[ Avaa Bypassed ]

10/01/2025, commit https://git.launchpad.net/snap-core22/tree/aa25c22935e18ac2b4846115fa0f69936cb853c1

[ Changes in the core22 snap ]

Philip Meulengracht (1):
      spread: build fixes and changes ported from snapd (#290)

Valentin David (1):
      console-conf: make exit status 22 not reported as a failure (#296)

[ Changes in primed packages ]

cloud-init (built from cloud-init) updated from 24.3.1-0ubuntu0~22.04.1 to 24.4-0ubuntu1~22.04.1:

  cloud-init (24.4-0ubuntu1~22.04.1) jammy; urgency=medium

    * add d/p/grub-dpkg-support.patch
      - Revert the removal of grub-dpkg from default modules
    * refresh patches:
      - d/p/cli-retain-file-argument-as-main-cmd-arg.patch
      - d/p/expire-on-hashed-users.patch
      - d/p/keep-dhclient-as-priority-client.patch
      - d/p/no-nocloud-network.patch
      - d/p/no-single-process.patch
      - d/p/revert-551f560d-cloud-config-after-snap-seeding.patch
      - d/p/status-do-not-remove-duplicated-data.patch
    * Upstream snapshot based on 24.4. (LP: #2089577).
      List of changes from upstream can be found at
      https://raw.githubusercontent.com/canonical/cloud-init/24.4/ChangeLog

   -- James Falcon <james.falcon@canonical.com>  Mon, 25 Nov 2024 11:51:07 -0600

libexpat1:amd64 (built from expat) updated from 2.4.7-1ubuntu0.4 to 2.4.7-1ubuntu0.5:

  expat (2.4.7-1ubuntu0.5) jammy-security; urgency=medium

    * SECURITY UPDATE: denial-of-service via XML_ResumeParser                   
      - debian/patches/CVE-2024-50602-1.patch: Make function XML_StopParser of  
        expat/lib/xmlparse.c refuse to stop/suspend an unstarted parser         
      - debian/patches/CVE-2024-50602-2.patch: Add XML_PARSING case to parser   
        state in function XML_StopParser of expat/lib/xmlparse.c                
      - debian/patches/CVE-2024-50602-3.patch: Add tests for CVE-2024-50602 to  
        expat/tests/runtests.c                                                
      - CVE-2024-50602 

   -- Nicolas Campuzano Jimenez <nicolas.campuzano@canonical.com>  Sun, 01 Dec 2024 15:51:42 -0500