From gary.lasker at canonical.com Wed Nov 2 14:13:07 2011 From: gary.lasker at canonical.com (Gary Lasker) Date: Wed, 02 Nov 2011 14:13:07 -0000 Subject: [ubuntu/natty-proposed] tzdata 2011n-0ubuntu0.11.04 (Accepted) Message-ID: <20111102141307.6326.72877.launchpad@gac.canonical.com> tzdata (2011n-0ubuntu0.11.04) natty-proposed; urgency=low * New upstream release 2011n (LP: #884866): - Cuba: Change end date of DST in 2011 - Fiji: Change end date of DST in 2012 - Pridnestrovian Moldavian Republic: Restore end date of DST in 2011 Date: Tue, 01 Nov 2011 16:10:41 -0400 Changed-By: Gary Lasker Maintainer: Ubuntu Developers Signed-By: Martin Pitt https://launchpad.net/ubuntu/natty/+source/tzdata/2011n-0ubuntu0.11.04 -------------- next part -------------- Format: 1.8 Date: Tue, 01 Nov 2011 16:10:41 -0400 Source: tzdata Binary: tzdata tzdata-java Architecture: source Version: 2011n-0ubuntu0.11.04 Distribution: natty-proposed Urgency: low Maintainer: Ubuntu Developers Changed-By: Gary Lasker Description: tzdata - time zone and daylight-saving time data tzdata-java - time zone and daylight-saving time data for use by java runtimes Launchpad-Bugs-Fixed: 884866 Changes: tzdata (2011n-0ubuntu0.11.04) natty-proposed; urgency=low . * New upstream release 2011n (LP: #884866): - Cuba: Change end date of DST in 2011 - Fiji: Change end date of DST in 2012 - Pridnestrovian Moldavian Republic: Restore end date of DST in 2011 Checksums-Sha1: 3f636ac2b1c4e35e50e6ef53d9b5d01fece87f30 1908 tzdata_2011n-0ubuntu0.11.04.dsc 7e1b47d1de5a4e8aee966b8bd7b7b7188fb831a8 252220 tzdata_2011n-0ubuntu0.11.04.debian.tar.gz Checksums-Sha256: e984d83b5ac0f781d0d7bd975dafee0668286e80265f814995b2ddbe7f5c1357 1908 tzdata_2011n-0ubuntu0.11.04.dsc fafe1a1a783c6f2b27088077725d4029ddaa3cb25b70fa693ee990e7e71c817d 252220 tzdata_2011n-0ubuntu0.11.04.debian.tar.gz Files: e0b40e6711be95c2d8dc80129cfd8a5d 1908 libs required tzdata_2011n-0ubuntu0.11.04.dsc 56746337321770a937564eb34a702acb 252220 libs required tzdata_2011n-0ubuntu0.11.04.debian.tar.gz Original-Maintainer: GNU Libc Maintainers From adamg at canonical.com Tue Nov 8 03:30:17 2011 From: adamg at canonical.com (Adam Gandelman) Date: Tue, 08 Nov 2011 03:30:17 -0000 Subject: [ubuntu/natty-proposed] facter 1.5.8-2ubuntu2.2 (Accepted) Message-ID: <20111108033017.24506.22433.launchpad@cocoplum.canonical.com> facter (1.5.8-2ubuntu2.2) natty-proposed; urgency=low * debian/patches/fix_ec2_metadata_facts.patch: Refreshed to rescue condition in can_connect() when timeout() actually has a chance to timeout. (LP: #885998) Date: Mon, 07 Nov 2011 10:47:01 -0800 Changed-By: Adam Gandelman Maintainer: Ubuntu Core Developers Signed-By: Clint Byrum https://launchpad.net/ubuntu/natty/+source/facter/1.5.8-2ubuntu2.2 -------------- next part -------------- Format: 1.8 Date: Mon, 07 Nov 2011 10:47:01 -0800 Source: facter Binary: facter Architecture: source Version: 1.5.8-2ubuntu2.2 Distribution: natty-proposed Urgency: low Maintainer: Ubuntu Core Developers Changed-By: Adam Gandelman Description: facter - a library for retrieving facts from operating systems Launchpad-Bugs-Fixed: 885998 Changes: facter (1.5.8-2ubuntu2.2) natty-proposed; urgency=low . * debian/patches/fix_ec2_metadata_facts.patch: Refreshed to rescue condition in can_connect() when timeout() actually has a chance to timeout. (LP: #885998) Checksums-Sha1: 8efc3a0bfc0fa39237e2d9394fb7e0197f97700e 1782 facter_1.5.8-2ubuntu2.2.dsc ffbd70058bee115bc1d165083608ce5f370f79d9 7934 facter_1.5.8-2ubuntu2.2.debian.tar.gz Checksums-Sha256: ad328d0a0a50e22b318463afc5d10d10ff9b5b9f23c007126931cac2da1bae99 1782 facter_1.5.8-2ubuntu2.2.dsc 4ed875d1a4754f5f8e2e78984559484dbaaa62b845058f58aed9d1e95b96b716 7934 facter_1.5.8-2ubuntu2.2.debian.tar.gz Files: 0050f61568f8c9b3c5be75a2d4b244a5 1782 admin optional facter_1.5.8-2ubuntu2.2.dsc 6225c7de3e0ef37524fc8a34d9f37ca7 7934 admin optional facter_1.5.8-2ubuntu2.2.debian.tar.gz Original-Maintainer: Puppet Package Maintainers From marc.deslauriers at ubuntu.com Tue Nov 8 13:03:36 2011 From: marc.deslauriers at ubuntu.com (Marc Deslauriers) Date: Tue, 08 Nov 2011 13:03:36 -0000 Subject: [ubuntu/natty-security] tomcat6, tomcat6_6.0.28-10ubuntu2.2_i386_translations.tar.gz 6.0.28-10ubuntu2.2 (Accepted) Message-ID: <20111108130336.22732.12756.launchpad@cocoplum.canonical.com> tomcat6 (6.0.28-10ubuntu2.2) natty-security; urgency=low * SECURITY UPDATE: information disclosure via log file - debian/patches/0015-CVE-2011-2204.patch: fix logging in java/org/apache/catalina/mbeans/MemoryUserDatabaseMBean.java, java/org/apache/catalina/users/MemoryUserDatabase.java, java/org/apache/catalina/users/MemoryUser.java. - CVE-2011-2204 * SECURITY UPDATE: file restriction bypass or denial of service via untrusted web application. - debian/patches/0016-CVE-2011-2526.patch: check canonical name in java/org/apache/catalina/connector/LocalStrings.properties, java/org/apache/catalina/connector/Request.java, java/org/apache/catalina/servlets/DefaultServlet.java, java/org/apache/coyote/http11/Http11AprProcessor.java, java/org/apache/coyote/http11/LocalStrings.properties, java/org/apache/tomcat/util/net/AprEndpoint.java, java/org/apache/tomcat/util/net/NioEndpoint.java. - CVE-2011-2526 * SECURITY UPDATE: AJP request spoofing and authentication bypass (LP: #843701) - debian/patches/0017-CVE-2011-3190.patch: Properly handle request bodies in java/org/apache/coyote/ajp/AjpAprProcessor.java, java/org/apache/coyote/ajp/AjpProcessor.java. - CVE-2011-3190 * SECURITY UPDATE: HTTP DIGEST authentication weaknesses - debian/patches/0018-CVE-2011-1184.patch: add new nonce options in java/org/apache/catalina/authenticator/DigestAuthenticator.java, java/org/apache/catalina/authenticator/LocalStrings.properties, java/org/apache/catalina/authenticator/mbeans-descriptors.xml, java/org/apache/catalina/realm/RealmBase.java, webapps/docs/config/valve.xml. - CVE-2011-1184 Date: Mon, 26 Sep 2011 11:27:14 -0400 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/tomcat6/6.0.28-10ubuntu2.2 -------------- next part -------------- Format: 1.8 Date: Mon, 26 Sep 2011 11:27:14 -0400 Source: tomcat6 Binary: tomcat6-common tomcat6 tomcat6-user libtomcat6-java libservlet2.5-java libservlet2.5-java-doc tomcat6-admin tomcat6-examples tomcat6-docs Architecture: source Version: 6.0.28-10ubuntu2.2 Distribution: natty-security Urgency: low Maintainer: Ubuntu Developers Changed-By: Marc Deslauriers Description: libservlet2.5-java - Servlet 2.5 and JSP 2.1 Java API classes libservlet2.5-java-doc - Servlet 2.5 and JSP 2.1 Java API documentation libtomcat6-java - Servlet and JSP engine -- core libraries tomcat6 - Servlet and JSP engine tomcat6-admin - Servlet and JSP engine -- admin web applications tomcat6-common - Servlet and JSP engine -- common files tomcat6-docs - Servlet and JSP engine -- documentation tomcat6-examples - Servlet and JSP engine -- example web applications tomcat6-user - Servlet and JSP engine -- tools to create user instances Launchpad-Bugs-Fixed: 843701 Changes: tomcat6 (6.0.28-10ubuntu2.2) natty-security; urgency=low . * SECURITY UPDATE: information disclosure via log file - debian/patches/0015-CVE-2011-2204.patch: fix logging in java/org/apache/catalina/mbeans/MemoryUserDatabaseMBean.java, java/org/apache/catalina/users/MemoryUserDatabase.java, java/org/apache/catalina/users/MemoryUser.java. - CVE-2011-2204 * SECURITY UPDATE: file restriction bypass or denial of service via untrusted web application. - debian/patches/0016-CVE-2011-2526.patch: check canonical name in java/org/apache/catalina/connector/LocalStrings.properties, java/org/apache/catalina/connector/Request.java, java/org/apache/catalina/servlets/DefaultServlet.java, java/org/apache/coyote/http11/Http11AprProcessor.java, java/org/apache/coyote/http11/LocalStrings.properties, java/org/apache/tomcat/util/net/AprEndpoint.java, java/org/apache/tomcat/util/net/NioEndpoint.java. - CVE-2011-2526 * SECURITY UPDATE: AJP request spoofing and authentication bypass (LP: #843701) - debian/patches/0017-CVE-2011-3190.patch: Properly handle request bodies in java/org/apache/coyote/ajp/AjpAprProcessor.java, java/org/apache/coyote/ajp/AjpProcessor.java. - CVE-2011-3190 * SECURITY UPDATE: HTTP DIGEST authentication weaknesses - debian/patches/0018-CVE-2011-1184.patch: add new nonce options in java/org/apache/catalina/authenticator/DigestAuthenticator.java, java/org/apache/catalina/authenticator/LocalStrings.properties, java/org/apache/catalina/authenticator/mbeans-descriptors.xml, java/org/apache/catalina/realm/RealmBase.java, webapps/docs/config/valve.xml. - CVE-2011-1184 Checksums-Sha1: a8f3e1ae5b9717b79a8a97b805b6631fe257fa7a 2376 tomcat6_6.0.28-10ubuntu2.2.dsc de62ea013c1fe0ec7cc7b433a2702a78ca11b559 56446 tomcat6_6.0.28-10ubuntu2.2.debian.tar.gz Checksums-Sha256: d1f09d8ad4cc994f611ad9c781ceb32ce2f3a1a45b811e11929d1ab8d016089b 2376 tomcat6_6.0.28-10ubuntu2.2.dsc 3c90ecb18fc647789d0ac0ad9b4c13ace982ff38995fe970e1b7d1979271c9f4 56446 tomcat6_6.0.28-10ubuntu2.2.debian.tar.gz Files: 6572af1caa0be38740e26ddbf80aaa2d 2376 java optional tomcat6_6.0.28-10ubuntu2.2.dsc 69f0f6040d0cc71e637fd1edf0fe7460 56446 java optional tomcat6_6.0.28-10ubuntu2.2.debian.tar.gz Original-Maintainer: Debian Java Maintainers From jamie at ubuntu.com Tue Nov 8 17:51:39 2011 From: jamie at ubuntu.com (Jamie Strandboge) Date: Tue, 08 Nov 2011 17:51:39 -0000 Subject: [ubuntu/natty-proposed] kdeutils 4:4.6.5-0ubuntu1.1 (Accepted) Message-ID: <20111108175139.6934.61121.launchpad@gac.canonical.com> kdeutils (4:4.6.5-0ubuntu1.1) natty-proposed; urgency=low * SECURITY UPDATE: fix directory traversal in Ark - debian/patches/CVE-2011-2725.patch: filter out '../' when previewing archives - CVE-2011-2725 - LP: #878619 Date: Sun, 30 Oct 2011 16:16:10 -0400 Changed-By: Jamie Strandboge Maintainer: Kubuntu Developers https://launchpad.net/ubuntu/natty/+source/kdeutils/4:4.6.5-0ubuntu1.1 -------------- next part -------------- Format: 1.8 Date: Sun, 30 Oct 2011 16:16:10 -0400 Source: kdeutils Binary: kdeutils kdeutils-dbg ark kcalc kcharselect kremotecontrol kdelirc kdf kfloppy kgpg ktimer kwalletmanager plasma-scriptengine-superkaramba sweeper printer-applet filelight Architecture: source Version: 4:4.6.5-0ubuntu1.1 Distribution: natty-proposed Urgency: low Maintainer: Kubuntu Developers Changed-By: Jamie Strandboge Description: ark - archive utility filelight - show where your diskspace is being used kcalc - simple and scientific calculator kcharselect - special character utility kdelirc - infrared remote control - transitional package kdeutils - general-purpose utilities from the official KDE release kdeutils-dbg - debugging symbols for the KDE utilities module kdf - disk information utility kfloppy - floppy formatter kgpg - graphical front end for GNU Privacy Guard kremotecontrol - infrared remote control ktimer - countdown timer kwalletmanager - secure password wallet manager plasma-scriptengine-superkaramba - SuperKaramba theme support for the Plasma Workspaces printer-applet - printer status applet sweeper - history and temporary file cleaner Launchpad-Bugs-Fixed: 878619 Changes: kdeutils (4:4.6.5-0ubuntu1.1) natty-proposed; urgency=low . * SECURITY UPDATE: fix directory traversal in Ark - debian/patches/CVE-2011-2725.patch: filter out '../' when previewing archives - CVE-2011-2725 - LP: #878619 Checksums-Sha1: 52813210e2d46e3e70c89fd2939fd4063f4b2285 2700 kdeutils_4.6.5-0ubuntu1.1.dsc 09e9909fd16734f48e950f7a1872de103de6d906 41421 kdeutils_4.6.5-0ubuntu1.1.debian.tar.gz Checksums-Sha256: 1b663b772f87b08814a33e2c5c001ebb77adfb0a5b3405b1e2f679c3d4d9364b 2700 kdeutils_4.6.5-0ubuntu1.1.dsc d21dce584ebaece87cd2711c8525458bfd3af85b92b7cef52ee5fc114c4bb2cf 41421 kdeutils_4.6.5-0ubuntu1.1.debian.tar.gz Files: 5c5206f9e7407477ba21ff9d5c4c16a3 2700 kde optional kdeutils_4.6.5-0ubuntu1.1.dsc b0793f3ae52384dec5a7e3c633bb2829 41421 kde optional kdeutils_4.6.5-0ubuntu1.1.debian.tar.gz Original-Maintainer: Debian Qt/KDE Maintainers From brian.thomason at canonical.com Wed Nov 9 14:25:40 2011 From: brian.thomason at canonical.com (Brian Thomason) Date: Wed, 09 Nov 2011 14:25:40 -0000 Subject: [ubuntu/natty] acroread 9.4.6-0natty1 (Accepted) Message-ID: <20111109142540.21426.65133.launchpad@cocoplum.canonical.com> acroread (9.4.6-0natty1) natty; urgency=low * Initial release of 9.4.6 for Natty Date: Wed, 09 Nov 2011 09:19:20 -0500 Changed-By: Brian Thomason https://launchpad.net/ubuntu/natty/+source/acroread/9.4.6-0natty1 -------------- next part -------------- -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Wed, 09 Nov 2011 09:19:20 -0500 Source: acroread Binary: acroread Architecture: source Version: 9.4.6-0natty1 Distribution: natty Urgency: low Maintainer: Brian Thomason Changed-By: Brian Thomason Description: acroread - Adobe Reader Changes: acroread (9.4.6-0natty1) natty; urgency=low . * Initial release of 9.4.6 for Natty Checksums-Sha1: ddd547bc9d5e4bccd07384d44dae43e5b4c5baec 1202 acroread_9.4.6-0natty1.dsc 327b38a5f17e71391dc0f939829b71c02b7ba9dd 15338 acroread_9.4.6-0natty1.diff.gz Checksums-Sha256: 0965f4f45a2bf6ec4613df7ffeace5bafd6251a632b97ef56c2c162bee323203 1202 acroread_9.4.6-0natty1.dsc 6ee566d9fd9f53f9780056d43e8a8355e5b4b35533b0bd18022df1de783dbce9 15338 acroread_9.4.6-0natty1.diff.gz Files: 397926ee1c848d4ec15dd7e35bbd2a15 1202 partner/text extra acroread_9.4.6-0natty1.dsc 36a3ad8601067b269868a4ed2271cafa 15338 partner/text extra acroread_9.4.6-0natty1.diff.gz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iEYEARECAAYFAk66jBkACgkQOb4zNfJqN5eJUACfY3ztWQpi/qitBrPhkRzAbAsq +dIAn3omsrGE9lJN/olWVd2CokXKJ2fL =5Hb+ -----END PGP SIGNATURE----- From marc.deslauriers at ubuntu.com Wed Nov 9 15:03:27 2011 From: marc.deslauriers at ubuntu.com (Marc Deslauriers) Date: Wed, 09 Nov 2011 15:03:27 -0000 Subject: [ubuntu/natty-security] libmodplug 1:0.8.8.1-2ubuntu0.3 (Accepted) Message-ID: <20111109150327.2322.32306.launchpad@cocoplum.canonical.com> libmodplug (1:0.8.8.1-2ubuntu0.3) natty-security; urgency=low * SECURITY UPDATE: integer overflow in CSoundFile::ReadWav() - properly calculate length in src/load_wav.cpp. - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms;a=commit;h=2d4c56de314ab13e4437bd8b609f0b751066eee8 - CVE-2011-2911 * SECURITY UPDATE: boundary error in CSoundFile::ReadS3M() - validate offsets and ignore duplicate samples in src/load_s3m.cpp. - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms;a=commit;h=4e5295658fff000379caa122e75c9200205fe20 - CVE-2011-2912 * SECURITY UPDATE: off-by-one in CSoundFile::ReadAMS() - fix calculation in src/load_ams.cpp. - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms;a=commit;h=26243ab9fe1171f70053e9aec4b20e9f7de9e4ef - CVE-2011-2913 * SECURITY UPDATE: off-by-one in CSoundFile::ReadDSM() - fix calculation in src/load_dsm.cpp. - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms;a=commit;h=26243ab9fe1171f70053e9aec4b20e9f7de9e4ef - CVE-2011-2914 * SECURITY UPDATE: off-by-one in CSoundFile::ReadAMS2() - fix calculation in src/load_ams.cpp. - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms;a=commit;h=16d7a78efe14d345a6c5b241f88422ad0ee483ea - CVE-2011-2915 Date: Fri, 14 Oct 2011 13:42:09 -0400 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/libmodplug/1:0.8.8.1-2ubuntu0.3 -------------- next part -------------- Format: 1.8 Date: Fri, 14 Oct 2011 13:42:09 -0400 Source: libmodplug Binary: libmodplug1 libmodplug-dev Architecture: source Version: 1:0.8.8.1-2ubuntu0.3 Distribution: natty-security Urgency: low Maintainer: Ubuntu Developers Changed-By: Marc Deslauriers Description: libmodplug-dev - development files for mod music based on ModPlug libmodplug1 - shared libraries for mod music based on ModPlug Changes: libmodplug (1:0.8.8.1-2ubuntu0.3) natty-security; urgency=low . * SECURITY UPDATE: integer overflow in CSoundFile::ReadWav() - properly calculate length in src/load_wav.cpp. - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms;a=commit;h=2d4c56de314ab13e4437bd8b609f0b751066eee8 - CVE-2011-2911 * SECURITY UPDATE: boundary error in CSoundFile::ReadS3M() - validate offsets and ignore duplicate samples in src/load_s3m.cpp. - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms;a=commit;h=4e5295658fff000379caa122e75c9200205fe20 - CVE-2011-2912 * SECURITY UPDATE: off-by-one in CSoundFile::ReadAMS() - fix calculation in src/load_ams.cpp. - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms;a=commit;h=26243ab9fe1171f70053e9aec4b20e9f7de9e4ef - CVE-2011-2913 * SECURITY UPDATE: off-by-one in CSoundFile::ReadDSM() - fix calculation in src/load_dsm.cpp. - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms;a=commit;h=26243ab9fe1171f70053e9aec4b20e9f7de9e4ef - CVE-2011-2914 * SECURITY UPDATE: off-by-one in CSoundFile::ReadAMS2() - fix calculation in src/load_ams.cpp. - http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms/modplug-xmms;a=commit;h=16d7a78efe14d345a6c5b241f88422ad0ee483ea - CVE-2011-2915 Checksums-Sha1: da2da14f97be519f5abfa991cf30c2a8d8703b97 1801 libmodplug_0.8.8.1-2ubuntu0.3.dsc 469cbdb31b3dffd925175fb1ccff12ceeb9ed37a 15114 libmodplug_0.8.8.1-2ubuntu0.3.diff.gz Checksums-Sha256: d2726aa90f7aa4e48ff3b532088a77e46d03383fc856aefb0b501a6285b96803 1801 libmodplug_0.8.8.1-2ubuntu0.3.dsc a0153dde4e9b70658a0d1bb5843fdb05542b8819476433b793c510ed74158a97 15114 libmodplug_0.8.8.1-2ubuntu0.3.diff.gz Files: 2224b4e874407c53e5a65ef69700c2af 1801 libs optional libmodplug_0.8.8.1-2ubuntu0.3.dsc f1b9fb697192e7a6e9a0fe2a780a4c46 15114 libs optional libmodplug_0.8.8.1-2ubuntu0.3.diff.gz Original-Maintainer: Zed Pobre From jtaylor.debian at googlemail.com Wed Nov 9 21:03:30 2011 From: jtaylor.debian at googlemail.com (Julian Taylor) Date: Wed, 09 Nov 2011 21:03:30 -0000 Subject: [ubuntu/natty-security] python-django-piston 0.2.2-1ubuntu1.11.04.1 (Accepted) Message-ID: <20111109210330.13278.31628.launchpad@cocoplum.canonical.com> python-django-piston (0.2.2-1ubuntu1.11.04.1) natty-security; urgency=low * SECURITY UPDATE: remote code execution vulnerability. LP: #884910 - 02-fix-yaml-load.diff: use yaml.safe_load - 03-fix-pickle-load.diff: disable unpickling, backport from 0.2.3, patch thanks to Debian - https://www.djangoproject.com/weblog/2011/nov/01/piston-and-tastypie-security-releases/ - CVE-2011-4103 Date: Wed, 02 Nov 2011 19:18:12 +0100 Changed-By: Julian Taylor Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/python-django-piston/0.2.2-1ubuntu1.11.04.1 -------------- next part -------------- Format: 1.8 Date: Wed, 02 Nov 2011 19:18:12 +0100 Source: python-django-piston Binary: python-django-piston Architecture: source Version: 0.2.2-1ubuntu1.11.04.1 Distribution: natty-security Urgency: low Maintainer: Ubuntu Developers Changed-By: Julian Taylor Description: python-django-piston - Django mini-framework creating RESTful APIs Launchpad-Bugs-Fixed: 884910 Changes: python-django-piston (0.2.2-1ubuntu1.11.04.1) natty-security; urgency=low . * SECURITY UPDATE: remote code execution vulnerability. LP: #884910 - 02-fix-yaml-load.diff: use yaml.safe_load - 03-fix-pickle-load.diff: disable unpickling, backport from 0.2.3, patch thanks to Debian - https://www.djangoproject.com/weblog/2011/nov/01/piston-and-tastypie-security-releases/ - CVE-2011-4103 Checksums-Sha1: 47a4471e253bb5079f6011c3934e1dbf95311966 2290 python-django-piston_0.2.2-1ubuntu1.11.04.1.dsc 43181fd93c0525f71f280868252fe4f802e82a8f 4865 python-django-piston_0.2.2-1ubuntu1.11.04.1.debian.tar.gz Checksums-Sha256: 5dee926552892fb76301a5a245fdba79e07b82ee985b94525dbc20658d6bf37f 2290 python-django-piston_0.2.2-1ubuntu1.11.04.1.dsc 3f9a5650c1a77dec9fe90af6ec74720657443bc59671f4d5008cfae0d10e91ff 4865 python-django-piston_0.2.2-1ubuntu1.11.04.1.debian.tar.gz Files: 558512082b5c22f77120937bc94c3bd6 2290 python optional python-django-piston_0.2.2-1ubuntu1.11.04.1.dsc 423b109f6089a5c8cc49d588debab840 4865 python optional python-django-piston_0.2.2-1ubuntu1.11.04.1.debian.tar.gz Original-Maintainer: Debian Python Modules Team From jean-louis at dupond.be Thu Nov 10 06:11:12 2011 From: jean-louis at dupond.be (Jean-Louis Dupond) Date: Thu, 10 Nov 2011 06:11:12 -0000 Subject: [ubuntu/natty-proposed] papyon 0.5.5-1ubuntu1.3 (Accepted) Message-ID: <20111110061112.7247.23516.launchpad@gac.canonical.com> papyon (0.5.5-1ubuntu1.3) natty-proposed; urgency=low * Fix login failure due to trying to interact to an obsolete server (LP: #887349). Date: Tue, 08 Nov 2011 16:52:25 +0100 Changed-By: Jean-Louis Dupond Maintainer: Devid Antonio Filoni Signed-By: Ken VanDine https://launchpad.net/ubuntu/natty/+source/papyon/0.5.5-1ubuntu1.3 -------------- next part -------------- Format: 1.8 Date: Tue, 08 Nov 2011 16:52:25 +0100 Source: papyon Binary: python-papyon Architecture: source Version: 0.5.5-1ubuntu1.3 Distribution: natty-proposed Urgency: low Maintainer: Devid Antonio Filoni Changed-By: Jean-Louis Dupond Description: python-papyon - MSN client library written in Python Launchpad-Bugs-Fixed: 887349 Changes: papyon (0.5.5-1ubuntu1.3) natty-proposed; urgency=low . * Fix login failure due to trying to interact to an obsolete server (LP: #887349). Checksums-Sha1: b64022959f61a20120842048b38497635e04146e 1478 papyon_0.5.5-1ubuntu1.3.dsc 518aa232d6396c113e6d71818d2c0225917699ec 4408 papyon_0.5.5-1ubuntu1.3.diff.gz Checksums-Sha256: 3ae9d47b0dc5e6bab303d56e10368cf81e02821bb661974d0753e710b54af997 1478 papyon_0.5.5-1ubuntu1.3.dsc 806fbe9adfaf696acc610d8cf6bada2962cd46a1113a215c71c643b79ffda0f2 4408 papyon_0.5.5-1ubuntu1.3.diff.gz Files: 7734b8427b11bb5cac5fbda4fc79e7f7 1478 python optional papyon_0.5.5-1ubuntu1.3.dsc 5ba5007cc3227c3873c1675be9d1d404 4408 python optional papyon_0.5.5-1ubuntu1.3.diff.gz From serge.hallyn at ubuntu.com Thu Nov 10 06:11:43 2011 From: serge.hallyn at ubuntu.com (Serge Hallyn) Date: Thu, 10 Nov 2011 06:11:43 -0000 Subject: [ubuntu/natty-proposed] libcap2 1:2.20-1ubuntu1 (Accepted) Message-ID: <20111110061143.6071.28030.launchpad@wampee.canonical.com> libcap2 (1:2.20-1ubuntu1) natty-proposed; urgency=low * debian/patches/0001-fix-Makefiles.patch: re-add dropped patch to link pam into pam_cap. (LP: #582769) Date: Tue, 08 Nov 2011 13:22:01 -0600 Changed-By: Serge Hallyn Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/libcap2/1:2.20-1ubuntu1 -------------- next part -------------- Format: 1.8 Date: Tue, 08 Nov 2011 13:22:01 -0600 Source: libcap2 Binary: libcap2-bin libcap2 libcap-dev Architecture: source Version: 1:2.20-1ubuntu1 Distribution: natty-proposed Urgency: low Maintainer: Ubuntu Developers Changed-By: Serge Hallyn Description: libcap-dev - development libraries and header files for libcap2 libcap2 - support for getting/setting POSIX.1e capabilities libcap2-bin - basic utility programs for using capabilities Launchpad-Bugs-Fixed: 582769 Changes: libcap2 (1:2.20-1ubuntu1) natty-proposed; urgency=low . * debian/patches/0001-fix-Makefiles.patch: re-add dropped patch to link pam into pam_cap. (LP: #582769) Checksums-Sha1: 4d76a8905a30868309f75b4ada0dbb514823e1c3 1588 libcap2_2.20-1ubuntu1.dsc 575f543e74f2d2a42aba63d6f41d0058bb1b5ea8 7344 libcap2_2.20-1ubuntu1.debian.tar.gz Checksums-Sha256: 2f1f6472e8c061fe5894a3faa698893a5b80afcd4a4dbbd9654350db14acc89f 1588 libcap2_2.20-1ubuntu1.dsc a02b46cf62bcc6f7c5f11859e45c3ce445d5e12969dfb3773f2a82e9ee4be103 7344 libcap2_2.20-1ubuntu1.debian.tar.gz Files: cc913e848b7de406ad817726c0bc6bb4 1588 libs optional libcap2_2.20-1ubuntu1.dsc a1bbf621cc40b872d2e42aa424d9efdf 7344 libs optional libcap2_2.20-1ubuntu1.debian.tar.gz Original-Maintainer: Torsten Werner From sarvatt at ubuntu.com Thu Nov 10 06:12:07 2011 From: sarvatt at ubuntu.com (Robert Hooker) Date: Thu, 10 Nov 2011 06:12:07 -0000 Subject: [ubuntu/natty-proposed] xserver-xorg-video-intel 2:2.14.0-4ubuntu7.3 (Accepted) Message-ID: <20111110061207.6923.74113.launchpad@chaenomeles.canonical.com> xserver-xorg-video-intel (2:2.14.0-4ubuntu7.3) natty-proposed; urgency=low * Add 103_remove_surface_binding_cache.patch: Backport of upstream commit 2174f8401 to fix transparency on LTSP. (LP: #785280) Date: Thu, 03 Nov 2011 19:10:25 -0400 Changed-By: Robert Hooker Maintainer: Ubuntu Developers Signed-By: Timo Aaltonen https://launchpad.net/ubuntu/natty/+source/xserver-xorg-video-intel/2:2.14.0-4ubuntu7.3 -------------- next part -------------- Format: 1.8 Date: Thu, 03 Nov 2011 19:10:25 -0400 Source: xserver-xorg-video-intel Binary: xserver-xorg-video-intel xserver-xorg-video-intel-dbg Architecture: source Version: 2:2.14.0-4ubuntu7.3 Distribution: natty-proposed Urgency: low Maintainer: Ubuntu Developers Changed-By: Robert Hooker Description: xserver-xorg-video-intel - X.Org X server -- Intel i8xx, i9xx display driver xserver-xorg-video-intel-dbg - X.Org X server -- Intel i8xx, i9xx display driver (debug symbols) Launchpad-Bugs-Fixed: 785280 Changes: xserver-xorg-video-intel (2:2.14.0-4ubuntu7.3) natty-proposed; urgency=low . * Add 103_remove_surface_binding_cache.patch: Backport of upstream commit 2174f8401 to fix transparency on LTSP. (LP: #785280) Checksums-Sha1: 69e4880d47907903fbc719a31415b69e967f49e6 2066 xserver-xorg-video-intel_2.14.0-4ubuntu7.3.dsc ceedff38447e99419db84466ac0e0f13d766ebba 1251538 xserver-xorg-video-intel_2.14.0.orig.tar.gz de8ecf8c1e3a8a7cd739f3fcf76c20546752f568 57266 xserver-xorg-video-intel_2.14.0-4ubuntu7.3.diff.gz Checksums-Sha256: 4dd467d847c3529223f76e8aafe8276594620bce8b2aaf32f45111b79249b0e4 2066 xserver-xorg-video-intel_2.14.0-4ubuntu7.3.dsc 21ce6730deda4a8060df91c63e0d132bea9afdf3fb8a729b29c06b88023d42ba 1251538 xserver-xorg-video-intel_2.14.0.orig.tar.gz 2f3f8d5974c85d99a3e4b4cfb76295c6eae1694c90b2a8dfbf253304274f1322 57266 xserver-xorg-video-intel_2.14.0-4ubuntu7.3.diff.gz Files: e053c7d6433663266f0140b12fa4d255 2066 x11 optional xserver-xorg-video-intel_2.14.0-4ubuntu7.3.dsc 83ae6bc074094433d0cdf147582218ae 1251538 x11 optional xserver-xorg-video-intel_2.14.0.orig.tar.gz 887f4f1169c4791253dbd3000b2a983a 57266 x11 optional xserver-xorg-video-intel_2.14.0-4ubuntu7.3.diff.gz Original-Maintainer: Debian X Strike Force From mattias.ellert at fysast.uu.se Thu Nov 10 06:12:33 2011 From: mattias.ellert at fysast.uu.se (Mattias Ellert) Date: Thu, 10 Nov 2011 06:12:33 -0000 Subject: [ubuntu/natty-proposed] globus-gssapi-gsi 7.5-2ubuntu0.11.04.1 (Accepted) Message-ID: <20111110061233.12466.99672.launchpad@soybean.canonical.com> globus-gssapi-gsi (7.5-2ubuntu0.11.04.1) natty-proposed; urgency=low * Rebuild for openssl >= 0.9.8m (LP: #703897) Date: Thu, 13 Oct 2011 06:19:36 +0200 Changed-By: Mattias Ellert Maintainer: Ubuntu Developers Signed-By: Jamie Strandboge https://launchpad.net/ubuntu/natty/+source/globus-gssapi-gsi/7.5-2ubuntu0.11.04.1 -------------- next part -------------- Format: 1.8 Date: Thu, 13 Oct 2011 06:19:36 +0200 Source: globus-gssapi-gsi Binary: libglobus-gssapi-gsi4 libglobus-gssapi-gsi-dev libglobus-gssapi-gsi-doc globus-gssapi-gsi-dbg Architecture: source Version: 7.5-2ubuntu0.11.04.1 Distribution: natty-proposed Urgency: low Maintainer: Ubuntu Developers Changed-By: Mattias Ellert Description: globus-gssapi-gsi-dbg - Globus Toolkit - GSSAPI library Debug Symbols libglobus-gssapi-gsi-dev - Globus Toolkit - GSSAPI library Development Files libglobus-gssapi-gsi-doc - Globus Toolkit - GSSAPI library Documentation Files libglobus-gssapi-gsi4 - Globus Toolkit - GSSAPI library Launchpad-Bugs-Fixed: 703897 Changes: globus-gssapi-gsi (7.5-2ubuntu0.11.04.1) natty-proposed; urgency=low . * Rebuild for openssl >= 0.9.8m (LP: #703897) Checksums-Sha1: 64025c9452eb305411a8038b172d2933fe61fc12 2636 globus-gssapi-gsi_7.5-2ubuntu0.11.04.1.dsc 4eb25c03239e8f02340a51570282f29bb7c7d900 4602 globus-gssapi-gsi_7.5-2ubuntu0.11.04.1.debian.tar.gz Checksums-Sha256: 795f697935e39738b9e30e46c95606ace26358436a61d17bd830ccd509ebc033 2636 globus-gssapi-gsi_7.5-2ubuntu0.11.04.1.dsc 6d67d431aafc9a6f574d9dcf122075e1fa62edeb623196716c4b16345e6c593f 4602 globus-gssapi-gsi_7.5-2ubuntu0.11.04.1.debian.tar.gz Files: 338a256c069091f22586e4588cd4c778 2636 net optional globus-gssapi-gsi_7.5-2ubuntu0.11.04.1.dsc 90e9e4124949f460109f3a51cbcc081e 4602 net optional globus-gssapi-gsi_7.5-2ubuntu0.11.04.1.debian.tar.gz Original-Maintainer: Mattias Ellert From marc.deslauriers at ubuntu.com Thu Nov 10 17:03:31 2011 From: marc.deslauriers at ubuntu.com (Marc Deslauriers) Date: Thu, 10 Nov 2011 17:03:31 -0000 Subject: [ubuntu/natty-security] radvd 1:1.7-1ubuntu0.1 (Accepted) Message-ID: <20111110170331.3673.13952.launchpad@cocoplum.canonical.com> radvd (1:1.7-1ubuntu0.1) natty-security; urgency=low * SECURITY UPDATE: privilege escalation via buffer overflow in ND_OPT_DNSSL_INFORMATION option parsing - debian/patches/CVE-2011-3601.patch: don't overflow int in process.c. - CVE-2011-3601 * SECURITY UPDATE: arbitrary file overwrite via interface name - debian/patches/CVE-2011-3602.patch: check for path traversal in device-linux.c. - CVE-2011-3602 * SECURITY UPDATE: incorrect privilege dropping handling - debian/patches/CVE-2011-3603.patch: fail on errors in privsep-linux.c, radvd.c. - CVE-2011-3603 * SECURITY UPDATE: denial or service via buffer overreads - debian/patches/CVE-2011-3604.patch: properly check length in process.c. - CVE-2011-3604 * SECURITY UPDATE: temporary denial of service via delay - debian/patches/CVE-2011-3605.patch: remove delay in process.c. - CVE-2011-3605 Date: Wed, 12 Oct 2011 09:46:52 -0400 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/radvd/1:1.7-1ubuntu0.1 -------------- next part -------------- Format: 1.8 Date: Wed, 12 Oct 2011 09:46:52 -0400 Source: radvd Binary: radvd Architecture: source Version: 1:1.7-1ubuntu0.1 Distribution: natty-security Urgency: low Maintainer: Ubuntu Developers Changed-By: Marc Deslauriers Description: radvd - Router Advertisement Daemon Changes: radvd (1:1.7-1ubuntu0.1) natty-security; urgency=low . * SECURITY UPDATE: privilege escalation via buffer overflow in ND_OPT_DNSSL_INFORMATION option parsing - debian/patches/CVE-2011-3601.patch: don't overflow int in process.c. - CVE-2011-3601 * SECURITY UPDATE: arbitrary file overwrite via interface name - debian/patches/CVE-2011-3602.patch: check for path traversal in device-linux.c. - CVE-2011-3602 * SECURITY UPDATE: incorrect privilege dropping handling - debian/patches/CVE-2011-3603.patch: fail on errors in privsep-linux.c, radvd.c. - CVE-2011-3603 * SECURITY UPDATE: denial or service via buffer overreads - debian/patches/CVE-2011-3604.patch: properly check length in process.c. - CVE-2011-3604 * SECURITY UPDATE: temporary denial of service via delay - debian/patches/CVE-2011-3605.patch: remove delay in process.c. - CVE-2011-3605 Checksums-Sha1: 27745de935378c1b0f84f6d066717c20e87b9176 1700 radvd_1.7-1ubuntu0.1.dsc d58f05f9b12294fcb19edfa410b63ba0f4de4368 10008 radvd_1.7-1ubuntu0.1.diff.gz Checksums-Sha256: 50261198e1b634133d57af7b3cd97c59e5d0dca202b9b318b807c8276653c45a 1700 radvd_1.7-1ubuntu0.1.dsc 91a7e6d22c4de9604a36fed2ec98df42e1e844496a1806dc501af2057e30e3ab 10008 radvd_1.7-1ubuntu0.1.diff.gz Files: 34c8c256b68ec82c73ab96f372c88854 1700 net optional radvd_1.7-1ubuntu0.1.dsc 2dd4aa4416c90dafc5bc4a7b459e82df 10008 net optional radvd_1.7-1ubuntu0.1.diff.gz Original-Maintainer: Ghe Rivero From jamie at ubuntu.com Thu Nov 10 18:04:10 2011 From: jamie at ubuntu.com (Jamie Strandboge) Date: Thu, 10 Nov 2011 18:04:10 -0000 Subject: [ubuntu/natty-security] clamav_0.97.3+dfsg-1ubuntu0.11.04.1_powerpc_translations.tar.gz, clamav_0.97.3+dfsg-1ubuntu0.11.04.1_armel_translations.tar.gz, clamav, clamav_0.97.3+dfsg-1ubuntu0.11.04.1_i386_translations.tar.gz, clamav_0.97.3+dfsg-1ubuntu0.11.04.1_amd64_translations.tar.gz 0.97.3+dfsg-1ubuntu0.11.04.1 (Accepted) Message-ID: <20111110180410.26059.6753.launchpad@cocoplum.canonical.com> clamav (0.97.3+dfsg-1ubuntu0.11.04.1) natty-security; urgency=low * SECURITY UPDATE: no change rebuild for security pocket - CVE-2011-3627 clamav (0.97.3+dfsg-1ubuntu0.11.04) natty-proposed; urgency=low * Update to new clamav version per microversion release exception (LP: #882031) clamav (0.97.3+dfsg-1ubuntu1) precise; urgency=low * Merge from Debian unstable. Remaining changes: - Drop build-dep on electric-fence (in Universe) - Add apparmor profiles for clamd and freshclam along with maintainer script changes clamav (0.97.3+dfsg-1) unstable; urgency=medium [ Michael Tautschnig ] * New upstream release: Fixes potential DoS clamav (0.97.2+dfsg-1ubuntu2) oneiric; urgency=low [ Imre Gergely ] * Fix clamd apparmor profile to work with mimedefang (LP: #829089) * Stop samba related log spamming from freshclam apparmor profile (LP: #752833) clamav (0.97.2+dfsg-1ubuntu1) oneiric; urgency=low * Merge from Debian unstable. Remaining changes: - Drop build-dep on electric-fence (in Universe) - Add apparmor profiles for clamd and freshclam along with maintainer script changes clamav (0.97.2+dfsg-1) unstable; urgency=low [ Michael Tautschnig ] * New upstream release - Fixes off-by-one-error (closes: #635599) - Fixes opcode 20 is not implemented error (closes: #635340) - New option ExtraDatabase for freshclam * Debconf translation updates - Portuguese (closes: #630954) - French (closes: #631978) - Swedish (closes: #632144) - Danish (closes: #632558) - Spanish (closes: #633883) - Russian (closes: #635145) clamav (0.97.1+dfsg-1ubuntu3) oneiric; urgency=low * SECURITY UPDATE: denial of service via hash manager off-by-one - libclamav/matcher-hash.c: fix count. - http://git.clamav.net/gitweb?p=clamav-devel.git;a=commit;h=4842733eb3f09be61caeed83778bb6679141dbc5 - CVE-2011-2721 clamav (0.97.1+dfsg-1ubuntu2) oneiric; urgency=low * adjust AppArmor profile for /var/run -> /run (LP: #810270) clamav (0.97.1+dfsg-1ubuntu1) oneiric; urgency=low * Merge from debian unstable. Remaining changes: - Drop build-dep on electric-fence (in Universe) - Add apparmor profiles for clamd and freshclam along with maintainer script changes clamav (0.97.1+dfsg-1) unstable; urgency=low [ Michael Tautschnig ] * New upstream release - New option ClamukoExcludeUID for clamd * Added debconf question for clamav-milter/LogClean (closes: #617890). * Clarified text about clamav-milter's temporary directory in debconf question (closes: #617889). * Debconf translation updates - Japanese (closes: #624802) * Remove references to other libraries from dependency_libs field (closes: #621206). Thanks Luk Claes for the patch. * Added doc-base file to clamav-docs (closes: #629357). Thanks John Vogel. * Bumped Standards-Version to 3.9.2, no changes needed. [ Stephen Gran ] * Update README.Debian to reflect reality for the milter (closes: #597048) Date: Tue, 08 Nov 2011 10:28:26 -0600 Changed-By: Jamie Strandboge Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/clamav/0.97.3+dfsg-1ubuntu0.11.04.1 -------------- next part -------------- Format: 1.8 Date: Tue, 08 Nov 2011 10:28:26 -0600 Source: clamav Binary: clamav-base clamav-docs clamav-dbg clamav libclamav-dev libclamav6 clamav-daemon clamav-testfiles clamav-freshclam clamav-milter Architecture: source Version: 0.97.3+dfsg-1ubuntu0.11.04.1 Distribution: natty-security Urgency: medium Maintainer: Ubuntu Developers Changed-By: Jamie Strandboge Description: clamav - anti-virus utility for Unix - command-line interface clamav-base - anti-virus utility for Unix - base package clamav-daemon - anti-virus utility for Unix - scanner daemon clamav-dbg - debug symbols for ClamAV clamav-docs - anti-virus utility for Unix - documentation clamav-freshclam - anti-virus utility for Unix - virus database update utility clamav-milter - anti-virus utility for Unix - sendmail integration clamav-testfiles - anti-virus utility for Unix - test files libclamav-dev - anti-virus utility for Unix - development files libclamav6 - anti-virus utility for Unix - library Closes: 597048 617889 617890 621206 624802 629357 630954 631978 632144 632558 633883 635145 635340 635599 Launchpad-Bugs-Fixed: 752833 810270 829089 882031 Changes: clamav (0.97.3+dfsg-1ubuntu0.11.04.1) natty-security; urgency=low . * SECURITY UPDATE: no change rebuild for security pocket - CVE-2011-3627 . clamav (0.97.3+dfsg-1ubuntu0.11.04) natty-proposed; urgency=low . * Update to new clamav version per microversion release exception (LP: #882031) . clamav (0.97.3+dfsg-1ubuntu1) precise; urgency=low . * Merge from Debian unstable. Remaining changes: - Drop build-dep on electric-fence (in Universe) - Add apparmor profiles for clamd and freshclam along with maintainer script changes . clamav (0.97.3+dfsg-1) unstable; urgency=medium . [ Michael Tautschnig ] * New upstream release: Fixes potential DoS . clamav (0.97.2+dfsg-1ubuntu2) oneiric; urgency=low . [ Imre Gergely ] * Fix clamd apparmor profile to work with mimedefang (LP: #829089) * Stop samba related log spamming from freshclam apparmor profile (LP: #752833) . clamav (0.97.2+dfsg-1ubuntu1) oneiric; urgency=low . * Merge from Debian unstable. Remaining changes: - Drop build-dep on electric-fence (in Universe) - Add apparmor profiles for clamd and freshclam along with maintainer script changes . clamav (0.97.2+dfsg-1) unstable; urgency=low . [ Michael Tautschnig ] * New upstream release - Fixes off-by-one-error (closes: #635599) - Fixes opcode 20 is not implemented error (closes: #635340) - New option ExtraDatabase for freshclam * Debconf translation updates - Portuguese (closes: #630954) - French (closes: #631978) - Swedish (closes: #632144) - Danish (closes: #632558) - Spanish (closes: #633883) - Russian (closes: #635145) . clamav (0.97.1+dfsg-1ubuntu3) oneiric; urgency=low . * SECURITY UPDATE: denial of service via hash manager off-by-one - libclamav/matcher-hash.c: fix count. - http://git.clamav.net/gitweb?p=clamav-devel.git;a=commit;h=4842733eb3f09be61caeed83778bb6679141dbc5 - CVE-2011-2721 . clamav (0.97.1+dfsg-1ubuntu2) oneiric; urgency=low . * adjust AppArmor profile for /var/run -> /run (LP: #810270) . clamav (0.97.1+dfsg-1ubuntu1) oneiric; urgency=low . * Merge from debian unstable. Remaining changes: - Drop build-dep on electric-fence (in Universe) - Add apparmor profiles for clamd and freshclam along with maintainer script changes . clamav (0.97.1+dfsg-1) unstable; urgency=low . [ Michael Tautschnig ] * New upstream release - New option ClamukoExcludeUID for clamd * Added debconf question for clamav-milter/LogClean (closes: #617890). * Clarified text about clamav-milter's temporary directory in debconf question (closes: #617889). * Debconf translation updates - Japanese (closes: #624802) * Remove references to other libraries from dependency_libs field (closes: #621206). Thanks Luk Claes for the patch. * Added doc-base file to clamav-docs (closes: #629357). Thanks John Vogel. * Bumped Standards-Version to 3.9.2, no changes needed. . [ Stephen Gran ] * Update README.Debian to reflect reality for the milter (closes: #597048) Checksums-Sha1: 30017b8f6b359c29457ef89a830560fb09f47674 2315 clamav_0.97.3+dfsg-1ubuntu0.11.04.1.dsc 935319bd1eba2c06bec978d59d7bff60eb5e2beb 294478 clamav_0.97.3+dfsg-1ubuntu0.11.04.1.diff.gz Checksums-Sha256: 0e32fdcd55f56d94104949eca263509021038f5d64811ee06141d7deb3821369 2315 clamav_0.97.3+dfsg-1ubuntu0.11.04.1.dsc 0a25e935035b78bb5b0f564aee9b9ea34d7a44573124d0bc0852c417e897dc8a 294478 clamav_0.97.3+dfsg-1ubuntu0.11.04.1.diff.gz Files: 26564417d5b96de81b5d662c0cbefb7d 2315 utils optional clamav_0.97.3+dfsg-1ubuntu0.11.04.1.dsc 0d539e52d266c4e49c7ec632add145d2 294478 utils optional clamav_0.97.3+dfsg-1ubuntu0.11.04.1.diff.gz Original-Maintainer: ClamAV Team From sbeattie at ubuntu.com Thu Nov 10 22:03:38 2011 From: sbeattie at ubuntu.com (Steve Beattie) Date: Thu, 10 Nov 2011 22:03:38 -0000 Subject: [ubuntu/natty-security] apache2 2.2.17-1ubuntu1.4 (Accepted) Message-ID: <20111110220338.15026.41559.launchpad@cocoplum.canonical.com> apache2 (2.2.17-1ubuntu1.4) natty-security; urgency=low * SECURITY UPDATE: mod_proxy reverse proxy exposure (LP: #877740) - debian/patches/212_CVE-2011-3368.dpatch: return 400 on invalid requests. (patch courtesy of Michael Jeanson) - debian/patches/214_CVE-2011-3368_part2.dpatch: fix same for http 0.9 protocol - CVE-2011-3368 * SECURITY UPDATE: mod_proxy_ajp denial of service (LP: #871674) - debian/patches/213_CVE-2011-3348.dpatch: return HTTP_NOT_IMPLEMENTED when AJP_EBAD_METHOD is requested - CVE-2011-3348 * SECURITY UPDATE: mpm-itk failure to drop privileges in certain configurations - debian/mpm-itk/patches/11-CVE-2011-1176.patch: merge configurations correctly - CVE-2011-1176 * Include additional fixes for regressions introduced by CVE-2011-3192 fixes - debian/patches/084_CVE-2011-3192_regression_part2.dpatch: take upstream fixes for byterange_filter.c through the 2.2.21 release except for the added MaxRanges configuration option along with a fix staged for 2.2.22. Date: Wed, 02 Nov 2011 17:21:04 -0700 Changed-By: Steve Beattie Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/apache2/2.2.17-1ubuntu1.4 -------------- next part -------------- Format: 1.8 Date: Wed, 02 Nov 2011 17:21:04 -0700 Source: apache2 Binary: apache2.2-common apache2.2-bin apache2-mpm-worker apache2-mpm-prefork apache2-mpm-event apache2-mpm-itk apache2-utils apache2-suexec apache2-suexec-custom apache2 apache2-doc apache2-prefork-dev apache2-threaded-dev apache2-dbg Architecture: source Version: 2.2.17-1ubuntu1.4 Distribution: natty-security Urgency: low Maintainer: Ubuntu Developers Changed-By: Steve Beattie Description: apache2 - Apache HTTP Server metapackage apache2-dbg - Apache debugging symbols apache2-doc - Apache HTTP Server documentation apache2-mpm-event - Apache HTTP Server - event driven model apache2-mpm-itk - multiuser MPM for Apache 2.2 apache2-mpm-prefork - Apache HTTP Server - traditional non-threaded model apache2-mpm-worker - Apache HTTP Server - high speed threaded model apache2-prefork-dev - Apache development headers - non-threaded MPM apache2-suexec - Standard suexec program for Apache 2 mod_suexec apache2-suexec-custom - Configurable suexec program for Apache 2 mod_suexec apache2-threaded-dev - Apache development headers - threaded MPM apache2-utils - utility programs for webservers apache2.2-bin - Apache HTTP Server common binary files apache2.2-common - Apache HTTP Server common files Launchpad-Bugs-Fixed: 871674 877740 Changes: apache2 (2.2.17-1ubuntu1.4) natty-security; urgency=low . * SECURITY UPDATE: mod_proxy reverse proxy exposure (LP: #877740) - debian/patches/212_CVE-2011-3368.dpatch: return 400 on invalid requests. (patch courtesy of Michael Jeanson) - debian/patches/214_CVE-2011-3368_part2.dpatch: fix same for http 0.9 protocol - CVE-2011-3368 * SECURITY UPDATE: mod_proxy_ajp denial of service (LP: #871674) - debian/patches/213_CVE-2011-3348.dpatch: return HTTP_NOT_IMPLEMENTED when AJP_EBAD_METHOD is requested - CVE-2011-3348 * SECURITY UPDATE: mpm-itk failure to drop privileges in certain configurations - debian/mpm-itk/patches/11-CVE-2011-1176.patch: merge configurations correctly - CVE-2011-1176 * Include additional fixes for regressions introduced by CVE-2011-3192 fixes - debian/patches/084_CVE-2011-3192_regression_part2.dpatch: take upstream fixes for byterange_filter.c through the 2.2.21 release except for the added MaxRanges configuration option along with a fix staged for 2.2.22. Checksums-Sha1: 94de28c124c593810670ed704dc926dce2bbf8a8 2628 apache2_2.2.17-1ubuntu1.4.dsc 488a52a48cfd334319bd388ec64282a59aff9218 221087 apache2_2.2.17-1ubuntu1.4.diff.gz Checksums-Sha256: 3a1d33969862cd8b913a9589aa5c6f30fc2aab3ce227cacea58630bbf077d9a6 2628 apache2_2.2.17-1ubuntu1.4.dsc 48988ab39cbf1f4c16733903405cf50fd637004c2d4b65343633d807525f57c7 221087 apache2_2.2.17-1ubuntu1.4.diff.gz Files: bd06bc4ce9970cf1bfb281d0b8088d77 2628 httpd optional apache2_2.2.17-1ubuntu1.4.dsc a76cd8eb9a36cd48a9dc943ae3c7e34f 221087 httpd optional apache2_2.2.17-1ubuntu1.4.diff.gz Original-Maintainer: Debian Apache Maintainers Original-Vcs-Browser: http://svn.debian.org/wsvn/pkg-apache/trunk/apache2 Original-Vcs-Svn: svn://svn.debian.org/pkg-apache/trunk/apache2 From brian.thomason at canonical.com Thu Nov 10 22:10:27 2011 From: brian.thomason at canonical.com (Brian Thomason) Date: Thu, 10 Nov 2011 22:10:27 -0000 Subject: [ubuntu/natty] adobe-flashplugin 11.1.102.55-0natty1 (Accepted) Message-ID: <20111110221027.16808.8610.launchpad@cocoplum.canonical.com> adobe-flashplugin (11.1.102.55-0natty1) natty; urgency=low * Initial release of 11.1.102.55 for Natty Date: Thu, 10 Nov 2011 16:44:21 -0500 Changed-By: Brian Thomason Maintainer: DL-Flash Player Ubuntu https://launchpad.net/ubuntu/natty/+source/adobe-flashplugin/11.1.102.55-0natty1 -------------- next part -------------- -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Thu, 10 Nov 2011 16:44:21 -0500 Source: adobe-flashplugin Binary: adobe-flashplugin adobe-flash-properties-gtk adobe-flash-properties-kde Architecture: source Version: 11.1.102.55-0natty1 Distribution: natty Urgency: low Maintainer: DL-Flash Player Ubuntu Changed-By: Brian Thomason Description: adobe-flash-properties-gtk - GTK+ control panel for Adobe Flash Player plugin version 11 adobe-flash-properties-kde - KDE control panel Adobe Flash Player plugin version 11 adobe-flashplugin - Adobe Flash Player plugin version 11 Changes: adobe-flashplugin (11.1.102.55-0natty1) natty; urgency=low . * Initial release of 11.1.102.55 for Natty Checksums-Sha1: 0096975a60ad20578a2fa2e2845d0ccdeab02a75 1267 adobe-flashplugin_11.1.102.55-0natty1.dsc f3dae287c83d436f7dd3dec15bdf242882f915b4 4799 adobe-flashplugin_11.1.102.55-0natty1.diff.gz Checksums-Sha256: a3f9dfdab76c7461dbf57e689c50c4910a179960498b7646d60373753762e9fa 1267 adobe-flashplugin_11.1.102.55-0natty1.dsc 48676ca07e39cecd847af3566525a75b99164d7359cb85b0df7e1a63fd0c774e 4799 adobe-flashplugin_11.1.102.55-0natty1.diff.gz Files: c47e92215e7179082384ba8e46390c5c 1267 partner/web optional adobe-flashplugin_11.1.102.55-0natty1.dsc 397516778fd245249f3c808ac62d2132 4799 partner/web optional adobe-flashplugin_11.1.102.55-0natty1.diff.gz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iEYEARECAAYFAk68RcQACgkQOb4zNfJqN5e8gwCdFhZvnWVQmH41O83f3sRScTwG RGMAoJdt3RaK1YdF4/59u2455YzYhNif =7i0Q -----END PGP SIGNATURE----- From marc.deslauriers at ubuntu.com Fri Nov 11 18:03:40 2011 From: marc.deslauriers at ubuntu.com (Marc Deslauriers) Date: Fri, 11 Nov 2011 18:03:40 -0000 Subject: [ubuntu/natty-security] flashplugin-nonfree, flashplugin-nonfree_11.1.102.55ubuntu0.11.04.1_amd64_translations.tar.gz, flashplugin-nonfree_11.1.102.55ubuntu0.11.04.1_i386_translations.tar.gz 11.1.102.55ubuntu0.11.04.1 (Accepted) Message-ID: <20111111180340.21598.55026.launchpad@cocoplum.canonical.com> flashplugin-nonfree (11.1.102.55ubuntu0.11.04.1) natty-security; urgency=low * New upstream release 11.1.102.55 - debian/config, debian/postinst: Updated sha256sums and version. - CVE-2011-2445 - CVE-2011-2450 - CVE-2011-2451 - CVE-2011-2452 - CVE-2011-2453 - CVE-2011-2454 - CVE-2011-2455 - CVE-2011-2456 - CVE-2011-2457 - CVE-2011-2458 - CVE-2011-2459 - CVE-2011-2460 Date: Fri, 11 Nov 2011 08:46:23 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/flashplugin-nonfree/11.1.102.55ubuntu0.11.04.1 -------------- next part -------------- Format: 1.8 Date: Fri, 11 Nov 2011 08:46:23 -0500 Source: flashplugin-nonfree Binary: flashplugin-installer flashplugin-nonfree Architecture: source Version: 11.1.102.55ubuntu0.11.04.1 Distribution: natty-security Urgency: low Maintainer: Ubuntu Developers Changed-By: Marc Deslauriers Description: flashplugin-installer - Adobe Flash Player plugin installer flashplugin-nonfree - Adobe Flash Player plugin installer (transitional package) Changes: flashplugin-nonfree (11.1.102.55ubuntu0.11.04.1) natty-security; urgency=low . * New upstream release 11.1.102.55 - debian/config, debian/postinst: Updated sha256sums and version. - CVE-2011-2445 - CVE-2011-2450 - CVE-2011-2451 - CVE-2011-2452 - CVE-2011-2453 - CVE-2011-2454 - CVE-2011-2455 - CVE-2011-2456 - CVE-2011-2457 - CVE-2011-2458 - CVE-2011-2459 - CVE-2011-2460 Checksums-Sha1: d705bb040e32b735d192766624a0858f30420345 1639 flashplugin-nonfree_11.1.102.55ubuntu0.11.04.1.dsc 97eb3ac180127439d1e4e647797f42de3c861829 27678 flashplugin-nonfree_11.1.102.55ubuntu0.11.04.1.tar.gz Checksums-Sha256: da67f13c11fa227fe8763691fa5875f9eab09c430993ea0821813ab818710151 1639 flashplugin-nonfree_11.1.102.55ubuntu0.11.04.1.dsc 25122abb2f15c4c0fdc90cd970245716170b3d2ffba4a3e4df63f7aacc862dd6 27678 flashplugin-nonfree_11.1.102.55ubuntu0.11.04.1.tar.gz Files: acf7d47f36f48716b045b62541d30cb7 1639 contrib/web optional flashplugin-nonfree_11.1.102.55ubuntu0.11.04.1.dsc fa867fc39e64982848464a54d8405f20 27678 contrib/web optional flashplugin-nonfree_11.1.102.55ubuntu0.11.04.1.tar.gz Original-Maintainer: Bart Martens From jean-louis at dupond.be Mon Nov 14 06:00:33 2011 From: jean-louis at dupond.be (Jean-Louis Dupond) Date: Mon, 14 Nov 2011 06:00:33 -0000 Subject: [ubuntu/natty-proposed] papyon 0.5.5-1ubuntu1.4 (Accepted) Message-ID: <20111114060033.27237.86836.launchpad@gac.canonical.com> papyon (0.5.5-1ubuntu1.4) natty-proposed; urgency=low * Allow HTTP redirection and use correct AB server. (LP: #887349) Date: Thu, 10 Nov 2011 18:11:53 +0100 Changed-By: Jean-Louis Dupond Maintainer: Devid Antonio Filoni Signed-By: Martin Pitt https://launchpad.net/ubuntu/natty/+source/papyon/0.5.5-1ubuntu1.4 -------------- next part -------------- Format: 1.8 Date: Thu, 10 Nov 2011 18:11:53 +0100 Source: papyon Binary: python-papyon Architecture: source Version: 0.5.5-1ubuntu1.4 Distribution: natty-proposed Urgency: low Maintainer: Devid Antonio Filoni Changed-By: Jean-Louis Dupond Description: python-papyon - MSN client library written in Python Launchpad-Bugs-Fixed: 887349 Changes: papyon (0.5.5-1ubuntu1.4) natty-proposed; urgency=low . * Allow HTTP redirection and use correct AB server. (LP: #887349) Checksums-Sha1: 315887a031be12b27b94d9c8fbe5c2cbf0304e85 2168 papyon_0.5.5-1ubuntu1.4.dsc 26a70c68adb1f19192e153914876e302228e7601 5501 papyon_0.5.5-1ubuntu1.4.diff.gz Checksums-Sha256: 034b71c92a59aa5b2d067cff163d4178184b5584898c84f6bee2e4c0679d45cc 2168 papyon_0.5.5-1ubuntu1.4.dsc 769a172e1b18679690c97b07313bd58cfae0637350e7c58f4034638cf57fd7db 5501 papyon_0.5.5-1ubuntu1.4.diff.gz Files: b0e226c692ef04b78a1ca157d4862658 2168 python optional papyon_0.5.5-1ubuntu1.4.dsc 6762dc124e2dd358cb5e27575d8c2a94 5501 python optional papyon_0.5.5-1ubuntu1.4.diff.gz From jriddell at ubuntu.com Mon Nov 14 09:58:51 2011 From: jriddell at ubuntu.com (Jonathan Riddell) Date: Mon, 14 Nov 2011 09:58:51 -0000 Subject: [ubuntu/natty-proposed] libmsn 4.1-1.2ubuntu1.2 (Accepted) Message-ID: <20111114095851.27443.61887.launchpad@soybean.canonical.com> libmsn (4.1-1.2ubuntu1.2) natty-proposed; urgency=low * Add kubuntu_01_msn_update.diff from upstream to fix connection to MSN LP: #887104 Date: Thu, 10 Nov 2011 22:12:22 +0000 Changed-By: Jonathan Riddell Maintainer: Pau Garcia i Quiles https://launchpad.net/ubuntu/natty/+source/libmsn/4.1-1.2ubuntu1.2 -------------- next part -------------- Format: 1.8 Date: Thu, 10 Nov 2011 22:12:22 +0000 Source: libmsn Binary: libmsn0.3 libmsn0.3-dbg libmsn-dev Architecture: source Version: 4.1-1.2ubuntu1.2 Distribution: natty-proposed Urgency: low Maintainer: Pau Garcia i Quiles Changed-By: Jonathan Riddell Description: libmsn-dev - high-level C++ library for MSN Messenger [devel] libmsn0.3 - high-level C++ library for MSN Messenger [runtime] libmsn0.3-dbg - high-level C++ library for MSN Messenger [debug] Launchpad-Bugs-Fixed: 887104 Changes: libmsn (4.1-1.2ubuntu1.2) natty-proposed; urgency=low . * Add kubuntu_01_msn_update.diff from upstream to fix connection to MSN LP: #887104 Checksums-Sha1: 3685c3acf29701785372f596b204ceec003127c2 1068 libmsn_4.1-1.2ubuntu1.2.dsc 12ea6724339c4daa8f9df1f4b5771dbbae9251f9 8691 libmsn_4.1-1.2ubuntu1.2.diff.gz Checksums-Sha256: 55c55988b77b445da27cc16a3424aa2353e49c23c52d46c82bf9db6861bdb767 1068 libmsn_4.1-1.2ubuntu1.2.dsc 2f490c5060893936823fa28c524a5a7bcf33cae4c11aa56b411edb7730b2902e 8691 libmsn_4.1-1.2ubuntu1.2.diff.gz Files: fe2c7ffdd52c89598dac5493d2add7e7 1068 libs optional libmsn_4.1-1.2ubuntu1.2.dsc ccd189a5e1b81c4ffae7358cf5d5fdc9 8691 libs optional libmsn_4.1-1.2ubuntu1.2.diff.gz From lfaraone at ubuntu.com Mon Nov 14 10:09:32 2011 From: lfaraone at ubuntu.com (Luke Faraone) Date: Mon, 14 Nov 2011 10:09:32 -0000 Subject: [ubuntu/natty-proposed] pithos 0.3.9-1~ubuntu4 (Accepted) Message-ID: <20111114100932.26928.87747.launchpad@soybean.canonical.com> pithos (0.3.9-1~ubuntu4) natty-proposed; urgency=low * Support protocol 33. (LP: #887886) * Modify dialogue which appears on future protocol breakages. Date: Thu, 10 Nov 2011 18:48:43 -0500 Changed-By: Luke Faraone https://launchpad.net/ubuntu/natty/+source/pithos/0.3.9-1~ubuntu4 -------------- next part -------------- Format: 1.8 Date: Thu, 10 Nov 2011 18:48:43 -0500 Source: pithos Binary: pithos Architecture: source Version: 0.3.9-1~ubuntu4 Distribution: natty-proposed Urgency: low Maintainer: Luke Faraone Changed-By: Luke Faraone Description: pithos - Pandora Radio client for the GNOME desktop Launchpad-Bugs-Fixed: 887886 Changes: pithos (0.3.9-1~ubuntu4) natty-proposed; urgency=low . * Support protocol 33. (LP: #887886) * Modify dialogue which appears on future protocol breakages. Checksums-Sha1: 35efff86d5f5eb45f405caad664af68633c07f27 1908 pithos_0.3.9-1~ubuntu4.dsc 0e26ac79c124314caa1bd5ff6c22c5157524296c 21022 pithos_0.3.9-1~ubuntu4.debian.tar.gz Checksums-Sha256: 65fd13eedd6fc13311b8421f82f181653ff078181a8519ef086fedeec6a8a47b 1908 pithos_0.3.9-1~ubuntu4.dsc e478313efdab3e4c7eeeb4946058cde53c1f07a8ddaa796edee2fb04bdb50318 21022 pithos_0.3.9-1~ubuntu4.debian.tar.gz Files: 68726b10acc1c3c6a252166e32acdb4d 1908 gnome optional pithos_0.3.9-1~ubuntu4.dsc 4060c96c0508d733ebe29e724c0e8cad 21022 gnome optional pithos_0.3.9-1~ubuntu4.debian.tar.gz From marc.deslauriers at ubuntu.com Mon Nov 14 19:03:27 2011 From: marc.deslauriers at ubuntu.com (Marc Deslauriers) Date: Mon, 14 Nov 2011 19:03:27 -0000 Subject: [ubuntu/natty-security] quagga, quagga_0.99.17-4ubuntu1.1_amd64_translations.tar.gz, quagga_0.99.17-4ubuntu1.1_powerpc_translations.tar.gz, quagga_0.99.17-4ubuntu1.1_i386_translations.tar.gz, quagga_0.99.17-4ubuntu1.1_armel_translations.tar.gz 0.99.17-4ubuntu1.1 (Accepted) Message-ID: <20111114190327.29949.43405.launchpad@cocoplum.canonical.com> quagga (0.99.17-4ubuntu1.1) natty-security; urgency=low * SECURITY UPDATE: arbitrary code execution via malformed Inter Area Prefix LSA - debian/patches/99_CVE-2011-3323.dpatch: check lengths in ospf6d/{ospf6_abr.h,ospf6_asbr.h,ospf6_intra.h,ospf6_lsa.h, ospf6_message.c,ospf6_message.h,ospf6_proto.h} - CVE-2011-3323 * SECURITY UPDATE: denial of sevice via crafted Link-State-Advertisement - debian/patches/99_CVE-2011-3324.dpatch: change assert to warning in ospf6d/ospf6_lsa.c. - CVE-2011-3324 * SECURITY UPDATE: denial of service via crafted Hello packet - debian/patches/99_CVE-2011-3325.dpatch: add extra checks to ospfd/ospf_packet.c. - CVE-2011-3325 * SECURITY UPDATE: denial of service via unknown Link-State-Advertisements types - debian/patches/99_CVE-2011-3326.dpatch: exit if LSA type is unknown in ospfd/ospf_flood.c. - CVE-2011-3326 * SECURITY UPDATE: arbitrary code execution via Extended Communities path attribute - debian/patches/99_CVE-2011-3327.dpatch: properly check size in bgpd/bgp_ecommunity.c. - CVE-2011-3327 Date: Fri, 07 Oct 2011 10:02:01 -0400 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/quagga/0.99.17-4ubuntu1.1 -------------- next part -------------- Format: 1.8 Date: Fri, 07 Oct 2011 10:02:01 -0400 Source: quagga Binary: quagga quagga-doc Architecture: source Version: 0.99.17-4ubuntu1.1 Distribution: natty-security Urgency: low Maintainer: Ubuntu Developers Changed-By: Marc Deslauriers Description: quagga - BGP/OSPF/RIP routing daemon quagga-doc - documentation files for quagga Changes: quagga (0.99.17-4ubuntu1.1) natty-security; urgency=low . * SECURITY UPDATE: arbitrary code execution via malformed Inter Area Prefix LSA - debian/patches/99_CVE-2011-3323.dpatch: check lengths in ospf6d/{ospf6_abr.h,ospf6_asbr.h,ospf6_intra.h,ospf6_lsa.h, ospf6_message.c,ospf6_message.h,ospf6_proto.h} - CVE-2011-3323 * SECURITY UPDATE: denial of sevice via crafted Link-State-Advertisement - debian/patches/99_CVE-2011-3324.dpatch: change assert to warning in ospf6d/ospf6_lsa.c. - CVE-2011-3324 * SECURITY UPDATE: denial of service via crafted Hello packet - debian/patches/99_CVE-2011-3325.dpatch: add extra checks to ospfd/ospf_packet.c. - CVE-2011-3325 * SECURITY UPDATE: denial of service via unknown Link-State-Advertisements types - debian/patches/99_CVE-2011-3326.dpatch: exit if LSA type is unknown in ospfd/ospf_flood.c. - CVE-2011-3326 * SECURITY UPDATE: arbitrary code execution via Extended Communities path attribute - debian/patches/99_CVE-2011-3327.dpatch: properly check size in bgpd/bgp_ecommunity.c. - CVE-2011-3327 Checksums-Sha1: 8c313bb5ce6a5476311a106e741fe577052c6f89 2052 quagga_0.99.17-4ubuntu1.1.dsc 72aac5f89a35f7a33b802fe187cbe1e2ee5100d4 45325 quagga_0.99.17-4ubuntu1.1.diff.gz Checksums-Sha256: 824872e90b86bf0b9f35f002b47c322b6bea96d24e15e3047e3c9e5cd6961866 2052 quagga_0.99.17-4ubuntu1.1.dsc 985c477d1011ac667f8da6d192c533ba27e358deb7541ca236b77e8f5e3a7ada 45325 quagga_0.99.17-4ubuntu1.1.diff.gz Files: 4dc57e1b7a06780bbe32118791efc713 2052 net optional quagga_0.99.17-4ubuntu1.1.dsc 76702d72ef06d6e140065e1ccd17d2d6 45325 net optional quagga_0.99.17-4ubuntu1.1.diff.gz Original-Maintainer: Christian Hammers From serge.hallyn at ubuntu.com Tue Nov 15 06:11:52 2011 From: serge.hallyn at ubuntu.com (Serge Hallyn) Date: Tue, 15 Nov 2011 06:11:52 -0000 Subject: [ubuntu/natty-proposed] libvirt 0.8.8-1ubuntu6.7 (Accepted) Message-ID: <20111115061152.22114.95318.launchpad@soybean.canonical.com> libvirt (0.8.8-1ubuntu6.7) natty-proposed; urgency=low * lxc_controller: use our own unlocpt+grantpt rather than glibc's, which can't handle opening a pty in a devpts not mounted at /dev/pts. (LP: #863629) Date: Tue, 01 Nov 2011 18:00:51 +0000 Changed-By: Serge Hallyn Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/libvirt/0.8.8-1ubuntu6.7 -------------- next part -------------- Format: 1.8 Date: Tue, 01 Nov 2011 18:00:51 +0000 Source: libvirt Binary: libvirt-bin libvirt0 libvirt0-dbg libvirt-doc libvirt-dev python-libvirt Architecture: source Version: 0.8.8-1ubuntu6.7 Distribution: natty-proposed Urgency: low Maintainer: Ubuntu Developers Changed-By: Serge Hallyn Description: libvirt-bin - the programs for the libvirt library libvirt-dev - development files for the libvirt library libvirt-doc - documentation for the libvirt library libvirt0 - library for interfacing with different virtualization systems libvirt0-dbg - library for interfacing with different virtualization systems python-libvirt - libvirt Python bindings Launchpad-Bugs-Fixed: 863629 Changes: libvirt (0.8.8-1ubuntu6.7) natty-proposed; urgency=low . * lxc_controller: use our own unlocpt+grantpt rather than glibc's, which can't handle opening a pty in a devpts not mounted at /dev/pts. (LP: #863629) Checksums-Sha1: 06a817f0eb18eb95e831ef871d0c616c0f67a733 2317 libvirt_0.8.8-1ubuntu6.7.dsc b6cebd0aa69e0ca2c06abebc1f0ad47c5ede0d63 71936 libvirt_0.8.8-1ubuntu6.7.debian.tar.gz Checksums-Sha256: a8cc5c08d8871d6ec761afa03c965de7c8603dad59b14d14d3a4714b06c71901 2317 libvirt_0.8.8-1ubuntu6.7.dsc b8a2931a05ebb2b467416f1e21370483cd4607115184e89c901b906e78b659f4 71936 libvirt_0.8.8-1ubuntu6.7.debian.tar.gz Files: 9b3004e962e267092daff64ad4e3a636 2317 libs optional libvirt_0.8.8-1ubuntu6.7.dsc ced6fb93d7053293e331ea3b3a31bc28 71936 libs optional libvirt_0.8.8-1ubuntu6.7.debian.tar.gz Original-Maintainer: Debian Libvirt Maintainers From stefanor at ubuntu.com Tue Nov 15 06:13:14 2011 From: stefanor at ubuntu.com (Stefano Rivera) Date: Tue, 15 Nov 2011 06:13:14 -0000 Subject: [ubuntu/natty-proposed] python-enthoughtbase 3.0.6-1ubuntu1.1 (Accepted) Message-ID: <20111115061314.21595.82367.launchpad@soybean.canonical.com> python-enthoughtbase (3.0.6-1ubuntu1.1) natty-proposed; urgency=low * Bump XS-Python-Version to >= 2.5, 2.4 isn't supported any more (LP: #777095) Date: Sat, 12 Nov 2011 14:32:58 +0200 Changed-By: Stefano Rivera Maintainer: Debian Python Modules Team https://launchpad.net/ubuntu/natty/+source/python-enthoughtbase/3.0.6-1ubuntu1.1 -------------- next part -------------- Format: 1.8 Date: Sat, 12 Nov 2011 14:32:58 +0200 Source: python-enthoughtbase Binary: python-enthoughtbase Architecture: source Version: 3.0.6-1ubuntu1.1 Distribution: natty-proposed Urgency: low Maintainer: Debian Python Modules Team Changed-By: Stefano Rivera Description: python-enthoughtbase - Core packages for the Enthought Tool Suite Launchpad-Bugs-Fixed: 777095 Changes: python-enthoughtbase (3.0.6-1ubuntu1.1) natty-proposed; urgency=low . * Bump XS-Python-Version to >= 2.5, 2.4 isn't supported any more (LP: #777095) Checksums-Sha1: a5c9c59bc15ccb1ef2dfb8a1481183186317d9de 2198 python-enthoughtbase_3.0.6-1ubuntu1.1.dsc dc71a1c96415eb1791bbc2d5dad167049800f391 9711 python-enthoughtbase_3.0.6-1ubuntu1.1.debian.tar.gz Checksums-Sha256: 8bd6f53c09cdb4a8b35eeae44cedad400dae518f7a6c6057d1be58be962c3b5a 2198 python-enthoughtbase_3.0.6-1ubuntu1.1.dsc 54de74a11fb3c6a34d53ef9c0c5035c51c91c1e9d727676d37e1273f1b0976e8 9711 python-enthoughtbase_3.0.6-1ubuntu1.1.debian.tar.gz Files: 8886645441f5f3b85f150876515bcfdd 2198 python optional python-enthoughtbase_3.0.6-1ubuntu1.1.dsc 425ea5e39cd1b7da7f1ffeebbf74cd3a 9711 python optional python-enthoughtbase_3.0.6-1ubuntu1.1.debian.tar.gz From stefanor at ubuntu.com Tue Nov 15 06:13:38 2011 From: stefanor at ubuntu.com (Stefano Rivera) Date: Tue, 15 Nov 2011 06:13:38 -0000 Subject: [ubuntu/natty-proposed] dovecot-antispam 1.2+20090702-1ubuntu0.11.04.1 (Accepted) Message-ID: <20111115061338.3573.3513.launchpad@wampee.canonical.com> dovecot-antispam (1.2+20090702-1ubuntu0.11.04.1) natty-proposed; urgency=low * No-change rebuild against newer dovecot (LP: #494162) Date: Sun, 13 Nov 2011 23:46:29 +0200 Changed-By: Stefano Rivera Maintainer: Ron Lee https://launchpad.net/ubuntu/natty/+source/dovecot-antispam/1.2+20090702-1ubuntu0.11.04.1 -------------- next part -------------- Format: 1.8 Date: Sun, 13 Nov 2011 23:46:29 +0200 Source: dovecot-antispam Binary: dovecot-antispam Architecture: source Version: 1.2+20090702-1ubuntu0.11.04.1 Distribution: natty-proposed Urgency: low Maintainer: Ron Lee Changed-By: Stefano Rivera Description: dovecot-antispam - a Dovecot plugin that helps train spam filters Launchpad-Bugs-Fixed: 494162 Changes: dovecot-antispam (1.2+20090702-1ubuntu0.11.04.1) natty-proposed; urgency=low . * No-change rebuild against newer dovecot (LP: #494162) Checksums-Sha1: a2e14ea69828813eb9d92fd98961957e5b4d6f4b 2024 dovecot-antispam_1.2+20090702-1ubuntu0.11.04.1.dsc e58faa5c66e80c0dcfeaad5f7622ca028d62605e 3429 dovecot-antispam_1.2+20090702-1ubuntu0.11.04.1.diff.gz Checksums-Sha256: dc35889c072a3877c6f28a9bec61c8572987fe9abc52506cf2937b5225a5878a 2024 dovecot-antispam_1.2+20090702-1ubuntu0.11.04.1.dsc 203f619e729ccaaf6f20b945006737155d856d38b335a22cf694257e2f364668 3429 dovecot-antispam_1.2+20090702-1ubuntu0.11.04.1.diff.gz Files: ff2ee85f1568207d8cb76cc8f48feed2 2024 mail optional dovecot-antispam_1.2+20090702-1ubuntu0.11.04.1.dsc cf08e75a89ed5f3bdb2224046156745d 3429 mail optional dovecot-antispam_1.2+20090702-1ubuntu0.11.04.1.diff.gz From bdrung at debian.org Tue Nov 15 06:14:03 2011 From: bdrung at debian.org (Benjamin Drung) Date: Tue, 15 Nov 2011 06:14:03 -0000 Subject: [ubuntu/natty-proposed] ubuntu-dev-tools 0.122.3 (Accepted) Message-ID: <20111115061403.15656.79466.launchpad@chaenomeles.canonical.com> ubuntu-dev-tools (0.122.3) natty-proposed; urgency=low * Add 12.04 LTS "Precise Pangolin" to Ubuntu list (LP: #890464). Date: Tue, 15 Nov 2011 00:10:35 +0100 Changed-By: Benjamin Drung Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/ubuntu-dev-tools/0.122.3 -------------- next part -------------- Format: 1.8 Date: Tue, 15 Nov 2011 00:10:35 +0100 Source: ubuntu-dev-tools Binary: ubuntu-dev-tools Architecture: source Version: 0.122.3 Distribution: natty-proposed Urgency: low Maintainer: Ubuntu Developers Changed-By: Benjamin Drung Description: ubuntu-dev-tools - useful tools for Ubuntu developers Launchpad-Bugs-Fixed: 890464 Changes: ubuntu-dev-tools (0.122.3) natty-proposed; urgency=low . * Add 12.04 LTS "Precise Pangolin" to Ubuntu list (LP: #890464). Checksums-Sha1: a4a0026e3e49c6b2a79c2e54c2640976accd58ca 1938 ubuntu-dev-tools_0.122.3.dsc 3a6b5eee957ec023c6579fa3e04fde74504d7160 196025 ubuntu-dev-tools_0.122.3.tar.gz Checksums-Sha256: d237bd21f72da8dc2195db6c3ca32c413d445258f280195cfe7a27db9b48cb81 1938 ubuntu-dev-tools_0.122.3.dsc 9eeef92ee9c1578ce351ae86e8f68826deab2d1d137bfd407a633380bd54f923 196025 ubuntu-dev-tools_0.122.3.tar.gz Files: cb7bc7a557a2124cc8236235e5ebc5b5 1938 devel optional ubuntu-dev-tools_0.122.3.dsc 7a3803a35e7e1e86802628bc4f615ef7 196025 devel optional ubuntu-dev-tools_0.122.3.tar.gz From melissa at catalyst.net.nz Wed Nov 16 00:06:57 2011 From: melissa at catalyst.net.nz (Melissa Draper) Date: Wed, 16 Nov 2011 00:06:57 -0000 Subject: [ubuntu/natty-security] mahara, mahara_1.2.7-1ubuntu0.2_i386_translations.tar.gz 1.2.7-1ubuntu0.2 (Accepted) Message-ID: <20111116000657.20383.72648.launchpad@cocoplum.canonical.com> mahara (1.2.7-1ubuntu0.2) natty-security; urgency=low * SECURITY UPDATE: XSS in unvalidated URI attributes - Added a filter to sanitise user input urls (LP: #888358) - debian/patches/CVE-2011-2771.patch: upstream patch - CVE-2011-2771 * SECURITY UPDATE: DoS attack via invalid or excessively large images - Added a check to evaluate available memory before processing (LP: #888358) - debian/patches/CVE-2011-2772.patch: upstream patch - CVE-2011-2772 * SECURITY UPDATE: XSRF allowing attackers to trick an admin into adding them to an institution - Session check added (LP: #888358) - debian/patches/CVE-2011-2773.patch: upstream patch - CVE-2011-2773 * SECURITY UPDATE: Prevent masquerading users from jumping as others - Added a check to prevent jumping as other users. (LP: #888358) - debian/patches/mnet_masquerading.patch: upstream patch Date: Wed, 02 Nov 2011 21:50:04 +0000 Changed-By: Melissa Draper Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/mahara/1.2.7-1ubuntu0.2 -------------- next part -------------- Format: 1.8 Date: Wed, 02 Nov 2011 21:50:04 +0000 Source: mahara Binary: mahara mahara-apache2 mahara-mediaplayer Architecture: source Version: 1.2.7-1ubuntu0.2 Distribution: natty-security Urgency: low Maintainer: Ubuntu Developers Changed-By: Melissa Draper Description: mahara - Electronic portfolio, weblog, and resume builder mahara-apache2 - Electronic portfolio, weblog, and resume builder - apache2 config mahara-mediaplayer - Electronic portfolio, weblog, and resume builder - internal media Launchpad-Bugs-Fixed: 888358 Changes: mahara (1.2.7-1ubuntu0.2) natty-security; urgency=low . * SECURITY UPDATE: XSS in unvalidated URI attributes - Added a filter to sanitise user input urls (LP: #888358) - debian/patches/CVE-2011-2771.patch: upstream patch - CVE-2011-2771 . * SECURITY UPDATE: DoS attack via invalid or excessively large images - Added a check to evaluate available memory before processing (LP: #888358) - debian/patches/CVE-2011-2772.patch: upstream patch - CVE-2011-2772 . * SECURITY UPDATE: XSRF allowing attackers to trick an admin into adding them to an institution - Session check added (LP: #888358) - debian/patches/CVE-2011-2773.patch: upstream patch - CVE-2011-2773 . * SECURITY UPDATE: Prevent masquerading users from jumping as others - Added a check to prevent jumping as other users. (LP: #888358) - debian/patches/mnet_masquerading.patch: upstream patch Checksums-Sha1: 986efe02d74387dd7da9a79d64be5690590b0324 2041 mahara_1.2.7-1ubuntu0.2.dsc e046cbdb0aab052b9eb7e25c46223a0aa6801729 28866 mahara_1.2.7-1ubuntu0.2.debian.tar.gz Checksums-Sha256: 8f082fa3b738d21fb168d2f880aa4c4682367d87c98fb57cb4e7eaae904242e2 2041 mahara_1.2.7-1ubuntu0.2.dsc bb9294dbdd1ab8fb130c948d7023575cb9219ceea8f98732ba8b5b80f24af74e 28866 mahara_1.2.7-1ubuntu0.2.debian.tar.gz Files: 0a2c56a84eb35c9e19fcd36b627149d8 2041 web optional mahara_1.2.7-1ubuntu0.2.dsc 4a039d1b6fe76ba42655e7e961957376 28866 web optional mahara_1.2.7-1ubuntu0.2.debian.tar.gz Original-Maintainer: Mahara Packaging Team From doko at ubuntu.com Wed Nov 16 00:07:14 2011 From: doko at ubuntu.com (Matthias Klose) Date: Wed, 16 Nov 2011 00:07:14 -0000 Subject: [ubuntu/natty-security] openjdk-6 6b22-1.10.4-0ubuntu1~11.04.1 (Accepted) Message-ID: <20111116000714.20383.34374.launchpad@cocoplum.canonical.com> openjdk-6 (6b22-1.10.4-0ubuntu1~11.04.1) natty-security; urgency=low * SECURITY UPDATE: IcedTea6 1.10.4 Release: - Security fixes: - S7000600, CVE-2011-3547: InputStream skip() information leak. - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor. - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow. - S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager. - S7046794, CVE-2011-3553: JAX-WS stack-traces information leak. - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine. - S7055902, CVE-2011-3521: IIOP deserialization code execution. - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks. - S7064341, CVE-2011-3389: HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST). - S7070134, CVE-2011-3558: HotSpot crashes with sigsegv from PorterStemmer. - S7077466, CVE-2011-3556: RMI DGC server remote code execution. - S7083012, CVE-2011-3557: RMI registry privileged code execution. - S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection. Date: Sat, 22 Oct 2011 12:07:52 +0000 Changed-By: Matthias Klose Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/openjdk-6/6b22-1.10.4-0ubuntu1~11.04.1 -------------- next part -------------- Format: 1.8 Date: Sat, 22 Oct 2011 12:07:52 +0000 Source: openjdk-6 Binary: openjdk-6-jdk openjdk-6-jre-headless openjdk-6-jre openjdk-6-jre-lib openjdk-6-demo openjdk-6-source openjdk-6-doc openjdk-6-dbg icedtea-6-jre-cacao icedtea-6-jre-jamvm openjdk-6-jre-zero Architecture: source Version: 6b22-1.10.4-0ubuntu1~11.04.1 Distribution: natty-security Urgency: low Maintainer: Ubuntu Developers Changed-By: Matthias Klose Description: icedtea-6-jre-cacao - Alternative JVM for OpenJDK, using Cacao icedtea-6-jre-jamvm - Alternative JVM for OpenJDK, using JamVM openjdk-6-dbg - Java runtime based on OpenJDK (debugging symbols) openjdk-6-demo - Java runtime based on OpenJDK (demos and examples) openjdk-6-doc - OpenJDK Development Kit (JDK) documentation openjdk-6-jdk - OpenJDK Development Kit (JDK) openjdk-6-jre - OpenJDK Java runtime, using ${vm:Name} openjdk-6-jre-headless - OpenJDK Java runtime, using ${vm:Name} (headless) openjdk-6-jre-lib - OpenJDK Java runtime (architecture independent libraries) openjdk-6-jre-zero - Alternative JVM for OpenJDK, using Zero/Shark openjdk-6-source - OpenJDK Development Kit (JDK) source files Changes: openjdk-6 (6b22-1.10.4-0ubuntu1~11.04.1) natty-security; urgency=low . * SECURITY UPDATE: IcedTea6 1.10.4 Release: - Security fixes: - S7000600, CVE-2011-3547: InputStream skip() information leak. - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor. - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow. - S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager. - S7046794, CVE-2011-3553: JAX-WS stack-traces information leak. - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine. - S7055902, CVE-2011-3521: IIOP deserialization code execution. - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks. - S7064341, CVE-2011-3389: HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST). - S7070134, CVE-2011-3558: HotSpot crashes with sigsegv from PorterStemmer. - S7077466, CVE-2011-3556: RMI DGC server remote code execution. - S7083012, CVE-2011-3557: RMI registry privileged code execution. - S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection. Checksums-Sha1: f437358de4fd05d4806b87d951d124bead89982c 3082 openjdk-6_6b22-1.10.4-0ubuntu1~11.04.1.dsc 6fc035825580418609fbe46316488b49f6a7d1e4 74288913 openjdk-6_6b22-1.10.4.orig.tar.gz 0cde0e7a4221f599055575d30d2dcdb1bae258af 137886 openjdk-6_6b22-1.10.4-0ubuntu1~11.04.1.diff.gz Checksums-Sha256: 2657b43c0565999fb63b3b22b3af7e5137130f310dba07b58b9ca36353a9ae45 3082 openjdk-6_6b22-1.10.4-0ubuntu1~11.04.1.dsc 41cde43c5da16e317b5769f120bacf4eb07b58a40b8179ae17ad70927eaaf811 74288913 openjdk-6_6b22-1.10.4.orig.tar.gz ec2bf0bffc5902b86a33535f532f514d97c1dfd73f5c50a2eee1a1f3bfd8864c 137886 openjdk-6_6b22-1.10.4-0ubuntu1~11.04.1.diff.gz Files: b2bae67bc6fa4e463258eb343a9e17b1 3082 java optional openjdk-6_6b22-1.10.4-0ubuntu1~11.04.1.dsc 528f753e3c09bfe2a494f728423f5388 74288913 java optional openjdk-6_6b22-1.10.4.orig.tar.gz 7a4a586e94a351a947caf3aa1f58d410 137886 java optional openjdk-6_6b22-1.10.4-0ubuntu1~11.04.1.diff.gz Original-Maintainer: OpenJDK Team From sbeattie at ubuntu.com Wed Nov 16 00:08:16 2011 From: sbeattie at ubuntu.com (Steve Beattie) Date: Wed, 16 Nov 2011 00:08:16 -0000 Subject: [ubuntu/natty-security] openjdk-6b18 6b18-1.8.10-0ubuntu1~11.04.1 (Accepted) Message-ID: <20111116000816.20383.5211.launchpad@cocoplum.canonical.com> openjdk-6b18 (6b18-1.8.10-0ubuntu1~11.04.1) natty-security; urgency=low * SECURITY UPDATE: IcedTea6 1.8.10 release (LP: #878684) - security fixes: - S7000600, CVE-2011-3547: InputStream skip() information leak - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow - S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager - S7046794, CVE-2011-3553: JAX-WS stack-traces information leak - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine - S7055902, CVE-2011-3521: IIOP deserialization code execution - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks - S7064341, CVE-2011-3389: HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST) - S7077466, CVE-2011-3556: RMI DGC server remote code execution - S7083012, CVE-2011-3557: RMI registry privileged code execution - S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection Date: Thu, 27 Oct 2011 09:21:56 -0700 Changed-By: Steve Beattie Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/openjdk-6b18/6b18-1.8.10-0ubuntu1~11.04.1 -------------- next part -------------- Format: 1.8 Date: Thu, 27 Oct 2011 09:21:56 -0700 Source: openjdk-6b18 Binary: openjdk-6-jdk openjdk-6-jre-headless openjdk-6-jre openjdk-6-demo openjdk-6-dbg icedtea-6-jre-cacao icedtea-6-jre-jamvm openjdk-6-jre-zero Architecture: source Version: 6b18-1.8.10-0ubuntu1~11.04.1 Distribution: natty-security Urgency: low Maintainer: Ubuntu Developers Changed-By: Steve Beattie Description: icedtea-6-jre-cacao - Alternative JVM for OpenJDK, using Cacao icedtea-6-jre-jamvm - Alternative JVM for OpenJDK, using JamVM openjdk-6-dbg - Java runtime based on OpenJDK (debugging symbols) openjdk-6-demo - Java runtime based on OpenJDK (demos and examples) openjdk-6-jdk - OpenJDK Development Kit (JDK) openjdk-6-jre - OpenJDK Java runtime, using ${vm:Name} openjdk-6-jre-headless - OpenJDK Java runtime, using ${vm:Name} (headless) openjdk-6-jre-zero - Alternative JVM for OpenJDK, using Zero/Shark Launchpad-Bugs-Fixed: 878684 Changes: openjdk-6b18 (6b18-1.8.10-0ubuntu1~11.04.1) natty-security; urgency=low . * SECURITY UPDATE: IcedTea6 1.8.10 release (LP: #878684) - security fixes: - S7000600, CVE-2011-3547: InputStream skip() information leak - S7019773, CVE-2011-3548: mutable static AWTKeyStroke.ctor - S7023640, CVE-2011-3551: Java2D TransformHelper integer overflow - S7032417, CVE-2011-3552: excessive default UDP socket limit under SecurityManager - S7046794, CVE-2011-3553: JAX-WS stack-traces information leak - S7046823, CVE-2011-3544: missing SecurityManager checks in scripting engine - S7055902, CVE-2011-3521: IIOP deserialization code execution - S7057857, CVE-2011-3554: insufficient pack200 JAR files uncompress error checks - S7064341, CVE-2011-3389: HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST) - S7077466, CVE-2011-3556: RMI DGC server remote code execution - S7083012, CVE-2011-3557: RMI registry privileged code execution - S7096936, CVE-2011-3560: missing checkSetFactory calls in HttpsURLConnection Checksums-Sha1: cc5c942b5b81c21b1744f0f40a1164a1673cada5 3094 openjdk-6b18_6b18-1.8.10-0ubuntu1~11.04.1.dsc 8fd95f66f1aa15c7f488f85c83c652d2baac0c8e 73410547 openjdk-6b18_6b18-1.8.10.orig.tar.gz f215bb5436833be0c2ace8de0cf385bac2593b03 174641 openjdk-6b18_6b18-1.8.10-0ubuntu1~11.04.1.diff.gz Checksums-Sha256: 6016e8adb6b0e172096852edec61abd87a45e4a91800f728e49ddf36c8899058 3094 openjdk-6b18_6b18-1.8.10-0ubuntu1~11.04.1.dsc d3d6439583af7de6580c6659a8c5a454616c0d50e0adef2d3d16e22176db375a 73410547 openjdk-6b18_6b18-1.8.10.orig.tar.gz 0e9fad13bd80578d09e9c904e769a4df3cb159e0bda48e4ae07c91f4c28d72e4 174641 openjdk-6b18_6b18-1.8.10-0ubuntu1~11.04.1.diff.gz Files: b8fc2bad6d0611565d0f186d4f128d8e 3094 java optional openjdk-6b18_6b18-1.8.10-0ubuntu1~11.04.1.dsc 905894e17fe7f6beb715aea497dbe393 73410547 java optional openjdk-6b18_6b18-1.8.10.orig.tar.gz 9752a85181b9e92ada1f92715252cb38 174641 java optional openjdk-6b18_6b18-1.8.10-0ubuntu1~11.04.1.diff.gz Original-Maintainer: OpenJDK Team From sbeattie at ubuntu.com Wed Nov 16 00:08:31 2011 From: sbeattie at ubuntu.com (Steve Beattie) Date: Wed, 16 Nov 2011 00:08:31 -0000 Subject: [ubuntu/natty-security] icedtea-web 1.1.1-0ubuntu1~11.04.2 (Accepted) Message-ID: <20111116000831.20383.45881.launchpad@cocoplum.canonical.com> icedtea-web (1.1.1-0ubuntu1~11.04.2) natty-security; urgency=low * SECURITY UPDATE: Same Origin Policy (SOP) bypass flaw - debian/patches/SOP-bypass-icedtea-web-1.10.patch: Remove special case for SocketPermission. - CVE-2011-3377 - Applied inline Date: Tue, 08 Nov 2011 15:07:50 -0800 Changed-By: Steve Beattie Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/icedtea-web/1.1.1-0ubuntu1~11.04.2 -------------- next part -------------- Format: 1.8 Date: Tue, 08 Nov 2011 15:07:50 -0800 Source: icedtea-web Binary: icedtea-netx icedtea-plugin icedtea6-plugin Architecture: source Version: 1.1.1-0ubuntu1~11.04.2 Distribution: natty-security Urgency: low Maintainer: Ubuntu Developers Changed-By: Steve Beattie Description: icedtea-netx - NetX - implementation of the Java Network Launching Protocol (JNL icedtea-plugin - web browser plugin based on OpenJDK and IcedTea to execute Java a icedtea6-plugin - web browser plugin to execute Java applets (dependency package) Changes: icedtea-web (1.1.1-0ubuntu1~11.04.2) natty-security; urgency=low . * SECURITY UPDATE: Same Origin Policy (SOP) bypass flaw - debian/patches/SOP-bypass-icedtea-web-1.10.patch: Remove special case for SocketPermission. - CVE-2011-3377 - Applied inline Checksums-Sha1: 603a379baacb52a02a0fa067039991d0bc3b482a 2123 icedtea-web_1.1.1-0ubuntu1~11.04.2.dsc c2d1659e56175ca34978d189cda54b16ac333309 10567 icedtea-web_1.1.1-0ubuntu1~11.04.2.diff.gz Checksums-Sha256: 81ede390a1e06ba850fe7fc66686d30647c3d3476e49d850fa4e5b281c09e679 2123 icedtea-web_1.1.1-0ubuntu1~11.04.2.dsc 3fa0217eac7333bd38ef56a6ce138b4f3a8b9ec3c7dfd12db58b2b67cfd5afe2 10567 icedtea-web_1.1.1-0ubuntu1~11.04.2.diff.gz Files: d7994e671452fff935539558af6d3e21 2123 java extra icedtea-web_1.1.1-0ubuntu1~11.04.2.dsc 26542a062e9aab4a7300199e2f74af35 10567 java extra icedtea-web_1.1.1-0ubuntu1~11.04.2.diff.gz Original-Maintainer: OpenJDK Team From sbeattie at ubuntu.com Wed Nov 16 06:03:26 2011 From: sbeattie at ubuntu.com (Steve Beattie) Date: Wed, 16 Nov 2011 06:03:26 -0000 Subject: [ubuntu/natty-security] musica 2.15-0ubuntu1.1 (Accepted) Message-ID: <20111116060326.30663.43132.launchpad@cocoplum.canonical.com> musica (2.15-0ubuntu1.1) natty-security; urgency=low * SECURITY UPDATE: information disclosure (LP: #888218) - debian/cron.hourly: bail out if the expected directory doesn't exist yet instead of indexing from the root of the filesystem - patch thanks to Dustin Kirkland, musica upstream. Date: Mon, 14 Nov 2011 23:33:40 -0800 Changed-By: Steve Beattie Maintainer: Dustin Kirkland https://launchpad.net/ubuntu/natty/+source/musica/2.15-0ubuntu1.1 -------------- next part -------------- Format: 1.8 Date: Mon, 14 Nov 2011 23:33:40 -0800 Source: musica Binary: musica Architecture: source Version: 2.15-0ubuntu1.1 Distribution: natty-security Urgency: low Maintainer: Dustin Kirkland Changed-By: Steve Beattie Description: musica - a web application for browsing and listening to your music Launchpad-Bugs-Fixed: 888218 Changes: musica (2.15-0ubuntu1.1) natty-security; urgency=low . * SECURITY UPDATE: information disclosure (LP: #888218) - debian/cron.hourly: bail out if the expected directory doesn't exist yet instead of indexing from the root of the filesystem - patch thanks to Dustin Kirkland, musica upstream. Checksums-Sha1: 973421d001b13d03cb9ba99c5390da731c407e13 1710 musica_2.15-0ubuntu1.1.dsc 6294bde061736f9b934f428e90210f5859fb10e0 5475 musica_2.15-0ubuntu1.1.diff.gz Checksums-Sha256: 4fd302e0660e030848d52b69e4a0c4ca44438cf66b3c5c2f1e6bf39f7f2cbdb4 1710 musica_2.15-0ubuntu1.1.dsc f3df3de0f377c2f1424a49dba0e7a7621e6500d2e2d0dd3657dfd6e2e9d678e6 5475 musica_2.15-0ubuntu1.1.diff.gz Files: 6ac836a1ac1888b61426177130c7b85e 1710 web optional musica_2.15-0ubuntu1.1.dsc 96d7416aa0933695fdf08f13fb299018 5475 web optional musica_2.15-0ubuntu1.1.diff.gz From sbeattie at ubuntu.com Wed Nov 16 17:05:48 2011 From: sbeattie at ubuntu.com (Steve Beattie) Date: Wed, 16 Nov 2011 17:05:48 -0000 Subject: [ubuntu/natty-security] man2html_1.6f+repack-1+squeeze1build0.11.04.1_powerpc_translations.tar.gz, man2html_1.6f+repack-1+squeeze1build0.11.04.1_i386_translations.tar.gz, man2html_1.6f+repack-1+squeeze1build0.11.04.1_armel_translations.tar.gz, man2html, man2html_1.6f+repack-1+squeeze1build0.11.04.1_amd64_translations.tar.gz 1.6f+repack-1+squeeze1build0.11.04.1 (Accepted) Message-ID: <20111116170548.25668.36681.launchpad@cocoplum.canonical.com> man2html (1.6f+repack-1+squeeze1build0.11.04.1) natty-security; urgency=low * fake sync from Debian man2html (1.6f+repack-1+squeeze1) stable-security; urgency=high * man2html.cgi.c: Validate user input and make some error messages less verbose to prevent XSS attacks (CVE-2011-2770). Date: Wed, 16 Nov 2011 01:31:48 -0800 Changed-By: Steve Beattie Maintainer: Robert Luberda https://launchpad.net/ubuntu/natty/+source/man2html/1.6f+repack-1+squeeze1build0.11.04.1 -------------- next part -------------- Format: 1.8 Date: Wed, 16 Nov 2011 01:31:48 -0800 Source: man2html Binary: man2html Architecture: source Version: 1.6f+repack-1+squeeze1build0.11.04.1 Distribution: natty-security Urgency: high Maintainer: Robert Luberda Changed-By: Steve Beattie Description: man2html - browse man pages in your web browser Changes: man2html (1.6f+repack-1+squeeze1build0.11.04.1) natty-security; urgency=low . * fake sync from Debian . man2html (1.6f+repack-1+squeeze1) stable-security; urgency=high . * man2html.cgi.c: Validate user input and make some error messages less verbose to prevent XSS attacks (CVE-2011-2770). Checksums-Sha1: 2381ffb8448ae44826e141e9a55229f5a2507969 1754 man2html_1.6f+repack-1+squeeze1build0.11.04.1.dsc 4c0ab40b26e562d3175daa67386cceb4f5897637 61455 man2html_1.6f+repack-1+squeeze1build0.11.04.1.debian.tar.gz Checksums-Sha256: 0dc8234389bc998db0254b16fec0ca0dc53338ed62f1cfb8cc92dfd4506eff6b 1754 man2html_1.6f+repack-1+squeeze1build0.11.04.1.dsc 120d704f4b985202319d79e64f44667f1a05042549aed6e34983e3bcaa6d2a66 61455 man2html_1.6f+repack-1+squeeze1build0.11.04.1.debian.tar.gz Files: 03df54a6011e58091638da697909e0c7 1754 doc optional man2html_1.6f+repack-1+squeeze1build0.11.04.1.dsc b5f3eacf0f1c41242251bf32575cfb8b 61455 doc optional man2html_1.6f+repack-1+squeeze1build0.11.04.1.debian.tar.gz From marc.deslauriers at ubuntu.com Wed Nov 16 23:03:52 2011 From: marc.deslauriers at ubuntu.com (Marc Deslauriers) Date: Wed, 16 Nov 2011 23:03:52 -0000 Subject: [ubuntu/natty-security] bind9_9.7.3.dfsg-1ubuntu2.3_powerpc_translations.tar.gz, bind9_9.7.3.dfsg-1ubuntu2.3_armel_translations.tar.gz, bind9, bind9_9.7.3.dfsg-1ubuntu2.3_i386_translations.tar.gz, bind9_9.7.3.dfsg-1ubuntu2.3_amd64_translations.tar.gz 1:9.7.3.dfsg-1ubuntu2.3 (Accepted) Message-ID: <20111116230352.1743.93785.launchpad@cocoplum.canonical.com> bind9 (1:9.7.3.dfsg-1ubuntu2.3) natty-security; urgency=low * SECURITY UPDATE: denial of service via specially crafted packet - bin/named/query.c,lib/dns/rbtdb.c: correctly handle cache lookups that return RRSIG data associated with nonexistent records. - Patch backported from 9.7.4-P1. - CVE-2011-4313 Date: Wed, 16 Nov 2011 14:25:20 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/bind9/1:9.7.3.dfsg-1ubuntu2.3 -------------- next part -------------- Format: 1.8 Date: Wed, 16 Nov 2011 14:25:20 -0500 Source: bind9 Binary: bind9 bind9utils bind9-doc host bind9-host libbind-dev libbind9-60 libdns69 libisc62 liblwres60 libisccc60 libisccfg62 dnsutils lwresd Architecture: source Version: 1:9.7.3.dfsg-1ubuntu2.3 Distribution: natty-security Urgency: low Maintainer: Ubuntu Developers Changed-By: Marc Deslauriers Description: bind9 - Internet Domain Name Server bind9-doc - Documentation for BIND bind9-host - Version of 'host' bundled with BIND 9.X bind9utils - Utilities for BIND dnsutils - Clients provided with BIND host - Transitional package libbind-dev - Static Libraries and Headers used by BIND libbind9-60 - BIND9 Shared Library used by BIND libdns69 - DNS Shared Library used by BIND libisc62 - ISC Shared Library used by BIND libisccc60 - Command Channel Library used by BIND libisccfg62 - Config File Handling Library used by BIND liblwres60 - Lightweight Resolver Library used by BIND lwresd - Lightweight Resolver Daemon Changes: bind9 (1:9.7.3.dfsg-1ubuntu2.3) natty-security; urgency=low . * SECURITY UPDATE: denial of service via specially crafted packet - bin/named/query.c,lib/dns/rbtdb.c: correctly handle cache lookups that return RRSIG data associated with nonexistent records. - Patch backported from 9.7.4-P1. - CVE-2011-4313 Checksums-Sha1: f138b65285835b22c970d4720f48da1929703c20 2267 bind9_9.7.3.dfsg-1ubuntu2.3.dsc 182e82943f28f3f4c52780409285f129d5d6781a 518583 bind9_9.7.3.dfsg-1ubuntu2.3.diff.gz Checksums-Sha256: 888216798a5f949d62fe432b97114a2d2d65f2b1358b948146c35a0f22bfe590 2267 bind9_9.7.3.dfsg-1ubuntu2.3.dsc 7ce37a578bd8b45bcbbeb671eb4ca07ab782eb4c14ba8c9b91ac8de88f28f6a3 518583 bind9_9.7.3.dfsg-1ubuntu2.3.diff.gz Files: 8da8b6d32e4c3f607eee0fe0cc5e19f3 2267 net optional bind9_9.7.3.dfsg-1ubuntu2.3.dsc 5a2bfe495d1a5777e154067175710677 518583 net optional bind9_9.7.3.dfsg-1ubuntu2.3.diff.gz Original-Maintainer: LaMont Jones From jamie at ubuntu.com Thu Nov 17 15:03:56 2011 From: jamie at ubuntu.com (Jamie Strandboge) Date: Thu, 17 Nov 2011 15:03:56 -0000 Subject: [ubuntu/natty-security] openldap_2.4.23-6ubuntu6.1_armel_translations.tar.gz, openldap, openldap_2.4.23-6ubuntu6.1_powerpc_translations.tar.gz, openldap_2.4.23-6ubuntu6.1_i386_translations.tar.gz, openldap_2.4.23-6ubuntu6.1_amd64_translations.tar.gz 2.4.23-6ubuntu6.1 (Accepted) Message-ID: <20111117150356.17615.3751.launchpad@cocoplum.canonical.com> openldap (2.4.23-6ubuntu6.1) natty-security; urgency=low * SECURITY UPDATE: potential denial of service (LP: #884163) - debian/patches/CVE-2011-4079: fix off by one error in postalAddressNormalize() - CVE-2011-4079 Date: Mon, 14 Nov 2011 13:29:39 -0600 Changed-By: Jamie Strandboge Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/openldap/2.4.23-6ubuntu6.1 -------------- next part -------------- Format: 1.8 Date: Mon, 14 Nov 2011 13:29:39 -0600 Source: openldap Binary: slapd ldap-utils libldap-2.4-2 libldap-2.4-2-dbg libldap2-dev slapd-dbg Architecture: source Version: 2.4.23-6ubuntu6.1 Distribution: natty-security Urgency: low Maintainer: Ubuntu Developers Changed-By: Jamie Strandboge Description: ldap-utils - OpenLDAP utilities libldap-2.4-2 - OpenLDAP libraries libldap-2.4-2-dbg - Debugging information for OpenLDAP libraries libldap2-dev - OpenLDAP development libraries slapd - OpenLDAP server (slapd) slapd-dbg - Debugging information for the OpenLDAP server (slapd) Launchpad-Bugs-Fixed: 884163 Changes: openldap (2.4.23-6ubuntu6.1) natty-security; urgency=low . * SECURITY UPDATE: potential denial of service (LP: #884163) - debian/patches/CVE-2011-4079: fix off by one error in postalAddressNormalize() - CVE-2011-4079 Checksums-Sha1: e906050fc3835d9186efebf1da55f35e83c67614 2628 openldap_2.4.23-6ubuntu6.1.dsc ca8376b0ed9d095745529f34d9a99403e5dcd16c 170905 openldap_2.4.23-6ubuntu6.1.diff.gz Checksums-Sha256: b8fcf94eaf26b853ecf7f59bf35a7ef36987c52c2ae194e5fbbc67a31649d024 2628 openldap_2.4.23-6ubuntu6.1.dsc 7d52943ad9855c58d306c9a02c48c1f627447f03dda13e813e47f56dadde4a2e 170905 openldap_2.4.23-6ubuntu6.1.diff.gz Files: 73d589e826e2ac1bd7db10df2fa854dd 2628 net optional openldap_2.4.23-6ubuntu6.1.dsc 44324129f6fe4ba64c9332e09740e818 170905 net optional openldap_2.4.23-6ubuntu6.1.diff.gz Original-Maintainer: Debian OpenLDAP Maintainers From marc.deslauriers at ubuntu.com Thu Nov 17 15:04:26 2011 From: marc.deslauriers at ubuntu.com (Marc Deslauriers) Date: Thu, 17 Nov 2011 15:04:26 -0000 Subject: [ubuntu/natty-security] system-config-printer, system-config-printer_1.3.1+20110222-0ubuntu16.5_i386_translations.tar.gz, system-config-printer_1.3.1+20110222-0ubuntu16.5_armel_translations.tar.gz, system-config-printer_1.3.1+20110222-0ubuntu16.5_powerpc_translations.tar.gz, system-config-printer_1.3.1+20110222-0ubuntu16.5_amd64_translations.tar.gz 1.3.1+20110222-0ubuntu16.5 (Accepted) Message-ID: <20111117150426.17615.24670.launchpad@cocoplum.canonical.com> system-config-printer (1.3.1+20110222-0ubuntu16.5) natty-security; urgency=low * SECURITY UPDATE: MITM via unencrypted metadata download (LP: #882553) - debian/patches/74_CVE-2011-4405.patch: use https link, and switch to pycurl to perform openprinting database lookups. - debian/control: add python-pycurl to python-cupshelpers Depends. - CVE-2011-4405 * This package does not contain the changes from 1.3.1+20110222-0ubuntu16.4 in -proposed. Date: Wed, 16 Nov 2011 10:48:50 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/system-config-printer/1.3.1+20110222-0ubuntu16.5 -------------- next part -------------- Format: 1.8 Date: Wed, 16 Nov 2011 10:48:50 -0500 Source: system-config-printer Binary: system-config-printer-common system-config-printer-udev hal-cups-utils system-config-printer-gnome python-cupshelpers Architecture: source Version: 1.3.1+20110222-0ubuntu16.5 Distribution: natty-security Urgency: low Maintainer: Ubuntu Developers Changed-By: Marc Deslauriers Description: hal-cups-utils - CUPS integration with HAL python-cupshelpers - Python modules for printer configuration with CUPS system-config-printer-common - Printer configuration GUI system-config-printer-gnome - Printer configuration GUI system-config-printer-udev - Printer auto-configuration facility based on udev Launchpad-Bugs-Fixed: 882553 Changes: system-config-printer (1.3.1+20110222-0ubuntu16.5) natty-security; urgency=low . * SECURITY UPDATE: MITM via unencrypted metadata download (LP: #882553) - debian/patches/74_CVE-2011-4405.patch: use https link, and switch to pycurl to perform openprinting database lookups. - debian/control: add python-pycurl to python-cupshelpers Depends. - CVE-2011-4405 * This package does not contain the changes from 1.3.1+20110222-0ubuntu16.4 in -proposed. Checksums-Sha1: 86fbed7ea005e800e395db96b1cf5e5a48685132 2186 system-config-printer_1.3.1+20110222-0ubuntu16.5.dsc 50cd635e2c2ff712856f498ab753cc0873b4af4c 149101 system-config-printer_1.3.1+20110222-0ubuntu16.5.diff.gz Checksums-Sha256: 29913d1ad4a68250a3370ac0ae4edc5e5d2648cd9c5bd0841e37580ad508284e 2186 system-config-printer_1.3.1+20110222-0ubuntu16.5.dsc 841cc08c8408d7a88fd3b1582f1f86566bdb7812dc979545ea7c13bbd62cd326 149101 system-config-printer_1.3.1+20110222-0ubuntu16.5.diff.gz Files: cb6b84d2c19f422c317020b640911905 2186 gnome optional system-config-printer_1.3.1+20110222-0ubuntu16.5.dsc 33b341b9401b635b9b45ff4689f5e87c 149101 gnome optional system-config-printer_1.3.1+20110222-0ubuntu16.5.diff.gz Original-Maintainer: Otavio Salvador From tyhicks at canonical.com Fri Nov 18 04:03:36 2011 From: tyhicks at canonical.com (Tyler Hicks) Date: Fri, 18 Nov 2011 04:03:36 -0000 Subject: [ubuntu/natty-security] freetype 2.4.4-1ubuntu2.2 (Accepted) Message-ID: <20111118040336.29609.64451.launchpad@cocoplum.canonical.com> freetype (2.4.4-1ubuntu2.2) natty-security; urgency=low * SECURITY UPDATE: Arbitrary code execution via crafted Type 1 font - debian/patches-freetype/CVE-2011-3256.patch: Sanitize Type 1 font inputs in src/base/ftbitmap.c, src/psaux/t1decode.c, src/raster/ftrend1.c, and src/truetype/ttgxvar.c. Based on upstream patch. - CVE-2011-3256 * SECURITY UPDATE: Arbitrary code execution via crafted CID-keyed PS font - debian/patches-freetype/CVE-2011-3439.patch: Sanitize CID-keyed PostScript font inputs in src/cid/cidload.c. Based on upstream patch. - CVE-2011-3439 Date: Thu, 17 Nov 2011 13:58:59 -0600 Changed-By: Tyler Hicks Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/freetype/2.4.4-1ubuntu2.2 -------------- next part -------------- Format: 1.8 Date: Thu, 17 Nov 2011 13:58:59 -0600 Source: freetype Binary: libfreetype6 libfreetype6-dev freetype2-demos libfreetype6-udeb Architecture: source Version: 2.4.4-1ubuntu2.2 Distribution: natty-security Urgency: low Maintainer: Ubuntu Developers Changed-By: Tyler Hicks Description: freetype2-demos - FreeType 2 demonstration programs libfreetype6 - FreeType 2 font engine, shared library files libfreetype6-dev - FreeType 2 font engine, development files libfreetype6-udeb - FreeType 2 font engine for the debian-installer (udeb) Changes: freetype (2.4.4-1ubuntu2.2) natty-security; urgency=low . * SECURITY UPDATE: Arbitrary code execution via crafted Type 1 font - debian/patches-freetype/CVE-2011-3256.patch: Sanitize Type 1 font inputs in src/base/ftbitmap.c, src/psaux/t1decode.c, src/raster/ftrend1.c, and src/truetype/ttgxvar.c. Based on upstream patch. - CVE-2011-3256 * SECURITY UPDATE: Arbitrary code execution via crafted CID-keyed PS font - debian/patches-freetype/CVE-2011-3439.patch: Sanitize CID-keyed PostScript font inputs in src/cid/cidload.c. Based on upstream patch. - CVE-2011-3439 Checksums-Sha1: 4e3cdcdf313b5713d945d22f0fc1439a077d75fe 1986 freetype_2.4.4-1ubuntu2.2.dsc 99b7ee81f8e49e4620afae8262a4512b64f36609 37515 freetype_2.4.4-1ubuntu2.2.diff.gz Checksums-Sha256: 4cd21e1bd1dcf23914480532161c953dba3883e3aae2bf521618082a5677ea71 1986 freetype_2.4.4-1ubuntu2.2.dsc db95b81b72039f4a1e8ee5470ba5f0146348310df377fd60936b4faf7c1a7613 37515 freetype_2.4.4-1ubuntu2.2.diff.gz Files: f7e4de112f84b36e16078e96c536c99d 1986 libs optional freetype_2.4.4-1ubuntu2.2.dsc bb2b3a85db3d9d145b0346f4347b8cbd 37515 libs optional freetype_2.4.4-1ubuntu2.2.diff.gz Original-Maintainer: Steve Langasek From marc.deslauriers at ubuntu.com Mon Nov 21 18:03:59 2011 From: marc.deslauriers at ubuntu.com (Marc Deslauriers) Date: Mon, 21 Nov 2011 18:03:59 -0000 Subject: [ubuntu/natty-security] software-center_4.0.5ubuntu0.1_i386_translations.tar.gz, software-center 4.0.5ubuntu0.1 (Accepted) Message-ID: <20111121180359.5167.31121.launchpad@cocoplum.canonical.com> software-center (4.0.5ubuntu0.1) natty-security; urgency=low * SECURITY UPDATE: MITM via incorrect ssl cert validation (LP: #874242) - softwarecenter/view/purchaseview.py: Set the ssl-ca-file libsoup property so ssl cert validation works. - CVE-2011-3150 Date: Fri, 18 Nov 2011 08:36:12 -0500 Changed-By: Marc Deslauriers Maintainer: Michael Vogt https://launchpad.net/ubuntu/natty/+source/software-center/4.0.5ubuntu0.1 -------------- next part -------------- Format: 1.8 Date: Fri, 18 Nov 2011 08:36:12 -0500 Source: software-center Binary: software-center Architecture: source Version: 4.0.5ubuntu0.1 Distribution: natty-security Urgency: low Maintainer: Michael Vogt Changed-By: Marc Deslauriers Description: software-center - Utility for browsing, installing, and removing applications Launchpad-Bugs-Fixed: 874242 Changes: software-center (4.0.5ubuntu0.1) natty-security; urgency=low . * SECURITY UPDATE: MITM via incorrect ssl cert validation (LP: #874242) - softwarecenter/view/purchaseview.py: Set the ssl-ca-file libsoup property so ssl cert validation works. - CVE-2011-3150 Checksums-Sha1: 72a336b8eadb04c525968d8e1c4f032e4d847c9f 1710 software-center_4.0.5ubuntu0.1.dsc c42b6e876a8d095f9de7db41ec1e83810a20cef7 775276 software-center_4.0.5ubuntu0.1.tar.gz Checksums-Sha256: 79072324de044343d33ae9f25008fab9980366c98d658ea448553ffdee542449 1710 software-center_4.0.5ubuntu0.1.dsc fd8268082a03fdafe24d1c09df7b165ba0d807561cb9464b76a4e28421f4fdf5 775276 software-center_4.0.5ubuntu0.1.tar.gz Files: e463313cfcb07bc41b85c7dccc2f9e05 1710 gnome optional software-center_4.0.5ubuntu0.1.dsc 6dd3234c80b1a64e517aee65569aba41 775276 gnome optional software-center_4.0.5ubuntu0.1.tar.gz From marc.deslauriers at ubuntu.com Mon Nov 21 20:04:11 2011 From: marc.deslauriers at ubuntu.com (Marc Deslauriers) Date: Mon, 21 Nov 2011 20:04:11 -0000 Subject: [ubuntu/natty-security] pidgin_2.7.11-1ubuntu2.1_i386_translations.tar.gz, pidgin_2.7.11-1ubuntu2.1_amd64_translations.tar.gz, pidgin, pidgin_2.7.11-1ubuntu2.1_armel_translations.tar.gz, pidgin_2.7.11-1ubuntu2.1_powerpc_translations.tar.gz 1:2.7.11-1ubuntu2.1 (Accepted) Message-ID: <20111121200411.15679.59221.launchpad@cocoplum.canonical.com> pidgin (1:2.7.11-1ubuntu2.1) natty-security; urgency=low * SECURITY UPDATE: denial of service in MSN protocol via HTTP 100 response size - debian/patches/70_CVE-2011-3184.patch: properly calculate size in libpurple/protocols/msn/httpconn.c. - CVE-2011-3184 * SECURITY UPDATE: denial of service in SILC protocol via invalid UTF-8 sequence - debian/patches/71_CVE-2011-3594.patch: properly handle utf-8 in libpurple/protocols/silc/ops.c. - CVE-2011-3594 Date: Fri, 18 Nov 2011 14:25:23 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/pidgin/1:2.7.11-1ubuntu2.1 -------------- next part -------------- Format: 1.8 Date: Fri, 18 Nov 2011 14:25:23 -0500 Source: pidgin Binary: libpurple0 pidgin pidgin-data pidgin-dev pidgin-dbg finch finch-dev libpurple-dev libpurple-bin Architecture: source Version: 1:2.7.11-1ubuntu2.1 Distribution: natty-security Urgency: low Maintainer: Ubuntu Developers Changed-By: Marc Deslauriers Description: finch - text-based multi-protocol instant messaging client finch-dev - text-based multi-protocol instant messaging client - development libpurple-bin - multi-protocol instant messaging library - extra utilities libpurple-dev - multi-protocol instant messaging library - development files libpurple0 - multi-protocol instant messaging library pidgin - multi-protocol instant messaging client pidgin-data - multi-protocol instant messaging client - data files pidgin-dbg - Debugging symbols for Pidgin pidgin-dev - multi-protocol instant messaging client - development files Changes: pidgin (1:2.7.11-1ubuntu2.1) natty-security; urgency=low . * SECURITY UPDATE: denial of service in MSN protocol via HTTP 100 response size - debian/patches/70_CVE-2011-3184.patch: properly calculate size in libpurple/protocols/msn/httpconn.c. - CVE-2011-3184 * SECURITY UPDATE: denial of service in SILC protocol via invalid UTF-8 sequence - debian/patches/71_CVE-2011-3594.patch: properly handle utf-8 in libpurple/protocols/silc/ops.c. - CVE-2011-3594 Checksums-Sha1: 7db91a5a903e68720dc5769bff591d05d02f14e9 2674 pidgin_2.7.11-1ubuntu2.1.dsc 25e4e15bcc40287009ca9491247bde889ffdf9e0 156846 pidgin_2.7.11-1ubuntu2.1.debian.tar.gz Checksums-Sha256: a6c3eab58b24a54043c248805d0ac8f8fdec405ec49a302c52f7c5b396b1b827 2674 pidgin_2.7.11-1ubuntu2.1.dsc 02316748c27f24d069a54a11bbf5cb7803614e0f38f165bf44e3d2353c987c61 156846 pidgin_2.7.11-1ubuntu2.1.debian.tar.gz Files: 2d93b8f6f08c469e55c8beee8000dfd9 2674 net optional pidgin_2.7.11-1ubuntu2.1.dsc d6f7105af21e2915e34e3503c86ac0fd 156846 net optional pidgin_2.7.11-1ubuntu2.1.debian.tar.gz Original-Maintainer: Ari Pollak From jamie at ubuntu.com Mon Nov 21 23:03:46 2011 From: jamie at ubuntu.com (Jamie Strandboge) Date: Mon, 21 Nov 2011 23:03:46 -0000 Subject: [ubuntu/natty-security] kdeutils, kdeutils_4.6.5-0ubuntu1.2_i386_translations.tar.gz 4:4.6.5-0ubuntu1.2 (Accepted) Message-ID: <20111121230346.15759.32436.launchpad@cocoplum.canonical.com> kdeutils (4:4.6.5-0ubuntu1.2) natty-security; urgency=low * SECURITY UPDATE: fix directory traversal in Ark - debian/patches/CVE-2011-2725.patch: filter out '../' when previewing archives - CVE-2011-2725 - LP: #878619 Date: Sun, 30 Oct 2011 16:16:10 -0400 Changed-By: Jamie Strandboge Maintainer: Kubuntu Developers https://launchpad.net/ubuntu/natty/+source/kdeutils/4:4.6.5-0ubuntu1.2 -------------- next part -------------- Format: 1.8 Date: Sun, 30 Oct 2011 16:16:10 -0400 Source: kdeutils Binary: kdeutils kdeutils-dbg ark kcalc kcharselect kremotecontrol kdelirc kdf kfloppy kgpg ktimer kwalletmanager plasma-scriptengine-superkaramba sweeper printer-applet filelight Architecture: source Version: 4:4.6.5-0ubuntu1.2 Distribution: natty-security Urgency: low Maintainer: Kubuntu Developers Changed-By: Jamie Strandboge Description: ark - archive utility filelight - show where your diskspace is being used kcalc - simple and scientific calculator kcharselect - special character utility kdelirc - infrared remote control - transitional package kdeutils - general-purpose utilities from the official KDE release kdeutils-dbg - debugging symbols for the KDE utilities module kdf - disk information utility kfloppy - floppy formatter kgpg - graphical front end for GNU Privacy Guard kremotecontrol - infrared remote control ktimer - countdown timer kwalletmanager - secure password wallet manager plasma-scriptengine-superkaramba - SuperKaramba theme support for the Plasma Workspaces printer-applet - printer status applet sweeper - history and temporary file cleaner Launchpad-Bugs-Fixed: 878619 Changes: kdeutils (4:4.6.5-0ubuntu1.2) natty-security; urgency=low . * SECURITY UPDATE: fix directory traversal in Ark - debian/patches/CVE-2011-2725.patch: filter out '../' when previewing archives - CVE-2011-2725 - LP: #878619 Checksums-Sha1: 8c598fc7f00e0aea969a46ac7e8d431bab974820 2700 kdeutils_4.6.5-0ubuntu1.2.dsc 8e6d4d87bbacf736917af4b8af882de7901cb62f 41462 kdeutils_4.6.5-0ubuntu1.2.debian.tar.gz Checksums-Sha256: a7887c9e65823532b60642761bd6e4bf8b406edfb975e826cf70172f3b0b5bf1 2700 kdeutils_4.6.5-0ubuntu1.2.dsc 19bd336c776427cb13dec0422779e3f0fd62cfc5982bd53088c07be47d4089c2 41462 kdeutils_4.6.5-0ubuntu1.2.debian.tar.gz Files: 09451f4bb6e99b15db3ecf9cb991e008 2700 kde optional kdeutils_4.6.5-0ubuntu1.2.dsc b625a84a6ea0fc33e3cfc59458548b6f 41462 kde optional kdeutils_4.6.5-0ubuntu1.2.debian.tar.gz Original-Maintainer: Debian Qt/KDE Maintainers From jamie at ubuntu.com Mon Nov 21 23:04:04 2011 From: jamie at ubuntu.com (Jamie Strandboge) Date: Mon, 21 Nov 2011 23:04:04 -0000 Subject: [ubuntu/natty-security] meta-kde 5:63ubuntu19.1 (Accepted) Message-ID: <20111121230404.15759.77943.launchpad@cocoplum.canonical.com> meta-kde (5:63ubuntu19.1) natty-security; urgency=low * no change rebuild for security. This is needed to build kdeutils in the security pocket. Date: Thu, 10 Nov 2011 16:02:59 -0600 Changed-By: Jamie Strandboge Maintainer: Kubuntu Developers https://launchpad.net/ubuntu/natty/+source/meta-kde/5:63ubuntu19.1 -------------- next part -------------- Format: 1.8 Date: Thu, 10 Nov 2011 16:02:59 -0600 Source: meta-kde Binary: kde-plasma-desktop kde-plasma-netbook kde-standard kde-full kde-sc-dev-latest Architecture: source Version: 5:63ubuntu19.1 Distribution: natty-security Urgency: low Maintainer: Kubuntu Developers Changed-By: Jamie Strandboge Description: kde-full - the complete KDE Software Compilation for end users kde-plasma-desktop - the KDE Plasma Desktop and minimal set of applications kde-plasma-netbook - the KDE Plasma Netbook and minimal set of applications kde-sc-dev-latest - ensure that the latest KDE Development Platform is installed kde-standard - the KDE Plasma Desktop and standard set of applications Changes: meta-kde (5:63ubuntu19.1) natty-security; urgency=low . * no change rebuild for security. This is needed to build kdeutils in the security pocket. Checksums-Sha1: 00c47a72953ed00d48e6e82755f081e4881f0b35 1853 meta-kde_63ubuntu19.1.dsc b93b1df8aad8a64e294b42d3f4044f23fbf383c9 11294 meta-kde_63ubuntu19.1.tar.gz Checksums-Sha256: b66e5279160f28edef23d9de4f32293594c5527708ca587c8a3d6522ebad2f9d 1853 meta-kde_63ubuntu19.1.dsc 5cc083cc7093f60afa09c5fd93e2666cf7b786b784aa28d929cb6e3eaac97816 11294 meta-kde_63ubuntu19.1.tar.gz Files: 4d1ade3976ffa49946ff09f1ed8627f2 1853 kde optional meta-kde_63ubuntu19.1.dsc 60247b1d58479393826d4008d75379e5 11294 kde optional meta-kde_63ubuntu19.1.tar.gz Original-Maintainer: Debian Qt/KDE Maintainers From jamie at ubuntu.com Mon Nov 21 23:04:15 2011 From: jamie at ubuntu.com (Jamie Strandboge) Date: Mon, 21 Nov 2011 23:04:15 -0000 Subject: [ubuntu/natty-security] kdepimlibs, kdepimlibs_4.6.5-0ubuntu1.1_i386_translations.tar.gz 4:4.6.5-0ubuntu1.1 (Accepted) Message-ID: <20111121230415.15759.86112.launchpad@cocoplum.canonical.com> kdepimlibs (4:4.6.5-0ubuntu1.1) natty-security; urgency=low * No change rebuild for security. This is needed to build kdeutils in the security pocket. * debian/control: relax build-dependency on kde-sc-dev-latest so this is actually buildable in the security PPA Date: Tue, 08 Nov 2011 17:26:38 -0600 Changed-By: Jamie Strandboge Maintainer: Kubuntu Developers https://launchpad.net/ubuntu/natty/+source/kdepimlibs/4:4.6.5-0ubuntu1.1 -------------- next part -------------- Format: 1.8 Date: Tue, 08 Nov 2011 17:26:38 -0600 Source: kdepimlibs Binary: kdepimlibs5 kdepimlibs5-dev kdepimlibs-kio-plugins libakonadi-calendar4 libakonadi-contact4 libakonadi-kabc4 libakonadi-kcal4 libakonadi-kde4 libakonadi-kmime4 libgpgme++2 libkabc4 libkblog4 libkcal4 libkcalcore4 libkcalutils4 libkholidays4 libkimap4 libkldap4 libkmbox libkmime4 libkontactinterface4 libkpimidentities4 libkpimtextedit4 libkpimutils4 libkresources4 libktnef4 libkxmlrpcclient4 libmailtransport4 libmicroblog4 libqgpgme1 libsyndication4 kdepimlibs-dbg Architecture: source Version: 4:4.6.5-0ubuntu1.1 Distribution: natty-security Urgency: low Maintainer: Kubuntu Developers Changed-By: Jamie Strandboge Description: kdepimlibs-dbg - debugging symbols for the KDE Development Platform PIM libraries kdepimlibs-kio-plugins - kio slaves used by KDE PIM applications kdepimlibs5 - the KDE Development Platform PIM libraries (transitional package) kdepimlibs5-dev - development files for the KDE Development Platform PIM libraries libakonadi-calendar4 - library for using the Akonadi PIM data server libakonadi-contact4 - library for using the Akonadi PIM data server libakonadi-kabc4 - library for using the Akonadi PIM data server libakonadi-kcal4 - library for using the Akonadi PIM data server libakonadi-kde4 - library for using the Akonadi PIM data server libakonadi-kmime4 - library for using the Akonadi PIM data server libgpgme++2 - c++ wrapper library for gpgme libkabc4 - library for handling address book data libkblog4 - client-side support library for web application remote blogging A libkcal4 - library for handling calendar data libkcalcore4 - library for handling calendar data libkcalutils4 - library for handling calendar data libkholidays4 - holidays calculation library libkimap4 - library for handling IMAP data libkldap4 - library for accessing LDAP libkmbox - library for handling mbox data libkmime4 - library for handling MIME data libkontactinterface4 - Kontact interface library libkpimidentities4 - library for managing user identities libkpimtextedit4 - library that provides a textedit with PIM-specific features libkpimutils4 - library for dealing with email addresses libkresources4 - the KDE Resource framework library libktnef4 - library for handling TNEF data libkxmlrpcclient4 - simple XML-RPC client library libmailtransport4 - mail transport service library libmicroblog4 - library for using the Microblog Akonadi Resource libqgpgme1 - library for GpgME++ integration with Qt libsyndication4 - parser library for RSS and Atom feeds Changes: kdepimlibs (4:4.6.5-0ubuntu1.1) natty-security; urgency=low . * No change rebuild for security. This is needed to build kdeutils in the security pocket. * debian/control: relax build-dependency on kde-sc-dev-latest so this is actually buildable in the security PPA Checksums-Sha1: 27853faed4221c3f3336a1b732b912661f2b9277 3003 kdepimlibs_4.6.5-0ubuntu1.1.dsc 29512f825ee2a4bffd45c50a8f8fb8b5e2d1ffdd 133628 kdepimlibs_4.6.5-0ubuntu1.1.debian.tar.gz Checksums-Sha256: 67fd7282533f8531f394c075c2ba960591a80e31b4dead5fe9bd46439cecf7da 3003 kdepimlibs_4.6.5-0ubuntu1.1.dsc 62955466561a8ff8d555503c471998b8e7874c7c3a10234289c2a0663aabe57c 133628 kdepimlibs_4.6.5-0ubuntu1.1.debian.tar.gz Files: b2477fa34f8bf7f23ac808aafc9b6197 3003 libs optional kdepimlibs_4.6.5-0ubuntu1.1.dsc 88918de11f52fc471e8107e05c3c807b 133628 libs optional kdepimlibs_4.6.5-0ubuntu1.1.debian.tar.gz Original-Maintainer: Debian Qt/KDE Maintainers From jamie at ubuntu.com Mon Nov 21 23:04:48 2011 From: jamie at ubuntu.com (Jamie Strandboge) Date: Mon, 21 Nov 2011 23:04:48 -0000 Subject: [ubuntu/natty-security] kdegraphics, kdegraphics_4.6.5-0ubuntu1.1_i386_translations.tar.gz 4:4.6.5-0ubuntu1.1 (Accepted) Message-ID: <20111121230448.15759.84163.launchpad@cocoplum.canonical.com> kdegraphics (4:4.6.5-0ubuntu1.1) natty-security; urgency=low * No change rebuild for security. This is needed to build kdeutils in the security pocket. * debian/control: relax build-dependency on kde-sc-dev-latest so this is actually buildable in the security PPA Date: Tue, 08 Nov 2011 17:28:38 -0600 Changed-By: Jamie Strandboge Maintainer: Kubuntu Developers https://launchpad.net/ubuntu/natty/+source/kdegraphics/4:4.6.5-0ubuntu1.1 -------------- next part -------------- Format: 1.8 Date: Tue, 08 Nov 2011 17:28:38 -0600 Source: kdegraphics Binary: kdegraphics kdegraphics-libs-data kdegraphics-strigi-plugins gwenview kamera kcolorchooser kgamma kolourpaint4 kruler libksane0 libksane-dev ksnapshot libokularcore1 okular okular-dev okular-extra-backends libkdcraw9 libkdcraw-dev libkexiv2-9 libkexiv2-dev libkipi8 libkipi-dev kdegraphics-dbg Architecture: source Version: 4:4.6.5-0ubuntu1.1 Distribution: natty-security Urgency: low Maintainer: Kubuntu Developers Changed-By: Jamie Strandboge Description: gwenview - image viewer for KDE kamera - digital camera support for KDE applications kcolorchooser - color chooser and palette editor kdegraphics - graphics applications from the official KDE release kdegraphics-dbg - debugging symbols for the KDE graphics module kdegraphics-libs-data - data files for libraries from the kdegraphics module kdegraphics-strigi-plugins - graphics file format plugins for Strigi Desktop Search kgamma - monitor calibration panel for KDE kolourpaint4 - simple image editor and drawing application kruler - screen ruler for KDE ksnapshot - screen capture tool for KDE libkdcraw-dev - RAW picture decoding C++ library (development) libkdcraw9 - RAW picture decoding C++ library (runtime) libkexiv2-9 - Qt like interface for the libexiv2 library (runtime) libkexiv2-dev - Qt-like interface for the libexiv2 library (development) libkipi-dev - library for apps that want to use kipi-plugins (development versi libkipi8 - library for apps that want to use kipi-plugins (runtime version) libksane-dev - scanner library for KDE (development) libksane0 - scanner library for KDE 4 (runtime) libokularcore1 - libraries for the Okular document viewer okular - universal document viewer okular-dev - development files for the Okular libraries okular-extra-backends - additional document format support for Okular Changes: kdegraphics (4:4.6.5-0ubuntu1.1) natty-security; urgency=low . * No change rebuild for security. This is needed to build kdeutils in the security pocket. * debian/control: relax build-dependency on kde-sc-dev-latest so this is actually buildable in the security PPA Checksums-Sha1: f55318ae0d795e00f82a7ff0f0f88ba2b227e7a1 2973 kdegraphics_4.6.5-0ubuntu1.1.dsc 2279f75fe5e8f3d1c89bd1a5d99077d883746e83 60345 kdegraphics_4.6.5-0ubuntu1.1.debian.tar.gz Checksums-Sha256: 38a6d31603352ac87740b1cc3cab9b4e9617ad431e52efafc43964203dafff07 2973 kdegraphics_4.6.5-0ubuntu1.1.dsc 751eaf7fc213793ae0c7497e7a7e7e5a8f10c8f83d409a0887acde92b599e809 60345 kdegraphics_4.6.5-0ubuntu1.1.debian.tar.gz Files: 94f0a31872e985a257899975dd1abfca 2973 kde optional kdegraphics_4.6.5-0ubuntu1.1.dsc 8df320fd2423ecf0c418740c82ca351d 60345 kde optional kdegraphics_4.6.5-0ubuntu1.1.debian.tar.gz Original-Maintainer: Debian Qt/KDE Maintainers From jamie at ubuntu.com Mon Nov 21 23:05:23 2011 From: jamie at ubuntu.com (Jamie Strandboge) Date: Mon, 21 Nov 2011 23:05:23 -0000 Subject: [ubuntu/natty-security] kdeedu_4.6.5-0ubuntu1.1_i386_translations.tar.gz, kdeedu 4:4.6.5-0ubuntu1.1 (Accepted) Message-ID: <20111121230523.15759.95993.launchpad@cocoplum.canonical.com> kdeedu (4:4.6.5-0ubuntu1.1) natty-security; urgency=low * No change rebuild for security. This is needed to build kdeutils in the security pocket. * debian/control: relax build-dependency on kde-sc-dev-latest so this is actually buildable in the security PPA Date: Tue, 08 Nov 2011 17:36:54 -0600 Changed-By: Jamie Strandboge Maintainer: Kubuntu Developers https://launchpad.net/ubuntu/natty/+source/kdeedu/4:4.6.5-0ubuntu1.1 -------------- next part -------------- Format: 1.8 Date: Tue, 08 Nov 2011 17:36:54 -0600 Source: kdeedu Binary: kdeedu blinken cantor cantor-backend-kalgebra cantor-backend-maxima cantor-backend-octave cantor-backend-sage kalgebra kalgebra-mobile kalgebra-common kalzium kalzium-data kanagram kbruch kgeography kgeography-data khangman kig kiten klettres klettres-data kmplot kstars kstars-data ktouch kturtle kwordquiz libkdeedu4 libkdeedu-dev libkiten4 libkiten-dev marble marble-data marble-plugins libmarblewidget11 libmarble-dev parley parley-data rocs step kdeedu-kvtml-data kdeedu-dbg Architecture: source Version: 4:4.6.5-0ubuntu1.1 Distribution: natty-security Urgency: low Maintainer: Kubuntu Developers Changed-By: Jamie Strandboge Description: blinken - KDE version of the Simon electronic memory game cantor - interface for mathematical applications cantor-backend-kalgebra - KAlgebra backend for Cantor cantor-backend-maxima - Maxima backend for Cantor cantor-backend-octave - Octave backend for Cantor cantor-backend-sage - Sage backend for Cantor kalgebra - algebraic graphing calculator for KDE kalgebra-common - contains files common for kalgebra and kalgebra-mobile kalgebra-mobile - algebraic graphing calculator for KDE (mobile) kalzium - periodic table and chemistry tools for KDE kalzium-data - data files for Kalzium kanagram - jumble word puzzle for KDE kbruch - fraction learning aid for KDE kdeedu - educational applications from the official KDE release kdeedu-dbg - debugging symbols for the KDE education module kdeedu-kvtml-data - kvtml files for kdeedu programs kgeography - geography learning aid for KDE kgeography-data - data files for KGeography khangman - Hangman word puzzle for KDE kig - interactive geometry tool for KDE kiten - Japanese reference and study aid for KDE klettres - foreign alphabet tutor for KDE klettres-data - data files for KLettres foreign alphabet tutor kmplot - mathematical function plotter for KDE kstars - desktop planetarium for KDE kstars-data - data files for KStars desktop planetarium ktouch - touch typing tutor for KDE kturtle - Logo educational programming environment for KDE kwordquiz - flashcard learning program for KDE libkdeedu-dev - development files for the KDE educational libraries libkdeedu4 - libraries for KDE educational applications libkiten-dev - development files for the Kiten Japanese reference libraries libkiten4 - libraries for the Kiten Japanese reference and study aid libmarble-dev - development files for the Marble globe widget library libmarblewidget11 - Marble globe widget library marble - globe and map widget marble-data - data files for Marble marble-plugins - plugins for Marble parley - vocabulary trainer for KDE parley-data - data files for the Parley vocabulary trainer rocs - graph theory IDE step - interactive physical simulator for KDE Changes: kdeedu (4:4.6.5-0ubuntu1.1) natty-security; urgency=low . * No change rebuild for security. This is needed to build kdeutils in the security pocket. * debian/control: relax build-dependency on kde-sc-dev-latest so this is actually buildable in the security PPA Checksums-Sha1: 2ccfa8fd7d08d37066c4e706dd429443bd63349c 3631 kdeedu_4.6.5-0ubuntu1.1.dsc 7ab1784223eb97f89d8407ff51c2123eb6f75906 75935 kdeedu_4.6.5-0ubuntu1.1.debian.tar.gz Checksums-Sha256: cede8c9a8169ec6cf2ba479028321228645199f65f4a52d9d9374374a175dcc4 3631 kdeedu_4.6.5-0ubuntu1.1.dsc 9dd43a6a8ba328ae74ac838dca7e1228d8dbc2ea680ea4ad394f3a1f476d194f 75935 kdeedu_4.6.5-0ubuntu1.1.debian.tar.gz Files: 2f3d2a7cf979276d0eb102e53168ea45 3631 kde optional kdeedu_4.6.5-0ubuntu1.1.dsc 9bb5f9a3780c6eeb6e1a24f392550ec2 75935 kde optional kdeedu_4.6.5-0ubuntu1.1.debian.tar.gz Original-Maintainer: Debian Qt/KDE Maintainers From jamie at ubuntu.com Mon Nov 21 23:06:37 2011 From: jamie at ubuntu.com (Jamie Strandboge) Date: Mon, 21 Nov 2011 23:06:37 -0000 Subject: [ubuntu/natty-security] kdebase-workspace, kdebase-workspace_4.6.5-0ubuntu1.1_amd64_translations.tar.gz, kdebase-workspace_4.6.5-0ubuntu1.1_i386_translations.tar.gz, kdebase-workspace_4.6.5-0ubuntu1.1_powerpc_translations.tar.gz, kdebase-workspace_4.6.5-0ubuntu1.1_armel_translations.tar.gz 4:4.6.5-0ubuntu1.1 (Accepted) Message-ID: <20111121230637.15759.37852.launchpad@cocoplum.canonical.com> kdebase-workspace (4:4.6.5-0ubuntu1.1) natty-security; urgency=low * No change rebuild for security. This is needed to build kdeutils in the security pocket. * debian/control: relax build-dependency on kde-sc-dev-latest so this is actually buildable in the security PPA Date: Tue, 08 Nov 2011 17:43:28 -0600 Changed-By: Jamie Strandboge Maintainer: Kubuntu Developers https://launchpad.net/ubuntu/natty/+source/kdebase-workspace/4:4.6.5-0ubuntu1.1 -------------- next part -------------- Format: 1.8 Date: Tue, 08 Nov 2011 17:43:28 -0600 Source: kdebase-workspace Binary: kdebase-workspace plasma-desktop plasma-netbook kdebase-workspace-bin kdebase-workspace-data kdebase-workspace-wallpapers kdebase-workspace-dev plasma-dataengines-workspace plasma-widgets-workspace plasma-scriptengines plasma-scriptengine-ruby plasma-scriptengine-python plasma-scriptengine-webkit freespacenotifier kdm kinfocenter klipper ksysguardd ksysguard kde-window-manager libkdecorations4 libkwineffects1a systemsettings kdebase-workspace-kgreet-plugins libkephal4a libkscreensaver5 libksgrd4 libksignalplotter4 libkworkspace4 liblsofui4 libplasmaclock4b libplasma-geolocation-interface4 libplasmagenericshell4 libpowerdevilcore0 libprocesscore4b libprocessui4a libsolidcontrol4a libsolidcontrolifaces4a libtaskmanager4b libweather-ion6 kdebase-workspace-dbg Architecture: source Version: 4:4.6.5-0ubuntu1.1 Distribution: natty-security Urgency: low Maintainer: Kubuntu Developers Changed-By: Jamie Strandboge Description: freespacenotifier - free space notification module for KDE kde-window-manager - the K window manager (KWin) kdebase-workspace - KDE Plasma Workspace components kdebase-workspace-bin - core binaries for the KDE Plasma Workspace kdebase-workspace-data - shared data files for the KDE Plasma Workspace kdebase-workspace-dbg - debugging symbols for the KDE Plasma Workspaces kdebase-workspace-dev - development files for the KDE Plasma Workspace kdebase-workspace-kgreet-plugins - KDE greet libraries for authentication kdebase-workspace-wallpapers - set of extra wallpapers from the KDE base module kdm - KDE Display Manager for X11 kinfocenter - system information viewer klipper - clipboard manager ksysguard - process monitor and system statistics ksysguardd - System Guard Daemon libkdecorations4 - library used by decorations for the KDE window manager libkephal4a - API for easier handling of multihead systems libkscreensaver5 - library of the KDE Screensaver system libksgrd4 - library for ksysguard libksignalplotter4 - the KSignalPlotter widget libkwineffects1a - library used by effects for the KDE window manager libkworkspace4 - library for the kdebase workspace liblsofui4 - library for ksysguard based priority scheduling libplasma-geolocation-interface4 - library for the Plasma geolocation libplasmaclock4b - library for Plasma clocks libplasmagenericshell4 - shared elements for all the plasma shells libpowerdevilcore0 - shared elements for PowerDevil libprocesscore4b - library for ksysguard based process view libprocessui4a - library for ksysguard process user interface libsolidcontrol4a - library for Solid based network management libsolidcontrolifaces4a - library for Solid based network interface management libtaskmanager4b - library which provides task management facilities libweather-ion6 - library which provides an interface for weather information servi plasma-dataengines-workspace - KDE Plasma data engines plasma-desktop - The KDE Plasma workspace for desktop and laptop computers plasma-netbook - The KDE Plasma workspace for netbook computers plasma-scriptengine-python - Python script engine for Plasma plasma-scriptengine-ruby - Ruby script engine for Plasma plasma-scriptengine-webkit - Web and Mac OS X dashboard widget support for Plasma plasma-scriptengines - a metapackage to install all Plasma script engines plasma-widgets-workspace - plasma widgets and containments for the KDE Plasma Workspace systemsettings - System Settings Changes: kdebase-workspace (4:4.6.5-0ubuntu1.1) natty-security; urgency=low . * No change rebuild for security. This is needed to build kdeutils in the security pocket. * debian/control: relax build-dependency on kde-sc-dev-latest so this is actually buildable in the security PPA Checksums-Sha1: fc5e0e7413525ca21bc62fb9541a73895c1c8771 4346 kdebase-workspace_4.6.5-0ubuntu1.1.dsc 0938432d6464c3be0ace0998450592999d194d24 186601 kdebase-workspace_4.6.5-0ubuntu1.1.debian.tar.gz Checksums-Sha256: b4176f37579ac7e0d2e9117f75fa340229bd926a6ae6e9483db13d725c78fed9 4346 kdebase-workspace_4.6.5-0ubuntu1.1.dsc ebf43e2db35144a1835487d64f53ba6d3f85751edb8a8bfd32a8736312c97c4e 186601 kdebase-workspace_4.6.5-0ubuntu1.1.debian.tar.gz Files: 971ebd2cc0a7bc9ef327f5c4b0faf60a 4346 kde optional kdebase-workspace_4.6.5-0ubuntu1.1.dsc a8bce41b19f36bbbd73de6a465c8e936 186601 kde optional kdebase-workspace_4.6.5-0ubuntu1.1.debian.tar.gz Original-Maintainer: Debian Qt/KDE Maintainers From steve.langasek at ubuntu.com Tue Nov 22 11:54:03 2011 From: steve.langasek at ubuntu.com (Steve Langasek) Date: Tue, 22 Nov 2011 11:54:03 -0000 Subject: [ubuntu/natty-proposed] procps 1:3.2.8-10ubuntu3.1 (Accepted) Message-ID: <20111122115403.23887.73261.launchpad@chaenomeles.canonical.com> procps (1:3.2.8-10ubuntu3.1) natty-proposed; urgency=low [ James Hunt ] * Make procps job run twice: as early as possible (for kernel parameters such as kernel.printk) and then after all network interfaces are up (to account for any kernel parameters relating to recently loaded networking modules) (LP: #771372). Date: Thu, 17 Nov 2011 13:07:06 -0800 Changed-By: Steve Langasek Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/procps/1:3.2.8-10ubuntu3.1 -------------- next part -------------- Format: 1.8 Date: Thu, 17 Nov 2011 13:07:06 -0800 Source: procps Binary: procps libproc-dev Architecture: source Version: 1:3.2.8-10ubuntu3.1 Distribution: natty-proposed Urgency: low Maintainer: Ubuntu Developers Changed-By: Steve Langasek Description: libproc-dev - library for accessing process information from /proc procps - /proc file system utilities Launchpad-Bugs-Fixed: 771372 Changes: procps (1:3.2.8-10ubuntu3.1) natty-proposed; urgency=low . [ James Hunt ] * Make procps job run twice: as early as possible (for kernel parameters such as kernel.printk) and then after all network interfaces are up (to account for any kernel parameters relating to recently loaded networking modules) (LP: #771372). Checksums-Sha1: bf079a601580379ea90c1b2230205703e89279d7 2006 procps_3.2.8-10ubuntu3.1.dsc feab207a09d950f63e106f849a8a4d8cf8fedd1f 103716 procps_3.2.8-10ubuntu3.1.debian.tar.gz Checksums-Sha256: 4e4ca0afa61c869e4f8bf33b8dce09187c8ad190d958b6daaada84761ddfe330 2006 procps_3.2.8-10ubuntu3.1.dsc 63a3c91084962b46593ac60fe7f734d02139762e772e3c432eb328652fcc73ff 103716 procps_3.2.8-10ubuntu3.1.debian.tar.gz Files: 4b8a855bef6cfe554ae0ed55f4d787d0 2006 admin important procps_3.2.8-10ubuntu3.1.dsc 0c2ea4fa0bad7104b55e51f07246098c 103716 admin important procps_3.2.8-10ubuntu3.1.debian.tar.gz Original-Maintainer: Craig Small From evan at ebroder.net Thu Nov 24 05:56:08 2011 From: evan at ebroder.net (Evan Broder) Date: Thu, 24 Nov 2011 05:56:08 -0000 Subject: [ubuntu/natty-proposed] hedgewars 0.9.17-1~natty0.1 (Accepted) Message-ID: <20111124055608.24712.42558.launchpad@wampee.canonical.com> hedgewars (0.9.17-1~natty0.1) natty-proposed; urgency=low * Backport 0.9.17-1 to Natty to fix network play (LP: #852603): - debian/patches/haskell-backwards-compat.patch: Replace or reimplement functions used by the server that weren't available in Natty's Haskell stack - Drop libghc-bytestring-show-dev build-dependency. - Add 6's to get libghc6-deepseq-dev, libghc6-utf8-string-dev build-dependencies - Change libghc6-network-dev build-dependency to libghc6-network-bytestring-dev Date: Tue, 22 Nov 2011 04:49:51 -0800 Changed-By: Evan Broder Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/hedgewars/0.9.17-1~natty0.1 -------------- next part -------------- Format: 1.8 Date: Tue, 22 Nov 2011 04:49:51 -0800 Source: hedgewars Binary: hedgewars hedgewars-data Architecture: source Version: 0.9.17-1~natty0.1 Distribution: natty-proposed Urgency: low Maintainer: Ubuntu Developers Changed-By: Evan Broder Description: hedgewars - Worms style game hedgewars-data - Data files for hedgewars Launchpad-Bugs-Fixed: 852603 Changes: hedgewars (0.9.17-1~natty0.1) natty-proposed; urgency=low . * Backport 0.9.17-1 to Natty to fix network play (LP: #852603): - debian/patches/haskell-backwards-compat.patch: Replace or reimplement functions used by the server that weren't available in Natty's Haskell stack - Drop libghc-bytestring-show-dev build-dependency. - Add 6's to get libghc6-deepseq-dev, libghc6-utf8-string-dev build-dependencies - Change libghc6-network-dev build-dependency to libghc6-network-bytestring-dev Checksums-Sha1: 6a41fdc21da94a7acaf4fdcc1dc41731c046ff34 2347 hedgewars_0.9.17-1~natty0.1.dsc 1d383aca930bb21fb1fb230b817cd638e9af9dcc 75410 hedgewars_0.9.17-1~natty0.1.debian.tar.gz Checksums-Sha256: 9dbde780afabf4995e54dd7b4e15a8f130ef1b10ebe2b0150a8d5447fb8d4d6d 2347 hedgewars_0.9.17-1~natty0.1.dsc 8bcb44506f1703700d45dcee807d2a1829c64e39b2b40d3f7a41fdcca876506b 75410 hedgewars_0.9.17-1~natty0.1.debian.tar.gz Files: f3f49aee87766cd42913f4a9d67f1fde 2347 games extra hedgewars_0.9.17-1~natty0.1.dsc 74994c11a5a8c65395690b921831fb78 75410 games extra hedgewars_0.9.17-1~natty0.1.debian.tar.gz Original-Maintainer: Dmitry E. Oboukhov From michael.vogt at ubuntu.com Mon Nov 28 05:17:35 2011 From: michael.vogt at ubuntu.com (Michael Vogt) Date: Mon, 28 Nov 2011 05:17:35 -0000 Subject: [ubuntu/natty-proposed] software-center 4.0.6 (Accepted) Message-ID: <20111128051735.24664.2931.launchpad@soybean.canonical.com> software-center (4.0.6) natty-proposed; urgency=low * cherry pick fix to allow webkit to create additional windows during the purchase - this is needed to support PayPal in the purchase process (LP: #893988) Date: Wed, 23 Nov 2011 13:29:15 +0100 Changed-By: Michael Vogt Maintainer: Michael Vogt https://launchpad.net/ubuntu/natty/+source/software-center/4.0.6 -------------- next part -------------- Format: 1.8 Date: Wed, 23 Nov 2011 13:29:15 +0100 Source: software-center Binary: software-center Architecture: source Version: 4.0.6 Distribution: natty-proposed Urgency: low Maintainer: Michael Vogt Changed-By: Michael Vogt Description: software-center - Utility for browsing, installing, and removing applications Launchpad-Bugs-Fixed: 893988 Changes: software-center (4.0.6) natty-proposed; urgency=low . * cherry pick fix to allow webkit to create additional windows during the purchase - this is needed to support PayPal in the purchase process (LP: #893988) Checksums-Sha1: 0c541230e86b74065e2265dc2378e68158e113df 1085 software-center_4.0.6.dsc d341ab2607a3406b8b56f8ffe6676ea44cef7e53 766943 software-center_4.0.6.tar.gz Checksums-Sha256: 0eb7eeb67fe592f93062e7e86bf896ebc6eb14b815f20fc2b29fcf7d5a6fda59 1085 software-center_4.0.6.dsc f1977e9c0afa37d07805e707306046186092bbff91575b3f16b7d5895a1524e8 766943 software-center_4.0.6.tar.gz Files: ff0903db7e456209b28e7e249ef93ece 1085 gnome optional software-center_4.0.6.dsc 671691a3d010cd5c734f15ad69f6599f 766943 gnome optional software-center_4.0.6.tar.gz From marc.deslauriers at ubuntu.com Mon Nov 28 15:04:31 2011 From: marc.deslauriers at ubuntu.com (Marc Deslauriers) Date: Mon, 28 Nov 2011 15:04:31 -0000 Subject: [ubuntu/natty-security] apt_0.8.13.2ubuntu4.3_amd64_translations.tar.gz, apt_0.8.13.2ubuntu4.3_powerpc_translations.tar.gz, apt_0.8.13.2ubuntu4.3_armel_translations.tar.gz, apt, apt_0.8.13.2ubuntu4.3_i386_translations.tar.gz 0.8.13.2ubuntu4.3 (Accepted) Message-ID: <20111128150431.23221.77876.launchpad@cocoplum.canonical.com> apt (0.8.13.2ubuntu4.3) natty-security; urgency=low * SECURITY UPDATE: Restore apt-ket net-update functionality (LP: #857472) - cmdline/apt-key: improve key validation. Date: Tue, 22 Nov 2011 13:46:58 -0500 Changed-By: Marc Deslauriers Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/apt/0.8.13.2ubuntu4.3 -------------- next part -------------- Format: 1.8 Date: Tue, 22 Nov 2011 13:46:58 -0500 Source: apt Binary: apt apt-doc libapt-pkg-dev libapt-pkg-doc apt-utils apt-transport-https Architecture: source Version: 0.8.13.2ubuntu4.3 Distribution: natty-security Urgency: low Maintainer: Ubuntu Developers Changed-By: Marc Deslauriers Description: apt - Advanced front-end for dpkg apt-doc - Documentation for APT apt-transport-https - APT https transport apt-utils - APT utility programs libapt-pkg-dev - Development files for APT's libapt-pkg and libapt-inst libapt-pkg-doc - Documentation for APT development Launchpad-Bugs-Fixed: 857472 Changes: apt (0.8.13.2ubuntu4.3) natty-security; urgency=low . * SECURITY UPDATE: Restore apt-ket net-update functionality (LP: #857472) - cmdline/apt-key: improve key validation. Checksums-Sha1: 92efe6ff29403370d13174da1ec28474fab4b532 2113 apt_0.8.13.2ubuntu4.3.dsc cca4cb19f5bbb3efcadf67ec192910fa5f464a04 3393207 apt_0.8.13.2ubuntu4.3.tar.gz Checksums-Sha256: 65d4b6cfba68921b030fdc8b23aec82d29f05da21f255a3b31bd73273442fe96 2113 apt_0.8.13.2ubuntu4.3.dsc 791b4ccb9e99181f4984b3c8a9b63f6abe08ca10f9d0800d1695f9af5db385a4 3393207 apt_0.8.13.2ubuntu4.3.tar.gz Files: 0b1eb73586647c4b50f331abd40c5b0c 2113 admin important apt_0.8.13.2ubuntu4.3.dsc 1c4084eb6f0bd35974c190a35af23068 3393207 admin important apt_0.8.13.2ubuntu4.3.tar.gz Original-Maintainer: APT Development Team From marc.deslauriers at ubuntu.com Mon Nov 28 16:04:02 2011 From: marc.deslauriers at ubuntu.com (Marc Deslauriers) Date: Mon, 28 Nov 2011 16:04:02 -0000 Subject: [ubuntu/natty-security] update-notifier_0.111ubuntu2.1_armel_translations.tar.gz, update-notifier_0.111ubuntu2.1_powerpc_translations.tar.gz, update-notifier_0.111ubuntu2.1_amd64_translations.tar.gz, update-notifier, update-notifier_0.111ubuntu2.1_i386_translations.tar.gz 0.111ubuntu2.1 (Accepted) Message-ID: <20111128160402.13971.60276.launchpad@cocoplum.canonical.com> update-notifier (0.111ubuntu2.1) natty-security; urgency=low * SECURITY UPDATE: hotfix for arbitrary code execution via directory traversal in update-manager on iso media (LP: #881548) - data/cddistupgrader: patch update-manager that is pulled off an upgrade cd. - debian/update-manager-downloader-fix2.diff: hotfix to verify signature before unpacking the tarball in UpdateManager/Core/DistUpgradeFetcherCore.py. - debian/update-notifier-common.*: ship new hotfix in package. - CVE-2011-3152 Date: Thu, 24 Nov 2011 12:57:39 -0500 Changed-By: Marc Deslauriers Maintainer: Michael Vogt https://launchpad.net/ubuntu/natty/+source/update-notifier/0.111ubuntu2.1 -------------- next part -------------- Format: 1.8 Date: Thu, 24 Nov 2011 12:57:39 -0500 Source: update-notifier Binary: update-notifier update-notifier-common Architecture: source Version: 0.111ubuntu2.1 Distribution: natty-security Urgency: low Maintainer: Michael Vogt Changed-By: Marc Deslauriers Description: update-notifier - Daemon which notifies about package updates update-notifier-common - Files shared between update-notifier and other packages Launchpad-Bugs-Fixed: 881548 Changes: update-notifier (0.111ubuntu2.1) natty-security; urgency=low . * SECURITY UPDATE: hotfix for arbitrary code execution via directory traversal in update-manager on iso media (LP: #881548) - data/cddistupgrader: patch update-manager that is pulled off an upgrade cd. - debian/update-manager-downloader-fix2.diff: hotfix to verify signature before unpacking the tarball in UpdateManager/Core/DistUpgradeFetcherCore.py. - debian/update-notifier-common.*: ship new hotfix in package. - CVE-2011-3152 Checksums-Sha1: 1c223cc9878db65cf394f801c1601c915615561d 1707 update-notifier_0.111ubuntu2.1.dsc 4bb94778c8d23b467cb3afb8a9fcefe252c7bf91 249084 update-notifier_0.111ubuntu2.1.tar.gz Checksums-Sha256: e4e730c10713df021ab95bbf3a0042409bb628a3eada2ed2066775675f6ef256 1707 update-notifier_0.111ubuntu2.1.dsc 62b42d783b9b4e43e39ae744f7b36d40c34fdfd4f69b830e58de9cf72530123d 249084 update-notifier_0.111ubuntu2.1.tar.gz Files: 8620905e89ebb925a84a90f0a9069e99 1707 gnome optional update-notifier_0.111ubuntu2.1.dsc a08ff88208a4bea1a6590ebd3ca9b085 249084 gnome optional update-notifier_0.111ubuntu2.1.tar.gz From marc.deslauriers at ubuntu.com Mon Nov 28 16:04:36 2011 From: marc.deslauriers at ubuntu.com (Marc Deslauriers) Date: Mon, 28 Nov 2011 16:04:36 -0000 Subject: [ubuntu/natty-security] update-manager_0.150.5.1_armel_translations.tar.gz, update-manager, update-manager_0.150.5.1_i386_translations.tar.gz, update-manager_0.150.5.1_powerpc_translations.tar.gz, dist-upgrader_0.150.5.1_all.tar.gz, update-manager_0.150.5.1_amd64_translations.tar.gz 1:0.150.5.1 (Accepted) Message-ID: <20111128160436.13971.58622.launchpad@cocoplum.canonical.com> update-manager (1:0.150.5.1) natty-security; urgency=low * SECURITY UPDATE: arbitrary code execution via directory traversal (LP: #881548) - UpdateManager/Core/DistUpgradeFetcherCore.py: verify signature before unpacking the tarball. - CVE-2011-3152 * SECURITY UPDATE: information leak via insecure temp file (LP: #881541) - DistUpgrade/DistUpgradeViewKDE.py: use mkstemp instead of mktemp. - CVE-2011-3154 Date: Wed, 23 Nov 2011 09:27:14 -0500 Changed-By: Marc Deslauriers Maintainer: Michael Vogt https://launchpad.net/ubuntu/natty/+source/update-manager/1:0.150.5.1 -------------- next part -------------- Format: 1.8 Date: Wed, 23 Nov 2011 09:27:14 -0500 Source: update-manager Binary: update-manager-core update-manager update-manager-text update-manager-kde auto-upgrade-tester Architecture: source Version: 1:0.150.5.1 Distribution: natty-security Urgency: low Maintainer: Michael Vogt Changed-By: Marc Deslauriers Description: auto-upgrade-tester - Test release upgrades in a virtual environment update-manager - GNOME application that manages apt updates update-manager-core - manage release upgrades update-manager-kde - Support modules for KPackageKit update-manager-text - Text application that manages apt updates Launchpad-Bugs-Fixed: 881541 881548 Changes: update-manager (1:0.150.5.1) natty-security; urgency=low . * SECURITY UPDATE: arbitrary code execution via directory traversal (LP: #881548) - UpdateManager/Core/DistUpgradeFetcherCore.py: verify signature before unpacking the tarball. - CVE-2011-3152 * SECURITY UPDATE: information leak via insecure temp file (LP: #881541) - DistUpgrade/DistUpgradeViewKDE.py: use mkstemp instead of mktemp. - CVE-2011-3154 Checksums-Sha1: 5feeeb14854f31f3cfa4df004c62a744faa08a82 1781 update-manager_0.150.5.1.dsc 553aced7698e1248bec4288b3ca05f09769660a8 2939724 update-manager_0.150.5.1.tar.gz Checksums-Sha256: e7903566a781651322325fc5a479383689d51d31aee73244dc288bbc798f9992 1781 update-manager_0.150.5.1.dsc 76254a1a2ef9373bb67b5651d7feb96704d3ae83d3c076d3972aea2b4b532bd5 2939724 update-manager_0.150.5.1.tar.gz Files: 6bf7471e808b37a5fd377bc0d3a50a33 1781 gnome optional update-manager_0.150.5.1.dsc 82f6932bda5db22069d72634f1860fbd 2939724 gnome optional update-manager_0.150.5.1.tar.gz From winckler at campogeral.com.br Wed Nov 30 17:03:27 2011 From: winckler at campogeral.com.br (Gabriel A. von Winckler) Date: Wed, 30 Nov 2011 17:03:27 -0000 Subject: [ubuntu/natty-security] phpldapadmin_1.2.0.5-2ubuntu1.11.04.1_i386_translations.tar.gz, phpldapadmin 1.2.0.5-2ubuntu1.11.04.1 (Accepted) Message-ID: <20111130170327.6011.44712.launchpad@cocoplum.canonical.com> phpldapadmin (1.2.0.5-2ubuntu1.11.04.1) natty-security; urgency=high * Merge from debian security updates. (LP: #887290) - CVE-2011-4074 Fix XSS vulnerability in debug code - CVE-2011-4075 Fix arbitrary code execution by unauthenticated users Date: Thu, 24 Nov 2011 14:39:09 -0200 Changed-By: Gabriel A. von Winckler Maintainer: Ubuntu Developers https://launchpad.net/ubuntu/natty/+source/phpldapadmin/1.2.0.5-2ubuntu1.11.04.1 -------------- next part -------------- Format: 1.8 Date: Thu, 24 Nov 2011 14:39:09 -0200 Source: phpldapadmin Binary: phpldapadmin Architecture: source Version: 1.2.0.5-2ubuntu1.11.04.1 Distribution: natty-security Urgency: high Maintainer: Ubuntu Developers Changed-By: Gabriel A. von Winckler Description: phpldapadmin - web based interface for administering LDAP servers Launchpad-Bugs-Fixed: 887290 Changes: phpldapadmin (1.2.0.5-2ubuntu1.11.04.1) natty-security; urgency=high . * Merge from debian security updates. (LP: #887290) - CVE-2011-4074 Fix XSS vulnerability in debug code - CVE-2011-4075 Fix arbitrary code execution by unauthenticated users Checksums-Sha1: a50381dd10266fa812da55ec85f3948e8c0b857b 1811 phpldapadmin_1.2.0.5-2ubuntu1.11.04.1.dsc a706c08e9d0071ed9f0fb0105578917f461ba4b7 27617 phpldapadmin_1.2.0.5-2ubuntu1.11.04.1.diff.gz Checksums-Sha256: 80ea1e8bd954005fbcf203763451de7df571c879c630afab82f1ecc48f636104 1811 phpldapadmin_1.2.0.5-2ubuntu1.11.04.1.dsc 4339904f29b80484922ea343ba128974b12dd1d651e4ad54137dc87b18e93153 27617 phpldapadmin_1.2.0.5-2ubuntu1.11.04.1.diff.gz Files: 8755db6c9a77c58e0dc0ebb10d28ff10 1811 admin extra phpldapadmin_1.2.0.5-2ubuntu1.11.04.1.dsc 37779393034222873646bc95c9a73450 27617 admin extra phpldapadmin_1.2.0.5-2ubuntu1.11.04.1.diff.gz Original-Maintainer: Fabio Tranchitella