[ubuntu/xenial-updates] mbedtls 2.2.1-2ubuntu0.2 (Accepted)

mbedtls (2.2.1-2ubuntu0.2) xenial-security; urgency=medium * SECURITY UPDATE: If optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates. (LP: #1714640) - debian/patches/CVE-2017-14032.patch,

[ubuntu/xenial-security] mbedtls 2.2.1-2ubuntu0.2 (Accepted)

mbedtls (2.2.1-2ubuntu0.2) xenial-security; urgency=medium * SECURITY UPDATE: If optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates. (LP: #1714640) - debian/patches/CVE-2017-14032.patch,

[ubuntu/xenial-updates] karchive 5.18.0-0ubuntu1.1 (Accepted)

karchive (5.18.0-0ubuntu1.1) xenial-security; urgency=medium * SECURITY UPDATE: KNewstuff downloads can install files outside the extraction directory (LP: #1712948) - fix-CVE-2016-6232.patch - CVE-2016-6232 Date: 2017-09-07 23:32:20.252890+00:00 Changed-By: Simon Quigley

[ubuntu/xenial-security] karchive 5.18.0-0ubuntu1.1 (Accepted)

karchive (5.18.0-0ubuntu1.1) xenial-security; urgency=medium * SECURITY UPDATE: KNewstuff downloads can install files outside the extraction directory (LP: #1712948) - fix-CVE-2016-6232.patch - CVE-2016-6232 Date: 2017-09-07 23:32:20.252890+00:00 Changed-By: Simon Quigley

[ubuntu/xenial-proposed] linux-meta-azure 4.11.0.1009.9 (Accepted)

linux-meta-azure (4.11.0.1009.9) xenial; urgency=medium * Bump ABI 4.11.0-1009 Date: 2017-09-07 19:48:19.668430+00:00 Changed-By: Marcelo Cerri Signed-By: Steve Langasek

[ubuntu/xenial-proposed] linux-azure 4.11.0-1009.9 (Accepted)

linux-azure (4.11.0-1009.9) xenial; urgency=low * linux-azure: 4.11.0-1009.9 -proposed tracker (LP: #1715731) * [Hyper-V] Read TSC frequency from a synthetic MSR (LP: #1715489) - x86/hyperv: Check frequency MSRs presence according to the specification - x86/hyperv: Read TSC

[ubuntu/xenial-proposed] nova 2:13.1.4-0ubuntu4 (Accepted)

nova (2:13.1.4-0ubuntu4) xenial; urgency=medium * d/nova-common.postinst: Don't sync database if connection is not defined in /etc/nova/nova.conf (LP: #1713059). Date: Tue, 29 Aug 2017 16:17:30 -0300 Changed-By: Felipe Reyes Maintainer: Ubuntu Developers

[ubuntu/xenial-proposed] ntp 1:4.2.8p4+dfsg-3ubuntu5.7 (Accepted)

ntp (1:4.2.8p4+dfsg-3ubuntu5.7) xenial; urgency=medium * d/ntp.init: fix lock path to match the ntpdate ifup hook. Furthermore drop the usage of lockfile-progs calls and instead use flock directly. This is a backport of changes made in 1:4.2.8p7+dfsg-1 (LP: #1706818) Date: Tue, 05 Sep

[ubuntu/xenial-proposed] neutron 2:8.4.0-0ubuntu5 (Accepted)

neutron (2:8.4.0-0ubuntu5) xenial; urgency=medium * d/p/l3-ha-don-t-send-routers-without-_ha_interface.patch: Backport fix for l3 ha: don't send routers without '_ha_interface' (LP: #1668410) Date: Thu, 24 Aug 2017 12:19:23 +0800 Changed-By: Hua Zhang

[ubuntu/xenial-proposed] stunnel4 3:5.30-1ubuntu0.1 (Accepted)

stunnel4 (3:5.30-1ubuntu0.1) xenial; urgency=medium * Backport fix for TLS session leak introduced in stunnel4 5.27 from stunnel4 5.33: "Fixed a memory leak in the TLS session caching code (thx to Richard Kraemer)" (LP: #1655153). Date: Wed, 30 Aug 2017 22:31:43 + Changed-By: Scott

[ubuntu/xenial-proposed] python3.5 3.5.2-2ubuntu0~16.04.2 (Accepted)

python3.5 (3.5.2-2ubuntu0~16.04.2) xenial; urgency=medium * SRU: LP: #1711724 Fix dict segfault. Issue #27945. Date: Fri, 18 Aug 2017 10:48:00 -0700 Changed-By: Clint Byrum Maintainer: Ubuntu Core Developers

[ubuntu/xenial-proposed] fuse-umfuse-ext2 0.4-1.1ubuntu0.16.04.1 (Accepted)

fuse-umfuse-ext2 (0.4-1.1ubuntu0.16.04.1) xenial; urgency=high * Correctly release locks in op_link (LP: #1674868). Date: Wed, 22 Mar 2017 19:42:35 + Changed-By: Andrew Caldwell Maintainer: Ubuntu Developers

[ubuntu/xenial-proposed] tor 0.2.9.11-1ubuntu1~16.04.1 (Accepted)

tor (0.2.9.11-1ubuntu1~16.04.1) xenial; urgency=medium * Backport from Debian Stretch to Xenial. Ubuntu Delta: (LP: #1710753) - Limit the seccomp build-dependency to [amd64 i386 armhf]. - Drop build-conflicts. - Update debian/micro-revision.i to match 0.2.9.11 commit ID. - Use

[ubuntu/xenial-proposed] runc 1.0.0~rc2+docker1.13.1-0ubuntu1~16.04.1 (Accepted)

runc (1.0.0~rc2+docker1.13.1-0ubuntu1~16.04.1) xenial; urgency=medium * Backport to Xenial. (LP: #1712954) Date: Mon, 28 Aug 2017 09:40:33 +1200 Changed-By: Michael Hudson-Doyle Maintainer: Ubuntu Developers

[ubuntu/xenial-proposed] docker.io 1.13.1-0ubuntu1~16.04.1 (Accepted)

docker.io (1.13.1-0ubuntu1~16.04.1) xenial; urgency=medium * Backport to Xenial. (LP: #1712954) * Install the service file with .install again, fixing service activation on install. * Use golang.org/x/net/context instead of stdlib context to enable building with Go 1.6. Date: Fri,

[ubuntu/xenial-proposed] virt-manager 1:1.3.2-3ubuntu1.16.04.4 (Accepted)

virt-manager (1:1.3.2-3ubuntu1.16.04.4) xenial; urgency=medium * Fix virtinst location on s390x and clobbering extra args (LP: #1713990) - d/p/bug-1713990-virt-install-concatenate-all-extra-args-argument.patch - d/p/bug-1713990-virtinst-adjust-media-paths-for-s390x.patch Date: Thu, 31

[ubuntu/xenial-updates] walinuxagent 2.2.16-0ubuntu1~16.04.1 (Accepted)

walinuxagent (2.2.16-0ubuntu1~16.04.1) xenial; urgency=medium * Backport artful version to xenial. * New upstream release (LP: #1714299). walinuxagent (2.2.14-0ubuntu1) artful; urgency=medium * New upstream release (LP: #1701350). * debian/copyright: - Refreshed copyright content.

[ubuntu/xenial-proposed] python-neutronclient 1:4.1.1-2ubuntu1 (Accepted)

python-neutronclient (1:4.1.1-2ubuntu1) xenial; urgency=medium * d/rules: include neutron bash completion helper in python-neutronclient package (LP: #1692334). Date: Mon, 04 Sep 2017 16:13:12 -0300 Changed-By: Felipe Reyes Maintainer: PKG OpenStack

[ubuntu/xenial-proposed] snapd 2.27.6 (Accepted)

snapd (2.27.6) xenial; urgency=medium * New upstream release, LP: #1703798: - interfaces: add udev netlink support to hardware-observe - interfaces/network-{control,observe}: allow receiving kobject_uevent() messages Date: Thu, 07 Sep 2017 10:22:18 +0200 Changed-By: Michael Vogt