{ "summary": { "snap": { "added": [], "removed": [], "diff": [] }, "deb": { "added": [], "removed": [], "diff": [ "libpam-systemd", "libsystemd-shared", "libsystemd0", "libudev1", "systemd", "systemd-dev", "systemd-resolved", "systemd-sysv", "systemd-timesyncd", "udev" ] } }, "diff": { "deb": [ { "name": "libpam-systemd", "from_version": { "source_package_name": "systemd", "source_package_version": "255.4-1ubuntu8.16", "version": "255.4-1ubuntu8.16" }, "to_version": { "source_package_name": "systemd", "source_package_version": "255.4-1ubuntu8.17", "version": "255.4-1ubuntu8.17" }, "cves": [ { "cve": "CVE-2026-16742", "url": "https://ubuntu.com/security/CVE-2026-16742", "cve_description": "local privilege escalation via missing home-record signature verification on the authenticate path", "cve_priority": "medium", "cve_public_date": "2026-08-10" }, { "cve": "CVE-2026-15059", "url": "https://ubuntu.com/security/CVE-2026-15059", "cve_description": "unprivileged users can terminate arbitrary processes", "cve_priority": "medium", "cve_public_date": "2026-08-10" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-16742", "url": "https://ubuntu.com/security/CVE-2026-16742", "cve_description": "local privilege escalation via missing home-record signature verification on the authenticate path", "cve_priority": "medium", "cve_public_date": "2026-08-10" }, { "cve": "CVE-2026-15059", "url": "https://ubuntu.com/security/CVE-2026-15059", "cve_description": "unprivileged users can terminate arbitrary processes", "cve_priority": "medium", "cve_public_date": "2026-08-10" } ], "log": [ "", " * SECURITY UPDATE: systemd-homed: local privilege escalation via missing home-record signature verification on the authenticate path", " - homed-fix-verification-of-local-identity-file.patch", " - homed-verify-privileged-worker-changes.patch", " - CVE-2026-16742", " * SECURITY UPDATE: systemd-oomd: unprivileged users can terminate arbitrary processes", " - CVE-2026-15059.patch", " - CVE-2026-15059", " * SECURITY UPDATE: systemd: crash triggered by unprivileged users in various components via Varlink", " - GHSA-5rm9-cc37-35gq.patch", " - GHSA-5rm9-cc37-35gq", " * SECURITY UPDATE: udev: local root execution via malicious iscsi devices and unsanitized kernel output", " - GHSA-m8q3-73v4-wvg7.patch", " - GHSA-m8q3-73v4-wvg7", " * SECURITY UPDATE: crash triggered by unprivileged users in various components via D-Bus/Varlink", " - core-limit-the-number-of-units-that-can-be-requested-over.patch", " - dbus-limit-the-number-of-env-variables-to-something-reaso.patch", " - dbus-manager-limit-the-number-of-states-patterns-per-quer.patch", " - resolve-enforce-the-search-domain-limit-earlier.patch", " - resolve-limit-the-number-NTAs-to-something-sensible.patch", " - sd-bus-store-the-strv-size-when-extending-it.patch", " - sd-json-user-record-store-the-strv-size-when-extending-it.patch", " - GHSA-3jgj-3phh-hx5j", "" ], "package": "systemd", "version": "255.4-1ubuntu8.17", "urgency": "medium", "distributions": "noble-security", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Tue, 28 Jul 2026 11:04:45 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "libsystemd-shared", "from_version": { "source_package_name": "systemd", "source_package_version": "255.4-1ubuntu8.16", "version": "255.4-1ubuntu8.16" }, "to_version": { "source_package_name": "systemd", "source_package_version": "255.4-1ubuntu8.17", "version": "255.4-1ubuntu8.17" }, "cves": [ { "cve": "CVE-2026-16742", "url": "https://ubuntu.com/security/CVE-2026-16742", "cve_description": "local privilege escalation via missing home-record signature verification on the authenticate path", "cve_priority": "medium", "cve_public_date": "2026-08-10" }, { "cve": "CVE-2026-15059", "url": "https://ubuntu.com/security/CVE-2026-15059", "cve_description": "unprivileged users can terminate arbitrary processes", "cve_priority": "medium", "cve_public_date": "2026-08-10" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-16742", "url": "https://ubuntu.com/security/CVE-2026-16742", "cve_description": "local privilege escalation via missing home-record signature verification on the authenticate path", "cve_priority": "medium", "cve_public_date": "2026-08-10" }, { "cve": "CVE-2026-15059", "url": "https://ubuntu.com/security/CVE-2026-15059", "cve_description": "unprivileged users can terminate arbitrary processes", "cve_priority": "medium", "cve_public_date": "2026-08-10" } ], "log": [ "", " * SECURITY UPDATE: systemd-homed: local privilege escalation via missing home-record signature verification on the authenticate path", " - homed-fix-verification-of-local-identity-file.patch", " - homed-verify-privileged-worker-changes.patch", " - CVE-2026-16742", " * SECURITY UPDATE: systemd-oomd: unprivileged users can terminate arbitrary processes", " - CVE-2026-15059.patch", " - CVE-2026-15059", " * SECURITY UPDATE: systemd: crash triggered by unprivileged users in various components via Varlink", " - GHSA-5rm9-cc37-35gq.patch", " - GHSA-5rm9-cc37-35gq", " * SECURITY UPDATE: udev: local root execution via malicious iscsi devices and unsanitized kernel output", " - GHSA-m8q3-73v4-wvg7.patch", " - GHSA-m8q3-73v4-wvg7", " * SECURITY UPDATE: crash triggered by unprivileged users in various components via D-Bus/Varlink", " - core-limit-the-number-of-units-that-can-be-requested-over.patch", " - dbus-limit-the-number-of-env-variables-to-something-reaso.patch", " - dbus-manager-limit-the-number-of-states-patterns-per-quer.patch", " - resolve-enforce-the-search-domain-limit-earlier.patch", " - resolve-limit-the-number-NTAs-to-something-sensible.patch", " - sd-bus-store-the-strv-size-when-extending-it.patch", " - sd-json-user-record-store-the-strv-size-when-extending-it.patch", " - GHSA-3jgj-3phh-hx5j", "" ], "package": "systemd", "version": "255.4-1ubuntu8.17", "urgency": "medium", "distributions": "noble-security", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Tue, 28 Jul 2026 11:04:45 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "libsystemd0", "from_version": { "source_package_name": "systemd", "source_package_version": "255.4-1ubuntu8.16", "version": "255.4-1ubuntu8.16" }, "to_version": { "source_package_name": "systemd", "source_package_version": "255.4-1ubuntu8.17", "version": "255.4-1ubuntu8.17" }, "cves": [ { "cve": "CVE-2026-16742", "url": "https://ubuntu.com/security/CVE-2026-16742", "cve_description": "local privilege escalation via missing home-record signature verification on the authenticate path", "cve_priority": "medium", "cve_public_date": "2026-08-10" }, { "cve": "CVE-2026-15059", "url": "https://ubuntu.com/security/CVE-2026-15059", "cve_description": "unprivileged users can terminate arbitrary processes", "cve_priority": "medium", "cve_public_date": "2026-08-10" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-16742", "url": "https://ubuntu.com/security/CVE-2026-16742", "cve_description": "local privilege escalation via missing home-record signature verification on the authenticate path", "cve_priority": "medium", "cve_public_date": "2026-08-10" }, { "cve": "CVE-2026-15059", "url": "https://ubuntu.com/security/CVE-2026-15059", "cve_description": "unprivileged users can terminate arbitrary processes", "cve_priority": "medium", "cve_public_date": "2026-08-10" } ], "log": [ "", " * SECURITY UPDATE: systemd-homed: local privilege escalation via missing home-record signature verification on the authenticate path", " - homed-fix-verification-of-local-identity-file.patch", " - homed-verify-privileged-worker-changes.patch", " - CVE-2026-16742", " * SECURITY UPDATE: systemd-oomd: unprivileged users can terminate arbitrary processes", " - CVE-2026-15059.patch", " - CVE-2026-15059", " * SECURITY UPDATE: systemd: crash triggered by unprivileged users in various components via Varlink", " - GHSA-5rm9-cc37-35gq.patch", " - GHSA-5rm9-cc37-35gq", " * SECURITY UPDATE: udev: local root execution via malicious iscsi devices and unsanitized kernel output", " - GHSA-m8q3-73v4-wvg7.patch", " - GHSA-m8q3-73v4-wvg7", " * SECURITY UPDATE: crash triggered by unprivileged users in various components via D-Bus/Varlink", " - core-limit-the-number-of-units-that-can-be-requested-over.patch", " - dbus-limit-the-number-of-env-variables-to-something-reaso.patch", " - dbus-manager-limit-the-number-of-states-patterns-per-quer.patch", " - resolve-enforce-the-search-domain-limit-earlier.patch", " - resolve-limit-the-number-NTAs-to-something-sensible.patch", " - sd-bus-store-the-strv-size-when-extending-it.patch", " - sd-json-user-record-store-the-strv-size-when-extending-it.patch", " - GHSA-3jgj-3phh-hx5j", "" ], "package": "systemd", "version": "255.4-1ubuntu8.17", "urgency": "medium", "distributions": "noble-security", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Tue, 28 Jul 2026 11:04:45 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "libudev1", "from_version": { "source_package_name": "systemd", "source_package_version": "255.4-1ubuntu8.16", "version": "255.4-1ubuntu8.16" }, "to_version": { "source_package_name": "systemd", "source_package_version": "255.4-1ubuntu8.17", "version": "255.4-1ubuntu8.17" }, "cves": [ { "cve": "CVE-2026-16742", "url": "https://ubuntu.com/security/CVE-2026-16742", "cve_description": "local privilege escalation via missing home-record signature verification on the authenticate path", "cve_priority": "medium", "cve_public_date": "2026-08-10" }, { "cve": "CVE-2026-15059", "url": "https://ubuntu.com/security/CVE-2026-15059", "cve_description": "unprivileged users can terminate arbitrary processes", "cve_priority": "medium", "cve_public_date": "2026-08-10" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-16742", "url": "https://ubuntu.com/security/CVE-2026-16742", "cve_description": "local privilege escalation via missing home-record signature verification on the authenticate path", "cve_priority": "medium", "cve_public_date": "2026-08-10" }, { "cve": "CVE-2026-15059", "url": "https://ubuntu.com/security/CVE-2026-15059", "cve_description": "unprivileged users can terminate arbitrary processes", "cve_priority": "medium", "cve_public_date": "2026-08-10" } ], "log": [ "", " * SECURITY UPDATE: systemd-homed: local privilege escalation via missing home-record signature verification on the authenticate path", " - homed-fix-verification-of-local-identity-file.patch", " - homed-verify-privileged-worker-changes.patch", " - CVE-2026-16742", " * SECURITY UPDATE: systemd-oomd: unprivileged users can terminate arbitrary processes", " - CVE-2026-15059.patch", " - CVE-2026-15059", " * SECURITY UPDATE: systemd: crash triggered by unprivileged users in various components via Varlink", " - GHSA-5rm9-cc37-35gq.patch", " - GHSA-5rm9-cc37-35gq", " * SECURITY UPDATE: udev: local root execution via malicious iscsi devices and unsanitized kernel output", " - GHSA-m8q3-73v4-wvg7.patch", " - GHSA-m8q3-73v4-wvg7", " * SECURITY UPDATE: crash triggered by unprivileged users in various components via D-Bus/Varlink", " - core-limit-the-number-of-units-that-can-be-requested-over.patch", " - dbus-limit-the-number-of-env-variables-to-something-reaso.patch", " - dbus-manager-limit-the-number-of-states-patterns-per-quer.patch", " - resolve-enforce-the-search-domain-limit-earlier.patch", " - resolve-limit-the-number-NTAs-to-something-sensible.patch", " - sd-bus-store-the-strv-size-when-extending-it.patch", " - sd-json-user-record-store-the-strv-size-when-extending-it.patch", " - GHSA-3jgj-3phh-hx5j", "" ], "package": "systemd", "version": "255.4-1ubuntu8.17", "urgency": "medium", "distributions": "noble-security", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Tue, 28 Jul 2026 11:04:45 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "systemd", "from_version": { "source_package_name": "systemd", "source_package_version": "255.4-1ubuntu8.16", "version": "255.4-1ubuntu8.16" }, "to_version": { "source_package_name": "systemd", "source_package_version": "255.4-1ubuntu8.17", "version": "255.4-1ubuntu8.17" }, "cves": [ { "cve": "CVE-2026-16742", "url": "https://ubuntu.com/security/CVE-2026-16742", "cve_description": "local privilege escalation via missing home-record signature verification on the authenticate path", "cve_priority": "medium", "cve_public_date": "2026-08-10" }, { "cve": "CVE-2026-15059", "url": "https://ubuntu.com/security/CVE-2026-15059", "cve_description": "unprivileged users can terminate arbitrary processes", "cve_priority": "medium", "cve_public_date": "2026-08-10" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-16742", "url": "https://ubuntu.com/security/CVE-2026-16742", "cve_description": "local privilege escalation via missing home-record signature verification on the authenticate path", "cve_priority": "medium", "cve_public_date": "2026-08-10" }, { "cve": "CVE-2026-15059", "url": "https://ubuntu.com/security/CVE-2026-15059", "cve_description": "unprivileged users can terminate arbitrary processes", "cve_priority": "medium", "cve_public_date": "2026-08-10" } ], "log": [ "", " * SECURITY UPDATE: systemd-homed: local privilege escalation via missing home-record signature verification on the authenticate path", " - homed-fix-verification-of-local-identity-file.patch", " - homed-verify-privileged-worker-changes.patch", " - CVE-2026-16742", " * SECURITY UPDATE: systemd-oomd: unprivileged users can terminate arbitrary processes", " - CVE-2026-15059.patch", " - CVE-2026-15059", " * SECURITY UPDATE: systemd: crash triggered by unprivileged users in various components via Varlink", " - GHSA-5rm9-cc37-35gq.patch", " - GHSA-5rm9-cc37-35gq", " * SECURITY UPDATE: udev: local root execution via malicious iscsi devices and unsanitized kernel output", " - GHSA-m8q3-73v4-wvg7.patch", " - GHSA-m8q3-73v4-wvg7", " * SECURITY UPDATE: crash triggered by unprivileged users in various components via D-Bus/Varlink", " - core-limit-the-number-of-units-that-can-be-requested-over.patch", " - dbus-limit-the-number-of-env-variables-to-something-reaso.patch", " - dbus-manager-limit-the-number-of-states-patterns-per-quer.patch", " - resolve-enforce-the-search-domain-limit-earlier.patch", " - resolve-limit-the-number-NTAs-to-something-sensible.patch", " - sd-bus-store-the-strv-size-when-extending-it.patch", " - sd-json-user-record-store-the-strv-size-when-extending-it.patch", " - GHSA-3jgj-3phh-hx5j", "" ], "package": "systemd", "version": "255.4-1ubuntu8.17", "urgency": "medium", "distributions": "noble-security", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Tue, 28 Jul 2026 11:04:45 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "systemd-dev", "from_version": { "source_package_name": "systemd", "source_package_version": "255.4-1ubuntu8.16", "version": "255.4-1ubuntu8.16" }, "to_version": { "source_package_name": "systemd", "source_package_version": "255.4-1ubuntu8.17", "version": "255.4-1ubuntu8.17" }, "cves": [ { "cve": "CVE-2026-16742", "url": "https://ubuntu.com/security/CVE-2026-16742", "cve_description": "local privilege escalation via missing home-record signature verification on the authenticate path", "cve_priority": "medium", "cve_public_date": "2026-08-10" }, { "cve": "CVE-2026-15059", "url": "https://ubuntu.com/security/CVE-2026-15059", "cve_description": "unprivileged users can terminate arbitrary processes", "cve_priority": "medium", "cve_public_date": "2026-08-10" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-16742", "url": "https://ubuntu.com/security/CVE-2026-16742", "cve_description": "local privilege escalation via missing home-record signature verification on the authenticate path", "cve_priority": "medium", "cve_public_date": "2026-08-10" }, { "cve": "CVE-2026-15059", "url": "https://ubuntu.com/security/CVE-2026-15059", "cve_description": "unprivileged users can terminate arbitrary processes", "cve_priority": "medium", "cve_public_date": "2026-08-10" } ], "log": [ "", " * SECURITY UPDATE: systemd-homed: local privilege escalation via missing home-record signature verification on the authenticate path", " - homed-fix-verification-of-local-identity-file.patch", " - homed-verify-privileged-worker-changes.patch", " - CVE-2026-16742", " * SECURITY UPDATE: systemd-oomd: unprivileged users can terminate arbitrary processes", " - CVE-2026-15059.patch", " - CVE-2026-15059", " * SECURITY UPDATE: systemd: crash triggered by unprivileged users in various components via Varlink", " - GHSA-5rm9-cc37-35gq.patch", " - GHSA-5rm9-cc37-35gq", " * SECURITY UPDATE: udev: local root execution via malicious iscsi devices and unsanitized kernel output", " - GHSA-m8q3-73v4-wvg7.patch", " - GHSA-m8q3-73v4-wvg7", " * SECURITY UPDATE: crash triggered by unprivileged users in various components via D-Bus/Varlink", " - core-limit-the-number-of-units-that-can-be-requested-over.patch", " - dbus-limit-the-number-of-env-variables-to-something-reaso.patch", " - dbus-manager-limit-the-number-of-states-patterns-per-quer.patch", " - resolve-enforce-the-search-domain-limit-earlier.patch", " - resolve-limit-the-number-NTAs-to-something-sensible.patch", " - sd-bus-store-the-strv-size-when-extending-it.patch", " - sd-json-user-record-store-the-strv-size-when-extending-it.patch", " - GHSA-3jgj-3phh-hx5j", "" ], "package": "systemd", "version": "255.4-1ubuntu8.17", "urgency": "medium", "distributions": "noble-security", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Tue, 28 Jul 2026 11:04:45 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "systemd-resolved", "from_version": { "source_package_name": "systemd", "source_package_version": "255.4-1ubuntu8.16", "version": "255.4-1ubuntu8.16" }, "to_version": { "source_package_name": "systemd", "source_package_version": "255.4-1ubuntu8.17", "version": "255.4-1ubuntu8.17" }, "cves": [ { "cve": "CVE-2026-16742", "url": "https://ubuntu.com/security/CVE-2026-16742", "cve_description": "local privilege escalation via missing home-record signature verification on the authenticate path", "cve_priority": "medium", "cve_public_date": "2026-08-10" }, { "cve": "CVE-2026-15059", "url": "https://ubuntu.com/security/CVE-2026-15059", "cve_description": "unprivileged users can terminate arbitrary processes", "cve_priority": "medium", "cve_public_date": "2026-08-10" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-16742", "url": "https://ubuntu.com/security/CVE-2026-16742", "cve_description": "local privilege escalation via missing home-record signature verification on the authenticate path", "cve_priority": "medium", "cve_public_date": "2026-08-10" }, { "cve": "CVE-2026-15059", "url": "https://ubuntu.com/security/CVE-2026-15059", "cve_description": "unprivileged users can terminate arbitrary processes", "cve_priority": "medium", "cve_public_date": "2026-08-10" } ], "log": [ "", " * SECURITY UPDATE: systemd-homed: local privilege escalation via missing home-record signature verification on the authenticate path", " - homed-fix-verification-of-local-identity-file.patch", " - homed-verify-privileged-worker-changes.patch", " - CVE-2026-16742", " * SECURITY UPDATE: systemd-oomd: unprivileged users can terminate arbitrary processes", " - CVE-2026-15059.patch", " - CVE-2026-15059", " * SECURITY UPDATE: systemd: crash triggered by unprivileged users in various components via Varlink", " - GHSA-5rm9-cc37-35gq.patch", " - GHSA-5rm9-cc37-35gq", " * SECURITY UPDATE: udev: local root execution via malicious iscsi devices and unsanitized kernel output", " - GHSA-m8q3-73v4-wvg7.patch", " - GHSA-m8q3-73v4-wvg7", " * SECURITY UPDATE: crash triggered by unprivileged users in various components via D-Bus/Varlink", " - core-limit-the-number-of-units-that-can-be-requested-over.patch", " - dbus-limit-the-number-of-env-variables-to-something-reaso.patch", " - dbus-manager-limit-the-number-of-states-patterns-per-quer.patch", " - resolve-enforce-the-search-domain-limit-earlier.patch", " - resolve-limit-the-number-NTAs-to-something-sensible.patch", " - sd-bus-store-the-strv-size-when-extending-it.patch", " - sd-json-user-record-store-the-strv-size-when-extending-it.patch", " - GHSA-3jgj-3phh-hx5j", "" ], "package": "systemd", "version": "255.4-1ubuntu8.17", "urgency": "medium", "distributions": "noble-security", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Tue, 28 Jul 2026 11:04:45 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "systemd-sysv", "from_version": { "source_package_name": "systemd", "source_package_version": "255.4-1ubuntu8.16", "version": "255.4-1ubuntu8.16" }, "to_version": { "source_package_name": "systemd", "source_package_version": "255.4-1ubuntu8.17", "version": "255.4-1ubuntu8.17" }, "cves": [ { "cve": "CVE-2026-16742", "url": "https://ubuntu.com/security/CVE-2026-16742", "cve_description": "local privilege escalation via missing home-record signature verification on the authenticate path", "cve_priority": "medium", "cve_public_date": "2026-08-10" }, { "cve": "CVE-2026-15059", "url": "https://ubuntu.com/security/CVE-2026-15059", "cve_description": "unprivileged users can terminate arbitrary processes", "cve_priority": "medium", "cve_public_date": "2026-08-10" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-16742", "url": "https://ubuntu.com/security/CVE-2026-16742", "cve_description": "local privilege escalation via missing home-record signature verification on the authenticate path", "cve_priority": "medium", "cve_public_date": "2026-08-10" }, { "cve": "CVE-2026-15059", "url": "https://ubuntu.com/security/CVE-2026-15059", "cve_description": "unprivileged users can terminate arbitrary processes", "cve_priority": "medium", "cve_public_date": "2026-08-10" } ], "log": [ "", " * SECURITY UPDATE: systemd-homed: local privilege escalation via missing home-record signature verification on the authenticate path", " - homed-fix-verification-of-local-identity-file.patch", " - homed-verify-privileged-worker-changes.patch", " - CVE-2026-16742", " * SECURITY UPDATE: systemd-oomd: unprivileged users can terminate arbitrary processes", " - CVE-2026-15059.patch", " - CVE-2026-15059", " * SECURITY UPDATE: systemd: crash triggered by unprivileged users in various components via Varlink", " - GHSA-5rm9-cc37-35gq.patch", " - GHSA-5rm9-cc37-35gq", " * SECURITY UPDATE: udev: local root execution via malicious iscsi devices and unsanitized kernel output", " - GHSA-m8q3-73v4-wvg7.patch", " - GHSA-m8q3-73v4-wvg7", " * SECURITY UPDATE: crash triggered by unprivileged users in various components via D-Bus/Varlink", " - core-limit-the-number-of-units-that-can-be-requested-over.patch", " - dbus-limit-the-number-of-env-variables-to-something-reaso.patch", " - dbus-manager-limit-the-number-of-states-patterns-per-quer.patch", " - resolve-enforce-the-search-domain-limit-earlier.patch", " - resolve-limit-the-number-NTAs-to-something-sensible.patch", " - sd-bus-store-the-strv-size-when-extending-it.patch", " - sd-json-user-record-store-the-strv-size-when-extending-it.patch", " - GHSA-3jgj-3phh-hx5j", "" ], "package": "systemd", "version": "255.4-1ubuntu8.17", "urgency": "medium", "distributions": "noble-security", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Tue, 28 Jul 2026 11:04:45 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "systemd-timesyncd", "from_version": { "source_package_name": "systemd", "source_package_version": "255.4-1ubuntu8.16", "version": "255.4-1ubuntu8.16" }, "to_version": { "source_package_name": "systemd", "source_package_version": "255.4-1ubuntu8.17", "version": "255.4-1ubuntu8.17" }, "cves": [ { "cve": "CVE-2026-16742", "url": "https://ubuntu.com/security/CVE-2026-16742", "cve_description": "local privilege escalation via missing home-record signature verification on the authenticate path", "cve_priority": "medium", "cve_public_date": "2026-08-10" }, { "cve": "CVE-2026-15059", "url": "https://ubuntu.com/security/CVE-2026-15059", "cve_description": "unprivileged users can terminate arbitrary processes", "cve_priority": "medium", "cve_public_date": "2026-08-10" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-16742", "url": "https://ubuntu.com/security/CVE-2026-16742", "cve_description": "local privilege escalation via missing home-record signature verification on the authenticate path", "cve_priority": "medium", "cve_public_date": "2026-08-10" }, { "cve": "CVE-2026-15059", "url": "https://ubuntu.com/security/CVE-2026-15059", "cve_description": "unprivileged users can terminate arbitrary processes", "cve_priority": "medium", "cve_public_date": "2026-08-10" } ], "log": [ "", " * SECURITY UPDATE: systemd-homed: local privilege escalation via missing home-record signature verification on the authenticate path", " - homed-fix-verification-of-local-identity-file.patch", " - homed-verify-privileged-worker-changes.patch", " - CVE-2026-16742", " * SECURITY UPDATE: systemd-oomd: unprivileged users can terminate arbitrary processes", " - CVE-2026-15059.patch", " - CVE-2026-15059", " * SECURITY UPDATE: systemd: crash triggered by unprivileged users in various components via Varlink", " - GHSA-5rm9-cc37-35gq.patch", " - GHSA-5rm9-cc37-35gq", " * SECURITY UPDATE: udev: local root execution via malicious iscsi devices and unsanitized kernel output", " - GHSA-m8q3-73v4-wvg7.patch", " - GHSA-m8q3-73v4-wvg7", " * SECURITY UPDATE: crash triggered by unprivileged users in various components via D-Bus/Varlink", " - core-limit-the-number-of-units-that-can-be-requested-over.patch", " - dbus-limit-the-number-of-env-variables-to-something-reaso.patch", " - dbus-manager-limit-the-number-of-states-patterns-per-quer.patch", " - resolve-enforce-the-search-domain-limit-earlier.patch", " - resolve-limit-the-number-NTAs-to-something-sensible.patch", " - sd-bus-store-the-strv-size-when-extending-it.patch", " - sd-json-user-record-store-the-strv-size-when-extending-it.patch", " - GHSA-3jgj-3phh-hx5j", "" ], "package": "systemd", "version": "255.4-1ubuntu8.17", "urgency": "medium", "distributions": "noble-security", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Tue, 28 Jul 2026 11:04:45 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "udev", "from_version": { "source_package_name": "systemd", "source_package_version": "255.4-1ubuntu8.16", "version": "255.4-1ubuntu8.16" }, "to_version": { "source_package_name": "systemd", "source_package_version": "255.4-1ubuntu8.17", "version": "255.4-1ubuntu8.17" }, "cves": [ { "cve": "CVE-2026-16742", "url": "https://ubuntu.com/security/CVE-2026-16742", "cve_description": "local privilege escalation via missing home-record signature verification on the authenticate path", "cve_priority": "medium", "cve_public_date": "2026-08-10" }, { "cve": "CVE-2026-15059", "url": "https://ubuntu.com/security/CVE-2026-15059", "cve_description": "unprivileged users can terminate arbitrary processes", "cve_priority": "medium", "cve_public_date": "2026-08-10" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-16742", "url": "https://ubuntu.com/security/CVE-2026-16742", "cve_description": "local privilege escalation via missing home-record signature verification on the authenticate path", "cve_priority": "medium", "cve_public_date": "2026-08-10" }, { "cve": "CVE-2026-15059", "url": "https://ubuntu.com/security/CVE-2026-15059", "cve_description": "unprivileged users can terminate arbitrary processes", "cve_priority": "medium", "cve_public_date": "2026-08-10" } ], "log": [ "", " * SECURITY UPDATE: systemd-homed: local privilege escalation via missing home-record signature verification on the authenticate path", " - homed-fix-verification-of-local-identity-file.patch", " - homed-verify-privileged-worker-changes.patch", " - CVE-2026-16742", " * SECURITY UPDATE: systemd-oomd: unprivileged users can terminate arbitrary processes", " - CVE-2026-15059.patch", " - CVE-2026-15059", " * SECURITY UPDATE: systemd: crash triggered by unprivileged users in various components via Varlink", " - GHSA-5rm9-cc37-35gq.patch", " - GHSA-5rm9-cc37-35gq", " * SECURITY UPDATE: udev: local root execution via malicious iscsi devices and unsanitized kernel output", " - GHSA-m8q3-73v4-wvg7.patch", " - GHSA-m8q3-73v4-wvg7", " * SECURITY UPDATE: crash triggered by unprivileged users in various components via D-Bus/Varlink", " - core-limit-the-number-of-units-that-can-be-requested-over.patch", " - dbus-limit-the-number-of-env-variables-to-something-reaso.patch", " - dbus-manager-limit-the-number-of-states-patterns-per-quer.patch", " - resolve-enforce-the-search-domain-limit-earlier.patch", " - resolve-limit-the-number-NTAs-to-something-sensible.patch", " - sd-bus-store-the-strv-size-when-extending-it.patch", " - sd-json-user-record-store-the-strv-size-when-extending-it.patch", " - GHSA-3jgj-3phh-hx5j", "" ], "package": "systemd", "version": "255.4-1ubuntu8.17", "urgency": "medium", "distributions": "noble-security", "launchpad_bugs_fixed": [], "author": "Nick Rosbrook ", "date": "Tue, 28 Jul 2026 11:04:45 -0400" } ], "notes": null, "is_version_downgrade": false } ], "snap": [] }, "added": { "deb": [], "snap": [] }, "removed": { "deb": [], "snap": [] }, "notes": "Changelog diff for Ubuntu 24.04 noble image from daily image serial 20260807 to 20260811", "from_series": "noble", "to_series": "noble", "from_serial": "20260807", "to_serial": "20260811", "from_manifest_filename": "daily_manifest.previous", "to_manifest_filename": "manifest.current" }