[ubuntu/xenial-proposed] linux-meta-kvm 4.4.0.1011.11 (Accepted)

linux-meta-kvm (4.4.0.1011.11) xenial; urgency=medium * Bump ABI 4.4.0-1011 Date: 2017-11-28 19:41:12.761058+00:00 Changed-By: Kamal Mostafa Signed-By: Łukasz Zemczak https://launchpad.net/ubuntu/+source/linux-meta-kvm/4.4.0.1011.11 Sorry,

[ubuntu/xenial-proposed] linux-kvm 4.4.0-1011.16 (Accepted)

linux-kvm (4.4.0-1011.16) xenial; urgency=low * linux-kvm: 4.4.0-1011.16 -proposed tracker (LP: #1734968) * linux-kvm standard configs for kernel test suite (LP: #1729681) - kvm: [config] enable AIO - kvm: [config] enable HUGETLBFS - kvm: [config] enable IA32_EMULATION - kvm:

[ubuntu/xenial-security] curl 7.47.0-1ubuntu2.5 (Accepted)

curl (7.47.0-1ubuntu2.5) xenial-security; urgency=medium * SECURITY UPDATE: NTLM buffer overflow via integer overflow - debian/patches/CVE-2017-8816.patch: avoid integer overflow for malloc size in lib/curl_ntlm_core.c - CVE-2017-8816 * SECURITY UPDATE: FTP wildcard out of

[ubuntu/xenial-updates] curl 7.47.0-1ubuntu2.5 (Accepted)

curl (7.47.0-1ubuntu2.5) xenial-security; urgency=medium * SECURITY UPDATE: NTLM buffer overflow via integer overflow - debian/patches/CVE-2017-8816.patch: avoid integer overflow for malloc size in lib/curl_ntlm_core.c - CVE-2017-8816 * SECURITY UPDATE: FTP wildcard out of

[ubuntu/xenial-proposed] snapd 2.29.4.1 (Accepted)

snapd (2.29.4.1) xenial; urgency=medium * New upstream release, LP: #1726258 - tests: more debug info for classic-ubuntu-core-transition - packaging: fix typo that causes error in the misspell test snapd (2.29.4) xenial; urgency=medium * New upstream release, LP: #1726258 -

[ubuntu/xenial-updates] ipxe 1.0.0+git-20150424.a25a16d-1ubuntu1.2 (Accepted)

ipxe (1.0.0+git-20150424.a25a16d-1ubuntu1.2) xenial-proposed; urgency=medium * debian/patches/handle-dhcp-nack.patch: Handle DHCP NAK and send a re-discover. (LP: #1707999) Date: 2017-11-20 18:27:10.826523+00:00 Changed-By: Andres Rodriguez Signed-By: Brian Murray

[ubuntu/xenial-security] libxfont2 1:2.0.1-3~ubuntu16.04.3 (Accepted)

libxfont2 (1:2.0.1-3~ubuntu16.04.3) xenial-security; urgency=medium * SECURITY UPDATE: non-privileged arbitrary file access - debian/patches/CVE-2017-16611.patch: open files with O_NOFOLLOW in src/fontfile/dirfile.c, src/fontfile/fileio.c. - CVE-2017-16611 Date: 2017-11-28

[ubuntu/xenial-updates] libxfont2 1:2.0.1-3~ubuntu16.04.3 (Accepted)

libxfont2 (1:2.0.1-3~ubuntu16.04.3) xenial-security; urgency=medium * SECURITY UPDATE: non-privileged arbitrary file access - debian/patches/CVE-2017-16611.patch: open files with O_NOFOLLOW in src/fontfile/dirfile.c, src/fontfile/fileio.c. - CVE-2017-16611 Date: 2017-11-28

[ubuntu/xenial-updates] libxcursor 1:1.1.14-1ubuntu0.16.04.1 (Accepted)

libxcursor (1:1.1.14-1ubuntu0.16.04.1) xenial-security; urgency=medium * SECURITY UPDATE: heap overflows when parsing malicious files - debian/patches/CVE-2017-16612.patch: add checks to src/file.c. - CVE-2017-16612 Date: 2017-11-29 13:34:13.792254+00:00 Changed-By: Marc Deslauriers

[ubuntu/xenial-updates] libxfont 1:1.5.1-1ubuntu0.16.04.4 (Accepted)

libxfont (1:1.5.1-1ubuntu0.16.04.4) xenial-security; urgency=medium * SECURITY UPDATE: non-privileged arbitrary file access - debian/patches/CVE-2017-16611.patch: open files with O_NOFOLLOW in src/fontfile/dirfile.c, src/fontfile/fileio.c. - CVE-2017-16611 Date: 2017-11-28

[ubuntu/xenial-updates] dpkg 1.18.4ubuntu1.3 (Accepted)

dpkg (1.18.4ubuntu1.3) xenial; urgency=medium * Use ohshit() instead of internerr() for unhandled dpkg-split exit codes. (i.e. do not abort). Closes: #812679, LP: #1601998 Date: 2017-10-20 23:28:10.847781+00:00 Changed-By: Brian Murray

[ubuntu/xenial-updates] libva 1.7.0-1ubuntu0.1 (Accepted)

libva (1.7.0-1ubuntu0.1) xenial; urgency=medium [ Sebastian Ramacher ] * debian/control: - Add mesa-va-drivers as alternative to Depends of va-driver-all (LP: #1652466). Date: 2017-08-30 12:25:14.717995+00:00 Changed-By: Amr Ibrahim Maintainer: Debian

[ubuntu/xenial-updates] libvirt-python 1.3.1-1ubuntu1.1 (Accepted)

libvirt-python (1.3.1-1ubuntu1.1) xenial; urgency=medium * d/p/lp1731482-fix-crash-in-getAllDomainStats.patch: Fix crash when accessing getAllDomainStats (LP: #1731482). Date: 2017-11-15 15:32:10.215844+00:00 Changed-By: ChristianEhrhardt Signed-By: Brian

[ubuntu/xenial-updates] livecd-rootfs 2.408.24 (Accepted)

livecd-rootfs (2.408.24) xenial; urgency=medium * For the IMAGEFORMAT=none parts to work for ubuntu-image classic builds, we need to make sure IMAGEFORMAT is preserved and not overwritten if defined. Backporting from artful. livecd-rootfs (2.408.23) xenial; urgency=medium [ Gary

[ubuntu/xenial-security] libxcursor 1:1.1.14-1ubuntu0.16.04.1 (Accepted)

libxcursor (1:1.1.14-1ubuntu0.16.04.1) xenial-security; urgency=medium * SECURITY UPDATE: heap overflows when parsing malicious files - debian/patches/CVE-2017-16612.patch: add checks to src/file.c. - CVE-2017-16612 Date: 2017-11-29 13:34:13.792254+00:00 Changed-By: Marc Deslauriers