Monitoring Novembre 2015

monitoring@federez.net

6 participants
35 discussions

5 Debian package update(s) for quigon.federez.net

par root＠quigon.rez-gif.supelec.fr

apticron report [Fri, 06 Nov 2015 23:38:10 +0100] ======================================================================== apticron has detected that some packages need upgrading on: quigon.federez.net [ 160.228.155.65 ] The following packages are currently pending an upgrade: krb5-locales 1.12.1+dfsg-19+deb8u1 libgssapi-krb5-2 1.12.1+dfsg-19+deb8u1 libk5crypto3 1.12.1+dfsg-19+deb8u1 libkrb5-3 1.12.1+dfsg-19+deb8u1 libkrb5support0 1.12.1+dfsg-19+deb8u1 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour krb5 (krb5-locales libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0) --- krb5 (1.12.1+dfsg-19+deb8u1) jessie-security; urgency=high * Import upstream patches for four CVEs: - CVE-2015-2695: SPNEGO context aliasing during establishment, Closes: #803083 - CVE-2015-2696: IAKERB context aliasing during establishment, Closes: #803084 - CVE-2015-2697: unsafe string handling in TGS processing, Closes: #803088 - CVE-2015-2698: regression (memory corruption) in patch for CVE-2015-2696 * In addition to CVE-2015-2698, the upstream patches for CVE-2015-2695 and CVE-2015-2696 introduced regressions preventing the use of gss_import_sec_context() with contexts established using IAKERB or SPNEGO; the fixes for those regressions are included here. -- Benjamin Kaduk <kaduk(a)mit.edu> Wed, 04 Nov 2015 22:05:10 -0500 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on quigon.federez.net -- apticron

9 années, 5 mois

4 Debian package update(s) for baldrick.crans.org

par root＠baldrick.crans.org

apticron report [Mon, 02 Nov 2015 17:44:13 +0100] ======================================================================== apticron has detected that some packages need upgrading on: baldrick.crans.org [ 138.231.142.239 2a01:240:fe3d:4:62:61ff:fe6c:6401 138.231.142.239 ] [ 2a01:240:fe3d:4:62:61ff:fe6c:6401 ] The following packages are currently pending an upgrade: ntp 1:4.2.6.p5+dfsg-7+deb8u1 ntpdate 1:4.2.6.p5+dfsg-7+deb8u1 openjdk-7-jre 7u85-2.6.1-6+deb8u1 openjdk-7-jre-headless 7u85-2.6.1-6+deb8u1 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour openjdk-7 (openjdk-7-jre openjdk-7-jre-headless) --- openjdk-7 (7u85-2.6.1-6+deb8u1) jessie-security; urgency=medium * Rebuild for jessie-security -- Moritz Muehlenhoff <jmm(a)debian.org> Sat, 31 Oct 2015 20:29:47 +0100 openjdk-7 (7u85-2.6.1-6) unstable; urgency=high [ Tiago Stürmer Daitx ] * Security fixes - S8048030, CVE-2015-4734: Expectations should be consistent - S8068842, CVE-2015-4803: Better JAXP data handling - S8076339, CVE-2015-4903: Better handling of remote object invocation - S8076383, CVE-2015-4835: Better CORBA exception handling - S8076387, CVE-2015-4882: Better CORBA value handling - S8076392, CVE-2015-4881: Improve IIOPInputStream consistency - S8076413, CVE-2015-4883: Better JRMP message handling - S8078427, CVE-2015-4842: More supportive home environment - S8078440: Safer managed types - S8080541: More direct property handling - S8080688, CVE-2015-4860: Service for DGC services - S8081744, CVE-2015-4868: Clear out list corner case - S8081760: Better group dynamics - S8086092. CVE-2015-4840: More palette improvements - S8086733, CVE-2015-4893: Improve namespace handling - S8087350: Improve array conversions - S8103671, CVE-2015-4805: More objective stream classes - S8103675: Better Binary searches - S8129611: Accessbridge error handling improvement - S8130078, CVE-2015-4911: Document better processing - S8130185: More accessible access switch - S8130193, CVE-2015-4806: Improve HTTP connections - S8130864: Better server identity handling - S8130891, CVE-2015-4843: (bf) More direct buffering - S8131291, CVE-2015-4872: Perfect parameter patterning - S8132042, CVE-2015-4844: Preserve layout presentation * S6966259: Make PrincipalName and Realm immutable, required for S8048030 * S8078822: 8068842 fix missed one new file PrimeNumberSequenceGenerator.java [ Matthias Klose ] * Re-enable the atk bridge for releases with a fixed atk bridge. Again closes: #797595. -- Matthias Klose <doko(a)ubuntu.com> Thu, 22 Oct 2015 00:42:34 +0200 openjdk-7 (7u85-2.6.1-5) unstable; urgency=medium * Fix passing --disable-system-sctp for non-linux targets. -- Matthias Klose <doko(a)ubuntu.com> Thu, 08 Oct 2015 07:01:54 +0200 --- Modifications pour ntp (ntp ntpdate) --- ntp (1:4.2.6.p5+dfsg-7+deb8u1) jessie-security; urgency=medium * Fix CVE-2015-7850 * Fix CVE-2015-7704 * Fix CVE-2015-7701 * Fix CVE-2015-7852 * Fix CVE-2015-7851 * Fix CVE-2015-7855 * Fix CVE-2015-7871 * Rename CVE-2014-9297.patch to CVE-2014-9750.patch * Rename CVE-2014-9298.patch to CVE-2014-9751.patch * Rename bug-2797.patch to CVE-2015-3405.patch * FIX CVE-2015-5146 * FIX CVE-2015-5194 * FIX CVE-2015-5195 * FIX CVE-2015-7703 * FIX CVE-2015-5219 * FIX CVE-2015-5300 * FIX CVE-2015-7691, CVE-2015-7692, CVE-2015-7702 * Add build-depends on bison since one of the patches update the .y file. -- Kurt Roeckx <kurt(a)roeckx.be> Wed, 28 Oct 2015 21:05:21 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on baldrick.crans.org -- apticron

9 années, 5 mois

3 Debian package update(s) for hexagon.federez.net

par root＠hexagon.federez.net

apticron report [Mon, 02 Nov 2015 09:48:20 +0100] ======================================================================== apticron has detected that some packages need upgrading on: hexagon.federez.net [ 5.39.82.35 2001:41d0:8:9423::1 5.39.82.35 2001:41d0:8:9423::1 ] The following packages are currently pending an upgrade: ntp 1:4.2.6.p5+dfsg-7+deb8u1 ntpdate 1:4.2.6.p5+dfsg-7+deb8u1 unzip 6.0-16+deb8u1 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour unzip --- unzip (6.0-16+deb8u1) jessie-security; urgency=high * Non-maintainer upload by the Security Team. * Fix infinite loop when extracting password-protected archive. This is CVE-2015-7697. Closes: #802160. * Fix heap overflow when extracting password-protected archive. This is CVE-2015-7696. Closes: #802162. * Fix additional unsigned overflow on invalid input. -- Laszlo Boszormenyi (GCS) <gcs(a)debian.org> Thu, 22 Oct 2015 12:51:52 +0000 --- Modifications pour ntp (ntp ntpdate) --- ntp (1:4.2.6.p5+dfsg-7+deb8u1) jessie-security; urgency=medium * Fix CVE-2015-7850 * Fix CVE-2015-7704 * Fix CVE-2015-7701 * Fix CVE-2015-7852 * Fix CVE-2015-7851 * Fix CVE-2015-7855 * Fix CVE-2015-7871 * Rename CVE-2014-9297.patch to CVE-2014-9750.patch * Rename CVE-2014-9298.patch to CVE-2014-9751.patch * Rename bug-2797.patch to CVE-2015-3405.patch * FIX CVE-2015-5146 * FIX CVE-2015-5194 * FIX CVE-2015-5195 * FIX CVE-2015-7703 * FIX CVE-2015-5219 * FIX CVE-2015-5300 * FIX CVE-2015-7691, CVE-2015-7692, CVE-2015-7702 * Add build-depends on bison since one of the patches update the .y file. -- Kurt Roeckx <kurt(a)roeckx.be> Wed, 28 Oct 2015 21:05:21 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on hexagon.federez.net -- apticron

9 années, 5 mois

3 Debian package update(s) for quigon.federez.net

par root＠quigon.rez-gif.supelec.fr

apticron report [Sun, 01 Nov 2015 23:38:09 +0100] ======================================================================== apticron has detected that some packages need upgrading on: quigon.federez.net [ 160.228.155.65 ] The following packages are currently pending an upgrade: ntp 1:4.2.6.p5+dfsg-7+deb8u1 ntpdate 1:4.2.6.p5+dfsg-7+deb8u1 unzip 6.0-16+deb8u1 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour unzip --- unzip (6.0-16+deb8u1) jessie-security; urgency=high * Non-maintainer upload by the Security Team. * Fix infinite loop when extracting password-protected archive. This is CVE-2015-7697. Closes: #802160. * Fix heap overflow when extracting password-protected archive. This is CVE-2015-7696. Closes: #802162. * Fix additional unsigned overflow on invalid input. -- Laszlo Boszormenyi (GCS) <gcs(a)debian.org> Thu, 22 Oct 2015 12:51:52 +0000 --- Modifications pour ntp (ntp ntpdate) --- ntp (1:4.2.6.p5+dfsg-7+deb8u1) jessie-security; urgency=medium * Fix CVE-2015-7850 * Fix CVE-2015-7704 * Fix CVE-2015-7701 * Fix CVE-2015-7852 * Fix CVE-2015-7851 * Fix CVE-2015-7855 * Fix CVE-2015-7871 * Rename CVE-2014-9297.patch to CVE-2014-9750.patch * Rename CVE-2014-9298.patch to CVE-2014-9751.patch * Rename bug-2797.patch to CVE-2015-3405.patch * FIX CVE-2015-5146 * FIX CVE-2015-5194 * FIX CVE-2015-5195 * FIX CVE-2015-7703 * FIX CVE-2015-5219 * FIX CVE-2015-5300 * FIX CVE-2015-7691, CVE-2015-7692, CVE-2015-7702 * Add build-depends on bison since one of the patches update the .y file. -- Kurt Roeckx <kurt(a)roeckx.be> Wed, 28 Oct 2015 21:05:21 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on quigon.federez.net -- apticron

9 années, 5 mois

1 Debian package update(s) for hexagon.federez.net

par root＠hexagon.federez.net

apticron report [Sun, 01 Nov 2015 09:48:18 +0100] ======================================================================== apticron has detected that some packages need upgrading on: hexagon.federez.net [ 5.39.82.35 2001:41d0:8:9423::1 5.39.82.35 2001:41d0:8:9423::1 ] The following packages are currently pending an upgrade: unzip 6.0-16+deb8u1 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour unzip --- unzip (6.0-16+deb8u1) jessie-security; urgency=high * Non-maintainer upload by the Security Team. * Fix infinite loop when extracting password-protected archive. This is CVE-2015-7697. Closes: #802160. * Fix heap overflow when extracting password-protected archive. This is CVE-2015-7696. Closes: #802162. * Fix additional unsigned overflow on invalid input. -- Laszlo Boszormenyi (GCS) <gcs(a)debian.org> Thu, 22 Oct 2015 12:51:52 +0000 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on hexagon.federez.net -- apticron

9 années, 5 mois

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

Monitoring Novembre 2015