[ubuntu/xenial-updates] libmspack 0.5-1ubuntu0.16.04.4 (Accepted)

-By: leo.barb...@canonical.com (Leonidas S. Barbosa) Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/libmspack/0.5-1ubuntu0.16.04.4 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/xenial-updates] squid3 3.5.12-1ubuntu7.8 (Accepted)

- debian/patches/CVE-2019-12529.patch: replace uudecode with libnettle base64 decoder in lib/Makefile.*, src/auth/basic/Config.cc, include/uudecode.h, lib/uudecode.c. - CVE-2019-12529 Date: 2019-07-17 15:09:31.977522+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot

[ubuntu/xenial-updates] ansible 2.0.0.2-2ubuntu1.2 (Accepted)

: Don't pass ssh_key_passphrase on command line. - CVE-2018-16837 Date: 2019-07-16 15:11:13.706260+00:00 Changed-By: Paulo Flabiano Smorigo Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/ansible/2.0.0.2-2ubuntu1.2 Sorry, changesfile not available.-- Xenial-changes

[ubuntu/xenial-updates] libreoffice 1:5.1.6~rc2-0ubuntu1~xenial8 (Accepted)

bullet graphics retrieved in 'stealth mode' - debian/patches/CVE-2019-9849.diff: include bullet graphics in 'stealth mode' protection. - CVE-2019-9849 Date: 2019-07-16 23:42:16.733737+00:00 Changed-By: Marcus Tomlinson Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu

[ubuntu/xenial-updates] thunderbird 1:60.8.0+build1-0ubuntu0.16.04.2 (Accepted)

le release (60.8.0build1) Date: 2019-07-05 18:06:49.210309+00:00 Changed-By: Olivier Tilloy Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/thunderbird/1:60.8.0+build1-0ubuntu0.16.04.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.

[ubuntu/xenial-updates] dosbox 0.74-4.2+deb9u2build0.16.04.1 (Accepted)

dosbox (0.74-4.2+deb9u2build0.16.04.1) xenial-security; urgency=medium * fake sync from Debian Date: 2019-07-15 17:48:31.696750+00:00 Changed-By: Steve Beattie Maintainer: Jan Dittberner Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/dosbox/0.74-4.2

[ubuntu/xenial-updates] redis 2:3.0.6-1ubuntu0.4 (Accepted)

Klode Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/redis/2:3.0.6-1ubuntu0.4 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-updates] nss 2:3.28.4-0ubuntu0.16.04.6 (Accepted)

.patch: more thorough input checking in nss/lib/cryptohi/seckey.c, nss/lib/freebl/dh.c, nss/lib/freebl/ec.c, nss/lib/util/quickder.c. - CVE-2019-11729 Date: 2019-07-12 12:57:13.868666+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu

[ubuntu/xenial-updates] squid3 3.5.12-1ubuntu7.7 (Accepted)

: properly escape values in tools/cachemgr.cc. - CVE-2019-13345 Date: 2019-07-11 18:47:19.452715+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/squid3/3.5.12-1ubuntu7.7 Sorry, changesfile not available.-- Xenial-changes mailing list

[ubuntu/xenial-updates] exiv2 0.25-2.1ubuntu16.04.4 (Accepted)

ged-By: leo.barb...@canonical.com (Leonidas S. Barbosa) Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/exiv2/0.25-2.1ubuntu16.04.4 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: ht

[ubuntu/xenial-updates] flightcrew 0.7.2+dfsg-6ubuntu0.1 (Accepted)

/patches/CVE-2019-13453.patch: Prevent infinite loop in zipios library by checking for EOF - CVE-2019-13453 Date: 2019-07-11 18:16:08.176250+00:00 Changed-By: Mike Salvatore Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/flightcrew/0.7.2+dfsg-6ubuntu0.1 Sorry

[ubuntu/xenial-updates] zipios++ 0.1.5.9+cvs.2007.04.28-5.2ubuntu0.16.04.1 (Accepted)

:17:35.824384+00:00 Changed-By: Mike Salvatore Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/zipios++/0.1.5.9+cvs.2007.04.28-5.2ubuntu0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe

[ubuntu/xenial-updates] rustc 1.34.1+dfsg2+llvm-0ubuntu1~16.04.1 (Accepted)

- Adjust debian/watch to include +llvm in upstream version. - update debian/watch Date: 2019-05-16 23:25:11.536237+00:00 Changed-By: Michael Hudson-Doyle Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/rustc/1.34.1+dfsg2+llvm-0ubuntu1~16.04.1 Sorry, changesfile

[ubuntu/xenial-updates] firefox 68.0+build3-0ubuntu0.16.04.1 (Accepted)

s.conf * Follow change of location of list.json for searchplugins - debian/rules Date: 2019-07-06 10:31:16.048163+00:00 Changed-By: Olivier Tilloy Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/firefox/68.0+build3-0ubuntu0.16.04.1 Sorry, changesfile not available.--

[ubuntu/xenial-updates] cargo 0.35.0-0ubuntu1~16.04.1 (Accepted)

failures on s390x. There's no Debian build yet on this arch and there's nothing in the archive that requires cargo on s390x at this time - update debian/rules Date: 2019-05-16 23:32:13.015674+00:00 Changed-By: Michael Hudson-Doyle Signed-By: Ubuntu Archive Robot https

[ubuntu/xenial-updates] flashplugin-nonfree 32.0.0.223ubuntu0.16.04.1 (Accepted)

Coulson Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/flashplugin-nonfree/32.0.0.223ubuntu0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo

[ubuntu/xenial-updates] gvfs 1.28.2-1ubuntu1~16.04.3 (Accepted)

: only accept EXTERNAL authentication in daemon/gvfsdaemon.c. - CVE-2019-12795 Date: 2019-07-05 13:59:18.858044+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/gvfs/1.28.2-1ubuntu1~16.04.3 Sorry, changesfile not available.-- Xenial

[ubuntu/xenial-updates] whoopsie 0.2.52.5ubuntu0.1 (Accepted)

-2019-11476 Date: 2019-07-05 07:42:38.503518+00:00 Changed-By: Alex Murray Maintainer: Evan Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/whoopsie/0.2.52.5ubuntu0.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify

[ubuntu/xenial-updates] apport 2.20.1-0ubuntu2.19 (Accepted)

Murray Maintainer: Martin Pitt Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/apport/2.20.1-0ubuntu2.19 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman

[ubuntu/xenial-updates] zeromq3 4.1.4-7ubuntu0.1 (Accepted)

-13132.patch: create buffers large enough to contain arbitrary metadata. - CVE-2019-13132 Date: 2019-07-08 16:09:15.911307+00:00 Changed-By: Eduardo dos Santos Barretto Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/zeromq3/4.1.4-7ubuntu0.1 Sorry, changesfile

[ubuntu/xenial-updates] glib2.0 2.48.2-0ubuntu4.3 (Accepted)

and changes test to run in a temp directory in gio/tests/gsettings.c. - CVE-2019-13012 Date: 2019-07-08 13:44:16.961906+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/glib2.0/2.48.2-0ubuntu4.3 Sorry

[ubuntu/xenial-updates] runc 1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.4 (Accepted)

runc (1.0.0~rc7+git20190403.029124da-0ubuntu1~16.04.4) xenial-security; urgency=medium * No change rebuild for the -security pocket Date: 2019-07-03 15:00:16.639855+00:00 Changed-By: Mike Salvatore Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/runc/1.0.0~rc7

[ubuntu/xenial-updates] docker.io 18.09.7-0ubuntu1~16.04.4 (Accepted)

docker.io (18.09.7-0ubuntu1~16.04.4) xenial-security; urgency=medium * No change rebuild for the -security pocket Date: 2019-07-03 13:37:17.299495+00:00 Changed-By: Mike Salvatore Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/docker.io/18.09.7-0ubuntu1~16.04.4 Sorry

[ubuntu/xenial-updates] containerd 1.2.6-0ubuntu1~16.04.3 (Accepted)

containerd (1.2.6-0ubuntu1~16.04.3) xenial-security; urgency=medium * No change rebuild for the -security pocket Date: 2019-07-03 14:46:13.812076+00:00 Changed-By: Mike Salvatore Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/containerd/1.2.6-0ubuntu1~16.04.3 Sorry

[ubuntu/xenial-updates] libvirt 1.3.1-1ubuntu10.27 (Accepted)

Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/libvirt/1.3.1-1ubuntu10.27 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-updates] irssi 0.8.19-1ubuntu1.9 (Accepted)

. - CVE-2019-13045 Date: 2019-07-02 13:31:13.857487+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/irssi/0.8.19-1ubuntu1.9 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes

[ubuntu/xenial-updates] bzip2 1.0.6-8ubuntu0.2 (Accepted)

-By: leo.barb...@canonical.com (Leonidas S. Barbosa) Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/bzip2/1.0.6-8ubuntu0.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com

[ubuntu/xenial-updates] python-django 1.8.7-1ubuntu5.9 (Accepted)

, docs/ref/settings.txt and added tests to tests/settings_test/tests.py. - CVE-2019-12781 Date: 2019-06-24 17:17:19.334990+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/python-django/1.8.7-1ubuntu5.9

[ubuntu/xenial-updates] thunderbird 1:60.7.2+build2-0ubuntu0.16.04.1 (Accepted)

thunderbird (1:60.7.2+build2-0ubuntu0.16.04.1) xenial; urgency=medium * New upstream stable release (60.7.2build2) Date: 2019-06-25 11:43:13.222429+00:00 Changed-By: Olivier Tilloy Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/thunderbird/1:60.7.2+build2

[ubuntu/xenial-updates] znc 1.6.3-1ubuntu0.2 (Accepted)

code execution and privilege escalation. - CVE-2019-12816 Date: 2019-06-27 18:27:13.411464+00:00 Changed-By: Paulo Flabiano Smorigo Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/znc/1.6.3-1ubuntu0.2 Sorry, changesfile not available.-- Xenial-changes mailing list

[ubuntu/xenial-updates] poppler 0.41.0-0ubuntu1.14 (Accepted)

UPDATE: buffer over-read in JPXStream::init - debian/patches/CVE-2019-12293.patch: fail gracefully if not all components have the same WxH in poppler/JPEG2000Stream.cc. - CVE-2019-12293 Date: 2019-06-26 17:55:51.598133+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot

[ubuntu/xenial-updates] expat 2.1.0-7ubuntu0.16.04.4 (Accepted)

17:00:18.886819+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/expat/2.1.0-7ubuntu0.16.04.4 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings

[ubuntu/xenial-updates] bzip2 1.0.6-8ubuntu0.1 (Accepted)

- debian/patches/CVE-2019-12900.patch: make sure nSelectors is not out of range in decompress.c. - CVE-2019-12900 Date: 2019-06-25 19:47:13.980793+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source

[ubuntu/xenial-updates] usb-creator 0.3.2ubuntu16.04.1 (Accepted)

usb-creator (0.3.2ubuntu16.04.1) xenial-security; urgency=medium * Unmount device during image operation so a single policykit prompt can be displayed to the user. (LP: #1832337) Date: 2019-06-19 12:49:19.644472+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https

[ubuntu/xenial-updates] policykit-desktop-privileges 0.20ubuntu16.04.1 (Accepted)

policykit-desktop-privileges (0.20ubuntu16.04.1) xenial-security; urgency=medium * Don't allow usb-creator to overwrite devices without authentication. (LP: #1832337) Date: 2019-06-19 12:49:18.107352+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https

[ubuntu/xenial-updates] neutron 2:8.4.0-0ubuntu7.4 (Accepted)

, neutron/tests/unit/agent/linux/test_iptables_firewall.py. - CVE-2019-9735 Date: 2019-05-31 20:08:13.122963+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/neutron/2:8.4.0-0ubuntu7.4 Sorry, changesfile not available.-- Xenial-changes

[ubuntu/xenial-updates] ceph 10.2.11-0ubuntu0.16.04.2 (Accepted)

-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/ceph/10.2.11-0ubuntu0.16.04.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-updates] imagemagick 8:6.8.9.9-7ubuntu5.14 (Accepted)

-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/imagemagick/8:6.8.9.9-7ubuntu5.14 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman

[ubuntu/xenial-updates] firefox 67.0.4+build1-0ubuntu0.16.04.1 (Accepted)

firefox (67.0.4+build1-0ubuntu0.16.04.1) xenial; urgency=medium * New upstream stable release (67.0.4build1) Date: 2019-06-20 05:16:23.560898+00:00 Changed-By: Olivier Tilloy Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/firefox/67.0.4+build1-0ubuntu0.16.04.1 Sorry

[ubuntu/xenial-updates] web2py 2.12.3-1ubuntu0.1 (Accepted)

due to removing global settings from request - debian/patches/CVE-2016-3952-5.patch: fixing typo on previous patch - CVE-2016-3952 Date: 2019-06-21 01:49:13.122760+00:00 Changed-By: Maria Emilia torino Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/web2py/2.12.3

[ubuntu/xenial-updates] intel-microcode 3.20190618.0ubuntu0.16.04.1 (Accepted)

-By: Steve Beattie Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/intel-microcode/3.20190618.0ubuntu0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman

[ubuntu/xenial-updates] mosquitto 1.4.8-1ubuntu0.16.04.7 (Accepted)

Date: 2019-06-19 19:08:13.166199+00:00 Changed-By: Eduardo dos Santos Barretto Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/mosquitto/1.4.8-1ubuntu0.16.04.7 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings

[ubuntu/xenial-updates] thunderbird 1:60.7.1+build1-0ubuntu0.16.04.1 (Accepted)

thunderbird (1:60.7.1+build1-0ubuntu0.16.04.1) xenial; urgency=medium * New upstream stable release (60.7.1build1) Date: 2019-06-13 10:27:14.345780+00:00 Changed-By: Olivier Tilloy Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/thunderbird/1:60.7.1+build1

[ubuntu/xenial-updates] evince 3.18.2-1ubuntu4.5 (Accepted)

: allow /bin/env ixr Date: 2019-06-18 21:31:18.863440+00:00 Changed-By: Jamie Strandboge Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/evince/3.18.2-1ubuntu4.5 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings

[ubuntu/xenial-updates] agg 2.5+dfsg1-9+deb8u1build0.16.04.1 (Accepted)

agg (2.5+dfsg1-9+deb8u1build0.16.04.1) xenial-security; urgency=medium * fake sync from Debian (LP: #1821407) Date: 2019-06-18 21:55:13.236661+00:00 Changed-By: Steve Beattie Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/agg/2.5+dfsg1-9+deb8u1build0.16.04.1 Sorry

[ubuntu/xenial-updates] gunicorn 19.4.5-1ubuntu1.1 (Accepted)

Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/gunicorn/19.4.5-1ubuntu1.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-updates] sqlite3 3.11.0-1ubuntu1.2 (Accepted)

-9937.patch: fix in ext/fts5/fts5Int.h, ext/fts5/fts5_hash.c, ext/fts5/fts5_index.c, ext/fts5/test/fts5aa.test. - CVE-2019-9937 Date: 2019-06-18 13:40:17.520359+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) Signed-By: Ubuntu Archive Robot https://launchpad.net

[ubuntu/xenial-updates] firefox 67.0.3+build1-0ubuntu0.16.04.1 (Accepted)

firefox (67.0.3+build1-0ubuntu0.16.04.1) xenial; urgency=medium * New upstream stable release (67.0.3build1) Date: 2019-06-18 08:04:19.650808+00:00 Changed-By: Olivier Tilloy Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/firefox/67.0.3+build1-0ubuntu0.16.04.1 Sorry

[ubuntu/xenial-updates] firefox 67.0.2+build2-0ubuntu0.16.04.1 (Accepted)

Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/firefox/67.0.2+build2-0ubuntu0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-updates] flashplugin-nonfree 32.0.0.207ubuntu0.16.04.1 (Accepted)

Coulson Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/flashplugin-nonfree/32.0.0.207ubuntu0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo

[ubuntu/xenial-updates] openjpeg2 2.1.2-1.1+deb9u3build0.16.04.1 (Accepted)

-2018-18088: Null pointer dereference caused by null image components in imagetopnm (closes: #910763). * CVE-2018-5785: Integer overflow in convertbmp.c (closes: #888533). Date: 2019-06-11 23:02:12.866779+00:00 Changed-By: Steve Beattie Signed-By: Ubuntu Archive Robot https://launchpad.net

[ubuntu/xenial-updates] minissdpd 1.2.20130907-3+deb8u2build0.16.04.1 (Accepted)

. (Closes: #929297) Date: 2019-06-11 23:12:12.968684+00:00 Changed-By: Steve Beattie Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/minissdpd/1.2.20130907-3+deb8u2build0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify

[ubuntu/xenial-updates] roundup 1.4.20-1.1+deb8u2build0.16.04.1 (Accepted)

roundup (1.4.20-1.1+deb8u2build0.16.04.1) xenial-security; urgency=medium * fake sync from Debian Date: 2019-06-11 23:17:12.726120+00:00 Changed-By: Steve Beattie Maintainer: Kai Storbeck Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/roundup/1.4.20-1.1

[ubuntu/xenial-updates] vim 2:7.4.1689-3ubuntu1.3 (Accepted)

-2017-5953.patch: check for an invalid length in order to avoid a overflow in src/spell.c. - CVE-2017-5953 Date: 2019-06-11 15:01:13.762061+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/vim/2

[ubuntu/xenial-updates] dbus 1.10.6-1ubuntu3.4 (Accepted)

-script, test/data/auth/cookie-sha1.auth-script. - CVE-2019-12749 Date: 2019-06-10 19:41:12.626700+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/dbus/1.10.6-1ubuntu3.4 Sorry, changesfile not available.-- Xenial-changes mailing

[ubuntu/xenial-updates] sudo 1.8.16-0ubuntu1.7 (Accepted)

sudo (1.8.16-0ubuntu1.7) xenial-security; urgency=medium * debian/patches/terminate-with-commands-signal.patch: re-enable patch that got dropped by mistake in previous upload. (LP: #1832257) Date: 2019-06-10 22:50:13.014260+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive

[ubuntu/xenial-updates] glib2.0 2.48.2-0ubuntu4.2 (Accepted)

:13.218237+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/glib2.0/2.48.2-0ubuntu4.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe

[ubuntu/xenial-updates] libsndfile 1.0.25-10ubuntu0.16.04.2 (Accepted)

, CVE-2017-17457, CVE-2018-13139, CVE-2018-19432, CVE-2018-19661, CVE-2018-19662, CVE-2018-19758, CVE-2019-3832 Date: 2019-06-07 19:22:12.151425+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/libsndfile/1.0.25-10ubuntu0.16.04.2

[ubuntu/xenial-updates] elfutils 0.165-3ubuntu1.2 (Accepted)

Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/elfutils/0.165-3ubuntu1.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-updates] jinja2 2.8-1ubuntu0.1 (Accepted)

:16.418776+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/jinja2/2.8-1ubuntu0.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com

[ubuntu/xenial-updates] firefox 67.0.1+build1-0ubuntu0.16.04.1 (Accepted)

firefox (67.0.1+build1-0ubuntu0.16.04.1) xenial; urgency=medium * New upstream stable release (67.0.1build1) Date: 2019-05-29 21:11:13.009845+00:00 Changed-By: Olivier Tilloy Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/firefox/67.0.1+build1-0ubuntu0.16.04.1 Sorry

[ubuntu/xenial-updates] apparmor 2.10.95-0ubuntu2.11 (Accepted)

denied. (LP: #1830802) - 0001-dnsmasq-allow-libvirt_leaseshelper-m-permission-on-i.patch - 0001-handle_children-automatically-add-m-permissions-on-i.patch Date: 2019-05-28 22:07:37.328480+00:00 Changed-By: Tyler Hicks Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source

[ubuntu/xenial-updates] php7.0 7.0.33-0ubuntu0.16.04.5 (Accepted)

:13.867827+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/php7.0/7.0.33-0ubuntu0.16.04.5 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/xenial-updates] db5.3 5.3.28-11ubuntu0.2 (Accepted)

-By: leo.barb...@canonical.com (Leonidas S. Barbosa) Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/db5.3/5.3.28-11ubuntu0.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com

[ubuntu/xenial-updates] qtbase-opensource-src 5.5.1+dfsg-16ubuntu7.6 (Accepted)

Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/qtbase-opensource-src/5.5.1+dfsg-16ubuntu7.6 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/xenial-updates] doxygen 1.8.11-1ubuntu0.1 (Accepted)

:17.521958+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/doxygen/1.8.11-1ubuntu0.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe

[ubuntu/xenial-updates] libseccomp 2.4.1-0ubuntu0.16.04.2 (Accepted)

Changed-By: Jamie Strandboge Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/libseccomp/2.4.1-0ubuntu0.16.04.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman

[ubuntu/xenial-updates] corosync 2.3.5-3ubuntu2.3 (Accepted)

(Leonidas S. Barbosa) Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/corosync/2.3.5-3ubuntu2.3 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial

[ubuntu/xenial-updates] gnutls28 3.4.10-4ubuntu1.5 (Accepted)

Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/gnutls28/3.4.10-4ubuntu1.5 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-updates] evolution-data-server 3.18.5-1ubuntu1.2 (Accepted)

:14.365200+00:00 Changed-By: Alex Murray Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/evolution-data-server/3.18.5-1ubuntu1.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/xenial-updates] chromium-browser 74.0.3729.169-0ubuntu0.16.04.1 (Accepted)

/patches/widevine-enable-version-string.patch: refreshed Date: 2019-05-22 10:43:20.462753+00:00 Changed-By: Olivier Tilloy Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/chromium-browser/74.0.3729.169-0ubuntu0.16.04.1 Sorry, changesfile not available.-- Xenial-changes

[ubuntu/xenial-updates] thunderbird 1:60.7.0+build1-0ubuntu0.16.04.1 (Accepted)

thunderbird (1:60.7.0+build1-0ubuntu0.16.04.1) xenial; urgency=medium * New upstream stable release (60.7.0build1) Date: 2019-05-20 11:04:08.971510+00:00 Changed-By: Olivier Tilloy Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/thunderbird/1:60.7.0+build1

[ubuntu/xenial-updates] keepalived 1:1.2.24-1ubuntu0.16.04.2 (Accepted)

Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/keepalived/1:1.2.24-1ubuntu0.16.04.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial

[ubuntu/xenial-updates] samba 2:4.3.11+dfsg-0ubuntu0.16.04.21 (Accepted)

+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.21 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/xenial-updates] intel-microcode 3.20190514.0ubuntu0.16.04.2 (Accepted)

at mkinitramfs time. Specifically to support generating installer/golden/bare-metal initrds with all microcodes for any hardware. Date: 2019-05-22 07:35:14.103476+00:00 Changed-By: Steve Beattie Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/intel-microcode

[ubuntu/xenial-updates] curl 7.47.0-1ubuntu2.13 (Accepted)

-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/curl/7.47.0-1ubuntu2.13 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-updates] putty 0.67-3+deb9u1build0.16.04.1 (Accepted)

Beattie Maintainer: Colin Watson Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/putty/0.67-3+deb9u1build0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com

[ubuntu/xenial-updates] cargo 0.33.0-1ubuntu1~16.04.1 (Accepted)

of a libstd bug (https://github.com/rust-lang/rust/issues/55242) - add debian/patches/disable-tool_paths-custom_runner.patch - update debian/patches/series Date: 2019-02-27 08:20:12.938165+00:00 Changed-By: Michael Hudson-Doyle Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu

[ubuntu/xenial-updates] nasm-mozilla 2.13.02-0ubuntu0.16.04.1 (Accepted)

nasm-mozilla (2.13.02-0ubuntu0.16.04.1) xenial; urgency=medium [ Rico Tzschichholz ] * Backport nasm 2.13 to xenial for building Firefox Date: 2019-03-21 17:58:12.242039+00:00 Changed-By: Olivier Tilloy Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/nasm-mozilla

[ubuntu/xenial-updates] rustc 1.32.0+dfsg1+llvm-1ubuntu1~16.04.1 (Accepted)

/control - Adjust the rustc Breaks/Replaces libstd-rust-dev version to fix an upgrade issue - update debian/control - Adjust debian/watch to include +llvm in upstream version. Date: 2019-03-14 08:47:12.174349+00:00 Changed-By: Michael Hudson-Doyle Signed-By: Ubuntu Archive Robot

[ubuntu/xenial-updates] firefox 67.0+build2-0ubuntu0.16.04.1 (Accepted)

+00:00 Changed-By: Olivier Tilloy Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/firefox/67.0+build2-0ubuntu0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/m

[ubuntu/xenial-updates] libraw 0.17.1-1ubuntu0.5 (Accepted)

overflow in LibRaw::raw2image() - debian/patches/CVE-2018-20365.patch: zero filters in dcraw/dcraw.c, internal/dcraw_common.cpp. - CVE-2018-20365 Date: 2019-05-17 18:57:12.824394+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source

[ubuntu/xenial-updates] python-urllib3 1.13.1-2ubuntu0.16.04.3 (Accepted)

target characters in urllib3/util/url.py, test/test_util.py. - debian/patches/CVE-2019-11236-3.patch: don't use embedded python-six in urllib3/util/url.py. - CVE-2019-11236 Date: 2019-05-14 13:14:14.921079+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https

[ubuntu/xenial-updates] qemu 1:2.5+dfsg-5ubuntu10.39 (Accepted)

-from-ch.patch Date: 2019-05-16 13:28:14.319734+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.39 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings

[ubuntu/xenial-updates] wireshark 2.6.8-1~ubuntu16.04.0 (Accepted)

dissector could crash. (CVE-2019-5719) - The 6LoWPAN dissector could crash. (CVE-2019-5716) * Mention GPLv3+ code snippet in tools/pidl/idl.yp (Closes: #918089) Date: 2019-05-15 20:00:35.881633+00:00 Changed-By: Balint Reczey Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu

[ubuntu/xenial-updates] libvirt 1.3.1-1ubuntu10.26 (Accepted)

-14 19:26:51.728875+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/libvirt/1.3.1-1ubuntu10.26 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/xenial-updates] intel-microcode 3.20190514.0ubuntu0.16.04.1 (Accepted)

e matching the current CPU, if MODULES=most is set in the initramfs-tools config Date: 2019-05-13 23:29:31.114158+00:00 Changed-By: Steve Beattie Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/intel-microcode/3.20190514.0ubuntu0.16.04.1 Sorry, changesfile not available.

[ubuntu/xenial-updates] qemu 1:2.5+dfsg-5ubuntu10.38 (Accepted)

-2019-9824 qemu (1:2.5+dfsg-5ubuntu10.38~test.1) xenial-security; urgency=medium * Add support for exposing md-clear functionality to guests - d/u/enable-md-clear.patch Date: 2019-05-09 09:31:28.500762+00:00 Changed-By: Steve Beattie Signed-By: Ubuntu Archive Robot https://launchpad.net

[ubuntu/xenial-updates] flashplugin-nonfree 32.0.0.192ubuntu0.16.04.1 (Accepted)

Coulson Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/flashplugin-nonfree/32.0.0.192ubuntu0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo

[ubuntu/xenial-updates] samba 2:4.3.11+dfsg-0ubuntu0.16.04.20 (Accepted)

-05-08 16:57:13.987272+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.20 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe

[ubuntu/xenial-updates] openjdk-8 8u212-b03-0ubuntu1.16.04.1 (Accepted)

: regenerated. * debian/patches/jdk-8u192-S8202261.patch: RandomAccessFile::setLength will not shrink sparse files. (LP: #1811324) Date: 2019-04-26 01:31:23.425065+00:00 Changed-By: Tiago Stürmer Daitx Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/openjdk-8/8u212-b03

[ubuntu/xenial-updates] vcftools 0.1.14+dfsg-2ubuntu0.1 (Accepted)

checks - debian/patches/CVE-2018-11099_11129-11130-3.patch: Just warning, don't fail, if tokens don't meet expectations - CVE-2018-11099 - CVE-2018-11129 - CVE-2018-11130 Date: 2019-05-13 15:38:18.739539+00:00 Changed-By: Mike Salvatore Signed-By: Ubuntu Archive Robot

[ubuntu/xenial-updates] postgresql-9.5 9.5.17-0ubuntu0.16.04.1 (Accepted)

at: https://www.postgresql.org/docs/9.5/static/release-9-5-17.html Date: 2019-05-10 11:25:13.290987+00:00 Changed-By: Christian Ehrhardt  Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/postgresql-9.5/9.5.17-0ubuntu0.16.04.1 Sorry, changesfile not available.-- Xenial

[ubuntu/xenial-updates] firefox 66.0.5+build1-0ubuntu0.16.04.1 (Accepted)

firefox (66.0.5+build1-0ubuntu0.16.04.1) xenial; urgency=medium * New upstream stable release (66.0.5build1) Date: 2019-05-08 08:37:51.655459+00:00 Changed-By: Olivier Tilloy Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/firefox/66.0.5+build1-0ubuntu0.16.04.1 Sorry

[ubuntu/xenial-updates] cups-filters 1.8.3-2ubuntu3.5 (Accepted)

15:31:12.950265+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/cups-filters/1.8.3-2ubuntu3.5 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/xenial-updates] ghostscript 9.26~dfsg+0-0ubuntu0.16.04.9 (Accepted)

Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/ghostscript/9.26~dfsg+0-0ubuntu0.16.04.9 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo

[ubuntu/xenial-updates] firefox 66.0.4+build3-0ubuntu0.16.04.1 (Accepted)

firefox (66.0.4+build3-0ubuntu0.16.04.1) xenial; urgency=medium * New upstream stable release (66.0.4build3) (LP: #1827727) Date: 2019-05-06 10:11:12.079909+00:00 Changed-By: Olivier Tilloy Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/firefox/66.0.4+build3

[ubuntu/xenial-updates] wpa 2.4-0ubuntu6.5 (Accepted)

handling in src/eap_peer/eap_pwd.c. - CVE-2019-11555 Date: 2019-05-01 14:57:14.842590+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/wpa/2.4-0ubuntu6.5 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes

[ubuntu/xenial-updates] sudo 1.8.16-0ubuntu1.6 (Accepted)

Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/sudo/1.8.16-0ubuntu1.6 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial

[ubuntu/xenial-updates] pinba-engine-mysql 1.1.0-1ubuntu1.12 (Accepted)

pinba-engine-mysql (1.1.0-1ubuntu1.12) xenial-security; urgency=medium * Rebuild against mysql 5.7.26. Date: 2019-04-26 11:48:13.202480+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/pinba-engine-mysql/1.1.0-1ubuntu1.12 Sorry

<    2   3   4   5   6   7   8   9   10   11   >