Jammy Jellyfish Point-Release Changes

22.04.4 (part 1/3)

This is a brief summary of bugs fixed between Ubuntu 22.04.3 and 22.04.4. This summary covers only changes to packages in main and restricted, which account for all packages in the officially-supported images; there are further changes to various packages in universe and multiverse. Some of these fixes were by Ubuntu developers directly, while others were by upstream developers and backported to Ubuntu. For full details, see the individual package changelogs.

In addition to the bugs listed below, this update includes all security updates from the Ubuntu Security Notice list affecting Ubuntu 22.04.3 LTS that were released up to and including February 15, 2024. The last update included was USN-6640-1: shadow vulnerability.

Installation bug fixes

Updated CD images are provided with this release, including fixes for some installation and image building bugs. (Many installation problems are hardware-specific; for those, see “Hardware support bugs” below.)

For changes in the server installer (subiquity), please see https://github.com/canonical/subiquity/releases/tag/24.02.1 .

Source Package Bug # Description
livecd-rootfs 2028862 Remove additional dependencies from subiquity units as they are now interfering with the boot process. (LP: #2028862)
livecd-rootfs 2034253 Set GRUB_DISTRIBUTION in 50-builddimg-settings.cfg to ensure EFI is installed in the right place (LP: #2034253)
livecd-rootfs 2045797 Use losetup instead of kpartx to resolve race conditions in riscv64 image builds. LP: #2045797.
livecd-rootfs 2036725 unminimize: Use lxd-installer to install LXD itself (LP: #2036725)
livecd-rootfs 2036730 arm: fix console parameter for ARM cloud-images (LP: #2036730)
livecd-rootfs 2037567 fix: add 6.5 kernel apparmor features to livecd-rootfs based on features of 6.5 in ubuntu/mantic. This will roll as HWE. (LP: #2037567)
livecd-rootfs 2038957 Enable snap preseeding with ppc64el images where /boot/vmlinux is used instead of /boot/vmlinuz. (LP: #2038957)
livecd-rootfs 2036195 The chroot tmpfs mount should only be /var/lib/apt/lists, not /var/lib/apt; the latter breaks changes to /var/lib/apt/extended_states. (LP: #2036195).
livecd-rootfs 1996489 Fix unminimize to correctly list packages. (LP: #1996489)
livecd-rootfs 2036725 Install LXD snap from stable/ubuntu- channel. (LP: #2036725)
livecd-rootfs 1968873 Do not modify /etc/ssh/sshd_config for ubuntu-cpc project builds (LP: #1968873)
livecd-rootfs 2049373 For raspi preinstalled builds, use a per-series dedicated gadget branch. (LP: #2049373)
livecd-rootfs 2050209 Add a largemem subarch for ubuntu-server that ships a 64k kernel variant by default (LP: #2050209)
livecd-rootfs 2049723 fix: Fix for calling unminimize if lxd-installer package not installed. (LP: #2049723)
livecd-rootfs 2049860 Use correct /etc/ssh/sshd_config.d/ filename so cloud-init overrides via cloud-config works. (LP: #2049860)
livecd-rootfs 2045586 Use flock to avoid races with systemd-udevd that cause loop device partitions to briefly disappear. (LP: #2045586)
flash-kernel 2054304 Use “any” kernel flavor for allwinner-based RISC-V boards, as the new kernel is a “-generic” flavor (LP: #2054304)
livecd-rootfs 2054412 Handle the allwinner kernel in the same way as we handle generic. This change seems to been missed, as it was present in noble. (LP: #2054412)

Upgrade bug fixes

These changes fix upgrade issues, smoothing the way for future upgrades to later releases of Ubuntu (and not only).

Source Package Bug # Description
update-manager 2043425 Fix incorrect available version for Ubuntu Pro updates in unattached case (LP: #2043425).
update-manager 1990450 Ubuntu Pro (LP: #1990450):
update-manager 1990450 Ubuntu Pro (LP: #1990450):
update-manager 1990450 Ubuntu Pro (LP: #1990450):
update-manager 1990450 Fix Ubuntu Pro updates checkbox and expander widget from overlapping (LP: #1990450)
update-manager 1990450 Update of the parsing for pro client changes (lp: #1990450)
update-manager 1990450 Show pending Ubuntu pro packages (LP: #1990450)
update-manager 2045918 Add back removed widgets to UI file to fix crash when updating Upgrade Manager from inside itself (LP: #2045918).
ubuntu-release-upgrader 2034986 do-release-upgrade: pass XDG_CURRENT_DESKTOP env var (LP: #2034986)

Desktop fixes

These changes mainly affect desktop installations of Ubuntu, Kubuntu, Ubuntu MATE and other Ubuntu-based systems.

Source Package Bug # Description
gjs 2023572 New upstream stable release (LP: #2023572)
gjs 2023572 New upstream release (LP: #2023572):
gjs 1974293 debian/patches: Refresh teardown patch, replacing it with the one landed upstream (LP: #1974293)
gjs 2012978 debian/patches: Cherry-pick upstream fixes to address various memory leaks (LP: #2012978)
gnome-remote-desktop 2024248 New upstream release (LP: #2024248):
gnome-remote-desktop 2024248 New upstream release (LP: #2024248):
gnome-remote-desktop 2024238 vnc: Ensure PipeWire buffers to be queued before destroying them (LP: #2024238)
gnome-remote-desktop 2024240 rdp: Ensure PipeWire buffers to be queued before destroying them (LP: #2024240)
xserver-xorg-video-amdgpu 2034105 Use DRM_CAP_CURSOR_WIDTH/HEIGHT if possible (LP: #2034105)
mutter 2030959 Drop clutter-frame-clock-Avoid-rapidly-toggling-dynamic-max-re.patch. It was never really required in mutter 42 but has caused some new stutter elsewhere (LP: #2030959)
libfprint 2034121 d/p/goodixmoc-Add-PID-0x633C.patch (LP: #2034121)
libfprint 2034481 d/p/synaptics-fix-enroll_identify-problem-after-user-reset-da.patch (LP: #2034481)
libfprint 2031872 Add support for PID 0c99 elan fingerprint device (LP: #2031872)
software-properties 1993370 softwareproperties/qt/SoftwarePropertiesQt.py: Don’t crash if the driver package does not have a matching modules package (LP: #1993370)
evince 1794064 Allow evince to spawn browsers distributed as snaps (LP: #1794064)
apparmor 1794064 Add support for applications like evince opening browsers distributed as snaps (LP: #1794064)
fonts-noto-color-emoji 2045043 New upstream release (LP: #2045043)
software-properties 2040273 cloudarchive: Enable support for the Caracal Ubuntu Cloud Archive on 22.04 (LP: #2040273).
transmission 1973084 Replace openssl 3 compatibility patch to fix memory leak (LP: #1973084):
gdm3 2039757 Add local-display-factory-skip-simpledrm-when-checking-.patch to fix a race condition that occurs with simpledrm (LP: #2039757)
mesa 2051068 patches: Revert a patch that caused GUI fail with OEM-6.1 kernel on Intel DG2. (LP: #2051068)
mesa 2037604 Backport to 22.04. (LP: #2037604)
gjs 1974293 Add context-Clear-all-vectors-of-JS-Heap-on-dispose.patch (LP: #1974293)

Server and Cloud related fixes

These changes mainly affect installations of Ubuntu on server systems and clouds.

Source Package Bug # Description
sosreport 2028327 New 4.5.6 upstream. (LP: #2028327)
octavia-dashboard 2007720 d/p/fix-updating-non-https-health-monitor.patch: Fix updating a non-HTTP(S) Health Monitor (LP: #2007720).
openjdk-lts 2032865 REGRESSION UPDATE: 8313765: Invalid CEN header (invalid zip64 extra data field size) (LP: #2032865).
apr-util 2031548 Fix compatibility with MySQL 8.0.34 (LP: #2031548)
samba 2002949 d/p/issue-when-updating-old-passwd-containing-regex-metachars.patch: Add changes to fix uncaught exception when updating old password containing regex metacharacters by simplifying samba-tool password redaction (LP: #2002949).
openssh 2031942 d/p/fix-authorized-principals-command.patch: Fix the situation where sshd ignores AuthorizedPrincipalsCommand if AuthorizedKeysCommand is also set by checking if the value pointed to by the pointer ‘charptr’ is NULL. (LP: #2031942)
dpdk 2026351 Merge LTS stable release 21.11.4 (LP: #2026351)
designate 2030526 New stable point release for OpenStack Yoga (LP: #2030526).
neutron 2030526 New stable point release for OpenStack Yoga (LP: #2030526).
ec2-hibinit-agent 2031345 d/p/lp2031345-recreate-swap-file.patch: Reduce SWAP size if current SWAP is larger than needed (LP: #2031345)
octavia-dashboard 2024188 d/p/fix-popover-attributes.patch: Fix popover attributes in member add dialog. Using popovers in the member table is broken in chrome 114, because of their new “popover” feature (LP: #2024188).
qemu 2033957 d/u/lp-2033957-virtiofsd-Fix-breakage-due-to-fuse_init_in.patch: Fix virtiofsd breakage due to fuse_init_in size change, which happened because of the Linux kernel 5.17 headers that were imported in a previous patch. (LP: #2033957)
horizon 2030526 New stable point release for OpenStack Yoga (LP: #2030526).
python-keystonemiddleware 1987355 d/p/remove-cache-invalidation.patch: Remove cache invalidation when using expired token (LP: #1987355).
cloud-init 2027861 d/cloud-init.maintscript: Remove the unused hook-network-manager conffile. (LP: #2027861)
cloud-init 2033310 Upstream snapshot based on 23.3.1. (LP: #2033310). List of changes from upstream can be found at https://raw.githubusercontent.com/canonical/cloud-init/23.3.1/ChangeLog
gce-compute-image-packages 2033061 New upstream version 20230808.00. (LP: #2033061)
qemu 2028124 d/rules: remove --no-start for qemu-guest-agent (LP: #2028124)
sosreport 2037873 Correct typo in test_mask to print ip address (LP: #2037873)
sosreport 2037872 Obfuscate SSID password in netplan/XX.yaml files (LP: #2037872)
keystone 2039176 New stable point release for OpenStack Yoga (LP: #2039176).
hibagent 2043739 Use imdsv2 and do nothing if ODH is configured (LP: #2043739).
aodh 2037332 New stable point release for OpenStack Yoga (LP: #2037332).
cinder 2037332 New stable point release for OpenStack Yoga (LP: #2037332).
glance 2037332 New stable point release for OpenStack Yoga (LP: #2037332).
heat-dashboard 2037332 New stable point release for OpenStack Yoga (LP: #2037332).
nova 2037332 New stable point release for OpenStack Yoga (LP: #2037332).
ceph 2003704 Create package for the cephfs-mirror tool (LP: #2003704).
openvswitch 2039908 New upstream point release (LP: #2039908).
cloud-init 2040291 Upstream snapshot based on 23.3.3. (LP: #2040291). List of changes from upstream can be found at https://raw.githubusercontent.com/canonical/cloud-init/23.3.3/ChangeLog
cloud-init 2039505 Revert behavior, allow user login after cloud-init stage (LP: #2039505)
cloud-init 2039453 Upstream snapshot based on 23.3.2. (LP: #2039453). List of changes from upstream can be found at https://raw.githubusercontent.com/canonical/cloud-init/23.3.2/ChangeLog
google-guest-agent 2040945 New upstream version 20231004.02. (LP: #2040945)
google-compute-engine-oslogin 2043001 New upstream version 20231004.00. (LP: #2043001)
libvirt 2028057 d/p/u/lp-2028057-*, d/libvirt0.install: Add named types and definitions, along with QEMU alias syncing for Intel SapphireRapids (LP: #2028057)
dnsmasq 2015562 src/dnsmasq.h, src/domain-match.c: Fix confusion when using resolvconf servers (combining server
drbd-utils 2043817 d/p/lp2043817-fix-timeout-pacemaker-jammy-*.patch: Fix timeout issue with Pacemaker. (LP: #2043817)
neutron 2046376 New stable point release for OpenStack Yoga (LP: #2046376).
designate 2046376 New stable point release for OpenStack Yoga (LP: #2046376).
openssl 2023545 Fix (upstream): crash when using an engine for ciphers used by DRBG (LP: #2023545)
openssl 1994165 Fix (upstream): do not ignore return values for S/MIME signature (LP: #1994165)
openssl 2033422 Perf (upstream): don’t empty method stores and provider synchronization records when flushing the query cache (LP: #2033422)
mysql-8.0 2024276 Enable test suite on armhf (LP: #2024276)
google-guest-agent 2050956 d/control: Add a dependency on google-compute-engine-oslogin (LP: #2050956)
dnsmasq 2045570 src/dnsmasq.c: Fix a crash that can happen when an empty resolv.conf is reloaded (LP: #2045570)
dnsmasq 2042587 src/helper.c: Fix wrong client address for dhcp-script when DHCPv4 relay in use (LP: #2042587)
freeradius 2042824 d/p/avoid-smbencrypt-segfault-with-openssl3-fixes.patch: load the OpenSSL legacy providers and use OpenSSL3 init for MD4/MD5 (LP: #2042824).
qemu 2051153 d/rules: modify qemu-block-extra postinst to avoid restarting run-qemu.mount (LP: #2051153)

Base platform fixes

These changes affect the core fundamental components of all the Ubuntu flavors.

Source Package Bug # Description
apt 2025462 dist-upgrade: Revert phased updates using keeps only (LP: #2025462)
apt 2029268 Compare SHA256 to check if versions are really the same (Closes: #931175) (LP: #2029268)
glibc 1989082 d/rules.d/debhelper.mk: fix permissions of libc.so (LP: #1989082)
glibc 1995362 d/p/lp1995362*.patch: Fix ldd segfault with missing libs (LP: #1995362)
glibc 2007796 d/p/lp2007796*: Fix missing cancellation point in pthread (LP: #2007796)
glibc 1992159 d/p/lp1992159*: Fix socket.h headers for non-GNU compilers (LP: #1992159)
systemd 2023229 debian/tests/tests-in-lxd: use --reuse flag in lxc publish (LP: #2023229) File: debian/tests/tests-in-lxd https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=85b2ceddff1a6cc1ddbca8a1b7e5381d146e6313
systemd 2023462 pstore: only try to load efi_pstore module (LP: #2023462) File: debian/patches/lp1978079-efi-pstore-not-cleared-on-boot.patch ~ubuntu-core-dev/ubuntu/+source/systemd - [no description]
systemd 2025563 shutdown: get only active md arrays. (LP: #2025563) File: debian/patches/lp2025563-shutdown-get-only-active-md-arrays.patch ~ubuntu-core-dev/ubuntu/+source/systemd - [no description]
systemd 2028180 udev-rules: fix nvme symlink creation on namespace changes (LP: #2028180) File: debian/patches/lp2028180-udev-rules-fix-nvme-symlink-creation-on-namespace-changes.patch ~ubuntu-core-dev/ubuntu/+source/systemd - [no description]
systemd 2013543 core: reorder systemd arguments on reexec (LP: #2013543) File: debian/patches/lp2013543-core-reorder-systemd-arguments-on-reexec.patch ~ubuntu-core-dev/ubuntu/+source/systemd - [no description]
systemd 2009743 network/dhcp4: do not ignore the gateway even if the destination is in same network (LP: #2009743) Files:
systemd 1982218 Drop debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch (LP: #1982218) File: debian/patches/debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch ~ubuntu-core-dev/ubuntu/+source/systemd - [no description]
systemd 2013543 debian/systemd.postint: do not daemon re-exec if we could hit LP: #2013543 File: debian/systemd.postinst ~ubuntu-core-dev/ubuntu/+source/systemd - [no description]
systemd 1977630 Fix machinectl pull-tar and import-tar (LP: #1977630) Author: Dan Streetman File: debian/patches/lp1977630-fix_machinectl_pull_tar.patch https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1e7d3febe1600c6eb03bd71a17be6a6af52988c7
systemd 1991829 make machinectl read-only work (LP: #1991829) Author: Dan Streetman File: debian/patches/lp1991829-add-CAP_LINUX_IMMUTABLE-to-systemd-machined-so-it-ca.patch ~ubuntu-core-dev/ubuntu/+source/systemd - [no description]
systemd 2002445 udev: gracefully handle rename failures (LP: #2002445) Files:
systemd 2004478 network/dhcp4: accept local subnet routes from DHCP (LP: #2004478) File: debian/patches/lp2004478-network-dhcp4-accept-local-subnet-routes-from-DHCP.patch https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=96928d5f45ebbfe682b47e842d63506fa0ac9583
systemd 2002445 udev: avoid NIC renaming race with kernel (LP: #2002445) Files:
systemd 2000880 network: create stacked netdevs after the underlying link is (LP: #2000880) File: debian/patches/lp2000880-network-create-stacked-netdevs-after-the-underlying-link-.patch https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=ab620e709f3f62eda86af26fd66c00d6e5165a25
systemd 2009502 Enable /dev/sgx_vepc access for the group ‘sgx’ (LP: #2009502) File: debian/patches/lp2009502-Enable-dev-sgx_vepc-access-for-the-group-sgx.patch https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=434480ae4059a16ccbde9613be0c26ff1983cc3a
systemd 2023229 debian/tests/tests-in-lxd: use --reuse flag in lxc publish (LP: #2023229) File: debian/tests/tests-in-lxd ~ubuntu-core-dev/ubuntu/+source/systemd - [no description]
systemd 2023462 pstore: only try to load efi_pstore module (LP: #2023462) File: debian/patches/lp1978079-efi-pstore-not-cleared-on-boot.patch ~ubuntu-core-dev/ubuntu/+source/systemd - [no description]
systemd 2025563 shutdown: get only active md arrays. (LP: #2025563) File: debian/patches/lp2025563-shutdown-get-only-active-md-arrays.patch ~ubuntu-core-dev/ubuntu/+source/systemd - [no description]
systemd 2028180 udev-rules: fix nvme symlink creation on namespace changes (LP: #2028180) File: debian/patches/lp2028180-udev-rules-fix-nvme-symlink-creation-on-namespace-changes.patch ~ubuntu-core-dev/ubuntu/+source/systemd - [no description]
systemd 2013543 core: reorder systemd arguments on reexec (LP: #2013543) File: debian/patches/lp2013543-core-reorder-systemd-arguments-on-reexec.patch ~ubuntu-core-dev/ubuntu/+source/systemd - [no description]
systemd 2009743 network/dhcp4: do not ignore the gateway even if the destination is in same network (LP: #2009743) Files:
systemd 1982218 Drop debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch (LP: #1982218) File: debian/patches/debian/UBUNTU-wait-online-exit-if-no-links-are-managed.patch ~ubuntu-core-dev/ubuntu/+source/systemd - [no description]
systemd 2013543 debian/systemd.postint: do not daemon re-exec if we could hit LP: #2013543 File: debian/systemd.postinst ~ubuntu-core-dev/ubuntu/+source/systemd - [no description]
systemd 1977630 Fix machinectl pull-tar and import-tar (LP: #1977630) Author: Dan Streetman File: debian/patches/lp1977630-fix_machinectl_pull_tar.patch https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=1e7d3febe1600c6eb03bd71a17be6a6af52988c7
systemd 1991829 make machinectl read-only work (LP: #1991829) Author: Dan Streetman File: debian/patches/lp1991829-add-CAP_LINUX_IMMUTABLE-to-systemd-machined-so-it-ca.patch https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=7a7c47569e0a2d175915eb0b79c60f2611848731
ubuntu-advantage-tools 2029144 Backport new upstream release: (LP: #2029144) to jammy
ubuntu-advantage-tools 2029144 New upstream release 29 (LP: #2029144)
ubuntu-advantage-tools 1999909 proxy: add support for TLS-in-TLS proxy (LP: #1999909)
ubuntu-advantage-tools 2025731 system: try/except logic to remove files and folders (LP: #2025731)
grub2-unsigned 2004643 Cherry-pick more upstream memory patches (LP: #2004643)
grub2-signed 2004643 Rebuild against grub2 2.06-2ubuntu14.2 (LP: #2004643)
netplan.io 2025519 Backport netplan.io 0.106.1-7 to 22.04 (LP: #2025519)
distro-info-data 2040193 Add Ubuntu 24.04 LTS Noble N. (LP: #2040193)
systemd 2036358 wait-online: exit early if all links are ignored (LP: #2036358) File: debian/patches/lp2036358-wait-online-exit-early-if-all-links-are-ignored.patch ~ubuntu-core-dev/ubuntu/+source/systemd - [no description]
multipath-tools 2035098 debian/multipath-tools.postinst: restart multipathd when upgrading from lt 0.8.8-1ubuntu1.22.04.3 (LP: #2035098)
apt 2038453 Backport archive snapshot integration as of 2.7.3 (LP: #2038453)
pkgbinarymangler 2037584 striptranslations.blacklist: Add ubuntu-pro-client-l10n. (LP: #2037584)
ubuntu-advantage-tools 2038461 Backport new upstream release to jammy (LP: #2038461)
ubuntu-advantage-tools 2038461 New upstream release 30 (LP: #2038461)
ubuntu-advantage-tools 2024204 files: Reduce race window when creating new files (LP: #2024204)
ubuntu-advantage-tools 2038417 systemd: change ubuntu-advantage.service type from ‘notify’ to ‘simple’, dropping the dependency on python3-systemd (LP: #2038417) (GH: #2692)
ubuntu-advantage-tools 1938208 add scenarios where cloud-init is present but disabled (LP: #1938208)
rustc 2027639 Backport to Jammy (LP: #2027639)
lintian 2040012 Add “noble” as a known Ubuntu distribution (LP: #2040012).
rustc 2027639 Backport to Jammy (LP: #2027639)
cryptsetup 2032659 Cherry-pick modern support for FIPS enabled backends. LP: #2032659
distro-info 2041662 Update tests for distro-info-data 0.52ubuntu0.6, which adjusted Debian 7’s EoL (LP: #2041662)
distro-info-data 2041662 Add animal name to Ubuntu 24.04 LTS Noble Numbat (LP: #2041662)
tzdata 2047314 New upstream version (LP: #2047314):
modemmanager 2047008 Backport the newer modemmanager commits from 1.20.6 to the LTS as part of new hardware enablement including Telit FN990 modem (lp: #2047008)
base-files 2046356 motd/10-help-text: Update support url for new Ubuntu Pro webpage (LP: #2046356)
systemd 2037281 core/device: ignore DEVICE_FOUND_UDEV bit on switching root (LP: #2037281) File: debian/patches/lp2037281-core-device-ignore-DEVICE_FOUND_UDEV-bit-on-switching-roo.patch https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=00f86f0b20f794f30aabe7181912d2ec2207e292
systemd 2035122 use read-only /etc hack in more places (LP: #2035122) File: debian/patches/debian/UBUNTU-Support-system-image-read-only-etc.patch https://git.launchpad.net/~ubuntu-core-dev/ubuntu/+source/systemd/commit/?id=c57406e850396a5d446aefe5e70a3aeaad080d72
rustc 2041325 Backport to Jammy (LP: #2041325)
rustc 2040339 Backport to Jammy (LP: #2040339)
kdump-tools 2043059 Disable the initramfs generation in our kernel-postinst hook when we detect we are running in a chroot. LP: #2043059.
iptables 2049318 Apply upstream patch to fix a double free of unrecognized base-chains. (LP: #2049318)
coreutils 2047450 d/p/assure-new-macro-affirm.patch, d/p/tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch: Fix tailing of sysfs files on systems using a 64K page size. (LP: #2047450)
rustc 2040340 Backport to Jammy (LP: #2040340)
unzip 2051952 Properly handle Microsoft ZIP64 file (LP: #2051952)
1 Like