Monitoring Novembre 2015

monitoring@federez.net

6 participants
35 discussions

3 Debian package update(s) for hexagon.federez.net

par root＠hexagon.federez.net

apticron report [Fri, 27 Nov 2015 09:48:18 +0100] ======================================================================== apticron has detected that some packages need upgrading on: hexagon.federez.net [ 5.39.82.35 2001:41d0:8:9423::1 5.39.82.35 2001:41d0:8:9423::1 ] The following packages are currently pending an upgrade: dpkg 1.17.26 dpkg-dev 1.17.26 libdpkg-perl 1.17.26 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour dpkg (dpkg dpkg-dev libdpkg-perl) --- dpkg (1.17.26) jessie-security; urgency=high [ Guillem Jover ] * Fix an off-by-one write access in dpkg-deb when parsing the .deb magic. Reported by Jacek Wielemborek <d33tah(a)gmail.com>. Closes: #798324 * Fix an off-by-one write access in dpkg-deb when parsing the old format .deb control member size. Thanks to Hanno Böck <hanno(a)hboeck.de>. Fixes CVE-2015-0860. * Fix an off-by-one read access in dpkg-deb when parsing ar member names. Thanks to Hanno Böck <hanno(a)hboeck.de>. [ Updated programs translations ] * Catalan (Jordi Mallach). * Turkish (Mert Dirik). Closes: #785095 [ Updated scripts translations ] * German (Helge Kreutzmann). (Various fixes) * Spanish (Santiago Vila). Closes: #799020 [ Updated manpages translations ] * German (Helge Kreutzmann). (Various fixes) -- Guillem Jover <guillem(a)debian.org> Wed, 25 Nov 2015 22:54:54 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on hexagon.federez.net -- apticron

9 années, 4 mois

3 Debian package update(s) for quigon.federez.net

par root＠quigon.rez-gif.supelec.fr

apticron report [Thu, 26 Nov 2015 23:38:10 +0100] ======================================================================== apticron has detected that some packages need upgrading on: quigon.federez.net [ 160.228.155.65 ] The following packages are currently pending an upgrade: dpkg 1.17.26 dpkg-dev 1.17.26 libdpkg-perl 1.17.26 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour dpkg (dpkg dpkg-dev libdpkg-perl) --- dpkg (1.17.26) jessie-security; urgency=high [ Guillem Jover ] * Fix an off-by-one write access in dpkg-deb when parsing the .deb magic. Reported by Jacek Wielemborek <d33tah(a)gmail.com>. Closes: #798324 * Fix an off-by-one write access in dpkg-deb when parsing the old format .deb control member size. Thanks to Hanno Böck <hanno(a)hboeck.de>. Fixes CVE-2015-0860. * Fix an off-by-one read access in dpkg-deb when parsing ar member names. Thanks to Hanno Böck <hanno(a)hboeck.de>. [ Updated programs translations ] * Catalan (Jordi Mallach). * Turkish (Mert Dirik). Closes: #785095 [ Updated scripts translations ] * German (Helge Kreutzmann). (Various fixes) * Spanish (Santiago Vila). Closes: #799020 [ Updated manpages translations ] * German (Helge Kreutzmann). (Various fixes) -- Guillem Jover <guillem(a)debian.org> Wed, 25 Nov 2015 22:54:54 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on quigon.federez.net -- apticron

9 années, 4 mois

2 Debian package update(s) for baldrick.crans.org

par root＠baldrick.crans.org

apticron report [Wed, 25 Nov 2015 17:44:14 +0100] ======================================================================== apticron has detected that some packages need upgrading on: baldrick.crans.org [ 138.231.142.239 2a01:240:fe3d:4:62:61ff:fe6c:6401 138.231.142.239 ] [ 2a01:240:fe3d:4:62:61ff:fe6c:6401 ] The following packages are currently pending an upgrade: openjdk-7-jre 7u91-2.6.3-1~deb8u1 openjdk-7-jre-headless 7u91-2.6.3-1~deb8u1 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour openjdk-7 (openjdk-7-jre openjdk-7-jre-headless) --- openjdk-7 (7u91-2.6.3-1~deb8u1) jessie-security; urgency=medium * Rebuild for jessie-security -- Moritz Mühlenhoff <jmm(a)debian.org> Thu, 19 Nov 2015 17:30:24 +0100 openjdk-7 (7u91-2.6.3-1) unstable; urgency=medium [ Tiago Stürmer Daitx ] * Icedtea release 2.6.3 (based on 7u91): * Security fixes - S8142882, CVE-2015-4871: rebinding of the receiver of a DirectMethodHandle may allow a protected method to be accessed -- Matthias Klose <doko(a)ubuntu.com> Thu, 19 Nov 2015 01:27:25 +0100 openjdk-7 (7u91-2.6.2-1) unstable; urgency=medium [ Tiago Stürmer Daitx ] * IcedTea release 2.6.2 (based on 7u91): * Security fixes - S8048030, CVE-2015-4734: Expectations should be consistent - S8068842, CVE-2015-4803: Better JAXP data handling - S8076339, CVE-2015-4903: Better handling of remote object invocation - S8076383, CVE-2015-4835: Better CORBA exception handling - S8076387, CVE-2015-4882: Better CORBA value handling - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency - S8076413, CVE-2015-4883: Better JRMP message handling - S8078427, CVE-2015-4842: More supportive home environment - S8078440: Safer managed types - S8080541: More direct property handling - S8080688, CVE-2015-4860: Service for DGC services - S8081760: Better group dynamics - S8086092, CVE-2015-4840: More palette improvements - S8086733, CVE-2015-4893: Improve namespace handling - S8087350: Improve array conversions - S8103671, CVE-2015-4805: More objective stream classes - S8103675: Better Binary searches - S8130078, CVE-2015-4911: Document better processing - S8130193, CVE-2015-4806: Improve HTTP connections - S8130864: Better server identity handling - S8130891, CVE-2015-4843: (bf) More direct buffering - S8131291, CVE-2015-4872: Perfect parameter patterning - S8132042, CVE-2015-4844: Preserve layout presentation * d/patches/it-debian-build-flags.diff: refreshed * d/patches/it-set-compiler.diff: refreshed * d/patches/it-use-quilt.diff: refreshed and updated * d/patches/it-jamvm-2.0.diff: refreshed * d/patches/xrender: removed as it was applied upstream -- Matthias Klose <doko(a)ubuntu.com> Sun, 25 Oct 2015 22:30:06 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on baldrick.crans.org -- apticron

9 années, 4 mois

2 Debian package update(s) for baldrick.crans.org

par root＠baldrick.crans.org

apticron report [Tue, 24 Nov 2015 17:44:13 +0100] ======================================================================== apticron has detected that some packages need upgrading on: baldrick.crans.org [ 138.231.142.239 2a01:240:fe3d:4:62:61ff:fe6c:6401 138.231.142.239 ] [ 2a01:240:fe3d:4:62:61ff:fe6c:6401 ] The following packages are currently pending an upgrade: openjdk-7-jre 7u91-2.6.3-1~deb8u1 openjdk-7-jre-headless 7u91-2.6.3-1~deb8u1 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour openjdk-7 (openjdk-7-jre openjdk-7-jre-headless) --- openjdk-7 (7u91-2.6.3-1~deb8u1) jessie-security; urgency=medium * Rebuild for jessie-security -- Moritz Mühlenhoff <jmm(a)debian.org> Thu, 19 Nov 2015 17:30:24 +0100 openjdk-7 (7u91-2.6.3-1) unstable; urgency=medium [ Tiago Stürmer Daitx ] * Icedtea release 2.6.3 (based on 7u91): * Security fixes - S8142882, CVE-2015-4871: rebinding of the receiver of a DirectMethodHandle may allow a protected method to be accessed -- Matthias Klose <doko(a)ubuntu.com> Thu, 19 Nov 2015 01:27:25 +0100 openjdk-7 (7u91-2.6.2-1) unstable; urgency=medium [ Tiago Stürmer Daitx ] * IcedTea release 2.6.2 (based on 7u91): * Security fixes - S8048030, CVE-2015-4734: Expectations should be consistent - S8068842, CVE-2015-4803: Better JAXP data handling - S8076339, CVE-2015-4903: Better handling of remote object invocation - S8076383, CVE-2015-4835: Better CORBA exception handling - S8076387, CVE-2015-4882: Better CORBA value handling - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency - S8076413, CVE-2015-4883: Better JRMP message handling - S8078427, CVE-2015-4842: More supportive home environment - S8078440: Safer managed types - S8080541: More direct property handling - S8080688, CVE-2015-4860: Service for DGC services - S8081760: Better group dynamics - S8086092, CVE-2015-4840: More palette improvements - S8086733, CVE-2015-4893: Improve namespace handling - S8087350: Improve array conversions - S8103671, CVE-2015-4805: More objective stream classes - S8103675: Better Binary searches - S8130078, CVE-2015-4911: Document better processing - S8130193, CVE-2015-4806: Improve HTTP connections - S8130864: Better server identity handling - S8130891, CVE-2015-4843: (bf) More direct buffering - S8131291, CVE-2015-4872: Perfect parameter patterning - S8132042, CVE-2015-4844: Preserve layout presentation * d/patches/it-debian-build-flags.diff: refreshed * d/patches/it-set-compiler.diff: refreshed * d/patches/it-use-quilt.diff: refreshed and updated * d/patches/it-jamvm-2.0.diff: refreshed * d/patches/xrender: removed as it was applied upstream -- Matthias Klose <doko(a)ubuntu.com> Sun, 25 Oct 2015 22:30:06 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on baldrick.crans.org -- apticron

9 années, 5 mois

Cron <root@quigon> test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )

par root＠quigon.rez-gif.supelec.fr

/etc/cron.daily/duplicity-backup: BackendException: Giving up trying to upload 'duplicity-full.20151124T054646Z.vol344.difftar.gpg' after 5 attempts

9 années, 5 mois

2 Debian package update(s) for baldrick.crans.org

par root＠baldrick.crans.org

apticron report [Mon, 23 Nov 2015 17:44:10 +0100] ======================================================================== apticron has detected that some packages need upgrading on: baldrick.crans.org [ 138.231.142.239 2a01:240:fe3d:4:62:61ff:fe6c:6401 138.231.142.239 ] [ 2a01:240:fe3d:4:62:61ff:fe6c:6401 ] The following packages are currently pending an upgrade: openjdk-7-jre 7u91-2.6.3-1~deb8u1 openjdk-7-jre-headless 7u91-2.6.3-1~deb8u1 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour openjdk-7 (openjdk-7-jre openjdk-7-jre-headless) --- openjdk-7 (7u91-2.6.3-1~deb8u1) jessie-security; urgency=medium * Rebuild for jessie-security -- Moritz Mühlenhoff <jmm(a)debian.org> Thu, 19 Nov 2015 17:30:24 +0100 openjdk-7 (7u91-2.6.3-1) unstable; urgency=medium [ Tiago Stürmer Daitx ] * Icedtea release 2.6.3 (based on 7u91): * Security fixes - S8142882, CVE-2015-4871: rebinding of the receiver of a DirectMethodHandle may allow a protected method to be accessed -- Matthias Klose <doko(a)ubuntu.com> Thu, 19 Nov 2015 01:27:25 +0100 openjdk-7 (7u91-2.6.2-1) unstable; urgency=medium [ Tiago Stürmer Daitx ] * IcedTea release 2.6.2 (based on 7u91): * Security fixes - S8048030, CVE-2015-4734: Expectations should be consistent - S8068842, CVE-2015-4803: Better JAXP data handling - S8076339, CVE-2015-4903: Better handling of remote object invocation - S8076383, CVE-2015-4835: Better CORBA exception handling - S8076387, CVE-2015-4882: Better CORBA value handling - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency - S8076413, CVE-2015-4883: Better JRMP message handling - S8078427, CVE-2015-4842: More supportive home environment - S8078440: Safer managed types - S8080541: More direct property handling - S8080688, CVE-2015-4860: Service for DGC services - S8081760: Better group dynamics - S8086092, CVE-2015-4840: More palette improvements - S8086733, CVE-2015-4893: Improve namespace handling - S8087350: Improve array conversions - S8103671, CVE-2015-4805: More objective stream classes - S8103675: Better Binary searches - S8130078, CVE-2015-4911: Document better processing - S8130193, CVE-2015-4806: Improve HTTP connections - S8130864: Better server identity handling - S8130891, CVE-2015-4843: (bf) More direct buffering - S8131291, CVE-2015-4872: Perfect parameter patterning - S8132042, CVE-2015-4844: Preserve layout presentation * d/patches/it-debian-build-flags.diff: refreshed * d/patches/it-set-compiler.diff: refreshed * d/patches/it-use-quilt.diff: refreshed and updated * d/patches/it-jamvm-2.0.diff: refreshed * d/patches/xrender: removed as it was applied upstream -- Matthias Klose <doko(a)ubuntu.com> Sun, 25 Oct 2015 22:30:06 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on baldrick.crans.org -- apticron

9 années, 5 mois

1 Debian package update(s) for quigon.federez.net

par root＠quigon.rez-gif.supelec.fr

apticron report [Wed, 18 Nov 2015 23:38:11 +0100] ======================================================================== apticron has detected that some packages need upgrading on: quigon.federez.net [ 160.228.155.65 ] The following packages are currently pending an upgrade: libpng12-0 1.2.50-2+deb8u1 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour libpng (libpng12-0) --- libpng (1.2.50-2+deb8u1) jessie-security; urgency=high * Non-maintainer upload by the Security Team. * Add CVE-2015-7981.patch patch. CVE-2015-7981: Out-of-bounds read in png_convert_to_rfc1123. (Closes: #803078) * Add Prevent-writing-over-length-PLTE-chunk-Cosm.patch patch. CVE-2015-8126: Multiple buffer overflows in the png_set_PLTE and png_get_PLTE functions. (Closes: #805113) * Add Fixed-new-bug-with-CRC-error-after-reading-.patch patch. Fixed new bug with CRC error after reading an over-length palette. -- Salvatore Bonaccorso <carnil(a)debian.org> Tue, 17 Nov 2015 19:21:32 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on quigon.federez.net -- apticron

9 années, 5 mois

Cron <root@quigon> /root/scripts/replica.dokuwiki

par root＠quigon.rez-gif.supelec.fr

ssh: connect to host hexagon.federez.net port 22: Network is unreachable rsync: connection unexpectedly closed (0 bytes received so far) [Receiver] rsync error: unexplained error (code 255) at io.c(226) [Receiver=3.1.1]

9 années, 5 mois

3 Debian package update(s) for quigon.federez.net

par root＠quigon.rez-gif.supelec.fr

apticron report [Thu, 12 Nov 2015 23:38:09 +0100] ======================================================================== apticron has detected that some packages need upgrading on: quigon.federez.net [ 160.228.155.65 ] The following packages are currently pending an upgrade: linux-image-3.16.0-4-amd64 3.16.7-ckt11-1+deb8u6 linux-libc-dev 3.16.7-ckt11-1+deb8u6 unzip 6.0-16+deb8u2 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour unzip --- unzip (6.0-16+deb8u2) jessie-security; urgency=high * Non-maintainer upload by the Security Team. * Update 16-fix-integer-underflow-csiz-decrypted patch. Fix regression in handling 0-byte files. (Closes: #804595) -- Salvatore Bonaccorso <carnil(a)debian.org> Mon, 09 Nov 2015 20:49:54 +0100 --- Modifications pour linux (linux-image-3.16.0-4-amd64 linux-libc-dev) --- linux (3.16.7-ckt11-1+deb8u6) jessie-security; urgency=medium [ Salvatore Bonaccorso ] * KEYS: Fix race between key destruction and finding a keyring by name * KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring (CVE-2015-7872) * KEYS: Don't permit request_key() to construct a new keyring [ Ben Hutchings ] * usbvision: fix overflow of interfaces array (CVE-2015-7833) * RDS: fix race condition when sending a message on unbound socket (CVE-2015-7990) * [x86] KVM: Intercept #AC to avoid guest->host denial-of-service (CVE-2015-5307) -- Ben Hutchings <ben(a)decadent.org.uk> Mon, 09 Nov 2015 12:55:27 +0000 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on quigon.federez.net -- apticron

9 années, 5 mois

2 Debian package update(s) for baldrick.crans.org

par root＠baldrick.crans.org

apticron report [Thu, 12 Nov 2015 17:44:11 +0100] ======================================================================== apticron has detected that some packages need upgrading on: baldrick.crans.org [ 138.231.142.239 2a01:240:fe3d:4:62:61ff:fe6c:6401 138.231.142.239 ] [ 2a01:240:fe3d:4:62:61ff:fe6c:6401 ] The following packages are currently pending an upgrade: linux-image-3.16.0-4-amd64 3.16.7-ckt11-1+deb8u6 linux-libc-dev 3.16.7-ckt11-1+deb8u6 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour linux (linux-image-3.16.0-4-amd64 linux-libc-dev) --- linux (3.16.7-ckt11-1+deb8u6) jessie-security; urgency=medium [ Salvatore Bonaccorso ] * KEYS: Fix race between key destruction and finding a keyring by name * KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring (CVE-2015-7872) * KEYS: Don't permit request_key() to construct a new keyring [ Ben Hutchings ] * usbvision: fix overflow of interfaces array (CVE-2015-7833) * RDS: fix race condition when sending a message on unbound socket (CVE-2015-7990) * [x86] KVM: Intercept #AC to avoid guest->host denial-of-service (CVE-2015-5307) -- Ben Hutchings <ben(a)decadent.org.uk> Mon, 09 Nov 2015 12:55:27 +0000 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on baldrick.crans.org -- apticron

9 années, 5 mois

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

Monitoring Novembre 2015