Queue Overview for "proposed-updates"

DSA: 4255

CVEs referenced: CVE-2018-10886

Binary debdiffs: all amd64 arm64 armel i386 mips mips64el mipsel ppc64el s390x

Lintian issues: all

Reason: update for the point release

DSA: 4352

CVEs referenced: CVE-2018-17480 CVE-2018-17481 CVE-2018-18335 CVE-2018-18336 CVE-2018-18337 CVE-2018-18338 CVE-2018-18339 CVE-2018-18340 CVE-2018-18341 CVE-2018-18342 CVE-2018-18343 CVE-2018-18344 CVE-2018-18345 CVE-2018-18346 CVE-2018-18347 CVE-2018-18348 CVE-2018-18349 CVE-2018-18350 CVE-2018-18351 CVE-2018-18352 CVE-2018-18353 CVE-2018-18354 CVE-2018-18355 CVE-2018-18356 CVE-2018-18357 CVE-2018-18358 CVE-2018-18359

Binary debdiffs: amd64 i386

Lintian issues: amd64 i386 source

Reason: "fix" is wrong

Closes: 767016 783665 801384

Binary debdiffs: i386

Lintian issues: i386

Reason: rebuild against cernlib with fixed Fortran optmisations

Request: 922484

DSA: 4379

CVEs referenced: CVE-2018-7187 CVE-2019-6486

DSA: 4380

CVEs referenced: CVE-2018-6574 CVE-2018-7187 CVE-2019-6486

Binary debdiffs: amd64 arm64 armel armhf i386 s390x

Reason: - rebuild against cernlib with fixed Fortran optmisations

Request: 922484

Binary debdiffs: amd64

DSA: 4005

Binary debdiffs: all amd64 arm64 armel armhf i386 mips mipsel ppc64el

Lintian issues: mips mips64el mipsel source

Reason: rebuild against cernlib with fixed Fortran optmisations

Request: 922484

Binary debdiffs: i386 mips mipsel

Reason: fix security issues [CVE-2018-14779 CVE-2018-14780]

Request: 906258

Closes: 906128

CVEs referenced: CVE-2018-14779 CVE-2018-14780

Binary debdiffs: amd64

Queries on diff

DSA: 4396

DSA: 4422

Closes: 904150 915103 920302 920303

CVEs referenced: CVE-2018-17189 CVE-2018-17199 CVE-2019-0196 CVE-2019-0211 CVE-2019-0217 CVE-2019-0220

Reason: security issues [CVE-2018-13440 CVE-2018-17095]

Request: 926897

Closes: 903499 913166

CVEs referenced: CVE-2018-13440 CVE-2018-17095

Reason: security fix [CVE-2019-10269]

Request: 926506

Closes: 926014

CVEs referenced: CVE-2019-10269

Reason: fix printf syntax problem introduced in 20170929~deb9u2

Request: 926870

Binary debdiffs: all

This upload was superseded by a more current one.

Reason: fix bashisms in postinst and jks-keystore

Request: 922996

Closes: 922720

Binary debdiffs: all

Reason: fix FTBFS on arm64 by disabling PIE for Fortran executables

Request: 922987

Binary debdiffs: amd64

This upload was superseded by a more current one.

Reason: apply optimization flag -O to fortran modules instead of -O2 which generates broken code

Request: 922987

Closes: 922453

Binary debdiffs: amd64

Reason: update included mirror list

µdebs: only

Binary debdiffs: amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

Reason: fix logging of measurements and statistics, and stopping of chronyd, on some platforms when seccomp filtering is enabled

Request: 923897

Closes: 923137

Reason: drop OpenSSL version check

Request: 919043

Closes: 917485

Reason: security updates: out-of-bounds heap read condition may occur when scanning PDF documents [CVE-2019-1787]; out-of-bounds heap read condition may occur when scanning PE files packed using Aspack [CVE-2019-1789]; out-of-bounds heap write condition may occur when scanning OLE2 files [CVE-2019-1788]

Request: 926003

CVEs referenced: CVE-2019-1787 CVE-2019-1788 CVE-2019-1789

Binary debdiffs: amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

Lintian issues: all amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x source

DSA: 4373

CVEs referenced: CVE-2018-4056 CVE-2018-4058 CVE-2018-4059

Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el

Reason: add "missingok" to logrotate configuration

Request: 925228

Closes: 916566

Reason: rebuild against p-u kernel (armhf fix)

Binary debdiffs: armhf

Reason: update support statuses

Request: 926397

Lintian issues: source

Reason: fix tests to work with Ghostscript 9.26

Request: 925161

Closes: 925051

Reason: update root data to 2019031302

Request: 925351

Binary debdiffs: all

Reason: add new root key (KSK-2017); ruby 2.3.0 deprecates TimeoutError, use Timeout::Error

Request: 910805

Closes: 908887 910754

DSA: 4418

CVEs referenced: CVE-2019-7524

This upload was superseded by a more current one.

DSA: 4385

CVEs referenced: CVE-2019-3814

Reason: new upstream release

Request: 925154

Binary debdiffs: amd64 arm64 i386 ppc64el

Lintian issues: amd64 arm64 i386 ppc64el

DSA: 4434

Closes: 927330

Binary debdiffs: all

This upload was superseded by a more current one.

DSA: 4412

Binary debdiffs: all

Reason: fix buffer overflow in BlockIo service [CVE-2018-12180]; DNS: Check received packet size before using [CVE-2018-12178]; fix stack overflow with corrupted BMP [CVE-2018-12181]

Request: 924945

Closes: 924615

CVEs referenced: CVE-2018-12178 CVE-2018-12180 CVE-2018-12181

Missing builds: mips mips64el mipsel

DSA: 4417

CVEs referenced: CVE-2019-9810 CVE-2019-9813

Lintian issues: source

This upload was superseded by a more current one.

DSA: 4411

CVEs referenced: CVE-2018-18506 CVE-2019-9788 CVE-2019-9790 CVE-2019-9791 CVE-2019-9792 CVE-2019-9793 CVE-2019-9795 CVE-2019-9796

This upload was superseded by a more current one.

DSA: 4391

Closes: 921121 921381 921654

CVEs referenced: CVE-2018-18356 CVE-2019-5785

Reason: atheros / iwlwifi: update BT firmware [CVE-2018-5383]

Request: 925482

CVEs referenced: CVE-2018-5383

Binary debdiffs: all

Reason: reject all ioctls that the kernel will interpret as TIOCSTI [CVE-2019-10063]

Request: 925569

Closes: 925541

CVEs referenced: CVE-2019-10063

This upload was superseded by a more current one.

DSA: 4390

Closes: 922059

CVEs referenced: CVE-2019-5736

DSA: 4432

Closes: 925256 925257

CVEs referenced: CVE-2019-3835 CVE-2019-3838

Reason: drop the obsolete gcu-plugin package

Request: 921983

Closes: 890980 906855

Binary debdiffs: amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

Lintian issues: mips mips64el mipsel

Reason: gocode-auto-complete-el: Promote auto-complete-el to Pre-Depends

Request: 926438

Closes: 911590

Binary debdiffs: all

Reason: security fixes [CVE-2018-7752 CVE-2018-13005 CVE-2018-13006 CVE-2018-20760 CVE-2018-20761 CVE-2018-20762 CVE-2018-20763]

Request: 926739

Closes: 892526 902782 921969

CVEs referenced: CVE-2018-13005 CVE-2018-13006 CVE-2018-20760 CVE-2018-20761 CVE-2018-20762 CVE-2018-20763 CVE-2018-7752

Reason: stop building the browser plugin, no longer works with Firefox 60

Request: 921748

Binary debdiffs: all amd64 arm64 armel armhf i386 ppc64el s390x

Reason: fix a crash when loading malformed GraphML files [CVE-2018-20349]

Request: 926894

Closes: 917211

CVEs referenced: CVE-2018-20349

DSA: 4399

CVEs referenced: CVE-2019-9187

Binary debdiffs: all

Reason: fix XML External Entity attack [CVE-2018-1000652]

Request: 927072

Closes: 921772

CVEs referenced: CVE-2018-1000652

Reason: remove default-java-plugin as the icedtea-web Xul plugin is going away

Request: 925506

Binary debdiffs: amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

Reason: prevent Object.prototype pollution [CVE-2019-11358]

Request: 927422

Closes: 927385

CVEs referenced: CVE-2019-11358

Reason: fix insecure handling of arguments in helpers [CVE-2019-7443]

Request: 923342

Closes: 921995

CVEs referenced: CVE-2019-7443

DSA: 4397

CVEs referenced: CVE-2019-3824

DSA: 4414

Closes: 925197

CVEs referenced: CVE-2019-3877 CVE-2019-3878

Reason: add March 8th (from 2019 onwards) and May 8th (2020 only) as public holidays (Berlin only)

Request: 924150

Reason: update included data

Request: 925548

DSA: 4408

CVEs referenced: CVE-2019-6256 CVE-2019-7314 CVE-2019-9215

Reason: make -core conflict against openjdk-8-jre-headless (= 8u181-b13-2~deb9u1), which had a broken ClassPathURLCheck

Request: 926199

Closes: 913641

Binary debdiffs: all amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

Lintian issues: all amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

This upload was superseded by a more current one.

Reason: introduce next Japanese gengou era 'Reiwa'

Request: 926892

Binary debdiffs: all amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

Lintian issues: all amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

DSA: 4431

Closes: 924965

CVEs referenced: CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858 CVE-2019-3859 CVE-2019-3860 CVE-2019-3861 CVE-2019-3862 CVE-2019-3863

Binary debdiffs: i386 ppc64el

Lintian issues: i386

DSA: 4389

Closes: 921725

CVEs referenced: CVE-2018-20340

Reason: new upstream stable version

µdebs: present

CVEs referenced: CVE-2019-10124 CVE-2019-3459 CVE-2019-3460 CVE-2019-8980 CVE-2019-9213

Binary debdiffs: all amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

Lintian issues: amd64 arm64 armhf i386 mips mips64el mipsel ppc64el s390x

This upload was superseded by a more current one.

Reason: new upstream stable release

µdebs: present

Closes: 904385 918103 922306

CVEs referenced: CVE-2018-1000026 CVE-2018-14625 CVE-2018-16884 CVE-2018-19824 CVE-2018-19985 CVE-2018-20169 CVE-2019-3701 CVE-2019-3819 CVE-2019-6974 CVE-2019-7221 CVE-2019-7222

Binary debdiffs: all amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

Lintian issues: all amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

This upload was superseded by a more current one.

Reason: fix boot issue on 32-bit ARM

µdebs: present

Closes: 922478

Reason: update for -9 kernel ABI

Binary debdiffs: amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

Reason: new upstream release

Request: 927223

Closes: 878215 920854 920855 920933

CVEs referenced: CVE-2019-2529 CVE-2019-2537

Binary debdiffs: all amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

Lintian issues: amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

This upload was superseded by a more current one.

DSA: 4341

Closes: 885345 912848

CVEs referenced: CVE-2016-9843 CVE-2017-10268 CVE-2017-10378 CVE-2017-15365 CVE-2018-2562 CVE-2018-2612 CVE-2018-2622 CVE-2018-2640 CVE-2018-2665 CVE-2018-2668 CVE-2018-2755 CVE-2018-2761 CVE-2018-2766 CVE-2018-2767 CVE-2018-2771 CVE-2018-2781 CVE-2018-2782 CVE-2018-2784 CVE-2018-2787 CVE-2018-2813 CVE-2018-2817 CVE-2018-2819 CVE-2018-3058 CVE-2018-3063 CVE-2018-3064 CVE-2018-3066 CVE-2018-3143 CVE-2018-3156 CVE-2018-3174 CVE-2018-3251 CVE-2018-3282

Binary debdiffs: all amd64 arm64 armel armhf i386 ppc64el

Lintian issues: amd64 arm64 armel armhf i386 ppc64el

DSA: 4388

Closes: 922071

This upload was superseded by a more current one.

DSA: 4388

CVEs referenced: CVE-2018-12546 CVE-2018-12550 CVE-2018-12551

Lintian issues: all amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

DSA: 4402

Reason: fix NULL pointer dereference [CVE-2018-9240]

Request: 919576

Closes: 894724

CVEs referenced: CVE-2018-9240

DSA: 4409

Closes: 924508

CVEs referenced: CVE-2019-9735

Binary debdiffs: all

Reason: fix ZIP bomb attacks [CVE-2017-16129]

Request: 927378

CVEs referenced: CVE-2017-16129

DSA: 4413

µdebs: present

CVEs referenced: CVE-2019-9755

Reason: new upstream release [CVE‑2018‑6260]

Request: 924377

Closes: 913467

Binary debdiffs: amd64 armhf i386

Lintian issues: amd64 armhf i386

Reason: new upstream release

Request: 924433

Binary debdiffs: amd64 armhf i386

Lintian issues: amd64 armhf i386

Reason: do not allow writing to files in the host system [CVE-2017-14804]

Request: 892070

Closes: 887306

CVEs referenced: CVE-2017-14804

DSA: 4410

Binary debdiffs: amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

Lintian issues: all amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x source

DSA: 4405

Closes: 884738 888533 889683 904873 910763

CVEs referenced: CVE-2017-17480 CVE-2018-14423 CVE-2018-18088 CVE-2018-5785 CVE-2018-6616

DSA: 4387

µdebs: present

Closes: 923486

Binary debdiffs: amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

DSA: 4400

µdebs: present

CVEs referenced: CVE-2019-1559

DSA: 4415

Closes: 884463 921767

CVEs referenced: CVE-2017-16355 CVE-2018-12029

DSA: 4424

Closes: 924966

CVEs referenced: CVE-2019-3871

Reason: allow HTTPS CPAN URLs

Request: 927067

Closes: 927065

DSA: 4403

Lintian issues: all amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

This upload was superseded by a more current one.

DSA: 4398

CVEs referenced: CVE-2019-9020 CVE-2019-9021 CVE-2019-9022 CVE-2019-9023 CVE-2019-9024

Reason: new upstream stable release

Request: 926190

Closes: 917512 919444

Binary debdiffs: amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

Lintian issues: amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

Reason: new upstream version

Binary debdiffs: all amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

Reason: make version sort correctly to avoid potential upgrade issues

Request: 925401

Closes: 911780

Lintian issues: amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

Reason: update included data

Request: 927160

This upload was superseded by a more current one.

Reason: update included data

Request: 924493

DSA: 4423

CVEs referenced: CVE-2019-9894 CVE-2019-9895 CVE-2019-9897 CVE-2019-9898

Reason: add "missingok" to logrotate configuration

Request: 925214

Closes: 914836

Lintian issues: all source

Reason: revert to debhelper compat 9, to ensure systemd timers are correctly started

Request: 924261

Closes: 922031 922543

Binary debdiffs: all

Reason: remove BIO_callback_ctrl: The prototype differs with the OpenSSL's definition of it after it was changed (fixed) within OpenSSL

Request: 914591

Reason: apply django 1.10 middleware fix; python(3)-django-casclient: add missing dependencies on python(3)-django

Request: 927191

Closes: 896317 896404 926350

Binary debdiffs: all

Reason: remove support for xemacs21

Request: 924282

Closes: 680578 837991 909383

Reason: properly catch requests' HTTPError in index.py

Request: 926050

Closes: 837764

Binary debdiffs: all

Reason: fix potential DoS error [CVE-2018-1000872]

Request: 923323

Closes: 917030

CVEs referenced: CVE-2015-5262 CVE-2018-1000872

Binary debdiffs: all

DSA: 4374

Closes: 907139

CVEs referenced: CVE-2018-15518 CVE-2018-19870 CVE-2018-19873

Binary debdiffs: all arm64 armel armhf i386 ppc64el

Reason: security fix [CVE-2018-20349]

Request: 923556

Closes: 917212

CVEs referenced: CVE-2018-20349

Binary debdiffs: amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

Reason: security updates [CVE-2018-16476 CVE-2019-5418 CVE-2019-5419]

Request: 927424

Closes: 914847 924520

CVEs referenced: CVE-2018-16476 CVE-2019-5418 CVE-2019-5419

DSA: 4394

Binary debdiffs: amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

DSA: 4377

Reason: several security fixes for zlib [CVE-2016-9840 CVE-2016-9841 CVE-2016-9842 CVE-2016-9843]

Request: 924642

Closes: 924509

CVEs referenced: CVE-2016-9840 CVE-2016-9841 CVE-2016-9842 CVE-2016-9843

Reason: prevent a remote denial-of-service vulnerability [CVE-2014-10077]

Request: 914187

Closes: 913093

CVEs referenced: CVE-2014-10077

DSA: 4433

CVEs referenced: CVE-2019-8320 CVE-2019-8321 CVE-2019-8322 CVE-2019-8323 CVE-2019-8324 CVE-2019-8325

Binary debdiffs: all

This upload was superseded by a more current one.

Reason: fix FTBFS

Request: 923202

Closes: 912740 919999

Binary debdiffs: all

Lintian issues: all amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

This upload was superseded by a more current one.

DSA: 4332

CVEs referenced: CVE-2018-16395 CVE-2018-16396

Binary debdiffs: all

Lintian issues: all amd64 arm64 armel i386 mips64el mipsel ppc64el s390x

This upload was superseded by a more current one.

DSA: 4259

Closes: 889117 898694

CVEs referenced: CVE-2017-17405 CVE-2017-17742 CVE-2017-17790 CVE-2018-1000073 CVE-2018-1000074 CVE-2018-1000075 CVE-2018-1000076 CVE-2018-1000077 CVE-2018-1000078 CVE-2018-1000079 CVE-2018-6914 CVE-2018-8777 CVE-2018-8778 CVE-2018-8779 CVE-2018-8780

Binary debdiffs: all

Lintian issues: all amd64 arm64 armel i386 mips64el ppc64el s390x

Reason: security fix [CVE-2019-5736]

Request: 924939

Closes: 922050

CVEs referenced: CVE-2019-5736

Binary debdiffs: all amd64 armel armhf i386

DSA: 4427

CVEs referenced: CVE-2019-3880

DSA: 4429

Closes: 926764

This upload was superseded by a more current one.

DSA: 4393

µdebs: present

CVEs referenced: CVE-2019-6454

Lintian issues: amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

DSA: 4428

µdebs: present

CVEs referenced: CVE-2019-3842

This upload was superseded by a more current one.

Reason: journald: fix assertion failure on journal_file_link_data; tmpfiles: fix "e" to support shell style globs; mount-util: accept that name_to_handle_at() might fail with EPERM; automount: ack automount requests even when already mounted [CVE-2018-1049]; fix potential root privilege escalation [CVE-2018-15686]

Request: 924255

µdebs: present

Closes: 912005 916880 917122 918400

CVEs referenced: CVE-2018-1049 CVE-2018-15686

Missing builds: mips mips64el mipsel

DSA: 4420

This upload was superseded by a more current one.

DSA: 4392

Binary debdiffs: amd64 arm64 armel armhf i386 ppc64el s390x

DSA: 4426

CVEs referenced: CVE-2019-10868

DSA: 4419

CVEs referenced: CVE-2019-9942

Binary debdiffs: all

Reason: fix XSS in tooltip or popover [CVE-2019-8331]

Request: 922918

CVEs referenced: CVE-2019-8331

Reason: new upstream rleease

Binary debdiffs: all

Reason: fix buffer overflow in password protected ZIP archives [CVE-2018-1000035]

Request: 921977

Closes: 889838

CVEs referenced: CVE-2018-1000035

Reason: security fixes [CVE-2018-11099 CVE-2018-11129 CVE-2018-11130]

Request: 927068

Closes: 902190

CVEs referenced: CVE-2018-11099 CVE-2018-11129 CVE-2018-11130

Reason: fix NULL function pointer dereference [CVE-2018-7998], uninitialised memory access [CVE-2019-6976]

Request: 924145

CVEs referenced: CVE-2018-7998 CVE-2019-6976

Binary debdiffs: amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

Reason: new upstream release, with many Azure fixes [CVE-2019-0804]

Request: 924463

CVEs referenced: CVE-2019-0804

Binary debdiffs: all

This upload was superseded by a more current one.

DSA: 4406

CVEs referenced: CVE-2019-0804

DSA: 4425

µdebs: present

Closes: 926389

CVEs referenced: CVE-2019-5953

Binary debdiffs: amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

DSA: 4416

Binary debdiffs: amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

Lintian issues: amd64 mips mips64el mipsel

DSA: 4401

Closes: 916403

CVEs referenced: CVE-2018-20147 CVE-2018-20148 CVE-2018-20149 CVE-2018-20150 CVE-2018-20151 CVE-2018-20152 CVE-2018-20153 CVE-2019-8942

DSA: 4430

µdebs: present

Closes: 905739

CVEs referenced: CVE-2018-14526 CVE-2019-9495 CVE-2019-9497 CVE-2019-9498 CVE-2019-9499

Binary debdiffs: amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

DSA: 4407

Closes: 924346

CVEs referenced: CVE-2019-9628

Reason: rescale frame timestamps; set VBV buffer size for MPEG1/2 files

Request: 890889

Binary debdiffs: amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x

Reason: fix invalid memory access in zzip_disk_fread [CVE-2018-6381], bus error in zzip_disk_findfirst function in zzip/mmapped.c [CVE-2018-6540], out of bound read in mmapped.c:zzip_disk_fread() [CVE-2018-7725], Bus error in zip.c:__zzip_parse_root_directory[] cause crash via crafted zip file [CVE-2018-7726], memory leak triggered in the function __zzip_parse_root_directory in zip.c [CVE-2018-16548]; reject ZIP file if the size of the central directory and/or the offset of start of central directory point beyond the end of the ZIP file [CVE-2018-6484, CVE-2018-6541, CVE-2018-6869]

Request: 926136

CVEs referenced: CVE-2018-16548 CVE-2018-6381 CVE-2018-6484 CVE-2018-6540 CVE-2018-6541 CVE-2018-6869 CVE-2018-7725 CVE-2018-7726

Lintian issues: amd64 arm64 armel armhf i386 mips mips64el mipsel ppc64el s390x source