[ubuntu/xenial-proposed] snapd 2.31.1 (Accepted)

snapd (2.31.1) xenial; urgency=medium * New upstream release, LP: #1745217 - tests: multiple autopkgtest related fixes for 18.04 - overlord/snapstate: use spread in the default refresh schedule - timeutil: fix scheduling on nth weekday of the month - interfaces: miscellaneous

[ubuntu/xenial-updates] cups 2.1.3-4ubuntu0.4 (Accepted)

cups (2.1.3-4ubuntu0.4) xenial-security; urgency=medium * SECURITY UPDATE: Incorrect whitelist permits DNS rebinding attacks - debian/patches/CVE-2017-18190.patch: Don't treat "localhost.localdomain" as an allowed replacement for localhost, since it isn't - CVE-2017-18190 Date:

[ubuntu/xenial-updates] libvirt 1.3.1-1ubuntu10.19 (Accepted)

libvirt (1.3.1-1ubuntu10.19) xenial-security; urgency=medium [ Leonidas S. Barbosa ] * SECURITY UPDATE: resource exhaustion resulting in DoS - debian/patches/CVE-2018-5748.patch: avoid DoS reading from QEMU monitor in src/qemu/qemu_monitor.c. - CVE-2018-5748 * SECURITY UPDATE:

[ubuntu/xenial-security] cups 2.1.3-4ubuntu0.4 (Accepted)

cups (2.1.3-4ubuntu0.4) xenial-security; urgency=medium * SECURITY UPDATE: Incorrect whitelist permits DNS rebinding attacks - debian/patches/CVE-2017-18190.patch: Don't treat "localhost.localdomain" as an allowed replacement for localhost, since it isn't - CVE-2017-18190 Date:

[ubuntu/xenial-updates] qemu 1:2.5+dfsg-5ubuntu10.22 (Accepted)

qemu (1:2.5+dfsg-5ubuntu10.22) xenial-security; urgency=medium * SECURITY UPDATE: DoS via guest ram block area - debian/patches/CVE-2017-11334-1.patch: use qemu_ram_ptr_length to access guest ram in exec.c. - debian/patches/CVE-2017-11334-2.patch: add lock parameter to

[ubuntu/xenial-updates] chromium-browser 64.0.3282.167-0ubuntu0.16.04.1 (Accepted)

chromium-browser (64.0.3282.167-0ubuntu0.16.04.1) xenial; urgency=medium * Upstream release: 64.0.3282.167 - CVE-2018-6056: Incorrect derived class instantiation in V8. Date: 2018-02-14 11:00:16.892390+00:00 Changed-By: Olivier Tilloy Signed-By: Ubuntu

[ubuntu/xenial-security] qemu 1:2.5+dfsg-5ubuntu10.22 (Accepted)

qemu (1:2.5+dfsg-5ubuntu10.22) xenial-security; urgency=medium * SECURITY UPDATE: DoS via guest ram block area - debian/patches/CVE-2017-11334-1.patch: use qemu_ram_ptr_length to access guest ram in exec.c. - debian/patches/CVE-2017-11334-2.patch: add lock parameter to

[ubuntu/xenial-security] chromium-browser 64.0.3282.167-0ubuntu0.16.04.1 (Accepted)

chromium-browser (64.0.3282.167-0ubuntu0.16.04.1) xenial; urgency=medium * Upstream release: 64.0.3282.167 - CVE-2018-6056: Incorrect derived class instantiation in V8. Date: 2018-02-14 11:00:16.892390+00:00 Changed-By: Olivier Tilloy Signed-By: Chris Coulson

[ubuntu/xenial-updates] walinuxagent 2.2.21+really2.2.20-0ubuntu1~16.04.1 (Accepted)

walinuxagent (2.2.21+really2.2.20-0ubuntu1~16.04.1) xenial; urgency=medium * Backport bionic version to xenial. * Revert to an older upstream release: 2.2.20 (LP: #1749589). - Rename upstream tarball to 2.2.21+really2.2.20 to end up with a temporarily higher version number than

[ubuntu/xenial-updates] audit 1:2.4.5-1ubuntu2.1 (Accepted)

audit (1:2.4.5-1ubuntu2.1) xenial; urgency=medium * debian/patches/02-print-loginuid-in-login-report.patch: Display the loginuid when using aureport to display a login report (LP: #1724152) Date: 2017-10-18 00:14:10.362959+00:00 Changed-By: Tyler Hicks Signed-By:

[ubuntu/xenial-security] gcc-5-cross-ports 10ubuntu0.2 (Accepted)

gcc-5-cross-ports (10ubuntu0.2) xenial-security; urgency=medium * Rebuild using latest gcc-5 package to get updated cross compiler into xenial-security Date: 2018-02-07 01:02:42.473210+00:00 Changed-By: Steve Beattie Signed-By: Łukasz Zemczak

[ubuntu/xenial-security] gcc-5-cross 24ubuntu0.3 (Accepted)

gcc-5-cross (24ubuntu0.3) xenial-security; urgency=medium * Rebuild using latest gcc-5 package to get updated cross compiler into xenial-security Date: 2018-02-07 00:49:13.033782+00:00 Changed-By: Steve Beattie Signed-By: Łukasz Zemczak

[ubuntu/xenial-updates] gcc-5-cross-ports 10ubuntu0.2 (Accepted)

gcc-5-cross-ports (10ubuntu0.2) xenial-security; urgency=medium * Rebuild using latest gcc-5 package to get updated cross compiler into xenial-security Date: 2018-02-07 01:02:42.473210+00:00 Changed-By: Steve Beattie Signed-By: Łukasz Zemczak

[ubuntu/xenial-updates] gcc-5-cross 24ubuntu0.3 (Accepted)

gcc-5-cross (24ubuntu0.3) xenial-security; urgency=medium * Rebuild using latest gcc-5 package to get updated cross compiler into xenial-security Date: 2018-02-07 00:49:13.033782+00:00 Changed-By: Steve Beattie Signed-By: Łukasz Zemczak

[ubuntu/xenial-updates] gcc-5 5.4.0-6ubuntu1~16.04.9 (Accepted)

gcc-5 (5.4.0-6ubuntu1~16.04.9) xenial-security; urgency=medium * Revert retpoline changes of ppc64el as per the recommendation from Bill Schmidt of IBM. - ppc-add-mspeculate-indirect-jumps: drop. gcc-5 (5.4.0-6ubuntu1~16.04.8) xenial-security; urgency=medium * Add retpoline support

[ubuntu/xenial-security] gcc-5 5.4.0-6ubuntu1~16.04.9 (Accepted)

gcc-5 (5.4.0-6ubuntu1~16.04.9) xenial-security; urgency=medium * Revert retpoline changes of ppc64el as per the recommendation from Bill Schmidt of IBM. - ppc-add-mspeculate-indirect-jumps: drop. gcc-5 (5.4.0-6ubuntu1~16.04.8) xenial-security; urgency=medium * Add retpoline support

[ubuntu/xenial-proposed] python-apt 1.1.0~beta1ubuntu0.16.04.1 (Accepted)

python-apt (1.1.0~beta1ubuntu0.16.04.1) xenial; urgency=medium * Refreshed mirror list for upcoming point-release. Date: Tue, 20 Feb 2018 11:14:53 +0100 Changed-By: Łukasz 'sil2100' Zemczak Maintainer: Ubuntu Developers

[ubuntu/xenial-proposed] zfs-linux 0.6.5.6-0ubuntu19 (Accepted)

zfs-linux (0.6.5.6-0ubuntu19) xenial; urgency=medium * Add ZFS 0.7.0 kernel ioctl binary compat shim (LP: #1737761) Detect ZFS kernel driver version and copy zfs ioctl command to the newer ZFS 0.7.0 ioctl command layout. Date: Mon, 19 Feb 2017 13:04:11 +0100 Changed-By: Colin Ian King

[ubuntu/xenial-updates] python-defaults 2.7.12-1~16.04 (Accepted)

python-defaults (2.7.12-1~16.04) xenial-proposed; urgency=medium * SRU. * Bump version to 2.7.12. LP: #1591895. * pycompile, pyclean, pyversions: Use python2 as the shebang to guard against people fiddling around with the python symlink or having a python3 installed as python in

[ubuntu/xenial-updates] python-stdlib-extensions 2.7.12-1~16.04 (Accepted)

python-stdlib-extensions (2.7.12-1~16.04) xenial-proposed; urgency=medium * SRU: LP: #1591895. Backport 2.7.12 to 16.04 LTS. Date: 2017-11-23 15:23:10.598895+00:00 Changed-By: Matthias Klose Signed-By: Łukasz Zemczak

[ubuntu/xenial-proposed] debian-installer 20101020ubuntu451.21 (Accepted)

debian-installer (20101020ubuntu451.21) xenial; urgency=medium * Move hwe kernels to 4.13.0-36. Date: Tue, 20 Feb 2018 09:30:34 +0100 Changed-By: Łukasz 'sil2100' Zemczak Maintainer: Ubuntu Installer Team