[ubuntu/xenial-updates] evince 3.18.2-1ubuntu4.5 (Accepted)

evince (3.18.2-1ubuntu4.5) xenial-security; urgency=medium * apparmor-profile: apply hardening from Ubuntu 18.10 - add preamble for expectations of the profile - evince{-previewer}: restrict access to DBus system bus (we allow full access to session, translation and accessibility

[ubuntu/xenial-security] evince 3.18.2-1ubuntu4.5 (Accepted)

evince (3.18.2-1ubuntu4.5) xenial-security; urgency=medium * apparmor-profile: apply hardening from Ubuntu 18.10 - add preamble for expectations of the profile - evince{-previewer}: restrict access to DBus system bus (we allow full access to session, translation and accessibility

[ubuntu/xenial-updates] agg 2.5+dfsg1-9+deb8u1build0.16.04.1 (Accepted)

agg (2.5+dfsg1-9+deb8u1build0.16.04.1) xenial-security; urgency=medium * fake sync from Debian (LP: #1821407) Date: 2019-06-18 21:55:13.236661+00:00 Changed-By: Steve Beattie Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/agg/2.5+dfsg1-9+deb8u1build0.16.04.1 Sorry,

[ubuntu/xenial-updates] gunicorn 19.4.5-1ubuntu1.1 (Accepted)

gunicorn (19.4.5-1ubuntu1.1) xenial-security; urgency=medium * SECURITY UPDATE: Fix HTTP header splitting vulnerability - debian/patches/CVE-2018-1000164.patch: adds header checking and error handling - CVE-2018-1000164 Date: 2019-06-14 20:32:13.062708+00:00 Changed-By: Mark Morlino

[ubuntu/xenial-security] agg 2.5+dfsg1-9+deb8u1build0.16.04.1 (Accepted)

agg (2.5+dfsg1-9+deb8u1build0.16.04.1) xenial-security; urgency=medium * fake sync from Debian (LP: #1821407) Date: 2019-06-18 21:55:13.236661+00:00 Changed-By: Steve Beattie https://launchpad.net/ubuntu/+source/agg/2.5+dfsg1-9+deb8u1build0.16.04.1 Sorry, changesfile not available.--

[ubuntu/xenial-security] gunicorn 19.4.5-1ubuntu1.1 (Accepted)

gunicorn (19.4.5-1ubuntu1.1) xenial-security; urgency=medium * SECURITY UPDATE: Fix HTTP header splitting vulnerability - debian/patches/CVE-2018-1000164.patch: adds header checking and error handling - CVE-2018-1000164 Date: 2019-06-14 20:32:13.062708+00:00 Changed-By: Mark Morlino

[ubuntu/xenial-proposed] linux-kvm 4.4.0-1049.56 (Accepted)

linux-kvm (4.4.0-1049.56) xenial; urgency=medium * linux-kvm: 4.4.0-1049.56 -proposed tracker (LP: #1832583) * Xenial update: 4.4.180 upstream stable release (LP: #1830176) - [Config]: enable CONFIG_SCHED_SMT [ Ubuntu: 4.4.0-152.179 ] * linux: 4.4.0-152.179 -proposed tracker (LP:

[ubuntu/xenial-proposed] linux-meta-kvm 4.4.0.1049.49 (Accepted)

linux-meta-kvm (4.4.0.1049.49) xenial; urgency=medium * Bump ABI 4.4.0-1049 Date: 2019-06-18 13:35:00.234688+00:00 Changed-By: Andrea Righi Signed-By: Łukasz Zemczak https://launchpad.net/ubuntu/+source/linux-meta-kvm/4.4.0.1049.49 Sorry, changesfile not available.-- Xenial-changes mailing

[ubuntu/xenial-updates] sqlite3 3.11.0-1ubuntu1.2 (Accepted)

sqlite3 (3.11.0-1ubuntu1.2) xenial-security; urgency=medium * SECURITY UPDATE: Denial of service - debian/patches/CVE-2016-6153-*.patch: change temp direcotry search algorithm in src/os_unix.c. - CVE-2016-6153 * SECURITY UPDATE: heap-base buffer over-read -

[ubuntu/xenial-proposed] linux-meta-aws 4.4.0.1086.89 (Accepted)

linux-meta-aws (4.4.0.1086.89) xenial; urgency=medium * Bump ABI 4.4.0-1086 Date: 2019-06-19 09:13:08.777109+00:00 Changed-By: Connor Kuehl Signed-By: Łukasz Zemczak https://launchpad.net/ubuntu/+source/linux-meta-aws/4.4.0.1086.89 Sorry, changesfile not available.-- Xenial-changes mailing

[ubuntu/xenial-proposed] linux-aws 4.4.0-1086.97 (Accepted)

linux-aws (4.4.0-1086.97) xenial; urgency=medium * linux-aws: 4.4.0-1086.97 -proposed tracker (LP: #1832582) [ Ubuntu: 4.4.0-152.179 ] * linux: 4.4.0-152.179 -proposed tracker (LP: #1832593) * CVE-2019-11479 - SAUCE: tcp: add tcp_min_snd_mss sysctl - SAUCE: tcp: enforce

[ubuntu/xenial-security] sqlite3 3.11.0-1ubuntu1.2 (Accepted)

sqlite3 (3.11.0-1ubuntu1.2) xenial-security; urgency=medium * SECURITY UPDATE: Denial of service - debian/patches/CVE-2016-6153-*.patch: change temp direcotry search algorithm in src/os_unix.c. - CVE-2016-6153 * SECURITY UPDATE: heap-base buffer over-read -

[ubuntu/xenial-updates] firefox 67.0.3+build1-0ubuntu0.16.04.1 (Accepted)

firefox (67.0.3+build1-0ubuntu0.16.04.1) xenial; urgency=medium * New upstream stable release (67.0.3build1) Date: 2019-06-18 08:04:19.650808+00:00 Changed-By: Olivier Tilloy Signed-By: Ubuntu Archive Robot https://launchpad.net/ubuntu/+source/firefox/67.0.3+build1-0ubuntu0.16.04.1 Sorry,

[ubuntu/xenial-security] linux-meta-snapdragon 4.4.0.1115.107 (Accepted)

linux-meta-snapdragon (4.4.0.1115.107) xenial; urgency=medium * Bump ABI 4.4.0-1115 Date: 2019-06-06 16:26:10.451312+00:00 Changed-By: Stefan Bader Signed-By: Andy Whitcroft https://launchpad.net/ubuntu/+source/linux-meta-snapdragon/4.4.0.1115.107 Sorry, changesfile not available.--

[ubuntu/xenial-security] linux-snapdragon 4.4.0-1115.121 (Accepted)

linux-snapdragon (4.4.0-1115.121) xenial; urgency=medium [ Ubuntu: 4.4.0-151.178 ] * Remote denial of service (system crash) caused by integer overflow in TCP SACK handling (LP: #1831637) - SAUCE: tcp: limit payload size of sacked skbs - SAUCE: tcp: fix fack_count accounting on

[ubuntu/xenial-security] linux-meta-raspi2 4.4.0.1111.111 (Accepted)

linux-meta-raspi2 (4.4.0..111) xenial; urgency=medium * Bump ABI 4.4.0- * Is Vcs-Git line correct? (LP: #1824474) - Vcs-Git: Fix raspi2 branch checkout Date: 2019-06-06 15:50:57.194668+00:00 Changed-By: Stefan Bader Signed-By: Andy Whitcroft

[ubuntu/xenial-security] linux-raspi2 4.4.0-1111.120 (Accepted)

linux-raspi2 (4.4.0-.120) xenial; urgency=medium [ Ubuntu: 4.4.0-151.178 ] * Remote denial of service (system crash) caused by integer overflow in TCP SACK handling (LP: #1831637) - SAUCE: tcp: limit payload size of sacked skbs - SAUCE: tcp: fix fack_count accounting on

[ubuntu/xenial-security] linux-signed-oracle 4.15.0-1015.17~16.04.1 (Accepted)

linux-signed-oracle (4.15.0-1015.17~16.04.1) xenial; urgency=medium * Master version: 4.15.0-1015.17~16.04.1 Date: 2019-06-05 19:42:19.969452+00:00 Changed-By: Marcelo Cerri Signed-By: Andy Whitcroft https://launchpad.net/ubuntu/+source/linux-signed-oracle/4.15.0-1015.17~16.04.1 Sorry,

[ubuntu/xenial-security] linux-oracle 4.15.0-1015.17~16.04.1 (Accepted)

linux-oracle (4.15.0-1015.17~16.04.1) xenial; urgency=medium [ Ubuntu: 4.15.0-1015.17 ] * Remote denial of service (resource exhaustion) caused by TCP SACK scoreboard manipulation (LP: #1831638) - SAUCE: tcp: tcp_fragment() should apply sane memory limits * Remote denial of

[ubuntu/xenial-security] linux-meta-oracle 4.15.0.1015.9 (Accepted)

linux-meta-oracle (4.15.0.1015.9) xenial; urgency=medium * Bump ABI 4.15.0-1015 Date: 2019-06-05 19:42:17.646330+00:00 Changed-By: Marcelo Cerri Signed-By: Andy Whitcroft https://launchpad.net/ubuntu/+source/linux-meta-oracle/4.15.0.1015.9 Sorry, changesfile not available.-- Xenial-changes

[ubuntu/xenial-security] linux-meta-hwe 4.15.0.52.73 (Accepted)

linux-meta-hwe (4.15.0.52.73) xenial; urgency=medium * Bump ABI 4.15.0-52 Date: 2019-06-06 11:55:57.828759+00:00 Changed-By: Stefan Bader Signed-By: Andy Whitcroft https://launchpad.net/ubuntu/+source/linux-meta-hwe/4.15.0.52.73 Sorry, changesfile not available.-- Xenial-changes mailing

[ubuntu/xenial-security] linux-meta-kvm 4.4.0.1048.48 (Accepted)

linux-meta-kvm (4.4.0.1048.48) xenial; urgency=medium * Bump ABI 4.4.0-1048 Date: 2019-06-06 14:52:57.679722+00:00 Changed-By: Stefan Bader Signed-By: Andy Whitcroft https://launchpad.net/ubuntu/+source/linux-meta-kvm/4.4.0.1048.48 Sorry, changesfile not available.-- Xenial-changes mailing

[ubuntu/xenial-security] linux-signed-hwe 4.15.0-52.56~16.04.1 (Accepted)

linux-signed-hwe (4.15.0-52.56~16.04.1) xenial; urgency=medium * Master version: 4.15.0-52.56~16.04.1 Date: 2019-06-06 11:55:56.046940+00:00 Changed-By: Stefan Bader Signed-By: Andy Whitcroft https://launchpad.net/ubuntu/+source/linux-signed-hwe/4.15.0-52.56~16.04.1 Sorry, changesfile not

[ubuntu/xenial-security] linux-kvm 4.4.0-1048.55 (Accepted)

linux-kvm (4.4.0-1048.55) xenial; urgency=medium [ Ubuntu: 4.4.0-151.178 ] * Remote denial of service (system crash) caused by integer overflow in TCP SACK handling (LP: #1831637) - SAUCE: tcp: limit payload size of sacked skbs - SAUCE: tcp: fix fack_count accounting on

[ubuntu/xenial-security] linux-meta-hwe-edge 4.15.0.52.71 (Accepted)

linux-meta-hwe-edge (4.15.0.52.71) xenial; urgency=medium * Bump ABI 4.15.0-52 Date: 2019-06-06 11:58:13.527683+00:00 Changed-By: Stefan Bader Signed-By: Andy Whitcroft https://launchpad.net/ubuntu/+source/linux-meta-hwe-edge/4.15.0.52.71 Sorry, changesfile not available.-- Xenial-changes

[ubuntu/xenial-security] linux-gcp 4.15.0-1034.36~16.04.1 (Accepted)

linux-gcp (4.15.0-1034.36~16.04.1) xenial; urgency=medium [ Ubuntu: 4.15.0-1034.36 ] * Remote denial of service (resource exhaustion) caused by TCP SACK scoreboard manipulation (LP: #1831638) - SAUCE: tcp: tcp_fragment() should apply sane memory limits * Remote denial of service

[ubuntu/xenial-security] linux-hwe 4.15.0-52.56~16.04.1 (Accepted)

linux-hwe (4.15.0-52.56~16.04.1) xenial; urgency=medium [ Ubuntu: 4.15.0-52.56 ] * Remote denial of service (resource exhaustion) caused by TCP SACK scoreboard manipulation (LP: #1831638) - SAUCE: tcp: tcp_fragment() should apply sane memory limits * Remote denial of service

[ubuntu/xenial-security] linux-meta-gcp 4.15.0.1034.48 (Accepted)

linux-meta-gcp (4.15.0.1034.48) xenial; urgency=medium * Bump ABI 4.15.0-1034 Date: 2019-06-06 15:27:56.326386+00:00 Changed-By: Stefan Bader Signed-By: Andy Whitcroft https://launchpad.net/ubuntu/+source/linux-meta-gcp/4.15.0.1034.48 Sorry, changesfile not available.-- Xenial-changes

[ubuntu/xenial-security] linux-signed-gcp 4.15.0-1034.36~16.04.1 (Accepted)

linux-signed-gcp (4.15.0-1034.36~16.04.1) xenial; urgency=medium * Master version: 4.15.0-1034.36~16.04.1 Date: 2019-06-06 15:27:54.005040+00:00 Changed-By: Stefan Bader Signed-By: Andy Whitcroft https://launchpad.net/ubuntu/+source/linux-signed-gcp/4.15.0-1034.36~16.04.1 Sorry, changesfile

[ubuntu/xenial-security] linux-signed-azure 4.15.0-1047.51 (Accepted)

linux-signed-azure (4.15.0-1047.51) xenial; urgency=medium * Master version: 4.15.0-1047.51 Date: 2019-06-05 14:49:20.752054+00:00 Changed-By: Marcelo Cerri Signed-By: Andy Whitcroft https://launchpad.net/ubuntu/+source/linux-signed-azure/4.15.0-1047.51 Sorry, changesfile not available.--

[ubuntu/xenial-security] linux-meta-aws-hwe 4.15.0.1041.41 (Accepted)

linux-meta-aws-hwe (4.15.0.1041.41) xenial; urgency=medium * Bump ABI 4.15.0-1041 Date: 2019-06-06 14:27:04.450062+00:00 Changed-By: Stefan Bader Signed-By: Andy Whitcroft https://launchpad.net/ubuntu/+source/linux-meta-aws-hwe/4.15.0.1041.41 Sorry, changesfile not available.--

[ubuntu/xenial-security] linux-aws-hwe 4.15.0-1041.43~16.04.1 (Accepted)

linux-aws-hwe (4.15.0-1041.43~16.04.1) xenial; urgency=medium [ Ubuntu: 4.15.0-1041.43 ] * Remote denial of service (resource exhaustion) caused by TCP SACK scoreboard manipulation (LP: #1831638) - SAUCE: tcp: tcp_fragment() should apply sane memory limits * Remote denial of

[ubuntu/xenial-security] linux-azure 4.15.0-1047.51 (Accepted)

linux-azure (4.15.0-1047.51) xenial; urgency=medium [ Ubuntu: 4.15.0-52.56 ] * Remote denial of service (resource exhaustion) caused by TCP SACK scoreboard manipulation (LP: #1831638) - SAUCE: tcp: tcp_fragment() should apply sane memory limits * Remote denial of service (system

[ubuntu/xenial-security] linux-meta-azure-edge 4.15.0.1047.30 (Accepted)

linux-meta-azure-edge (4.15.0.1047.30) xenial; urgency=medium * Bump ABI 4.15.0-1047 Date: 2019-06-05 15:06:13.664269+00:00 Changed-By: Marcelo Cerri Signed-By: Andy Whitcroft https://launchpad.net/ubuntu/+source/linux-meta-azure-edge/4.15.0.1047.30 Sorry, changesfile not available.--

[ubuntu/xenial-security] linux-meta-azure 4.15.0.1047.51 (Accepted)

linux-meta-azure (4.15.0.1047.51) xenial; urgency=medium * Bump ABI 4.15.0-1047 Date: 2019-06-05 14:49:17.778516+00:00 Changed-By: Marcelo Cerri Signed-By: Andy Whitcroft https://launchpad.net/ubuntu/+source/linux-meta-azure/4.15.0.1047.51 Sorry, changesfile not available.-- Xenial-changes

[ubuntu/xenial-security] linux-meta-aws 4.4.0.1085.88 (Accepted)

linux-meta-aws (4.4.0.1085.88) xenial; urgency=medium * Bump ABI 4.4.0-1085 Date: 2019-06-06 13:28:56.988484+00:00 Changed-By: Stefan Bader Signed-By: Andy Whitcroft https://launchpad.net/ubuntu/+source/linux-meta-aws/4.4.0.1085.88 Sorry, changesfile not available.-- Xenial-changes mailing

[ubuntu/xenial-security] linux-aws 4.4.0-1085.96 (Accepted)

linux-aws (4.4.0-1085.96) xenial; urgency=medium [ Ubuntu: 4.4.0-151.178 ] * Remote denial of service (system crash) caused by integer overflow in TCP SACK handling (LP: #1831637) - SAUCE: tcp: limit payload size of sacked skbs - SAUCE: tcp: fix fack_count accounting on

[ubuntu/xenial-security] linux-signed 4.4.0-151.178 (Accepted)

linux-signed (4.4.0-151.178) xenial; urgency=medium * Master version: 4.4.0-151.178 linux-signed (4.4.0-151.177) xenial; urgency=medium * Master version: 4.4.0-151.177 Date: 2019-06-11 08:19:34.519524+00:00 Changed-By: Stefan Bader Signed-By: Andy Whitcroft

[ubuntu/xenial-security] linux 4.4.0-151.178 (Accepted)

linux (4.4.0-151.178) xenial; urgency=medium * Remote denial of service (system crash) caused by integer overflow in TCP SACK handling (LP: #1831637) - SAUCE: tcp: limit payload size of sacked skbs - SAUCE: tcp: fix fack_count accounting on tcp_shift_skb_data() * Remote denial of

[ubuntu/xenial-security] linux-meta 4.4.0.151.159 (Accepted)

linux-meta (4.4.0.151.159) xenial; urgency=medium * Bump ABI 4.4.0-151 Date: 2019-06-05 09:51:51.831690+00:00 Changed-By: Stefan Bader Signed-By: Andy Whitcroft https://launchpad.net/ubuntu/+source/linux-meta/4.4.0.151.159 Sorry, changesfile not available.-- Xenial-changes mailing list

[ubuntu/xenial-security] firefox 67.0.3+build1-0ubuntu0.16.04.1 (Accepted)

firefox (67.0.3+build1-0ubuntu0.16.04.1) xenial; urgency=medium * New upstream stable release (67.0.3build1) Date: 2019-06-18 08:04:19.650808+00:00 Changed-By: Olivier Tilloy Signed-By: Chris Coulson https://launchpad.net/ubuntu/+source/firefox/67.0.3+build1-0ubuntu0.16.04.1 Sorry,

[ubuntu/xenial-proposed] linux-meta-snapdragon 4.4.0.1116.108 (Accepted)

linux-meta-snapdragon (4.4.0.1116.108) xenial; urgency=medium * Bump ABI 4.4.0-1116 Date: 2019-06-18 09:58:59.211966+00:00 Changed-By: Stefan Bader Signed-By: Łukasz Zemczak https://launchpad.net/ubuntu/+source/linux-meta-snapdragon/4.4.0.1116.108 Sorry, changesfile not available.--

[ubuntu/xenial-proposed] linux-snapdragon 4.4.0-1116.122 (Accepted)

linux-snapdragon (4.4.0-1116.122) xenial; urgency=medium * linux-snapdragon: 4.4.0-1116.122 -proposed tracker (LP: #1832589) [ Ubuntu: 4.4.0-152.179 ] * linux: 4.4.0-152.179 -proposed tracker (LP: #1832593) * CVE-2019-11479 - SAUCE: tcp: add tcp_min_snd_mss sysctl - SAUCE: tcp:

[ubuntu/xenial-proposed] linux-meta-raspi2 4.4.0.1112.112 (Accepted)

linux-meta-raspi2 (4.4.0.1112.112) xenial; urgency=medium * Bump ABI 4.4.0-1112 Date: 2019-06-18 09:03:13.583753+00:00 Changed-By: Stefan Bader Signed-By: Łukasz Zemczak https://launchpad.net/ubuntu/+source/linux-meta-raspi2/4.4.0.1112.112 Sorry, changesfile not available.-- Xenial-changes

[ubuntu/xenial-proposed] linux-raspi2 4.4.0-1112.121 (Accepted)

linux-raspi2 (4.4.0-1112.121) xenial; urgency=medium * linux-raspi2: 4.4.0-1112.121 -proposed tracker (LP: #1832585) [ Ubuntu: 4.4.0-152.179 ] * linux: 4.4.0-152.179 -proposed tracker (LP: #1832593) * CVE-2019-11479 - SAUCE: tcp: add tcp_min_snd_mss sysctl - SAUCE: tcp: enforce