[ Avaa Bypassed ]

10/02/2025, commit https://git.launchpad.net/snap-core22/tree/7e7f679213a662cab9b925ecb9b99dd949637d33

[ Changes in the core22 snap ]

Alan (1):
      Remove the Updates pocket to avoid dependency issue (#298)

Alan Moore (1):
      Remove the quote

[ Changes in primed packages ]

libc-bin, libc6:amd64, libc6:i386 (built from glibc) updated from 2.35-0ubuntu3.8 to 2.35-0ubuntu3.9:

  glibc (2.35-0ubuntu3.9) jammy-security; urgency=medium

    * SECURITY UPDATE: Buffer overflow in the assert function.
      - debian/patches/any/CVE-2025-0395.patch: Change total to ALIGN_UP
        calculation and include libc-pointer-arith.h in assert/assert.c and
        sysdeps/posix/libc_fatal.c.
      - CVE-2025-0395

   -- Hlib Korzhynskyy <hlib.korzhynskyy@canonical.com>  Tue, 28 Jan 2025 16:55:30 -0330

python3-jinja2 (built from jinja2) updated from 3.0.3-1ubuntu0.2 to 3.0.3-1ubuntu0.3:

  jinja2 (3.0.3-1ubuntu0.3) jammy-security; urgency=medium

    * SECURITY UPDATE: arbitrary code execution issue in jinja compiler
      - debian/patches/CVE-2024-56201.patch: f-string syntax handling in code
        generation improved in src/jinja2/compiler.py.
      - debian/patches/CVE-2024-56326.patch: oversight on calls to str.format
        adjusted in src/jinja2/sandbox.py.
      - CVE-2024-56201
      - CVE-2024-56326

   -- Evan Caville <evan.caville@canonical.com>  Mon, 06 Jan 2025 15:27:20 +1000

libgssapi-krb5-2:amd64, libk5crypto3:amd64, libkrb5-3:amd64, libkrb5support0:amd64 (built from krb5) updated from 1.19.2-2ubuntu0.4 to 1.19.2-2ubuntu0.5:

  krb5 (1.19.2-2ubuntu0.5) jammy-security; urgency=medium

    * SECURITY UPDATE: Use of MD5-based message authentication over plaintext
      communications could lead to forgery attacks.
      - debian/patches/CVE-2024-3596.patch: Secure Response Authenticator
        by adding support for the Message-Authenticator attribute in non-EAP
        authentication methods.
      - CVE-2024-3596
    * Update libk5crypto3 symbols: add k5_hmac_md5 symbol.

   -- Nicolas Campuzano Jimenez <nicolas.campuzano@canonical.com>  Mon, 27 Jan 2025 19:37:24 -0500

libseccomp2:amd64 (built from libseccomp) updated from 2.5.3-2ubuntu2 to 2.5.3-2ubuntu3~22.04.1:

  libseccomp (2.5.3-2ubuntu3~22.04.1) jammy; urgency=medium

    * d/p/lp2059734-fix-fchmodat2-syscall-used-by-glibc-in-newer-containers.patch:
      - Fix fchmodat2 syscall in containers that use a newer version of glibc
        (LP: #2059734)

   -- Ghadi Elie Rahme <ghadi.rahme@canonical.com>  Wed, 23 Oct 2024 15:44:34 +0000

libpam-modules-bin, libpam-modules:amd64, libpam-runtime, libpam0g:amd64 (built from pam) updated from 1.4.0-11ubuntu2.4 to 1.4.0-11ubuntu2.5:

  pam (1.4.0-11ubuntu2.5) jammy; urgency=medium

    * Honor private home directory permissions (LP: #1957024)

   -- Ponnuvel Palaniyappan <pponnuvel@gmail.com>  Sun, 17 Nov 2024 10:17:22 +0000

libpython3.10-minimal:amd64, libpython3.10-stdlib:amd64, python3.10, python3.10-minimal (built from python3.10) updated from 3.10.12-1~22.04.7 to 3.10.12-1~22.04.8:

  python3.10 (3.10.12-1~22.04.8) jammy-security; urgency=medium

    * SECURITY UPDATE: incorrect validation of bracketed hosts
      - debian/patches/CVE-2024-11168.patch: add checks to ensure that
        bracketed hosts found by urlsplit are of IPv6 or IPvFuture format in
        Lib/urllib/parse.py, Lib/test/test_urlparse.py.
      - CVE-2024-11168

   -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 17 Jan 2025 09:35:34 -0500

tzdata (built from tzdata) updated from 2024a-0ubuntu0.22.04.1 to 2024b-0ubuntu0.22.04:

  tzdata (2024b-0ubuntu0.22.04) jammy; urgency=medium

    * New upstream release (LP: #2079966):
      - Improve historical data for Mexico, Mongolia, and Portugal.
      - System V names are now obsolescent (reverted, see below).
      - The main data form now uses %z.
      - Asia/Choibalsan is now an alias for Asia/Ulaanbaatar
    * Add autopkgtest test case for 2024b release
    * Update the ICU timezone data to 2024b
    * Add autopkgtest test case for ICU timezone data 2024b
    * Build timezones with zic -b 'fat' (Closes: #1084111)
    * Move UNIX System V zones back from backzone to backwards file
      to keep them unchanged for the stable release updates.
    * Test debconf configuration with autopkgtest
    * Make remaining legacy timezones selectable in debconf (LP: #2070285)

   -- Benjamin Drung <bdrung@ubuntu.com>  Wed, 04 Dec 2024 00:58:03 +0100

vim-common, vim-tiny, xxd (built from vim) updated from 2:8.2.3995-1ubuntu2.21 to 2:8.2.3995-1ubuntu2.23:

  vim (2:8.2.3995-1ubuntu2.23) jammy-security; urgency=medium

    * SECURITY UPDATE: Denial of service
      - debian/patches/CVE-2025-24014.patch: fix a segfault in win_line()
        in files src/gui.c, src/testdir/crash/ex_redraw_crash,
        src/testdir/test_crash.vim.
      - CVE-2025-24014

   -- Leonidas Da Silva Barbosa <leo.barbosa@canonical.com>  Mon, 03 Feb 2025 08:54:38 -0300

  vim (2:8.2.3995-1ubuntu2.22) jammy-security; urgency=medium

    * SECURITY UPDATE: Heap-buffer-overflow when switching buffers.
      - debian/patches/CVE-2025-22134.patch: Add reset_VIsual_and_resel() to
        src/arglist.c. Add ptrlen checks in src/misc1.c and src/ops.c.
      - CVE-2025-22134

   -- Hlib Korzhynskyy <hlib.korzhynskyy@canonical.com>  Fri, 17 Jan 2025 12:55:02 -0330