{
"summary": {
"snap": {
"added": [],
"removed": [],
"diff": []
},
"deb": {
"added": [],
"removed": [],
"diff": [
"dracut-install",
"fwupd",
"initramfs-tools",
"initramfs-tools-bin",
"initramfs-tools-core",
"libfwupd2",
"libopeniscsiusr",
"libxml2",
"open-iscsi",
"pollinate"
]
}
},
"diff": {
"deb": [
{
"name": "dracut-install",
"from_version": {
"source_package_name": "dracut",
"source_package_version": "103-1ubuntu3",
"version": "103-1ubuntu3"
},
"to_version": {
"source_package_name": "dracut",
"source_package_version": "103-1ubuntu3.1",
"version": "103-1ubuntu3.1"
},
"cves": [],
"launchpad_bugs_fixed": [
2095518
],
"changes": [
{
"cves": [],
"log": [
"",
" * Fix missing compressed blobs that match wildcard fwpath (LP: #2095518)",
""
],
"package": "dracut",
"version": "103-1ubuntu3.1",
"urgency": "medium",
"distributions": "oracular",
"launchpad_bugs_fixed": [
2095518
],
"author": "You-Sheng Yang <vicamo@gmail.com>",
"date": "Thu, 13 Feb 2025 15:16:38 +0100"
}
],
"notes": null
},
{
"name": "fwupd",
"from_version": {
"source_package_name": "fwupd",
"source_package_version": "1.9.27-0ubuntu1~24.10.1",
"version": "1.9.27-0ubuntu1~24.10.1"
},
"to_version": {
"source_package_name": "fwupd",
"source_package_version": "1.9.28-0ubuntu1~24.10.1",
"version": "1.9.28-0ubuntu1~24.10.1"
},
"cves": [],
"launchpad_bugs_fixed": [
2097728
],
"changes": [
{
"cves": [],
"log": [
"",
" * New upstream version (1.9.28)",
" - Fix updating dell dock PD F/W (LP: #2097728)",
""
],
"package": "fwupd",
"version": "1.9.28-0ubuntu1~24.10.1",
"urgency": "medium",
"distributions": "oracular",
"launchpad_bugs_fixed": [
2097728
],
"author": "Mario Limonciello <superm1@gmail.com>",
"date": "Mon, 10 Feb 2025 08:19:44 -0600"
}
],
"notes": null
},
{
"name": "initramfs-tools",
"from_version": {
"source_package_name": "initramfs-tools",
"source_package_version": "0.142ubuntu34.1",
"version": "0.142ubuntu34.1"
},
"to_version": {
"source_package_name": "initramfs-tools",
"source_package_version": "0.142ubuntu34.2",
"version": "0.142ubuntu34.2"
},
"cves": [],
"launchpad_bugs_fixed": [
2091904
],
"changes": [
{
"cves": [],
"log": [
"",
" * configure_networking: Configure IPv4 or IPv6 based on iBFT IP address",
" (LP: #2091904)",
" * test:",
" - support setting a disk label in build_fs_ext2",
" - test-common: move disc logic out of _run_qemu",
" - move wait_for_server_startup to test-common",
" - check for QEMU PID in wait_for_server_startup",
" - Add qemu-net-iscsi autopkgtest for iBFT test cases",
""
],
"package": "initramfs-tools",
"version": "0.142ubuntu34.2",
"urgency": "medium",
"distributions": "oracular",
"launchpad_bugs_fixed": [
2091904
],
"author": "Benjamin Drung <bdrung@ubuntu.com>",
"date": "Fri, 07 Feb 2025 11:03:37 +0100"
}
],
"notes": null
},
{
"name": "initramfs-tools-bin",
"from_version": {
"source_package_name": "initramfs-tools",
"source_package_version": "0.142ubuntu34.1",
"version": "0.142ubuntu34.1"
},
"to_version": {
"source_package_name": "initramfs-tools",
"source_package_version": "0.142ubuntu34.2",
"version": "0.142ubuntu34.2"
},
"cves": [],
"launchpad_bugs_fixed": [
2091904
],
"changes": [
{
"cves": [],
"log": [
"",
" * configure_networking: Configure IPv4 or IPv6 based on iBFT IP address",
" (LP: #2091904)",
" * test:",
" - support setting a disk label in build_fs_ext2",
" - test-common: move disc logic out of _run_qemu",
" - move wait_for_server_startup to test-common",
" - check for QEMU PID in wait_for_server_startup",
" - Add qemu-net-iscsi autopkgtest for iBFT test cases",
""
],
"package": "initramfs-tools",
"version": "0.142ubuntu34.2",
"urgency": "medium",
"distributions": "oracular",
"launchpad_bugs_fixed": [
2091904
],
"author": "Benjamin Drung <bdrung@ubuntu.com>",
"date": "Fri, 07 Feb 2025 11:03:37 +0100"
}
],
"notes": null
},
{
"name": "initramfs-tools-core",
"from_version": {
"source_package_name": "initramfs-tools",
"source_package_version": "0.142ubuntu34.1",
"version": "0.142ubuntu34.1"
},
"to_version": {
"source_package_name": "initramfs-tools",
"source_package_version": "0.142ubuntu34.2",
"version": "0.142ubuntu34.2"
},
"cves": [],
"launchpad_bugs_fixed": [
2091904
],
"changes": [
{
"cves": [],
"log": [
"",
" * configure_networking: Configure IPv4 or IPv6 based on iBFT IP address",
" (LP: #2091904)",
" * test:",
" - support setting a disk label in build_fs_ext2",
" - test-common: move disc logic out of _run_qemu",
" - move wait_for_server_startup to test-common",
" - check for QEMU PID in wait_for_server_startup",
" - Add qemu-net-iscsi autopkgtest for iBFT test cases",
""
],
"package": "initramfs-tools",
"version": "0.142ubuntu34.2",
"urgency": "medium",
"distributions": "oracular",
"launchpad_bugs_fixed": [
2091904
],
"author": "Benjamin Drung <bdrung@ubuntu.com>",
"date": "Fri, 07 Feb 2025 11:03:37 +0100"
}
],
"notes": null
},
{
"name": "libfwupd2",
"from_version": {
"source_package_name": "fwupd",
"source_package_version": "1.9.27-0ubuntu1~24.10.1",
"version": "1.9.27-0ubuntu1~24.10.1"
},
"to_version": {
"source_package_name": "fwupd",
"source_package_version": "1.9.28-0ubuntu1~24.10.1",
"version": "1.9.28-0ubuntu1~24.10.1"
},
"cves": [],
"launchpad_bugs_fixed": [
2097728
],
"changes": [
{
"cves": [],
"log": [
"",
" * New upstream version (1.9.28)",
" - Fix updating dell dock PD F/W (LP: #2097728)",
""
],
"package": "fwupd",
"version": "1.9.28-0ubuntu1~24.10.1",
"urgency": "medium",
"distributions": "oracular",
"launchpad_bugs_fixed": [
2097728
],
"author": "Mario Limonciello <superm1@gmail.com>",
"date": "Mon, 10 Feb 2025 08:19:44 -0600"
}
],
"notes": null
},
{
"name": "libopeniscsiusr",
"from_version": {
"source_package_name": "open-iscsi",
"source_package_version": "2.1.10-1ubuntu1",
"version": "2.1.10-1ubuntu1"
},
"to_version": {
"source_package_name": "open-iscsi",
"source_package_version": "2.1.10-1ubuntu1.1",
"version": "2.1.10-1ubuntu1.1"
},
"cves": [],
"launchpad_bugs_fixed": [
2097808
],
"changes": [
{
"cves": [],
"log": [
"",
" * IPv6 support for iBFT iSCSI boot (LP: #2097808)",
" - d/p/lp2097808-IPv6-support-for-iBFT-iSCSI-boot-493.patch",
""
],
"package": "open-iscsi",
"version": "2.1.10-1ubuntu1.1",
"urgency": "medium",
"distributions": "oracular",
"launchpad_bugs_fixed": [
2097808
],
"author": "Chengen Du <chengen.du@canonical.com>",
"date": "Tue, 11 Feb 2025 03:28:23 +0000"
}
],
"notes": null
},
{
"name": "libxml2",
"from_version": {
"source_package_name": "libxml2",
"source_package_version": "2.12.7+dfsg-3ubuntu0.1",
"version": "2.12.7+dfsg-3ubuntu0.1"
},
"to_version": {
"source_package_name": "libxml2",
"source_package_version": "2.12.7+dfsg-3ubuntu0.2",
"version": "2.12.7+dfsg-3ubuntu0.2"
},
"cves": [
{
"cve": "CVE-2024-56171",
"url": "https://ubuntu.com/security/CVE-2024-56171",
"cve_description": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.",
"cve_priority": "medium",
"cve_public_date": "2025-02-18 22:15:00 UTC"
},
{
"cve": "CVE-2025-24928",
"url": "https://ubuntu.com/security/CVE-2025-24928",
"cve_description": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.",
"cve_priority": "medium",
"cve_public_date": "2025-02-18 23:15:00 UTC"
},
{
"cve": "CVE-2025-27113",
"url": "https://ubuntu.com/security/CVE-2025-27113",
"cve_description": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.",
"cve_priority": "medium",
"cve_public_date": "2025-02-18 23:15:00 UTC"
}
],
"launchpad_bugs_fixed": [],
"changes": [
{
"cves": [
{
"cve": "CVE-2024-56171",
"url": "https://ubuntu.com/security/CVE-2024-56171",
"cve_description": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used.",
"cve_priority": "medium",
"cve_public_date": "2025-02-18 22:15:00 UTC"
},
{
"cve": "CVE-2025-24928",
"url": "https://ubuntu.com/security/CVE-2025-24928",
"cve_description": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.",
"cve_priority": "medium",
"cve_public_date": "2025-02-18 23:15:00 UTC"
},
{
"cve": "CVE-2025-27113",
"url": "https://ubuntu.com/security/CVE-2025-27113",
"cve_description": "libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.",
"cve_priority": "medium",
"cve_public_date": "2025-02-18 23:15:00 UTC"
}
],
"log": [
"",
" * SECURITY UPDATE: use-after-free",
" - debian/patches/CVE-2024-56171.patch: Fix use-after-free after",
" xmlSchemaItemListAdd.",
" - CVE-2024-56171",
" * SECURITY UPDATE: stack-based buffer overflow",
" - debian/patches/CVE-2025-24928-pre1.patch: Check for NULL node->name",
" in xmlSnprintfElements.",
" - debian/patches/CVE-2025-24928.patch: Fix stack-buffer-overflow in",
" xmlSnprintfElements.",
" - CVE-2025-24928",
" * SECURITY UPDATE: NULL pointer dereference",
" - debian/patches/CVE-2025-27113.patch: Fix compilation of explicit",
" child axis.",
" - CVE-2025-27113",
""
],
"package": "libxml2",
"version": "2.12.7+dfsg-3ubuntu0.2",
"urgency": "medium",
"distributions": "oracular-security",
"launchpad_bugs_fixed": [],
"author": "Fabian Toepfer <fabian.toepfer@canonical.com>",
"date": "Thu, 20 Feb 2025 13:23:34 +0100"
}
],
"notes": null
},
{
"name": "open-iscsi",
"from_version": {
"source_package_name": "open-iscsi",
"source_package_version": "2.1.10-1ubuntu1",
"version": "2.1.10-1ubuntu1"
},
"to_version": {
"source_package_name": "open-iscsi",
"source_package_version": "2.1.10-1ubuntu1.1",
"version": "2.1.10-1ubuntu1.1"
},
"cves": [],
"launchpad_bugs_fixed": [
2097808
],
"changes": [
{
"cves": [],
"log": [
"",
" * IPv6 support for iBFT iSCSI boot (LP: #2097808)",
" - d/p/lp2097808-IPv6-support-for-iBFT-iSCSI-boot-493.patch",
""
],
"package": "open-iscsi",
"version": "2.1.10-1ubuntu1.1",
"urgency": "medium",
"distributions": "oracular",
"launchpad_bugs_fixed": [
2097808
],
"author": "Chengen Du <chengen.du@canonical.com>",
"date": "Tue, 11 Feb 2025 03:28:23 +0000"
}
],
"notes": null
},
{
"name": "pollinate",
"from_version": {
"source_package_name": "pollinate",
"source_package_version": "4.33-4ubuntu1",
"version": "4.33-4ubuntu1"
},
"to_version": {
"source_package_name": "pollinate",
"source_package_version": "4.33-4ubuntu1.1",
"version": "4.33-4ubuntu1.1"
},
"cves": [],
"launchpad_bugs_fixed": [
2097596
],
"changes": [
{
"cves": [],
"log": [
"",
" * Relicensing check_pollen (LP: #2097596)",
" - d/p/check-pollen-to-pollinate.patch: update to match latest upstream",
" - d/copyright: drop AGPL stanza",
""
],
"package": "pollinate",
"version": "4.33-4ubuntu1.1",
"urgency": "medium",
"distributions": "oracular",
"launchpad_bugs_fixed": [
2097596
],
"author": "Christian Ehrhardt <christian.ehrhardt@canonical.com>",
"date": "Fri, 07 Feb 2025 09:14:31 +0100"
}
],
"notes": null
}
],
"snap": []
},
"added": {
"deb": [],
"snap": []
},
"removed": {
"deb": [],
"snap": []
},
"notes": "Changelog diff for Ubuntu 24.10 oracular image from release image serial 20250224 to 20250227",
"from_series": "oracular",
"to_series": "oracular",
"from_serial": "20250224",
"to_serial": "20250227",
"from_manifest_filename": "release_manifest.previous",
"to_manifest_filename": "manifest.current"
}