[ubuntu/trusty-security] php5 5.5.9+dfsg-1ubuntu4.29 (Accepted)

-9022 Date: 2019-04-22 18:24:12.533464+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/php5/5.5.9+dfsg-1ubuntu4.29 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe

[ubuntu/trusty-security] libxslt 1.1.28-2ubuntu0.2 (Accepted)

/transform.c,libxslt/xslt.c. - CVE-2019-11068 Date: 2019-04-15 15:02:12.644314+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libxslt/1.1.28-2ubuntu0.2 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes

[ubuntu/trusty-security] ruby1.9.1 1.9.3.484-2ubuntu1.14 (Accepted)

- debian/patches/fixing_expired_SSL_certificates.patch: updating certs in test/net/imap/cacert.pen, test/net/imap/server.crt, test/net/imap/server.key. Date: 2019-04-10 19:29:13.698521+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source

[ubuntu/trusty-security] ruby2.0 2.0.0.484-1ubuntu2.13 (Accepted)

- debian/patches/fixing_expired_SSL_certificates.patch: updating certs in test/net/imap/cacert.pen, test/net/imap/server.crt, test/net/imap/server.key. Date: 2019-04-10 19:54:14.907198+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source

[ubuntu/trusty-security] wget 1.15-1ubuntu1.14.04.5 (Accepted)

wget (1.15-1ubuntu1.14.04.5) trusty-security; urgency=medium * SECURITY UPDATE: Buffer overflow - debian/patches/CVE-2019-5953-*.patch: fix in src/iri.c. - CVE-2019-5953 Date: 2019-04-08 22:52:12.250966+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https

[ubuntu/trusty-security] advancecomp 1.18-1ubuntu0.2 (Accepted)

advancecomp (1.18-1ubuntu0.2) trusty-security; urgency=medium * SECURITY UPDATE: Integer overflow - debian/patches/CVE-2019-9210.patch: fix in lib/png.c. - CVE-2019-9210 Date: 2019-04-04 12:28:16.124151+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https

[ubuntu/trusty-security] poppler 0.24.5-2ubuntu4.17 (Accepted)

poppler (0.24.5-2ubuntu4.17) trusty-security; urgency=medium * SECURITY UPDATE: Denial of service - debian/patches/CVE-2019-9200.patch: fix in poppler/Stream.cc. - CVE-2019-9200 Date: 2019-02-28 14:35:16.471575+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa

[ubuntu/trusty-security] poppler 0.24.5-2ubuntu4.16 (Accepted)

poppler (0.24.5-2ubuntu4.16) trusty-security; urgency=medium * SECURITY UPDATE: Denial of service - debian/patches/CVE-2019-7310.patch: fix in poppler/XRef.cc. - CVE-2019-7310 Date: 2019-02-08 15:06:12.255919+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https

[ubuntu/trusty-security] libarchive 3.1.2-7ubuntu2.8 (Accepted)

-120.patch: fix in libarchive/archive_read_support_format_iso9660.c. - CVE-2019-120 Date: 2019-02-06 12:47:12.665906+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libarchive/3.1.2-7ubuntu2.8 Sorry, changesfile not available

[ubuntu/trusty-security] avahi 0.6.31-4ubuntu1.3 (Accepted)

...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/avahi/0.6.31-4ubuntu1.3 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/trusty-changes

[ubuntu/trusty-security] poppler 0.24.5-2ubuntu4.15 (Accepted)

/FileSpec.cc. - CVE-2018-20650 Date: 2019-01-21 17:51:13.806091+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.15 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com

[ubuntu/trusty-security] irssi 0.8.15-5ubuntu3.6 (Accepted)

irssi (0.8.15-5ubuntu3.6) trusty-security; urgency=medium * SECURITY UPDATE: Use after free - debian/patches/CVE-2019-5882.patch: fix in src/fe-text/textbuffer-view.c. - CVE-2019-5882 Date: 2019-01-16 12:08:13.166346+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S

[ubuntu/trusty-security] libcaca 0.99.beta18-1ubuntu5.1 (Accepted)

-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libcaca/0.99.beta18-1ubuntu5.1 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo

[ubuntu/trusty-security] libarchive 3.1.2-7ubuntu2.7 (Accepted)

Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libarchive/3.1.2-7ubuntu2.7 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo

[ubuntu/trusty-security] exiv2 0.23-1ubuntu2.2 (Accepted)

:22.200844+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/exiv2/0.23-1ubuntu2.2 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman

[ubuntu/trusty-security] poppler 0.24.5-2ubuntu4.14 (Accepted)

: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.14 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/trusty-changes

[ubuntu/trusty-security] lxml 3.3.3-1ubuntu0.2 (Accepted)

Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/lxml/3.3.3-1ubuntu0.2 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/trusty

[ubuntu/trusty-security] wavpack 4.70.0-1ubuntu0.2 (Accepted)

19:40:21.629175+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/wavpack/4.70.0-1ubuntu0.2 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/trusty-security] poppler 0.24.5-2ubuntu4.13 (Accepted)

2018-19060 Date: 2018-12-03 12:02:23.271273+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.13 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe

[ubuntu/trusty-security] git 1:1.9.1-1ubuntu0.10 (Accepted)

git (1:1.9.1-1ubuntu0.10) trusty-security; urgency=medium * SECURITY UPDATE: Denial of service - debian/patches/CVE-2017-15298.patch: fix in diff.h, revision.c. - CVE-2017-15298 Date: 2018-11-27 13:15:16.211747+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa

[ubuntu/trusty-security] gettext 0.18.3.1-1ubuntu3.1 (Accepted)

-11-08 17:40:12.829856+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/gettext/0.18.3.1-1ubuntu3.1 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/trusty-security] openssh 1:6.6p1-2ubuntu2.11 (Accepted)

fully parsed. - CVE-2018-15473 [ Leonidas S. Barbosa ] * SECURITY UPDATE: Privsep process chrashing via an out-of-sequence - debian/patches/CVE-2016-10708.patch: fix in kex.c, pack.c. - CVE-2016-10708 Date: 2018-11-01 19:11:12.459334+00:00 Changed-By: Ryan Finnie Signed-By

[ubuntu/trusty-security] ruby1.9.1 1.9.3.484-2ubuntu1.13 (Accepted)

...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.13 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/trusty-changes

[ubuntu/trusty-security] ruby2.0 2.0.0.484-1ubuntu2.11 (Accepted)

.patch: fix in pack.c, test/ruby/test_pack.rb. - CVE-2018-16396 Date: 2018-10-30 13:45:52.740932+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/ruby2.0/2.0.0.484-1ubuntu2.11 Sorry, changesfile not available.-- Trusty-changes mailing

[ubuntu/trusty-security] audiofile 0.3.6-2ubuntu0.14.04.3 (Accepted)

-2018-17095.patch: fix in libaudiofile/modules/SimpleModule.cpp. - CVE-2018-17095 Date: 2018-10-24 11:14:12.811534+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/audiofile/0.3.6-2ubuntu0.14.04.3 Sorry, changesfile not available

[ubuntu/trusty-security] moin 1.9.7-1ubuntu2.2 (Accepted)

moin (1.9.7-1ubuntu2.2) trusty-security; urgency=medium * SECURITY UPDATE: XSS in GUI editor - debian/patches/CVE-2017-5934.patch: fix in MoinMoin/action/fckdialog.py. - CVE-2017-5934 Date: 2018-10-15 18:04:17.441497+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa

[ubuntu/trusty-security] requests 2.2.1-1ubuntu0.4 (Accepted)

, update python3.4 for trusty. LP: #1433324. * Build a -whl package (setuptools is needed to build the wheel package). Date: 2018-10-11 12:56:12.756915+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/requests/2.2.1-1ubuntu0.4 Sorry, changesfile not

[ubuntu/trusty-security] texlive-bin 2013.20130729.30972-2ubuntu0.1 (Accepted)

.patch: fix in texk/dvipsk/writet1.c, texk/web2c/luatexdir/font/writet1.w, texk/web2c/pdftexdir/writet1.c. - CVE-2018-17407 Date: 2018-10-09 19:33:32.752121+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/texlive-bin

[ubuntu/trusty-security] six 1.5.2-1ubuntu1.1 (Accepted)

six (1.5.2-1ubuntu1.1) trusty-security; urgency=medium * No change rebuild in -security pocket. Date: 2018-10-10 18:01:02.287441+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/six/1.5.2-1ubuntu1.1 Sorry, changesfile not available

[ubuntu/trusty-security] python-urllib3 1.7.1-1ubuntu4.1 (Accepted)

python-urllib3 (1.7.1-1ubuntu4.1) trusty-security; urgency=medium * No change rebuild in -security pocket. Date: 2018-10-10 19:13:12.854482+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/python-urllib3/1.7.1-1ubuntu4.1 Sorry, changesfile

[ubuntu/trusty-security] wheel 0.24.0-1~ubuntu1.1 (Accepted)

wheel (0.24.0-1~ubuntu1.1) trusty-security; urgency=medium * No change rebuild in -security pocket. Date: 2018-10-10 17:03:15.673466+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/wheel/0.24.0-1~ubuntu1.1 Sorry, changesfile not available

[ubuntu/trusty-security] libxkbcommon 0.4.1-0ubuntu1.1 (Accepted)

: 2018-10-04 19:17:14.628199+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libxkbcommon/0.4.1-0ubuntu1.1 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/trusty-security] liblouis 2.5.3-2ubuntu1.5 (Accepted)

...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/liblouis/2.5.3-2ubuntu1.5 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/trusty-changes

[ubuntu/trusty-security] lcms 1.19.dfsg-1.2ubuntu5.1 (Accepted)

:15.894270+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/lcms/1.19.dfsg-1.2ubuntu5.1 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com

[ubuntu/trusty-security] lcms2 2.5-0ubuntu4.2 (Accepted)

-2018-16435 Date: 2018-09-19 14:51:13.526078+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/lcms2/2.5-0ubuntu4.2 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at

[ubuntu/trusty-security] glib2.0 2.40.2-0ubuntu1.1 (Accepted)

timezone - debian/patches/User_a_real_rather_than_invented_timezone.patch: fix in glib/tests/gdatetime.c. Date: 2018-09-18 08:24:13.454541+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/glib2.0/2.40.2-0ubuntu1.1 Sorry, changesfile not

[ubuntu/trusty-security] curl 7.35.0-1ubuntu2.17 (Accepted)

curl (7.35.0-1ubuntu2.17) trusty-security; urgency=medium * SECURITY UPDATE: Buffer overrun - debian/patches/CVE-2018-14618.patch: fix in lib/curl_ntlm_core.c. - CVE-2018-14618 Date: 2018-09-12 20:01:15.886420+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa

[ubuntu/trusty-security] zsh 5.0.2-3ubuntu6.3 (Accepted)

/A05execution.ztst. - CVE-2018-0502 - CVE-2018-13259 * SECURITY UPDATE: Stack-based buffer overflow - debian/patches/CVE-2018-1100.patch: fix int Src/utils.c. - CVE-2018-1100 Date: 2018-09-10 18:49:13.204645+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https

[ubuntu/trusty-security] transfig 1:3.2.5.e-1ubuntu1.1 (Accepted)

(Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/transfig/1:3.2.5.e-1ubuntu1.1 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/trusty-changes

[ubuntu/trusty-security] libtirpc 0.2.2-5ubuntu2.1 (Accepted)

, src/rpcb_prot.c, src/rpcb_st_xdr.c, src/xdr.c. - CVE-2017-8779 * SECURITY UPDATE: Denial of service - debian/patches/CVE-2018-14622.patch: fix in src/svc_c.c. - CVE-2018-14622 Date: 2018-09-04 16:25:12.899019+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https

[ubuntu/trusty-security] libx11 2:1.6.2-1ubuntu2.1 (Accepted)

, src/GetFPath.c, src/ListExt.c. - CVE-2018-14599 * SECURITY UPDATE: Denial of service - debian/patches/CVE-2018-14600.patch: fix in src/GetFPath. - CVE-2018-14600 Date: 2018-08-30 15:22:12.228305+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https

[ubuntu/trusty-security] poppler 0.24.5-2ubuntu4.12 (Accepted)

poppler (0.24.5-2ubuntu4.12) trusty-security; urgency=medium * SECURITY UPDATE: Out of bounds read - debian/patches/CVE-2018-13988.patch: fix in poppler/Parser.cc. - CVE-2018-13988 Date: 2018-08-28 13:24:13.206193+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https

[ubuntu/trusty-security] libgd2 2.1.0-3ubuntu0.10 (Accepted)

. - CVE-2018-5711 Date: 2018-08-23 18:54:15.590368+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libgd2/2.1.0-3ubuntu0.10 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or

[ubuntu/trusty-security] spice 0.12.4-0nocelt2ubuntu1.7 (Accepted)

...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/spice/0.12.4-0nocelt2ubuntu1.7 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/trusty-changes

[ubuntu/trusty-security] wpa 2.1-0ubuntu1.6 (Accepted)

wpa (2.1-0ubuntu1.6) trusty-security; urgency=medium * SECURITY UPDATE: Expose sensitive information - debian/patches/CVE-2018-14526.patch: fix in src/rsn_supp/wpa.c. - CVE-2018-14526 Date: 2018-08-09 18:48:19.808839+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa

[ubuntu/trusty-security] libxml2 2.9.1+dfsg1-3ubuntu4.13 (Accepted)

Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libxml2/2.9.1+dfsg1-3ubuntu4.13 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo

[ubuntu/trusty-security] libarchive 3.1.2-7ubuntu2.6 (Accepted)

-14503 Date: 2018-08-08 18:30:40.245481+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libarchive/3.1.2-7ubuntu2.6 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at

[ubuntu/trusty-security] lftp 4.4.13-1ubuntu0.1 (Accepted)

lftp (4.4.13-1ubuntu0.1) trusty-security; urgency=medium * SECURITY UPDATE: Incorrectly sanitize remote file names - debian/patches/CVE-2018-10196.patch: fix in src/MirrorJob.cc. - CVE-2018-10196 Date: 2018-08-03 16:55:12.663190+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S

[ubuntu/trusty-security] libxcursor 1:1.1.14-1ubuntu0.14.04.2 (Accepted)

libxcursor (1:1.1.14-1ubuntu0.14.04.2) trusty-security; urgency=medium * SECURITY UPDATE: Denial of service - debian/patches/CVE-2015-9262.patch: fix in src/library.c. - CVE-2015-9262 Date: 2018-08-02 15:10:13.293767+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa

[ubuntu/trusty-security] clamav 0.100.1+dfsg-1ubuntu0.14.04.3 (Accepted)

. - CVE-2018-14682 Date: 2018-08-01 17:13:18.411390+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/clamav/0.100.1+dfsg-1ubuntu0.14.04.3 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify

[ubuntu/trusty-security] mutt 1.5.21-6.4ubuntu2.2 (Accepted)

* SECURITY UPDATE: Unsafe character interactions - debian/patches/ubuntu/mutt-CVE-2018-14362.patch: fix in pop.c. - CVE-2018-14362 Date: 2018-07-19 12:58:12.829595+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/mutt/1.5.21

[ubuntu/trusty-security] libpng 1.2.50-1ubuntu2.14.04.3 (Accepted)

libpng (1.2.50-1ubuntu2.14.04.3) trusty-security; urgency=medium * SECURITY UPDATE: Null pointer dereference - debian/patches/CVE-2016-10087.patch: fix in png.c. - CVE-2016-10087 Date: 2018-07-10 20:13:12.958365+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https

[ubuntu/trusty-security] libarchive-zip-perl 1.30-7ubuntu0.1 (Accepted)

Date: 2018-07-03 16:00:16.868323+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libarchive-zip-perl/1.30-7ubuntu0.1 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at

[ubuntu/trusty-security] libsoup2.4 2.44.2-1ubuntu2.3 (Accepted)

(Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libsoup2.4/2.44.2-1ubuntu2.3 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/trusty-changes

[ubuntu/trusty-security] exiv2 0.23-1ubuntu2.1 (Accepted)

overflow - debian/patches/CVE-2018-12265*.patch - CVE-2018-12265 Date: 2018-06-29 16:10:13.836149+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/exiv2/0.23-1ubuntu2.1 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty

[ubuntu/trusty-security] ruby2.0 2.0.0.484-1ubuntu2.10 (Accepted)

- debian/patches/CVE-2018-8777*.patch: fix in lib/webrick/httpresponse.rb, lib/webrick/httpservlet/filehandler.rb, - CVE-2018-8777 Date: 2018-06-12 17:27:13.490593+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/ruby2.0/2.0.0.484

[ubuntu/trusty-security] ruby1.9.1 1.9.3.484-2ubuntu1.12 (Accepted)

S. Barbosa) https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.12 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/trusty-changes

[ubuntu/trusty-security] perl 5.18.2-2ubuntu1.6 (Accepted)

...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/perl/5.18.2-2ubuntu1.6 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/trusty-changes

[ubuntu/trusty-security] liblouis 2.5.3-2ubuntu1.4 (Accepted)

:14.103895+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/liblouis/2.5.3-2ubuntu1.4 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman

[ubuntu/trusty-security] liblouis 2.5.3-2ubuntu1.3 (Accepted)

- debian/patches/CVE-2018-11577.patch: fix in liblouis/compileTranslationTable.c. - CVE-2018-11577 Date: 2018-06-04 16:28:13.041927+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/liblouis/2.5.3-2ubuntu1.3 Sorry, changesfile not

[ubuntu/trusty-security] libytnef 1.5-6ubuntu0.2 (Accepted)

:28.439371+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libytnef/1.5-6ubuntu0.2 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com

[ubuntu/trusty-security] batik 1.7.ubuntu-8ubuntu2.14.04.3 (Accepted)

Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/batik/1.7.ubuntu-8ubuntu2.14.04.3 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman

[ubuntu/trusty-security] spice 0.12.4-0nocelt2ubuntu1.6 (Accepted)

.patch: avoid integer overflow in spice-common/python_modules/demarshal.py, spice-common/python_modules/marshal.py. - CVE-2017-12194 Date: 2018-05-22 19:17:12.913391+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/spice/0.12.4

[ubuntu/trusty-security] xdg-utils 1.1.0~rc1-2ubuntu7.2 (Accepted)

xdg-utils (1.1.0~rc1-2ubuntu7.2) trusty-security; urgency=medium * SECURITY UPDATE: Argument-injection attack - debian/patches/CVE-2017-18266.patch: fix in xdg-open. - CVE-2017-18266 Date: 2018-05-18 17:34:38.133707+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa

[ubuntu/trusty-security] supervisor 3.0b2-1ubuntu0.1 (Accepted)

-11610 Date: 2018-05-17 19:33:17.544853+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/supervisor/3.0b2-1ubuntu0.1 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe

[ubuntu/trusty-security] python-rsa 3.1.2-1ubuntu0.1 (Accepted)

: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/python-rsa/3.1.2-1ubuntu0.1 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/trusty-changes

[ubuntu/trusty-security] poppler 0.24.5-2ubuntu4.11 (Accepted)

-10768.patch: draw for malformed docs in poppler/Annot.c. - CVE-2018-10768 Date: 2018-05-15 15:06:29.400421+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/poppler/0.24.5-2ubuntu4.11 Sorry, changesfile not available.-- Trusty-changes

[ubuntu/trusty-security] wget 1.15-1ubuntu1.14.04.4 (Accepted)

(Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/wget/1.15-1ubuntu1.14.04.4 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/trusty-changes

[ubuntu/trusty-security] libclamunrar 0.99-0ubuntu0.14.04.2 (Accepted)

suggested by the package maintainer. Date: 2018-05-02 15:01:36.821570+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libclamunrar/0.99-0ubuntu0.14.04.2 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes

[ubuntu/trusty-security] ghostscript 9.10~dfsg-0ubuntu10.12 (Accepted)

: Denial of service - debian/patches/CVE-2018-10194.patch: avoid infinite number in devices/vector/gdevpdts.c. - CVE-2018-10194 Date: 2018-04-23 19:13:12.345939+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/ghostscript/9.10~dfsg

[ubuntu/trusty-security] php-ssh2 0.12-1ubuntu0.1 (Accepted)

: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/php-ssh2/0.12-1ubuntu0.1 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/trusty

[ubuntu/trusty-security] openssl 1.0.1f-1ubuntu2.25 (Accepted)

: 2018-04-18 18:19:13.616796+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/openssl/1.0.1f-1ubuntu2.25 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https

[ubuntu/trusty-security] ruby2.0 2.0.0.484-1ubuntu2.9 (Accepted)

/patches/CVE-2018-8780.patch: fix in dir.c, test/ruby/test_dir.rb. - CVE-2018-8780 Date: 2018-04-16 15:02:14.714105+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/ruby2.0/2.0.0.484-1ubuntu2.9 Sorry, changesfile not available.-- Trusty

[ubuntu/trusty-security] ruby1.9.1 1.9.3.484-2ubuntu1.11 (Accepted)

- debian/patches/CVE-2018-8780.patch: fix in dir.c, test/ruby/test_dir.rb. - CVE-2018-8780 Date: 2018-04-16 14:48:13.428561+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.11 Sorry, changesfile not available

[ubuntu/trusty-security] ruby2.0 2.0.0.484-1ubuntu2.8 (Accepted)

ruby2.0 (2.0.0.484-1ubuntu2.8) trusty-security; urgency=medium * SECURITY REGRESSION: The fix for CVE-2018-174 was incomplete and will be addressed in a future update. Date: 2018-04-13 14:22:13.483880+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https

[ubuntu/trusty-security] ruby1.9.1 1.9.3.484-2ubuntu1.10 (Accepted)

ruby1.9.1 (1.9.3.484-2ubuntu1.10) trusty-security; urgency=medium * SECURITY REGRESSION: The fix for CVE-2018-174 was incomplete and will be addressed in a future update. Date: 2018-04-13 13:54:11.589881+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https

[ubuntu/trusty-security] patch 2.7.1-4ubuntu2.4 (Accepted)

:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/patch/2.7.1-4ubuntu2.4 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo

[ubuntu/trusty-security] squirrelmail 2:1.4.23~svn20120406-2+deb8u2build0.14.04.1 (Accepted)

) Directory traversal flaw in Deliver.class.php can allow a remote attacker to retrieve or delete arbitrary files. (Closes: #893202) Date: 2018-04-10 12:24:21.058305+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) Maintainer: Jeroen van Wolffelaar https://launchpad.net/ubuntu

[ubuntu/trusty-security] ruby2.0 2.0.0.484-1ubuntu2.6 (Accepted)

...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/ruby2.0/2.0.0.484-1ubuntu2.6 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/trusty-changes

[ubuntu/trusty-security] ruby1.9.1 1.9.3.484-2ubuntu1.8 (Accepted)

-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.8 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo

[ubuntu/trusty-security] zsh 5.0.2-3ubuntu6.2 (Accepted)

/patches/CVE-2018-1083.patch: check bounds on PATH_MAX buffer in Src/Zle/compctl.c. - CVE-2018-1083 Date: 2018-03-26 17:37:28.051441+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/zsh/5.0.2-3ubuntu6.2 Sorry, changesfile not available

[ubuntu/trusty-security] sharutils 1:4.14-1ubuntu1.1 (Accepted)

sharutils (1:4.14-1ubuntu1.1) trusty-security; urgency=medium * SECURITY UPDATE: Buffer overflow - debian/patches/CVE-2018-197.patch: fix in src/unshar.c. - CVE-2018-197 Date: 2018-03-22 00:10:13.660017+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa

[ubuntu/trusty-security] zsh 5.0.2-3ubuntu6.1 (Accepted)

...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/zsh/5.0.2-3ubuntu6.1 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/trusty-changes

[ubuntu/trusty-security] mariadb-5.5 5.5.59-1ubuntu0.14.04.1 (Accepted)

* Update metadata and point VCS-* links to the new source repository Date: 2018-03-06 11:25:28.656040+00:00 Signed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/mariadb-5.5/5.5.59-1ubuntu0.14.04.1 Sorry, changesfile not available.-- Trusty-changes

[ubuntu/trusty-security] irssi 0.8.15-5ubuntu3.5 (Accepted)

-text/mainwindows.c. - CVE-2018-7052 Date: 2018-02-28 20:07:12.949910+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/irssi/0.8.15-5ubuntu3.5 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com M

[ubuntu/trusty-security] postgresql-9.3 9.3.22-0ubuntu0.14.04 (Accepted)

2018-03-01 14:50:52.362065+00:00 Changed-By: ChristianEhrhardt Signed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/postgresql-9.3/9.3.22-0ubuntu0.14.04 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modif

[ubuntu/trusty-security] twisted 13.2.0-1ubuntu1.2 (Accepted)

:13.567401+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/twisted/13.2.0-1ubuntu1.2 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com

[ubuntu/trusty-security] libvorbis 1.3.2-1.3ubuntu1.1 (Accepted)

patch: don't allow for more than 256 channels in lib/info.c. - CVE-2017-14633 Date: 2018-02-13 17:07:12.592029+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libvorbis/1.3.2-1.3ubuntu1.1 Sorry, changesfile not available.-- Trus

[ubuntu/trusty-security] wavpack 4.70.0-1ubuntu0.1 (Accepted)

wavpack (4.70.0-1ubuntu0.1) trusty-security; urgency=medium * SECURITY UPDATE: Denial of service via crafted WV file - debian/patches/CVE-2016-10169.patch: fix in words.c. - CVE-2016-10169 Date: 2018-02-12 14:11:13.018224+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa

[ubuntu/trusty-security] postgresql-9.3 9.3.21-0ubuntu0.14.04 (Accepted)

://www.postgresql.org/docs/9.3/static/release-9-3-21.html Date: 2018-02-08 15:24:14.215737+00:00 Changed-By: ChristianEhrhardt Signed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/postgresql-9.3/9.3.21-0ubuntu0.14.04 Sorry, changesfile not available.-- Trusty-changes

[ubuntu/trusty-security] mailman 1:2.1.16-2ubuntu0.5 (Accepted)

misspelling in Tagger.py that breaks Lists with topics enabled (LP: #1251495) Date: 2018-02-08 14:22:13.583844+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/mailman/1:2.1.16-2ubuntu0.5 Sorry, changesfile not available.-- Trusty-changes mailing

[ubuntu/trusty-security] dovecot 1:2.2.9-1ubuntu2.3 (Accepted)

(Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/dovecot/1:2.2.9-1ubuntu2.3 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/trusty-changes

[ubuntu/trusty-security] curl 7.35.0-1ubuntu2.14 (Accepted)

/test317, tests/data/test318. - CVE-2018-107 Date: 2018-01-30 13:20:18.098257+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/curl/7.35.0-1ubuntu2.14 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes

[ubuntu/trusty-security] libtasn1-6 3.4-3ubuntu0.6 (Accepted)

...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/libtasn1-6/3.4-3ubuntu0.6 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/trusty-changes

[ubuntu/trusty-security] rsync 3.1.0-2ubuntu0.4 (Accepted)

- CVE-2017-16548 * SECURITY UPDATE: Allows remote attacker to bypass argument - debian/patches/CVE-2018-5764.patch: Ignore --protect-args when already sent by client in options.c. - CVE-2018-5764 Date: 2018-01-18 20:25:12.832596+00:00 Changed-By: leo.barb...@canonical.com (

[ubuntu/trusty-security] gimp 2.8.10-0ubuntu1.2 (Accepted)

overflow in read_channel_data - debian/patches/CVE-2017-17789.patch: fix in plug-ins/common/file-psp.c. - CVE-2017-17789 Date: 2018-01-18 17:48:13.233910+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/gimp/2.8.10-0ubuntu1.2 Sorry

[ubuntu/trusty-security] transmission 2.82-1.1ubuntu3.2 (Accepted)

-server.c, libtransmission/rpc-server.h, libtransmission/session.c, libtransmission/transmission.h, libtransmission/web.c. - CVE-2018-5702 Date: 2018-01-16 15:02:13.650924+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/transmission

[ubuntu/trusty-security] gdk-pixbuf 2.30.7-0ubuntu1.8 (Accepted)

-2017-6313 * SECURITY UPDATE: DoS (infinite loop) - debian/patches/CVE-2017-6314.patch: avoid overflow buffer size computation in gdk-pixbuf/io-tiff.c. - CVE-2017-6314 Date: 2018-01-12 12:42:20.296050+00:00 Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https

[ubuntu/trusty-security] ruby1.9.1 1.9.3.484-2ubuntu1.7 (Accepted)

Changed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/ruby1.9.1/1.9.3.484-2ubuntu1.7 Sorry, changesfile not available.-- Trusty-changes mailing list Trusty-changes@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman

[ubuntu/trusty-security] mariadb-5.5 5.5.58-1ubuntu0.14.04.1 (Accepted)

contain new CVE identifiers * Includes upstream MDEV-13819 server crash fix (LP: #1735876) Date: 2018-01-09 17:36:18.555050+00:00 Signed-By: leo.barb...@canonical.com (Leonidas S. Barbosa) https://launchpad.net/ubuntu/+source/mariadb-5.5/5.5.58-1ubuntu0.14.04.1 Sorry, changesfile not available

  1   2   >