{
    "summary": {
        "snap": {
            "added": [],
            "removed": [],
            "diff": [
                "lxd"
            ]
        },
        "deb": {
            "added": [],
            "removed": [],
            "diff": [
                "libp11-kit0",
                "libpam-modules",
                "libpam-modules-bin",
                "libpam-runtime",
                "libpam0g"
            ]
        }
    },
    "diff": {
        "deb": [
            {
                "name": "libp11-kit0",
                "from_version": {
                    "source_package_name": "p11-kit",
                    "source_package_version": "0.24.0-6build1",
                    "version": "0.24.0-6build1"
                },
                "to_version": {
                    "source_package_name": "p11-kit",
                    "source_package_version": "0.24.0-6ubuntu0.1",
                    "version": "0.24.0-6ubuntu0.1"
                },
                "cves": [
                    {
                        "cve": "CVE-2026-18938",
                        "url": "https://ubuntu.com/security/CVE-2026-18938",
                        "cve_description": "A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to a memory corruption issue, specifically a heap out-of-bounds write, which can crash the p11-kit RPC parsing process, resulting in a Denial of Service (DoS). This vulnerability is only exploitable on 32 bit systems.",
                        "cve_priority": "medium",
                        "cve_public_date": "2026-08-07 09:16:00 UTC"
                    },
                    {
                        "cve": "CVE-2026-13757",
                        "url": "https://ubuntu.com/security/CVE-2026-13757",
                        "cve_description": "A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.",
                        "cve_priority": "medium",
                        "cve_public_date": "2026-06-29 19:16:00 UTC"
                    }
                ],
                "launchpad_bugs_fixed": [],
                "changes": [
                    {
                        "cves": [
                            {
                                "cve": "CVE-2026-18938",
                                "url": "https://ubuntu.com/security/CVE-2026-18938",
                                "cve_description": "A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to a memory corruption issue, specifically a heap out-of-bounds write, which can crash the p11-kit RPC parsing process, resulting in a Denial of Service (DoS). This vulnerability is only exploitable on 32 bit systems.",
                                "cve_priority": "medium",
                                "cve_public_date": "2026-08-07 09:16:00 UTC"
                            },
                            {
                                "cve": "CVE-2026-13757",
                                "url": "https://ubuntu.com/security/CVE-2026-13757",
                                "cve_description": "A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.",
                                "cve_priority": "medium",
                                "cve_public_date": "2026-06-29 19:16:00 UTC"
                            }
                        ],
                        "log": [
                            "",
                            "  * SECURITY UPDATE: integer overflow in nested attribute decoding",
                            "    - debian/patches/CVE-2026-18938.patch: guard against overflow when",
                            "      decoding nested attributes (32-bit only, heap OOB write, DoS).",
                            "    - CVE-2026-18938",
                            "  * SECURITY UPDATE: unbounded recursion in RPC attribute parsing",
                            "    - debian/patches/CVE-2026-13757.patch: add recursion depth limit into",
                            "      RPC attribute parsing (stack exhaustion, DoS).",
                            "    - CVE-2026-13757",
                            ""
                        ],
                        "package": "p11-kit",
                        "version": "0.24.0-6ubuntu0.1",
                        "urgency": "medium",
                        "distributions": "jammy-security",
                        "launchpad_bugs_fixed": [],
                        "author": "Leonidas Da Silva Barbosa <leo.barbosa@canonical.com>",
                        "date": "Tue, 25 Aug 2026 07:27:31 -0300"
                    }
                ],
                "notes": null,
                "is_version_downgrade": false
            },
            {
                "name": "libpam-modules",
                "from_version": {
                    "source_package_name": "pam",
                    "source_package_version": "1.4.0-11ubuntu2.7",
                    "version": "1.4.0-11ubuntu2.7"
                },
                "to_version": {
                    "source_package_name": "pam",
                    "source_package_version": "1.4.0-11ubuntu2.8",
                    "version": "1.4.0-11ubuntu2.8"
                },
                "cves": [],
                "launchpad_bugs_fixed": [
                    2164901
                ],
                "changes": [
                    {
                        "cves": [],
                        "log": [
                            "",
                            "  * SECURITY UPDATE: account lockout bypass in pam_faillock account",
                            "    management phase (LP: #2164901)",
                            "    - debian/patches/lp-2164901.patch: skip clearing user's failed",
                            "      attempt in modules/pam_faillock/pam_faillock.8.xml,",
                            "      modules/pam_faillock/pam_faillock.c.",
                            "    - No CVE number",
                            ""
                        ],
                        "package": "pam",
                        "version": "1.4.0-11ubuntu2.8",
                        "urgency": "medium",
                        "distributions": "jammy-security",
                        "launchpad_bugs_fixed": [
                            2164901
                        ],
                        "author": "Shafayat Hossain Majumder <shafayat.majumder@canonical.com>",
                        "date": "Wed, 26 Aug 2026 15:28:32 -0400"
                    }
                ],
                "notes": null,
                "is_version_downgrade": false
            },
            {
                "name": "libpam-modules-bin",
                "from_version": {
                    "source_package_name": "pam",
                    "source_package_version": "1.4.0-11ubuntu2.7",
                    "version": "1.4.0-11ubuntu2.7"
                },
                "to_version": {
                    "source_package_name": "pam",
                    "source_package_version": "1.4.0-11ubuntu2.8",
                    "version": "1.4.0-11ubuntu2.8"
                },
                "cves": [],
                "launchpad_bugs_fixed": [
                    2164901
                ],
                "changes": [
                    {
                        "cves": [],
                        "log": [
                            "",
                            "  * SECURITY UPDATE: account lockout bypass in pam_faillock account",
                            "    management phase (LP: #2164901)",
                            "    - debian/patches/lp-2164901.patch: skip clearing user's failed",
                            "      attempt in modules/pam_faillock/pam_faillock.8.xml,",
                            "      modules/pam_faillock/pam_faillock.c.",
                            "    - No CVE number",
                            ""
                        ],
                        "package": "pam",
                        "version": "1.4.0-11ubuntu2.8",
                        "urgency": "medium",
                        "distributions": "jammy-security",
                        "launchpad_bugs_fixed": [
                            2164901
                        ],
                        "author": "Shafayat Hossain Majumder <shafayat.majumder@canonical.com>",
                        "date": "Wed, 26 Aug 2026 15:28:32 -0400"
                    }
                ],
                "notes": null,
                "is_version_downgrade": false
            },
            {
                "name": "libpam-runtime",
                "from_version": {
                    "source_package_name": "pam",
                    "source_package_version": "1.4.0-11ubuntu2.7",
                    "version": "1.4.0-11ubuntu2.7"
                },
                "to_version": {
                    "source_package_name": "pam",
                    "source_package_version": "1.4.0-11ubuntu2.8",
                    "version": "1.4.0-11ubuntu2.8"
                },
                "cves": [],
                "launchpad_bugs_fixed": [
                    2164901
                ],
                "changes": [
                    {
                        "cves": [],
                        "log": [
                            "",
                            "  * SECURITY UPDATE: account lockout bypass in pam_faillock account",
                            "    management phase (LP: #2164901)",
                            "    - debian/patches/lp-2164901.patch: skip clearing user's failed",
                            "      attempt in modules/pam_faillock/pam_faillock.8.xml,",
                            "      modules/pam_faillock/pam_faillock.c.",
                            "    - No CVE number",
                            ""
                        ],
                        "package": "pam",
                        "version": "1.4.0-11ubuntu2.8",
                        "urgency": "medium",
                        "distributions": "jammy-security",
                        "launchpad_bugs_fixed": [
                            2164901
                        ],
                        "author": "Shafayat Hossain Majumder <shafayat.majumder@canonical.com>",
                        "date": "Wed, 26 Aug 2026 15:28:32 -0400"
                    }
                ],
                "notes": null,
                "is_version_downgrade": false
            },
            {
                "name": "libpam0g",
                "from_version": {
                    "source_package_name": "pam",
                    "source_package_version": "1.4.0-11ubuntu2.7",
                    "version": "1.4.0-11ubuntu2.7"
                },
                "to_version": {
                    "source_package_name": "pam",
                    "source_package_version": "1.4.0-11ubuntu2.8",
                    "version": "1.4.0-11ubuntu2.8"
                },
                "cves": [],
                "launchpad_bugs_fixed": [
                    2164901
                ],
                "changes": [
                    {
                        "cves": [],
                        "log": [
                            "",
                            "  * SECURITY UPDATE: account lockout bypass in pam_faillock account",
                            "    management phase (LP: #2164901)",
                            "    - debian/patches/lp-2164901.patch: skip clearing user's failed",
                            "      attempt in modules/pam_faillock/pam_faillock.8.xml,",
                            "      modules/pam_faillock/pam_faillock.c.",
                            "    - No CVE number",
                            ""
                        ],
                        "package": "pam",
                        "version": "1.4.0-11ubuntu2.8",
                        "urgency": "medium",
                        "distributions": "jammy-security",
                        "launchpad_bugs_fixed": [
                            2164901
                        ],
                        "author": "Shafayat Hossain Majumder <shafayat.majumder@canonical.com>",
                        "date": "Wed, 26 Aug 2026 15:28:32 -0400"
                    }
                ],
                "notes": null,
                "is_version_downgrade": false
            }
        ],
        "snap": [
            {
                "name": "lxd",
                "from_version": {
                    "source_package_name": null,
                    "source_package_version": null,
                    "version": "40338"
                },
                "to_version": {
                    "source_package_name": null,
                    "source_package_version": null,
                    "version": "40575"
                }
            }
        ]
    },
    "added": {
        "deb": [],
        "snap": []
    },
    "removed": {
        "deb": [],
        "snap": []
    },
    "notes": "Changelog diff for Ubuntu 22.04 jammy image from release image serial 20260826 to 20260829",
    "from_series": "jammy",
    "to_series": "jammy",
    "from_serial": "20260826",
    "to_serial": "20260829",
    "from_manifest_filename": "release_manifest.previous",
    "to_manifest_filename": "manifest.current"
}