CINXE.COM

<!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Mantic Minotaur Release Notes - Release - Ubuntu Community Hub</title> <meta name="description" content="Mantic Minotaur Release Notes Table of Contents Introduction New features in 23.10 Known Issues Official flavours More information Introduction These release notes for Ubuntu 23.10 (Mantic Minotaur) provide an overview&hellip;"> <meta name="generator" content="Discourse 3.3.0 - https://github.com/discourse/discourse version 5bbdc8a813caf55ab3147ac65b5ffafb5e0aab90"> <link rel="icon" type="image/png" href="https://ubuntucommunity.s3.us-east-2.amazonaws.com/optimized/3X/b/e/be7e4cc6ef7ce95e285337634be009b70561d719_2_32x32.png"> <link rel="apple-touch-icon" type="image/png" href="https://ubuntucommunity.s3.us-east-2.amazonaws.com/optimized/3X/f/3/f38b9c7e7decc51bc26320541c441bfa28f99298_2_180x180.png"> <meta name="theme-color" media="all" content="#ffffff"> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, user-scalable=yes, viewport-fit=cover"> <link rel="canonical" href="https://discourse.ubuntu.com/t/mantic-minotaur-release-notes/35534" /> <link rel="search" type="application/opensearchdescription+xml" href="https://discourse.ubuntu.com/opensearch.xml" title="Ubuntu Community Hub Search"> <link href="/stylesheets/color_definitions_base__2_df74468083942b54f113bf203828e942e534e4d1.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" class="light-scheme"/> <link href="/stylesheets/desktop_28a837c05d70a85189de74e4d2b9a680476b6386.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" data-target="desktop" /> <link href="/stylesheets/checklist_28a837c05d70a85189de74e4d2b9a680476b6386.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" data-target="checklist" /> <link href="/stylesheets/discourse-calendar_28a837c05d70a85189de74e4d2b9a680476b6386.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" data-target="discourse-calendar" /> <link href="/stylesheets/discourse-data-explorer_28a837c05d70a85189de74e4d2b9a680476b6386.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" data-target="discourse-data-explorer" /> <link href="/stylesheets/discourse-details_28a837c05d70a85189de74e4d2b9a680476b6386.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" data-target="discourse-details" /> <link href="/stylesheets/discourse-gamification_28a837c05d70a85189de74e4d2b9a680476b6386.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" data-target="discourse-gamification" /> <link href="/stylesheets/discourse-lazy-videos_28a837c05d70a85189de74e4d2b9a680476b6386.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" data-target="discourse-lazy-videos" /> <link href="/stylesheets/discourse-local-dates_28a837c05d70a85189de74e4d2b9a680476b6386.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" data-target="discourse-local-dates" /> <link href="/stylesheets/discourse-narrative-bot_28a837c05d70a85189de74e4d2b9a680476b6386.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" data-target="discourse-narrative-bot" /> <link href="/stylesheets/discourse-presence_28a837c05d70a85189de74e4d2b9a680476b6386.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" data-target="discourse-presence" /> <link href="/stylesheets/discourse-rad-plugin_28a837c05d70a85189de74e4d2b9a680476b6386.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" data-target="discourse-rad-plugin" /> <link href="/stylesheets/discourse-solved_28a837c05d70a85189de74e4d2b9a680476b6386.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" data-target="discourse-solved" /> <link href="/stylesheets/discourse-templates_28a837c05d70a85189de74e4d2b9a680476b6386.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" data-target="discourse-templates" /> <link href="/stylesheets/markdown-note_28a837c05d70a85189de74e4d2b9a680476b6386.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" data-target="markdown-note" /> <link href="/stylesheets/poll_28a837c05d70a85189de74e4d2b9a680476b6386.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" data-target="poll" /> <link href="/stylesheets/spoiler-alert_28a837c05d70a85189de74e4d2b9a680476b6386.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" data-target="spoiler-alert" /> <link href="/stylesheets/discourse-calendar_desktop_28a837c05d70a85189de74e4d2b9a680476b6386.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" data-target="discourse-calendar_desktop" /> <link href="/stylesheets/discourse-gamification_desktop_28a837c05d70a85189de74e4d2b9a680476b6386.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" data-target="discourse-gamification_desktop" /> <link href="/stylesheets/poll_desktop_28a837c05d70a85189de74e4d2b9a680476b6386.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" data-target="poll_desktop" /> <link href="/stylesheets/desktop_theme_13_cadacaca089968feaf85c1112034a85b61733571.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" data-target="desktop_theme" data-theme-id="13" data-theme-name="md-composer-extras"/> <link href="/stylesheets/desktop_theme_10_d5bea094e79bb071f148ac7a6ea3cb8d1021508b.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" data-target="desktop_theme" data-theme-id="10" data-theme-name="ubuntu discourse"/> <link href="/stylesheets/desktop_theme_2_60b21d2c77ece1ab26a5e1d4ab37af1304c3ff26.css?__ws=discourse.ubuntu.com" media="all" rel="stylesheet" data-target="desktop_theme" data-theme-id="2" data-theme-name="default"/> <link href="https://fonts.googleapis.com/css?family=Ubuntu:100,300,400" rel="stylesheet"> <style> body { font-family: 'Ubuntu', sans-serif; font-weight: 400; } h1 { font-weight: 100; } </style> <meta name="google-site-verification" content="grFP-bTinUn8jXfEmhZCV8ccDV1IJG2wexOuguu7z_M"> <script defer="" src="/theme-javascripts/f7a737190fe36b9aee0dd740a1ddde023af282d4.js?__ws=discourse.ubuntu.com" data-theme-id="2" nonce="6RBybSzNuCbV2kAur7cS45vs9"></script> <link href="https://fonts.googleapis.com/css?family=Ubuntu:100,400,700" rel="stylesheet" type="text/css"> <script defer="" src="/theme-javascripts/1d29d1e3d25a498707fc181a041c9152fb489073.js?__ws=discourse.ubuntu.com" data-theme-id="13" nonce="6RBybSzNuCbV2kAur7cS45vs9"></script> <script defer="" src="/theme-javascripts/5fd6ab93349b47da044725d430da846ba195a894.js?__ws=discourse.ubuntu.com" data-theme-id="15" nonce="6RBybSzNuCbV2kAur7cS45vs9"></script> <link rel="alternate nofollow" type="application/rss+xml" title="RSS feed of 'Mantic Minotaur Release Notes'" href="https://discourse.ubuntu.com/t/mantic-minotaur-release-notes/35534.rss" /> <meta property="og:site_name" content="Ubuntu Community Hub" /> <meta property="og:type" content="website" /> <meta name="twitter:card" content="summary" /> <meta name="twitter:image" content="https://ubuntucommunity.s3.us-east-2.amazonaws.com/original/3X/6/2/6217e85bdc9dbe7aa3cb089957430be9cbd080a9.png" /> <meta property="og:image" content="https://ubuntucommunity.s3.us-east-2.amazonaws.com/original/3X/6/2/6217e85bdc9dbe7aa3cb089957430be9cbd080a9.png" /> <meta property="og:url" content="https://discourse.ubuntu.com/t/mantic-minotaur-release-notes/35534" /> <meta name="twitter:url" content="https://discourse.ubuntu.com/t/mantic-minotaur-release-notes/35534" /> <meta property="og:title" content="Mantic Minotaur Release Notes" /> <meta name="twitter:title" content="Mantic Minotaur Release Notes" /> <meta property="og:description" content="Mantic Minotaur Release Notes Table of Contents Introduction New features in 23.10 Known Issues Official flavours More information Introduction These release notes for Ubuntu 23.10 (Mantic Minotaur) provide an overview of the release and document the known issues with Ubuntu and its flavours. Support lifespan Ubuntu 23.10 will be supported for 9 months until July 2024. If you need Long Term Support, we recommend you use Ubuntu 22.04 LTS instead. New features in 23.10 Updated Packages add-ap..." /> <meta name="twitter:description" content="Mantic Minotaur Release Notes Table of Contents Introduction New features in 23.10 Known Issues Official flavours More information Introduction These release notes for Ubuntu 23.10 (Mantic Minotaur) provide an overview of the release and document the known issues with Ubuntu and its flavours. Support lifespan Ubuntu 23.10 will be supported for 9 months until July 2024. If you need Long Term Support, we recommend you use Ubuntu 22.04 LTS instead. New features in 23.10 Updated Packages add-ap..." /> <meta property="og:article:section" content="Release" /> <meta property="og:article:section:color" content="0088CC" /> <meta name="twitter:label1" value="Reading time" /> <meta name="twitter:data1" value="12 mins 🕑" /> <meta name="twitter:label2" value="Likes" /> <meta name="twitter:data2" value="6 ❤" /> <meta property="article:published_time" content="2023-11-20T09:37:31+00:00" /> <meta property="og:ignore_canonical" content="true" /> <script type="application/ld+json">{"@context":"http://schema.org","@type":"QAPage","name":"Mantic Minotaur Release Notes","mainEntity":{"@type":"Question","name":"Mantic Minotaur Release Notes","text":"<a name=\"mantic-minotaur-release-notes-1\" class=\"anchor\" href=\"#mantic-minotaur-release-notes-1\"><\/a>Mantic Minotaur Release Notes\n\n<a name=\"table-of-contents-2\" class=\"anchor\" href=\"#table-of-contents-2\"><\/a>Table of Contents\n\n<a href=\"#heading--introduction\">Introduction<\/a>\n\n<a href=\"#heading--new-features-in-23-10\">New features in 23.10<\/a>\n\n<a href=\"#heading--known-issues\">Known Issues<\/a>\n\n<a href=\"#heading--official-flavours\">Official flavours<\/a>\n\n<a href=\"#heading--more-information\">More information<\/a>\n\nIntroduction\n\nThese release notes for Ubuntu 23.10 (Mantic Minotaur) provide an overview of the release and document the known issues with Ubuntu and its flavours.\n\n<a name=\"support-lifespan-3\" class=\"anchor\" href=\"#support-lifespan-3\"><\/a>Sup…","upvoteCount":6,"answerCount":0,"datePublished":"2023-05-02T14:23:19.557Z","author":{"@type":"Person","name":"utkarsh","url":"https://discourse.ubuntu.com/u/utkarsh"}}}</script> </head> <body class="crawler browser-update"> <nav class="p-navigation--secondary"> <div class="u-fixed-width"> <a class="p-navigation--secondary__banner" href="/"> <h5 class="p-navigation--secondary__logo"> Discourse </h5> </a> </div> </nav> <header> <a href="/"> Ubuntu Community Hub </a> </header> <div id="main-outlet" class="wrap" role="main"> <div id="topic-title"> <h1> <a href="/t/mantic-minotaur-release-notes/35534">Mantic Minotaur Release Notes</a> </h1> <div class="topic-category" itemscope itemtype="http://schema.org/BreadcrumbList"> <span itemprop="itemListElement" itemscope itemtype="http://schema.org/ListItem"> <a href="/c/release/38" class="badge-wrapper bullet" itemprop="item"> <span class='badge-category-bg' style='background-color: #0088CC'></span> <span class='badge-category clear-badge'> <span class='category-name' itemprop='name'>Release</span> </span> </a> <meta itemprop="position" content="1" /> </span> </div> </div> <div itemscope itemtype='http://schema.org/DiscussionForumPosting'> <meta itemprop='headline' content='Mantic Minotaur Release Notes'> <link itemprop='url' href='https://discourse.ubuntu.com/t/mantic-minotaur-release-notes/35534'> <meta itemprop='datePublished' content='2023-05-02T14:23:19Z'> <meta itemprop='articleSection' content='Release'> <meta itemprop='keywords' content=''> <div itemprop='publisher' itemscope itemtype="http://schema.org/Organization"> <meta itemprop='name' content='Canonical Inc.'> <div itemprop='logo' itemscope itemtype="http://schema.org/ImageObject"> <meta itemprop='url' content='https://ubuntucommunity.s3.us-east-2.amazonaws.com/original/3X/d/1/d1318a905da7b730a81d0b3f393762cb7d478e38.svg'> </div> </div> <div id='post_1' class='topic-body crawler-post'> <div class='crawler-post-meta'> <span class="creator" itemprop="author" itemscope itemtype="http://schema.org/Person"> <a itemprop="url" href='https://discourse.ubuntu.com/u/utkarsh'><span itemprop='name'>utkarsh</span></a> </span> <link itemprop="mainEntityOfPage" href="https://discourse.ubuntu.com/t/mantic-minotaur-release-notes/35534"> <link itemprop="image" href="https://ubuntucommunity.s3.us-east-2.amazonaws.com/original/3X/6/2/6217e85bdc9dbe7aa3cb089957430be9cbd080a9.png"> <span class="crawler-post-infos"> <time datetime='2023-05-02T14:23:19Z' class='post-time'> May 2, 2023, 2:23pm </time> <meta itemprop='dateModified' content='2023-11-20T09:37:29Z'> <span itemprop='position'>1</span> </span> </div> <div class='post' itemprop='text'> <h1><a name="mantic-minotaur-release-notes-1" class="anchor" href="#mantic-minotaur-release-notes-1"></a>Mantic Minotaur Release Notes</h1> <h1><a name="table-of-contents-2" class="anchor" href="#table-of-contents-2"></a>Table of Contents</h1> <ul> <li><a href="#heading--introduction">Introduction</a></li> <li><a href="#heading--new-features-in-23-10">New features in 23.10</a></li> <li><a href="#heading--known-issues">Known Issues</a></li> <li><a href="#heading--official-flavours">Official flavours</a></li> <li><a href="#heading--more-information">More information</a></li> </ul> <h1 id="heading--introduction">Introduction</h1> <p>These release notes for <strong>Ubuntu 23.10</strong> (Mantic Minotaur) provide an overview of the release and document the known issues with Ubuntu and its flavours.</p> <h2><a name="support-lifespan-3" class="anchor" href="#support-lifespan-3"></a>Support lifespan</h2> <p>Ubuntu 23.10 will be supported for 9 months until July 2024. If you need Long Term Support, we recommend you use <a href="https://wiki.ubuntu.com/JammyJellyfish/ReleaseNotes/">Ubuntu 22.04 LTS</a> instead.</p> <h1 id="heading--new-features-in-23-10">New features in 23.10</h1> <h2><a name="updated-packages-4" class="anchor" href="#updated-packages-4"></a>Updated Packages</h2> <ul> <li><code>add-apt-repository</code> now adds PPAs as deb822 <code>.sources</code> files (<a href="https://discourse.ubuntu.com/t/improvements-to-ppa-management-in-23-10/35783" class="inline-onebox">Improvements to PPA management in 23.10</a>).</li> </ul> <h2><a name="linux-kernel-5" class="anchor" href="#linux-kernel-5"></a>Linux kernel <img src="https://discourse.ubuntu.com/images/emoji/twitter/penguin.png?v=12" title=":penguin:" class="emoji" alt=":penguin:" loading="lazy" width="20" height="20"></h2> <p>Ubuntu 23.10 includes the new 6.5 Linux kernel that brings many new features.</p> <p>Notable upstream changes:</p> <ul> <li>Intel’s “Topology Aware Register and PM Capsule Interface” (interface that provides better power-management features).</li> <li>arm64 permission-indirection extension (technology to set special memory permissions).</li> <li>RISC-V now supports ACPI.</li> <li>The Loongarch architecture now supports simultaneous multi-threading (SMT).</li> <li>Support for unaccepted memory (protocol by which secure guest systems accept memory allocated by the host - <a href="https://lwn.net/Articles/928328/">Seeking an acceptable unaccepted memory policy</a>.</li> <li>The io_uring subsystem can now store the rings and submission queue in user-space memory.</li> <li>Ability to mount a file system underneath an existing mount on the same mount point; useful in container scenarios (<a href="https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c0a572d9d32f">Merge tag ‘v6.5/vfs.mount’ of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs</a>).</li> <li>New <code>cachestat()</code> system call (query the page-cache state of files and directories).</li> <li>Usual set of changes to support new hardware.</li> </ul> <p>Notable Ubuntu-specific changes:</p> <ul> <li>zstd compressed modules (<a href="https://bugs.launchpad.net/bugs/2028568">LP: #2028568</a>) to shorten boot time.</li> <li>New Apparmor/Stacking LSM patch set.</li> <li>Updated shiftfs patch set.</li> <li>Enabled multi-gen LRU page reclaiming by default (<a href="https://bugs.launchpad.net/bugs/2023629">LP: #2023629</a>).</li> <li><code>.config</code> tuning of the low-latency kernel for desktop-oriented tasks (<a href="https://bugs.launchpad.net/bugs/2023007">LP: #2028568</a>).</li> <li>New zfs 2.2.0~rc3.</li> <li>Ceph support for idmapped mounts.</li> </ul> <h2><a name="systemd-v2535-6" class="anchor" href="#systemd-v2535-6"></a>systemd v253.5</h2> <p>The init system was updated to systemd v253.5. See the <a href="https://github.com/systemd/systemd/releases/tag/v253">upstream changelog</a> for more information about individual features.</p> <h2><a name="netplan-v0107-7" class="anchor" href="#netplan-v0107-7"></a>Netplan v0.107</h2> <p>The network stack was updated to <a href="https://discourse.ubuntu.com/t/blog-netplan-developer-diaries/35932/6">Netplan v0.107</a>, introducing support for <code>dummy</code> and <code>veth</code> devices in addition to providing Python bindings to <code>libnetplan</code> in the <strong>python3-netplan</strong> package.</p> <h2><a name="toolchain-upgrades-8" class="anchor" href="#toolchain-upgrades-8"></a>Toolchain Upgrades <img src="https://discourse.ubuntu.com/images/emoji/twitter/hammer_and_wrench.png?v=12" title=":hammer_and_wrench:" class="emoji" alt=":hammer_and_wrench:" loading="lazy" width="20" height="20"></h2> <ul> <li>GCC was updated to the 13.2.0 release, binutils to 2.41, and glibc to 2.38.</li> <li>Python <img src="https://discourse.ubuntu.com/images/emoji/twitter/snake.png?v=12" title=":snake:" class="emoji" alt=":snake:" loading="lazy" width="20" height="20"> now defaults to version 3.11.6, and 3.12.0 is available in the archive.</li> <li>Perl <img src="https://discourse.ubuntu.com/images/emoji/twitter/camel.png?v=12" title=":camel:" class="emoji" alt=":camel:" loading="lazy" width="20" height="20"> at version 5.36.0.</li> <li>LLVM now defaults to version 16, and 17 is available in the archive.</li> <li>Rust <img src="https://discourse.ubuntu.com/images/emoji/twitter/crab.png?v=12" title=":crab:" class="emoji" alt=":crab:" loading="lazy" width="20" height="20"> toolchain defaults to version 1.71.</li> </ul> <h3><a name="openjdk-9" class="anchor" href="#openjdk-9"></a>OpenJDK</h3> <p>In addition to OpenJDK 17, OpenJDK 21 is now provided (but not used for package builds).</p> <h3><a name="net-10" class="anchor" href="#net-10"></a>.NET</h3> <p>.NET 7 packages were updated to 7.0.110, and .NET 6 packages were updated to 6.0.121</p> <h3><a name="golang-11" class="anchor" href="#golang-11"></a>golang</h3> <p>Go was updated to version 1.21. See the <a href="https://go.dev/doc/go1.21">upstream release notes</a> for all the changes.</p> <h2><a name="security-improvements-12" class="anchor" href="#security-improvements-12"></a>Security Improvements <img src="https://discourse.ubuntu.com/images/emoji/twitter/lock.png?v=12" title=":lock:" class="emoji" alt=":lock:" loading="lazy" width="20" height="20"></h2> <p>The Ubuntu kernel now has the ability to require programs to have an AppArmor profile in order to use unprivileged user namespaces (<a href="https://gitlab.com/apparmor/apparmor/-/wikis/unprivileged_userns_restriction">unprivileged_userns_restriction</a>). This restriction is not currently enabled by default but when enabled affects all programs on the system that are unprivileged and unconfined. This affects programs that construct sandboxes (<a href="https://bugs.launchpad.net/ubuntu/+source/linux-meta-nvidia-5.19/+bug/2017980">LP: #2017980</a>) or work with some styles of container workloads. This is the first step towards trying to mitigate the larger attack surface presented by unprivileged user namespaces.</p> <p>To enable this new restriction:</p> <ul> <li> <p>Enable this restriction on the entire system for one boot by executing <code>echo 1 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns</code>. This setting is lost on reboot.</p> </li> <li> <p>Enable this restriction using a persistent setting by adding a new file (<code>/etc/sysctl.d/60-apparmor-namespace.conf</code>) with the following contents:</p> <pre><code class="lang-auto">kernel.apparmor_restrict_unprivileged_userns=1 </code></pre> <p>Reboot.</p> </li> </ul> <p>There are several options if you run into problems:</p> <ul> <li> <p>Confine your applications with an AppArmor profile. Because this can be potentially onerous, a new <code>unconfined</code> profile mode/flag has been added to AppArmor. This designates the profile to essentially act like the unconfined mode for AppArmor where an application is not restricted, and it allows additional permissions to be added, such as the <code>userns,</code> permission. Such profile for, e.g. <a href="https://www.google.com/chrome/?platform=linux">Google Chrome</a>, would look like the following, and it would be located within the <code>/etc/apparmor.d/opt.google.chrome.chrome</code> file:</p> <pre><code class="lang-auto">abi <abi/4.0>, include <tunables/global> /opt/google/chrome/chrome flags=(unconfined) { userns, # Site-specific additions and overrides. See local/README for details. include if exists <local/opt.google.chrome.chrome> } </code></pre> <p>Alternatively, a complete AppArmor profile for the application can be created (see the <a href="https://ubuntu.com/server/docs/security-apparmor">AppArmor</a> documentation).</p> </li> <li> <p>Launch your application in a way that doesn’t use unprivileged user namespaces, e.g. <code>google-chrome-stable --no-sandbox</code>. This is not recommended. Use the <code>unconfined</code> profile mode described above instead.</p> </li> <li> <p>Disable this restriction on the entire system for one boot by executing <code>echo 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns</code>. This setting is lost on reboot. This similar to the previous behaviour, but it does not mitigate against kernel exploits that abuse the unprivileged user-namespaces feature.</p> </li> <li> <p>Disable this restriction using a persistent setting by adding a new file (<code>/etc/sysctl.d/60-apparmor-namespace.conf</code>) with the following contents:</p> <pre><code class="lang-auto">kernel.apparmor_restrict_unprivileged_userns=0 </code></pre> <p>Reboot. This is similar to the previous behaviour, but it does not mitigate against kernel exploits that abuse the unprivileged user-namespaces feature.</p> </li> </ul> <h2><a name="ubuntu-desktop-13" class="anchor" href="#ubuntu-desktop-13"></a>Ubuntu Desktop</h2> <h3><a name="installer-and-upgrades-14" class="anchor" href="#installer-and-upgrades-14"></a>Installer and Upgrades</h3> <ul> <li> <p>The default Ubuntu Desktop installation is now <strong>minimal</strong>. There is still an “Expanded installation” option for those who prefer to have applications like LibreOffice and Thunderbird installed for the first boot. (The “Full” option is still the default with the legacy Desktop installer.)</p> </li> <li> <p>We are reintroducing support for <strong>ZFS guided installations</strong>, enhancing the flexibility and choices available for your storage management needs. This is a new implementation in the Subiquity-based installers, and is without encryption by default. The encrypted ZFS guided option will be developed in a future release.</p> </li> <li> <p>Starting with Ubuntu 23.10, <strong>TPM-backed full-disk encryption</strong> (FDE) is introduced as an experimental feature, building on years of experience with Ubuntu Core. On supported platforms, you no longer need to enter passphrases at boot manually. Instead, the TPM securely manages the decryption key, providing enhanced security against physical attacks. This new feature streamlines the user experience and offers additional layers of security, especially in enterprise environments. However, the traditional passphrase-backed FDE is still available for those who prefer it. We invite users to experiment with this new feature, although caution is advised as it’s still experimental. More details in the <a href="https://ubuntu.com/blog/tpm-backed-full-disk-encryption-is-coming-to-ubuntu">TPM-backed Full Disk Encryption is coming to Ubuntu</a> blog post. Do not hesitate to <a href="https://bugs.launchpad.net/ubuntu-desktop-installer/+filebug">report bugs in Launchpad against the ubuntu-desktop-installer project</a>.</p> <p>Known limitations:</p> <ul> <li>Requires TPM 2.0.</li> <li>Only a limited set of hardware is supported.</li> <li>No external kernel-modules support. For example, no support of NVIDIA graphics cards.</li> </ul> </li> <li> <p>The configuration file, <code>/etc/netplan/01-network-manager-all.yaml</code> (which specifies Network Manager as the Netplan renderer), has been moved to <code>/lib/netplan/00-network-manager-all.yaml</code> to reflect that it should not be edited. Also, it is now owned by the <code>ubuntu-settings</code> package. For upgraders, the move is be performed automatically and the old file removed if it was unchanged. If it was changed, the move still takes place, but a copy of the old file is left in <code>/etc/netplan/01-network-manager-all.yaml.dpkg-backup</code> (<a href="https://bugs.launchpad.net/ubuntu/+source/ubuntu-settings/+bug/2020110">LP: #2020110</a>).</p> </li> <li> <p><strong>NetworkManager now uses Netplan</strong> as its default settings-storage backend. On upgrade, all connection profiles from <code>/etc/NetworkManager/system-connections/</code> are transparently migrated to <code>/etc/netplan/90-NM-*.yaml</code> and become ephemeral, Netplan-rendered connection profiles in <code>/run/NetworkManager/system-connections/</code>. Backups of the original profiles are automatically created in <code>/var/lib/NetworkManager/backups/</code> (read more at <a href="https://netplan.readthedocs.io/en/stable/netplan-everywhere">NetworkManager YAML settings backend</a> and <a href="https://bugs.launchpad.net/netplan/+bug/1985994">LP: #1985994</a>).</p> </li> <li> <p><strong>ADSys Active Directory Certificates auto-enrollment:</strong> Windows Server offers a solution for auto-enrolling certificates using Group Policies. This interacts with Certificate Enrollment Services by Microsoft and works seamlessly with Windows clients.</p> <p>ADSys introduces AD certificates auto-enrollment to streamline connecting to corporate Wi-Fi and VPN networks. Automated enrollment eliminates the need for manual interactions with the certificate authority, such as pre-creating certificates. This simplifies IT administration and minimises security risks associated with managing sensitive data.</p> </li> <li> <p>The installer is now able to update itself and will prompt the user to update in the very early stages of the installation if a newer version is available.</p> </li> </ul> <h3><a name="new-store-15" class="anchor" href="#new-store-15"></a>New Store</h3> <ul> <li> <p>There is a brand new <strong>Ubuntu App Center</strong> that replaces the previous Snap Store. The application has been written from scratch using the Flutter toolkit.</p> </li> <li> <p>There is also a new standalone <strong>Firmware Updater</strong> application. This provides the possibility to update firmware without needing to have a full app store running continuously in the background.</p> </li> </ul> <h3><a name="gnome-footprints-16" class="anchor" href="#gnome-footprints-16"></a>GNOME <img src="https://discourse.ubuntu.com/images/emoji/twitter/footprints.png?v=12" title=":footprints:" class="emoji" alt=":footprints:" loading="lazy" width="20" height="20"></h3> <ul> <li>GNOME has been updated to include new features and fixes from the latest GNOME release, <a href="https://release.gnome.org/45/">GNOME 45</a>.</li> <li>The <strong>GNOME Clocks</strong> application is installed by default.</li> </ul> <h3><a name="updated-ubuntu-font-17" class="anchor" href="#updated-ubuntu-font-17"></a>Updated Ubuntu font</h3> <ul> <li>There is now a <code>fonts-ubuntu-classic</code> package. Install it if you prefer the style of the Ubuntu font before Ubuntu 23.04.</li> </ul> <h3><a name="updated-applications-18" class="anchor" href="#updated-applications-18"></a>Updated Applications</h3> <ul> <li><a href="https://mozilla.org/firefox/releases/">Firefox</a> 118 <img src="https://discourse.ubuntu.com/images/emoji/twitter/fire.png?v=12" title=":fire:" class="emoji" alt=":fire:" loading="lazy" width="20" height="20"><img src="https://discourse.ubuntu.com/images/emoji/twitter/fox_face.png?v=12" title=":fox_face:" class="emoji" alt=":fox_face:" loading="lazy" width="20" height="20"> <ul> <li>Firefox is a native <a href="https://discourse.ubuntu.com/t/firefox-snap-with-wayland-enabled-by-default-in-ubuntu-23-10-mantic-minotaur/38660">Wayland application</a> for this Ubuntu release.</li> </ul> </li> <li><a href="https://wiki.documentfoundation.org/ReleaseNotes/7.6">LibreOffice 7.6</a> <img src="https://discourse.ubuntu.com/images/emoji/twitter/books.png?v=12" title=":books:" class="emoji" alt=":books:" loading="lazy" width="20" height="20"></li> <li><a href="https://blog.thunderbird.net/2023/07/our-fastest-most-beautiful-release-ever-thunderbird-115-supernova-is-here/">Thunderbird 115.2 “Supernova”</a> <img src="https://discourse.ubuntu.com/images/emoji/twitter/cloud_with_lightning.png?v=12" title=":cloud_with_lightning:" class="emoji" alt=":cloud_with_lightning:" loading="lazy" width="20" height="20"><img src="https://discourse.ubuntu.com/images/emoji/twitter/bird.png?v=12" title=":bird:" class="emoji" alt=":bird:" loading="lazy" width="20" height="20"></li> </ul> <h3><a name="updated-subsystems-19" class="anchor" href="#updated-subsystems-19"></a>Updated Subsystems</h3> <ul> <li><a href="https://git.kernel.org/pub/scm/bluetooth/bluez.git/tree/ChangeLog?id=5.68">BlueZ 5.68</a></li> <li><a href="https://cairographics.org/news/cairo-1.18.0/">Cairo 1.18</a></li> <li><a href="https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/blob/nm-1-44/NEWS">NetworkManager 1.44</a></li> <li><a href="https://gitlab.freedesktop.org/pipewire/pipewire/-/blob/0.3.79/NEWS">Pipewire 0.3.79</a></li> <li><a href="https://gitlab.freedesktop.org/poppler/poppler/-/blob/poppler-23.08.0/NEWS">Poppler 23.08</a></li> <li><a href="https://github.com/flatpak/xdg-desktop-portal/blob/1.18.0/NEWS">xdg-desktop-portal 1.18</a></li> </ul> <h2><a name="ubuntu-server-20" class="anchor" href="#ubuntu-server-20"></a>Ubuntu Server</h2> <h3><a name="apache2-21" class="anchor" href="#apache2-21"></a>Apache2</h3> <p>apache2 has been upgraded from 2.4.55 to 2.4.57, which adds the <code>BCTLS</code> and <code>BNE</code> RewriteRule flags to <code>mod_rewrite</code> and fixes security issues and several bugs.</p> <h3><a name="django-22" class="anchor" href="#django-22"></a>Django</h3> <p>Django has been updated to the latest LTS release 4.2 from 3.2, which includes many new features and bug fixes. All Django middleware provided in Ubuntu has also been updated to be compatible with the new version. See the <a href="https://docs.djangoproject.com/en/4.2/releases/4.0/">4.0 release notes</a> for features and updates added with the major version change and the <a href="https://docs.djangoproject.com/en/4.2/releases/4.2/">4.2 release notes</a> for the changes made leading up to the LTS release.</p> <h3><a name="dovecot-23" class="anchor" href="#dovecot-23"></a>Dovecot</h3> <p>Dovecot received a micro-point update to 2.3.20 from 2.3.19, which contains mainly bugfixes. There is also a new <code>dsync_features=no-header-hashes</code> setting, which enables an optimization that assumes identical IMAP UIDs contain the same mail contents. This is useful on IMAP servers that don’t cache the <code>Date/Message-ID</code> headers. There are also new Lua HTTP client settings and a new <code>doveadm replicator status</code> command.</p> <h3><a name="monitoring-plugins-24" class="anchor" href="#monitoring-plugins-24"></a>Monitoring Plugins</h3> <p>A micro-version release updates <code>monitoring-plugins</code> from 2.3.2 to 2.3.3. It provides one general new feature to use PRId64 and PRIu64 instead of <code>%ld</code> directly. See the <a href="https://www.monitoring-plugins.org/news/release-2-3-3.html">release notes</a> for details on bugfixes and other enhancements.</p> <h3><a name="nginx-25" class="anchor" href="#nginx-25"></a>Nginx</h3> <p>Nginx is updated from version 1.22 to 1.24, which is predominantly comprised of bugfixes and a few minor features and refinements. See the <a href="https://nginx.org/en/CHANGES-1.24">upstream changelog</a> for full details.</p> <h3><a name="spamassassin-26" class="anchor" href="#spamassassin-26"></a>Spamassassin</h3> <p>Spamassassin 4 introduced support for DMARC. However, this depends on Perl modules not yet available from the main Ubuntu repository, so it is not enabled by default. The dependencies all exist in the universe repository. To enable it, manually install <code>libmail-dmarc-perl</code> alongside your Spamassassin installation, and update your Spamassassin configuration accordingly (see <a href="https://bugs.launchpad.net/ubuntu/+source/libmail-dmarc-perl/+bug/2023971">LP: #2023971</a>).</p> <h3><a name="docker-27" class="anchor" href="#docker-27"></a>Docker</h3> <p>The <code>docker.io</code> package has been updated to version 24.0.5, which includes changes that can be seen in the <a href="https://docs.docker.com/engine/release-notes/24.0/">upstream release notes</a>. There are also two new Docker CLI plugins available in the Ubuntu archive:</p> <ul> <li><code>docker-buildx</code> version 0.11.2.</li> <li><code>docker-compose-v2</code> version 2.20.2.</li> </ul> <p><strong>NOTE</strong>: The deprecated AUFS and legacy overlay storage drivers have been removed.</p> <h3><a name="containerd-28" class="anchor" href="#containerd-28"></a>Containerd</h3> <p>Containerd has been updated to version 1.7.2. See the <a href="https://github.com/containerd/containerd/releases/tag/v1.7.2">upstream release notes</a> for all the changes.</p> <h3><a name="runc-29" class="anchor" href="#runc-29"></a>Runc</h3> <p>Runc has been updated to version 1.1.7. See the <a href="https://github.com/opencontainers/runc/blob/main/CHANGELOG.md#117---2023-04-26">upstream release notes</a> for all the changes.</p> <h3><a name="samba-30" class="anchor" href="#samba-30"></a>Samba</h3> <p>The <a href="https://www.samba.org/">samba </a> package was updated to the 4.18.x series. Here are the upstream release notes: <a href="https://www.samba.org/samba/history/samba-4.18.0.html">https://www.samba.org/samba/history/samba-4.18.0.html </a></p> <p>Like was the case with the 4.17.x versions, this 4.18.x series further improves the performance of open/close operations and brings it back to the level of the 4.12 line, before a series of security fixes introduced this performance impact.</p> <p>Please refer to the upstream release notes for more details on this and other changes.</p> <h3><a name="isc-kea-31" class="anchor" href="#isc-kea-31"></a>ISC Kea</h3> <p>The <a href="https://kea.isc.org/">ISC Kea DHCP server</a> was updated to the <a href="https://lists.isc.org/pipermail/kea-announce/2023-July/000100.html">2.2.1 maintenance release</a> which brings some bug fixes and other smaller improvements. Please see the <a href="https://lists.isc.org/pipermail/kea-announce/2023-July/000100.html">announcement</a> for details.</p> <p>The Ubuntu packaging is in sync with Debian and also got some translation updates and the AppArmor profile, introduced a few releases ago, received some tweaks.</p> <h3><a name="qemu-32" class="anchor" href="#qemu-32"></a>QEMU</h3> <p>The <a href="https://qemu.org">QEMU</a> package was updated to the 8.0.x series, which brings many bug fixes and new features.</p> <ul> <li>Support for the Sapphire Rapids CPU model.</li> <li>System emulation on 32-bit x86 hosts has been deprecated. The QEMU project no longer considers 32-bit x86 host support for system emulation to be an effective use of its limited resources, and thus intends to discontinue. User mode emulation continues to be supported on 32-bit hosts.</li> <li>Support for <code>igb</code> device emulation.</li> <li>Many fixes and improvements to the RISC-V support.</li> </ul> <p>For more details, please see <a href="https://wiki.qemu.org/ChangeLog/8.0">the upstream changelog</a>.</p> <h3><a name="libvirt-33" class="anchor" href="#libvirt-33"></a>libvirt</h3> <p>The <a href="https://www.libvirt.org">libvirt</a> package was updated to version 9.6.0. These are the noteworthy changes to this release.</p> <ul> <li>For QEMU: <ul> <li>Introduce support for <code>igb</code> network interface model.</li> <li>Support compression for parallel migration</li> <li>Add Sapphire Rapids CPU model</li> <li>Support <code>removable</code> attribute for SCSI disk</li> </ul> </li> </ul> <p>For more details, please see <a href="https://www.libvirt.org/news.html">the upstream changelog</a>.</p> <h3><a name="openldap-34" class="anchor" href="#openldap-34"></a>OpenLDAP</h3> <p>The <a href="https://openldap.org">OpenLDAP</a> package was updated to version 2.6.6, which brings several bug fixes. For more details, please see <a href="https://www.openldap.org/software/release/changes.html">the upstream changelog</a>.</p> <h3><a name="sssd-35" class="anchor" href="#sssd-35"></a>sssd</h3> <p>The <a href="https://sssd.io">sssd</a> package was updated to version 2.9.1, which brings several bug fixes and new features.</p> <ul> <li><code>sss_simpleifp</code> library is deprecated and might be removed in further releases.</li> <li>“Files provider” (i.e. <code>id_provider = files</code>) is deprecated and might be removed in further releases. Consider using “Proxy provider” with <code>proxy_lib_name = files</code> instead.</li> <li>Add support for <code>ldapi://</code> URLs to allow connections to local LDAP servers.</li> </ul> <p>For more details, please see <a href="https://sssd.io/release-notes/sssd-2.9.1.html">the upstream changelog</a>.</p> <h3><a name="subiquity-36" class="anchor" href="#subiquity-36"></a>Subiquity</h3> <p>A new version of the Subiquity server installer has been released. Please read the full <a href="https://github.com/canonical/subiquity/releases/tag/23.10.1">release notes for 23.10.1</a> on GitHub.</p> <h3><a name="openstack-37" class="anchor" href="#openstack-37"></a>OpenStack</h3> <p>Ubuntu 23.10 includes the latest OpenStack release, 2023.2 Bobcat, including the following components:</p> <ul> <li>OpenStack Identity - Keystone</li> <li>OpenStack Imaging - Glance</li> <li>OpenStack Block Storage - Cinder</li> <li>OpenStack Compute - Nova</li> <li>OpenStack Networking - Neutron</li> <li>OpenStack Telemetry - Ceilometer, Aodh, Gnocchi</li> <li>OpenStack Orchestration - Heat</li> <li>OpenStack Dashboard - Horizon</li> <li>OpenStack Object Storage - Swift</li> <li>OpenStack DNS - Designate</li> <li>OpenStack Bare-metal - Ironic</li> <li>OpenStack Filesystem - Manila</li> <li>OpenStack Key Manager - Barbican</li> <li>OpenStack Load Balancer - Octavia</li> <li>OpenStack Instance HA - Masakari</li> <li>OpenStack Container Orchestration - Magnum</li> </ul> <p>Please refer to the <a href="https://releases.openstack.org/bobcat/">OpenStack 2023.2 Bobcat release notes</a> for full details of this release of OpenStack.</p> <p>OpenStack 2023.2 Bobcat is also provided via the Ubuntu Cloud Archive for Ubuntu 22.04 LTS. The Ubuntu Cloud Archive for OpenStack 2023.2 Bobcat can be enabled on Ubuntu 22.04 by running the following command:</p> <blockquote> <p>sudo add-apt-repository cloud-archive:bobcat</p> </blockquote> <p>WARNING: Upgrading an OpenStack deployment is a non-trivial process and care should be taken to plan and test upgrade procedures which will be specific to each OpenStack deployment.</p> <p>Make sure you read the <a href="https://docs.openstack.org/charm-guide/latest">OpenStack Charm Release Notes</a> for more information about how to deploy and operate Ubuntu OpenStack using Juju.</p> <h2><a name="platforms-38" class="anchor" href="#platforms-38"></a>Platforms</h2> <h3><a name="public-cloud-39" class="anchor" href="#public-cloud-39"></a>Public Cloud</h3> <h4><a name="all-40" class="anchor" href="#all-40"></a>All</h4> <ul> <li>separate /boot partition <ul> <li>Separate 1GB boot partition in all Ubuntu 23.10 cloud images</li> <li>6.5 kernel is now the default kernel in all Ubuntu 23.10 images</li> </ul> </li> <li>All Minimal images use the new <a href="https://ubuntu-archive-team.ubuntu.com/seeds/ubuntu.mantic/cloud-minimal">Minimal Ubuntu cloud seed</a>. Read more about the qcow2 case below.</li> </ul> <h4><a name="aws-ec2-41" class="anchor" href="#aws-ec2-41"></a>AWS EC2</h4> <p>aws: the default volume type is now GP3 instead of GP2. See <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-volume-types.html">https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-volume-types.html</a> for more details on the different volume types.</p> <h4><a name="minimal-downloadqcow2-cloud-images-42" class="anchor" href="#minimal-downloadqcow2-cloud-images-42"></a>Minimal download/qcow2 cloud images</h4> <p>The Mantic Minotaur (Ubuntu 23.10) images available at <a href="https://cloud-images.ubuntu.com/minimal/" class="inline-onebox">Ubuntu Minimal Cloud Images</a> have undergone significant changes since the Lunar release in April 2023.</p> <p>The main changes after 20230618 are:</p> <ul> <li>Move to the linux-generic kernel from the linux-kvm kernel. <ul> <li>Note this kernel change is <em>only</em> for the images on <code>cloud-images.ubuntu.com</code>. Partner clouds still use the cloud optimized kernels.</li> </ul> </li> <li>Move to using minimal-cloud seed - see <a href="https://ubuntu-archive-team.ubuntu.com/seeds/ubuntu.mantic/cloud-minimal">Minimal Ubuntu cloud</a>.</li> <li>No longer installing the ‘Recommends’ packages. <ul> <li>This is during image build only and does not affect any subsequent package installations.</li> </ul> </li> <li>No initramfs fallback for boot - only initramfsless boot.</li> </ul> <p>This results in:</p> <ul> <li>Fewer packages <ul> <li>From package count 426 to 288 (diff: 138)</li> </ul> </li> <li>Much smaller size <ul> <li>Taking download qcow2 images as an example the image size reduced from 337.19MiB to 226.75MiB (diff: 110.44MiB)</li> </ul> </li> </ul> <p>Mantic Minotaur (Ubuntu 23.10) is a devel release, so this is the perfect time to be making these changes.</p> <h5><a name="how-to-report-any-issues-resulting-from-these-changes-43" class="anchor" href="#how-to-report-any-issues-resulting-from-these-changes-43"></a>How to report any issues resulting from these changes</h5> <p>If you notice any unexpected changes or bugs in the minimal images, create a new bug in <a href="https://bugs.launchpad.net/cloud-images">cloud-images</a>.</p> <h3><a name="raspberry-pi-44" class="anchor" href="#raspberry-pi-44"></a>Raspberry Pi <img src="https://discourse.ubuntu.com/images/emoji/twitter/strawberry.png?v=12" title=":strawberry:" class="emoji" alt=":strawberry:" loading="lazy" width="20" height="20"></h3> <ul> <li> <p>Ubuntu 23.10 brings support for the new Raspberry Pi 5, incorporating upstream patches to the kernel, mesa, userland, EEPROM, and GPIO packages (<a href="https://bugs.launchpad.net/ubuntu/+source/linux-raspi/+bug/2037642">LP: #2037642</a>)</p> </li> <li> <p>The 32-bit (armhf) images do <em>not</em> support the Raspberry Pi 5 and will not boot on this platform. You may choose to run a 32-bit userland as a foreign architecture on the 64-bit (arm64) images (see the <a href="https://wiki.debian.org/Multiarch/HOWTO">Debian Multiarch page</a> for further information), but the Raspberry Pi 5 does not support 32-bit kernels. Hence, the only Ubuntu images supported on the Pi 5 are the 64-bit images.</p> </li> <li> <p>The Raspberry Pi 5 changes the means by which the GPIO pins are accessed (they are no longer driven directly from the SoC, but from the RP1 “southbridge” chip). This in turn means that the traditional GPIO libraries (<a href="https://launchpad.net/ubuntu/+source/rpi.gpio">RPi.GPIO</a> in particular) cannot work on the Pi 5. The GPIO Zero library was updated in prior releases to favor an alternate pin driver compatible with the Pi 5, but for those applications relying on the RPi.GPIO API, <a href="https://launchpad.net/ubuntu/+source/rpi-lgpio">rpi-lgpio</a> has been updated to provide a compatibility shim. See the <a href="https://rpi-lgpio.readthedocs.io/">rpi-lgpio documentation</a> for further information.</p> </li> <li> <p>Ubuntu 23.10 updates <a href="https://launchpad.net/ubuntu/+source/libcamera">libcamera</a> to version 0.1 and includes support for all official Raspberry Pi camera modules, including the v3 camera with auto-focus. Additional patches are required for full compatibility with Raspberry Pi 5 (<a href="https://bugs.launchpad.net/ubuntu/+source/linux-raspi/+bug/2037642">LP: #2037642</a>), which are planned to be delivered by SRU.</p> </li> <li> <p>Ubuntu 23.10 changes the default <code>cloud-init</code> configuration to disable password-based authentication with the SSH server. See the <code>ssh_pw_auth</code> setting in the <code>user-data</code> file on the boot partition if you still need password-based authentication.</p> </li> <li> <p>Ubuntu 23.10 disables the multipath daemon by default, saving approximately 24MB of memory at runtime (important on the smaller boards, including the Pi Zero 2W). Remove <code>multipath=off</code> from <code>cmdline.txt</code> on the boot partition if you still require the multipath daemon.</p> </li> </ul> <h3><a name="risc-v-45" class="anchor" href="#risc-v-45"></a>RISC-V</h3> <h4><a name="starfive-visionfive-2-46" class="anchor" href="#starfive-visionfive-2-46"></a>StarFive VisionFive 2</h4> <ul> <li>The Ubuntu Server live installer can be used to install to NVMe or USB with a current upstream U-Boot. See details on the <a href="https://wiki.ubuntu.com/RISC-V/StarFive%20VisionFive%202">Ubuntu Wiki</a>.</li> <li>StarFive VisionFive 2 v1.2A is not supported by the release kernel.</li> </ul> <h3><a name="ibm-z-and-linuxone-image32x32uploaddzm0rrlelqcczc6rhqjgmw8dmzrpng-47" class="anchor" href="#ibm-z-and-linuxone-image32x32uploaddzm0rrlelqcczc6rhqjgmw8dmzrpng-47"></a>IBM Z and LinuxONE <img src="https://ubuntucommunity.s3.us-east-2.amazonaws.com/original/3X/6/2/6217e85bdc9dbe7aa3cb089957430be9cbd080a9.png" alt="image" data-base62-sha1="dZM0RRlelqCcZc6RhqJGMW8DMZr" width="32" height="32"></h3> <ul> <li> <p>Significant update and changes in s390-tools, with the availability of a subset of tools for non-s390x platforms (<a href="https://launchpad.net/bugs/2025578">LP: #2025578</a>, <a href="https://launchpad.net/bugs/2025781">LP: #2025781</a>), the Rust enablement (and needed vendored crates) (<a href="https://launchpad.net/bugs/2030316">LP: #2030316</a>) and the inclusion of the ‘pem’ file in s390-tools-signed package (<a href="https://launchpad.net/bugs/2020469">LP: #2020469</a>).</p> </li> <li> <p>Also updates in the cryptography stack, with openssl-ibmca v2.4.0 and patches on top (<a href="https://launchpad.net/bugs/2027809">LP: #2027809</a>), libica upgrade to v4.2.2 (<a href="https://launchpad.net/bugs/2027803">LP: #2027803</a>), openssl-ibmca v2.4.0+ with ‘implicit rejection’ (<a href="https://launchpad.net/bugs/2003671">LP: #2003671</a>) and opencryptoki v3.21.0 (<a href="https://launchpad.net/bugs/2026732">LP: #2026732</a>) with cca token: protected key support (<a href="https://launchpad.net/bugs/2025923">LP: #2025923</a>), concurrent master key rotation for cca (<a href="https://launchpad.net/bugs/2025926">LP: #2025926</a>) and ep11 (<a href="https://launchpad.net/bugs/2025917">LP: #2025917</a>) token and pkcsslotd hardening (<a href="https://launchpad.net/bugs/2025922">LP: #2025922</a>).<br> In addition changed in the area of pkey with support for EP11 API ordinal 6 for secure guests (<a href="https://launchpad.net/bugs/2029390">LP: #2029390</a>) and the supporting the generation of keys of type PKEY_TYPE_EP11_AES (<a href="https://launchpad.net/bugs/2028937">LP: #2028937</a>).</p> </li> <li> <p>With KVM/SE environments IBK (item binding keys) secret injection is now supported - on a kernel level (<a href="https://launchpad.net/bugs/2003675">LP: #2003675</a> and <a href="https://launchpad.net/bugs/2003634">LP: #2003634</a>) and the s390-tools level (<a href="https://launchpad.net/bugs/2003676">LP: #2003676</a> and <a href="https://launchpad.net/bugs/2003633">LP: #2003633</a>), as well as support for AP Bindings in SE Header (<a href="https://launchpad.net/bugs/1983221">LP: #1983221</a>).</p> </li> <li> <p>KVM enhancements in the area of KVM, by Providing Atomic Memop for Key-Checked Compare-and-swap (<a href="https://launchpad.net/bugs/2026213">LP: #2026213</a>), enhanced CCW address translation architectural compliance (<a href="https://launchpad.net/bugs/2026211">LP: #2026211</a>) and ECKD List Directed IPL (qemu virtio) (<a href="https://launchpad.net/bugs/2026209">LP: #2026209</a>) and List-Directed dump from ECKD DASD (<a href="https://launchpad.net/bugs/2003397">LP: #2003397</a>) and improved memory reclaiming for z15 Secure Execution guests (<a href="https://launchpad.net/bugs/2006743">LP: #2006743</a> and <a href="https://launchpad.net/bugs/2006740">LP: #2006740</a>).</p> </li> <li> <p>Further DASD auto-quiesce support landed in kernel (<a href="https://launchpad.net/bugs/1982370">LP: #1982370</a>) and s390-tools (<a href="https://launchpad.net/bugs/2025576">LP: #2025576</a>).</p> </li> <li> <p>Finally version bumps of the smc-tools (<a href="https://launchpad.net/bugs/2027825">LP: #2027825</a>) and qclib (<a href="https://launchpad.net/bugs/2027670">LP: #2027670</a>) to it’s latest versions; libgmp now with s390x SIMD optimizations (<a href="https://launchpad.net/bugs/1926752">LP: #1926752</a>) and support in gcc to preserve register arguments (<a href="https://launchpad.net/bugs/2025575">LP: #2025575</a>).</p> </li> </ul> <h1 id="heading--known-issues">Known Issues</h1> <p>As is to be expected with any release, there are some significant known bugs that users may encounter with this release of Ubuntu. The ones we know about at this point (and some of the workarounds) are documented here, so you don’t need to spend time reporting these bugs again:</p> <h2><a name="general-48" class="anchor" href="#general-48"></a>General</h2> <ul> <li> <p>The Live Session of the new Ubuntu Desktop installer is not localized. It is still possible to perform a non-English installation using the new installer, but internet access at install time is required to download the language packs. Should this be an issue, use the legacy installer images. (<a href="https://bugs.launchpad.net/ubuntu-release-notes/+bug/2013329">LP: #2013329</a>)</p> </li> <li> <p>Systems where the <code>/boot</code> directory is located on the XFS file system may not boot correctly if they have many files in a single directory below <code>/boot</code>. This is being tracked in (<a href="https://bugs.launchpad.net/debian/+source/grub2/+bug/2039172">LP: #2039172</a>).</p> </li> <li> <p>When upgrading to Mantic, it fails to install snap firmware-updater. The workaround is to install the snap after upgrade. (<a href="https://bugs.launchpad.net/ubuntu/+source/ubuntu-release-upgrader/+bug/2039268">LP: #2039268</a>).</p> </li> </ul> <h2><a name="linux-kernel-49" class="anchor" href="#linux-kernel-49"></a>Linux kernel</h2> <ul> <li>Some newer servers with BMCs using an Aspeed GPU may appear to hang while booting the installer image when using an attached display or the virtual KVM (<a href="https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2042850">LP: #2042850</a>). The workaround is to add the <code>nomodeset</code> parameter to the kernel command-line. Follow these steps:</li> </ul> <ol> <li>At the GRUB boot menu, press <code>e</code></li> <li>Add <code>nomodeset</code> to linux line, like the example below:</li> </ol> <pre><code class="lang-auto">linux /casper/vmlinuz nomodeset --- </code></pre> <ol start="3"> <li>Press <code>Ctrl-x</code> to continue the boot process</li> <li>After installation is complete, reboot, use <code>nomodeset</code> again, like the example below:</li> </ol> <pre><code class="lang-auto">linux /boot/vmlinuz-6.5.0-10-generic nomodeset root=UUID=c5605a23-05ae-4d9d-b65f-e47ba48b7560 ro </code></pre> <ol start="5"> <li>Add <code>nomodeset</code> to the GRUB config file, <code>/etc/default/grub</code>, like the example below:</li> </ol> <pre><code class="lang-auto">GRUB_CMDLINE_LINUX="nomodeset" </code></pre> <ol start="6"> <li>Finally, run <code>sudo update-grub</code> to make the change take effect.</li> </ol> <h2><a name="ubuntu-desktop-50" class="anchor" href="#ubuntu-desktop-50"></a>Ubuntu Desktop</h2> <ul> <li> <p>The Ubuntu Desktop images are labelled as 23.10.1 instead of 23.10 due to the installer translation incident as mentioned <a href="https://discourse.ubuntu.com/t/announcement-ubuntu-desktop-23-10-release-image-translation-incident-now-resolved/39365">here</a>. The contents of 23.10.1 are the same as any other image with the exception of shipping a newer ubuntu-desktop-installer.</p> </li> <li> <p>The <em>Try Ubuntu</em> environment is not translated with the new Desktop Installer (<a href="https://launchpad.net/bugs/2013329">LP: #2013329</a>).</p> </li> <li> <p>Screen-reader support is present with the new desktop installer, but is incomplete. We recommend that people who need screen-reader support to install Ubuntu continue to use the legacy installer (<a href="https://github.com/canonical/ubuntu-desktop-installer/issues/2343">#2343</a>).</p> </li> <li> <p>Application icons don’t use the correct High Contrast theme when High Contrast is enabled <a href="https://launchpad.net/bugs/2013107">(LP: #2013107</a>).</p> </li> <li> <p><strong>Incompatibility between TPM-backed Full Disk Encryption and Absolute:</strong> TPM-backed Full Disk Encryption (FDE) has been introduced to enhance data security. However, it’s important to note that this feature is incompatible with Absolute (formerly Computrace) security software. If Absolute is enabled on your system, the machine will not boot post-installation when TPM-backed FDE is also enabled. Therefore, disabling Absolute from the BIOS is recommended to avoid booting issues.</p> </li> <li> <p><strong>Hardware-Specific Kernel Module Requirements for TPM-backed Full Disk Encryption:</strong> TPM-backed Full Disk Encryption (FDE) requires a specific kernel snap which may not include certain kernel modules necessary for some hardware functionalities. A notable example is the <code>vmd</code> module required for NVMe RAID configurations. In scenarios where such specific kernel modules are indispensable, the hardware feature may need to be disabled in the BIOS (such as RAID) to ensure the continued availability of the affected hardware post-installation. If disabling in the BIOS is not an option, the related hardware will not be available post-installation with TPM-backed FDE enabled.</p> </li> <li> <p><a href="https://bugs.launchpad.net/bugs/+bugs?field.searchtext=&orderby=-importance&field.status%3Alist=NEW&field.status%3Alist=CONFIRMED&field.status%3Alist=TRIAGED&field.status%3Alist=INPROGRESS&field.status%3Alist=FIXCOMMITTED&field.status%3Alist=INCOMPLETE_WITH_RESPONSE&field.status%3Alist=INCOMPLETE_WITHOUT_RESPONSE&assignee_option=any&field.assignee=&field.bug_reporter=&field.bug_commenter=&field.subscriber=&field.tag=fde&field.tags_combinator=ANY&field.status_upstream-empty-marker=1&field.has_cve.used=&field.omit_dupes.used=&field.omit_dupes=on&field.affects_me.used=&field.has_patch.used=&field.has_branches.used=&field.has_branches=on&field.has_no_branches.used=&field.has_no_branches=on&field.has_blueprints.used=&field.has_blueprints=on&field.has_no_blueprints.used=&field.has_no_blueprints=on&search=Search">FDE specific bug reports</a>.</p> </li> <li> <p>The installer re-launches itself with the version shipped on the ISO instead of the latest version after updating it through its refresh mechanism (<a href="https://github.com/canonical/ubuntu-desktop-installer/issues/2377">#2377</a>).</p> </li> </ul> <h2><a name="ubuntu-server-51" class="anchor" href="#ubuntu-server-51"></a>Ubuntu Server</h2> <p>In some situations, it is acceptable to proceed with an offline installation when the mirror is inaccessible. In this scenario, it is advised to use:</p> <pre><code class="lang-auto">apt: fallback: offline-install </code></pre> <h3><a name="grub-52" class="anchor" href="#grub-52"></a>GRUB</h3> <p>GRUB 2.12 as included in mantic <a href="https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/2039081">regresses support for UEFI HTTP boot</a>. We anticipate this being corrected in a subsequent package update. Since the netboot tarball provided in Ubuntu 23.10 does not include this functionality, users who need UEFI HTTP boot support are recommended to use the netboot tarball from Ubuntu 23.04 instead.</p> <h2><a name="platforms-53" class="anchor" href="#platforms-53"></a>Platforms</h2> <h3><a name="cloud-images-54" class="anchor" href="#cloud-images-54"></a>Cloud Images</h3> <h4><a name="all-55" class="anchor" href="#all-55"></a>All</h4> <ul> <li>A change in systemd <a href="https://launchpad.net/ubuntu/+source/systemd/253.5-1ubuntu1">253.5-1ubuntu1</a> resulted in unexpected UDP listening port 5353</li> </ul> <p>The work to no longer listen on this port is being tracked @ <a href="https://bugs.launchpad.net/cloud-images/+bug/2038894" class="inline-onebox">Bug #2038894 “Ubuntu 23.10 cloud images unexpected UDP listening...” : Bugs : cloud-images</a></p> <h4><a name="microsoft-azure-56" class="anchor" href="#microsoft-azure-56"></a>Microsoft Azure</h4> <ul> <li>On Azure arm64 instances, the systemd service systemd-modules-load.service sometimes fails to load on first boot due to a Timeout error. All the kernel modules appear to be correctly loaded and this issue doesn’t seem to impact the OS. Users can manually reload this service by running systemctl restart systemd-modules-load.service in case they notice that something is wrong. <ul> <li>This is being actively investigated</li> </ul> </li> </ul> <h4><a name="ppcel64-images-on-cloud-imagesubuntucom-57" class="anchor" href="#ppcel64-images-on-cloud-imagesubuntucom-57"></a>ppcel64 images on <a href="http://cloud-images.ubuntu.com">cloud-images.ubuntu.com</a></h4> <ul> <li>an issue in livecd-rootfs causes snaps to not be properly pre-seeded, causing slower boot times (<a href="https://bugs.launchpad.net/ubuntu/+source/livecd-rootfs/+bug/2038957">LP:2038957</a>)</li> </ul> <h3><a name="raspberry-pi-58" class="anchor" href="#raspberry-pi-58"></a>Raspberry Pi</h3> <ul> <li> <p>During the installation process on the desktop image, the slides shown during installation appear corrupted on the Pi 4 (but not the Pi 5). The issue is cosmetic and does not affect the installation itself (<a href="https://bugs.launchpad.net/ubuntu/+source/ubiquity/+bug/2037015">LP: #2037015</a>)</p> </li> <li> <p>With some monitors connected to a Raspberry Pi, it is possible that a monitor powers off after a period of inactivity but then powers back on and shows a black screen. Investigation into the types of monitors affected is ongoing in <a href="https://bugs.launchpad.net/ubuntu/+source/mutter/+bug/1998716">LP: #1998716</a>.</p> </li> <li> <p>Various kernel modules have been moved from the <code>linux-modules-raspi</code> package to reduce the initramfs size. If you find an application failing due to missing kernel modules, try <code>sudo apt install linux-modules-extra-raspi</code>.</p> </li> <li> <p>The legacy camera stack (MMAL based) is not supported on arm64; <a href="https://www.raspberrypi.com/documentation/accessories/camera.html#libcamera-and-libcamera-apps">libcamera</a> is the supported method of using the Pi Camera Modules on the arm64 architecture (the boot-time configuration automatically loads overlays for official modules; unofficial camera modules need the relevant overlay added to the <code>config.txt</code> file on the boot partition). Additional patches required for Raspberry Pi 5 compatibility are planned for SRU after release (<a href="https://bugs.launchpad.net/ubuntu/+source/linux-raspi/+bug/2037642">LP: #2037642</a>).</p> </li> <li> <p>With the removal of the <code>crda</code> package in 22.04, the method of setting the wifi regulatory domain (editing <code>/etc/default/crda</code>) no longer operates. On server images, use the <code>regulatory-domain</code> option in the Netplan configuration. On desktop images, append <code>cfg80211.ieee80211_regdom=GB</code> (substituting <code>GB</code> for the relevant country code) to the kernel command line in the <code>cmdline.txt</code> file on the boot partition (<a href="https://launchpad.net/bugs/1951586">LP: #1951586</a>).</p> </li> <li> <p>With the mantic release kernel, GPIO and PWM controlled fans spin full speed all the time due to a broken patch in the step-wise governor (which is the default fan-speed governor). A patched kernel is available in <a href="https://launchpad.net/~waveform/+archive/ubuntu/fan-fix">ppa:waveform/fan-fix</a> and the fix should land in the next release of the mantic kernel (<a href="https://bugs.launchpad.net/ubuntu/+source/linux-raspi/+bug/2041741">LP: #2041741</a>).</p> </li> </ul> <h3><a name="risc-v-59" class="anchor" href="#risc-v-59"></a>RISC-V</h3> <ul> <li> <p>Wifi for the StarFive VisionFive board does not work in this image (<a href="https://launchpad.net/bugs/2037065">LP: #2037065</a>).</p> </li> <li> <p>The unmatched image does not boot on Unmatched systems due to a missing bootloader. It is still provided as part of the beta for use under QEMU (<a href="https://launchpad.net/bugs/2037060">LP: #2037060</a>).</p> </li> </ul> <h3><a name="s390x-60" class="anchor" href="#s390x-60"></a>s390X</h3> <p>Nothing yet.</p> <h1 id="heading--official-flavours">Official flavours</h1> <p>Find the release notes for the official flavours at the following links:</p> <ul> <li><a href="https://discourse.ubuntu.com/t/edubuntu-23-10-released/39263">Edubuntu Release Notes</a></li> <li><a href="https://wiki.ubuntu.com/ManticMinotaur/ReleaseNotes/Kubuntu">Kubuntu Release Notes</a></li> <li><a href="https://lubuntu.me/mantic-released/">Lubuntu Release Notes</a></li> <li><a href="https://ubuntubudgie.org/2023/09/ubuntu-budgie-23-10-release-notes/">Ubuntu Budgie Release Notes</a></li> <li><a href="https://ubuntu-mate.org/blog/ubuntu-mate-mantic-minotaur-release-notes/">Ubuntu MATE Release Notes</a></li> <li><a href="https://ubuntustudio.org/ubuntu-studio-23-10-release-notes/">Ubuntu Studio Release Notes</a></li> <li><a href="https://ubuntuunity.org/blog/ubuntu-unity-23.10/">Ubuntu Unity Release Notes</a></li> <li><a href="https://wiki.xubuntu.org/releases/23.10/release-notes">Xubuntu Release Notes</a></li> <li><a href="https://www.ubuntukylin.com/news/ubuntukylin2310-en.html">Ubuntu Kylin Release Notes</a></li> <li><a href="https://ubuntucinnamon.org/?p=1247/">Ubuntu Cinnamon Release Notes</a></li> </ul> <h1 id="heading--more-information">More information</h1> <h2><a name="reporting-bugs-61" class="anchor" href="#reporting-bugs-61"></a>Reporting bugs</h2> <p>Your comments, bug reports, patches and suggestions help fix bugs and improve the quality of future releases. Please <a href="http://help.ubuntu.com/community/ReportingBugs">report bugs using the tools provided</a>. If you want to help with bugs, the <a href="http://wiki.ubuntu.com/BugSquad">Bug Squad</a> is always looking for help.</p> <h2><a name="what-happens-if-there-is-a-high-or-critical-priority-cve-during-release-day-62" class="anchor" href="#what-happens-if-there-is-a-high-or-critical-priority-cve-during-release-day-62"></a>What happens if there is a high or critical priority CVE during release day?</h2> <p>Server, Desktop and Cloud plan to release in lockstep on release day, but there are some exceptions.</p> <p>In the unlikely event that a critical or high-priority CVE is announced on release day, the release team have agreed on the following plan of action:</p> <ul> <li> <p>For critical priority CVEs, the release of Server, Desktop and Cloud will be blocked until new images can be built addressing the CVE.</p> </li> <li> <p>For high-priority CVEs, the decision to block release will be made on a per-product (Server, Desktop and Cloud) basis and will depend on the nature of the CVE, which might result in images not being released on the same day.</p> </li> </ul> <p>This was discussed in the <a href="https://lists.ubuntu.com/archives/ubuntu-release/2023-April/005610.html">ubuntu–release mailing list March/April 2023</a>.</p> <p>The mailing list thread also confirmed there is no technical or policy reason why a package cannot be pushed to the Updates or Security pocket to address high or critical-priority CVEs prior to the release.</p> <h2><a name="participate-in-ubuntu-63" class="anchor" href="#participate-in-ubuntu-63"></a>Participate in Ubuntu</h2> <p>If you would like to help shape Ubuntu, look at the list of ways you can participate at <a href="https://community.ubuntu.com/contribute">community.ubuntu.com/contribute</a>.</p> <h2><a name="more-about-ubuntu-64" class="anchor" href="#more-about-ubuntu-64"></a>More about Ubuntu</h2> <p>You can find out more about Ubuntu on the <a href="https://ubuntu.com">Ubuntu website</a>.</p> <p>To sign up for future Ubuntu development announcements, subscribe to Ubuntu’s development announcement list at <a href="https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-announce">ubuntu-devel-announce</a>.</p> </div> <div itemprop="interactionStatistic" itemscope itemtype="http://schema.org/InteractionCounter"> <meta itemprop="interactionType" content="http://schema.org/LikeAction"/> <meta itemprop="userInteractionCount" content="6" /> <span class='post-likes'>6 Likes</span> </div> <div class='crawler-linkback-list' itemscope itemtype='http://schema.org/ItemList'> <div itemprop='itemListElement' itemscope itemtype='http://schema.org/ListItem'> <a itemprop='url' href="https://discourse.ubuntu.com/t/ubuntu-23-10-mantic-minotaur-released/39495">Ubuntu 23.10 (Mantic Minotaur) released</a> <meta itemprop='position' content='135'> </div> <div itemprop='itemListElement' itemscope itemtype='http://schema.org/ListItem'> <a itemprop='url' href="https://discourse.ubuntu.com/t/ubuntu-weekly-newsletter-issue-786/35635">Ubuntu Weekly Newsletter Issue 786</a> <meta itemprop='position' content='136'> </div> <div itemprop='itemListElement' itemscope itemtype='http://schema.org/ListItem'> <a itemprop='url' href="https://discourse.ubuntu.com/t/edubuntu-23-10-beta-released/38858">Edubuntu 23.10 Beta Released</a> <meta itemprop='position' content='137'> </div> <div itemprop='itemListElement' itemscope itemtype='http://schema.org/ListItem'> <a itemprop='url' href="https://discourse.ubuntu.com/t/pulse-20-ubuntu-desktop-engineering-roundup/39253">Pulse 20 - Ubuntu desktop engineering roundup</a> <meta itemprop='position' content='138'> </div> <div itemprop='itemListElement' itemscope itemtype='http://schema.org/ListItem'> <a itemprop='url' href="https://discourse.ubuntu.com/t/desktop-team-distro-squad-updates-monday-18th-september-2023/38715/3">Desktop Team Distro Squad Updates – Monday 18th September 2023</a> <meta itemprop='position' content='139'> </div> <div itemprop='itemListElement' itemscope itemtype='http://schema.org/ListItem'> <a itemprop='url' href="https://discourse.ubuntu.com/t/edubuntu-24-04-lts-released/44455">Edubuntu 24.04 LTS Released</a> <meta itemprop='position' content='140'> </div> <div itemprop='itemListElement' itemscope itemtype='http://schema.org/ListItem'> <a itemprop='url' href="https://discourse.ubuntu.com/t/ubuntu-24-04-lts-noble-numbat-release-notes/39890">Ubuntu 24.04 LTS (Noble Numbat) Release Notes</a> <meta itemprop='position' content='141'> </div> <div itemprop='itemListElement' itemscope itemtype='http://schema.org/ListItem'> <a itemprop='url' href="https://discourse.ubuntu.com/t/will-ubuntu-24-04-cloud-image-release-kvm-version/44626/2">Will Ubuntu 24.04 cloud-image release KVM version</a> <meta itemprop='position' content='142'> </div> <div itemprop='itemListElement' itemscope itemtype='http://schema.org/ListItem'> <a itemprop='url' href="https://discourse.ubuntu.com/t/launch-ubuntu-desktop-mantic-minotaur-on-ec2/40529">Launch Ubuntu Desktop Mantic Minotaur on EC2</a> <meta itemprop='position' content='143'> </div> </div> </div> </div> </div> <footer class="container wrap"> <nav class='crawler-nav'> <ul> <li itemscope itemtype='http://schema.org/SiteNavigationElement'> <span itemprop='name'> <a href='/' itemprop="url">Home </a> </span> </li> <li itemscope itemtype='http://schema.org/SiteNavigationElement'> <span itemprop='name'> <a href='/categories' itemprop="url">Categories </a> </span> </li> <li itemscope itemtype='http://schema.org/SiteNavigationElement'> <span itemprop='name'> <a href='/guidelines' itemprop="url">Guidelines </a> </span> </li> <li itemscope itemtype='http://schema.org/SiteNavigationElement'> <span itemprop='name'> <a href='https://www.ubuntu.com/legal' itemprop="url">Terms of Service </a> </span> </li> <li itemscope itemtype='http://schema.org/SiteNavigationElement'> <span itemprop='name'> <a href='https://www.ubuntu.com/legal/terms-and-policies/privacy-policy' itemprop="url">Privacy Policy </a> </span> </li> </ul> </nav> <p class='powered-by-link'>Powered by <a href="https://www.discourse.org">Discourse</a>, best viewed with JavaScript enabled</p> </footer> <div class="buorg"><div>Unfortunately, <a href="https://www.discourse.org/faq/#browser">your browser is unsupported</a>. Please <a href="https://browsehappy.com">switch to a supported browser</a> to view rich content, log in and reply.</div></div> </body> </html>