Changes in Ubuntu 22.04.3

This is a brief summary of bugs fixed between Ubuntu 22.04.2 and 22.04.3. This summary covers only changes to packages in main and restricted, which account for all packages in the officially-supported images; there are further changes to various packages in universe and multiverse. Some of these fixes were by Ubuntu developers directly, while others were by upstream developers and backported to Ubuntu. For full details, see the individual package changelogs.

In addition to the bugs listed below, this update includes all security updates from the Ubuntu Security Notice list affecting Ubuntu 22.04.1 LTS that were released up to and including August 3, 2023. The last update included was USN-6275-1.

Installation bug fixes

Updated CD images are provided with this release, including fixes for some installation bugs. (Many installation problems are hardware-specific; for those, see “Hardware support bugs” below.)

Source Package	Bug #	Description
casper	1986781	d/casper.casper-md5check.service: order it After=multi-user.target. This should allow us to reach multi-user.target sooner, especially for users where the md5 check is slow.
ubiquity	1925265	Whenever removing packages, use apt-get autoremove –purge instead of apt-get purge so that no-longer-used dependencies are removed together with the package in question, and we do not leave behind any packages that will be reported as autoremovable later.
ubiquity	1978931	Use dpkg-divert /sbin/start-stop-daemon unconditionally instead of just renaming it conditionally.
ubiquity	1993318	zsys-setup: generate correct zfs-list.cache for target
ubiquity	2022965	tests: modify test_city_entry to adapt to tzdata update

Desktop fixes

These changes mainly affect desktop installations of Ubuntu, Kubuntu, Ubuntu MATE and other Ubuntu-based systems.

Source Package	Bug #	Description
apport	1780767	tests: Fix GTK UI race condition and reduce timeout again, saving five minutes test execution time
apport	1973470	apport-bug: Add /snap/bin to PATH for Firefox snap on Lubuntu
apport	1978301	apport-gtk: Exclude trailing dot from URL links
evince	1915910	allow access to the libproxy helper pxgsettings which is needed on some configuration to access remote printers
gdm3	1999884	debian/gdm3-gdm-smartcard*: Do not fail if pam_succeed_if suceeded. We were not handling the success case in pam_succeed_if.so, and so even if other modules were successful, gdm-smartcard was failing with a permission denied error, because the pam_succeed_if default was bad, and this was applied to the success case too. Alternatively we could even just use success=ignore here, but it’s better to be consistent with other usages.
gdm3	2006059	Add local-display-factory-Fix-typo-in-supported-session-types.patch: To fix unreliable session type selection
gdm3	2020641	clear signal handlers after udev settle to avoid unexpected session logouts, thanks Ghadi Rahme (lp: #2020641)
gjs	1974293	Add context-Clear-all-vectors-of-JS-Heap-on-dispose.patch
gjs	1974293	debian/patches: Refresh teardown patch, replacing it with the one landed upstream
gjs	2012978	debian/patches: Cherry-pick upstream fixes to address various memory leaks
gjs	2023572	New upstream release
glib2.0	1998267	Make portal support aware of snaps
gnome-control-center	2026228	Cherry-pick 3 patches to fix mirror mode crash when resolution of the 2 monitors don’t match
gnome-desktop	2023923	New upstream release
gnome-initial-setup	2004037	fix an incorrect pointer use in the connectivity callback (lp: #2004037)
gnome-initial-setup	2004518	fix a crash in the dispose handler (lp: #2004518)
gnome-settings-daemon	2011770	cherrypick a change proposed upstream to fix airplane mode on some Lenovo laptops (lp: #2011770)
gnome-shell	2023913	New upstream release
gnome-shell-extension-ubuntu-dock	1965208	docking: Ensure we perform the startup animation completely on docks updates
gnome-shell-extension-ubuntu-dock	1979096	Keep shell overview always visible and usable
gnome-shell-extension-ubuntu-dock	1983130	Do not hide the dock when menus are closed
gnome-shell-extension-ubuntu-dock	1983130	docking: Ignore hover changes if overview is visible
gnome-shell-extension-ubuntu-dock	1992847	docking: Also reduce the app grid area when in auto-hide mode
gnome-shell-extension-ubuntu-dock	1992847	docking: Keep overview controls layout proportions when resizing it
gnome-shell-extension-ubuntu-dock	2019751	Ensure startup animations are performed on monitor changes
gnome-shell-extension-ubuntu-dock	2019751	docking: Handle when dash is destroyed during the login animation
gtk4	2027986	debian/patches: Properly handle gtk scale adjustment property
gtk4	2028005	New upstream release
libadwaita-1	2023548	New upstream release
libcanberra	1983794	d/p/gtk-module-Handle-display-closing-gracefully: Do not leak objects on destruction. As per previous fix for lp:1949200 we were leaking Gtk Widgets when they were manually destroyed, because we never released the reference that we added previously. Thanks to Alberts Muktupāvels for providing the test case and some analysis.
libfprint	2008067	debian/patches/elanmoc-add-PID-0x0c82.patch
libidn	1971715	Fix handling of non-ASCII characters
libmbim	1950282	Backport the newer modemmanager stack to the LTS as part of new hardware enablement including FM350 modems (lp: #1950282)
libqmi	1950282	Backport the newer modemmanager stack to the LTS as part of new hardware enablement including FM350 modems (lp: #1950282)
libreoffice	2003335	Cherry picked bug fixes release
mesa	1990089	patches: Fix a freeze with iris under stress test.
mesa	1991761	Backport to jammy.
mesa	2003339	patches: Revert two commits causing kwin to eventually crash.
mesa	2017142	patches: Fix VA-API on DCN 3.1.4.
mesa	2019212	Backport to 22.04.
mesa	2020604	rules: Set VERSION so that it also includes the packaging revision.
mesa	2021948	New upstream release.
mesa-amber	2019212	Backport to jammy.
modemmanager	1950282	Backport the newer modemmanager stack to the LTS as part of new hardware enablement including FM350 modems (lp: #1950282)
modemmanager	2023746	Backport the newer modemmanager commits from 1.20.4 to the LTS as part of new hardware enablement including EM05-G/EM05-CN modems (lp: #2023746)
mutter	2020782	Add backends-x11-Return-zero-Hz-instead-of-nan-Hz-for-incompl.patch so that incomplete graphics mode definitions are reported as having a refresh rate of 0 Hz instead of -nan Hz. This also fixes the behaviour of the ‘Revert Settings’ button
mutter	2023766	Add clutter-frame-clock-Avoid-rapidly-toggling-dynamic-max-re.patch to avoid cursor stutter
mutter	2026887	Add Revert-data-udev-Don-t-disable-KMS-modifiers-on-newer-i91.patch to fix rendering failures on older kernels (5.15) when run on newer hardware (Intel Alder Lake).
pango1.0	2006756	Cherry-pick fix for vertical color lines showing with composite emoji
software-properties	2003996	Catch exceptions to wait (lp: #2003996)
software-properties	2004245	Initialize pin as empty string (lp: #2004245)
software-properties	2004634	Disable the Ubuntu Pro UI with an explanation when not connected (lp: #2004634)
software-properties	2018457	cloudarchive: Enable support for the Bobcat Ubuntu Cloud Archive on 22.04
speech-dispatcher	1991022	Enables activating Speech Dispatcher via a Systemd socket, it’s needed for confined clients to be able to activate the service
ubuntu-advantage-desktop-daemon	1990368	Rename ‘Ubuntu Advantage’ to ‘Ubuntu Pro’ (lp: #1990368)
update-notifier	2008212	Isolate creation of the esm apt cache in apt-check
xorg-server	1993621	patches: Force update LEDs after device state update.
xorg-server	2009767	Backport to jammy.
yaru-theme	1966167	dock: Fix margins making the dock show-apps clickable
yaru-theme	1979037	Add osd monitor labels theming
yaru-theme	2008791	nautilus: Ensure disk-space-display items are themed
yaru-theme	2019475	Fix slider states
yaru-theme	2019476	Gtk3: fix invisible check and radio in selected row
yaru-theme	2019477	Gtk3: fix marks scale visibilty on hover
yaru-theme	2019479	Fix uncentered cursors

Server and Cloud related fixes

These changes mainly affect installations of Ubuntu on server systems and clouds.

Source Package	Bug #	Description
aodh	1974682	gnocchi: Use Dynamic Aggregates API
apache2	1998311	d/p/mod_proxy_hcheck_jammy_fix_to_detect_support.patch: Fix issue where enabling mod_proxy_hcheck results in error
apache2	2003189	d/p/reenable-workers-in-standard-error-state-jammy-apache2.patch: fix issue with workers in apache2 which could not recover from its error state
ceph	1998958	New upstream point release
ceph	2003530	Fix: add the mgr.nfs package to the core modules
ceph	2018929	New upstream point release
cloud-init	1724623	d/apport-general-hook.py: Add general apport hook to append cloud type, image and instance size information to bug reports
cloud-init	1956788	d/cloud-init.preinst: Oracle to remove vestigial /etc/cloud.cloud.cfg.d/ 99-disable-network-config.cfg because system config is now honored before datasource config
cloud-init	2008230	Upstream snapshot based on 23.1.1.
cloud-init	2023110	Upstream snapshot based on 23.2.
cloud-init	2025180	Upstream snapshot based on 23.2.1.
containerd	1996909 1996534	Backport version 1.6.12-0ubuntu1 from Lunar
containerd	2022390	Do not provided the containerd binary package anymore
cyrus-sasl2	1988730	d/control, d/libsasl2-modules-gssapi-mit.install, d/libsasl2-modules.install: move the SCRAM mechanism to the libsasl2-modules package
dovecot	1991564	Backport fix + refactoring for handling ssl settings
dpdk	2002404	Merge LTS stable release 21.11.3
ec2-hibinit-agent	1941785	d/p/lp1941785-Add-support-for-IMDSv2.patch: allow hibernation of AWS EC2 instances with IMDSv2
ec2-hibinit-agent	2023924	d/p/lp2023924-remove-quotes-from-state-dir.patch: fixes an issue where a weird directory would be created in root
ec2-hibinit-agent	2024505	d/p/lp2024505-fix-locale-issue.patch: fixes an issue where certain locales can cause an error when trying to decode the output of df -P
freeipmi	2019147	d/p/add-initial-support-for-xilinx.patch: enable Xilinx OEM data parsing in ipmi-fru
freeipmi	2025177	Fix missing header file in libfreeipmi-dev package
gce-compute-image-packages	2020770	New upstream version 20230328.00.
gdnsmasq	1981794	src/forward.c: Do not refuse retries from client DNS queries. Behaviour to stop infinite loops when all servers return REFUSED was wrongly activated on client retries, resulting in incorrect REFUSED replies to client retries. The code added here is a cherry pick released in upstream version 2.87, originating at https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=2561f9fe0eb9c0be
google-guest-agent	2019089	d/rules: Add –no-stop-on-upgrade for upgrade path to enforce no stop of the services on package upgrade. This has the desired side-effect of not stopping, starting or restarting the services as a part of the upgrade
google-osconfig-agent	2020762	New upstream version 20230504.00.
heat	1999665	d/p/honor-hidden-parameter.patch: Ensure get_environment() masks hidden parameters
heat	2012073	d/p/lp2012073.patch: Decode UTF-8 body data in SwiftSignal
hibagent	1896638	d/p/lp1896638-set-resume-device-by-partition-uuid: Set resume device by PARTUUID instead of by name. Thanks to Tony Nie zirann@amazon.com.
hibagent	2013336	d/p/lp2013336-do-not-modify-GRUB-config-on-GRUB2-systems: Do not attempt to modify non existent GRUB config file. Thanks to Robert Schweikert rjschwei@suse.com.
isc-dhcp	1926139	Prevent race condition that might ignore DHCP OFFERs/ACKs when dhclient receives DHCP traffic noise.
isc-dhcp	1937110	Include /etc/dhcp/dhclient-exit-hooks.d/rfc3442-classless-routes in the initramfs.
libinput	2023623	Disable pressure for Precision5680 2nd source touchpad
libvirt	2024114	d/p/u/lp-2024114-Avoid-memleak-in-virNodeDeviceGetPCIVPDDynamicCap.patch: fix memory leak PCI devices with VPD data
mdadm	1993541	Add scripts/init-top/00_mount_efivarfs, mounting efivarfs.
mutter	1985089	Fix high memory and lagginess when resizing side-by-side tiled windows
mutter	1998286	New upstream release
mysql-8.0	1980466	d/p/mysql_secure_installation-remove-root-pw-creation.patch: Fix mysql_secure_installation by removing root password creation
mysql-8.0	2019203	Fix crash on startup on armhf
mysql-8.0	2020910	d/t/upstream: Ignore upstream tests due to s390x failure
net-snmp	1998461	d/p/restore-support-for-long-dns-names.patch: Fix snmp requests for domains longer than 63 characters
net-snmp	1999711	Fix snmptrapd reconnection issue after hitting MySQL wait_timeout
netplan.io	1997467	Fix and improvements for the DBus integration
netplan.io	1997467	d/p/lp1997467: set only specific origin-hint if given
neutron	2025505	New stable point release for OpenStack Yoga
nginx	1957320	d/p/lp1957320-jammy-fixed-sigquit-issue-with-unix-sockets.patch: Fix SIGQUIT by replacing the custom socket closing code in the ngx_process_cycle.c file by calling another function.
nova	1890244	Backport fix to ignore deleted server groups
open-vm-tools	1998558	Backport recent open-vm-tools release v12.1.5
openldap	2000817	Build the passwd/sha2 contrib module with -fno-strict-aliasing to avoid computing an incorrect SHA256 hash with some versions of the compiler
openldap	2007625	New upstream version
openldap	2027079	New upstream version
openvswitch	2025323	New upstream version 2.17.7
ovn	1971178	d/ovn-common.install: Add missing ovn_detrace.py binary
ovn	1971178	d/rules, d/ovn-common.install: Properly fix the ovn-detrace binary
ovn	1980809	New upstream point release
ovn	1982454	d/p/lp-1982454-northd-stateless-nat-fix.patch
ovn	2003056	New upstream version 22.03.2
pacemaker	2012740	d/p/jammy-avoid-double-free-during-notify-operation.patch: Fix a regression introduced by 31c7fa8, causing a double-free in notify operations
postfix	1995312	d/p/1995312-unexpected-eof-fix.patch: Workaround for a breaking change in OpenSSL 3: always turn on SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed opportunities for TLS session reuse. This is safe because the SMTP protocol implements application-level framing, and is therefore not affected by TLS truncation attacks. Fix by Viktor Dukhovni
postfix	1996524	d/p/1996524-Linux6-support.patch: Adding LINUX6 support for portability
qemu	1994002	d/p/u/lp1994002-migration-Read-state-once.patch: Fix for libvirt error ‘migration was active, but no RAM info was set’
qemu	2009048	d/p/u/lp2009048-vfio_map_dma_einval_amd_iommu_1tb.patch: Add hint to VFIO_MAP_DMA error on AMD IOMMU for VMs with ~1TB+ RAM
qemu	2011832	d/p/u/lp-2011832-*: fix emulation issues in mips and powerpc
qemu	2018733	d/p/u/allow-repeating-hot-unplug-requests.patch: Allow repeating hot-unplug requests by making ACPI PCI able to requeue them.
qemu	2019766	d/p/u/lp-2019766-target-arm-kvm-Retry-KVM_CREATE_VM-call-if-it-fails-.patch: ARM: Retry KVM_CREATE_VM when it returns EINTR
qemu	2025591	d/p/u/lp2025591-block-use-the-request-length-for-iov-alignment.patch: Fix boot error on the HWE 6.2 kernel with direct IO (eg, cache=none) if the logical block size is smaller than in the host
rabbitmq-server	1999816	d/p/lp1999816-fix-rabbitmqctl-status-disk-free-timeout.patch: Fix rabbitmqctl status when free disk space cannot be determined
resource-agents	1981598	d/control: breaks/replaces for file reorg
resource-agents	2013084	d/p/pgsql-heartbeat-postgresql-issue-jammy.patch: walreceiver name is changed to make the check for running wal receiver process compatible with PostgreSQL >= 11
runc	1996909	Backport version 1.1.4-0ubuntu1 from Lunar
runc	2013318	d/p/lp2013318-fix-device-files-in-containers.patch: Fix inability to use device files such as /dev/null in containers
runc	2023694	Backport version from Mantic to Jammy
spamassassin	1799185	d/p/fix-mkpath-untainted.patch: fix spamd running with virtual-config-dir mkdir error
squid	1989380	d/p/close-tunnel-if-to-server-conn-closes-after-client.patch: Close tunnel “job” after to-server client connection closes, fixing memory leak.
swift	2006534	New stable point release for OpenStack Yoga
tcpdump	1667016	debian/usr.sbin.tcpdump: allow tcpdump printing to stdout/stderr when running from a container

Base platform fixes

These changes affect the core fundamental components of all the Ubuntu flavors.

Source Package	Bug #	Description
apparmor	1993353	Add mqueue patches.
apt	1995247	Actually delete temporary apt-key.*.asc helper files
binutils	2022845	Update from the binutils 2.38 branch:
ca-certificates	2020089	Update ca-certificates database to 20230311
ca-certificates-java	2019908	REGRESSION UPDATE: ca-certificates-java can fail to install with openjdk-17
distro-info	1991606	python: Use PEP440 compliant version in setup.py
distro-info-data	2003949	Document Ubuntu ESM overlap period
distro-info-data	2018028	Add Ubuntu 23.10 Mantic Minotaur.
gcc-11	2002429	Drop debian/patches/gcc-ibmz-plt-revert.diff, the kernel was fixed to build correct dkms modules on s390x. In turn, this patch is now preventing livepatch modules to work.
gcc-11	2002429	Remove the gcc-ibmz-plt-revert patch.
gcc-11	2002429	Remove the gcc-ibmz-plt-revert patch.
gcc-11	2019465	Backport GCC 11.4 to 22.04 LTS.
gcc-11-cross	2002429	Build using GCC 11.3.0-1ubuntu1~22.04.1 for 22.04 LTS.
gcc-11-cross	2019465	Backport GCC 11.4 to 22.04 LTS.
gcc-12	1995499	Backport GCC 12.3.0 to Ubuntu 22.04 LTS.
gcc-12-cross	1995499	Backport GCC 12.3.0 to Ubuntu 22.04 LTS.
grub2	1987567	linux_xen: Properly handle multiple initrd files
grub2-signed	1842320	Build against grub2 2.06-2ubuntu14.1
grub2-unsigned	1842320	Allocate initrd > 4 GB
grub2-unsigned	1842320	Cherry-pick all the 2.12 memory management changes
initramfs-tools	1983359	Add char/hw_random drivers
iptables	1992454	libiptc: Fix for segfault when renaming a chain
mokutil	2015664	Backport 0.6.0-2 to jammy
systemd	2000880	network: create stacked netdevs after the underlying link is
systemd	2002445	udev: avoid NIC renaming race with kernel
systemd	2002445	udev: gracefully handle rename failures
systemd	2004478	network/dhcp4: accept local subnet routes from DHCP
systemd	2009502	Enable /dev/sgx_vepc access for the group ‘sgx’
systemd-hwe	2007032	hwdb: Add Dell G16 that require KEYBOARD_KEY_100150=f20
tzdata	2003797	Build timezones that differ pre-1970
tzdata	2012599	New upstream release
tzdata	2017999	Build tzdata with PACKRATLIST=zone.tab. In combination with PACKRATDATA=backzone (which is used since 2023c-0ubuntu0.22.04.1), time zones that differ pre-1970 and had been resurrected will not incur changes to data from 1970 on. This also removes Asia/Hanoi again. Upgrade Pacific/Enderbury to Pacific/Kanton again.
ubuntu-advantage-tools	1926182	format the output to be more readable
ubuntu-advantage-tools	1987738	notices: new representation on disk as separate files
ubuntu-advantage-tools	1994923	better message if no services are available
ubuntu-advantage-tools	1996931	locks: alert user about corrupted lock files
ubuntu-advantage-tools	2004018	only set up the esm cache on supported systems
ubuntu-advantage-tools	2004193	remove stale esm-apps unauthenticated caches
ubuntu-advantage-tools	2004280	migrate certain settings out of uaclient.conf to a new file managed by the pro config subcommand
ubuntu-advantage-tools	2004650	treat null effective contract dates as unknown/expired
ubuntu-advantage-tools	2006049	consider packages without a candidate as ‘unknown’
ubuntu-advantage-tools	2006138	no longer includes warnings about notices when non-root
ubuntu-advantage-tools	2006261	recycle invalid jobs-status.json file if we detect it is corrupted
ubuntu-advantage-tools	2006351	make code aware that the effective date is not a required field in the machine-token.json file
ubuntu-advantage-tools	2006508	do not fail if we cannot extract information from /etc/os-release file
ubuntu-advantage-tools	2006510	Change esm-apps advertisement message on apt upgrade to make it clearer that the service is providing more upgrades and not restricting user to only get updates if esm-apps is enabled
ubuntu-advantage-tools	2006765	fix version for cleaning the esm-apps stale unauthenticated files
ubuntu-advantage-tools	2007234	yaml: always import distro-provided pyyaml
ubuntu-advantage-tools	2007241	yaml: always import distro-provided pyyaml
ubuntu-advantage-tools	2008280	make all calls to esm-cache isolated from system configuration
ubuntu-advantage-tools	2008814	Backport new upstream release:
ubuntu-advantage-tools	2008814	make sure systems which never ran a pro command get the apt-news message displayed
ubuntu-advantage-tools	2011477	Backport new upstream release:
ubuntu-advantage-tools	2011477	New upstream release 27.14
ubuntu-advantage-tools	2012642	apt: fix a configuration leak in the apt.get_pkg_candidate_version function
ubuntu-advantage-tools	2012735	always use dpkg instead of lscpu for fetching architecture information
ubuntu-advantage-tools	2013409	livepatch: prevent livepatch from auto-enabling and subsequently failing on interim releases
ubuntu-advantage-tools	2015241	livepatch: prevent livepatch from auto-enabling and subsequently failing on non-amd64 systems
ubuntu-advantage-tools	2015286	avoids unnecessary network calls
ubuntu-advantage-tools	2015302	timer: disable update_contract_info job
ubuntu-advantage-tools	2017949	Backport new upstream release:
ubuntu-advantage-tools	2017949	New upstream release 28
ubuntu-advantage-tools	2017949	New upstream release 28.1
ubuntu-advantage-tools	2019729	avoid crashes when processing unicode text
ubuntu-meta	1992688	Added firefox to desktop-minimal-recommends [amd64 arm64 armhf], desktop-recommends [amd64 arm64 armhf] as it provides dpkg alternatives for x-www-browser and gnome-www-browser.
ufw	2015645	0005-lp2015645.patch: fix for get_ppid() not working on WSL

Kernel and Hardware support updates

Considerable work has been done on improving support for many specific items of hardware.

Source Package	Bug #	Description
bcmwl	1981968	debian/dkms.conf.in, debian/patches/0040-add-support-for-linux-5.18.patch
bcmwl	1998039	debian/dkms.conf.in, debian/patches/0041-dev-addr-access.patch
bcmwl	1999009	debian/dkms.conf.in, debian/patches/0042-add-support-for-linux-6.x.patch
dkms	2012612	Add new feature BUILD_EXCLUSIVE_CONFIG=”CONFIG_FOO !CONFIG_BAR”. Patch imported from kinetic
flash-kernel	2006558	Add support for Xilinx Versal VCK190
fwupd	1983451	Hide inhibited usb4 device in dell-dock plugin
fwupd	1994143	d/p/0001_make_sure_mtdram_is_set_up.patch: Upstreamed patch that fix the false alarm in the autopkgtest
fwupd-efi	2011808	Stable release series backport
fwupd-signed	2003365	Rebuild for 2022v1 resigning
fwupd-signed	2011808	Rebuild against fwupd-efi 1:1.4-0ubuntu0.1
kexec-tools	2024479	Support more than one crash kernel regions for arm64
libnvidia-nscq-515	2003995	Remove leftover install file
libnvidia-nscq-515	2012529	New upstream release
linux-allwinner-5.19	1996536	selftests/…/nat6to4 breaks the selftests build
linux-aws-5.19	1988461	intel_pmc_core not load on Raptor Lake
linux-aws-5.19	1988711	Update Broadcom Emulex FC HBA lpfc driver to 14.2.0.5 for Ubuntu 22.04
linux-aws-5.19	1990700	Fibocom WWAN FM350-GL suspend error (notebook not suspend)
linux-aws-5.19	1993148	Support Icicle Kit reference design v2022.10
linux-aws-5.19	1993715	AMD Cezanne takes 5 minutes to wake up from suspend
linux-aws-5.19	1995453	Add some ACPI device IDs for Intel HID device
linux-aws-5.19	1996112	Virtual GPU driver packaging regression
linux-aws-5.19	1996536	selftests/…/nat6to4 breaks the selftests build
linux-aws-5.19	1999094	mm:vma05 in ubuntu_ltp fails with ‘[vdso] bug not patched’ on kinetic/linux 5.19.0-27.28
linux-aws-5.19	2001618	BPF_[AND
linux-azure	1996806	Azure: Jammy fio test causes panic
linux-azure	2016898	Azure: Enable MANA Jumbo Frame Support
linux-azure-5.19	1996536	selftests/…/nat6to4 breaks the selftests build
linux-azure-5.19	2016898	Azure: Enable MANA Jumbo Frame Support
linux-azure-6.2	2016898	Azure: Enable MANA Jumbo Frame Support
linux-firmware	1968604	rtl8761b usb bluetooth doesn’t work following reboot until unplug/replug
linux-firmware	1999375	Update dg2_dmc to 2.08
linux-firmware	1999406	Update firmware for hwe/oem kernel migrations
linux-firmware	2000133	amdgpu: missing firmware for navi31
linux-firmware	2003846	amdgpu: missing firmware for navi33
linux-firmware	2006458	Frequent wakeups on HP Pro x360 435 13.3 inch G9 using Qualcomm FastConnect 6900
linux-firmware	2007875	Ubuntu 22.04 XPS 13 plus 9320 kernel 6.0 OEM and 5.19 breaks wifi frequently
linux-firmware	2008113	Add firmware for amdgpu products with GC 11.01
linux-firmware	2008217	Unsolicited wake from suspend with bluetooth connected (Intel AX211/AX201)
linux-firmware	2009642	mt7921: add support of MTFG table
linux-firmware	2012468	Add Intel QAT Gen4 firmware
linux-firmware	2015297	Update GPU F/W for DCN 3.1.4 products to fix S0i3 issue
linux-firmware	2020627	upgrade iwlwifi firmware of FW API 72 for WiFi 6E support in Malaysia and Morocco
linux-firmware	2023193	Add firmware files for HP G10 series laptops
linux-firmware	2024427	potential S3 issue for amdgpu Navi 31/Navi33
linux-firmware	2024774	AMD Rembrandt / Phoenix PSR-SU related freezes
linux-firmware	2026253	i915: Add DMC/GuC/HuC firmware for Meteor Lake
linux-firmware	2027959	Follow-up: potential S3 issue for amdgpu Navi 31/Navi33
linux-firmware	2029396	20230323.gitbcdcfbcf-0ubuntu1.4 borks amdgpu
linux-gcp-5.19	1941893	Improve performance and idle power consumption
linux-gcp-5.19	1951563	alsa/sdw: add sdw audio machine driver for several ADL machines
linux-gcp-5.19	1953008	Support USB4 DP alt mode for AMD Yellow Carp graphics card
linux-gcp-5.19	1956780	5.15 stuck at boot on c4.large
linux-gcp-5.19	1959376	rtw88_8821ce causes freeze
linux-gcp-5.19	1965766	zfcpdump-kernel update to v5.15
linux-gcp-5.19	1971699	disable Intel DMA remapping by default
linux-gcp-5.19	1974442	enable CONFIG_DEVTMPFS_SAFE
linux-gcp-5.19	1979647	No RISC-V configuration in the unstable tree
linux-gcp-5.19	1980061	RISC-V enables CONFIG_COMPAT in the unstable branch
linux-gcp-5.19	1980484	temporarily disable CONFIG_X86_KERNEL_IBT
linux-gcp-5.19	1981437	RISC-V kernel config is out of sync with other archs
linux-gcp-5.19	1988461	intel_pmc_core not load on Raptor Lake
linux-gcp-5.19	1988711	Update Broadcom Emulex FC HBA lpfc driver to 14.2.0.5 for Ubuntu 22.04
linux-gcp-5.19	1989334	remove circular dep between linux-image and modules
linux-gcp-5.19	1990700	Fibocom WWAN FM350-GL suspend error (notebook not suspend)
linux-gcp-5.19	1993148	Support Icicle Kit reference design v2022.10
linux-gcp-5.19	1993715	AMD Cezanne takes 5 minutes to wake up from suspend
linux-gcp-5.19	1995453	Add some ACPI device IDs for Intel HID device
linux-gcp-5.19	1996112	Virtual GPU driver packaging regression
linux-gcp-5.19	1996536	selftests/…/nat6to4 breaks the selftests build
linux-gcp-5.19	1999094	mm:vma05 in ubuntu_ltp fails with ‘[vdso] bug not patched’ on kinetic/linux 5.19.0-27.28
linux-gcp-5.19	2001618	BPF_[AND
linux-gcp-6.2	2015741	efivarfs:efivarfs.sh in ubuntu_kernel_selftests crash L-6.2 ARM64 node dazzle (rcu_preempt detected stalls)
linux-gke	2022098	Severe NFS performance degradation after LP #2003053
linux-hwe-5.19	1995453	Add some ACPI device IDs for Intel HID device
linux-hwe-5.19	1996112	Virtual GPU driver packaging regression
linux-hwe-5.19	1996536	selftests/…/nat6to4 breaks the selftests build
linux-hwe-5.19	2001618	BPF_[AND
linux-intel-iotg	2022887	add Fintek F81604 can controller support
linux-lowlatency-hwe-5.19	1988461	intel_pmc_core not load on Raptor Lake
linux-lowlatency-hwe-5.19	1988711	Update Broadcom Emulex FC HBA lpfc driver to 14.2.0.5 for Ubuntu 22.04
linux-lowlatency-hwe-5.19	1989334	remove circular dep between linux-image and modules
linux-lowlatency-hwe-5.19	1990700	Fibocom WWAN FM350-GL suspend error (notebook not suspend)
linux-lowlatency-hwe-5.19	1993148	Support Icicle Kit reference design v2022.10
linux-lowlatency-hwe-5.19	1993715	AMD Cezanne takes 5 minutes to wake up from suspend
linux-lowlatency-hwe-5.19	1995453	Add some ACPI device IDs for Intel HID device
linux-lowlatency-hwe-5.19	1996112	Virtual GPU driver packaging regression
linux-lowlatency-hwe-5.19	1996536	selftests/…/nat6to4 breaks the selftests build
linux-lowlatency-hwe-5.19	1999094	mm:vma05 in ubuntu_ltp fails with ‘[vdso] bug not patched’ on kinetic/linux 5.19.0-27.28
linux-lowlatency-hwe-5.19	2001618	BPF_[AND
linux-lowlatency-hwe-6.2	1989334	remove circular dep between linux-image and modules
linux-lowlatency-hwe-6.2	2007654	enable Rust support in the kernel
linux-lowlatency-hwe-6.2	2012136	LSM stacking and AppArmor refresh for 6.2 kernel
linux-lowlatency-hwe-6.2	2012136	kinetic: apply new apparmor and LSM stacking patch set
linux-lowlatency-hwe-6.2	2012776	Neuter signing tarballs
linux-lowlatency-hwe-6.2	2013014	net:l2tp.sh failure with lunar:linux 6.2
linux-lowlatency-hwe-6.2	2015361	FTBFS with different dkms or when makeflags are set
linux-lowlatency-hwe-6.2	2015741	efivarfs:efivarfs.sh in ubuntu_kernel_selftests crash L-6.2 ARM64 node dazzle (rcu_preempt detected stalls)
linux-meta-azure-fde-5.19	2017658	FDE v5.19 edge variant meta packages are incorrectly named
linux-oem-5.17	2017013	net: sched: Fix use after free in red_enqueue()
linux-oem-6.1	1999375	Update dg2_dmc to 2.08
linux-oem-6.1	2004429	Move kernel ADT tests to python3
linux-oem-6.1	2006945	New DG2 workarounds
linux-oem-6.1	2007584	cm32181 module error blocking suspend
linux-oem-6.1	2008871	Screen backlight keeps in minimized and can’t change it with amdgpu
linux-oem-6.1	2008882	Remove all other acpi_video backlight interface on Dell AIO platforms
linux-oem-6.1	2009164	Fix screen that remains blank forever after it gets locked
linux-oem-6.1	2009642	mt7921: add support of MTFG table
linux-oem-6.1	2011379	Speaker / Audio/Mic mute LED don’t work on a HP platform
linux-oem-6.1	2011768	Fix NVME storage with RAID ON disappeared under Dell factory WINPE environment
linux-oem-6.1	2012846	Fix spurious wakeup from S5 when TBT dock is plugged
linux-oem-6.1	2013114	The panel get blank for too long after disconnecting dock with monitors
linux-oem-6.1	2018566	A deadlock issue in scsi rescan task while resuming from S3
linux-oem-6.1	2024199	Resync CI Runner Configuration
linux-restricted-modules	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-modules-aws	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-modules-aws-5.19	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-modules-azure	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-modules-azure-5.19	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-modules-gcp	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-modules-gcp-5.19	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-modules-hwe-5.19	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-modules-hwe-6.2	1991130	Add lrm autogenerated transitional independent of variants
linux-restricted-modules-intel-iotg	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-modules-lowlatency	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-modules-lowlatency-hwe-5.19	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-modules-lowlatency-hwe-6.2	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-modules-lowlatency-hwe-6.2	1991130	Add lrm autogenerated transitional independent of variants
linux-restricted-modules-oem-5.17	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-modules-oem-6.0	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-modules-oem-6.1	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-modules-oracle	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-signatures-aws	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-signatures-aws-5.19	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-signatures-azure	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-signatures-azure-5.19	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-signatures-gcp	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-signatures-gcp-5.19	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-signatures-hwe-5.19	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-signatures-intel-iotg	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-signatures-oem-5.17	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-signatures-oem-6.0	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-signatures-oem-6.1	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-restricted-signatures-oracle	1988836	LRMv7: Enable the open NVIDIA kernel modules
linux-riscv-5.19	1995453	Add some ACPI device IDs for Intel HID device
linux-riscv-5.19	1996112	Virtual GPU driver packaging regression
linux-riscv-5.19	1996536	selftests/…/nat6to4 breaks the selftests build
linux-riscv-5.19	2001618	BPF_[AND
linux-signed-gcp	2004010	Missing sbsigntool build-dependency
linux-starfive-5.19	1996536	selftests/…/nat6to4 breaks the selftests build
nvidia-graphics-drivers-390	2019869	Better support for linux 6.2
nvidia-graphics-drivers-418-server	1993328	Add support for Linux 5.19
nvidia-graphics-drivers-450-server	2012529	New upstream release
nvidia-graphics-drivers-450-server	2024675	New upstream release
nvidia-graphics-drivers-470	2012529	New upstream release
nvidia-graphics-drivers-470	2024675	New upstream release
nvidia-graphics-drivers-470-server	2012529	New upstream release
nvidia-graphics-drivers-470-server	2024675	New upstream release
nvidia-graphics-drivers-515	2012529	New upstream release
nvidia-graphics-drivers-515-server	2003995	Add Conflicts, Replaces, Provides up to libcuda-11.7-1
nvidia-graphics-drivers-515-server	2012529	New upstream release
nvidia-graphics-drivers-525	2003995	New upstream release
nvidia-graphics-drivers-525	2006937	New upstream release
nvidia-graphics-drivers-525	2012529	New upstream release
nvidia-graphics-drivers-525	2018979	New upstream release
nvidia-graphics-drivers-525	2024675	New upstream release
nvidia-graphics-drivers-525-server	2003995	New upstream release
nvidia-graphics-drivers-525-server	2012529	New upstream release
nvidia-graphics-drivers-525-server	2024675	New upstream release
nvidia-graphics-drivers-530	2015491	Initial release
nvidia-graphics-drivers-535	2024675	Initial release
nvidia-graphics-drivers-535	2028125	New upstream release
nvidia-graphics-drivers-535-server	2025243	Initial release
thermald	1981087	Fix throttled GPU
thermald	1989044	Fix RPL: Add INT3400 base path
thermald	1995606	Cherry-pick following fixes from thermald 2.5.1 and 2.5.2
thermald	2007579	Support ITMTv2 for Raptor Lake
thermald	2009676	Add support for Raptor Lake S CPUs.
thermald	2012260	Add support for Adler Lake N
thermald	2018236	Fix i9-12900k shutdown when run Prime95 and stress-ng
thermald	2018275	Fix in-motion function doesn’t work
ubuntu-drivers-common	1935070	Add some error trapping when aplay is not installed (on servers)
ubuntu-drivers-common	1966413	Fix –no-oem option stored in wrong config variable
ubuntu-drivers-common	1993019	Fix local variable ‘version’ being referenced before assignment when catching ValueError
ubuntu-drivers-common	1993019	Update regex and unify package name parsing in the following functions by using the new NvidiaPkgNameInfo class: nvidia_desktop_pre_installation_hook, _get_headless_no_dkms_metapackage, nvidia_desktop_pre_installation_hook, get_linux_modules_metapackage, This prevents ubuntu-drivers from crashing when dealing with the -open NVIDIA drivers

Unsorted changes

Source Package	Bug #	Description
alsa-ucm-conf	2006102	Backport patch to fix micmute LED (soundwire).
alsa-ucm-conf	2012590	Backport patch to update AMD micmute LED.
alsa-ucm-conf	2025353	Backport patches to add support AMD ACP RPL and Pink Sardine.
autopkgtest	2008026	Backport version 5.28 of autopkgtest.livecd-rootfs
cd-boot-images-arm64	2004164	shim 1.51.3+15.7-0ubuntu1
cd-boot-images-ppc64el	2004164	Rebuild against grub2 2.06-2ubuntu7.2
cd-boot-images-riscv64	2004164	Rebuild against latest grub2 and u-boot
debootstrap	2020530	Remove all the old symlinks that are no longer needed.
debootstrap	2024483	Restore the old symlinks removed in the previous SRU. While not needed by debootstrap itself, other tools may call debootstrap with the optional ‘script’ argument (which was always unnecessary when its value was the same as the ‘suite’ argument), and this change broke compatibility with them.
dpkg	1960582	Cherry-pick 940f86c37f9f from dpkg.git
dput	1991606	Make versions with Ubuntu suffixes compliant with PEP 440
gpgme1.0	1991606	avoid -unknown suffix
im-config	2007379	Set GTK_IM_MODULE in Ubuntu on Xorg sessions
iotop	1932523	d/p/0001-Workaround-crashes-due-to-non-UTF-8-characters-in-pr.patch: Fix the crash caused by non-UTF-8 characters by using the Python feature of replacing non-UTF-characters with the U+FFFD replacement character.
krb5	1981697	d/kdc.conf: Do not specify master key type to avoid weak crypto for new realms. Existing realms will not be changed.
livecd-rootfs	2006481	Enable the hwe kernel variant for 22.04.2
livecd-rootfs	2007863	Do not offer the hwe kernel for RISC-V server-live images
livecd-rootfs	2009067	auto/config: Add support for ubuntu core arm64 generic imagescd-boot-images-amd64
opensbi	1995860	Fix emulation of fence.tso hanging in endless loop on Allwinner D1 d/p/lib-sbi_illegal_insn-Fix-FENCE.TSO-emulation-infinit.patch
opensbi	2026588	SRU OpenSBI 1.3 to Jammy
pcsc-lite	1971984	Fix dh_installsystemd doesn’t handle files in /usr/lib/systemd/system.
py-macaroon-bakery	1970267	d/p/0001-gh88-fix-saving-macaroons-in-mozillacookie-jar.patch: Fix saving cookies to MozillaCookieJar() under python-3.10
pyroute2	1995469	d/p/iproute-linux-try-to-improve-flags-when-sending-del-msgs.patch: Cherry-picked from upstream 0.6.10 to fix delete operations that fail with ‘Operation not supported’
python-debian	1991606	Make Python version PEP440 compliant
python-tz	207604	Dynamically determine list of available and common timezones
swtpm	1992377	d/usr.bin.swtpm: Update apparmor profile to match swtpm upstream In between adding the apparmor profile to Ubuntu and merging upstream additional rules were used to cover more common use cases.
swtpm	2016744	d/p/create-user-config-files-use-correct-swtpm-localca.patch: Fix the path to swtpm-localca used in swtpm-create-user-config-files
wpebackend-fdo	2015543	New bugfix version (lp: #2015543)