Noble Numbat Beta milestone delayed (xz/liblzma security update)
Lukasz Zemczak
lukasz.zemczak at canonical.com
Wed Apr 3 10:04:44 UTC 2024
Hello everyone,
Canonical never stops working to keep Ubuntu at the forefront of
safety, security, and reliability. As a result of CVE-2024-3094,
Canonical made the decision to remove and rebuild all binary packages
that had been built for Noble Numbat after the CVE-2024-3094 code was
committed to xz-utils (February 26th), on newly provisioned build
environments. This provides us with confidence that no binary in our
builds could have been affected by this emerging threat. As a result
of this, the Beta release for Ubuntu 24.04 LTS (Noble Numbat) has been
pushed to April 11, 2024 (previously April 4, 2024).
We appreciate your understanding and thank the community members who
are collaborating on our collective understanding of this emerging
issue.
On behalf of the Ubuntu Release team,
--
Ćukasz 'sil2100' Zemczak
Foundations Team
Tools Squad Engineering Manager
lukasz.zemczak at canonical.com
www.canonical.com
More information about the ubuntu-devel-announce
mailing list