{ "summary": { "snap": { "added": [], "removed": [], "diff": [] }, "deb": { "added": [], "removed": [], "diff": [ "apt", "apt-utils", "dracut-install", "libapt-pkg7.0:armhf", "python3-requests", "thin-provisioning-tools", "wget" ] } }, "diff": { "deb": [ { "name": "apt", "from_version": { "source_package_name": "apt", "source_package_version": "3.0.1ubuntu1", "version": "3.0.1ubuntu1" }, "to_version": { "source_package_name": "apt", "source_package_version": "3.1.0", "version": "3.1.0" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " [ Julian Andres Klode ]", " * debian/NEWS: Document new requirements on trusted.gpg.d (Closes: #1104320)", " * test: Fix test-skipped regression in 3.0.1", " * test: Do not use host's sequoia config", " * Pass --check to msgfmt and fix broken format strings", " * Add 'Include'/'Exclude' options to limit packages used from a repository", " 'Include' allows limiting a repository to a allowlist of packages,", " 'Exclude' allows removing packages from a repository.", " * Introduce apt why, apt why-not", " * Update translation templates and merge translations", " * Ubuntu: Enable 3.0 solver by default in apt CLI tools", "", " [ Herman Semenov ]", " * apt-pkg: fixed type comparison in 64bit systems using memsize cast", "", " [ Walter Lozano ]", " * Fix error handling with getline", "", " [ Guillem Jover ]", " * dselect: Add https support", " * dselect: Pass available file from stdin to dpkg --update-avail", " * dselect: Refactor bold printing into its own function", " * dselect: Use strict and warnings pragmas", " * dselect: Use Term::ANSIColor instead of forking setterm", " * dselect: Use qw() instead of lists of quoted strings", " * dselect: Replaces obsolete file comment header with copyright and SPDX marker", "", " [ Simon McVittie ]", " * apt_preferences(5): Specify the order in which files are parsed", " * sources.list(5): Explicitly say what the precedence order is", "", " [ Max Coplan ]", " * 💬 Recommend use of `apt update` over `apt-get update`", "", " [ David Kalnischkies ]", " * Include everything in our pkg-config autopkgtest", "", " [ Demi M. Obenour ]", " * Fail on stdio errors", "" ], "package": "apt", "version": "3.1.0", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Mon, 19 May 2025 19:13:54 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "apt-utils", "from_version": { "source_package_name": "apt", "source_package_version": "3.0.1ubuntu1", "version": "3.0.1ubuntu1" }, "to_version": { "source_package_name": "apt", "source_package_version": "3.1.0", "version": "3.1.0" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " [ Julian Andres Klode ]", " * debian/NEWS: Document new requirements on trusted.gpg.d (Closes: #1104320)", " * test: Fix test-skipped regression in 3.0.1", " * test: Do not use host's sequoia config", " * Pass --check to msgfmt and fix broken format strings", " * Add 'Include'/'Exclude' options to limit packages used from a repository", " 'Include' allows limiting a repository to a allowlist of packages,", " 'Exclude' allows removing packages from a repository.", " * Introduce apt why, apt why-not", " * Update translation templates and merge translations", " * Ubuntu: Enable 3.0 solver by default in apt CLI tools", "", " [ Herman Semenov ]", " * apt-pkg: fixed type comparison in 64bit systems using memsize cast", "", " [ Walter Lozano ]", " * Fix error handling with getline", "", " [ Guillem Jover ]", " * dselect: Add https support", " * dselect: Pass available file from stdin to dpkg --update-avail", " * dselect: Refactor bold printing into its own function", " * dselect: Use strict and warnings pragmas", " * dselect: Use Term::ANSIColor instead of forking setterm", " * dselect: Use qw() instead of lists of quoted strings", " * dselect: Replaces obsolete file comment header with copyright and SPDX marker", "", " [ Simon McVittie ]", " * apt_preferences(5): Specify the order in which files are parsed", " * sources.list(5): Explicitly say what the precedence order is", "", " [ Max Coplan ]", " * 💬 Recommend use of `apt update` over `apt-get update`", "", " [ David Kalnischkies ]", " * Include everything in our pkg-config autopkgtest", "", " [ Demi M. Obenour ]", " * Fail on stdio errors", "" ], "package": "apt", "version": "3.1.0", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Mon, 19 May 2025 19:13:54 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "dracut-install", "from_version": { "source_package_name": "dracut", "source_package_version": "106-2ubuntu5", "version": "106-2ubuntu5" }, "to_version": { "source_package_name": "dracut", "source_package_version": "107-1ubuntu1", "version": "107-1ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2111570, 2107477 ], "changes": [ { "cves": [], "log": [ "", " * Merge with Debian unstable (LP: #2111570). Remaining changes:", " - drop udevsettle patch (these kind of patches should be applied upstream)", " - dracut-core:", " - demote cryptsetup, systemd-cryptsetup, dmsetup, kpartx, lvm2,", " and mdadm to suggests", " - demote binutils to suggests. its only needed when using UEFI executables", " - Include all packages with dracut modules in Apport bug reports", " - autopkgtest: enable tests for s390x again", " - autopkgtest: add TEST-70-ISCSI and TEST-71-ISCSI-MULTI", " - Plymouth hook: Use alternatives instead of plymouth-set-default-theme", " - run upstream-dracut-live autopkgtest on armhf and ppc64el", " - Add update-initramfs (derived from initramfs-tools)", " - Drop debian-initramfs-post-update.patch. Let update-initramfs call the", " bootloader hooks instead of dracut itself.", " - Add bash completion for update-initramfs", " - Avoid updating the initramfs twice for some cases", " - plymouth: Only pull in the SimpleDRM driver by default", " * autopkgtest: depend on curl for test 60-NFS", " * fix(simpledrm): add =drivers/gpu/drm/panel (LP: #2107477)", "" ], "package": "dracut", "version": "107-1ubuntu1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 2111570, 2107477 ], "author": "Benjamin Drung ", "date": "Fri, 23 May 2025 14:54:03 +0200" }, { "cves": [], "log": [ "", " [ Thomas Lange ]", " * new upstream 107", " * drop 90overlay-root in favor of the overlayfs, Closes: #1017039", " * refresh patches, drop patches included upstream", " * rename module systemd-sysusers", " * add module 45simpledrm", " * update revdate for man pages", "", " [ Benjamin Drung ]", " * Stop shipping the dmraid module (Closes: #1099698)", " * Set -H --hostonly-mode=sloppy as default arguments via a config file", " * d/copyright: fix lintian's old-fsf-address-in-copyright-file", " * autopkgtest:", " - enable test 12 but skip using kernel-install due to bug #1104848", " - Remove possible masked systemd-udevd to avoid test 10 to fail", "" ], "package": "dracut", "version": "107-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Thomas Lange ", "date": "Tue, 20 May 2025 11:21:44 +0200" }, { "cves": [], "log": [ "", " [ cacin ]", " * Drop nonexistent Recommends: dmraid (Closes: #1099698)", "" ], "package": "dracut", "version": "106-6", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Andreas Tille ", "date": "Fri, 11 Apr 2025 13:34:23 +0200" }, { "cves": [], "log": [ "", " * disable upstream test 43", "" ], "package": "dracut", "version": "106-5", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Thomas Lange ", "date": "Sat, 22 Feb 2025 14:06:40 +0100" }, { "cves": [], "log": [ "", " * skip upstream test 12, time out on Debian", "" ], "package": "dracut", "version": "106-4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Thomas Lange ", "date": "Fri, 21 Feb 2025 17:53:33 +0100" }, { "cves": [], "log": [ "", " * disable autopkgtest for s390x, Closes: #1096001", " * debian/rules: remove dracut.html which does not exist", "" ], "package": "dracut", "version": "106-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Thomas Lange ", "date": "Thu, 20 Feb 2025 11:02:07 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "libapt-pkg7.0:armhf", "from_version": { "source_package_name": "apt", "source_package_version": "3.0.1ubuntu1", "version": "3.0.1ubuntu1" }, "to_version": { "source_package_name": "apt", "source_package_version": "3.1.0", "version": "3.1.0" }, "cves": [], "launchpad_bugs_fixed": [], "changes": [ { "cves": [], "log": [ "", " [ Julian Andres Klode ]", " * debian/NEWS: Document new requirements on trusted.gpg.d (Closes: #1104320)", " * test: Fix test-skipped regression in 3.0.1", " * test: Do not use host's sequoia config", " * Pass --check to msgfmt and fix broken format strings", " * Add 'Include'/'Exclude' options to limit packages used from a repository", " 'Include' allows limiting a repository to a allowlist of packages,", " 'Exclude' allows removing packages from a repository.", " * Introduce apt why, apt why-not", " * Update translation templates and merge translations", " * Ubuntu: Enable 3.0 solver by default in apt CLI tools", "", " [ Herman Semenov ]", " * apt-pkg: fixed type comparison in 64bit systems using memsize cast", "", " [ Walter Lozano ]", " * Fix error handling with getline", "", " [ Guillem Jover ]", " * dselect: Add https support", " * dselect: Pass available file from stdin to dpkg --update-avail", " * dselect: Refactor bold printing into its own function", " * dselect: Use strict and warnings pragmas", " * dselect: Use Term::ANSIColor instead of forking setterm", " * dselect: Use qw() instead of lists of quoted strings", " * dselect: Replaces obsolete file comment header with copyright and SPDX marker", "", " [ Simon McVittie ]", " * apt_preferences(5): Specify the order in which files are parsed", " * sources.list(5): Explicitly say what the precedence order is", "", " [ Max Coplan ]", " * 💬 Recommend use of `apt update` over `apt-get update`", "", " [ David Kalnischkies ]", " * Include everything in our pkg-config autopkgtest", "", " [ Demi M. Obenour ]", " * Fail on stdio errors", "" ], "package": "apt", "version": "3.1.0", "urgency": "medium", "distributions": "experimental", "launchpad_bugs_fixed": [], "author": "Julian Andres Klode ", "date": "Mon, 19 May 2025 19:13:54 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3-requests", "from_version": { "source_package_name": "requests", "source_package_version": "2.32.3+dfsg-4ubuntu1", "version": "2.32.3+dfsg-4ubuntu1" }, "to_version": { "source_package_name": "requests", "source_package_version": "2.32.3+dfsg-5ubuntu1", "version": "2.32.3+dfsg-5ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2085279 ], "changes": [ { "cves": [], "log": [ "", " * Merge with Debian unstable (LP: #2085279). Remaining changes:", " - d/p/remove-charset-normalizer-dependency.patch: Remove charset-normalizer", " as a build dependency (LP #1975541).", "" ], "package": "requests", "version": "2.32.3+dfsg-5ubuntu1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 2085279 ], "author": "Lena Voytek ", "date": "Thu, 22 May 2025 16:50:10 -0400" }, { "cves": [], "log": [ "", " * Team upload.", " * Mark pytest to be test-only.", "" ], "package": "requests", "version": "2.32.3+dfsg-5", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Bastian Germann ", "date": "Mon, 24 Mar 2025 07:38:07 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "thin-provisioning-tools", "from_version": { "source_package_name": "thin-provisioning-tools", "source_package_version": "1.1.0-2ubuntu1", "version": "1.1.0-2ubuntu1" }, "to_version": { "source_package_name": "thin-provisioning-tools", "source_package_version": "1.1.0-4ubuntu1", "version": "1.1.0-4ubuntu1" }, "cves": [], "launchpad_bugs_fixed": [ 2110422 ], "changes": [ { "cves": [], "log": [ "", " * Merge with Debian unstable (LP: #2110422). Remaining changes:", " - initramfs-hook: Combine calls to manual_add_modules (LP #2065180)", " - Vendorize rust dependencies (LP #2091303):", " + d/rules: allow builds with vendorized rust dependencies", " + vendor: add vendorized rust dependencies", " + d/p/debian-changes: do not patch Cargo.toml. There is need since", " we are now using vendored dependencies", " + d/p/vendor-remove-unused-deps: remove unused rust dependencies", " + d/control:", " - add XS-Vendored-Sources-Rust field", " - fix i386 builds due to rust libraries missing in Ubuntu", " - set X-Cargo-Built-Using field. This is currently redundant", " with Static-Built-Using. Let's set both for now to make sure", " we cover cases where one may be consuming one or another until", " we have an agreement on which should be set", " * Dropped changes:", " - debian/thin-provisioning-tools.*: fix path in initramfs hook", " [ Fixed in 1.1.0-4 ]", "" ], "package": "thin-provisioning-tools", "version": "1.1.0-4ubuntu1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 2110422 ], "author": "Athos Ribeiro ", "date": "Fri, 23 May 2025 10:11:09 -0300" }, { "cves": [], "log": [ "", " * Move tools back to /usr/sbin. (closes: #1099319)", "" ], "package": "thin-provisioning-tools", "version": "1.1.0-4", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Bastian Blank ", "date": "Tue, 04 Mar 2025 09:03:54 +0100" }, { "cves": [], "log": [ "", " * Update rust dependencies. (closes: #1094051)", "" ], "package": "thin-provisioning-tools", "version": "1.1.0-3", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Bastian Blank ", "date": "Tue, 04 Feb 2025 10:18:28 +0100" } ], "notes": null, "is_version_downgrade": false }, { "name": "wget", "from_version": { "source_package_name": "wget", "source_package_version": "1.24.5-2ubuntu1", "version": "1.24.5-2ubuntu1" }, "to_version": { "source_package_name": "wget", "source_package_version": "1.25.0-2ubuntu1", "version": "1.25.0-2ubuntu1" }, "cves": [ { "cve": "CVE-2024-10524", "url": "https://ubuntu.com/security/CVE-2024-10524", "cve_description": "Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.", "cve_priority": "low", "cve_public_date": "2024-11-19 15:15:00 UTC" } ], "launchpad_bugs_fixed": [ 2111101 ], "changes": [ { "cves": [], "log": [ "", " * Merge with Debian unstable (LP: #2111101). Remaining changes:", " - d/rules: pass --with-ssl=openssl", " * Dropped changes, as libgnutls28-dev is now required:", " - d/control: don't Build-Depend on libgnutls28-dev, only on libssl-dev", "" ], "package": "wget", "version": "1.25.0-2ubuntu1", "urgency": "medium", "distributions": "questing", "launchpad_bugs_fixed": [ 2111101 ], "author": "Ural Tunaboyu ", "date": "Sun, 18 May 2025 14:46:05 -0700" }, { "cves": [], "log": [ "", " * Team upload (salas debian group).", "", " [ Shengqi Chen ]", " * d/rules:", " + rewrite with dh sequencer (thanks @shankerwangmiao for providing help).", " + add more comments.", " + remove unnecessary clean rules.", " * Support build profile.", " * d/watch: scan only wget 1.x releases (closes: #1011450)", "", " [ Andreas Tille ]", " * Remove trailing whitespace in debian/copyright (routine-update)", " * No tab in license text (routine-update)", " * Drop automake from Build-Depends", " * Add missing ${misc:Depends} to Depends for wget-udeb.", " * Re-export upstream signing key without extra signatures.", " * Fix day-of-week for changelog entries 1.13-1, 1.9.1-11.1, 1.9.1-1, 1.9-1,", " 1.8.2-2, 1.8.2-1.", "" ], "package": "wget", "version": "1.25.0-2", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Shengqi Chen ", "date": "Sat, 08 Mar 2025 14:23:26 +0800" }, { "cves": [ { "cve": "CVE-2024-10524", "url": "https://ubuntu.com/security/CVE-2024-10524", "cve_description": "Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.", "cve_priority": "low", "cve_public_date": "2024-11-19 15:15:00 UTC" } ], "log": [ "", " * Team upload (salsa debian group).", " * New upstream version 1.25.0.", " (closes: #1088023, CVE-2024-10524, #1095109)", " * d/patches: remove applied and refresh the rest.", " * d/control:", " + bump std-ver to 4.7.2 (no changes required)", " + update Vcs fields due to being moved to debian namespace", "" ], "package": "wget", "version": "1.25.0-1", "urgency": "medium", "distributions": "unstable", "launchpad_bugs_fixed": [], "author": "Shengqi Chen ", "date": "Sat, 01 Mar 2025 11:15:29 +0800" } ], "notes": null, "is_version_downgrade": false } ], "snap": [] }, "added": { "deb": [], "snap": [] }, "removed": { "deb": [], "snap": [] }, "notes": "Changelog diff for Ubuntu 25.10 questing image from daily image serial 20250523 to 20250524", "from_series": "questing", "to_series": "questing", "from_serial": "20250523", "to_serial": "20250524", "from_manifest_filename": "daily_manifest.previous", "to_manifest_filename": "manifest.current" }