[ubuntu/xenial-security] samba 2:4.3.11+dfsg-0ubuntu0.16.04.18 (Accepted)

to remove the pid-file. samba (2:4.3.11+dfsg-0ubuntu0.16.04.16) xenial; urgency=medium * d/p/bug_1583324_include_with_macro.patch: don't fail parsing the config file if it has macros in include directives (LP: #1583324) Date: 2018-11-19 14:09:13.104655+00:00 Changed-By: Marc Deslauriers https

[ubuntu/xenial-security] qemu 1:2.5+dfsg-5ubuntu10.33 (Accepted)

:42.459669+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.33 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] libapache2-mod-perl2 2.0.9-4ubuntu1.2 (Accepted)

/mod_perl.c. - CVE-2011-2767 Date: 2018-11-15 17:49:02.363684+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/libapache2-mod-perl2/2.0.9-4ubuntu1.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings

[ubuntu/xenial-security] python3.5 3.5.2-2ubuntu0~16.04.5 (Accepted)

-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/python3.5/3.5.2-2ubuntu0~16.04.5 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] python2.7 2.7.12-1ubuntu0~16.04.4 (Accepted)

: #1682934. * Fix issue #22636: Avoid shell injection problems with ctypes.util.find_library(). LP: #1512068. Date: 2018-11-12 17:53:12.869472+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/python2.7/2.7.12-1ubuntu0~16.04.4 Sorry, changesfile not available.-- Xenial

[ubuntu/xenial-security] pyopenssl 0.15.1-2ubuntu0.2 (Accepted)

: update expired test certs. Date: 2018-11-07 18:59:13.933980+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/pyopenssl/0.15.1-2ubuntu0.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe

[ubuntu/xenial-security] python-cryptography 1.2.3-1ubuntu0.2 (Accepted)

python-cryptography (1.2.3-1ubuntu0.2) xenial-security; urgency=medium * debian/patches/add_x509_up_ref.patch: add X509_up_ref function for pyopenssl security update. Date: 2018-10-18 11:44:12.070400+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/python

[ubuntu/xenial-security] nginx 1.10.3-0ubuntu0.16.04.3 (Accepted)

. - CVE-2018-16844 * SECURITY UPDATE: infinite loop in ngx_http_mp4_module - debian/patches/CVE-2018-16845.patch: fixed reading 64-bit atoms in src/http/modules/ngx_http_mp4_module.c. - CVE-2018-16845 Date: 2018-11-06 20:23:36.169829+00:00 Changed-By: Marc Deslauriers https

[ubuntu/xenial-security] spamassassin 3.4.2-0ubuntu0.16.04.1 (Accepted)

3.4.2-1 package. - debian/spamassassin.{init,preinst}: properly handle process name change in spamassassin 3.4.2. - CVE-2017-15705 - CVE-2018-11780 - CVE-2018-11781 Date: 2018-11-06 12:33:21.637844+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source

[ubuntu/xenial-security] ppp 2.4.7-1+2ubuntu1.16.04.1 (Accepted)

-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/ppp/2.4.7-1+2ubuntu1.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] network-manager 1.2.6-0ubuntu0.16.04.3 (Accepted)

Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/network-manager/1.2.6-0ubuntu0.16.04.3 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] systemd 229-4ubuntu21.6 (Accepted)

/optional links for boot. (LP: #1737570) [ David Glasser ] * journald: don't reduce BurstRateLimit on low disk space (LP: #1732803) Date: 2018-10-31 17:36:12.585829+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/systemd/229-4ubuntu21.6 Sorry, changesfile not available

[ubuntu/xenial-security] curl 7.47.0-1ubuntu2.11 (Accepted)

number pending Date: 2018-10-29 15:20:13.910570+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/curl/7.47.0-1ubuntu2.11 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/xenial-security] ghostscript 9.25~dfsg+1-0ubuntu0.16.04.2 (Accepted)

. Date: 2018-10-30 15:53:44.886158+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/ghostscript/9.25~dfsg+1-0ubuntu0.16.04.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/xenial-security] xorg-server-hwe-16.04 2:1.19.6-1ubuntu4.1~16.04.2 (Accepted)

in SProcXSendExtensionEvent in Xi/sendexev.c. - CVE-2017-10972 xorg-server (2:1.19.3-1ubuntu2) artful; urgency=medium * sync-i965-ids.diff: Sync i965 pci-id's from mesa. Date: 2018-10-25 16:07:33.031594+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/xorg-server-hwe

[ubuntu/xenial-security] pinba-engine-mysql 1.1.0-1ubuntu1.10 (Accepted)

pinba-engine-mysql (1.1.0-1ubuntu1.10) xenial-security; urgency=medium * Rebuild against mysql 5.7.24. Date: 2018-10-23 14:11:14.195895+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/pinba-engine-mysql/1.1.0-1ubuntu1.10 Sorry, changesfile not available.-- Xenial

[ubuntu/xenial-security] mysql-5.7 5.7.24-0ubuntu0.16.04.1 (Accepted)

, CVE-2018-3185, CVE-2018-3187, CVE-2018-3200, CVE-2018-3247, CVE-2018-3251, CVE-2018-3276, CVE-2018-3277, CVE-2018-3278, CVE-2018-3282, CVE-2018-3283, CVE-2018-3284 Date: 2018-10-23 11:41:12.744785+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/mysql-5.7

[ubuntu/xenial-security] paramiko 1.16.0-1ubuntu0.2 (Accepted)

-1000805.patch: split messages dict in paramiko/auth_handler.py, added tests to tests/test_transport.py. - debian/control: added python-mock and python3-mock Build-Depends. - CVE-2018-1000805 Date: 2018-10-16 15:58:20.295582+00:00 Changed-By: Marc Deslauriers https://launchpad.net

[ubuntu/xenial-security] libssh 0.6.3-4.3ubuntu0.1 (Accepted)

libssh (0.6.3-4.3ubuntu0.1) xenial-security; urgency=medium * SECURITY UPDATE: authentication bypass vulnerability - debian/patches/CVE-2018-10933-*.patch: add upstream patches to correct the issue. - CVE-2018-10933 Date: 2018-10-16 19:45:25.703711+00:00 Changed-By: Marc

[ubuntu/xenial-security] net-snmp 5.7.3+dfsg-1ubuntu4.2 (Accepted)

net-snmp (5.7.3+dfsg-1ubuntu4.2) xenial-security; urgency=medium * SECURITY UPDATE: DoS via NULL pointer exception - debian/patches/CVE-2018-18065.patch: fix logic in agent/helpers/table.c. - CVE-2018-18065 Date: 2018-10-15 15:07:18.610139+00:00 Changed-By: Marc Deslauriers

[ubuntu/xenial-security] clamav 0.100.2+dfsg-1ubuntu0.16.04.1 (Accepted)

:15.042176+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/clamav/0.100.2+dfsg-1ubuntu0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial

[ubuntu/xenial-security] tomcat8 8.0.32-1ubuntu1.8 (Accepted)

:45.075137+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/tomcat8/8.0.32-1ubuntu1.8 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] strongswan 5.3.5-1ubuntu3.8 (Accepted)

/gmp_rsa_private_key.c. - CVE-2018-17540 Date: 2018-09-26 19:36:12.929845+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/strongswan/5.3.5-1ubuntu3.8 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe

[ubuntu/xenial-security] ghostscript 9.25~dfsg+1-0ubuntu0.16.04.1 (Accepted)

/copyright*: updated from cosmic package. - debian/rules, debian/libgs-dev.install: remove static library. - debian/symbols.common: updated for new version. Date: 2018-09-27 18:58:12.130854+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/ghostscript/9.25~dfsg+1

[ubuntu/xenial-security] strongswan 5.3.5-1ubuntu3.7 (Accepted)

* d/p/ikev1-First-do-PSK-lookups-lp1734207.patch ensure evaluation with resolvable hostnames selects the right PSK (LP: #1734207). Date: 2018-09-18 12:46:17.628161+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/strongswan/5.3.5-1ubuntu3.7 Sorry, changesfile

[ubuntu/xenial-security] bind9 1:9.10.3.dfsg.P4-8ubuntu1.11 (Accepted)

-5740 Date: 2018-09-19 13:17:12.999297+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/bind9/1:9.10.3.dfsg.P4-8ubuntu1.11 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/xenial-security] ghostscript 9.18~dfsg~0-0ubuntu2.9 (Accepted)

-15911, CVE-2018-16509, CVE-2018-16511, CVE-2018-16513, CVE-2018-16539, CVE-2018-16540, CVE-2018-16541, CVE-2018-16542, CVE-2018-16543, CVE-2018-16585, CVE-2018-16802 Date: 2018-09-13 12:18:17.814362+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/ghostscript/9.18

[ubuntu/xenial-security] php7.0 7.0.32-0ubuntu0.16.04.1 (Accepted)

php7.0 (7.0.32-0ubuntu0.16.04.1) xenial-security; urgency=medium * SECURITY UPDATE: Update to 7.0.32 to fix security issues - CVE-2018-14851 - CVE-2018-14883 Date: 2018-09-13 15:58:13.126207+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/php7.0/7.0.32

[ubuntu/xenial-security] clamav 0.100.1+dfsg-1ubuntu0.16.04.3 (Accepted)

clamav (0.100.1+dfsg-1ubuntu0.16.04.3) xenial-security; urgency=medium * debian/clamav-daemon.config.in: fix infinite loop during dpkg-reconfigure (LP: #1792051) Date: 2018-09-13 18:49:18.978588+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/clamav/0.100.1+dfsg

[ubuntu/xenial-security] postgresql-9.5 9.5.14-0ubuntu0.16.04 (Accepted)

/release-9-5-13.html Date: 2018-08-15 19:27:13.570746+00:00 Changed-By:  Christian Ehrhardt  Signed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/postgresql-9.5/9.5.14-0ubuntu0.16.04 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify

[ubuntu/xenial-security] webkit2gtk 2.20.5-0ubuntu0.16.04.1 (Accepted)

, CVE-2018-4278, CVE-2018-4284, CVE-2018-12911 * debian/patches/fix-ftbfs-m68k.patch: refreshed with new version. Date: 2018-08-15 15:59:14.242169+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/webkit2gtk/2.20.5-0ubuntu0.16.04.1 Sorry, changesfile not available

[ubuntu/xenial-security] samba 2:4.3.11+dfsg-0ubuntu0.16.04.15 (Accepted)

-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.15 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] pinba-engine-mysql 1.1.0-1ubuntu1.9 (Accepted)

pinba-engine-mysql (1.1.0-1ubuntu1.9) xenial-security; urgency=medium * Rebuild against mysql 5.7.23. Date: 2018-07-30 11:27:20.079296+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/pinba-engine-mysql/1.1.0-1ubuntu1.9 Sorry, changesfile not available.-- Xenial

[ubuntu/xenial-security] mysql-5.7 5.7.23-0ubuntu0.16.04.1 (Accepted)

, CVE-2018-3070, CVE-2018-3071, CVE-2018-3077, CVE-2018-3081 Date: 2018-07-27 16:48:12.430835+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.23-0ubuntu0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes

[ubuntu/xenial-security] clamav 0.100.1+dfsg-1ubuntu0.16.04.2 (Accepted)

-it.patch: add patch from Debian stretch to simply warn about removed options. Date: 2018-07-26 14:51:13.472609+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/clamav/0.100.1+dfsg-1ubuntu0.16.04.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial

[ubuntu/xenial-security] tomcat8 8.0.32-1ubuntu1.7 (Accepted)

in WebSocket client - debian/patches/CVE-2018-8034.patch: enable hostname verification by default in webapps/docs/web-socket-howto.xml, java/org/apache/tomcat/websocket/WsWebSocketContainer.java. - CVE-2018-8034 Date: 2018-07-25 14:21:14.054463+00:00 Changed-By: Marc Deslauriers

[ubuntu/xenial-security] clamav 0.100.1+dfsg-1ubuntu0.16.04.1 (Accepted)

change * Update README.Debian to describe how to disable apparmor for clamav-daemon and clamav-freshclam (Closes: #884707) [ Sebastian Andrzej Siewior ] * Point Vcs-* tags to salsa. Date: 2018-07-24 11:15:13.483531+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source

[ubuntu/xenial-security] libclamunrar 0.100.1-1~ubuntu0.16.04.1 (Accepted)

to 10. * Drop autoreconv - it is default now libclamunrar (0.99-2) unstable; urgency=medium * Add patches from upstream bugzilla bb11600 and bb11601 to fix out of band access * drop openssl check (Closes: #828383). Date: 2018-07-24 11:46:21.995022+00:00 Changed-By: Marc Deslauriers

[ubuntu/xenial-security] policykit-1 0.105-14.1ubuntu0.1 (Accepted)

13:43:23.184434+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/policykit-1/0.105-14.1ubuntu0.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo

[ubuntu/xenial-security] dnsmasq 2.75-1ubuntu0.16.04.5 (Accepted)

: #1726017) by adding two upstream patches. - 2.76: 4ace25c5d6: Treat REFUSED (not SERVFAIL) as an unsuccessful upstream response - 2.77: 68f6312d4b: Stop treating SERVFAIL as a successful response from upstream servers. Date: 2018-07-12 13:54:53.180989+00:00 Changed-By: Marc

[ubuntu/xenial-security] dns-root-data 2018013001~16.04.1 (Accepted)

dns-root-data (2018013001~16.04.1) xenial-security; urgency=medium * Rebuild as an update for Ubuntu 16.04 LTS. (LP: #1721129) - debian/{control,compat}: relax debhelper version requirement. Date: 2018-07-05 15:51:16.483544+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu

[ubuntu/xenial-security] cups 2.1.3-4ubuntu0.5 (Accepted)

-418x.patch: remove Include directive handling in scheduler/conf.c. - CVE-2018-4181 * SECURITY UPDATE: AppArmor sandbox bypass - debian/local/apparmor-profile: also confine /usr/lib/cups/backend/mdns. - CVE-2018-6553 Date: 2018-06-22 18:25:23.039338+00:00 Changed-By: Marc

[ubuntu/xenial-security] imagemagick 8:6.8.9.9-7ubuntu5.12 (Accepted)

15:43:14.681609+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.12 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo

[ubuntu/xenial-security] openslp-dfsg 1.2.1-11ubuntu0.16.04.1 (Accepted)

:13.436588+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/openslp-dfsg/1.2.1-11ubuntu0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial

[ubuntu/xenial-security] ntp 1:4.2.8p4+dfsg-3ubuntu5.9 (Accepted)

20:01:12.595681+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/ntp/1:4.2.8p4+dfsg-3ubuntu5.9 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial

[ubuntu/xenial-security] libjpeg-turbo 1.4.2-0ubuntu3.1 (Accepted)

libjpeg-turbo (1.4.2-0ubuntu3.1) xenial-security; urgency=medium * SECURITY UPDATE: division by zero via BMP image - debian/patches/CVE-2018-1152.patch: add size check in rdbmp.c. - CVE-2018-1152 Date: 2018-07-05 19:48:12.894307+00:00 Changed-By: Marc Deslauriers https://launchpad.net

[ubuntu/xenial-security] zziplib 0.13.62-3ubuntu0.16.04.2 (Accepted)

. - debian/patches/CVE-2018-7726-2.patch: check rootseek in zzip/zip.c. - debian/patches/CVE-2018-7726-3.patch: check zz_rootsize in zzip/zip.c. - CVE-2018-7726 Date: 2018-06-29 17:15:12.759592+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/zziplib/0.13.62

[ubuntu/xenial-security] nasm 2.11.08-1ubuntu0.1 (Accepted)

lso fix the following CVEs: - CVE-2017-17811 - CVE-2017-17813 - CVE-2017-17814 - CVE-2017-17816 - CVE-2017-17817 - CVE-2017-17818 - CVE-2017-17820 Date: 2018-06-28 17:12:12.918172+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/nasm/2.11.08-1ubuntu

[ubuntu/xenial-security] jasper 1.900.1-debian1-2.4ubuntu1.2 (Accepted)

of service in jp2_cdef_destroy - debian/patches/CVE-2017-6850.patch: initialize data in src/libjasper/base/jas_stream.c, src/libjasper/jp2/jp2_cod.c. - CVE-2017-6850 Date: 2018-06-27 15:07:12.559357+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/jasper/1.900.1

[ubuntu/xenial-security] openssl 1.0.2g-1ubuntu4.13 (Accepted)

-2018-0737-4.patch: ensure BN_mod_inverse and BN_mod_exp_mont both get called with BN_FLG_CONSTTIME flag set in crypto/rsa/rsa_gen.c. - CVE-2018-0737 Date: 2018-06-20 12:14:12.879803+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/openssl/1.0.2g-1ubuntu4.13

[ubuntu/xenial-security] libgcrypt20 1.6.5-2ubuntu0.5 (Accepted)

+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/libgcrypt20/1.6.5-2ubuntu0.5 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] webkit2gtk 2.20.3-0ubuntu0.16.04.1 (Accepted)

version. * debian/{rules,compat}: Show Ubuntu in user agent (LP: #1770868) - Thanks to Jeremy Bicha for the patch! Date: 2018-06-15 11:48:20.328178+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/webkit2gtk/2.20.3-0ubuntu0.16.04.1 Sorry, changesfile not available

[ubuntu/xenial-security] file 1:5.25-2ubuntu1.1 (Accepted)

file (1:5.25-2ubuntu1.1) xenial-security; urgency=medium * SECURITY UPDATE: out-of-bounds read via crafted ELF file - debian/patches/CVE-2018-10360.patch: add bounds check to src/readelf.c. - CVE-2018-10360 Date: 2018-06-13 17:42:12.439070+00:00 Changed-By: Marc Deslauriers

[ubuntu/xenial-security] imagemagick 8:6.8.9.9-7ubuntu5.11 (Accepted)

-8960, CVE-2018-9133, CVE-2018-10177, CVE-2018-11251 Date: 2018-06-11 14:19:50.843145+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.11 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com

[ubuntu/xenial-security] libvirt 1.3.1-1ubuntu10.24 (Accepted)

) libvirt (1.3.1-1ubuntu10.20) xenial; urgency=medium * d/p/ubuntu/lp1688508-tools-avoid-text-spilling-into-variables.patch: avoid hanging on shutdown (LP: #1688508) Date: 2018-05-23 18:54:13.518013+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/libvirt/1.3.1-1ubuntu1

[ubuntu/xenial-security] qemu 1:2.5+dfsg-5ubuntu10.30 (Accepted)

and handling of it in target/i386/cpu.h, target/i386/kvm.c, target/i386/machine.c. - CVE-2018-3639 Date: 2018-05-23 17:20:18.181364+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.30 Sorry, changesfile not available.-- Xenial-changes

[ubuntu/xenial-security] elfutils 0.165-3ubuntu1.1 (Accepted)

memory consumption when handling crafted ELF files - debian/patches/CVE-2017-7613.patch: Sanity check the number of phdrs and shdrs available. Based on upstream patch. - CVE-2017-7613 Date: 2017-05-18 21:41:24.746981+00:00 Changed-By: Tyler Hicks Signed-By: Marc Deslauriers https

[ubuntu/xenial-security] exempi 2.2.2-2ubuntu0.1 (Accepted)

-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/exempi/2.2.2-2ubuntu0.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] tomcat8 8.0.32-1ubuntu1.6 (Accepted)

/filters/TestCorsFilter.java, test/org/apache/catalina/filters/TesterFilterConfigs.java. - CVE-2018-8014 Date: 2018-05-29 14:00:27.571791+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/tomcat8/8.0.32-1ubuntu1.6 Sorry, changesfile not available.-- Xenial-changes

[ubuntu/xenial-security] apport 2.20.1-0ubuntu2.18 (Accepted)

Maintainer: Martin Pitt Signed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/apport/2.20.1-0ubuntu2.18 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial

[ubuntu/xenial-security] nvidia-graphics-drivers-384 384.130-0ubuntu0.16.04.1 (Accepted)

ibraries from taking precedence in the dynamic linker cache. - Fixed a bug which could cause X servers that export a Video Driver ABI earlier than 0.8 to crash when running X11 applications which call XRenderAddTraps(). Date: 2018-05-17 13:40:25.897708+00:00 Changed-By: Alberto Mil

[ubuntu/xenial-security] procps 2:3.3.10-4ubuntu2.4 (Accepted)

Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com> https://launchpad.net/ubuntu/+source/procps/2:3.3.10-4ubuntu2.4 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/li

[ubuntu/xenial-security] qemu 1:2.5+dfsg-5ubuntu10.28 (Accepted)

MSR register for ppc64 targets (LP: #1723914) [ Yasmin Beatriz Alves da Silva ] * debian/patches/ubuntu/lp-1723904-sprs-backport.patch: Fix handling of Power8 special purpose registers (LP: #1723904) Date: 2018-05-14 11:49:25.897072+00:00 Changed-By: Marc Deslauriers <marc.desla

[ubuntu/xenial-security] curl 7.47.0-1ubuntu2.8 (Accepted)

Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com> https://launchpad.net/ubuntu/+source/curl/7.47.0-1ubuntu2.8 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/li

[ubuntu/xenial-security] php7.0 7.0.30-0ubuntu0.16.04.1 (Accepted)

php7.0 (7.0.30-0ubuntu0.16.04.1) xenial-security; urgency=medium * SECURITY UPDATE: Update to 7.0.30 to fix security issues - CVE-2018-10545, CVE-2018-10546, CVE-2018-10547, CVE-2018-10548, CVE-2018-10549 Date: 2018-05-10 11:48:30.425994+00:00 Changed-By: Marc Deslauriers

[ubuntu/xenial-security] webkit2gtk 2.20.2-0ubuntu0.16.04.1 (Accepted)

webkit2gtk (2.20.2-0ubuntu0.16.04.1) xenial-security; urgency=medium * Updated to 2.20.2 to fix security issue. - CVE-2018-4200 Date: 2018-05-07 23:38:03.746393+00:00 Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com> https://launchpad.net/ubuntu/+source/webkit2gtk/

[ubuntu/xenial-security] cups-filters 1.8.3-2ubuntu3.4 (Accepted)

cups-filters (1.8.3-2ubuntu3.4) xenial-security; urgency=medium * Rebuild against new qpdf security update. - debian/control: Bump libqpdf-dev Build-Depends to 8.0~ Date: 2018-05-07 18:04:54.592038+00:00 Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com> https://launchp

[ubuntu/xenial-security] qpdf 8.0.2-3~16.04.1 (Accepted)

-2017-18184, CVE-2017-18185, CVE-2017-18186, CVE-2018-9918 * Revert to debhelper 9: - debian/compat, debian/control: revert to 9. - debian/rules: remove dh_missing. Date: 2018-05-02 13:36:23.364220+00:00 Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com>

[ubuntu/xenial-security] webkit2gtk 2.20.1-0ubuntu0.16.04.1 (Accepted)

. Date: 2018-04-28 17:34:19.551681+00:00 Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com> https://launchpad.net/ubuntu/+source/webkit2gtk/2.20.1-0ubuntu0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsub

[ubuntu/xenial-security] pinba-engine-mysql 1.1.0-1ubuntu1.8 (Accepted)

pinba-engine-mysql (1.1.0-1ubuntu1.8) xenial-security; urgency=medium * Rebuild against mysql 5.7.22. Date: 2018-04-24 14:07:17.237011+00:00 Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com> https://launchpad.net/ubuntu/+source/pinba-engine-mysql/1.1.0-1ubuntu1.8 Sorry, chang

[ubuntu/xenial-security] mysql-5.7 5.7.22-0ubuntu0.16.04.1 (Accepted)

, CVE-2018-2846 * d/p/disable_tests.patch: disable partition_rename_longfilename test which fails when building locally. * debian/mysql-testsuite-5.7.manpages: removed, these manpages are no longer shipped. Date: 2018-04-20 11:26:14.834852+00:00 Changed-By: Marc Deslauriers <marc.desla

[ubuntu/xenial-security] apache2 2.4.18-2ubuntu3.8 (Accepted)

-1312 apache2 (2.4.18-2ubuntu3.7) xenial; urgency=medium * Avoid crashes, hangs and loops by fixing mod_ldap locking: (LP: #1752683) - added debian/patches/util_ldap_cache_lock_fix.patch Date: 2018-04-18 15:27:15.416062+00:00 Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com>

[ubuntu/xenial-security] ruby-loofah 2.0.3-2+deb9u1build0.16.04.1 (Accepted)

ruby-loofah (2.0.3-2+deb9u1build0.16.04.1) xenial-security; urgency=medium * fake sync from Debian Date: 2018-04-17 17:11:12.466825+00:00 Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com> https://launchpad.net/ubuntu/+source/ruby-loofah/2.0.3-2+deb9u1build0.16.04.1

[ubuntu/xenial-security] perl 5.22.1-9ubuntu0.3 (Accepted)

. - CVE-2018-6798 * SECURITY UPDATE: heap buffer overflow bug - debian/patches/fixes/CVE-2018-6913.patch: fix various space calculation issues in pp_pack.c, t/op/pack.t. - CVE-2018-6913 Date: 2018-04-11 19:36:29.379108+00:00 Changed-By: Marc Deslauriers <marc.desla

[ubuntu/xenial-security] ffmpeg 7:2.8.14-0ubuntu0.16.04.1 (Accepted)

-2017-14058, CVE-2017-14059, CVE-2017-14169, CVE-2017-14170, CVE-2017-14171, CVE-2017-14222, CVE-2017-14223, CVE-2017-14225, CVE-2017-15672, CVE-2017-17081. Date: 2018-04-12 15:48:13.146086+00:00 Changed-By: James Cowgill <jcowg...@debian.org> Signed-By: Marc Deslauriers <marc

[ubuntu/xenial-security] ubuntu-release-upgrader 1:16.04.25 (Accepted)

ubuntu-release-upgrader (1:16.04.25) xenial-security; urgency=medium * Properly drop permissions when opening a browser. (LP: #1174007) Date: 2018-04-09 14:16:13.284967+00:00 Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com> https://launchpad.net/ubuntu/+source/ubuntu-r

[ubuntu/xenial-security] wayland 1.12.0-1~ubuntu16.04.3 (Accepted)

wayland (1.12.0-1~ubuntu16.04.3) xenial-security; urgency=medium * SECURITY UPDATE: heap overflows when parsing malicious files - debian/patches/CVE-2017-16612.patch: add checks to cursor/xcursor.c. - CVE-2017-16612 Date: 2018-03-08 12:20:21.587272+00:00 Changed-By: Marc Deslauriers

[ubuntu/xenial-security] libvncserver 0.9.10+dfsg-3ubuntu0.16.04.2 (Accepted)

:24.471823+00:00 Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com> https://launchpad.net/ubuntu/+source/libvncserver/0.9.10+dfsg-3ubuntu0.16.04.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at:

[ubuntu/xenial-security] python-crypto 2.6.1-6ubuntu0.16.04.3 (Accepted)

:00 Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com> https://launchpad.net/ubuntu/+source/python-crypto/2.6.1-6ubuntu0.16.04.3 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubun

[ubuntu/xenial-security] libraw 0.17.1-1ubuntu0.2 (Accepted)

/libraw_const.h, src/libraw_cxx.cpp. - No CVE number * SECURITY UPDATE: Secunia #81000 security issues - debian/patches/security_0.18.8_2.patch: add more checks to dcraw/dcraw.c, internal/dcraw_common.cpp. - No CVE number Date: 2018-03-30 15:05:18.426879+00:00 Changed-By: Marc

[ubuntu/xenial-security] openssl 1.0.2g-1ubuntu4.11 (Accepted)

: 2018-03-27 18:50:54.123694+00:00 Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com> https://launchpad.net/ubuntu/+source/openssl/1.0.2g-1ubuntu4.11 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at:

[ubuntu/xenial-security] icu 55.1-7ubuntu0.4 (Accepted)

/persncal.cpp, source/test/intltest/calregts.cpp, source/test/intltest/calregts.h. - CVE-2017-15422 Date: 2018-03-27 15:36:18.070708+00:00 Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com> https://launchpad.net/ubuntu/+source/icu/55.1-7ubuntu0.4 Sorry, changesfile not ava

[ubuntu/xenial-security] kdepim 4:15.12.3-0ubuntu1.1 (Accepted)

kdepim (4:15.12.3-0ubuntu1.1) xenial-security; urgency=medium * SECURITY UPDATE: Send Later with Delay bypasses OpenPGP (LP: #1698180): - fix-CVE-2017-9604.patch - CVE-2017-9604 Date: 2018-03-25 12:40:15.132740+00:00 Changed-By: Simon Quigley <tsimo...@ubuntu.com> Signed-By

[ubuntu/xenial-security] tiff 4.0.6-1ubuntu0.4 (Accepted)

:53:19.392048+00:00 Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com> https://launchpad.net/ubuntu/+source/tiff/4.0.6-1ubuntu0.4 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubun

[ubuntu/xenial-security] libvorbis 1.3.5-3ubuntu0.2 (Accepted)

libvorbis (1.3.5-3ubuntu0.2) xenial-security; urgency=medium * SECURITY UPDATE: out-of-bounds write in codebook decoding - debian/patches/CVE-2018-5146.patch: fix codebook decoding in lib/codebook.c. - CVE-2018-5146 Date: 2018-03-21 18:26:30.167511+00:00 Changed-By: Marc

[ubuntu/xenial-security] tiff 4.0.6-1ubuntu0.3 (Accepted)

- debian/patches/CVE-2018-5784.patch: fix infinite loop in contrib/addtiffo/tif_overview.c, tools/tiff2pdf.c, tools/tiffcrop.c. - CVE-2018-5784 Date: 2018-03-20 16:40:13.916633+00:00 Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com> https://launchpad.net/ubuntu/+

[ubuntu/xenial-security] memcached 1.4.25-2ubuntu1.4 (Accepted)

-By: Marc Deslauriers <marc.deslauri...@canonical.com> https://launchpad.net/ubuntu/+source/memcached/1.4.25-2ubuntu1.4 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/

[ubuntu/xenial-security] php7.0 7.0.28-0ubuntu0.16.04.1 (Accepted)

: 2018-03-15 15:02:33.211427+00:00 Changed-By: Nish Aravamudan <nish.aravamu...@canonical.com> Signed-By: Marc Deslauriers <marc.deslauri...@canonical.com> https://launchpad.net/ubuntu/+source/php7.0/7.0.28-0ubuntu0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xe

[ubuntu/xenial-security] mosquitto 1.4.8-1ubuntu0.16.04.3 (Accepted)

mosquitto (1.4.8-1ubuntu0.16.04.3) xenial-security; urgency=medium * SECURITY UPDATE: upstream patch for CVE 2017-7651 (LP: #1752591) Date: 2018-03-16 12:35:13.600362+00:00 Changed-By: Emmet Hikory <per...@ubuntu.com> Signed-By: Marc Deslauriers <marc.deslauri...@canonical.c

[ubuntu/xenial-security] curl 7.47.0-1ubuntu2.7 (Accepted)

in lib/openldap.c. - CVE-2018-1000121 * SECURITY UPDATE: RTSP RTP buffer over-read - debian/patches/CVE-2018-1000122.patch: make sure excess reads don't go beyond buffer end in lib/transfer.c. - CVE-2018-1000122 Date: 2018-03-14 17:35:12.984822+00:00 Changed-By: Marc Deslauriers

[ubuntu/xenial-security] clamav 0.99.4+addedllvm-0ubuntu0.16.04.1 (Accepted)

/rules: bumped cl_retflevel. Date: 2018-03-07 13:03:02.71+00:00 Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com> https://launchpad.net/ubuntu/+source/clamav/0.99.4+addedllvm-0ubuntu0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-c

[ubuntu/xenial-security] python-django 1.8.7-1ubuntu5.6 (Accepted)

* SECURITY UPDATE: DoS in truncatechars_html and truncatewords_html template filters - debian/patches/CVE-2018-7537.patch: fix backtracking in django/utils/text.py, add test to tests/utils_tests/test_text.py. - CVE-2018-7537 Date: 2018-03-05 15:57:20.734539+00:00 Changed-By: Marc

[ubuntu/xenial-security] dovecot 1:2.2.22-1ubuntu2.7 (Accepted)

-2017-15130/*.patch: upstream config filtering fix. - CVE-2017-15130 Date: 2018-02-27 19:02:25.125473+00:00 Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com> https://launchpad.net/ubuntu/+source/dovecot/1:2.2.22-1ubuntu2.7 Sorry, changesfile not available.-- Xenial-changes m

[ubuntu/xenial-security] qemu 1:2.5+dfsg-5ubuntu10.24 (Accepted)

-5ubuntu10.23) in xenial-proposed. Date: 2018-03-04 16:42:25.062739+00:00 Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com> https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.24 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubun

[ubuntu/xenial-security] isc-dhcp 4.3.3-5ubuntu12.9 (Accepted)

in xenial-proposed. Date: 2018-03-01 14:00:19.833031+00:00 Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com> https://launchpad.net/ubuntu/+source/isc-dhcp/4.3.3-5ubuntu12.9 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify se

[ubuntu/xenial-security] sensible-utils 0.0.9ubuntu0.16.04.1 (Accepted)

sensible-utils (0.0.9ubuntu0.16.04.1) xenial-security; urgency=medium * SECURITY UPDATE: argument-injection attack via BROWSER env variable - sensible-browser: stop supporting %s expansion in $BROWSER. - CVE-2017-17512 Date: 2018-02-21 19:36:21.139161+00:00 Changed-By: Marc Deslauriers

[ubuntu/xenial-security] qemu 1:2.5+dfsg-5ubuntu10.22 (Accepted)

/vga.c. - CVE-2018-5683 qemu (1:2.5+dfsg-5ubuntu10.21) xenial; urgency=medium * debian/patches/ubuntu/lp-1712803-hypercalls_backport.patch: support newer hcalls; Thanks to Yasmin Beatriz Alves da Silva. (LP: #1712803). Date: 2018-02-15 19:42:21.693112+00:00 Changed-By: Marc Deslauriers

[ubuntu/xenial-security] erlang 1:18.3-dfsg-1ubuntu3.1 (Accepted)

-By: Marc Deslauriers <marc.deslauri...@canonical.com> https://launchpad.net/ubuntu/+source/erlang/1:18.3-dfsg-1ubuntu3.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/

[ubuntu/xenial-security] exim4 4.86.2-2ubuntu2.3 (Accepted)

exim4 (4.86.2-2ubuntu2.3) xenial-security; urgency=medium * SECURITY UPDATE: Buffer overflow in base64d() - debian/patches/CVE-2018-6789.patch: fix overflow in src/auths/b64decode.c. - CVE-2018-6789 Date: 2018-02-10 19:37:12.855802+00:00 Changed-By: Marc Deslauriers

[ubuntu/xenial-security] update-manager 1:16.04.12 (Accepted)

update-manager (1:16.04.12) xenial-security; urgency=medium * No change rebuild in security pocket (LP: #1748397) Date: 2018-02-12 12:37:12.233728+00:00 Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com> https://launchpad.net/ubuntu/+source/update-manager/1:16.04.12

<    1   2   3   4   5   6   7   8   >