[ubuntu/partner/xenial-proposed] google-cloud-sdk 154.0.0-0ubuntu1~16.04.0 (Accepted)

google-cloud-sdk (154.0.0-0ubuntu1~16.04.0) xenial; urgency=medium * Backport to xenial. * New upstream release Date: Fri, 05 May 2017 12:36:15 +0200 Changed-By: Łukasz 'sil2100' Zemczak Maintainer: Canonical CPC Team

[ubuntu/xenial-updates] flashplugin-nonfree 25.0.0.171ubuntu0.16.04.1 (Accepted)

flashplugin-nonfree (25.0.0.171ubuntu0.16.04.1) xenial-security; urgency=medium * New upstream release 25.0.0.171 - debian/flashplugin-installer.{config,postinst}, debian/post-download-hook: Updated version and sha256sum Date: 2017-05-09 15:49:20.852615+00:00 Changed-By: Chris

[ubuntu/xenial-security] flashplugin-nonfree 25.0.0.171ubuntu0.16.04.1 (Accepted)

flashplugin-nonfree (25.0.0.171ubuntu0.16.04.1) xenial-security; urgency=medium * New upstream release 25.0.0.171 - debian/flashplugin-installer.{config,postinst}, debian/post-download-hook: Updated version and sha256sum Date: 2017-05-09 15:49:20.852615+00:00 Changed-By: Chris

[ubuntu/partner/xenial] adobe-flashplugin 1:20170509.1-0ubuntu0.16.04.1 (Accepted)

adobe-flashplugin (1:20170509.1-0ubuntu0.16.04.1) xenial; urgency=medium * New upstream releases (25.0.0.171) adobe-flashplugin (1:20170411.1-0ubuntu1) zesty; urgency=medium * New upstream releases (25.0.0.148) Date: 2017-05-09 17:19:18.390795+00:00 Changed-By: Chris Coulson

[ubuntu/partner/xenial-proposed] adobe-flashplugin 1:20170509.1-0ubuntu0.16.04.1 (Accepted)

adobe-flashplugin (1:20170509.1-0ubuntu0.16.04.1) xenial; urgency=medium * New upstream releases (25.0.0.171) Date: Tue, 09 May 2017 15:41:23 +0100 Changed-By: Chris Coulson Maintainer: DL-Flash Player Ubuntu

[ubuntu/xenial-updates] freetype 2.6.1-0.1ubuntu2.3 (Accepted)

freetype (2.6.1-0.1ubuntu2.3) xenial-security; urgency=medium * SECURITY UPDATE: out-of-bounds write in t1_decoder_parse_charstrings - debian/patches-freetype/CVE-2017-8105.patch: add a check to src/psaux/t1decode.c. - CVE-2017-8105 * SECURITY UPDATE: out-of-bounds write in

[ubuntu/xenial-updates] rtmpdump 2.4+20151223.gitfa8646d-1ubuntu0.1 (Accepted)

rtmpdump (2.4+20151223.gitfa8646d-1ubuntu0.1) xenial-security; urgency=medium * SECURITY UPDATE: denial of service in AMF3ReadString function - debian/patches/CVE-2015-8270.patch: init str on unsupported references in librtmp/amf.c. - CVE-2015-8270 * SECURITY UPDATE: arbitrary

[ubuntu/xenial-proposed] webkit2gtk 2.16.1-0ubuntu0.16.04.2 (Accepted)

webkit2gtk (2.16.1-0ubuntu0.16.04.2) xenial; urgency=medium * Add fix-google-login.patch: - Backport from 2.16.2 to fix Google login in Epiphany, GNOME Online Accounts, etc. (LP: #1687019) * Add fix-new-youtube.patch: - Backport from 2.16.2 to fix the new (May 2017 opt-in)

[ubuntu/xenial-security] rtmpdump 2.4+20151223.gitfa8646d-1ubuntu0.1 (Accepted)

rtmpdump (2.4+20151223.gitfa8646d-1ubuntu0.1) xenial-security; urgency=medium * SECURITY UPDATE: denial of service in AMF3ReadString function - debian/patches/CVE-2015-8270.patch: init str on unsupported references in librtmp/amf.c. - CVE-2015-8270 * SECURITY UPDATE: arbitrary

[ubuntu/xenial-security] freetype 2.6.1-0.1ubuntu2.3 (Accepted)

freetype (2.6.1-0.1ubuntu2.3) xenial-security; urgency=medium * SECURITY UPDATE: out-of-bounds write in t1_decoder_parse_charstrings - debian/patches-freetype/CVE-2017-8105.patch: add a check to src/psaux/t1decode.c. - CVE-2017-8105 * SECURITY UPDATE: out-of-bounds write in

[ubuntu/xenial-updates] apache2 2.4.18-2ubuntu3.2 (Accepted)

apache2 (2.4.18-2ubuntu3.2) xenial-security; urgency=medium * SECURITY UPDATE: mod_sessioncrypto padding oracle attack issue - debian/patches/CVE-2016-0736.patch: authenticate the session data/cookie with a MAC in modules/session/mod_session_crypto.c. - CVE-2016-0736 * SECURITY

[ubuntu/xenial-security] apache2 2.4.18-2ubuntu3.2 (Accepted)

apache2 (2.4.18-2ubuntu3.2) xenial-security; urgency=medium * SECURITY UPDATE: mod_sessioncrypto padding oracle attack issue - debian/patches/CVE-2016-0736.patch: authenticate the session data/cookie with a MAC in modules/session/mod_session_crypto.c. - CVE-2016-0736 * SECURITY

[ubuntu/xenial-proposed] ceph 10.2.7-0ubuntu0.16.04.1 (Accepted)

ceph (10.2.7-0ubuntu0.16.04.1) xenial; urgency=medium [ Billy Olsen ] * Start ceph-all after static-network-up (LP: #1636322): - d/p/start-ceph-all-after-network.patch: add dependency on the static-network-up event before starting ceph-all. [ James Page ] * New upstream point