Queue Overview for "proposed-updates"

Reason: security update

DSA: 3260

CVEs referenced: CVE-2011-3079 CVE-2015-0797 CVE-2015-2708 CVE-2015-2710 CVE-2015-2713 CVE-2015-2716

Reason: security update

DSA: 3278

Closes: 783233

CVEs referenced: CVE-2014-8111

Reason: security update

DSA: 3235

Reason: security update

DSA: 3276

CVEs referenced: CVE-2015-4050

Reason: security update

DSA: 3277

CVEs referenced: CVE-2015-3809 CVE-2015-3810 CVE-2015-3811 CVE-2015-3812 CVE-2015-3813 CVE-2015-3814 CVE-2015-3815

Reason: update for the point release

Reason: fix big-endian issues, memory alignment and reproducible build

Closes: 780449 782027 786916

Reason: fix possible loss of focus when clicking on a window

Reason: postpone automount actions while session locked by screensaver

Closes: 781608

Reason: security update

DSA: 3267

CVEs referenced: CVE-2015-1251 CVE-2015-1252 CVE-2015-1253 CVE-2015-1254 CVE-2015-1255 CVE-2015-1256 CVE-2015-1257 CVE-2015-1258 CVE-2015-1259 CVE-2015-1260 CVE-2015-1261 CVE-2015-1262 CVE-2015-1263 CVE-2015-1264

This upload was superseded by a more current one.

Reason: security update

DSA: 3238

CVEs referenced: CVE-2015-1235 CVE-2015-1236 CVE-2015-1237 CVE-2015-1238 CVE-2015-1240 CVE-2015-1241 CVE-2015-1242 CVE-2015-1244 CVE-2015-1245 CVE-2015-1246 CVE-2015-1247 CVE-2015-1248 CVE-2015-1249

This upload was superseded by a more current one.

Reason: security update

DSA: 3242

CVEs referenced: CVE-2015-1243 CVE-2015-1250

Reason: new upstream version

Closes: 778406 778445 779758 781088 783720

CVEs referenced: CVE-2015-2170 CVE-2015-2221 CVE-2015-2222 CVE-2015-2305 CVE-2015-2668

This upload was superseded by a more current one.

Reason: fix clamav-daemon installability with custom PidFile

Closes: 778507

Reason: make -X command line option work again

Closes: 784719

Reason: security update

DSA: 3240

CVEs referenced: CVE-2015-3153

This upload was superseded by a more current one.

Reason: security update

DSA: 3232

CVEs referenced: CVE-2015-3143 CVE-2015-3144 CVE-2015-3145 CVE-2015-3148

Reason: fix "Lookups for 'exec' and 'wm' fail on XFS" by adding an extra check using lstat() if the d_type check fails

Closes: 783588

Reason: change the default configuration for the session bus to only allow EXTERNAL authentication (secure kernel-mediated credentials-passing), as was already done for the system bus

µdebs: present

Reason: append DTB for SheevaPlug, SheevaPlug eSATA and GuruPlug; build against p-u

Closes: 785588

Reason: update to 20150422+deb8u1 images

Reason: fix package names on i386; switch back to nfsv3 to avoid freezes; disable adzapper and browser-plugin-gnash as they're not in jessie; add libcgi-fast-perl to make the zoom in munin work; make installation of sudo-ldap and exim4-daemon-heavy more robust

Reason: fix insecure tempfile use

Closes: 784888

Reason: security update

DSA: 3230

CVEs referenced: CVE-2015-0846

Reason: security update

DSA: 3251

Closes: 783459

CVEs referenced: CVE-2015-3294

Reason: add --enable-transient_supervisors build-flag; accept trailing newline characters in Base64 strings; drop debian/ejabberd.8 as there is no "ejabberd" executable any more

Closes: 782725 782794

Reason: security update

DSA: 3241

CVEs referenced: CVE-2015-3337

Reason: fnteger overflow in the ljpeg_start function in dcraw [CVE-2015-3885]

Closes: 786785

CVEs referenced: CVE-2015-3885

Reason: setup-storage: add support for parted 2.4; fai: Fix IP address lifetime

Closes: 780144 785804

Reason: fix filter usage and "include-images" option

Closes: 783444 784591

Reason: fix build failure

Closes: 783839

Reason: security update

DSA: 3266

µdebs: present

CVEs referenced: CVE-2015-3202

Reason: security update

DSA: 3275

CVEs referenced: CVE-2015-0850

Reason: new upstream stable release

Closes: 765856 769870 776770 776772 781084 782073 783186 783388 784620

Reason: fix incorrect error message, per-address level udp_recv_width option limit, plugin_extmon bugfix for bad timeout/interval behavior if either >255s, fix possible binding to incorrect port on startup

Reason: upstream bugfix and translation update; workaround issue with wallpaper breaking after resume with nvidia drivers

Reason: fix use-after-free flaw in gnutls_x509_ext_import_crl_dist_points() [CVE-2015-3308]

Closes: 782776

CVEs referenced: CVE-2015-3308

Reason: test upload for jessie-security

Reason: fix duplicate character issue, Python tracebacks, placement of candidate popup and Taiwanese translation

Closes: 782453

Reason: security update

DSA: 3239

Closes: 782120

CVEs referenced: CVE-2015-3026

Reason: security update

DSA: 3264

CVEs referenced: CVE-2015-0797 CVE-2015-2708 CVE-2015-2710 CVE-2015-2713 CVE-2015-2716

Reason: remove mention of kfreebsd as supported archs for Jessie; revert to documenting that the text installer is still the default; fix kernel source compression extension in kernel-baking.xml; add an example preseed entry for setting up multi-arch; fix custom revision in make-kpkg example

Closes: 783613 785165

Reason: security update

DSA: 3272

Closes: 785778

CVEs referenced: CVE-2015-4047

Reason: fix a DoS from localhost clients; configuration script no longer ignores the result of upgrade questions; support chained SSL certificates; don't display upgrade warnings on new installs

Closes: 769741 779082 782859 782883

Reason: update upstream CA certificate

Closes: 786862

Reason: fix use of illegal instruction on i586

Closes: 783082

Reason: new upstream release

Reason: add device tree variants for supported armel/kirkwood devices

µdebs: present

Closes: 787563

Reason: remove a stray 'use blib' line

Closes: 785502

Reason: fix certificates being only verified for expiration and other criteria such as weak algorithms if the CA is not trusted; fix a client-side crash when the server shuts down ordinarily while still connected; fix some assertion failures and inconsistencies in InfTextFixlineBuffer [CVE-2015-3886]

Closes: 783601

CVEs referenced: CVE-2015-3886

Reason: security update

DSA: 3261

Closes: 785701

This upload was superseded by a more current one.

Reason: security update

DSA: 3261

Closes: 783451

CVEs referenced: CVE-2015-3406 CVE-2015-3407 CVE-2015-3408 CVE-2015-3409

Reason: fix DoS via crafted image [CVE-2015-3885]

CVEs referenced: CVE-2015-3885

Reason: security update

DSA: 3236

CVEs referenced: CVE-2015-1774

Reason: security update

DSA: 3256

CVEs referenced: CVE-2015-3622

Reason: security update

DSA: 3261

CVEs referenced: CVE-2015-3407

Reason: fix libgcrypt init before use; replace non-free SHA1 implementation

Closes: 782570 786907

Reason: security update

DSA: 3243

Closes: 783443

CVEs referenced: CVE-2015-3451

This upload was superseded by a more current one.

Reason: security update

DSA: 3237

µdebs: present

Closes: 782515 782561 782698

CVEs referenced: CVE-2015-3331 CVE-2015-3332 CVE-2015-3339

Reason: update to upstream 3.16.7-ctk11; ext4: fix data corruption caused by unwritten and delayed extents; libata: Update Crucial/Micron blacklist, blacklist queued TRIM on Samsung SSD 850 Pro; USB: Add support for XHCI on APM Mustang

µdebs: present

Closes: 773400 780467 780862 782364 783324 784146 784152 784278 784344 784546 784960 785672 785707 786551

CVEs referenced: CVE-2015-3636

Reason: add libstartup-notification0-dev and libdconf-dev to the dependencies of libmate-desktop-dev

Reason: ensure Window Picker applet doesn't override mate-maximus

Closes: 785090

Reason: show correct error message if loading of the mate-screenshot UI fails

Closes: 783162

Reason: security update

DSA: 3257

Closes: 783237

CVEs referenced: CVE-2014-9462

Reason: tighten e-mail address match to avoid incorrect key being used for encryption

Closes: 784721

Reason: tighten e-mail address match to avoid incorrect key being used for encryption

Closes: 784722

Reason: include dm-service-time in the initramfs as it's now the default, fixing boot from multipath

µdebs: present

Closes: 782363

Reason: upstream bugfix and translation update; workaround issue with wallpaper breaking after resume with nvidia drivers

Reason: security update

DSA: 3229

Closes: 782645

CVEs referenced: CVE-2015-0499 CVE-2015-0501 CVE-2015-0505 CVE-2015-2571

Reason: security update

DSA: 3271

µdebs: present

Closes: 784657

CVEs referenced: CVE-2015-0847

Reason: fix warnings and errors if a process has not got a valid cwd; fix kernel version sorting; fix Perl warnings while scanning dangling kernel symlinks

Closes: 779832 781657

Reason: fix CPU usage

Reason: security update

DSA: 3268

µdebs: present

Closes: 786475

CVEs referenced: CVE-2015-3202

This upload was superseded by a more current one.

Reason: security update

DSA: 3268

µdebs: present

CVEs referenced: CVE-2015-3202

Reason: ensure udebs are populated on all architectures

µdebs: present

Closes: 784092

Reason: build with -march=i586 instead of -march=i686 on i386

Closes: 784647

Reason: various tweaks for jessie - disable /etc/modules update for acpiphp and pci_hotplug; add security repository to jessie images; fix ACPI shutdown for wheezy and jessie; add nano by default for non-minimal images

Closes: 783340 783341 783448 783480

Reason: fix java.lang.ClassCastException for java.util.HashMap to org.openstreetmap.osmosis.hstore.PGHStore

Closes: 785257

Reason: security update

DSA: 3244

Reason: fix insecure tempfile usage

Reason: security update

CVEs referenced: CVE-2015-1868

Reason: security update

CVEs referenced: CVE-2015-1868

Reason: make the perl debugger work with threaded programs again

Closes: 779357

Reason: fix remote crash - invalid packet order causes lookup of NULL pointer [CVE-2015-4054]

CVEs referenced: CVE-2015-4054

Reason: fix XSS in group administration

Closes: 785364

Reason: fix password change via Kolab driver

Closes: 780670

Reason: fix possible redirect vulnerability [CVE-2015-3880]

CVEs referenced: CVE-2015-3880

Reason: security update

DSA: 3269

CVEs referenced: CVE-2015-3166

Reason: new upstream version: avoid failures while fsync'ing data directory during crash restart

Closes: 786874

This upload was superseded by a more current one.

Reason: security update

DSA: 3270

CVEs referenced: CVE-2015-3165 CVE-2015-3166 CVE-2015-3167

Reason: security update

DSA: 3253

Closes: 765649

Reason: security update

DSA: 3263

Closes: 782781

CVEs referenced: CVE-2015-3306

Reason: prevent code execution through crafted pyc files [CVE-2015-1326]

Closes: 786858

CVEs referenced: CVE-2015-1326

Reason: wait for necessary devices to appear before starting, working around an issue exposed by systemd LSB compatibility mode

µdebs: present

Closes: 781886

Reason: security update

DSA: 3259

Closes: 763043 781250

CVEs referenced: CVE-2014-9718 CVE-2015-1779 CVE-2015-2756 CVE-2015-3456

Reason: fix crashes in GIF, BMP and ICO decoders [CVE-2015-1858 CVE-2015-1859 CVE-2015-1860]

Closes: 783133

CVEs referenced: CVE-2015-1858 CVE-2015-1859 CVE-2015-1860

Reason: fix crashes in GIF, BMP and ICO decoders [CVE-2015-0295 CVE-2015-1858 CVE-2015-1859 CVE-2015-1860]

Closes: 779580

CVEs referenced: CVE-2015-0295 CVE-2015-1858 CVE-2015-1859 CVE-2015-1860

Reason: security update

DSA: 3258

Closes: 783926

CVEs referenced: CVE-2013-4422 CVE-2015-3427

Reason: add "Conflicts: ruby-activesupport-2.3" to help upgrades from Wheezy

Closes: 784336

Reason: security update

DSA: 3247

CVEs referenced: CVE-2015-1855

Reason: tighten e-mail address match to avoid incorrect key being used for encryption

Closes: 784712

Reason: drop non-policy-compliant "reload" option from the init script; use "force-reload" for logrotate

Closes: 782996

Reason: security update

DSA: 3252

CVEs referenced: CVE-2015-3414 CVE-2015-3415 CVE-2015-3416

Reason: security update

DSA: 3254

CVEs referenced: CVE-2015-0971

Reason: revert immediate SIGKILLing of units during shutdown, leading to cleanup failures; write_net_rules: Escape '{' and '}' characters as well, to make this work with busybox grep; manager: Pass correct errno to strerror()

µdebs: present

Closes: 765577 784720

Reason: make task-xfce-desktop recommend evince-gtk | evince instead of just evince-gtk, making the GNOME and Xfce desktop tasks co-installable

Closes: 783571

Reason: fix multiple gameplay issues - minimum distance of bouncers to walls in boss levels, gigablitz gague not working, right click could exit game

Closes: 776262 776263 776342

Reason: switch from www.ptb.de to www.google.com as the former is now sending randomized gmt values

Closes: 783174 783193

Reason: handle paths which changed in the torbrowser 4.5 release; remove no longer working "accept links" folder; stop acting as default browser

Closes: 784041

Reason: restore functionality by switching to new Google Translate API

Closes: 782811

Reason: new upstream release

Closes: 775166

Reason: correct JSON output of integer types on big-endian systems

Closes: 784935

Reason: fix default configuration to match jessie-security

Closes: 783690

Reason: adjust startform/endform to start_form/end_form for compatibility with libcgi-pm-perl

Closes: 784256

Reason: fix crash in raw mode

Closes: 785689

This upload was superseded by a more current one.

Reason: security update

DSA: 3274

Closes: 785424

CVEs referenced: CVE-2015-3456

This upload was superseded by a more current one.

Reason: fix kernel paging issue, enabling operation on Broadwell CPUs

Closes: 783142

Reason: replace the Joy screenshot by a recent Lines screenshot; replace http.debian.net with httpredir.debian.org

Reason: security update

DSA: 3250

Closes: 783347 783554

Reason: security update

DSA: 3233

µdebs: present

Closes: 783148

CVEs referenced: CVE-2015-1863

Reason: regression update

DSA: 3265

This upload was superseded by a more current one.

Reason: security update

DSA: 3265

CVEs referenced: CVE-2015-3154

Reason: security update

DSA: 3255