{ "summary": { "snap": { "added": [], "removed": [], "diff": [] }, "deb": { "added": [], "removed": [], "diff": [ "curl", "libcurl4t64", "libproc2-0", "libpython3.12-minimal", "libpython3.12-stdlib", "libssl3t64", "openssl", "procps", "python3.12", "python3.12-minimal", "xxd" ] } }, "diff": { "deb": [ { "name": "curl", "from_version": { "source_package_name": "curl", "source_package_version": "8.5.0-2ubuntu10.12", "version": "8.5.0-2ubuntu10.12" }, "to_version": { "source_package_name": "curl", "source_package_version": "8.5.0-2ubuntu10.13", "version": "8.5.0-2ubuntu10.13" }, "cves": [ { "cve": "CVE-2026-8932", "url": "https://ubuntu.com/security/CVE-2026-8932", "cve_description": "libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited reuse. libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, some TLS settings related to client certificates were left out from the configuration match checks, making them match too easily. In particular options related to the private key.", "cve_priority": "low", "cve_public_date": "2026-07-03 07:16:00 UTC" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-8932", "url": "https://ubuntu.com/security/CVE-2026-8932", "cve_description": "libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited reuse. libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, some TLS settings related to client certificates were left out from the configuration match checks, making them match too easily. In particular options related to the private key.", "cve_priority": "low", "cve_public_date": "2026-07-03 07:16:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: Authentication Bypass in connection reuse.", " - debian/patches/CVE-2026-8932.patch: Fix incomplete mTLS config in", " lib/ldap.c, ../urldata.h, ../vquic/curl_ngtcp2.c,", " lib/vssh/libssh.c, ../libssh2.c,", " lib/vtls/gtls.c, ../mbedtls.c, ../openssl.c, ../schannel.c,", " ../sectransp.c, ../vtls.c, and ../wolfssl.c.", " - CVE-2026-8932", "" ], "package": "curl", "version": "8.5.0-2ubuntu10.13", "urgency": "medium", "distributions": "noble-security", "launchpad_bugs_fixed": [], "author": "Kyle Kernick ", "date": "Thu, 20 Aug 2026 13:24:23 -0600" } ], "notes": null, "is_version_downgrade": false }, { "name": "libcurl4t64", "from_version": { "source_package_name": "curl", "source_package_version": "8.5.0-2ubuntu10.12", "version": "8.5.0-2ubuntu10.12" }, "to_version": { "source_package_name": "curl", "source_package_version": "8.5.0-2ubuntu10.13", "version": "8.5.0-2ubuntu10.13" }, "cves": [ { "cve": "CVE-2026-8932", "url": "https://ubuntu.com/security/CVE-2026-8932", "cve_description": "libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited reuse. libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, some TLS settings related to client certificates were left out from the configuration match checks, making them match too easily. In particular options related to the private key.", "cve_priority": "low", "cve_public_date": "2026-07-03 07:16:00 UTC" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-8932", "url": "https://ubuntu.com/security/CVE-2026-8932", "cve_description": "libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited reuse. libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, some TLS settings related to client certificates were left out from the configuration match checks, making them match too easily. In particular options related to the private key.", "cve_priority": "low", "cve_public_date": "2026-07-03 07:16:00 UTC" } ], "log": [ "", " * SECURITY UPDATE: Authentication Bypass in connection reuse.", " - debian/patches/CVE-2026-8932.patch: Fix incomplete mTLS config in", " lib/ldap.c, ../urldata.h, ../vquic/curl_ngtcp2.c,", " lib/vssh/libssh.c, ../libssh2.c,", " lib/vtls/gtls.c, ../mbedtls.c, ../openssl.c, ../schannel.c,", " ../sectransp.c, ../vtls.c, and ../wolfssl.c.", " - CVE-2026-8932", "" ], "package": "curl", "version": "8.5.0-2ubuntu10.13", "urgency": "medium", "distributions": "noble-security", "launchpad_bugs_fixed": [], "author": "Kyle Kernick ", "date": "Thu, 20 Aug 2026 13:24:23 -0600" } ], "notes": null, "is_version_downgrade": false }, { "name": "libproc2-0", "from_version": { "source_package_name": "procps", "source_package_version": "2:4.0.4-4ubuntu3.2", "version": "2:4.0.4-4ubuntu3.2" }, "to_version": { "source_package_name": "procps", "source_package_version": "2:4.0.4-4ubuntu3.3", "version": "2:4.0.4-4ubuntu3.3" }, "cves": [], "launchpad_bugs_fixed": [ 2159938 ], "changes": [ { "cves": [], "log": [ "", " * Use clock_gettime instead of procps_uptime for boot time (LP: #2159938)", " - d/p/lp2159938-library_use_clock_gettime.patch", "" ], "package": "procps", "version": "2:4.0.4-4ubuntu3.3", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2159938 ], "author": "Bhavya Dokuru ", "date": "Mon, 13 Jul 2026 20:13:08 +0530" } ], "notes": null, "is_version_downgrade": false }, { "name": "libpython3.12-minimal", "from_version": { "source_package_name": "python3.12", "source_package_version": "3.12.3-1ubuntu0.15", "version": "3.12.3-1ubuntu0.15" }, "to_version": { "source_package_name": "python3.12", "source_package_version": "3.12.3-1ubuntu0.16", "version": "3.12.3-1ubuntu0.16" }, "cves": [], "launchpad_bugs_fixed": [ 2157534 ], "changes": [ { "cves": [], "log": [ "", " * d/p/lp-2157534-ssl-memory-leak.patch: Fixes a memory leak", " in ssl.SSLSocket.session. (LP: #2157534)", "" ], "package": "python3.12", "version": "3.12.3-1ubuntu0.16", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2157534 ], "author": "Finn Rayk Gartner ", "date": "Thu, 16 Jul 2026 01:46:41 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "libpython3.12-stdlib", "from_version": { "source_package_name": "python3.12", "source_package_version": "3.12.3-1ubuntu0.15", "version": "3.12.3-1ubuntu0.15" }, "to_version": { "source_package_name": "python3.12", "source_package_version": "3.12.3-1ubuntu0.16", "version": "3.12.3-1ubuntu0.16" }, "cves": [], "launchpad_bugs_fixed": [ 2157534 ], "changes": [ { "cves": [], "log": [ "", " * d/p/lp-2157534-ssl-memory-leak.patch: Fixes a memory leak", " in ssl.SSLSocket.session. (LP: #2157534)", "" ], "package": "python3.12", "version": "3.12.3-1ubuntu0.16", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2157534 ], "author": "Finn Rayk Gartner ", "date": "Thu, 16 Jul 2026 01:46:41 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "libssl3t64", "from_version": { "source_package_name": "openssl", "source_package_version": "3.0.13-0ubuntu3.12", "version": "3.0.13-0ubuntu3.12" }, "to_version": { "source_package_name": "openssl", "source_package_version": "3.0.13-0ubuntu3.15", "version": "3.0.13-0ubuntu3.15" }, "cves": [ { "cve": "CVE-2026-54874", "url": "https://ubuntu.com/security/CVE-2026-54874", "cve_description": "Excessive Memory Use Buffering DTLS Records for a Future Epoch", "cve_priority": "low", "cve_public_date": "2026-08-25" }, { "cve": "CVE-2026-63072", "url": "https://ubuntu.com/security/CVE-2026-63072", "cve_description": "Heap Buffer Overflow in CMS Key Unwrapping", "cve_priority": "medium", "cve_public_date": "2026-08-25" }, { "cve": "CVE-2026-63074", "url": "https://ubuntu.com/security/CVE-2026-63074", "cve_description": "CMP Indefinite Cache Growth of ExtraCerts", "cve_priority": "low", "cve_public_date": "2026-08-25" }, { "cve": "CVE-2026-63076", "url": "https://ubuntu.com/security/CVE-2026-63076", "cve_description": "Invalid Pointer Dereference in CMP Server via Crafted protectionAlg", "cve_priority": "medium", "cve_public_date": "2026-08-25" }, { "cve": "CVE-2026-75803", "url": "https://ubuntu.com/security/CVE-2026-75803", "cve_description": "AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()", "cve_priority": "low", "cve_public_date": "2026-08-25" } ], "launchpad_bugs_fixed": [ 2130576, 2107167, 2137464 ], "changes": [ { "cves": [ { "cve": "CVE-2026-54874", "url": "https://ubuntu.com/security/CVE-2026-54874", "cve_description": "Excessive Memory Use Buffering DTLS Records for a Future Epoch", "cve_priority": "low", "cve_public_date": "2026-08-25" }, { "cve": "CVE-2026-63072", "url": "https://ubuntu.com/security/CVE-2026-63072", "cve_description": "Heap Buffer Overflow in CMS Key Unwrapping", "cve_priority": "medium", "cve_public_date": "2026-08-25" }, { "cve": "CVE-2026-63074", "url": "https://ubuntu.com/security/CVE-2026-63074", "cve_description": "CMP Indefinite Cache Growth of ExtraCerts", "cve_priority": "low", "cve_public_date": "2026-08-25" }, { "cve": "CVE-2026-63076", "url": "https://ubuntu.com/security/CVE-2026-63076", "cve_description": "Invalid Pointer Dereference in CMP Server via Crafted protectionAlg", "cve_priority": "medium", "cve_public_date": "2026-08-25" }, { "cve": "CVE-2026-75803", "url": "https://ubuntu.com/security/CVE-2026-75803", "cve_description": "AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()", "cve_priority": "low", "cve_public_date": "2026-08-25" } ], "log": [ "", " * SECURITY UPDATE: Excessive Memory Use Buffering DTLS Records for a Future", " Epoch", " - debian/patches/CVE-2026-54874-1.patch: Avoid full read buffer allocation", " when buffering DTLS records in ssl/record/rec_layer_d1.c,", " ssl/record/record.h, ssl/record/ssl3_record.c.", " - debian/patches/CVE-2026-54874-2.patch: ssl/record: lower the DTLS", " unprocessed_rcds queue limit in ssl/record/rec_layer_d1.c,", " ssl/record/record_local.h, ssl/record/ssl3_record.c.", " - CVE-2026-54874", " * SECURITY UPDATE: Heap Buffer Overflow in CMS Key Unwrapping", " - debian/patches/CVE-2026-63072-1.patch: Add test for CVE-2026-63072 in", " test/cmsapitest.c, test/recipes/80-test_cmsapi.t.", " - debian/patches/CVE-2026-63072-2.patch: Fix heap buffer overflow (8-byte", " OOB write) in AES-WRAP-PAD unwrap in crypto/cms/cms_kari.c.", " - CVE-2026-63072", " * SECURITY UPDATE: CMP Indefinite Cache Growth of ExtraCerts", " - debian/patches/CVE-2026-63074-1.patch: Add a test for restricting growth", " in cmp cert cache in test/build.info, test/cmp_extracerts_dos_test.c,", " test/recipes/65-test_cmp_msg.t.", " - debian/patches/CVE-2026-63074-2.patch: Fix unbounded cert cache growth in", " cmp in crypto/cmp/cmp_vfy.c.", " - CVE-2026-63074", " * SECURITY UPDATE: Invalid Pointer Dereference in CMP Server via Crafted", " protectionAlg", " - debian/patches/CVE-2026-63076-1.patch: Add test for CVE-2026-63076 in", " test/cmp_protect_test.c.", " - debian/patches/CVE-2026-63076-2.patch: Fix Remote NULL deref in", " ossl_cmp_calc_protection() via crafted protectionAlg in", " crypto/cmp/cmp_protect.c.", " - CVE-2026-63076", " * SECURITY UPDATE: AEAD Forgeries with Empty Ciphertext When Using", " EVP_Cipher()", " - debian/patches/CVE-2026-75803-1.patch: Check the tag on EVP_Cipher()", " finalize: Poly1305 and OCB AEADs in", " providers/implementations/ciphers/cipher_aes_ocb.c,", " providers/implementations/ciphers/cipher_chacha20_poly1305.c.", " - debian/patches/CVE-2026-75803-2.patch: Add tests for empty AEAD", " EVP_Cipher() finalization in test/evp_extra_test.c.", " - CVE-2026-75803", "" ], "package": "openssl", "version": "3.0.13-0ubuntu3.15", "urgency": "medium", "distributions": "noble-security", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Tue, 18 Aug 2026 08:10:36 -0400" }, { "cves": [], "log": [ "", " * Enable ec_nistp_64_gcc_128 optimization on multiple 64-bit", " architectures (LP: #2130576).", " Thanks to Szilárd Pfeiffer for the ", " bug report and patch.", " * Fix /usr/share/doc/openssl/ symlinks (LP: #2107167)", " * Fix crypto/ec/asm/ecp_nistp521-ppc64.pl output regex failure", " (LP: #2137464)", " - d/p/regex_match_ecp_nistp521-ppc64.patch", "" ], "package": "openssl", "version": "3.0.13-0ubuntu3.13", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2130576, 2107167, 2137464 ], "author": "Ravi Kant Sharma ", "date": "Wed, 05 Aug 2026 12:04:50 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "openssl", "from_version": { "source_package_name": "openssl", "source_package_version": "3.0.13-0ubuntu3.12", "version": "3.0.13-0ubuntu3.12" }, "to_version": { "source_package_name": "openssl", "source_package_version": "3.0.13-0ubuntu3.15", "version": "3.0.13-0ubuntu3.15" }, "cves": [ { "cve": "CVE-2026-54874", "url": "https://ubuntu.com/security/CVE-2026-54874", "cve_description": "Excessive Memory Use Buffering DTLS Records for a Future Epoch", "cve_priority": "low", "cve_public_date": "2026-08-25" }, { "cve": "CVE-2026-63072", "url": "https://ubuntu.com/security/CVE-2026-63072", "cve_description": "Heap Buffer Overflow in CMS Key Unwrapping", "cve_priority": "medium", "cve_public_date": "2026-08-25" }, { "cve": "CVE-2026-63074", "url": "https://ubuntu.com/security/CVE-2026-63074", "cve_description": "CMP Indefinite Cache Growth of ExtraCerts", "cve_priority": "low", "cve_public_date": "2026-08-25" }, { "cve": "CVE-2026-63076", "url": "https://ubuntu.com/security/CVE-2026-63076", "cve_description": "Invalid Pointer Dereference in CMP Server via Crafted protectionAlg", "cve_priority": "medium", "cve_public_date": "2026-08-25" }, { "cve": "CVE-2026-75803", "url": "https://ubuntu.com/security/CVE-2026-75803", "cve_description": "AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()", "cve_priority": "low", "cve_public_date": "2026-08-25" } ], "launchpad_bugs_fixed": [ 2130576, 2107167, 2137464 ], "changes": [ { "cves": [ { "cve": "CVE-2026-54874", "url": "https://ubuntu.com/security/CVE-2026-54874", "cve_description": "Excessive Memory Use Buffering DTLS Records for a Future Epoch", "cve_priority": "low", "cve_public_date": "2026-08-25" }, { "cve": "CVE-2026-63072", "url": "https://ubuntu.com/security/CVE-2026-63072", "cve_description": "Heap Buffer Overflow in CMS Key Unwrapping", "cve_priority": "medium", "cve_public_date": "2026-08-25" }, { "cve": "CVE-2026-63074", "url": "https://ubuntu.com/security/CVE-2026-63074", "cve_description": "CMP Indefinite Cache Growth of ExtraCerts", "cve_priority": "low", "cve_public_date": "2026-08-25" }, { "cve": "CVE-2026-63076", "url": "https://ubuntu.com/security/CVE-2026-63076", "cve_description": "Invalid Pointer Dereference in CMP Server via Crafted protectionAlg", "cve_priority": "medium", "cve_public_date": "2026-08-25" }, { "cve": "CVE-2026-75803", "url": "https://ubuntu.com/security/CVE-2026-75803", "cve_description": "AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()", "cve_priority": "low", "cve_public_date": "2026-08-25" } ], "log": [ "", " * SECURITY UPDATE: Excessive Memory Use Buffering DTLS Records for a Future", " Epoch", " - debian/patches/CVE-2026-54874-1.patch: Avoid full read buffer allocation", " when buffering DTLS records in ssl/record/rec_layer_d1.c,", " ssl/record/record.h, ssl/record/ssl3_record.c.", " - debian/patches/CVE-2026-54874-2.patch: ssl/record: lower the DTLS", " unprocessed_rcds queue limit in ssl/record/rec_layer_d1.c,", " ssl/record/record_local.h, ssl/record/ssl3_record.c.", " - CVE-2026-54874", " * SECURITY UPDATE: Heap Buffer Overflow in CMS Key Unwrapping", " - debian/patches/CVE-2026-63072-1.patch: Add test for CVE-2026-63072 in", " test/cmsapitest.c, test/recipes/80-test_cmsapi.t.", " - debian/patches/CVE-2026-63072-2.patch: Fix heap buffer overflow (8-byte", " OOB write) in AES-WRAP-PAD unwrap in crypto/cms/cms_kari.c.", " - CVE-2026-63072", " * SECURITY UPDATE: CMP Indefinite Cache Growth of ExtraCerts", " - debian/patches/CVE-2026-63074-1.patch: Add a test for restricting growth", " in cmp cert cache in test/build.info, test/cmp_extracerts_dos_test.c,", " test/recipes/65-test_cmp_msg.t.", " - debian/patches/CVE-2026-63074-2.patch: Fix unbounded cert cache growth in", " cmp in crypto/cmp/cmp_vfy.c.", " - CVE-2026-63074", " * SECURITY UPDATE: Invalid Pointer Dereference in CMP Server via Crafted", " protectionAlg", " - debian/patches/CVE-2026-63076-1.patch: Add test for CVE-2026-63076 in", " test/cmp_protect_test.c.", " - debian/patches/CVE-2026-63076-2.patch: Fix Remote NULL deref in", " ossl_cmp_calc_protection() via crafted protectionAlg in", " crypto/cmp/cmp_protect.c.", " - CVE-2026-63076", " * SECURITY UPDATE: AEAD Forgeries with Empty Ciphertext When Using", " EVP_Cipher()", " - debian/patches/CVE-2026-75803-1.patch: Check the tag on EVP_Cipher()", " finalize: Poly1305 and OCB AEADs in", " providers/implementations/ciphers/cipher_aes_ocb.c,", " providers/implementations/ciphers/cipher_chacha20_poly1305.c.", " - debian/patches/CVE-2026-75803-2.patch: Add tests for empty AEAD", " EVP_Cipher() finalization in test/evp_extra_test.c.", " - CVE-2026-75803", "" ], "package": "openssl", "version": "3.0.13-0ubuntu3.15", "urgency": "medium", "distributions": "noble-security", "launchpad_bugs_fixed": [], "author": "Marc Deslauriers ", "date": "Tue, 18 Aug 2026 08:10:36 -0400" }, { "cves": [], "log": [ "", " * Enable ec_nistp_64_gcc_128 optimization on multiple 64-bit", " architectures (LP: #2130576).", " Thanks to Szilárd Pfeiffer for the ", " bug report and patch.", " * Fix /usr/share/doc/openssl/ symlinks (LP: #2107167)", " * Fix crypto/ec/asm/ecp_nistp521-ppc64.pl output regex failure", " (LP: #2137464)", " - d/p/regex_match_ecp_nistp521-ppc64.patch", "" ], "package": "openssl", "version": "3.0.13-0ubuntu3.13", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2130576, 2107167, 2137464 ], "author": "Ravi Kant Sharma ", "date": "Wed, 05 Aug 2026 12:04:50 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "procps", "from_version": { "source_package_name": "procps", "source_package_version": "2:4.0.4-4ubuntu3.2", "version": "2:4.0.4-4ubuntu3.2" }, "to_version": { "source_package_name": "procps", "source_package_version": "2:4.0.4-4ubuntu3.3", "version": "2:4.0.4-4ubuntu3.3" }, "cves": [], "launchpad_bugs_fixed": [ 2159938 ], "changes": [ { "cves": [], "log": [ "", " * Use clock_gettime instead of procps_uptime for boot time (LP: #2159938)", " - d/p/lp2159938-library_use_clock_gettime.patch", "" ], "package": "procps", "version": "2:4.0.4-4ubuntu3.3", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2159938 ], "author": "Bhavya Dokuru ", "date": "Mon, 13 Jul 2026 20:13:08 +0530" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3.12", "from_version": { "source_package_name": "python3.12", "source_package_version": "3.12.3-1ubuntu0.15", "version": "3.12.3-1ubuntu0.15" }, "to_version": { "source_package_name": "python3.12", "source_package_version": "3.12.3-1ubuntu0.16", "version": "3.12.3-1ubuntu0.16" }, "cves": [], "launchpad_bugs_fixed": [ 2157534 ], "changes": [ { "cves": [], "log": [ "", " * d/p/lp-2157534-ssl-memory-leak.patch: Fixes a memory leak", " in ssl.SSLSocket.session. (LP: #2157534)", "" ], "package": "python3.12", "version": "3.12.3-1ubuntu0.16", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2157534 ], "author": "Finn Rayk Gartner ", "date": "Thu, 16 Jul 2026 01:46:41 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "python3.12-minimal", "from_version": { "source_package_name": "python3.12", "source_package_version": "3.12.3-1ubuntu0.15", "version": "3.12.3-1ubuntu0.15" }, "to_version": { "source_package_name": "python3.12", "source_package_version": "3.12.3-1ubuntu0.16", "version": "3.12.3-1ubuntu0.16" }, "cves": [], "launchpad_bugs_fixed": [ 2157534 ], "changes": [ { "cves": [], "log": [ "", " * d/p/lp-2157534-ssl-memory-leak.patch: Fixes a memory leak", " in ssl.SSLSocket.session. (LP: #2157534)", "" ], "package": "python3.12", "version": "3.12.3-1ubuntu0.16", "urgency": "medium", "distributions": "noble", "launchpad_bugs_fixed": [ 2157534 ], "author": "Finn Rayk Gartner ", "date": "Thu, 16 Jul 2026 01:46:41 +0200" } ], "notes": null, "is_version_downgrade": false }, { "name": "xxd", "from_version": { "source_package_name": "vim", "source_package_version": "2:9.1.0016-1ubuntu7.19", "version": "2:9.1.0016-1ubuntu7.19" }, "to_version": { "source_package_name": "vim", "source_package_version": "2:9.1.0016-1ubuntu7.20", "version": "2:9.1.0016-1ubuntu7.20" }, "cves": [ { "cve": "CVE-2026-73073", "url": "https://ubuntu.com/security/CVE-2026-73073", "cve_description": "(Vim is an open source, command line text editor. Prior to 9.2.0845, St ...)", "cve_priority": "medium", "cve_public_date": "2026-08-19" } ], "launchpad_bugs_fixed": [], "changes": [ { "cves": [ { "cve": "CVE-2026-73073", "url": "https://ubuntu.com/security/CVE-2026-73073", "cve_description": "(Vim is an open source, command line text editor. Prior to 9.2.0845, St ...)", "cve_priority": "medium", "cve_public_date": "2026-08-19" } ], "log": [ "", " * SECURITY UPDATE: Arbitrary command execution during C omni-completion.", " - debian/patches/CVE-2026-73073.patch: Match tags typeref literally in", " runtime/autoload/ccomplete.vim.", " - CVE-2026-73073", "" ], "package": "vim", "version": "2:9.1.0016-1ubuntu7.20", "urgency": "medium", "distributions": "noble-security", "launchpad_bugs_fixed": [], "author": "Kyle Kernick ", "date": "Mon, 24 Aug 2026 16:13:04 -0600" } ], "notes": null, "is_version_downgrade": false } ], "snap": [] }, "added": { "deb": [], "snap": [] }, "removed": { "deb": [], "snap": [] }, "notes": "Changelog diff for Ubuntu 24.04 noble image from daily image serial 20260822 to 20260826", "from_series": "noble", "to_series": "noble", "from_serial": "20260822", "to_serial": "20260826", "from_manifest_filename": "daily_manifest.previous", "to_manifest_filename": "manifest.current" }