ansible (2.0.0.2-2ubuntu1.2) xenial-security; urgency=medium
* SECURITY UPDATE: Fix vulnerability where a local user could use symlinks
to write arbitrary files or gain privileges.
- debian/patches/CVE-2016-3096.patch: Do not use a predictable filenames
in the LXC plugin.
- CVE
libreoffice (1:5.1.6~rc2-0ubuntu1~xenial8) xenial-security; urgency=medium
* SECURITY UPDATE: LibreLogo arbitrary script execution
- debian/patches/CVE-2019-9848.diff: don't allow LibreLogo to be used with
mouseover/etc dom-alike events.
- CVE-2019-9848
* SECURITY UPDATE: Remote
ansible (2.0.0.2-2ubuntu1.2) xenial-security; urgency=medium
* SECURITY UPDATE: Fix vulnerability where a local user could use symlinks
to write arbitrary files or gain privileges.
- debian/patches/CVE-2016-3096.patch: Do not use a predictable filenames
in the LXC plugin.
- CVE
libreoffice (1:5.1.6~rc2-0ubuntu1~xenial8) xenial-security; urgency=medium
* SECURITY UPDATE: LibreLogo arbitrary script execution
- debian/patches/CVE-2019-9848.diff: don't allow LibreLogo to be used with
mouseover/etc dom-alike events.
- CVE-2019-9848
* SECURITY UPDATE: Remote
cargo (0.36.0-0ubuntu1~16.04.1) xenial; urgency=medium
* Backport to xenial
* Embed libgit2 0.27.0 to avoid a dependency on a version which is newer
than that found in bionic
- add debian/libgit2
- add debian/patches/do-not-use-system-libgit2.patch
- update debian/control
-
cargo (0.36.0-0ubuntu1~16.04.1) xenial; urgency=medium
* Backport to xenial
* Embed libgit2 0.27.0 to avoid a dependency on a version which is newer
than that found in bionic
- add debian/libgit2
- add debian/patches/do-not-use-system-libgit2.patch
- update debian/control
-
rustc (1.35.0+dfsg0.1+llvm-0ubuntu1~16.04.1) xenial; urgency=medium
* Backport to Xenial.
* Relax the gdb build requirement
- update debian/control
* Relax the dependency on xz-utils by commenting out some unused code
- add debian/patches/d-relax-xz-utils-dependency.patch
-
rustc (1.35.0+dfsg0.1+llvm-0ubuntu1~16.04.1) xenial; urgency=medium
* Backport to Xenial.
* Relax the gdb build requirement
- update debian/control
* Relax the dependency on xz-utils by commenting out some unused code
- add debian/patches/d-relax-xz-utils-dependency.patch
-