[ubuntu/trusty-updates] commons-httpclient 3.1-10.2ubuntu0.14.04.1 (Accepted)

commons-httpclient (3.1-10.2ubuntu0.14.04.1) trusty-security; urgency=medium * SECURITY UPDATE: improper certificate hostname verification - debian/patches/CVE-2014-3577.patch: fix Common Name logic in src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.

[ubuntu/trusty-updates] debian-installer 20101020ubuntu318.30 (Accepted)

debian-installer (20101020ubuntu318.30) trusty; urgency=medium * Move keystone kernels to 3.13.0-37. * Move lts-utopic kernels to 3.16.0-50. * Move lts-vivid kernels to 3.19.0-30 (LP: #1481490) debian-installer (20101020ubuntu318.29) trusty; urgency=medium * Move master kernels to

[ubuntu/trusty-security] commons-httpclient 3.1-10.2ubuntu0.14.04.1 (Accepted)

commons-httpclient (3.1-10.2ubuntu0.14.04.1) trusty-security; urgency=medium * SECURITY UPDATE: improper certificate hostname verification - debian/patches/CVE-2014-3577.patch: fix Common Name logic in src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.

[ubuntu/trusty-proposed] python3.4 3.4.3-1ubuntu1~14.04.2 (Accepted)

python3.4 (3.4.3-1ubuntu1~14.04.2) trusty-proposed; urgency=medium * SRU: LP: #1348954. * Disable PEP 476 certificate verification, restoring the behaviour to the same as found in the 3.4.0 release included in 14.04 LTS. Make the default HTTPS certificate verification setting

[ubuntu/trusty-proposed] libguestfs 1:1.24.5-1ubuntu0.1 (Accepted)

libguestfs (1:1.24.5-1ubuntu0.1) trusty; urgency=medium * d/p/configure-Make-sure-grep-matches-qemu-2.x-version-st.patch: Fix FTBFS caused by QEMU 1.x->2.x update during trusty devel (LP: #1498618) * d/rules: Fix FTBFS by no longer force-overriding CFLAGS during dh_auto_test

[ubuntu/trusty-proposed] lxc 1.0.7-0ubuntu0.8 (Accepted)

lxc (1.0.7-0ubuntu0.8) trusty; urgency=medium * Update AppArmor profile from stable-1.0 branch which should fix the current test failures with the proposed 3.13 kernel. (LP: #1504781) Date: Wed, 14 Oct 2015 09:04:17 -0700 Changed-By: Stéphane Graber Maintainer: Ubuntu

[ubuntu/trusty-updates] python-greenlet 0.4.2-1ubuntu0.1 (Accepted)

python-greenlet (0.4.2-1ubuntu0.1) trusty-proposed; urgency=medium * SRU: LP: #1451537. * Backport the test_leaks changes from 0.4.9. Date: 2015-10-02 13:39:17.212437+00:00 Changed-By: Matthias Klose Signed-By: Chris J Arges

[ubuntu/trusty-proposed] python3.4 3.4.3-1ubuntu1~14.04.3 (Accepted)

python3.4 (3.4.3-1ubuntu1~14.04.3) trusty; urgency=medium * Remove the config file from the package, as there is no handling in place to deal with this config file on upgrade and it is not appropriate for inclusion in an urgent SRU. Date: Wed, 14 Oct 2015 12:52:19 -0700 Changed-By:

[ubuntu/trusty-proposed] freeipmi 1.1.5-3ubuntu3.3 (Accepted)

freeipmi (1.1.5-3ubuntu3.3) trusty; urgency=medium * Don't probe the legacy SMBIOS address in /dev/mem on ARM platforms. (LP: #1499838) Date: Wed, 14 Oct 2015 11:49:49 -0600 Changed-By: dann frazier Maintainer: Ubuntu Developers

[ubuntu/trusty-proposed] gst-plugins-base1.0 1.2.4-1~ubuntu2 (Accepted)

gst-plugins-base1.0 (1.2.4-1~ubuntu2) trusty; urgency=medium [ Johannes Dewender ] * Cherry pick fix for MusicBrainz Audio CD ID calculation, to avoid an error message when submitting to the MB database (LP: #1489816) Date: Wed, 14 Oct 2015 14:49:29 -0400 Changed-By: Michael Terry

[ubuntu/trusty-security] pollinate 4.7-0ubuntu1.4 (Accepted)

pollinate (4.7-0ubuntu1.4) trusty-security; urgency=medium * Add "DigiCert Global Root CA" certificate from ca-certificates package to entropy.ubuntu.com.pem. This is required to correctly verify against the new entropy.ubuntu.com SSL certificate. Date: 2015-10-13 18:32:16.719651+00:00

[ubuntu/trusty-updates] pollinate 4.7-0ubuntu1.4 (Accepted)

pollinate (4.7-0ubuntu1.4) trusty-security; urgency=medium * Add "DigiCert Global Root CA" certificate from ca-certificates package to entropy.ubuntu.com.pem. This is required to correctly verify against the new entropy.ubuntu.com SSL certificate. Date: 2015-10-13 18:32:16.719651+00:00

[ubuntu/trusty-proposed] lxc 1.0.7-0ubuntu0.9 (Accepted)

lxc (1.0.7-0ubuntu0.9) trusty; urgency=medium * Update previous patch to include some extra apparmor rules. (LP: #1504781) Date: Wed, 14 Oct 2015 13:59:48 -0700 Changed-By: Stéphane Graber Maintainer: Ubuntu Developers

[ubuntu/trusty-updates] dahdi-linux 1:2.5.0.1+dfsg-1ubuntu4~14.04.4 (Accepted)

dahdi-linux (1:2.5.0.1+dfsg-1ubuntu4~14.04.4) trusty; urgency=low * d/p/kernel-v3-17-compat.patch, d/p/kernel-v3-18-compat.patch, and d/p/kernel-v3-19-compat.patch: Backport compat code to allow compilation of latest HWE (3.19) kernel in Trusty/14.04 (LP: #1499436). Date:

[ubuntu/trusty-updates] apache2 2.4.7-1ubuntu4.7 (Accepted)

apache2 (2.4.7-1ubuntu4.7) trusty; urgency=medium * d/p/wstunnel-ssl.patch: mod_proxy_wstunnel: Fix the use of SSL connections with the "wss:" scheme. PR55320. LP: #1445914 Submitted by: Alex Liu Date: 2015-09-18 05:32:10.610937+00:00 Signed-By: Chris J Arges

[ubuntu/trusty-updates] tgt 1:1.0.43-0ubuntu4.1~14.04.2 (Accepted)

tgt (1:1.0.43-0ubuntu4.1~14.04.2) trusty; urgency=high * debian/patches/fix-read-response-buffer.patch : Fix bug to read the response buffer (LP: #1498697) Date: 2015-09-30 17:05:14.447658+00:00 Changed-By: Eric Desrochers Signed-By: Chris J Arges

[ubuntu/trusty-updates] systemd 204-5ubuntu20.15 (Accepted)

systemd (204-5ubuntu20.15) trusty; urgency=medium * Avoid writing duplicate entries in 70-persistent-net.rules by double checking if the new udev rule has already been written for the given interface. This happens if multiple add events are generated before the write_net_rules

[ubuntu/trusty-proposed] qemu 2.0.0+dfsg-2ubuntu1.20 (Accepted)

qemu (2.0.0+dfsg-2ubuntu1.20) trusty; urgency=low * debian/patches/upstream-fix-irq-route-entries.patch Fix "kvm_irqchip_commit_routes: Assertion 'ret == 0' failed" (LP: #1465935) Date: Fri, 09 Oct 2015 17:16:30 +0200 Changed-By: Stefan Bader Maintainer:

[ubuntu/trusty-proposed] indicator-session 12.10.5+14.04.20151008-0ubuntu1 (Accepted)

indicator-session (12.10.5+14.04.20151008-0ubuntu1) trusty; urgency=medium * Backport fix for segfault in get_user_label() (lp: #1501244) (LP: #1501244) * chmod +x debian/rules Date: 2015-10-08 16:35:13.601154+00:00 Changed-By: Sebastien Bacher Signed-By: Ubuntu

[ubuntu/trusty-proposed] samba 2:4.1.6+dfsg-1ubuntu2.14.04.10 (Accepted)

samba (2:4.1.6+dfsg-1ubuntu2.14.04.10) trusty; urgency=medium * debian/patches/git_netbios_empty_name.patch: - s3-nmbd: Fix netbios name truncation, should fix machines having an empty name on smb if their netbios name is long (lp: #1505590) Date: Tue, 13 Oct 2015 10:56:29 +0100

[ubuntu/trusty-proposed] shotwell 0.18.0-0ubuntu4.4 (Accepted)

shotwell (0.18.0-0ubuntu4.4) trusty; urgency=medium * debian/patches/06_uoa.patch: - use new facebook key, thanks Alberto Mardegan (lp: #1453549) Date: Tue, 13 Oct 2015 16:02:33 +0100 Changed-By: Sebastien Bacher Maintainer: Ubuntu Desktop Team

[ubuntu/trusty-proposed] apache2 2.4.7-1ubuntu4.8 (Accepted)

apache2 (2.4.7-1ubuntu4.8) trusty; urgency=medium * Fix -D[efined] or [d] variables lifetime across restarts. This fixes incorrect processing of configuration files on reload (LP: #1504354). Date: Thu, 08 Oct 2015 19:30:10 -0400 Changed-By: Jeffrey Hutzelman

[ubuntu/trusty-proposed] poppler 0.24.5-2ubuntu4.3 (Accepted)

poppler (0.24.5-2ubuntu4.3) trusty; urgency=medium * debian/patches/git_matrix_not_invertable.patch: - cairo: don't render text when text matrix is not invertable (lp: #1412916) Date: Tue, 13 Oct 2015 16:10:18 +0100 Changed-By: Sebastien Bacher Maintainer: Ubuntu