[ubuntu/xenial-security] clamav 0.102.2+dfsg-0ubuntu0.16.04.1 (Accepted)

. clamav (0.102.1+dfsg-0ubuntu0.16.04.3) xenial; urgency=medium * d/clamav-daemon.config.in: Correct error from ScanOnAccess option removal so that setting LogFile options via DebConf works again (Closes: #950296) (LP: #1860217) Date: 2020-02-11 14:45:30.008772+00:00 Changed-By: Marc

[ubuntu/xenial-security] qemu 1:2.5+dfsg-5ubuntu10.43 (Accepted)

snprintf() usages in slirp/tcp_subr.c. - CVE-2020-8608 Date: 2020-02-14 15:15:24.189182+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.43 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify

[ubuntu/xenial-security] ppp 2.4.7-1+2ubuntu1.16.04.2 (Accepted)

ppp (2.4.7-1+2ubuntu1.16.04.2) xenial-security; urgency=medium * SECURITY UPDATE: rhostname buffer overflow - debian/patches/CVE-2020-8597.patch: fix bounds check in EAP code in pppd/eap.c. - CVE-2020-8597 Date: 2020-02-11 15:38:15.982636+00:00 Changed-By: Marc Deslauriers https

[ubuntu/xenial-security] squid3 3.5.12-1ubuntu7.10 (Accepted)

-2020-8517 Date: 2020-02-19 19:23:15.762451+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/squid3/3.5.12-1ubuntu7.10 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com

[ubuntu/xenial-security] libpam-radius-auth 1.3.17-0ubuntu4.1 (Accepted)

-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/libpam-radius-auth/1.3.17-0ubuntu4.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] python-django 1.8.7-1ubuntu5.12 (Accepted)

/models/aggregates.py, tests/gis_tests/distapp/tests.py, tests/gis_tests/geoapp/tests.py. - CVE-2020-9402 Date: 2020-02-28 19:43:24.330366+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/python-django/1.8.7-1ubuntu5.12 Sorry, changesfile not available.-- Xenial

[ubuntu/xenial-security] sqlite3 3.11.0-1ubuntu1.4 (Accepted)

, test/with3.test. - debian/patches/CVE-2019-20218.patch: do not attempt to unwind the WITH stack in the Parse object following an error in src/select.c, test/altertab3.test. - CVE-2019-20218 Date: 2020-03-03 15:28:31.413149+00:00 Changed-By: Marc Deslauriers https://launchpad.net

[ubuntu/xenial-security] twisted 16.0.0-1ubuntu0.4 (Accepted)

. - CVE-2020-10108 - CVE-2020-10109 Date: 2020-03-19 12:31:15.747520+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/twisted/16.0.0-1ubuntu0.4 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe

[ubuntu/xenial-security] bluez 5.37-0ubuntu5.3 (Accepted)

ed in profiles/input/hog.c. - debian/patches/CVE-2020-0556-4.patch: add LEAutoSecurity setting to input.conf in profiles/input/device.h, profiles/input/hog.c, profiles/input/input.conf, profiles/input/manager.c. - CVE-2020-0556 Date: 2020-03-30 17:10:51.010196+00:00 Changed-By:

[ubuntu/xenial-security] libiberty 20160215-1ubuntu0.3 (Accepted)

-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/libiberty/20160215-1ubuntu0.3 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] git 1:2.7.4-0ubuntu1.8 (Accepted)

embedded newlines in fsck.c, t/t7416-submodule-dash-url.sh. - CVE-2020-5260 Date: 2020-04-10 17:45:15.329126+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/git/1:2.7.4-0ubuntu1.8 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes

[ubuntu/xenial-security] git 1:2.7.4-0ubuntu1.9 (Accepted)

t/t7416-submodule-dash-url.sh. - debian/patches/CVE-2020-11008-9.patch: reject URL with empty host in .gitmodules in fsck.c, t/t7416-submodule-dash-url.sh. - CVE-2020-11008 Date: 2020-04-20 20:09:18.591313+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/g

[ubuntu/xenial-security] openexr 2.2.0-10ubuntu2.2 (Accepted)

-2020-11761 - CVE-2020-11762 - CVE-2020-11763 - CVE-2020-11764 - CVE-2020-11765 Date: 2020-04-24 13:12:17.901019+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/openexr/2.2.0-10ubuntu2.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial

[ubuntu/xenial-security] cups 2.1.3-4ubuntu0.11 (Accepted)

- debian/patches/CVE-2020-3898.patch: properly handle invalid resolution names in cups/ppd.c, ppdc/ppdc-source.cxx. - CVE-2020-3898 Date: 2020-04-24 18:50:15.685994+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/cups/2.1.3-4ubuntu0.11 Sorry, changesfile not

[ubuntu/xenial-security] samba 2:4.3.11+dfsg-0ubuntu0.16.04.26 (Accepted)

request lengths in lib/util/asn1.c, lib/util/asn1.h, libcli/ldap/ldap_message.c. - CVE-2020-10704 Date: 2020-04-23 13:26:15.964379+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.26 Sorry, changesfile not available.-- Xenial-changes

[ubuntu/xenial-security] samba 2:4.3.11+dfsg-0ubuntu0.16.04.27 (Accepted)

.patch: move option to appropriate location in lib/param/loadparm.c. - debian/patches/CVE-2020-10704-7.patch: add new options to param_table in lib/param/param_table.c. Date: 2020-04-29 12:30:15.242466+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/samba/2

[ubuntu/xenial-security] mysql-5.7 5.7.30-0ubuntu0.16.04.1 (Accepted)

longer needed * Use bundled libedit, as new version no longer builds with one in Xenial - debian/control: remove libedit-dev Build-Depends. - debian/rules: remove -DWITH_EDITLINE=system. Date: 2020-04-30 14:20:16.221366+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source

[ubuntu/xenial-security] pinba-engine-mysql 1.1.0-1ubuntu1.16 (Accepted)

pinba-engine-mysql (1.1.0-1ubuntu1.16) xenial-security; urgency=medium * Rebuild against mysql 5.7.30. Date: 2020-04-30 17:15:22.859043+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/pinba-engine-mysql/1.1.0-1ubuntu1.16 Sorry, changesfile not available.-- Xenial

[ubuntu/xenial-security] linux-firmware 1.157.23 (Accepted)

) - linux-firmware: Update firmware file for Intel Bluetooth,9560 Date: 2020-04-28 12:50:17.754313+00:00 Changed-By: Juerg Haefliger Signed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/linux-firmware/1.157.23 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes

[ubuntu/xenial-security] openldap 2.4.42+dfsg-2ubuntu3.8 (Accepted)

) xenial; urgency=medium * d/p/rwm-do-not-free-original-filter.patch: Fix slapd segfault (LP: #1838370) Date: 2020-05-03 16:27:15.249607+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/openldap/2.4.42+dfsg-2ubuntu3.8 Sorry, changesfile not available.-- Xenial-changes mailing

[ubuntu/xenial-security] squid3 3.5.12-1ubuntu7.11 (Accepted)

UPDATE: Digest Authentication nonce replay issue - debian/patches/CVE-2020-11945.patch: fix auth digest refcount integer overflow in src/auth/digest/Config.cc. - CVE-2020-11945 Date: 2020-05-07 19:00:18.231653+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/squid3

[ubuntu/xenial-security] file 1:5.25-2ubuntu1.4 (Accepted)

file (1:5.25-2ubuntu1.4) xenial-security; urgency=medium * SECURITY REGRESSION: truncated interpreter name (LP: #1835596) - debian/patches/CVE-2019-8905_8907.patch: updated to use correct length in src/readelf.c. Date: 2020-05-12 14:05:47.208615+00:00 Changed-By: Marc Deslauriers

[ubuntu/xenial-security] json-c 0.11-4ubuntu2.5 (Accepted)

json-c (0.11-4ubuntu2.5) xenial-security; urgency=medium * Don't call telinit from the postinst when running on upstart systems if upgrading from 0.11-4ubuntu2.1. Date: 2020-05-15 16:39:14.580144+00:00 Changed-By: Chris Coulson Signed-By: Marc Deslauriers https://launchpad.net/u

[ubuntu/xenial-security] bind9 1:9.10.3.dfsg.P4-8ubuntu1.16 (Accepted)

t (LP: #1797926) Date: 2020-05-15 13:32:19.115221+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/bind9/1:9.10.3.dfsg.P4-8ubuntu1.16 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at:

[ubuntu/xenial-security] clamav 0.102.3+dfsg-0ubuntu0.16.04.1 (Accepted)

:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/clamav/0.102.3+dfsg-0ubuntu0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] qemu 1:2.5+dfsg-5ubuntu10.44 (Accepted)

-20382 * SECURITY UPDATE: use-after-free in ip_reass() - debian/patches/ubuntu/CVE-2020-1983.patch: fix buffer handling in slirp/ip_input.c. - CVE-2020-1983 Date: 2020-05-14 18:06:18.493220+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg

[ubuntu/xenial-security] openssl 1.0.2g-1ubuntu4.16 (Accepted)

oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey in crypto/cms/cms_env.c, crypto/cms/cms_lcl.h, crypto/cms/cms_smime.c, crypto/pkcs7/pk7_doit.c. - CVE-2019-1563 Date: 2020-05-27 20:12:44.535188+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/openssl

[ubuntu/xenial-security] ca-certificates 20190110~16.04.1 (Accepted)

) xenial; urgency=medium * Add ca-certificates udeb package (LP: #1807023) Date: 2020-06-01 12:40:14.873545+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/ca-certificates/20190110~16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes

[ubuntu/xenial-security] python-django 1.8.7-1ubuntu5.13 (Accepted)

/widgets.py. - CVE-2020-13596 Date: 2020-05-29 12:36:21.019179+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/python-django/1.8.7-1ubuntu5.13 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe

[ubuntu/xenial-security] freerdp 1.1.0~git20140921.1.440916e+dfsg1-5ubuntu1.4 (Accepted)

-2020-11048, CVE-2020-11049, CVE-2020-11058, CVE-2020-11521, CVE-2020-11522, CVE-2020-11523, CVE-2020-11525, CVE-2020-11526, CVE-2020-13396, CVE-2020-13397, CVE-2020-13398 Date: 2020-06-03 15:50:15.816986+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source

[ubuntu/xenial-security] sqlite3 3.11.0-1ubuntu1.5 (Accepted)

- debian/patches/CVE-2020-13632.patch: fix issue in ext/fts3/fts3_snippet.c, test/fts3matchinfo2.test. - CVE-2020-13632 Date: 2020-06-09 11:23:14.057246+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/sqlite3/3.11.0-1ubuntu1.5 Sorry, changesfile not available.-- Xeni

[ubuntu/xenial-security] nss 2:3.28.4-0ubuntu0.16.04.11 (Accepted)

:15.284810+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/nss/2:3.28.4-0ubuntu0.16.04.11 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] dbus 1.10.6-1ubuntu3.6 (Accepted)

s-Fix-timeout-restarts.patch - d/p/DBusMainLoop-ensure-all-required-timeouts-are-restar.patch Date: 2020-06-11 20:02:13.746113+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/dbus/1.10.6-1ubuntu3.6 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-ch

[ubuntu/xenial-security] nfs-utils 1:1.2.8-9ubuntu12.3 (Accepted)

. - debian/nfs-common.postinst: don't make /var/lib/nfs owned by statd. - CVE-2019-3689 Date: 2020-06-09 12:53:23.067192+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/nfs-utils/1:1.2.8-9ubuntu12.3 Sorry, changesfile not available.-- Xenial-changes mailing list X

[ubuntu/xenial-security] glibc 2.23-0ubuntu11.2 (Accepted)

table branch. (LP: #1663280) Date: 2020-06-05 14:36:40.747823+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/glibc/2.23-0ubuntu11.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at:

[ubuntu/xenial-security] nss 2:3.28.4-0ubuntu0.16.04.12 (Accepted)

, nss/lib/freebl/mpi/mplogic.c. - CVE-2020-12402 Date: 2020-06-22 18:52:13.551579+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/nss/2:3.28.4-0ubuntu0.16.04.12 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings

[ubuntu/xenial-security] openexr 2.2.0-10ubuntu2.3 (Accepted)

, IlmImf/ImfMultiPartOutputFile.cpp. - CVE-2020-15306 Date: 2020-07-01 18:40:17.743010+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/openexr/2.2.0-10ubuntu2.3 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or

[ubuntu/xenial-security] evolution-data-server 3.18.5-1ubuntu1.3 (Accepted)

Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/evolution-data-server/3.18.5-1ubuntu1.3 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] pillow 3.1.2-0ubuntu1.4 (Accepted)

-2020-10994-1.patch: fix for OOB Read in src/libImaging/Jpeg2KDecode.c. - debian/patches/CVE-2020-10994-2.patch: fix typo in src/libImaging/Jpeg2KDecode.c. - CVE-2020-10994 Date: 2020-07-07 18:23:22.552860+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source

[ubuntu/xenial-security] clamav 0.102.4+dfsg-0ubuntu0.16.04.1 (Accepted)

15:15:14.378002+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/clamav/0.102.4+dfsg-0ubuntu0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman

[ubuntu/xenial-security] librsvg 2.40.13-3ubuntu0.1 (Accepted)

20446-*.patch: multiple upstream commits. - debian/librsvg2-2.symbols: added new symbol. - CVE-2019-20446 Date: 2020-07-23 17:48:35.344426+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/librsvg/2.40.13-3ubuntu0.1 Sorry, changesfile not available.-- Xenial-ch

[ubuntu/xenial-security] mysql-5.7 5.7.31-0ubuntu0.16.04.1 (Accepted)

Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/mysql-5.7/5.7.31-0ubuntu0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] pinba-engine-mysql 1.1.0-1ubuntu1.17 (Accepted)

pinba-engine-mysql (1.1.0-1ubuntu1.17) xenial-security; urgency=medium * Rebuild against mysql 5.7.31. Date: 2020-07-28 14:57:13.696229+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/pinba-engine-mysql/1.1.0-1ubuntu1.17 Sorry, changesfile not available.-- Xenial

[ubuntu/xenial-security] librsvg 2.40.13-3ubuntu0.2 (Accepted)

:19.472021+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/librsvg/2.40.13-3ubuntu0.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] squid3 3.5.12-1ubuntu7.12 (Accepted)

the backports this update is based on. Date: 2020-07-30 12:06:13.537825+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/squid3/3.5.12-1ubuntu7.12 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe

[ubuntu/xenial-security] tomcat8 8.0.32-1ubuntu1.13 (Accepted)

pache/catalina/session/LocalStrings.properties. - CVE-2020-9484 Date: 2020-08-03 12:05:24.815255+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/tomcat8/8.0.32-1ubuntu1.13 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com M

[ubuntu/xenial-security] apport 2.20.1-0ubuntu2.24 (Accepted)

e a PID is specified when using --hanging (LP: #1876659) Date: 2020-07-28 15:51:13.497433+00:00 Changed-By: Marc Deslauriers Maintainer: Martin Pitt https://launchpad.net/ubuntu/+source/apport/2.20.1-0ubuntu2.24 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.

[ubuntu/xenial-security] whoopsie 0.2.52.5ubuntu0.5 (Accepted)

:48:31.561277+00:00 Changed-By: Marc Deslauriers Maintainer: Evan https://launchpad.net/ubuntu/+source/whoopsie/0.2.52.5ubuntu0.5 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman

[ubuntu/xenial-security] ppp 2.4.7-1+2ubuntu1.16.04.3 (Accepted)

-pppoe-include-netinet-in.h-before-linux-in.h.patch: fix build on newer kernels. Date: 2020-07-23 14:54:15.406101+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/ppp/2.4.7-1+2ubuntu1.16.04.3 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes

[ubuntu/xenial-security] samba 2:4.3.11+dfsg-0ubuntu0.16.04.29 (Accepted)

:12.882254+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.29 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial

[ubuntu/xenial-security] dovecot 1:2.2.22-1ubuntu2.13 (Accepted)

Date: 2020-08-07 12:27:13.646953+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/dovecot/1:2.2.22-1ubuntu2.13 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com

[ubuntu/xenial-security] software-properties 0.96.20.10 (Accepted)

-By: Marc Deslauriers Maintainer: Michael Vogt https://launchpad.net/ubuntu/+source/software-properties/0.96.20.10 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial

[ubuntu/xenial-security] apache2 2.4.18-2ubuntu3.17 (Accepted)

-long-response-times.patch - d/p/0002-mod_reqtimeout-fix-body-timeout-disabling-for-CONNECT-request.patch - d/p/0003-mod_reqtimeout-Merge-r1853901-r1853906-r1853908-r1853929-r1853935-r.patch Date: 2020-08-13 01:32:12.809912+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu

[ubuntu/xenial-security] curl 7.47.0-1ubuntu2.16 (Accepted)

-8231 Date: 2020-08-15 16:50:21.303006+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/curl/7.47.0-1ubuntu2.16 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman

[ubuntu/xenial-security] qemu 1:2.5+dfsg-5ubuntu10.45 (Accepted)

-2020-15863 Date: 2020-08-13 17:18:46.155835+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.45 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/xenial-security] bind9 1:9.10.3.dfsg.P4-8ubuntu1.17 (Accepted)

-18 14:04:17.625135+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/bind9/1:9.10.3.dfsg.P4-8ubuntu1.17 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo

[ubuntu/xenial-security] ghostscript 9.26~dfsg+0-0ubuntu0.16.04.13 (Accepted)

-2020-16307, CVE-2020-16308, CVE-2020-16309, CVE-2020-16310, CVE-2020-17538 Date: 2020-08-21 18:07:12.612751+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/ghostscript/9.26~dfsg+0-0ubuntu0.16.04.13 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial

[ubuntu/xenial-security] sane-backends 1.0.25+git20150528-1ubuntu2.16.04.3 (Accepted)

, backend/epsonds.h. - CVE-2020-12865 * SECURITY UPDATE: NULL pointer dereference in epson2 - debian/patches/CVE-2020-12867.patch: rewrite network I/O in backend/epson2_net.c, backend/epson2_net.h. - CVE-2020-12867 Date: 2020-08-24 15:47:16.399068+00:00 Changed-By: Marc

[ubuntu/xenial-security] postgresql-9.5 9.5.23-0ubuntu0.16.04.1 (Accepted)

l https://www.postgresql.org/docs/9.5/static/release-9-5-21.html Date: 2020-08-20 18:09:27.336808+00:00 Changed-By: Christian Ehrhardt  Signed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/postgresql-9.5/9.5.23-0ubuntu0.16.04.1 Sorry, changesfile not available.-- Xenial-ch

[ubuntu/xenial-security] squid3 3.5.12-1ubuntu7.13 (Accepted)

Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/squid3/3.5.12-1ubuntu7.13 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] libx11 2:1.6.3-1ubuntu2.2 (Accepted)

:17.895206+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/libx11/2:1.6.3-1ubuntu2.2 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] xorg-server-hwe-16.04 2:1.19.6-1ubuntu4.1~16.04.3 (Accepted)

-14361 * SECURITY UPDATE: Integer Underflow Privilege Escalation - debian/patches/CVE-2020-14362.patch: properly calculate lengths in record/record.c. - CVE-2020-14362 Date: 2020-08-31 15:49:17.200982+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/xorg-server

[ubuntu/xenial-security] xorg-server 2:1.18.4-0ubuntu0.9 (Accepted)

with newer mesa. (LP: #1780664) Date: 2020-08-31 15:52:17.077485+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/xorg-server/2:1.18.4-0ubuntu0.9 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe

[ubuntu/xenial-security] xorg-server 2:1.18.4-0ubuntu0.10 (Accepted)

xorg-server (2:1.18.4-0ubuntu0.10) xenial-security; urgency=medium * SECURITY UPDATE: Out-Of-Bounds access in XkbSetNames function - debian/patches/CVE-2020-14345.patch: correct bounds checking in xkb/xkb.c. - CVE-2020-14345 Date: 2020-09-04 15:31:20.306331+00:00 Changed-By: Marc

[ubuntu/xenial-security] xorg-server-hwe-16.04 2:1.19.6-1ubuntu4.1~16.04.4 (Accepted)

:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/xorg-server-hwe-16.04/2:1.19.6-1ubuntu4.1~16.04.4 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial

[ubuntu/xenial-security] openssl 1.0.2g-1ubuntu4.17 (Accepted)

Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/openssl/1.0.2g-1ubuntu4.17 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes

[ubuntu/xenial-security] samba 2:4.3.11+dfsg-0ubuntu0.16.04.30 (Accepted)

ot; instead of "auto". - debian/patches/CVE-2020-1472-2.patch: switch "server schannel" default to "yes" instead of "auto". - CVE-2020-1472 Date: 2020-09-16 15:12:15.273661+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/samba/2:4.

[ubuntu/xenial-security] qemu 1:2.5+dfsg-5ubuntu10.46 (Accepted)

/usb/core.c. - CVE-2020-14364 Date: 2020-09-15 18:44:22.795519+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-5ubuntu10.46 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at

[ubuntu/xenial-proposed] isc-dhcp 4.3.1-5ubuntu5 (Accepted)

isc-dhcp-common isc-dhcp-dev isc-dhcp-client isc-dhcp-client-dbg isc-dhcp-client-udeb isc-dhcp-relay isc-dhcp-relay-dbg Architecture: source Version: 4.3.1-5ubuntu5 Distribution: xenial Urgency: medium Maintainer: Ubuntu Developers Changed-By: Marc Deslauriers Description: isc-dhcp-client - DHCP

[ubuntu/xenial-proposed] libxml2 2.9.2+zdfsg1-4ubuntu3 (Accepted)

uninitialized access in HTMLparser.c. - CVE-2015-8710 Date: Thu, 14 Jan 2016 08:59:31 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/+source/libxml2/2.9.2+zdfsg1-4ubuntu3 -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 14 Jan 2016

[ubuntu/xenial-proposed] rsync 3.1.1-3ubuntu1 (Accepted)

Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/+source/rsync/3.1.1-3ubuntu1 -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Tue, 19 Jan 2016 14:58:35 -0500 Source: rsync Binary: rsync Architecture: source Version: 3.1.1-3ubuntu1

[ubuntu/xenial-proposed] gnutls28 3.3.20-1ubuntu1 (Accepted)

gnutls-doc guile-gnutls libgnutlsxx28 libgnutls-openssl27 Architecture: source Version: 3.3.20-1ubuntu1 Distribution: xenial Urgency: medium Maintainer: Ubuntu Developers Changed-By: Marc Deslauriers Description: gnutls-bin - GNU TLS library - commandline utilities gnutls-doc - GNU TLS library

[ubuntu/xenial-proposed] libxml2 2.9.3+dfsg1-1 (Accepted)

libxml2 (2.9.3+dfsg1-1) unstable; urgency=medium * New upstream release. Date: 2015-12-14 16:20:37.738576+00:00 Signed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/libxml2/2.9.3+dfsg1-1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes

[ubuntu/xenial-proposed] icu 55.1-7 (Accepted)

icu (55.1-7) unstable; urgency=high * Fix CVE-2015-2632 vulnerability. Date: 2016-01-03 22:15:34.142364+00:00 Changed-By: Laszlo Boszormenyi Signed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/icu/55.1-7 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial

[ubuntu/xenial-proposed] apache2 2.4.18-1ubuntu1 (Accepted)

ed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/+source/apache2/2.4.18-1ubuntu1 -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 21 Jan 2016 15:15:22 -0500 Source: apache2 Binary: apache2 apache2-data apache2-bin apache2-utils apache2-s

[ubuntu/xenial-proposed] php5 5.6.17+dfsg-3ubuntu1 (Accepted)

* Add patch to not reset packagingroot inside PEAR/Command/Install.php (Closes: #805222) Date: Thu, 21 Jan 2016 14:32:01 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/+source/php5/5.6.17+dfsg-3ubuntu1 -BEGIN PGP SIGNED MESSAGE- Hash: SHA5

[ubuntu/xenial-proposed] memcached 1.4.25-1ubuntu1 (Accepted)

release, refresh 02_manpage_additions.patch * Use autoreconf in addition of autotools, to regenerate build system and not stick on older autoreconf versions Date: Fri, 22 Jan 2016 09:43:27 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/+source

[ubuntu/xenial-proposed] curl 7.46.0-1ubuntu1 (Accepted)

-completion.patch to fix zsh completion generation Date: Fri, 22 Jan 2016 09:38:38 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/+source/curl/7.46.0-1ubuntu1 -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 22 Jan 2016 09:38:38

[ubuntu/xenial-proposed] nodejs 4.2.6~dfsg-1ubuntu1 (Accepted)

nodejs (4.2.6~dfsg-1ubuntu1) xenial; urgency=medium * debian/patches/fix_sslv3_test.patch: properly handle how SSLv3 was disabled in openssl. Date: Fri, 22 Jan 2016 11:08:38 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/+source/nodejs/4.2.6

[ubuntu/xenial-proposed] pygments 2.0.1+dfsg-2ubuntu1 (Accepted)

-0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/+source/pygments/2.0.1+dfsg-2ubuntu1 -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 22 Jan 2016 13:12:59 -0500 Source: pygments Binary: python-pygments python3-pygments python-pygment

[ubuntu/xenial-proposed] libwmf 0.2.8.4-10.4ubuntu1 (Accepted)

: #790365) - CVE-2015-4588 (Closes: #787644) - CVE-2015-4695 (Closes: #784205) - CVE-2015-4696 (Closes: #784192) * Fix lintian override Date: Fri, 22 Jan 2016 13:17:33 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/+source/libwmf/0.2.8.4

[ubuntu/xenial-proposed] usb-creator 0.3.2 (Accepted)

usb-creator (0.3.2) xenial; urgency=medium * bin/usb-creator-helper: properly handle utf-8 characters (LP: #1527900) Date: Fri, 22 Jan 2016 14:35:42 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/+source/usb-creator/0.3.2 -BEGIN PGP

[ubuntu/xenial-proposed] conntrack-tools 1:1.4.3-3 (Accepted)

conntrack-tools (1:1.4.3-3) unstable; urgency=medium * [8689754] d/control: fix typo in conntrack-tools-dbg long description * [b403285] conntrackd: add libsystemd integration Date: 2015-11-05 16:10:52.570799+00:00 Changed-By: Alexander Wirt Signed-By: Marc Deslauriers https

[ubuntu/xenial-proposed] memcached 1.4.25-1ubuntu2 (Accepted)

memcached (1.4.25-1ubuntu2) xenial; urgency=medium * debian/patches/disable_slabs_test.patch: disable unreliable test. Date: Tue, 26 Jan 2016 10:47:19 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/+source/memcached/1.4.25-1ubuntu2 -BEGIN

[ubuntu/xenial-proposed] php-crypt-gpg 1.4.0-1ubuntu1 (Accepted)

php-crypt-gpg (1.4.0-1ubuntu1) xenial; urgency=medium * debian/tests/control: added php-pear to Depends. Date: Tue, 26 Jan 2016 12:46:58 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/+source/php-crypt-gpg/1.4.0-1ubuntu1 -BEGIN PGP SIGNED

[ubuntu/xenial-proposed] php-horde-icalendar 2.1.2-1ubuntu1 (Accepted)

php-horde-icalendar (2.1.2-1ubuntu1) xenial; urgency=medium * debian/patches/disable_broken_test.patch: disable new test added to 2.1.2 without any code changes as it is failing on some archs. Date: Tue, 26 Jan 2016 13:11:04 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers

[ubuntu/xenial-proposed] libwmf 0.2.8.4-10.5ubuntu1 (Accepted)

libpng transition. (Closes: #662416) Date: Wed, 27 Jan 2016 15:10:24 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/+source/libwmf/0.2.8.4-10.5ubuntu1 -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 27 Jan 2016 15:10:24 -0500

[ubuntu/xenial-proposed] curl 7.47.0-1ubuntu1 (Accepted)

- Set uyrgency=high accordingly * Remove hard-coded dependency on libgnutls (Closes: #812542) * Drop 08_fix-zsh-completion.patch (merged upstream) * Refresh patches Date: Wed, 27 Jan 2016 14:59:25 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu

[ubuntu/xenial-proposed] bind9 1:9.9.5.dfsg-12.1ubuntu1 (Accepted)

bind9 (1:9.9.5.dfsg-12.1ubuntu1) xenial; urgency=medium * SECURITY UPDATE: denial of service via string formatting operations - lib/dns/rdata/in_1/apl_42.c: use correct length. - CVE-2015-8704 Date: Thu, 28 Jan 2016 08:27:29 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu

[ubuntu/xenial-proposed] composer 1.0.0~alpha11-1ubuntu1 (Accepted)

composer (1.0.0~alpha11-1ubuntu1) xenial; urgency=medium * debian/patches/0007-Fix-tests-new-json-schema.patch: fix tests when using json-schema 1.6. Date: Thu, 28 Jan 2016 09:21:45 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/+source

[ubuntu/xenial-proposed] openssl 1.0.2e-1ubuntu2 (Accepted)

/SSL_CTX_set_tmp_dh_callback.pod, ssl/s3_lib.c, ssl/s3_srvr.c, ssl/ssl.h, prevent small subgroup attacks on DH/DHE in crypto/dh/dh.h, crypto/dh/dh_check.c. - CVE-2016-0701 Date: Mon, 25 Jan 2016 13:39:46 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu

[ubuntu/xenial-proposed] virt-manager 1:1.3.2-0ubuntu1 (Accepted)

-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/+source/virt-manager/1:1.3.2-0ubuntu1 -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 28 Jan 2016 13:11:39 -0500 Source: virt-manager Binary: virt-manager virtinst Architecture: source Version

[ubuntu/xenial-proposed] qemu 1:2.5+dfsg-1ubuntu5 (Accepted)

mmio write function in hw/usb/hcd-ehci.c. - CVE-2016-2198 Date: Mon, 01 Feb 2016 09:39:01 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/+source/qemu/1:2.5+dfsg-1ubuntu5 -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Mon

[ubuntu/xenial-proposed] openssl 1.0.2f-2ubuntu1 (Accepted)

d 64bit elliptic curve code contributed by Google. * debian/patches/CVE-2016-0701.patch: dropped, upstream. openssl (1.0.2f-2) unstable; urgency=high * New upstream version. - Fixes CVE-2016-0701 - Not affected by CVE-2015-3197 because SSLv2 is disabled. Date: Tue, 02 Feb 2016 13:37:21

[ubuntu/xenial-proposed] ca-certificates 20160104 (Accepted)

ca-certificates (20160104) unstable; urgency=medium * debian/rules: Sort certificate list for reproducible builds. Closes: #808711 * mozilla/certdata2pem.py: Drop old CK*_NETSCAPE trust flag checks Date: 2016-01-04 22:11:38.947370+00:00 Changed-By: Michael Shuler Signed-By: Marc

[ubuntu/xenial-proposed] libosinfo 0.2.12-2ubuntu1 (Accepted)

libosinfo (0.2.12-2ubuntu1) xenial; urgency=medium * updated-ubuntu-info.patch: update Ubuntu releases. Date: Tue, 08 Dec 2015 12:44:35 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/+source/libosinfo/0.2.12-2ubuntu1 -BEGIN PGP SIGNED

[ubuntu/xenial-proposed] virt-manager 1:1.2.1-4ubuntu1 (Accepted)

Don't rm /usr/share/virt-manager. This dates back to the original import in 2007. (Closes: #793601) Date: Tue, 08 Dec 2015 13:14:50 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/+source/virt-manager/1:1.2.1-4ubuntu1 -BEGIN PGP SIGNED

[ubuntu/xenial-proposed] libxml2 2.9.2+zdfsg1-4ubuntu2 (Accepted)

* SECURITY UPDATE: buffer overead with HTML parser in push mode - debian/patches/CVE-2015-8242.patch: use pointer in the input in HTMLparser.c. - CVE-2015-8242 Date: Wed, 09 Dec 2015 10:15:37 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu

[ubuntu/xenial-proposed] usb-creator 0.3.1 (Accepted)

usb-creator (0.3.1) xenial; urgency=medium * usbcreator/backends/udisks/backend.py: also properly detect mini.iso. (LP: #1527086) Date: Thu, 17 Dec 2015 11:18:55 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/+source/usb-creator/0.3.1

[ubuntu/xenial-proposed] pygments 2.0.1+dfsg-1.1ubuntu1 (Accepted)

pygments (2.0.1+dfsg-1.1ubuntu1) xenial; urgency=medium * SECURITY UPDATE: shell injection via font path - debian/patches/CVE-2015-8557.patch: use subprocess in pygments/formatters/img.py. - CVE-2015-8557 Date: Fri, 18 Dec 2015 10:25:43 -0500 Changed-By: Marc Deslauriers

  1   2   3   4   5   6   7   8   9   >