libservicelog (1.1.16-0ubuntu1.1) xenial; urgency=medium
* debian/patches: Cherry-pick and rebase upstream fixes for additional NULL
checking, string length calculation and validation. (LP: #1705538)
- 0001-Correct-string-length-calculation-and-validates-dest.patch
- 0002-NULL-check
libgcrypt20 (1.6.5-2ubuntu0.5) xenial-security; urgency=medium
* SECURITY UPDATE: memory-cache side-channel attack on ECDSA signatures
- debian/patches/CVE-2018-0495.patch: add blinding for ECDSA in
cipher/ecc-ecdsa.c.
- CVE-2018-0495
Date: 2018-06-18 14:13:13.163913+00:00
Changed
libgcrypt20 (1.6.5-2ubuntu0.5) xenial-security; urgency=medium
* SECURITY UPDATE: memory-cache side-channel attack on ECDSA signatures
- debian/patches/CVE-2018-0495.patch: add blinding for ECDSA in
cipher/ecc-ecdsa.c.
- CVE-2018-0495
libgcrypt20 (1.6.5-2ubuntu0.4) xenial; urgency
snapd (2.33) xenial; urgency=medium
* New upstream release, LP: #1773118
- packaging: use official bolt in the errtracker on fedora
- many: add `snap debug connectivity` command
- interfaces/raw-usb: also allow usb serial devices
- errtracker: do not send duplicated reports
-