{ "summary": { "snap": { "added": [], "removed": [], "diff": [] }, "deb": { "added": [], "removed": [], "diff": [ "libsqlite3-0", "wget" ] } }, "diff": { "deb": [ { "name": "libsqlite3-0", "from_version": { "source_package_name": "sqlite3", "source_package_version": "3.37.2-2ubuntu0.6", "version": "3.37.2-2ubuntu0.6" }, "to_version": { "source_package_name": "sqlite3", "source_package_version": "3.37.2-2ubuntu0.7", "version": "3.37.2-2ubuntu0.7" }, "cves": [ { "cve": "CVE-2026-50812", "url": "https://ubuntu.com/security/CVE-2026-50812", "cve_description": "A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and SQLite trunk builds before check-in e807d4e3798efd53 allows an attacker who can supply a malformed changeset blob to cause a denial of service. The issue occurs when sqlite3changeset_apply_v3() applies a corrupt changeset and reaches sqlite3_value_type() with a NULL sqlite3_value pointer.", "cve_priority": "medium", "cve_public_date": "2026-07-08 18:16:00 UTC" }, { "cve": "CVE-2026-50813", "url": "https://ubuntu.com/security/CVE-2026-50813", "cve_description": "An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset concat/changegroup merge path", "cve_priority": "medium", "cve_public_date": "2026-07-08 18:16:00 UTC" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-50812", "url": "https://ubuntu.com/security/CVE-2026-50812", "cve_description": "A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and SQLite trunk builds before check-in e807d4e3798efd53 allows an attacker who can supply a malformed changeset blob to cause a denial of service. The issue occurs when sqlite3changeset_apply_v3() applies a corrupt changeset and reaches sqlite3_value_type() with a NULL sqlite3_value pointer.", "cve_priority": "medium", "cve_public_date": "2026-07-08 18:16:00 UTC" }, { "cve": "CVE-2026-50813", "url": "https://ubuntu.com/security/CVE-2026-50813", "cve_description": "An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset concat/changegroup merge path", "cve_priority": "medium", "cve_public_date": "2026-07-08 18:16:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: NULL pointer dereference in the SQLite Session Extension", " - debian/patches/CVE-2026-50812.patch: Fix a bug causing the session module", " to dereference a NULL pointer when applying a corrupt changeset. in", " ext/session/session9.test, ext/session/sqlite3session.c.", " - CVE-2026-50812", " * SECURITY UPDATE: sensitive information disclosure via the Session Extension", " - debian/patches/CVE-2026-50813.patch: Fix a buffer overread in the session", " module that could occur when processing a corrupt changeset. in", " ext/session/sessionC.test, ext/session/sqlite3session.c.", " - CVE-2026-50813", "" ], "package": "sqlite3", "version": "3.37.2-2ubuntu0.7", "urgency": "medium", "distributions": "jammy-security", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Thu, 16 Jul 2026 13:13:10 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "wget", "from_version": { "source_package_name": "wget", "source_package_version": "1.21.2-2ubuntu1.3", "version": "1.21.2-2ubuntu1.3" }, "to_version": { "source_package_name": "wget", "source_package_version": "1.21.2-2ubuntu1.4", "version": "1.21.2-2ubuntu1.4" }, "cves": [ { "cve": "CVE-2026-15146", "url": "https://ubuntu.com/security/CVE-2026-15146", "cve_description": "GNU Wget does not validate the IP address provided by an FTP PASV response while operating in FTP passive mode. A malicious FTP server, or an HTTP server that redirects to an FTP URL, can exploit this behavior to redirect Wget’s data connection to an arbitrary IP address and port. This allows an attacker to forge server-side requests (SSRF) from the machine running Wget, potentially accessing localhost services or internal network resources.", "cve_priority": "medium", "cve_public_date": "2026-07-10 19:17:00 UTC" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-15146", "url": "https://ubuntu.com/security/CVE-2026-15146", "cve_description": "GNU Wget does not validate the IP address provided by an FTP PASV response while operating in FTP passive mode. A malicious FTP server, or an HTTP server that redirects to an FTP URL, can exploit this behavior to redirect Wget’s data connection to an arbitrary IP address and port. This allows an attacker to forge server-side requests (SSRF) from the machine running Wget, potentially accessing localhost services or internal network resources.", "cve_priority": "medium", "cve_public_date": "2026-07-10 19:17:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: SSRF forgery in FTP.", " - debian/patches/CVE-2026-15146.patch: Validate PASV/LPSV response address", " against control connection peer in src/ftp-basic.c", " - CVE-2026-15146", "" ], "package": "wget", "version": "1.21.2-2ubuntu1.4", "urgency": "medium", "distributions": "jammy-security", "launchpad_bugs_fixed": [], "author": "Kyle Kernick ", "date": "Thu, 16 Jul 2026 10:38:47 -0600" } ], "notes": null, "is_version_downgrade": false } ], "snap": [] }, "added": { "deb": [], "snap": [] }, "removed": { "deb": [], "snap": [] }, "notes": "Changelog diff for Ubuntu 22.04 jammy image from release image serial 20260716 to 20260720", "from_series": "jammy", "to_series": "jammy", "from_serial": "20260716", "to_serial": "20260720", "from_manifest_filename": "release_manifest.previous", "to_manifest_filename": "manifest.current" }