Monitoring Mars 2015

monitoring@federez.net

4 participants
47 discussions

par root＠baldrick.crans.org

apticron report [Tue, 24 Mar 2015 16:44:12 +0000] ======================================================================== apticron has detected that some packages need upgrading on: baldrick [ 138.231.142.239 2a01:240:fe3d:4:62:61ff:fe6c:6401 138.231.142.239 ] [ 2a01:240:fe3d:4:62:61ff:fe6c:6401 ] The following packages are currently pending an upgrade: tzdata 2015b-0wheezy1 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour tzdata --- tzdata (2015b-0wheezy1) stable; urgency=medium * New upstream version: - New DST for Mongolia. - New DST for Palestine. -- Aurelien Jarno <aurel32(a)debian.org> Sun, 22 Mar 2015 11:29:28 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on baldrick -- apticron

10 années, 1 mois

2 Debian package update(s) for quigon.federez.net

par root＠quigon.rez-gif.supelec.fr

apticron report [Tue, 24 Mar 2015 16:38:12 +0100] ======================================================================== apticron has detected that some packages need upgrading on: quigon.federez.net [ 160.228.155.65 ] The following packages are currently pending an upgrade: libdatetime-timezone-perl 1:1.58-1+2015b tzdata 2015b-0wheezy1 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour libdatetime-timezone-perl --- libdatetime-timezone-perl (1:1.58-1+2015b) stable-proposed-updates; urgency=medium * Update to version 2015b of the Olson database. -- gregor herrmann <gregoa(a)debian.org> Sun, 22 Mar 2015 14:38:22 +0100 --- Modifications pour tzdata --- tzdata (2015b-0wheezy1) stable; urgency=medium * New upstream version: - New DST for Mongolia. - New DST for Palestine. -- Aurelien Jarno <aurel32(a)debian.org> Sun, 22 Mar 2015 11:29:28 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on quigon.federez.net -- apticron

10 années, 1 mois

1 Debian package update(s) for hexagon.federez.net

par root＠hexagon.federez.net

apticron report [Tue, 24 Mar 2015 09:48:14 +0100] ======================================================================== apticron has detected that some packages need upgrading on: hexagon.federez.net [ 5.39.82.35 2001:41d0:8:9423::1 5.39.82.35 2001:41d0:8:9423::1 ] The following packages are currently pending an upgrade: tzdata 2015b-0wheezy1 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour tzdata --- tzdata (2015b-0wheezy1) stable; urgency=medium * New upstream version: - New DST for Mongolia. - New DST for Palestine. -- Aurelien Jarno <aurel32(a)debian.org> Sun, 22 Mar 2015 11:29:28 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on hexagon.federez.net -- apticron

10 années, 1 mois

Cron <root@quigon> if test -x /usr/sbin/apticron; then /usr/sbin/apticron --cron; else true; fi

par root＠quigon.rez-gif.supelec.fr

W: Une erreur s'est produite lors du contrôle de la signature. Le dépôt n'est pas mis à jour et les fichiers d'index précédents seront utilisés. Erreur de GPG : http://http.debian.net wheezy-backports Release : Les signatures suivantes ne sont pas valables : BADSIG 8B48AD6246925553 Debian Archive Automatic Signing Key (7.0/wheezy) <ftpmaster(a)debian.org> W: Impossible de récupérer http://http.debian.net/debian/dists/wheezy-backports/Release W: Le téléchargement de quelques fichiers d'index a échoué, ils ont été ignorés, ou les anciens ont été utilisés à la place.

10 années, 1 mois

Cron <root@quigon> if test -x /usr/sbin/apticron; then /usr/sbin/apticron --cron; else true; fi

par root＠quigon.rez-gif.supelec.fr

10 années, 1 mois

9 Debian package update(s) for baldrick

par root＠baldrick.crans.org

apticron report [Sat, 21 Mar 2015 16:44:08 +0000] ======================================================================== apticron has detected that some packages need upgrading on: baldrick [ 138.231.142.239 2a01:240:fe3d:4:62:61ff:fe6c:6401 138.231.142.239 ] [ 2a01:240:fe3d:4:62:61ff:fe6c:6401 ] The following packages are currently pending an upgrade: libapache2-mod-php5 5.4.39-0+deb7u1 php5 5.4.39-0+deb7u1 php5-cgi 5.4.39-0+deb7u1 php5-cli 5.4.39-0+deb7u1 php5-common 5.4.39-0+deb7u1 php5-curl 5.4.39-0+deb7u1 php5-gd 5.4.39-0+deb7u1 php5-intl 5.4.39-0+deb7u1 php5-pgsql 5.4.39-0+deb7u1 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour php5 (libapache2-mod-php5 php5 php5-cgi php5-cli php5-common php5-curl php5-gd php5-intl php5-pgsql) --- php5 (5.4.39-0+deb7u1) wheezy-security; urgency=high * New upstream version 5.4.39 - Core: . Fixed bug #68976 (Use After Free Vulnerability in unserialize()) (CVE-2015-0231). . Fixed bug #69134 (Per Directory Values overrides PHP_INI_SYSTEM configuration options). . Fixed bug #69207 (move_uploaded_file allows nulls in path). - Ereg: . Fixed bug #69248 (heap overflow vulnerability in regcomp.c) (CVE-2015-2305). - SOAP: . Fixed bug #69085 (SoapClient's __call() type confusion through unserialize()). - ZIP: . Fixed bug #69253 (ZIP Integer Overflow leads to writing past heap boundary) (CVE-2015-2331). (Closes: #780713) * Refresh patches for 5.4.39 and remove already merged VU695940 * Start using git pq to manage patches in d/patches/ * Move PEAR-Builder-print-info-about-php5-dev.patch to debian/ since it's not a quilt patch * Add newly assigned CVE identifiers to older d/changelog entries * New patches: - 0060-PHP-SegFault-zend_hash_find-PHP-68486.patch - 0061-Fix-use-after-free-in-phar_object.c-PHP-68901-CVE-20.patch (CVE-2015-2301) * Remove invalid curl patch that got pulled as part of CVE-2015-1352 (Closes: #780771, #780764) * Split upstream fixes for PHP#68740 and PHP#68741 into separate patches -- Ondřej Surý <ondrej(a)debian.org> Fri, 20 Mar 2015 12:41:48 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on baldrick -- apticron

10 années, 1 mois

Cron <root@quigon> if test -x /usr/sbin/apticron; then /usr/sbin/apticron --cron; else true; fi

par root＠quigon.rez-gif.supelec.fr

W: Impossible de récupérer http://http.debian.net/debian/dists/wheezy-backports/main/binary-amd64/Pack… Somme de contrôle MD5 incohérente W: Impossible de récupérer http://http.debian.net/debian/dists/wheezy-backports/main/i18n/Translation-… Somme de contrôle de hachage incohérente E: Le téléchargement de quelques fichiers d'index a échoué, ils ont été ignorés, ou les anciens ont été utilisés à la place.

10 années, 1 mois

13 Debian package update(s) for baldrick

par root＠baldrick.crans.org

apticron report [Thu, 19 Mar 2015 16:44:30 +0000] ======================================================================== apticron has detected that some packages need upgrading on: baldrick [ 138.231.142.239 2a01:240:fe3d:4:62:61ff:fe6c:6401 138.231.142.239 ] [ 2a01:240:fe3d:4:62:61ff:fe6c:6401 ] The following packages are currently pending an upgrade: file 5.11-2+deb7u8 libapache2-mod-php5 5.4.38-0+deb7u1 libmagic1 5.11-2+deb7u8 libssl1.0.0 1.0.1e-2+deb7u15 openssl 1.0.1e-2+deb7u15 php5 5.4.38-0+deb7u1 php5-cgi 5.4.38-0+deb7u1 php5-cli 5.4.38-0+deb7u1 php5-common 5.4.38-0+deb7u1 php5-curl 5.4.38-0+deb7u1 php5-gd 5.4.38-0+deb7u1 php5-intl 5.4.38-0+deb7u1 php5-pgsql 5.4.38-0+deb7u1 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour file (file libmagic1) --- file (5.11-2+deb7u8) wheezy-security; urgency=high * Fix partial reads in readelf.c [CVE-2014-9653]. Closes: #777585 -- Christoph Biedl <debian.axhn(a)manchmal.in-ulm.de> Sun, 15 Feb 2015 19:00:38 +0100 --- Modifications pour php5 (libapache2-mod-php5 php5 php5-cgi php5-cli php5-common php5-curl php5-gd php5-intl php5-pgsql) --- php5 (5.4.38-0+deb7u1) wheezy-security; urgency=high * New upstream version 5.4.38 - Core: . Removed support for multi-line headers, as the are deprecated by RFC 7230. . Added NULL byte protection to exec, system and passthru. . Fixed bug #68925 (Mitigation for CVE-2015-0235 – GHOST: glibc gethostbyname buffer overflow). . Fixed bug #67827 (broken detection of system crypt sha256/sha512 support). . Fixed bug #68942 (Use after free vulnerability in unserialize() with DateTimeZone). (CVE-2015-0273) - Enchant: . Fixed bug #6855 (heap buffer overflow in enchant_broker_request_dict()). - SOAP: . Fixed bug #67427 (SoapServer cannot handle large messages) * Update patches for 5.4.38 release * Pull patch from DragonFly BSD Project to limit the pattern space to avoid a 32-bit overflow in Henry Spencer regular expressions (regex) library (Closes: #778389) * Drop PHP use system libs crypt patch, it has been broken and it's not strictly needed -- Ondřej Surý <ondrej(a)debian.org> Fri, 20 Feb 2015 11:41:40 +0100 php5 (5.4.37-0+deb7u1) wheezy-security; urgency=high * New upstream version 5.4.37 + Core: - Fixed bug #68710 (Use After Free Vulnerability in PHP's unserialize()) (CVE-2015-0231). + CGI: - Fixed bug #68618 (out of bounds read crashes php-cgi) (CVE-2014-9427). + EXIF: - Fixed bug #68799 (Free called on unitialized pointer) (CVE-2015-0232). + Fileinfo: - Removed readelf.c and related code from libmagic sources. - Fixed bug #68735 (fileinfo out-of-bounds memory access). + OpenSSL: - Fixed bug #55618 (use case-insensitive cert name matching). * Remove bugfixes that got merged into 5.4.37 release -- Ondřej Surý <ondrej(a)debian.org> Mon, 26 Jan 2015 11:09:42 +0100 --- Modifications pour openssl (libssl1.0.0 openssl) --- openssl (1.0.1e-2+deb7u15) wheezy-security; urgency=medium * Fix CVE-2015-0286 * Fix CVE-2015-0287 * Fix CVE-2015-0289 * Fix CVE-2015-0292 * Fix CVE-2015-0293 (not affected, SSLv2 disabled) * Fix CVE-2015-0209 * Fix CVE-2015-0288 * Remove export ciphers from DEFAULT. * Make DTLS always act as if read_ahead is set. This fixes a regression introduce by the fix for CVE-2014-3571. (Closes: #775502) * Fix error codes. -- Kurt Roeckx <kurt(a)roeckx.be> Tue, 17 Mar 2015 19:11:55 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on baldrick -- apticron

10 années, 1 mois

Cron <root@quigon> if test -x /usr/sbin/apticron; then /usr/sbin/apticron --cron; else true; fi

par root＠quigon.rez-gif.supelec.fr

W: Impossible de récupérer http://http.debian.net/debian/dists/wheezy-backports/main/i18n/Translation-… Somme de contrôle MD5 incohérente E: Le téléchargement de quelques fichiers d'index a échoué, ils ont été ignorés, ou les anciens ont été utilisés à la place.

10 années, 1 mois

9 Debian package update(s) for quigon.federez.net

par root＠quigon.rez-gif.supelec.fr

apticron report [Thu, 19 Mar 2015 16:38:12 +0100] ======================================================================== apticron has detected that some packages need upgrading on: quigon.federez.net [ 160.228.155.65 ] The following packages are currently pending an upgrade: file 5.11-2+deb7u8 libapache2-mod-php5 5.4.38-0+deb7u1 libmagic1 5.11-2+deb7u8 libssl1.0.0 1.0.1e-2+deb7u15 openssl 1.0.1e-2+deb7u15 php5 5.4.38-0+deb7u1 php5-cli 5.4.38-0+deb7u1 php5-common 5.4.38-0+deb7u1 php5-ldap 5.4.38-0+deb7u1 ======================================================================== Package Details: Lecture des fichiers de modifications (« changelog »)... --- Modifications pour file (file libmagic1) --- file (5.11-2+deb7u8) wheezy-security; urgency=high * Fix partial reads in readelf.c [CVE-2014-9653]. Closes: #777585 -- Christoph Biedl <debian.axhn(a)manchmal.in-ulm.de> Sun, 15 Feb 2015 19:00:38 +0100 --- Modifications pour php5 (libapache2-mod-php5 php5 php5-cli php5-common php5-ldap) --- php5 (5.4.38-0+deb7u1) wheezy-security; urgency=high * New upstream version 5.4.38 - Core: . Removed support for multi-line headers, as the are deprecated by RFC 7230. . Added NULL byte protection to exec, system and passthru. . Fixed bug #68925 (Mitigation for CVE-2015-0235 – GHOST: glibc gethostbyname buffer overflow). . Fixed bug #67827 (broken detection of system crypt sha256/sha512 support). . Fixed bug #68942 (Use after free vulnerability in unserialize() with DateTimeZone). (CVE-2015-0273) - Enchant: . Fixed bug #6855 (heap buffer overflow in enchant_broker_request_dict()). - SOAP: . Fixed bug #67427 (SoapServer cannot handle large messages) * Update patches for 5.4.38 release * Pull patch from DragonFly BSD Project to limit the pattern space to avoid a 32-bit overflow in Henry Spencer regular expressions (regex) library (Closes: #778389) * Drop PHP use system libs crypt patch, it has been broken and it's not strictly needed -- Ondřej Surý <ondrej(a)debian.org> Fri, 20 Feb 2015 11:41:40 +0100 php5 (5.4.37-0+deb7u1) wheezy-security; urgency=high * New upstream version 5.4.37 + Core: - Fixed bug #68710 (Use After Free Vulnerability in PHP's unserialize()) (CVE-2015-0231). + CGI: - Fixed bug #68618 (out of bounds read crashes php-cgi) (CVE-2014-9427). + EXIF: - Fixed bug #68799 (Free called on unitialized pointer) (CVE-2015-0232). + Fileinfo: - Removed readelf.c and related code from libmagic sources. - Fixed bug #68735 (fileinfo out-of-bounds memory access). + OpenSSL: - Fixed bug #55618 (use case-insensitive cert name matching). * Remove bugfixes that got merged into 5.4.37 release -- Ondřej Surý <ondrej(a)debian.org> Mon, 26 Jan 2015 11:09:42 +0100 --- Modifications pour openssl (libssl1.0.0 openssl) --- openssl (1.0.1e-2+deb7u15) wheezy-security; urgency=medium * Fix CVE-2015-0286 * Fix CVE-2015-0287 * Fix CVE-2015-0289 * Fix CVE-2015-0292 * Fix CVE-2015-0293 (not affected, SSLv2 disabled) * Fix CVE-2015-0209 * Fix CVE-2015-0288 * Remove export ciphers from DEFAULT. * Make DTLS always act as if read_ahead is set. This fixes a regression introduce by the fix for CVE-2014-3571. (Closes: #775502) * Fix error codes. -- Kurt Roeckx <kurt(a)roeckx.be> Tue, 17 Mar 2015 19:11:55 +0100 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on quigon.federez.net -- apticron

10 années, 1 mois

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

Monitoring Mars 2015