{ "summary": { "snap": { "added": [], "removed": [], "diff": [] }, "deb": { "added": [ "libupki-openssl1" ], "removed": [], "diff": [ "apparmor", "curl", "diffutils", "dpkg", "libapparmor1", "libcurl4t64", "libpam-systemd", "libpython3.14-minimal", "libpython3.14-stdlib", "libsystemd-shared", "libsystemd0", "libudev1", "python3-distupgrade", "python3.14", "python3.14-minimal", "rust-coreutils", "sudo-rs", "systemd", "systemd-resolved", "systemd-sysv", "ubuntu-cloud-minimal", "ubuntu-drivers-common", "ubuntu-release-upgrader-core", "udev" ] } }, "diff": { "deb": [ { "name": "apparmor", "from_version": { "source_package_name": "apparmor", "source_package_version": "6.0.0~alpha1-0ubuntu1", "version": "6.0.0~alpha1-0ubuntu1" }, "to_version": { "source_package_name": "apparmor", "source_package_version": "6.0.0~alpha1-0ubuntu2", "version": "6.0.0~alpha1-0ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [ 2166999, 2166999, 2167200 ], "changes": [ { "cves": [], "log": [ "", " * Add and update patches to fix loupe (LP: #2166999):", " - d/p/u/0001-profiles-add-a-glycin-tunable.patch", " - d/p/u/0002-profiles-begin-adding-abstractions-for-the-XDG-Deskt.patch", " - d/p/u/0003-profiles-add-dconf-dbus-write-abstraction.patch", " - d/p/u/0003-rewrite-the-loupe-profile.patch ->", " d/p/u/0004-rewrite-the-loupe-profile.patch", " * Add patch to fix glycin bwrap (LP: #2166999):", " - d/p/u/fix_glycin_bwrap.patch", " * Add patch to fix samba-rpcd SAMR socket access (LP: #2167200):", " - d/p/u/samba-rpcd-add-SAMR-socket-permissions.patch", "" ], "package": "apparmor", "version": "6.0.0~alpha1-0ubuntu2", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2166999, 2166999, 2167200 ], "author": "Ryan Lee ", "date": "Wed, 16 Sep 2026 12:57:36 -0700" } ], "notes": null, "is_version_downgrade": false }, { "name": "curl", "from_version": { "source_package_name": "curl", "source_package_version": "8.20.0-2ubuntu3", "version": "8.20.0-2ubuntu3" }, "to_version": { "source_package_name": "curl", "source_package_version": "8.20.0-2ubuntu10", "version": "8.20.0-2ubuntu10" }, "cves": [], "launchpad_bugs_fixed": [ 2167691 ], "changes": [ { "cves": [], "log": [ "", " * Fix typo that inadvertently enabled upki -dev dependency on i386", "" ], "package": "curl", "version": "8.20.0-2ubuntu10", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Tue, 22 Sep 2026 11:20:58 +0200" }, { "cves": [], "log": [ "", " * REVERT broken 8.20.0-2ubuntu4 SECURITY upload", " - `checksrc` fixes in 8.20.0-2ubuntu7 were ok", " - but CVE 2026-8927 was incorrectly backported and the tests failed", " - see LP #2167779 for more details", " * upki fixes:", " - libcurl4-openssl-dev: depend on libupki-openssl-dev", " - fix #if defined() to ifdef", " - fix old style c issue in autopkgtest checksrc", "" ], "package": "curl", "version": "8.20.0-2ubuntu9", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Sun, 20 Sep 2026 00:08:57 +0200" }, { "cves": [], "log": [ "", " * Include upki integration for OpenSSL build (LP: #2167691),", " excluding s390x (big endian) and i386 (no upki)", " * fix checksrc-warning from cve fix", "" ], "package": "curl", "version": "8.20.0-2ubuntu7", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2167691 ], "author": "Julian Andres Klode ", "date": "Fri, 18 Sep 2026 17:50:35 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "diffutils", "from_version": { "source_package_name": "diffutils", "source_package_version": "1:3.12-1", "version": "1:3.12-1" }, "to_version": { "source_package_name": "diffutils", "source_package_version": "1:3.12-1ubuntu2", "version": "1:3.12-1ubuntu2" }, "cves": [ { "cve": "CVE-2026-53910", "url": "https://ubuntu.com/security/CVE-2026-53910", "cve_description": "diff3 tool from GNU diffutils is vulnerable to a heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations. Incorrect arithmetic in mapping line ranges can result in corrupted values being used for memory allocation and loop bounds. When processing crafted diff output, these overflows may cause the application to allocate insufficient memory and subsequently perform out‑of‑bounds writes during internal processing.  An attacker who can control the output of the diff program used by diff3 (e.g. via --diff-program pointing to a malicious script) can trigger out-of-bounds writes, resulting in a crash and potentially remote code execution depending on the environment. This issue has been fixed in commit 9ff04d5b84743e331e80b589335a52c5480d1815  NOTE: The project maintainers claim that this is not a security issue. They state that the worst outcome this issue can cause is a crash of diff and that it cannot be used to escalate privileges.", "cve_priority": "medium", "cve_public_date": "2026-07-22 14:17:00 UTC" } ], "launchpad_bugs_fixed": [ 2148301, 2166741 ], "changes": [ { "cves": [], "log": [ "", " * Use GNU chmod and rm for test cleanup to work around the rust-coreutils", " EOVERFLOW issue affecting 32-bit builds (LP: #2148301, LP: #2166741).", " * Build-depend on gnu-coreutils.", "" ], "package": "diffutils", "version": "1:3.12-1ubuntu2", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2148301, 2166741 ], "author": "Zineb Zaadoud ", "date": "Mon, 14 Sep 2026 19:59:28 +0200" }, { "cves": [ { "cve": "CVE-2026-53910", "url": "https://ubuntu.com/security/CVE-2026-53910", "cve_description": "diff3 tool from GNU diffutils is vulnerable to a heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations. Incorrect arithmetic in mapping line ranges can result in corrupted values being used for memory allocation and loop bounds. When processing crafted diff output, these overflows may cause the application to allocate insufficient memory and subsequently perform out‑of‑bounds writes during internal processing.  An attacker who can control the output of the diff program used by diff3 (e.g. via --diff-program pointing to a malicious script) can trigger out-of-bounds writes, resulting in a crash and potentially remote code execution depending on the environment. This issue has been fixed in commit 9ff04d5b84743e331e80b589335a52c5480d1815  NOTE: The project maintainers claim that this is not a security issue. They state that the worst outcome this issue can cause is a crash of diff and that it cannot be used to escalate privileges.", "cve_priority": "medium", "cve_public_date": "2026-07-22 14:17:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: Integer Overflow", " - debian/patches/CVE-2026-53910-1.patch: diff3: check for integer overflows", " when reading line numbers from diff in NEWS, THANKS, src/diff3.c.", " - debian/patches/CVE-2026-53910-2.patch: diff3: prevent overflow in line", " offsets in src/diff3.c.", " - CVE-2026-53910", "" ], "package": "diffutils", "version": "1:3.12-1ubuntu1", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [], "author": "John Breton ", "date": "Mon, 31 Aug 2026 08:14:48 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "dpkg", "from_version": { "source_package_name": "dpkg", "source_package_version": "1.23.7ubuntu1", "version": "1.23.7ubuntu1" }, "to_version": { "source_package_name": "dpkg", "source_package_version": "1.23.7ubuntu2", "version": "1.23.7ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [ 2147638 ], "changes": [ { "cves": [], "log": [ "", " * Improve handling of coreutils build-depends.", " Inject a coreutils-from-uutils build dependency unless the", " package Build-Depends on coreutils-from-gnu (LP: #2147638)", "" ], "package": "dpkg", "version": "1.23.7ubuntu2", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2147638 ], "author": "Julian Andres Klode ", "date": "Wed, 16 Sep 2026 22:38:47 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "libapparmor1", "from_version": { "source_package_name": "apparmor", "source_package_version": "6.0.0~alpha1-0ubuntu1", "version": "6.0.0~alpha1-0ubuntu1" }, "to_version": { "source_package_name": "apparmor", "source_package_version": "6.0.0~alpha1-0ubuntu2", "version": "6.0.0~alpha1-0ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [ 2166999, 2166999, 2167200 ], "changes": [ { "cves": [], "log": [ "", " * Add and update patches to fix loupe (LP: #2166999):", " - d/p/u/0001-profiles-add-a-glycin-tunable.patch", " - d/p/u/0002-profiles-begin-adding-abstractions-for-the-XDG-Deskt.patch", " - d/p/u/0003-profiles-add-dconf-dbus-write-abstraction.patch", " - d/p/u/0003-rewrite-the-loupe-profile.patch ->", " d/p/u/0004-rewrite-the-loupe-profile.patch", " * Add patch to fix glycin bwrap (LP: #2166999):", " - d/p/u/fix_glycin_bwrap.patch", " * Add patch to fix samba-rpcd SAMR socket access (LP: #2167200):", " - d/p/u/samba-rpcd-add-SAMR-socket-permissions.patch", "" ], "package": "apparmor", "version": "6.0.0~alpha1-0ubuntu2", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2166999, 2166999, 2167200 ], "author": "Ryan Lee ", "date": "Wed, 16 Sep 2026 12:57:36 -0700" } ], "notes": null, "is_version_downgrade": false }, { "name": "libcurl4t64", "from_version": { "source_package_name": "curl", "source_package_version": "8.20.0-2ubuntu3", "version": "8.20.0-2ubuntu3" }, "to_version": { "source_package_name": "curl", "source_package_version": "8.20.0-2ubuntu10", "version": "8.20.0-2ubuntu10" }, "cves": [], "launchpad_bugs_fixed": [ 2167691 ], "changes": [ { "cves": [], "log": [ "", " * Fix typo that inadvertently enabled upki -dev dependency on i386", "" ], "package": "curl", "version": "8.20.0-2ubuntu10", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Tue, 22 Sep 2026 11:20:58 +0200" }, { "cves": [], "log": [ "", " * REVERT broken 8.20.0-2ubuntu4 SECURITY upload", " - `checksrc` fixes in 8.20.0-2ubuntu7 were ok", " - but CVE 2026-8927 was incorrectly backported and the tests failed", " - see LP #2167779 for more details", " * upki fixes:", " - libcurl4-openssl-dev: depend on libupki-openssl-dev", " - fix #if defined() to ifdef", " - fix old style c issue in autopkgtest checksrc", "" ], "package": "curl", "version": "8.20.0-2ubuntu9", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Sun, 20 Sep 2026 00:08:57 +0200" }, { "cves": [], "log": [ "", " * Include upki integration for OpenSSL build (LP: #2167691),", " excluding s390x (big endian) and i386 (no upki)", " * fix checksrc-warning from cve fix", "" ], "package": "curl", "version": "8.20.0-2ubuntu7", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2167691 ], "author": "Julian Andres Klode ", "date": "Fri, 18 Sep 2026 17:50:35 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "libpam-systemd", "from_version": { "source_package_name": "systemd", "source_package_version": "261.2-1ubuntu1", "version": "261.2-1ubuntu1" }, "to_version": { "source_package_name": "systemd", "source_package_version": "261.2-1ubuntu2", "version": "261.2-1ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [ 2142900, 2153836, 2147513, 2153937 ], "changes": [ { "cves": [], "log": [ "", " * Drop test-use-gnuenv-to-workaround-broken-block-signal.patch.", " Fixed in rust-coreutils (LP: #2142900)", " * mkosi: explicitly add mount package to initrd image", " * d/systemd.links: stop creating cryptdisks{,-early}.service masks (LP: #2153836)", " * d/extra: stop setting ForwardToSyslog=yes by default (LP: #2147513)", " Modern syslog implementations should read from the journal directly.", " * test: run more tests in VMs", " * d/systemd.links: drop unnecessary x11-common.service mask (LP: #2153937)", "" ], "package": "systemd", "version": "261.2-1ubuntu2", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2142900, 2153836, 2147513, 2153937 ], "author": "Nick Rosbrook ", "date": "Thu, 10 Sep 2026 13:29:41 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "libpython3.14-minimal", "from_version": { "source_package_name": "python3.14", "source_package_version": "3.14.7-4ubuntu1", "version": "3.14.7-4ubuntu1" }, "to_version": { "source_package_name": "python3.14", "source_package_version": "3.14.7-4ubuntu2", "version": "3.14.7-4ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Update to the 3.14 branch 2026-09-20.", " * Update devhelp documentation for devhelp format v2 (Simon McVittie).", " Addresses: #1147626.", "" ], "package": "python3.14", "version": "3.14.7-4ubuntu2", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 20 Sep 2026 08:42:22 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "libpython3.14-stdlib", "from_version": { "source_package_name": "python3.14", "source_package_version": "3.14.7-4ubuntu1", "version": "3.14.7-4ubuntu1" }, "to_version": { "source_package_name": "python3.14", "source_package_version": "3.14.7-4ubuntu2", "version": "3.14.7-4ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Update to the 3.14 branch 2026-09-20.", " * Update devhelp documentation for devhelp format v2 (Simon McVittie).", " Addresses: #1147626.", "" ], "package": "python3.14", "version": "3.14.7-4ubuntu2", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 20 Sep 2026 08:42:22 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "libsystemd-shared", "from_version": { "source_package_name": "systemd", "source_package_version": "261.2-1ubuntu1", "version": "261.2-1ubuntu1" }, "to_version": { "source_package_name": "systemd", "source_package_version": "261.2-1ubuntu2", "version": "261.2-1ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [ 2142900, 2153836, 2147513, 2153937 ], "changes": [ { "cves": [], "log": [ "", " * Drop test-use-gnuenv-to-workaround-broken-block-signal.patch.", " Fixed in rust-coreutils (LP: #2142900)", " * mkosi: explicitly add mount package to initrd image", " * d/systemd.links: stop creating cryptdisks{,-early}.service masks (LP: #2153836)", " * d/extra: stop setting ForwardToSyslog=yes by default (LP: #2147513)", " Modern syslog implementations should read from the journal directly.", " * test: run more tests in VMs", " * d/systemd.links: drop unnecessary x11-common.service mask (LP: #2153937)", "" ], "package": "systemd", "version": "261.2-1ubuntu2", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2142900, 2153836, 2147513, 2153937 ], "author": "Nick Rosbrook ", "date": "Thu, 10 Sep 2026 13:29:41 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "libsystemd0", "from_version": { "source_package_name": "systemd", "source_package_version": "261.2-1ubuntu1", "version": "261.2-1ubuntu1" }, "to_version": { "source_package_name": "systemd", "source_package_version": "261.2-1ubuntu2", "version": "261.2-1ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [ 2142900, 2153836, 2147513, 2153937 ], "changes": [ { "cves": [], "log": [ "", " * Drop test-use-gnuenv-to-workaround-broken-block-signal.patch.", " Fixed in rust-coreutils (LP: #2142900)", " * mkosi: explicitly add mount package to initrd image", " * d/systemd.links: stop creating cryptdisks{,-early}.service masks (LP: #2153836)", " * d/extra: stop setting ForwardToSyslog=yes by default (LP: #2147513)", " Modern syslog implementations should read from the journal directly.", " * test: run more tests in VMs", " * d/systemd.links: drop unnecessary x11-common.service mask (LP: #2153937)", "" ], "package": "systemd", "version": "261.2-1ubuntu2", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2142900, 2153836, 2147513, 2153937 ], "author": "Nick Rosbrook ", "date": "Thu, 10 Sep 2026 13:29:41 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "libudev1", "from_version": { "source_package_name": "systemd", "source_package_version": "261.2-1ubuntu1", "version": "261.2-1ubuntu1" }, "to_version": { "source_package_name": "systemd", "source_package_version": "261.2-1ubuntu2", "version": "261.2-1ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [ 2142900, 2153836, 2147513, 2153937 ], "changes": [ { "cves": [], "log": [ "", " * Drop test-use-gnuenv-to-workaround-broken-block-signal.patch.", " Fixed in rust-coreutils (LP: #2142900)", " * mkosi: explicitly add mount package to initrd image", " * d/systemd.links: stop creating cryptdisks{,-early}.service masks (LP: #2153836)", " * d/extra: stop setting ForwardToSyslog=yes by default (LP: #2147513)", " Modern syslog implementations should read from the journal directly.", " * test: run more tests in VMs", " * d/systemd.links: drop unnecessary x11-common.service mask (LP: #2153937)", "" ], "package": "systemd", "version": "261.2-1ubuntu2", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2142900, 2153836, 2147513, 2153937 ], "author": "Nick Rosbrook ", "date": "Thu, 10 Sep 2026 13:29:41 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-distupgrade", "from_version": { "source_package_name": "ubuntu-release-upgrader", "source_package_version": "1:26.10.8", "version": "1:26.10.8" }, "to_version": { "source_package_name": "ubuntu-release-upgrader", "source_package_version": "1:26.10.10", "version": "1:26.10.10" }, "cves": [], "launchpad_bugs_fixed": [ 2167515, 2167516, 2154822, 2149957 ], "changes": [ { "cves": [], "log": [ "", " * DistUpgradeCache: allow openssh-server to be removed despite being in", " the removal denylist when openssh-server-gssapi, which replaces it, is", " being installed or upgraded in the same transaction (LP: #2167515)", " * DistUpgradeQuirks: detect systems using openssh with GSSAPI and select", " the openssh-server-gssapi and/or openssh-client-gssapi variants instead", " of the base packages when upgrading to 26.10 or later (LP: #2167516)", "" ], "package": "ubuntu-release-upgrader", "version": "1:26.10.10", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2167515, 2167516 ], "author": "Andreas Hasenack ", "date": "Sun, 20 Sep 2026 16:56:27 -0300" }, { "cves": [], "log": [ "", " * DistUpgradeController: fix remaining arch-split issues (LP: #2154822)", " - Properly ignore stanzas for archs we don't serve", " - When matching archive hosts, use something more intelligent than a", " sub-string match to handle the archive.ubuntu.com.example.net case", " - Check the archs on archive.u.c and ports.u.c match those specified in", " the new MIRROR_ARCHS and PORTS_ARCHS sets", " * DistUpgradeQuirks: Correct resolute release-note URLs (LP: #2149957)", " * pre-build.sh: Correct number of mentions of release in ReleaseAnnouncment", " as the release no longer appears in the changelog URL", " * test_apport_crash: Fix a long-broken logfile leak test", " * test_dist_upgrade_fetcher_core: Derive the release to test from", " distro_info to stop the test rotting", "" ], "package": "ubuntu-release-upgrader", "version": "1:26.10.9", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2154822, 2149957 ], "author": "Dave Jones ", "date": "Wed, 16 Sep 2026 22:49:48 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3.14", "from_version": { "source_package_name": "python3.14", "source_package_version": "3.14.7-4ubuntu1", "version": "3.14.7-4ubuntu1" }, "to_version": { "source_package_name": "python3.14", "source_package_version": "3.14.7-4ubuntu2", "version": "3.14.7-4ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Update to the 3.14 branch 2026-09-20.", " * Update devhelp documentation for devhelp format v2 (Simon McVittie).", " Addresses: #1147626.", "" ], "package": "python3.14", "version": "3.14.7-4ubuntu2", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 20 Sep 2026 08:42:22 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3.14-minimal", "from_version": { "source_package_name": "python3.14", "source_package_version": "3.14.7-4ubuntu1", "version": "3.14.7-4ubuntu1" }, "to_version": { "source_package_name": "python3.14", "source_package_version": "3.14.7-4ubuntu2", "version": "3.14.7-4ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Update to the 3.14 branch 2026-09-20.", " * Update devhelp documentation for devhelp format v2 (Simon McVittie).", " Addresses: #1147626.", "" ], "package": "python3.14", "version": "3.14.7-4ubuntu2", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [], "author": "Matthias Klose ", "date": "Sun, 20 Sep 2026 08:42:22 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "rust-coreutils", "from_version": { "source_package_name": "rust-coreutils", "source_package_version": "0.11.0-2ubuntu2", "version": "0.11.0-2ubuntu2" }, "to_version": { "source_package_name": "rust-coreutils", "source_package_version": "0.12.0-1ubuntu1", "version": "0.12.0-1ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2151166, 2166225, 2152801, 2116290, 2130465, 2165041, 2164777, 2164777, 2130465, 2165041, 2163175, 2134860, 2159679, 2132368, 2137580, 2142900, 2150342, 2157011, 2157342, 2116290, 2158691, 2160614, 2153168, 2154338, 2154042, 2152801, 2146819, 2146818, 2155763, 2147425, 2143711, 2115782, 2125263, 2142588, 2141441, 2139697, 2138315, 2138217, 2134578, 2133156, 2132941, 2132245, 2132150, 2130859, 2130843, 2130396, 2127851, 2125943, 2125504, 2122166, 2117771, 2138304, 2138377, 2127970, 2125578, 2127970, 2125535, 2125578, 2121635, 2112491, 2115033, 2111603, 2116973, 2118785, 2117466, 2114827, 2116859, 2116886, 2112445, 2112552, 2113983, 2114706, 2114886, 2114887, 2114970, 2115147, 2116572, 2110910, 2111714, 2115196, 2111882, 2113963, 2115035, 2111211 ], "changes": [ { "cves": [], "log": [ "", " * d/patches/fix-install-d-eexist-race.patch: Fix an issue where parallel", " invocations of install -D would result in an EEXIST race (LP: #2151166)", "" ], "package": "rust-coreutils", "version": "0.11.0-2ubuntu2", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2151166 ], "author": "Simon Johnsson ", "date": "Mon, 14 Sep 2026 17:15:39 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian unstable. Remaining changes: (LP: #2166225)", " - Install hardlinks: Rename rust-coreutils.links to", " rust-coreutils.hardlinks.", " - Remove Build-Depends on lld and use the default linker because lld is", " unavailable on some partial architectures such as i386.", " - d/rules: Add the multiarch library path needed when linking systemd", " support (LP: #2152801).", " - d/rules: Use Ubuntu's dh-cargo-vendored-sources helper and skip known", " failing tests.", " - d/control: Regenerate XS-Vendored-Sources-Rust for Ubuntu.", " - d/p/Tweak-release-build-profile.patch: Balance binary size and debug", " information.", " - d/p/dd-ensure-full-writes.patch: Handle partial writes to slow pipes.", " - d/p/rust-vendor/glibc-2.42.patch: Support the glibc 2.42 speed_t change.", " - d/p/rustix-use-libc-backend.patch: Route rustix syscalls through libc.", " - d/p/require-utility-to-be-invoked-at-matching-path.patch: Preserve", " pathname-based AppArmor policy semantics.", " - d/p/df-statfs-fallback.patch: Retain the direct statfs fallback when", " mount table paths are inaccessible (LP: #2116290).", " - d/p/cp-stop-resolving-cwd.patch: Avoid resolving cwd for absolute", " recursive copies (LP: #2130465).", " - Remove Debian's fix-ppc64el-baudrate.diff, which fails on Launchpad's", " ppc64el builders.", " - Fix Lintian warnings.", " * Drop Changes:", " - Install libstdbuf.so: adopted by Debian in 0.11.0-1.", " - Enable feat_systemd_logind and add libsystemd-dev: adopted by Debian in", " 0.11.0-1; the Ubuntu multiarch linker-path adjustment remains.", " - d/p/remove-workspace-members.patch: adopted by Debian in 0.11.0-1.", " - d/p/build-stty.patch: no longer needed by the 0.11 Unix feature set.", " - d/p/cp-fix-symlink-target-permissions.patch: fixed upstream", " (LP: #2165041).", " - d/p/cp-fix-umask-permission-denied.patch: fixed upstream", " (LP: #2164777).", " - The 0.10 vendored-crate refresh: superseded by Debian's 0.11 refresh.", "" ], "package": "rust-coreutils", "version": "0.11.0-2ubuntu1", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2166225, 2152801, 2116290, 2130465, 2165041, 2164777 ], "author": "Varun Varma ", "date": "Mon, 07 Sep 2026 21:33:10 -0400" }, { "cves": [], "log": [ "", " [ Simon Johnsson ]", " * d/p/cp-fix-umask-permission-denied.patch: Fix an issue where cp would fail", " with \"Permission denied\" if umask masked the owner's write permission", " (LP: #2164777).", "", " [ Varun Varma ]", " * d/p/cp-stop-resolving-cwd.patch: cp: avoid resolving cwd", " for absolute recursive copies (LP: #2130465).", " * Fix Lintian warnings.", "" ], "package": "rust-coreutils", "version": "0.10.0-1ubuntu3", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2164777, 2130465 ], "author": "Varun Varma ", "date": "Tue, 01 Sep 2026 12:04:54 -0400" }, { "cves": [], "log": [ "", " * d/p/cp-fix-symlink-target-permissions.patch: Fix an issue where cp", " would alter the permissions of the source file, such as stripping the", " setuid bit (LP: #2165041)", "" ], "package": "rust-coreutils", "version": "0.10.0-1ubuntu2", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2165041 ], "author": "Simon Johnsson ", "date": "Wed, 26 Aug 2026 16:29:49 +0200" }, { "cves": [], "log": [ "", " [ Simon Johnsson ]", " * Merge with Debian unstable. Remaining changes: (LP: #2163175)", " - Install libstdbuf.so: Modify d/rules to export LIBSTDBUF_DIR as to not", " skip stdbuf, fix libstdbuf.so permissions, and install it in", " rust-coreutils.install.", " - Install hardlinks: Rename rust-coreutils.links to", " rust-coreutils.hardlinks.", " - Enable feat_systemd_logind: This allows commands such as who and pinky", " to work correctly. Introduces libsystemd-dev as a dependency.", " - Remove Build-Depends on lld: Debian added it as the preferred linker,", " but some partial architectures like i386 may be missing it.", " - d/rules: Fix vendored sources field creation. Debian does not have", " access to dh-cargo-vendored-sources so it uses a script instead.", " Change it to use dh-cargo-vendored-sources on Ubuntu instead.", " - d/rules: Skip failing tests.", " - Add patches:", " + build-stty", " + dd-ensure-full-writes", " + require-utility-to-be-invoked-at-matching-path", " + Tweak-release-build-profile", " + rust-vendor/glibc-2.42", " + rustix-use-libc-backend", " - Remove upstream patches:", " + fix-ppc64el-baudrate.diff: Launchpad's builders instead fails on", " ppc64le for this patch, the original source code is correct.", " - Update vendored rust crates", " - debian/control: Update XS-Vendored-Sources-Rust field", " * Drop changes:", " - Remove patches fixed upstream:", " + cp-respect-composite-flag", " + fix-cp-parents", " + fix-incomplete-locale-bundles", " + fix-locale-path: Debian adopted this patch.", " * New changes:", " - debian/patches/remove-workspace-members.patch: Remove workspace member", " array to prevent dh-cargo bypassing workspace-exclude.patch. Otherwise", " vendored dependencies would still think that they're part of the", " workspace.", " * Fixes:", " - File ownership changes when a file is mv'ed by root to a different file", " system (LP: #2134860)", " - Failing to build images: mv resolv.conf.tmp", " /build/chroot/etc/resolv.conf mv: File exists (os error 17)", " (LP: #2159679)", " - unaligned plus in \"ls -l\" output (LP: #2132368)", " - git-buildpackage ftbfs on resolute-proposed due to rust coreutils", " (LP: #2137580)", " - env: signal flags do not understand RTMIN+n notation (LP: #2142900)", " - date: width prefix in %N format specifier is ignored", " ( %3N, %6N always output full 9 nanosecond digits) (LP: #2150342)", " - changes in behaviour of cp in coreutils-from-uutils break test case in", " util-linux (LP: #2157011)", " - systemd: TEST-45-TIMEDATE is flaky with rust coreutils (LP: #2157342)", "", " [ Varun Varma ]", " * debian/patches/df-statfs-fallback.patch: Add a fallback to statfs if the", " mount path could not be found normally (LP: #2116290).", "" ], "package": "rust-coreutils", "version": "0.10.0-1ubuntu1", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2163175, 2134860, 2159679, 2132368, 2137580, 2142900, 2150342, 2157011, 2157342, 2116290 ], "author": "Simon Johnsson ", "date": "Tue, 11 Aug 2026 18:06:43 +0200" }, { "cves": [], "log": [ "", " [ Simon Johnsson ]", " * Remove lld as dependency as it is not available on i386:", " - d/control: Remove Build-Depends lld", " - d/rules: Change RUSTFLAGS to omit lld", " * debian/patches:", " - cp-respect-composite-flag: Cherry-pick fix from upstream for issue", " where the -a flag is not considered recursive due to flag stripping", " (LP: #2158691)", "", " [ Varun Varma ]", " * debian/patches:", " - rustix-use-libc-backend: Switch rustix backend to libc to solve", " the error where tools that rely on LD_PRELOAD have altered", " behaviour with the default rustix backend (LP: #2160614).", "" ], "package": "rust-coreutils", "version": "0.9.0-2ubuntu2", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2158691, 2160614 ], "author": "Simon Johnsson ", "date": "Tue, 14 Jul 2026 17:15:36 +0200" }, { "cves": [], "log": [ "", " * Merge with Debian unstable. Remaining changes: (LP: #2153168)", " - Install libstdbuf.so", " - Install hardlinks", " - Refresh upstream patches", " - Use direct GitHub tarball instead of debian/repack.sh", " - d/rules:", " + Add vendoring targets", " + Build verbosely", " + Skip failing tests", " - d/watch: add watch file", " - d/patches:", " + Tweak-release-build-profile.patch", " + workspace-exclude.patch", " + build-stty.patch", " + require-utility-to-be-invoked-at-matching-path.patch", " + glibc-2.42.patch", " + dd-ensure-full-writes.patch", " + use-l10n-translations-in-makefile.patch", " + fix-locale-path.patch", " + fix-incomplete-locale-bundles.patch", " - d/control: update XS-Vendored-Sources-Rust field", " - vendor: update vendored deps", " - l10n/: update translations", " * Fixes:", " - xattrs break ls formatting (LP: #2154338)", " - ls: files are not sorted in alphabetical order when using", " --group-directories-first or if LC_ALL is unset (LP: #2154042)", " * Drop changes:", " - d/p/tee-fix-input-with-sleep.patch: The underlying issue was fixed", " upstream, so drop the patch.", " * New changes:", " - Enable feat_systemd_logind to fix who not showing output", " (LP: #2152801, LP: #2146819, LP: #2146818)", " + d/control: Add libsystemd-dev as a dependency.", " + d/rules: Link systemd and add feat_systemd_logind to CARGOFLAGS.", " - d/p/fix-cp-parents.patch: Cherry-pick fix from upstream for cp --parents", " bug resulting in build failures (LP: #2155763)", " - Remove unnecessary upstream patches:", " + disable-utmp-classic.diff", " + fix-locale-path.diff: Locale handling is different on Ubuntu, using", " l10n (see the new fix-locale-path.patch).", " + fix-man.diff: Uncommented in the upstream series.", " + fix-ppc64el-baudrate.diff: Launchpad's builders instead fails on", " ppc64le for this patch, the original source code is correct.", " + use-vendor.diff: Vendor handling is different on Ubuntu.", " - Remove docs/tldr.zip from Debian upstream", " - Delete locales shipped in Debian upstream under src/", " - Move vendored dependencies to debian/", "" ], "package": "rust-coreutils", "version": "0.9.0-2ubuntu1", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2153168, 2154338, 2154042, 2152801, 2146819, 2146818, 2155763 ], "author": "Simon Johnsson ", "date": "Thu, 04 Jun 2026 15:54:29 +0200" }, { "cves": [], "log": [ "", " * d/p/fix-incomplete-locale-bundles.patch: Fix an error where messages did", " not fallback to embedded locales correctly if utility-specific locales", " were missing. This lead to tests failing that expected translated", " messages but received the raw Fluent key instead.", "" ], "package": "rust-coreutils", "version": "0.8.0-0ubuntu3", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Simon Johnsson ", "date": "Thu, 16 Apr 2026 14:41:19 +0200" }, { "cves": [], "log": [ "", " * d/p/tee-fix-input-with-sleep.patch: Fix an error where tee prematurely", " exits causing a SIGPIPE/EPIPE. This happened when the first read() returns", " fewer than 8 KiB, causing the upstream process in a pipeline to receive", " SIGPIPE/EPIPE and fail.", "" ], "package": "rust-coreutils", "version": "0.8.0-0ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Simon Johnsson ", "date": "Wed, 15 Apr 2026 11:21:14 +0200" }, { "cves": [], "log": [ "", " * New upstream version (LP: #2147425)", " * Drop patch:", " - use-u32-for-ppc64le.patch: Added upstream.", " * Refresh patches:", " - Tweak-release-build-profile.patch", " - build-stty.patch", " - dd-ensure-full-writes.patch", " - glibc-2.42.patch", " - require-utilities-to-be-invoked-using-matching-path.patch", " - use-l10n-translations-in-makefile.patch", " - workspace-exclude.patch", " * Add patches:", " - fix-locale-path.patch: Use a specific known directory for locale", " lookup. This also installs locales in /usr/share/coreutils/locales", " instead of /usr/share/locales/.", "" ], "package": "rust-coreutils", "version": "0.8.0-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2147425 ], "author": "Simon Johnsson ", "date": "Tue, 07 Apr 2026 12:34:13 +0200" }, { "cves": [], "log": [ "", " * New upstream version 0.7.0 (LP: #2143711)", " * Fixes:", " - `man 1 test` is badly formated (LP: #2115782)", " - cp -r /dev/urandom copies content (LP: #2125263)", " - date: gnu date allows options after format (LP: #2142588)", " - autopkgtest failures in resolute due to readlink (LP: #2141441)", " * Refresh patches:", " - Tweak-release-build-profile.patch", " - dd-ensure-full-writes.patch", " - require-utilities-to-be-invoked-using-matching-path.patch", " - use-l10n-translations-in-makefile.patch", " - workspace-exclude.patch", " * Drop patches:", " - prevent-stty-termios2-on-ppc64el.patch: Fixed upstream.", " * Add patches:", " - use-u32-for-ppc64le.patch: Fix type assumption for ppc64 little-endian.", " This relates to the previous dropped patch about termios2, but upstream", " did not treat little- and big-endian ppc64 differently.", "" ], "package": "rust-coreutils", "version": "0.7.0-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2143711, 2115782, 2125263, 2142588, 2141441 ], "author": "Simon Johnsson ", "date": "Mon, 09 Mar 2026 11:33:48 +0100" }, { "cves": [], "log": [ "", " * New usptream version (LP: #2139697)", " * Fixes:", " - comm does not work as expected with process substitution (LP: #2138315)", " - git: FTBFS in Resolute (LP: #2138217)", " - tee with multiple --append fails in rust corutils (LP: #2134578)", " - echo 1 | sort | head -n0: sort: write failed: 'standard output':", " Broken pipe (LP: #2133156)", " - env: Rust unwrap with UTF-8 symbols in environment variables", " (LP: #2132941)", " - \"du\" is double-counting hard links when multiple arguments specified", " (LP: #2132245)", " - dd: O_DIRECT partial block writes fail (LP: #2132150)", " - date does not support localized output (LP: #2130859)", " - SSH sessions blocked on unavailable automounts by default in Ubuntu 25.10", " (LP: #2130843)", " - rust-coreutils 'shred' refuses to write to a device (LP: #2130396)", " - rust-coreutils stats handling breaks wireguard's wg-quick (LP: #2127851)", " - rust-coreutils:dd: Broken pipe (LP: #2125943)", " - /usr/bin/sort: -k option does not behave as GNU's sort (LP: #2125504)", " - uutils wc crashed with SIGABRT on logout (LP: #2122166)", " - who, pinky are empty - need to talk to logind (LP: #2117771)", " * Drop applied patches:", " - use-mem-zeroed.diff: The timespec C-binding struct has been replaced", " by the safe abstraction nix::sys::time::TimeSpec. Padding should now", " be handled internally for 32-bit architectures.", " * Refresh patches:", " - Tweak-release-build-profile.patch", " - build-stty.patch", " - dd-ensure-full-writes.patch", " - fix-prefix.diff", " - glibc-2.42.patch", " - require-utilities-to-be-invoked-using-matching-path.patch", " - use-l10n-translations-in-makefile.patch", " - workspace-exclude.patch", " * Add patch:", " - prevent-stty-termios2-on-ppc64el.patch: The termios2 header is not", " always available or exposed on ppc64el systems. Use the standard termios", " interface instead to avoid build failures on such systems.", " * Skip failing tests:", " (s390x)", " - test_env::test_simulation_of_terminal_for_stdout_only", " - test_nohup::test_nohup_stderr_to_stdout", " - test_nohup::test_nohup_with_pseudo_terminal_emulation_on_stdin_stdout_stderr_get_replaced", " - test_touch::test_touch_changes_time_of_file_in_stdout", " (amd64v3)", " - test_dd::test_stdin_stdout_skip_w_multiplier", " * Re-enable previously failing tests:", " - test_chown::test_chown_only_group_id_nonexistent_group", " - test_chown::test_chown_only_user_id_nonexistent_user", " - test_expr::test_long_input", " - test_factor::test_parallel", " - test_install::test_install_and_strip", " - test_install::test_install_and_strip_with_program", " - test_ls::test_device_number", " - test_ls::test_localized_possible_values", " - test_od::test_od_options_after_filename", " - test_od::test_suppress_duplicates", " - test_sort::", " + test_argument_suggestion", " + test_clap_localization_help_message", " + test_clap_localization_invalid_value", " + test_clap_localization_unknown_argument", " + test_error_colors_disabled", " + test_error_colors_enabled", " + test_french_translations", " + test_help_colors_disabled", " + test_help_colors_enabled", " - test_stat::", " + test_mount_point_basic", " + test_mount_point_combined_with_other_specifiers", " + test_multi_files", " + test_normal_format", " + test_printf", " + test_symlinks", " + test_terse_fs_format", " - test_error_messages_french_translation", " - test_french_colored_error_messages", " - test_help_messages_french_translation", " - util_invalid_name_invalid_command", "" ], "package": "rust-coreutils", "version": "0.6.0-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2139697, 2138315, 2138217, 2134578, 2133156, 2132941, 2132245, 2132150, 2130859, 2130843, 2130396, 2127851, 2125943, 2125504, 2122166, 2117771 ], "author": "Simon Johnsson ", "date": "Tue, 03 Feb 2026 17:53:04 +0100" }, { "cves": [], "log": [ "", " * Add and install l10n translation files.", "" ], "package": "rust-coreutils", "version": "0.5.0-0ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Simon Johnsson ", "date": "Fri, 30 Jan 2026 14:33:41 +0100" }, { "cves": [], "log": [ "", " * New upstream release (LP: #2138304)", " * Change applied patches:", " - Tweak-release-build-profile: Remove panic = \"abort\"", " in Cargo.toml as it is already set by default.", " - workspace-exclude: Remove tests/benches as it no", " longer exists upstream.", " * Skip failing 0.5.0 tests (LP: #2138377)", " * Enable passing 0.5.0 tests", "" ], "package": "rust-coreutils", "version": "0.5.0-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2138304, 2138377 ], "author": "Simon Johnsson ", "date": "Mon, 12 Jan 2026 15:23:49 +0100" }, { "cves": [], "log": [ "", " * Skip failing 0.3.0 tests", " https://github.com/uutils/coreutils/issues/9017", "" ], "package": "rust-coreutils", "version": "0.3.0-0ubuntu2", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Sat, 25 Oct 2025 15:23:12 +0200" }, { "cves": [], "log": [ "", " * New upstream release.", " * Drop applied patches:", " - date: use reference file (LP: #2127970)", " - id: Implement no-op `-a` option (LP: #2125578)", "" ], "package": "rust-coreutils", "version": "0.3.0-0ubuntu1", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2127970, 2125578 ], "author": "Julian Andres Klode ", "date": "Sat, 25 Oct 2025 15:13:36 +0200" }, { "cves": [], "log": [ "", " * Cherry pick fixes from pull requests", " - date: use reference file (LP: #2127970)", " - dd: ensure full writes (LP: #2125535)", "" ], "package": "rust-coreutils", "version": "0.2.2-0ubuntu4", "urgency": "medium", "distributions": "resolute", "launchpad_bugs_fixed": [ 2127970, 2125535 ], "author": "Julian Andres Klode ", "date": "Wed, 22 Oct 2025 12:39:11 +0200" }, { "cves": [], "log": [ "", " * id: Implement no-op `-a` option (LP: #2125578)", "" ], "package": "rust-coreutils", "version": "0.2.2-0ubuntu2", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 2125578 ], "author": "Julian Andres Klode ", "date": "Wed, 24 Sep 2025 17:36:56 +0200" }, { "cves": [], "log": [ "", " * New upstream release.", "" ], "package": "rust-coreutils", "version": "0.2.2-0ubuntu1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Tue, 23 Sep 2025 17:17:36 +0200" }, { "cves": [], "log": [ "", " * stty: avoid panic when not attached to a tty.", " This was causing additional stderr output in tests using", " xvfb-run, causing the tests to fail.", " (The *command* itself was failing regardless, but the failure", " case here is that the shell printed the \"Aborted (core dumped)\"", " messages)", " * Cherry-pick https://github.com/uutils/coreutils/pull/8565", " * Refresh 8565 to make it a \"proper\" patch that only patches each file once", "" ], "package": "rust-coreutils", "version": "0.1.0+git20250813.4af2a84-0ubuntu7", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Tue, 09 Sep 2025 18:54:54 +0200" }, { "cves": [], "log": [ "", " * Handle speed_t changes in glibc 2.42 (LP: #2121635)", "" ], "package": "rust-coreutils", "version": "0.1.0+git20250813.4af2a84-0ubuntu6", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 2121635 ], "author": "Julian Andres Klode ", "date": "Thu, 04 Sep 2025 23:32:09 +0200" }, { "cves": [], "log": [ "", " * Require utilities to be invoked using matching path.", " Ensure that argv[0] if it is a utility name matches /proc/self/exe", " if /proc/self/exe exists. This allows AppArmor transitions to have", " reasonable effect; for example transitioning to unconfined ls cannot", " inadvertently run `rm` code.", " * Conflict with coreutils-from-uutils that linked to /usr/bin/coreutils.", " Symlinks to /usr/bin/coreutils no longer work in the new scheme,", " so we need a versioned Conflicts to force the symlinks to be", " updated first *before* we unpack the new enforcing rust-coreutils", "" ], "package": "rust-coreutils", "version": "0.1.0+git20250813.4af2a84-0ubuntu5", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Thu, 04 Sep 2025 22:17:05 +0200" }, { "cves": [], "log": [ "", " * Revert \"Use Rust 1.85 for building\", it is the default now", " * Use hardlinks in /usr/lib/cargo/bin instead of symlinks, this allows", " the next upload to enforce that argv[0] matches the executable name,", " such that an AppArmor profile allowing \"ls\" cannot be tricked into", " executing rm code by running \"ls\" with argv being {\"rm\", \"...\"}", " * Build verbosely", "" ], "package": "rust-coreutils", "version": "0.1.0+git20250813.4af2a84-0ubuntu4", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Thu, 04 Sep 2025 12:34:06 +0200" }, { "cves": [], "log": [ "", " * d/rules: Disable some more broken tests.", " These depend on the host's rust-coreutils, disable them for", " now. Forwarded upstream.", "" ], "package": "rust-coreutils", "version": "0.1.0+git20250813.4af2a84-0ubuntu2", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Tue, 26 Aug 2025 21:15:42 +0200" }, { "cves": [], "log": [ "", " * New upstream release.", "" ], "package": "rust-coreutils", "version": "0.1.0+git20250813.4af2a84-0ubuntu1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Thu, 14 Aug 2025 16:00:22 +0200" }, { "cves": [], "log": [ "", " * New upstream release.", " - Fixes env(1) forks, but must exec() directly (LP: #2112491)", " - Fixes cat: f.gz: EPIPE: Broken pipe (LP: #2115033)", " - Fixes date parsing does not support sub-second precision (LP: #2111603)", "" ], "package": "rust-coreutils", "version": "0.1.0+git20250801.cf79675-0ubuntu1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 2112491, 2115033, 2111603 ], "author": "Julian Andres Klode ", "date": "Fri, 01 Aug 2025 17:10:13 +0200" }, { "cves": [], "log": [ "", " * Cherry pick mknod --mode fix (LP: #2116973)", "" ], "package": "rust-coreutils", "version": "0.1.0+git20250711.2ba3a33-0ubuntu4", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 2116973 ], "author": "Julian Andres Klode ", "date": "Tue, 29 Jul 2025 18:40:35 +0200" }, { "cves": [], "log": [ "", " * install-Fix-no-target-directory-with-existing-file.patch: Cherry pick", " my pull request to fix --no-target-directory with existing target file", " (LP: #2118785)", "" ], "package": "rust-coreutils", "version": "0.1.0+git20250711.2ba3a33-0ubuntu3", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 2118785 ], "author": "Julian Andres Klode ", "date": "Tue, 29 Jul 2025 12:17:51 +0200" }, { "cves": [], "log": [ "", " * d/b/install-mkdir-Handle-dir-.-like-dir.patch: Handle dir/./ like dir/.", " (LP: #2117466)", "" ], "package": "rust-coreutils", "version": "0.1.0+git20250711.2ba3a33-0ubuntu2", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 2117466 ], "author": "Julian Andres Klode ", "date": "Tue, 22 Jul 2025 09:48:08 +0200" }, { "cves": [], "log": [ "", " * New upstream git commit 0.1.0+git20250711.2ba3a33", " - Fix 'od' invalid handling of non ascii chars (LP: #2114827)", " - Fix `cp -a` fails to copy symlink to directory (LP: #2116859)", " - Fix dpkg-source fails to unpack broken symlink (LP: #2116886)", " - Fix Incorrect evaluation of expr (LP: #2112445)", " - Fix cat doesn't handle EPERM (LP: #2112552)", " - Fix /bin/stty: invalid argument 'sane' (LP: #2113983)", " - Fix tee is buffered (LP: #2114706)", " - Fix rm of long paths (LP: #2114886)", " - Fix ls doesn't include acl \"+\" info on symlink (LP: #2114887)", " - Fix fold: failed to read line: stream did not contain valid UTF-8", " (LP: #2114970)", " - Fix gpgrt-config invalid output due to rust-coreutils \"expr\"", " (LP: #2115147)", " - Fix `cp --no-dereference --parents` where source is a symlink to", " a directory (LP: #2116572)", " - Internationalization and French translations for a lot of stuff", " * Install locales", " * d/patches/Setup-localization-for-utility-symlinks.patch: Setup the", " localization when invoked via symlinks", "" ], "package": "rust-coreutils", "version": "0.1.0+git20250711.2ba3a33-0ubuntu1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 2114827, 2116859, 2116886, 2112445, 2112552, 2113983, 2114706, 2114886, 2114887, 2114970, 2115147, 2116572 ], "author": "Julian Andres Klode ", "date": "Mon, 21 Jul 2025 12:48:46 +0200" }, { "cves": [], "log": [ "", " * New upstream release.", " - Add the -Z,--context options (LP: #2110910)", " - Add install -T (LP: #2111714)", " - Improve echo -- handling (LP: #2115196)", " - Fixes chroot in namespace (LP: #2111882)", " - sha256sum and friends now correctly handle * (LP: #2113963)", " - rm: Don't prompt if stdin is not interactive (LP: #2115035)", " * Update vendored dependencies and rebase the patches", " * Use Rust 1.85 for building, a bunch of workarounds are needed right now:", " - Use a vendored copy of the cargo wrapper that hardcodes cargo-1.85", " - Remove the unneeded dh_auto_configure call, this duplicates what we", " already do explictly", " - Switch the build system to makefile, since we actually use the", " makefile buildsystem", "" ], "package": "rust-coreutils", "version": "0.1.0-0ubuntu1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 2110910, 2111714, 2115196, 2111882, 2113963, 2115035 ], "author": "Julian Andres Klode ", "date": "Fri, 04 Jul 2025 13:58:43 +0200" }, { "cves": [], "log": [ "", " * Add missing libselinux1-dev, libclang-dev build dependencies", "" ], "package": "rust-coreutils", "version": "0.0.30-2ubuntu2", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Tue, 03 Jun 2025 13:27:37 +0200" }, { "cves": [], "log": [ "", " * Vendor dependencies", " - debian/rules:", " + Add vendoring rules", " + Move the prepare-debian call to override_dh_auto_configure and adjust it", " to use our vendored dependencies", " - debian/patches:", " + Add workspace-exclude.patch to exclude vendored crates from the workspace", " + Drop all the patches to adjust crate versions", " + Drop all the patches to adjust code to different crate versions", " + Drop all the patches to disable certain programs or windows", " dependencies, as we can now", " * Build factor, basenc and install links for them", " * Build stty binary (LP: #2111211)", "" ], "package": "rust-coreutils", "version": "0.0.30-2ubuntu1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 2111211 ], "author": "Julian Andres Klode ", "date": "Tue, 03 Jun 2025 12:24:02 +0200" } ], "notes": null, "is_version_downgrade": true }, { "name": "sudo-rs", "from_version": { "source_package_name": "rust-sudo-rs", "source_package_version": "0.2.14-1ubuntu2", "version": "0.2.14-1ubuntu2" }, "to_version": { "source_package_name": "rust-sudo-rs", "source_package_version": "0.2.14-1ubuntu4", "version": "0.2.14-1ubuntu4" }, "cves": [], "launchpad_bugs_fixed": [ 2167861 ], "changes": [ { "cves": [], "log": [ "", " * Remove execution bit and shebang from Apport hook", "" ], "package": "rust-sudo-rs", "version": "0.2.14-1ubuntu4", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [], "author": "Benjamin Drung ", "date": "Tue, 22 Sep 2026 18:10:24 +0200" }, { "cves": [], "log": [ "", " * d/control: Drop Recommends apport as it was added incorrectly as a result", " of the apport hook (LP: #2167861)", "" ], "package": "rust-sudo-rs", "version": "0.2.14-1ubuntu3", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2167861 ], "author": "Simon Johnsson ", "date": "Mon, 21 Sep 2026 17:37:28 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "systemd", "from_version": { "source_package_name": "systemd", "source_package_version": "261.2-1ubuntu1", "version": "261.2-1ubuntu1" }, "to_version": { "source_package_name": "systemd", "source_package_version": "261.2-1ubuntu2", "version": "261.2-1ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [ 2142900, 2153836, 2147513, 2153937 ], "changes": [ { "cves": [], "log": [ "", " * Drop test-use-gnuenv-to-workaround-broken-block-signal.patch.", " Fixed in rust-coreutils (LP: #2142900)", " * mkosi: explicitly add mount package to initrd image", " * d/systemd.links: stop creating cryptdisks{,-early}.service masks (LP: #2153836)", " * d/extra: stop setting ForwardToSyslog=yes by default (LP: #2147513)", " Modern syslog implementations should read from the journal directly.", " * test: run more tests in VMs", " * d/systemd.links: drop unnecessary x11-common.service mask (LP: #2153937)", "" ], "package": "systemd", "version": "261.2-1ubuntu2", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2142900, 2153836, 2147513, 2153937 ], "author": "Nick Rosbrook ", "date": "Thu, 10 Sep 2026 13:29:41 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "systemd-resolved", "from_version": { "source_package_name": "systemd", "source_package_version": "261.2-1ubuntu1", "version": "261.2-1ubuntu1" }, "to_version": { "source_package_name": "systemd", "source_package_version": "261.2-1ubuntu2", "version": "261.2-1ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [ 2142900, 2153836, 2147513, 2153937 ], "changes": [ { "cves": [], "log": [ "", " * Drop test-use-gnuenv-to-workaround-broken-block-signal.patch.", " Fixed in rust-coreutils (LP: #2142900)", " * mkosi: explicitly add mount package to initrd image", " * d/systemd.links: stop creating cryptdisks{,-early}.service masks (LP: #2153836)", " * d/extra: stop setting ForwardToSyslog=yes by default (LP: #2147513)", " Modern syslog implementations should read from the journal directly.", " * test: run more tests in VMs", " * d/systemd.links: drop unnecessary x11-common.service mask (LP: #2153937)", "" ], "package": "systemd", "version": "261.2-1ubuntu2", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2142900, 2153836, 2147513, 2153937 ], "author": "Nick Rosbrook ", "date": "Thu, 10 Sep 2026 13:29:41 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "systemd-sysv", "from_version": { "source_package_name": "systemd", "source_package_version": "261.2-1ubuntu1", "version": "261.2-1ubuntu1" }, "to_version": { "source_package_name": "systemd", "source_package_version": "261.2-1ubuntu2", "version": "261.2-1ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [ 2142900, 2153836, 2147513, 2153937 ], "changes": [ { "cves": [], "log": [ "", " * Drop test-use-gnuenv-to-workaround-broken-block-signal.patch.", " Fixed in rust-coreutils (LP: #2142900)", " * mkosi: explicitly add mount package to initrd image", " * d/systemd.links: stop creating cryptdisks{,-early}.service masks (LP: #2153836)", " * d/extra: stop setting ForwardToSyslog=yes by default (LP: #2147513)", " Modern syslog implementations should read from the journal directly.", " * test: run more tests in VMs", " * d/systemd.links: drop unnecessary x11-common.service mask (LP: #2153937)", "" ], "package": "systemd", "version": "261.2-1ubuntu2", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2142900, 2153836, 2147513, 2153937 ], "author": "Nick Rosbrook ", "date": "Thu, 10 Sep 2026 13:29:41 -0400" } ], "notes": null, "is_version_downgrade": false }, { "name": "ubuntu-cloud-minimal", "from_version": { "source_package_name": "ubuntu-meta", "source_package_version": "1.576", "version": "1.576" }, "to_version": { "source_package_name": "ubuntu-meta", "source_package_version": "1.577", "version": "1.577" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Refreshed dependencies", " * Use snapshots.ubuntu.com to reduce delay between archive changes", " and being able to update ubuntu-meta", " * Added sq to desktop-minimal-recommends, desktop-raspi-recommends,", " desktop-recommends, server-raspi-recommends, server-recommends, wsl-", " recommends", "" ], "package": "ubuntu-meta", "version": "1.577", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Fri, 18 Sep 2026 18:30:42 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "ubuntu-drivers-common", "from_version": { "source_package_name": "ubuntu-drivers-common", "source_package_version": "1:0.10.10", "version": "1:0.10.10" }, "to_version": { "source_package_name": "ubuntu-drivers-common", "source_package_version": "1:0.10.11", "version": "1:0.10.11" }, "cves": [], "launchpad_bugs_fixed": [ 2166233, 2167724 ], "changes": [ { "cves": [], "log": [ "", " [ Ashton Nelson ]", " * Fix dbus service output to include missing fields (LP: #2166233)", "", " [ Mitchell Augustin ]", " * Refuse to install on lxc containers unless specified (LP: #2167724)", "" ], "package": "ubuntu-drivers-common", "version": "1:0.10.11", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2166233, 2167724 ], "author": "Mitchell Augustin ", "date": "Fri, 18 Sep 2026 11:34:22 -0500" } ], "notes": null, "is_version_downgrade": false }, { "name": "ubuntu-release-upgrader-core", "from_version": { "source_package_name": "ubuntu-release-upgrader", "source_package_version": "1:26.10.8", "version": "1:26.10.8" }, "to_version": { "source_package_name": "ubuntu-release-upgrader", "source_package_version": "1:26.10.10", "version": "1:26.10.10" }, "cves": [], "launchpad_bugs_fixed": [ 2167515, 2167516, 2154822, 2149957 ], "changes": [ { "cves": [], "log": [ "", " * DistUpgradeCache: allow openssh-server to be removed despite being in", " the removal denylist when openssh-server-gssapi, which replaces it, is", " being installed or upgraded in the same transaction (LP: #2167515)", " * DistUpgradeQuirks: detect systems using openssh with GSSAPI and select", " the openssh-server-gssapi and/or openssh-client-gssapi variants instead", " of the base packages when upgrading to 26.10 or later (LP: #2167516)", "" ], "package": "ubuntu-release-upgrader", "version": "1:26.10.10", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2167515, 2167516 ], "author": "Andreas Hasenack ", "date": "Sun, 20 Sep 2026 16:56:27 -0300" }, { "cves": [], "log": [ "", " * DistUpgradeController: fix remaining arch-split issues (LP: #2154822)", " - Properly ignore stanzas for archs we don't serve", " - When matching archive hosts, use something more intelligent than a", " sub-string match to handle the archive.ubuntu.com.example.net case", " - Check the archs on archive.u.c and ports.u.c match those specified in", " the new MIRROR_ARCHS and PORTS_ARCHS sets", " * DistUpgradeQuirks: Correct resolute release-note URLs (LP: #2149957)", " * pre-build.sh: Correct number of mentions of release in ReleaseAnnouncment", " as the release no longer appears in the changelog URL", " * test_apport_crash: Fix a long-broken logfile leak test", " * test_dist_upgrade_fetcher_core: Derive the release to test from", " distro_info to stop the test rotting", "" ], "package": "ubuntu-release-upgrader", "version": "1:26.10.9", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2154822, 2149957 ], "author": "Dave Jones ", "date": "Wed, 16 Sep 2026 22:49:48 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "udev", "from_version": { "source_package_name": "systemd", "source_package_version": "261.2-1ubuntu1", "version": "261.2-1ubuntu1" }, "to_version": { "source_package_name": "systemd", "source_package_version": "261.2-1ubuntu2", "version": "261.2-1ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [ 2142900, 2153836, 2147513, 2153937 ], "changes": [ { "cves": [], "log": [ "", " * Drop test-use-gnuenv-to-workaround-broken-block-signal.patch.", " Fixed in rust-coreutils (LP: #2142900)", " * mkosi: explicitly add mount package to initrd image", " * d/systemd.links: stop creating cryptdisks{,-early}.service masks (LP: #2153836)", " * d/extra: stop setting ForwardToSyslog=yes by default (LP: #2147513)", " Modern syslog implementations should read from the journal directly.", " * test: run more tests in VMs", " * d/systemd.links: drop unnecessary x11-common.service mask (LP: #2153937)", "" ], "package": "systemd", "version": "261.2-1ubuntu2", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [ 2142900, 2153836, 2147513, 2153937 ], "author": "Nick Rosbrook ", "date": "Thu, 10 Sep 2026 13:29:41 -0400" } ], "notes": null, "is_version_downgrade": false } ], "snap": [] }, "added": { "deb": [ { "name": "libupki-openssl1", "from_version": { "source_package_name": null, "source_package_version": null, "version": null }, "to_version": { "source_package_name": "upki", "source_package_version": "1.0.0~beta.3+repack-0ubuntu2", "version": "1.0.0~beta.3+repack-0ubuntu2" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " * Fix overflow on 32-bit architecture", "" ], "package": "upki", "version": "1.0.0~beta.3+repack-0ubuntu2", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Fri, 18 Sep 2026 16:36:34 +0200" }, { "cves": [], "log": [ "", " [ Rui Marques ]", " * Fix the upki autopkgtest configuration path", "", " [ Julian Andres Klode ]", " * openssl: Do not fail on empty store", " * d/rules: Check that we do not call setuid() and friends", " * Recommend upki from the libraries", " * Only fetch new revocations every 6 hours", " * upki fetch: Refuse to run as root", " * rust-vendor: revendor", "", " [ Zara Grigoryan ]", " * d/upki: Ship AppArmor profile usr.bin.upki", " * debian: enable unit tests and preserve cbindgen fixtures", "" ], "package": "upki", "version": "1.0.0~beta.3+repack-0ubuntu1", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Fri, 18 Sep 2026 15:22:26 +0200" }, { "cves": [], "log": [ "", " * New upstream release", " * Refresh copyright for added, removed, changed crates", " * Fix cmakelist.txt copyright issue for jitterentropy", " * d/rules: Build using fetch-native-tls (OpenSSL)", "" ], "package": "upki", "version": "1.0.0~beta.3-0ubuntu1", "urgency": "medium", "distributions": "stonking", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Tue, 18 Aug 2026 22:43:26 +0200" } ], "notes": "For a newly added package only the three most recent changelog entries are shown.", "is_version_downgrade": false } ], "snap": [] }, "removed": { "deb": [], "snap": [] }, "notes": "Changelog diff for Ubuntu 26.10 stonking image from daily image serial 20260918 to 20260925", "from_series": "stonking", "to_series": "stonking", "from_serial": "20260918", "to_serial": "20260925", "from_manifest_filename": "daily_manifest.previous", "to_manifest_filename": "manifest.current" }