[ubuntu/xenial-security] libssh2 1.5.0-2ubuntu0.1 (Accepted)

: 2017-02-16 04:07:17.854959+00:00 Changed-By: Brian Morton <rokclim...@gmail.com> Signed-By: Seth Arnold <seth.arn...@canonical.com> https://launchpad.net/ubuntu/+source/libssh2/1.5.0-2ubuntu0.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubunt

[ubuntu/xenial-security] cacti 0.8.8f+ds1-4ubuntu4.16.04.2 (Accepted)

vulnerability in graph_view.php Date: 2017-02-14 05:36:22.286589+00:00 Changed-By: Paul Gevers <elb...@debian.org> Signed-By: Seth Arnold <seth.arn...@canonical.com> https://launchpad.net/ubuntu/+source/cacti/0.8.8f+ds1-4ubuntu4.16.04.2 Sorry, changesfile not available.-- Xenial-changes

[ubuntu/xenial-security] ffmpeg 7:2.8.11-0ubuntu0.16.04.1 (Accepted)

Changed-By: Andreas Cadhalpun <andreas.cadhal...@gmail.com> Signed-By: Seth Arnold <seth.arn...@canonical.com> https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.11-0ubuntu0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Mod

[ubuntu/xenial-security] kde-cli-tools 4:5.5.5-0ubuntu1.1 (Accepted)

:00 Changed-By: Simon Quigley <tsimo...@ubuntu.com> Signed-By: Seth Arnold <seth.arn...@canonical.com> https://launchpad.net/ubuntu/+source/kde-cli-tools/4:5.5.5-0ubuntu1.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or

[ubuntu/xenial-security] ffmpeg 7:2.8.10-0ubuntu0.16.04.1 (Accepted)

com> Signed-By: Seth Arnold <seth.arn...@canonical.com> https://launchpad.net/ubuntu/+source/ffmpeg/7:2.8.10-0ubuntu0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/lis

[ubuntu/xenial-security] mbedtls 2.2.1-2ubuntu0.1 (Accepted)

. - CVE-2017-2784 Date: 2017-03-23 07:04:17.124872+00:00 Changed-By: James Cowgill <jcowg...@debian.org> Signed-By: Seth Arnold <seth.arn...@canonical.com> https://launchpad.net/ubuntu/+source/mbedtls/2.2.1-2ubuntu0.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xe

[ubuntu/xenial-security] bind9 1:9.10.3.dfsg.P4-8ubuntu1.7 (Accepted)

13:17:21.788120+00:00 Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com> Signed-By: Seth Arnold <seth.arn...@canonical.com> https://launchpad.net/ubuntu/+source/bind9/1:9.10.3.dfsg.P4-8ubuntu1.7 Sorry, changesfile not available.-- Xenial-changes mailing list Xe

[ubuntu/xenial-security] weechat 1.4-2ubuntu0.1 (Accepted)

in src/plugins/irc/irc-ctcp.c. Patch from 1.7.1 via Debian. - CVE-2017-8073 Date: 2017-04-27 02:20:53.364188+00:00 Changed-By: Jeremy Bicha <jer...@bicha.net> Signed-By: Seth Arnold <seth.arn...@canonical.com> https://launchpad.net/ubuntu/+source/weechat/1.4-2ubuntu0.1 Sorry,

[ubuntu/xenial-security] juju-core 2.0.2-0ubuntu0.16.04.2 (Accepted)

processes. - CVE-2017-9232 Date: 2017-05-26 05:10:13.215074+00:00 Changed-By: Seth Arnold <seth.arn...@canonical.com> https://launchpad.net/ubuntu/+source/juju-core/2.0.2-0ubuntu0.16.04.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com

[ubuntu/xenial-security] shadow 1:4.2-3.1ubuntu5.3 (Accepted)

to 0 if the child process is still running. Thanks to Tobias Stoeckmann for the fix and Radu Duta for the report. Date: 2017-05-16 23:32:20.287593+00:00 Changed-By: Seth Arnold <seth.arn...@canonical.com> https://launchpad.net/ubuntu/+source/shadow/1:4.2-3.1ubuntu5.3 Sorry, chang

[ubuntu/xenial-security] mosquitto 1.4.8-1ubuntu0.16.04.1 (Accepted)

with a '+', '#' or '/' in their username/client id. - CVE-2017-7650 Date: 2017-05-31 02:50:21.666945+00:00 Changed-By: Roger Light <ro...@atchoo.org> Signed-By: Seth Arnold <seth.arn...@canonical.com> https://launchpad.net/ubuntu/+source/mosquitto/1.4.8-1ubuntu0.16.04.1 Sorry,

[ubuntu/xenial-security] juju-core-1 1.25.6-0ubuntu1.16.04.2 (Accepted)

processes. - CVE-2017-9232 Date: 2017-05-27 00:35:20.980038+00:00 Changed-By: Seth Arnold <seth.arn...@canonical.com> https://launchpad.net/ubuntu/+source/juju-core-1/1.25.6-0ubuntu1.16.04.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com

[ubuntu/xenial-security] shadow 1:4.2-3.1ubuntu5.2 (Accepted)

accidentally parse negative numbers as large positive numbers. - debian/patches/CVE-2016-6252.patch: parse directly into unsigned long - CVE-2016-6252 Date: 2017-05-04 08:17:37.119933+00:00 Changed-By: Seth Arnold <seth.arn...@canonical.com> https://launchpad.net/ubuntu/+source/shadow

[ubuntu/xenial-security] wireshark 2.2.6+g32dac6a-2ubuntu0.16.04 (Accepted)

wireshark (2.2.6+g32dac6a-2ubuntu0.16.04) xenial; urgency=medium * Security Update to Address Multiple CVEs (LP: #1397091) Date: 2017-05-29 18:28:14.641078+00:00 Changed-By: Balint Reczey <balint.rec...@canonical.com> Signed-By: Seth Arnold <seth.arn...@canonical.com> https://l

[ubuntu/xenial-security] kodi 15.2+dfsg1-3ubuntu1.1 (Accepted)

rec...@canonical.com> Signed-By: Seth Arnold <seth.arn...@canonical.com> https://launchpad.net/ubuntu/+source/kodi/15.2+dfsg1-3ubuntu1.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu

[ubuntu/xenial-security] jython 2.5.3-9ubuntu0.1 (Accepted)

to Lubomir Rintel for the patches! [ Markus Koschany ] * SECURITY UPDATE: Unsafe deserialization may lead to arbitrary code execution - CVE-2016-4000 - CVE-2016-4000.patch Date: 2017-09-21 03:10:23.569316+00:00 Changed-By: Simon Quigley <tsimo...@ubuntu.com> Signed-By: Seth Arnold <

[ubuntu/xenial-security] firewalld 0.4.0-1ubuntu0.1 (Accepted)

0.4.3.3 commit - CVE-2016-5410 Date: 2017-11-03 01:29:17.223902+00:00 Changed-By: Lucas Kocia <lucas.ko...@gmail.com> Signed-By: Seth Arnold <seth.arn...@canonical.com> https://launchpad.net/ubuntu/+source/firewalld/0.4.0-1ubuntu0.1 Sorry, changesfile not available.-- Xenial-cha

[ubuntu/xenial-security] python-oslo.middleware 3.8.0-2ubuntu1 (Accepted)

: 2018-05-11 03:13:12.454943+00:00 Changed-By: Corey Bryant Signed-By: Seth Arnold https://launchpad.net/ubuntu/+source/python-oslo.middleware/3.8.0-2ubuntu1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/xenial-security] libxstream-java 1.4.8-1ubuntu0.1 (Accepted)

libxstream-java (1.4.8-1ubuntu0.1) xenial-security; urgency=medium * SECURITY UPDATE: handle void type class (LP: #1780844) - d/p/CVE-2017-7957.patch: Prevent deserialization of void. - CVE-2017-7957 Date: 2018-07-12 00:02:31.621440+00:00 Changed-By: Dan Streetman Signed-By: Seth

[ubuntu/xenial-security] tor 0.2.9.14-1ubuntu1~16.04.2 (Accepted)

tor (0.2.9.14-1ubuntu1~16.04.2) xenial-security; urgency=medium * No-change rebuild for the security pocket. Date: 2018-02-28 23:09:41.014832+00:00 Changed-By: Seth Arnold <seth.arn...@canonical.com> https://launchpad.net/ubuntu/+source/tor/0.2.9.14-1ubuntu1~16.04.2 Sorry, chang

[ubuntu/xenial-security] beep 1.3-4+deb9u1~build0.16.04.1 (Accepted)

beep (1.3-4+deb9u1~build0.16.04.1) xenial-security; urgency=medium * fake sync from Debian Date: 2018-04-03 23:02:16.577341+00:00 Changed-By: Seth Arnold <seth.arn...@canonical.com> Maintainer: Rhonda D'Vine <rho...@debian.at> https://launchpad.net/ubuntu/+source/beep/