[ubuntu/xenial-security] distro-info-data 0.28ubuntu0.19 (Accepted)

acular Oriole" (LP: #2064136) * Update year in debian/copyright [ Jeremy Bícha ] * debian.csv: Fix EOL date for 2.2 Date: 2024-05-03 10:47:10.840807+00:00 Changed-By: Benjamin Drung Signed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/distro-info-d

[ubuntu/xenial-security] gst-plugins-good1.0 1.8.3-1ubuntu0.5 (Accepted)

:37:09.127394+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/gst-plugins-good1.0/1.8.3-1ubuntu0.5 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/xenial-security] file-roller 3.16.5-0ubuntu1.5 (Accepted)

-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/file-roller/3.16.5-0ubuntu1.5 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial

[ubuntu/xenial-security] libcaca 0.99.beta19-2ubuntu0.16.04.2 (Accepted)

, caca/codec/text.c, test/canvas.cpp, tools/makefont.c. - CVE-2021-3410 Date: 2021-04-05 19:18:10.014708+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libcaca/0.99.beta19-2ubuntu0.16.04.2 Sorry, changesfile not available.-- Xenial

[ubuntu/xenial-security] underscore 1.7.0~dfsg-1ubuntu1.1 (Accepted)

...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/underscore/1.7.0~dfsg-1ubuntu1.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] python2.7 2.7.12-1ubuntu0~16.04.16 (Accepted)

:25:17.410368+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/python2.7/2.7.12-1ubuntu0~16.04.16 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/xenial-security] python3.5 3.5.2-2ubuntu0~16.04.13 (Accepted)

-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/python3.5/3.5.2-2ubuntu0~16.04.13 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial

[ubuntu/xenial-security] python2.7 2.7.12-1ubuntu0~16.04.14 (Accepted)

. - CVE-2021-3177 Date: 2021-02-03 13:00:09.623419+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/python2.7/2.7.12-1ubuntu0~16.04.14 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify

[ubuntu/xenial-security] fastd 17-4ubuntu0.1 (Accepted)

-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/fastd/17-4ubuntu0.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] mutt 1.5.24-1ubuntu0.6 (Accepted)

terminator unless we are in a group-list in rfc822.c. - debian/patches/CVE-2021-3181-3.patch: Add group terminator if it is left off in rfc822.c. - CVE-2021-3181 Date: 2021-01-22 13:41:36.821448+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net

[ubuntu/xenial-security] pound 2.6-6.1ubuntu0.1 (Accepted)

-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/pound/2.6-6.1ubuntu0.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] log4net 1.2.10+dfsg-7ubuntu0.16.04.1 (Accepted)

-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/log4net/1.2.10+dfsg-7ubuntu0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo

[ubuntu/xenial-security] htmldoc 1.8.27-8ubuntu1.1 (Accepted)

-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/htmldoc/1.8.27-8ubuntu1.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial

[ubuntu/xenial-security] icoutils 0.31.0-3ubuntu0.1 (Accepted)

, wrestool/restable.c. - CVE-2017-6009 - CVE-2017-6010 - CVE-2017-6011 Date: 2021-01-14 14:33:08.996467+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/icoutils/0.31.0-3ubuntu0.1 Sorry, changesfile not available.-- Xenial-changes

[ubuntu/xenial-security] xdg-utils 1.1.1-1ubuntu1.16.04.5 (Accepted)

...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/xdg-utils/1.1.1-1ubuntu1.16.04.5 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] jasper 1.900.1-debian1-2.4ubuntu1.3 (Accepted)

more than upper bound to cause heap-buffer-overflow in src/libjasper/jpc/jpc_enc.c. - CVE-2020-27828 Date: 2021-01-08 15:25:09.422167+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/jasper/1.900.1-debian1-2.4ubuntu1.3 Sorry

[ubuntu/xenial-security] libproxy 0.4.11-5ubuntu1.2 (Accepted)

...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libproxy/0.4.11-5ubuntu1.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] lxml 3.5.0-1ubuntu0.3 (Accepted)

lxml (3.5.0-1ubuntu0.3) xenial-security; urgency=medium * SECURITY UPDATE: XSS vulnerability - This adds the missing part reported from upstream Prevent combinations of and

[ubuntu/xenial-security] lxml 3.5.0-1ubuntu0.2 (Accepted)

lxml (3.5.0-1ubuntu0.2) xenial-security; urgency=medium * SECURITY UPDATE: XSS vulnerability - Prevent combinations of and

[ubuntu/xenial-security] python-werkzeug 0.10.4+dfsg1-1ubuntu1.2 (Accepted)

-30 14:04:14.700534+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/python-werkzeug/0.10.4+dfsg1-1ubuntu1.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/xenial-security] xdg-utils 1.1.1-1ubuntu1.16.04.4 (Accepted)

Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/xdg-utils/1.1.1-1ubuntu1.16.04.4 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman

[ubuntu/xenial-security] mutt 1.5.24-1ubuntu0.5 (Accepted)

Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/mutt/1.5.24-1ubuntu0.5 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial

[ubuntu/xenial-security] vino 3.8.1-0ubuntu9.4 (Accepted)

...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/vino/3.8.1-0ubuntu9.4 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] libvncserver 0.9.10+dfsg-3ubuntu0.16.04.6 (Accepted)

-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libvncserver/0.9.10+dfsg-3ubuntu0.16.04.6 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo

[ubuntu/xenial-security] krb5 1.13.2+dfsg-5ubuntu2.2 (Accepted)

:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/krb5/1.13.2+dfsg-5ubuntu2.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman

[ubuntu/xenial-security] moin 1.9.8-1ubuntu1.16.04.3 (Accepted)

* SECURITY UPDATE: Remote code execution - debian/patches/CVE-2020-25074.patch: fix remote code execution via cache action in MoinMoin/action/cache.py. - CVE-2020-25074 Date: 2020-11-10 13:33:13.910034+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net

[ubuntu/xenial-security] libexif 0.6.21-2ubuntu0.6 (Accepted)

Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libexif/0.6.21-2ubuntu0.6 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial

[ubuntu/xenial-security] python-cryptography 1.2.3-1ubuntu0.3 (Accepted)

/backends/openssl/rsa.py. - CVE-2020-25659 Date: 2020-10-28 18:16:44.179035+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/python-cryptography/1.2.3-1ubuntu0.3 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes

[ubuntu/xenial-security] php7.0 7.0.33-0ubuntu0.16.04.16 (Accepted)

. - CVE-2020-7070 Date: 2020-10-08 12:09:14.545742+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/php7.0/7.0.33-0ubuntu0.16.04.16 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings

[ubuntu/xenial-security] python2.7 2.7.12-1ubuntu0~16.04.13 (Accepted)

:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/python2.7/2.7.12-1ubuntu0~16.04.13 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman

[ubuntu/xenial-security] python3.5 3.5.2-2ubuntu0~16.04.12 (Accepted)

/skipping_broken_test_httphandlertest.patch: - skipping Lib/test/test_logging.py was hanging during building time causing the building to be killed after 150 minutes of hang. Date: 2020-10-09 16:29:22.918661+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu

[ubuntu/xenial-security] brotli 1.0.3-1ubuntu1~16.04.2 (Accepted)

rds-Version to 3.9.7 (no changes needed) Date: 2020-09-29 16:35:15.164370+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/brotli/1.0.3-1ubuntu1~16.04.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.

[ubuntu/xenial-security] libdbi-perl 1.634-1ubuntu0.2 (Accepted)

...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libdbi-perl/1.634-1ubuntu0.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] libproxy 0.4.11-5ubuntu1.1 (Accepted)

...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libproxy/0.4.11-5ubuntu1.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] libdbi-perl 1.634-1ubuntu0.1 (Accepted)

14:27:13.921831+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libdbi-perl/1.634-1ubuntu0.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/xenial-security] net-snmp 5.7.3+dfsg-1ubuntu4.6 (Accepted)

and -execType flags to "extend" config directive in agent/mibgroup/agent/extend.c, man/snmpd.conf.5.def. Date: 2020-08-31 14:10:21.556880+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/net-snmp/5.7.3+dfsg-1ubuntu4.6 Sorry, c

[ubuntu/xenial-security] nss 2:3.28.4-0ubuntu0.16.04.14 (Accepted)

+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/nss/2:3.28.4-0ubuntu0.16.04.14 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman

[ubuntu/xenial-security] net-snmp 5.7.3+dfsg-1ubuntu4.5 (Accepted)

Date: 2020-08-18 13:36:20.164499+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/net-snmp/5.7.3+dfsg-1ubuntu4.5 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe

[ubuntu/xenial-security] nss 2:3.28.4-0ubuntu0.16.04.13 (Accepted)

. - CVE-2020-12401 Date: 2020-08-06 18:48:19.112785+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/nss/2:3.28.4-0ubuntu0.16.04.13 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings

[ubuntu/xenial-security] libssh 0.6.3-4.3ubuntu0.6 (Accepted)

-2020-16135 Date: 2020-08-03 16:19:15.518883+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libssh/0.6.3-4.3ubuntu0.6 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe

[ubuntu/xenial-security] python2.7 2.7.12-1ubuntu0~16.04.12 (Accepted)

.patch: avoid infinite loop in the tarfile module in Lib/tarfile.py, Lib/test/test_tarfile.py. - CVE-2019-20907 Date: 2020-07-21 16:02:18.284288+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/python2.7/2.7.12-1ubuntu0~16.04.12 Sorry

[ubuntu/xenial-security] python3.5 3.5.2-2ubuntu0~16.04.11 (Accepted)

for IPv4Interface and IPv6Interface in Lib/ipaddress.py, Lib/test/test_ipaddress.py. - CVE-2020-14422 Date: 2020-07-19 19:34:14.985131+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/python3.5/3.5.2-2ubuntu0~16.04.11 Sorry, changesfile not available

[ubuntu/xenial-security] samba 2:4.3.11+dfsg-0ubuntu0.16.04.28 (Accepted)

-22 11:54:13.229589+00:00 Changed-By: Marc Deslauriers Signed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.28 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify

[ubuntu/xenial-security] mailman 1:2.1.20-1ubuntu0.6 (Accepted)

Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/mailman/1:2.1.20-1ubuntu0.6 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo

[ubuntu/xenial-security] mutt 1.5.24-1ubuntu0.4 (Accepted)

, mutt_ssl.c, mutt_ssl_gnutls.c. - CVE-2020-14954 * Redoing patch CVE-2020-14154-1, that causes a possibly regression (LP: #1884588) Date: 2020-06-22 21:51:14.224893+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/mutt/1.5.24-1ubuntu0.4 Sorry

[ubuntu/xenial-security] curl 7.47.0-1ubuntu2.15 (Accepted)

Changed-By: Marc Deslauriers Signed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/curl/7.47.0-1ubuntu2.15 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/xenial-security] mutt 1.5.24-1ubuntu0.3 (Accepted)

/patches/CVE-2020-14154-3.patch: fix GnuTLS interactive prompt short-circuiting in mutt_ssl_gnutls.c. - CVE-2020-14154 Date: 2020-06-19 14:22:16.736314+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/mutt/1.5.24-1ubuntu0.3 Sorry

[ubuntu/xenial-security] libexif 0.6.21-2ubuntu0.5 (Accepted)

/exif-entry.c. - CVE-2020-0182 * SECURITY UPDATE: Integer overflow - debian/patches/CVE-2020-0198.patch: fix unsigned integer overflow in libexif/exif-data.c. - CVE-2020-0198 Date: 2020-06-10 17:28:15.735125+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https

[ubuntu/xenial-security] fwupd 0.8.3-0ubuntu5.1 (Accepted)

11:48:22.057775+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/fwupd/0.8.3-0ubuntu5.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com

[ubuntu/xenial-security] libjpeg-turbo 1.4.2-0ubuntu3.4 (Accepted)

...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libjpeg-turbo/1.4.2-0ubuntu3.4 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] flask 0.10.1-2ubuntu0.1 (Accepted)

:13.658553+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/flask/0.10.1-2ubuntu0.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman

[ubuntu/xenial-security] json-c 0.11-4ubuntu2.6 (Accepted)

caused in update 0.11-4ubuntu2.1. - CVE-2020-12762 Date: 2020-05-25 15:08:13.988043+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/json-c/0.11-4ubuntu2.6 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial

[ubuntu/xenial-security] php7.0 7.0.33-0ubuntu0.16.04.15 (Accepted)

Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/php7.0/7.0.33-0ubuntu0.16.04.15 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman

[ubuntu/xenial-security] exim4 4.86.2-2ubuntu2.6 (Accepted)

-05-14 15:36:29.242943+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/exim4/4.86.2-2ubuntu2.6 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/xenial-security] json-c 0.11-4ubuntu2.1 (Accepted)

-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/json-c/0.11-4ubuntu2.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] libexif 0.6.21-2ubuntu0.2 (Accepted)

vulnerability - debian/patches/CVE-2020-12767.patch: check if d variable is not zeroed before use it in libexif/exif-entry.c - CVE-2020-12767 Date: 2020-05-11 17:06:26.207311+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libexif

[ubuntu/xenial-security] mailman 1:2.1.20-1ubuntu0.5 (Accepted)

-05-07 13:23:38.779997+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/mailman/1:2.1.20-1ubuntu0.5 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/xenial-security] mailman 1:2.1.20-1ubuntu0.4 (Accepted)

/Handlers/Scrubber.py. - CVE-2020-12137 Date: 2020-04-28 18:42:14.869630+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/mailman/1:2.1.20-1ubuntu0.4 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes

[ubuntu/xenial-security] python3.5 3.5.2-2ubuntu0~16.04.10 (Accepted)

UPDATE: Denial of service - debian/patches/CVE-2020-8492.patch: fix the regex to prevent the regex denial of service in Lib/urllib/request.py, - CVE-2020-8492 Date: 2020-04-17 14:43:14.795137+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu

[ubuntu/xenial-security] python2.7 2.7.12-1ubuntu0~16.04.11 (Accepted)

: Denial of service - debian/patches/CVE-2020-8492.patch: fix the regex to prevent the regex denial of service in Lib/urllib2.py. - CVE-2020-8492 Date: 2020-04-17 16:34:15.418555+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source

[ubuntu/xenial-security] file-roller 3.16.5-0ubuntu1.4 (Accepted)

Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/file-roller/3.16.5-0ubuntu1.4 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman

[ubuntu/xenial-security] php7.0 7.0.33-0ubuntu0.16.04.14 (Accepted)

-2020-7064 * SECURITY UPDATE: Truncated url due \0 - debian/patches/CVE-2020-7066.patch: check for get_headers not accepting \0 in ext/standard/url.c. - CVE-2020-7066 Date: 2020-04-09 15:43:14.331337+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net

[ubuntu/xenial-security] libpam-krb5 4.7-2ubuntu0.1 (Accepted)

arb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libpam-krb5/4.7-2ubuntu0.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] vim 2:7.4.1689-3ubuntu1.4 (Accepted)

is not too big in src/undo.c. - CVE-2017-6350 Date: 2020-03-18 20:02:39.669137+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/vim/2:7.4.1689-3ubuntu1.4 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes

[ubuntu/xenial-security] icu 55.1-7ubuntu0.5 (Accepted)

:24.884402+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/icu/55.1-7ubuntu0.5 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman

[ubuntu/xenial-security] rake 10.5.0-2ubuntu0.1 (Accepted)

(Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/rake/10.5.0-2ubuntu0.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] libarchive 3.1.2-11ubuntu0.16.04.8 (Accepted)

19:30:16.767171+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libarchive/3.1.2-11ubuntu0.16.04.8 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/xenial-security] php7.0 7.0.33-0ubuntu0.16.04.12 (Accepted)

php7.0 (7.0.33-0ubuntu0.16.04.12) xenial-security; urgency=medium * SECURITY REGRESSION: fpm patch for CVE-2015-9253 caused a regression OOM - removing CVE-2015-9253.patch. Date: 2020-02-19 14:26:14.939320+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https

[ubuntu/xenial-security] php7.0 7.0.33-0ubuntu0.16.04.11 (Accepted)

-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/php7.0/7.0.33-0ubuntu0.16.04.11 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial

[ubuntu/xenial-security] libexif 0.6.21-2ubuntu0.1 (Accepted)

of unsafe int overflow checking constructs and check for the actual sizes to avoid integer overflows in libexif/exif-data.c. - CVE-2019-9278 Date: 2020-02-11 12:24:15.716384+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source

[ubuntu/xenial-security] libxml2 2.9.3+dfsg1-1ubuntu0.7 (Accepted)

com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libxml2/2.9.3+dfsg1-1ubuntu0.7 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] pillow 3.1.2-0ubuntu1.3 (Accepted)

.patch: catch FLI buffer overrun in libImaging/FliDecode.c. - CVE-2020-5313 * Fix decompression tests that failed - debian/patches/Fixing_decompression_test.patch: Tests/test_decompression.py. Date: 2020-02-04 11:19:30.099960+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S

[ubuntu/xenial-security] exiv2 0.25-2.1ubuntu16.04.6 (Accepted)

...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/exiv2/0.25-2.1ubuntu16.04.6 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] cyrus-sasl2 2.1.26.dfsg1-14ubuntu0.2 (Accepted)

+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/cyrus-sasl2/2.1.26.dfsg1-14ubuntu0.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com

[ubuntu/xenial-security] e2fsprogs 1.42.13-1ubuntu1.2 (Accepted)

/pass1b.c. - CVE-2019-5188 Date: 2020-01-22 14:39:08.139347+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/e2fsprogs/1.42.13-1ubuntu1.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify

[ubuntu/xenial-security] python-pysaml2 3.0.0-3ubuntu1.16.04.4 (Accepted)

:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/python-pysaml2/3.0.0-3ubuntu1.16.04.4 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com

[ubuntu/xenial-security] libbsd 0.8.2-1ubuntu0.1 (Accepted)

...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libbsd/0.8.2-1ubuntu0.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] sysstat 11.2.0-1ubuntu0.3 (Accepted)

(Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/sysstat/11.2.0-1ubuntu0.3 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] php7.0 7.0.33-0ubuntu0.16.04.9 (Accepted)

/0001-Fixing-test-76557.patch. Date: 2020-01-14 13:17:15.550358+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/php7.0/7.0.33-0ubuntu0.16.04.9 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify

[ubuntu/xenial-security] nss 2:3.28.4-0ubuntu0.16.04.10 (Accepted)

/ctr.c, nss/lib/freebl/gcm.c, nss/lib/freebl/intel-gcm-wrap.c, nss/lib/freebl/rsapkcs.c. - CVE-2019-17006 Date: 2020-01-08 12:38:20.905834+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/nss/2:3.28.4-0ubuntu0.16.04.10 Sorry

[ubuntu/xenial-security] nss 2:3.28.4-0ubuntu0.16.04.9 (Accepted)

-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/nss/2:3.28.4-0ubuntu0.16.04.9 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial

[ubuntu/xenial-security] sqlite3 3.11.0-1ubuntu1.3 (Accepted)

/CVE-2019-5827-*.patch: fix in ext/fts3*, ext/rtree/geopoly.c, src/build.c, src/expr.c, src/main.c, src/test_fs.c, src/util.c, src/vdbeaux.c, src/vdbesort.c, src/vtab.c. - CVE-2019-5827 Date: 2019-11-28 17:22:14.588362+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S

[ubuntu/xenial-security] ruby2.3 2.3.1-2~ubuntu16.04.14 (Accepted)

...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/ruby2.3/2.3.1-2~ubuntu16.04.14 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] libjpeg-turbo 1.4.2-0ubuntu3.3 (Accepted)

and subsequent segfaults - debian/patches/CVE-2019-2201.patch: properly handled gigapixel images in java/TJBench.java, tjbench.c, turbojpeg.c. - CVE-2019-2201 Date: 2019-11-13 13:59:16.401760+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https

[ubuntu/xenial-security] cpio 2.11+dfsg-5ubuntu1.1 (Accepted)

: 2019-11-05 17:22:15.231732+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/cpio/2.11+dfsg-5ubuntu1.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/xenial-security] haproxy 1.6.3-1ubuntu0.3 (Accepted)

issing from transfer-enoding in. src/proto_http.c. - CVE-2019-18277 Date: 2019-10-28 12:44:14.698098+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/haproxy/1.6.3-1ubuntu0.3 Sorry, changesfile not available.-- Xenial-changes mailing

[ubuntu/xenial-security] libarchive 3.1.2-11ubuntu0.16.04.7 (Accepted)

Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libarchive/3.1.2-11ubuntu0.16.04.7 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman

[ubuntu/xenial-security] libxslt 1.1.28-2.1ubuntu0.3 (Accepted)

dangling pointer in xsltCopyText in libxslt/transform.c. - CVE-2019-18197 Date: 2019-10-22 14:49:24.992318+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libxslt/1.1.28-2.1ubuntu0.3 Sorry, changesfile not available.-- Xenial-changes

[ubuntu/xenial-security] exiv2 0.25-2.1ubuntu16.04.5 (Accepted)

...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/exiv2/0.25-2.1ubuntu16.04.5 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] aspell 0.60.7~20110707-3ubuntu0.1 (Accepted)

:13.992394+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/aspell/0.60.7~20110707-3ubuntu0.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com

[ubuntu/xenial-security] sudo 1.8.16-0ubuntu1.8 (Accepted)

in lib/util/regress/atofoo/atofoo_test.c, plugins/sudoers/regress/testsudoers/test5.out.ok, plugins/sudoers/regress/testsudoers/test5.sh. - CVE-2019-14287 Date: 2019-10-11 11:58:18.068957+00:00 Changed-By: Marc Deslauriers Signed-By: leo.barb...@canonical.com (Leonidas S

[ubuntu/xenial-security] e2fsprogs 1.42.13-1ubuntu1.1 (Accepted)

. - CVE-2019-5094 Date: 2019-09-26 17:58:13.868444+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/e2fsprogs/1.42.13-1ubuntu1.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings

[ubuntu/xenial-security] file-roller 3.16.5-0ubuntu1.3 (Accepted)

Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/file-roller/3.16.5-0ubuntu1.3 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo

[ubuntu/xenial-security] wpa 2.4-0ubuntu6.6 (Accepted)

/ieee882_11.c. - CVE-2019-16275 Date: 2019-09-17 13:54:14.647907+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/wpa/2.4-0ubuntu6.6 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify

[ubuntu/xenial-security] expat 2.1.0-7ubuntu0.16.04.5 (Accepted)

-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/expat/2.1.0-7ubuntu0.16.04.5 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial

[ubuntu/xenial-security] memcached 1.4.25-2ubuntu1.5 (Accepted)

-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/memcached/1.4.25-2ubuntu1.5 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] dovecot 1:2.2.22-1ubuntu2.12 (Accepted)

dovecot (1:2.2.22-1ubuntu2.12) xenial-security; urgency=medium * SECURITY REGRESSION: updating CVE-2019-11500-3.patch with the right check Date: 2019-08-28 17:10:13.907141+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/dovecot/1:2.2.22

[ubuntu/xenial-security] dovecot 1:2.2.22-1ubuntu2.11 (Accepted)

(Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/dovecot/1:2.2.22-1ubuntu2.11 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] giflib 5.1.4-0.3~16.04.1 (Accepted)

* SECURITY UPDATE: Divide-by-zero - debian/patches/CVE-2019-15133.patch: adding checks bounds in lib/dgif_lib.c. - CVE-2019-15133 Date: 2019-08-20 13:48:15.188467+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/giflib/5.1.4-0.3

[ubuntu/xenial-security] php7.0 7.0.33-0ubuntu0.16.04.6 (Accepted)

...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/php7.0/7.0.33-0ubuntu0.16.04.6 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

  1   2   3   >