", "urgency": "medium", "distributions": "jammy-security", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Wed, 29 Jul 2026 09:41:27 -0400" } ], "notes": null, "is_version_downgrade": false } ], "snap": [] }, "added": { "deb": [], "snap": [] }, "removed": { "deb": [], "snap": [] }, "notes": "Changelog diff for Ubuntu 22.04 jammy image from release image serial 20260806 to 20260817", "from_series": "jammy", "to_series": "jammy", "from_serial": "20260806", "to_serial": "20260817", "from_manifest_filename": "release_manifest.previous", "to_manifest_filename": "manifest.current" }