[ubuntu/xenial-security] golang-1.10 1.10.4-2ubuntu1~16.04.1 (Accepted)
golang-1.10 (1.10.4-2ubuntu1~16.04.1) xenial; urgency=medium * Backport to 16.04. (LP: #1794395) Date: 2018-09-26 21:17:09.653743+00:00 Changed-By: Michael Hudson-Doyle Signed-By: Jamie Strandboge https://launchpad.net/ubuntu/+source/golang-1.10/1.10.4-2ubuntu1~16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes
[ubuntu/xenial-updates] linux-azure_4.15.0-1037.39~16.04.1_amd64.tar.gz - (Accepted)
linux-azure (4.15.0-1037.39~16.04.1) xenial; urgency=medium
* linux-azure: 4.15.0-1037.39~16.04.1 -proposed tracker (LP: #1811431)
[ Ubuntu: 4.15.0-1037.39 ]
* linux-azure: 4.15.0-1037.39 -proposed tracker (LP: #1811423)
* SATA device is not going to DEVSLP (LP: #1781533)
- [Config] set CONFIG_SATA_MOBILE_LPM_POLICY=0
* Bionic update: upstream stable patchset 2019-01-04 (LP: #1810554)
- [config] x86 CRYPTO_SALSA20 deprecated
* linux: 4.15.0-44.47 -proposed tracker (LP: #1811419)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* CPU hard lockup with rigorous writes to NVMe drive (LP: #1810998)
- blk-wbt: pass in enum wbt_flags to get_rq_wait()
- blk-wbt: Avoid lock contention and thundering herd issue in wbt_wait
- blk-wbt: move disable check into get_limit()
- blk-wbt: use wq_has_sleeper() for wq active check
- blk-wbt: fix has-sleeper queueing check
- blk-wbt: abstract out end IO completion handler
- blk-wbt: improve waking of tasks
* To reduce the Realtek USB cardreader power consumption (LP: #1811337)
- mmc: sdhci: Disable 1.8v modes (HS200/HS400/UHS) if controller can't
support
1.8v
- mmc: core: Introduce MMC_CAP_SYNC_RUNTIME_PM
- mmc: rtsx_usb_sdmmc: Don't runtime resume the device while changing led
- mmc: rtsx_usb: Use MMC_CAP2_NO_SDIO
- mmc: rtsx_usb: Enable MMC_CAP_ERASE to allow erase/discard/trim requests
- mmc: rtsx_usb_sdmmc: Re-work runtime PM support
- mmc: rtsx_usb_sdmmc: Re-work card detection/removal support
- memstick: rtsx_usb_ms: Add missing pm_runtime_disable() in probe function
- misc: rtsx_usb: Use USB remote wakeup signaling for card insertion
detection
- memstick: Prevent memstick host from getting runtime suspended during card
detection
- memstick: rtsx_usb_ms: Use ms_dev() helper
- memstick: rtsx_usb_ms: Support runtime power management
* Support non-strict iommu mode on arm64 (LP: #1806488)
- iommu/io-pgtable-arm: Fix race handling in split_blk_unmap()
- iommu/arm-smmu-v3: Implement flush_iotlb_all hook
- iommu/dma: Add support for non-strict mode
- iommu: Add "iommu.strict" command line option
- iommu/io-pgtable-arm: Add support for non-strict mode
- iommu/arm-smmu-v3: Add support for non-strict mode
- iommu/io-pgtable-arm-v7s: Add support for non-strict mode
- iommu/arm-smmu: Support non-strict mode
* ELAN900C:00 04F3:2844 touchscreen doesn't work (LP: #1811335)
- pinctrl: cannonlake: Fix community ordering for H variant
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
* Add Cavium ThunderX2 SoC UNCORE PMU driver (LP: #1811200)
- perf: Export perf_event_update_userpage
- Documentation: perf: Add documentation for ThunderX2 PMU uncore driver
- drivers/perf: Add Cavium ThunderX2 SoC UNCORE PMU driver
- [Config] New config CONFIG_THUNDERX2_PMU=m
* Update hisilicon SoC-specific drivers (LP: #1810457)
- SAUCE: Revert "net: hns3: Updates RX packet info fetch in case of multi
BD"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: separate roce from nic when
resetting"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: Use roce handle when calling
roce
callback function"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: Add calling roce callback
function when link status change"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: optimize the process of
notifying
roce client"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: Add pf reset for hip08 RoCE"
- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform dependency
- ethernet: hisilicon: hns: hns_dsaf_mac: Use generic eth_broadcast_addr
- scsi: hisi_sas: consolidate command check in hisi_sas_get_ata_protocol()
- scsi: hisi_sas: remove some unneeded structure members
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
- net: hns: Fix the process of adding broadcast addresses to tcam
- net: hns3: remove redundant variable 'protocol'
- scsi: hisi_sas: Drop hisi_sas_slot_abort()
- net: hns: Make many functions static
- net: hns: make hns_dsaf_roce_reset non static
- net: hisilicon: hns: Replace mdelay() with msleep()
- net: hns3: fix return value error while hclge_cmd_csq_clean failed
- net: hns: remove redundant variables 'max_frm' and 'tmp_mac_key'
- net: hns: Mark expected switch fall-through
- net: hns3: Mark expected switch fall-through
- net: hns3: Remove tx ring BD len register in hns3_enet
- net: hns: modify variable type in hns_nic_reuse_page
- net: hns: use eth_get_headlen interface instead of hns_nic_get_headlen
- net: hns3: modify variable type in hns3_nic_reuse_page
- net: hns3: Fix for vf vlan delete failed problem
- net: hns3: Fix for multicast failure
- net: hns3: Fix error of checking used vlan id
- net: hns3: Implement shutdown ops in hns3 pci driver
- net: hns3: Fi
[ubuntu/xenial-updates] linux-meta-azure 4.15.0.1037.42 (Accepted)
linux-meta-azure (4.15.0.1037.42) xenial; urgency=medium * Bump ABI 4.15.0-1037 Date: 2019-01-15 17:15:13.203999+00:00 Changed-By: Kleber Sacilotto de Souza Signed-By: Łukasz Zemczak https://launchpad.net/ubuntu/+source/linux-meta-azure/4.15.0.1037.42 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes
[ubuntu/xenial-updates] linux-signed-azure 4.15.0-1037.39~16.04.1 (Accepted)
linux-signed-azure (4.15.0-1037.39~16.04.1) xenial; urgency=medium * Master version: 4.15.0-1037.39~16.04.1 Date: 2019-01-15 17:16:17.647990+00:00 Changed-By: Kleber Sacilotto de Souza Signed-By: Łukasz Zemczak https://launchpad.net/ubuntu/+source/linux-signed-azure/4.15.0-1037.39~16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes
[ubuntu/xenial-updates] linux-azure 4.15.0-1037.39~16.04.1 (Accepted)
linux-azure (4.15.0-1037.39~16.04.1) xenial; urgency=medium
* linux-azure: 4.15.0-1037.39~16.04.1 -proposed tracker (LP: #1811431)
[ Ubuntu: 4.15.0-1037.39 ]
* linux-azure: 4.15.0-1037.39 -proposed tracker (LP: #1811423)
* SATA device is not going to DEVSLP (LP: #1781533)
- [Config] set CONFIG_SATA_MOBILE_LPM_POLICY=0
* Bionic update: upstream stable patchset 2019-01-04 (LP: #1810554)
- [config] x86 CRYPTO_SALSA20 deprecated
* linux: 4.15.0-44.47 -proposed tracker (LP: #1811419)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* CPU hard lockup with rigorous writes to NVMe drive (LP: #1810998)
- blk-wbt: pass in enum wbt_flags to get_rq_wait()
- blk-wbt: Avoid lock contention and thundering herd issue in wbt_wait
- blk-wbt: move disable check into get_limit()
- blk-wbt: use wq_has_sleeper() for wq active check
- blk-wbt: fix has-sleeper queueing check
- blk-wbt: abstract out end IO completion handler
- blk-wbt: improve waking of tasks
* To reduce the Realtek USB cardreader power consumption (LP: #1811337)
- mmc: sdhci: Disable 1.8v modes (HS200/HS400/UHS) if controller can't
support
1.8v
- mmc: core: Introduce MMC_CAP_SYNC_RUNTIME_PM
- mmc: rtsx_usb_sdmmc: Don't runtime resume the device while changing led
- mmc: rtsx_usb: Use MMC_CAP2_NO_SDIO
- mmc: rtsx_usb: Enable MMC_CAP_ERASE to allow erase/discard/trim requests
- mmc: rtsx_usb_sdmmc: Re-work runtime PM support
- mmc: rtsx_usb_sdmmc: Re-work card detection/removal support
- memstick: rtsx_usb_ms: Add missing pm_runtime_disable() in probe function
- misc: rtsx_usb: Use USB remote wakeup signaling for card insertion
detection
- memstick: Prevent memstick host from getting runtime suspended during card
detection
- memstick: rtsx_usb_ms: Use ms_dev() helper
- memstick: rtsx_usb_ms: Support runtime power management
* Support non-strict iommu mode on arm64 (LP: #1806488)
- iommu/io-pgtable-arm: Fix race handling in split_blk_unmap()
- iommu/arm-smmu-v3: Implement flush_iotlb_all hook
- iommu/dma: Add support for non-strict mode
- iommu: Add "iommu.strict" command line option
- iommu/io-pgtable-arm: Add support for non-strict mode
- iommu/arm-smmu-v3: Add support for non-strict mode
- iommu/io-pgtable-arm-v7s: Add support for non-strict mode
- iommu/arm-smmu: Support non-strict mode
* ELAN900C:00 04F3:2844 touchscreen doesn't work (LP: #1811335)
- pinctrl: cannonlake: Fix community ordering for H variant
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
* Add Cavium ThunderX2 SoC UNCORE PMU driver (LP: #1811200)
- perf: Export perf_event_update_userpage
- Documentation: perf: Add documentation for ThunderX2 PMU uncore driver
- drivers/perf: Add Cavium ThunderX2 SoC UNCORE PMU driver
- [Config] New config CONFIG_THUNDERX2_PMU=m
* Update hisilicon SoC-specific drivers (LP: #1810457)
- SAUCE: Revert "net: hns3: Updates RX packet info fetch in case of multi
BD"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: separate roce from nic when
resetting"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: Use roce handle when calling
roce
callback function"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: Add calling roce callback
function when link status change"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: optimize the process of
notifying
roce client"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: Add pf reset for hip08 RoCE"
- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform dependency
- ethernet: hisilicon: hns: hns_dsaf_mac: Use generic eth_broadcast_addr
- scsi: hisi_sas: consolidate command check in hisi_sas_get_ata_protocol()
- scsi: hisi_sas: remove some unneeded structure members
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
- net: hns: Fix the process of adding broadcast addresses to tcam
- net: hns3: remove redundant variable 'protocol'
- scsi: hisi_sas: Drop hisi_sas_slot_abort()
- net: hns: Make many functions static
- net: hns: make hns_dsaf_roce_reset non static
- net: hisilicon: hns: Replace mdelay() with msleep()
- net: hns3: fix return value error while hclge_cmd_csq_clean failed
- net: hns: remove redundant variables 'max_frm' and 'tmp_mac_key'
- net: hns: Mark expected switch fall-through
- net: hns3: Mark expected switch fall-through
- net: hns3: Remove tx ring BD len register in hns3_enet
- net: hns: modify variable type in hns_nic_reuse_page
- net: hns: use eth_get_headlen interface instead of hns_nic_get_headlen
- net: hns3: modify variable type in hns3_nic_reuse_page
- net: hns3: Fix for vf vlan delete failed problem
- net: hns3: Fix for multicast failure
- net: hns3: Fix error of checking used vlan id
- net: hns3: Implement shutdown ops in hns3 pci driver
- net: hns3: Fi
[ubuntu/xenial-security] linux-meta-azure 4.15.0.1037.42 (Accepted)
linux-meta-azure (4.15.0.1037.42) xenial; urgency=medium * Bump ABI 4.15.0-1037 Date: 2019-01-15 17:15:13.203999+00:00 Changed-By: Kleber Sacilotto de Souza Signed-By: Łukasz Zemczak https://launchpad.net/ubuntu/+source/linux-meta-azure/4.15.0.1037.42 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes
[ubuntu/xenial-security] linux-signed-azure 4.15.0-1037.39~16.04.1 (Accepted)
linux-signed-azure (4.15.0-1037.39~16.04.1) xenial; urgency=medium * Master version: 4.15.0-1037.39~16.04.1 Date: 2019-01-15 17:16:17.647990+00:00 Changed-By: Kleber Sacilotto de Souza Signed-By: Łukasz Zemczak https://launchpad.net/ubuntu/+source/linux-signed-azure/4.15.0-1037.39~16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes
[ubuntu/xenial-security] linux-azure 4.15.0-1037.39~16.04.1 (Accepted)
linux-azure (4.15.0-1037.39~16.04.1) xenial; urgency=medium
* linux-azure: 4.15.0-1037.39~16.04.1 -proposed tracker (LP: #1811431)
[ Ubuntu: 4.15.0-1037.39 ]
* linux-azure: 4.15.0-1037.39 -proposed tracker (LP: #1811423)
* SATA device is not going to DEVSLP (LP: #1781533)
- [Config] set CONFIG_SATA_MOBILE_LPM_POLICY=0
* Bionic update: upstream stable patchset 2019-01-04 (LP: #1810554)
- [config] x86 CRYPTO_SALSA20 deprecated
* linux: 4.15.0-44.47 -proposed tracker (LP: #1811419)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* CPU hard lockup with rigorous writes to NVMe drive (LP: #1810998)
- blk-wbt: pass in enum wbt_flags to get_rq_wait()
- blk-wbt: Avoid lock contention and thundering herd issue in wbt_wait
- blk-wbt: move disable check into get_limit()
- blk-wbt: use wq_has_sleeper() for wq active check
- blk-wbt: fix has-sleeper queueing check
- blk-wbt: abstract out end IO completion handler
- blk-wbt: improve waking of tasks
* To reduce the Realtek USB cardreader power consumption (LP: #1811337)
- mmc: sdhci: Disable 1.8v modes (HS200/HS400/UHS) if controller can't
support
1.8v
- mmc: core: Introduce MMC_CAP_SYNC_RUNTIME_PM
- mmc: rtsx_usb_sdmmc: Don't runtime resume the device while changing led
- mmc: rtsx_usb: Use MMC_CAP2_NO_SDIO
- mmc: rtsx_usb: Enable MMC_CAP_ERASE to allow erase/discard/trim requests
- mmc: rtsx_usb_sdmmc: Re-work runtime PM support
- mmc: rtsx_usb_sdmmc: Re-work card detection/removal support
- memstick: rtsx_usb_ms: Add missing pm_runtime_disable() in probe function
- misc: rtsx_usb: Use USB remote wakeup signaling for card insertion
detection
- memstick: Prevent memstick host from getting runtime suspended during card
detection
- memstick: rtsx_usb_ms: Use ms_dev() helper
- memstick: rtsx_usb_ms: Support runtime power management
* Support non-strict iommu mode on arm64 (LP: #1806488)
- iommu/io-pgtable-arm: Fix race handling in split_blk_unmap()
- iommu/arm-smmu-v3: Implement flush_iotlb_all hook
- iommu/dma: Add support for non-strict mode
- iommu: Add "iommu.strict" command line option
- iommu/io-pgtable-arm: Add support for non-strict mode
- iommu/arm-smmu-v3: Add support for non-strict mode
- iommu/io-pgtable-arm-v7s: Add support for non-strict mode
- iommu/arm-smmu: Support non-strict mode
* ELAN900C:00 04F3:2844 touchscreen doesn't work (LP: #1811335)
- pinctrl: cannonlake: Fix community ordering for H variant
- pinctrl: cannonlake: Fix HOSTSW_OWN register offset of H variant
* Add Cavium ThunderX2 SoC UNCORE PMU driver (LP: #1811200)
- perf: Export perf_event_update_userpage
- Documentation: perf: Add documentation for ThunderX2 PMU uncore driver
- drivers/perf: Add Cavium ThunderX2 SoC UNCORE PMU driver
- [Config] New config CONFIG_THUNDERX2_PMU=m
* Update hisilicon SoC-specific drivers (LP: #1810457)
- SAUCE: Revert "net: hns3: Updates RX packet info fetch in case of multi
BD"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: separate roce from nic when
resetting"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: Use roce handle when calling
roce
callback function"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: Add calling roce callback
function when link status change"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: optimize the process of
notifying
roce client"
- Revert "UBUNTU: SAUCE: {topost} net: hns3: Add pf reset for hip08 RoCE"
- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform dependency
- ethernet: hisilicon: hns: hns_dsaf_mac: Use generic eth_broadcast_addr
- scsi: hisi_sas: consolidate command check in hisi_sas_get_ata_protocol()
- scsi: hisi_sas: remove some unneeded structure members
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
- net: hns: Fix the process of adding broadcast addresses to tcam
- net: hns3: remove redundant variable 'protocol'
- scsi: hisi_sas: Drop hisi_sas_slot_abort()
- net: hns: Make many functions static
- net: hns: make hns_dsaf_roce_reset non static
- net: hisilicon: hns: Replace mdelay() with msleep()
- net: hns3: fix return value error while hclge_cmd_csq_clean failed
- net: hns: remove redundant variables 'max_frm' and 'tmp_mac_key'
- net: hns: Mark expected switch fall-through
- net: hns3: Mark expected switch fall-through
- net: hns3: Remove tx ring BD len register in hns3_enet
- net: hns: modify variable type in hns_nic_reuse_page
- net: hns: use eth_get_headlen interface instead of hns_nic_get_headlen
- net: hns3: modify variable type in hns3_nic_reuse_page
- net: hns3: Fix for vf vlan delete failed problem
- net: hns3: Fix for multicast failure
- net: hns3: Fix error of checking used vlan id
- net: hns3: Implement shutdown ops in hns3 pci driver
- net: hns3: Fi
[ubuntu/xenial-updates] curl 7.47.0-1ubuntu2.12 (Accepted)
curl (7.47.0-1ubuntu2.12) xenial-security; urgency=medium * SECURITY UPDATE: NTLM type-2 out-of-bounds buffer read - debian/patches/CVE-2018-16890.patch: fix size check condition for type2 received data in lib/curl_ntlm_msgs.c. - CVE-2018-16890 * SECURITY UPDATE: NTLMv2 type-3 header stack buffer overflow - debian/patches/CVE-2019-3822.patch: ix *_type3_message size check to avoid buffer overflow in lib/curl_ntlm_msgs.c. - CVE-2019-3822 * SECURITY UPDATE: SMTP end-of-response out-of-bounds read - debian/patches/CVE-2019-3823.patch: avoid risk of buffer overflow in strtol in lib/smtp.c. - CVE-2019-3823 Date: 2019-01-29 19:04:40.127955+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/curl/7.47.0-1ubuntu2.12 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes
[ubuntu/xenial-updates] libreoffice 1:5.1.6~rc2-0ubuntu1~xenial6 (Accepted)
libreoffice (1:5.1.6~rc2-0ubuntu1~xenial6) xenial-security; urgency=medium * SECURITY UPDATE: incorrect integer data type in StgSmallStrm class - debian/patches/CVE-2018-10119.patch: use short->sal_Int32 like in StgDataStrm in sot/source/sdstor/stgstrms.cxx. - CVE-2018-10119 * SECURITY UPDATE: heap-based buffer overflow in SwCTBWrapper::Read - debian/patches/CVE-2018-10120.patch: check index before use in sw/source/filter/ww8/ww8toolbar.cxx. - CVE-2018-10120 * SECURITY UPDATE: information disclosure vulnerability via SMB link - debian/patches/CVE-2018-10583.patch: set Referer on link mediadescriptor in sw/source/filter/xml/xmltexti.cxx. - CVE-2018-10583 * SECURITY UPDATE: Directory traversal flaw in script execution - debian/patches/CVE-2018-16858.patch: keep pyuno script processing below base uri in scripting/source/pyprov/pythonscript.py. - CVE-2018-16858 Date: 2019-02-04 19:08:11.946093+00:00 Changed-By: Marc Deslauriers Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/libreoffice/1:5.1.6~rc2-0ubuntu1~xenial6 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes
[ubuntu/xenial-updates] rssh 2.3.4-4+deb8u1build0.16.04.1 (Accepted)
rssh (2.3.4-4+deb8u1build0.16.04.1) xenial-security; urgency=medium * fake sync from Debian Date: 2019-02-05 20:11:12.770657+00:00 Changed-By: Mike Salvatore Maintainer: Russ Allbery Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/rssh/2.3.4-4+deb8u1build0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes
[ubuntu/xenial-security] rssh 2.3.4-4+deb8u1build0.16.04.1 (Accepted)
rssh (2.3.4-4+deb8u1build0.16.04.1) xenial-security; urgency=medium * fake sync from Debian Date: 2019-02-05 20:11:12.770657+00:00 Changed-By: Mike Salvatore Maintainer: Russ Allbery https://launchpad.net/ubuntu/+source/rssh/2.3.4-4+deb8u1build0.16.04.1 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes
[ubuntu/xenial-security] libreoffice 1:5.1.6~rc2-0ubuntu1~xenial6 (Accepted)
libreoffice (1:5.1.6~rc2-0ubuntu1~xenial6) xenial-security; urgency=medium * SECURITY UPDATE: incorrect integer data type in StgSmallStrm class - debian/patches/CVE-2018-10119.patch: use short->sal_Int32 like in StgDataStrm in sot/source/sdstor/stgstrms.cxx. - CVE-2018-10119 * SECURITY UPDATE: heap-based buffer overflow in SwCTBWrapper::Read - debian/patches/CVE-2018-10120.patch: check index before use in sw/source/filter/ww8/ww8toolbar.cxx. - CVE-2018-10120 * SECURITY UPDATE: information disclosure vulnerability via SMB link - debian/patches/CVE-2018-10583.patch: set Referer on link mediadescriptor in sw/source/filter/xml/xmltexti.cxx. - CVE-2018-10583 * SECURITY UPDATE: Directory traversal flaw in script execution - debian/patches/CVE-2018-16858.patch: keep pyuno script processing below base uri in scripting/source/pyprov/pythonscript.py. - CVE-2018-16858 libreoffice (1:5.1.6~rc2-0ubuntu1~xenial4) xenial; urgency=medium * debian/libreoffice-mysql-connector.triggers.in, debian/libreoffice-wiki-publisher.triggers.in: - removed, file path triggers do not need to be activated explicitly * debian/libreoffice-common.triggers.in: switch to -noawait trigger (LP: #1780996) Date: 2019-02-04 19:08:11.946093+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/libreoffice/1:5.1.6~rc2-0ubuntu1~xenial6 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes
[ubuntu/xenial-security] curl 7.47.0-1ubuntu2.12 (Accepted)
curl (7.47.0-1ubuntu2.12) xenial-security; urgency=medium * SECURITY UPDATE: NTLM type-2 out-of-bounds buffer read - debian/patches/CVE-2018-16890.patch: fix size check condition for type2 received data in lib/curl_ntlm_msgs.c. - CVE-2018-16890 * SECURITY UPDATE: NTLMv2 type-3 header stack buffer overflow - debian/patches/CVE-2019-3822.patch: ix *_type3_message size check to avoid buffer overflow in lib/curl_ntlm_msgs.c. - CVE-2019-3822 * SECURITY UPDATE: SMTP end-of-response out-of-bounds read - debian/patches/CVE-2019-3823.patch: avoid risk of buffer overflow in strtol in lib/smtp.c. - CVE-2019-3823 Date: 2019-01-29 19:04:40.127955+00:00 Changed-By: Marc Deslauriers https://launchpad.net/ubuntu/+source/curl/7.47.0-1ubuntu2.12 Sorry, changesfile not available.-- Xenial-changes mailing list Xenial-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/xenial-changes
