Noble Numbat Beta milestone delayed (xz/liblzma security update)
Hello everyone,
Canonical never stops working to keep Ubuntu at the forefront of safety, security, and reliability. As a result of CVE-2024-3094, Canonical made the decision to remove and rebuild all binary packages that had been built for Noble Numbat after the CVE-2024-3094 code was committed to xz-utils (February 26th), on newly provisioned build environments. This provides us with confidence that no binary in our
builds could have been affected by this emerging threat. As a result of this, the Beta release for Ubuntu 24.04 LTS (Noble Numbat) has been pushed to April 11, 2024 (previously April 4, 2024).
We appreciate your understanding and thank the community members who are collaborating on our collective understanding of this emerging issue.
On behalf of the Ubuntu Release team,
--
Łukasz 'sil2100' Zemczak
Foundations Team
Tools Squad Engineering Manager
lukasz.zemczak@canonical.com
www.canonical.com
As a result of the CVE-2024-3094 (xz/liblzma security issue), Canonical has removed and rebuilt all binary packages that were built for Ubuntu Linux 24.04 LTS Noble Numbat. This ensures that none of the binary packages that came with their builds were compromised. The beta release has been pushed back to April 11, 2024, as a consequence of this, and the company would like to express its gratitude to the members of the community for their assistance in resolving this emerging issue.
