Monitoring Septembre 2019

monitoring@federez.net

8 participants
65 discussions

18 Debian package update(s) for quigon.federez.net

par root＠quigon.federez.net

apticron report [Mon, 30 Sep 2019 22:38:05 +0200] ======================================================================== apticron has detected that some packages need upgrading on: quigon.federez.net [ 160.228.155.65 ] The following packages are currently pending an upgrade: e2fslibs 1.43.4-2+deb9u1 e2fsprogs 1.43.4-2+deb9u1 libapache2-mod-php7.0 7.0.33-0+deb9u5 libcomerr2 1.43.4-2+deb9u1 libdatetime-timezone-perl 1:2.09-1+2019c libexpat1 2.2.0-2+deb9u3 libexpat1-dev 2.2.0-2+deb9u3 libss2 1.43.4-2+deb9u1 linux-image-4.9.0-11-amd64 4.9.189-3+deb9u1 linux-libc-dev 4.9.189-3+deb9u1 php7.0 7.0.33-0+deb9u5 php7.0-cli 7.0.33-0+deb9u5 php7.0-common 7.0.33-0+deb9u5 php7.0-json 7.0.33-0+deb9u5 php7.0-ldap 7.0.33-0+deb9u5 php7.0-opcache 7.0.33-0+deb9u5 php7.0-readline 7.0.33-0+deb9u5 tzdata 2019c-0+deb9u1 ======================================================================== Package Details: apt-listchanges : Lecture des fichiers de modifications (« changelog »)... apt-listchanges : journaux des modifications (« changelogs ») ------------------------------------------------------------- --- Modifications pour e2fsprogs (e2fslibs e2fsprogs libcomerr2 libss2) --- e2fsprogs (1.43.4-2+deb9u1) stretch-security; urgency=high * Fix CVE-2019-5094: potential buffer overrun in e2fsck (Closes: #941139) -- Theodore Y. Ts'o <tytso(a)mit.edu> Wed, 25 Sep 2019 19:17:45 -0400 --- Modifications pour expat (libexpat1 libexpat1-dev) --- expat (2.2.0-2+deb9u3) stretch-security; urgency=high * Non-maintainer upload by the Security Team. * xmlparse.c: Deny internal entities closing the doctype (CVE-2019-15903) (Closes: #939394) -- Salvatore Bonaccorso <carnil(a)debian.org> Thu, 19 Sep 2019 23:43:05 +0200 --- Modifications pour linux (linux-image-4.9.0-11-amd64 linux-libc-dev) --- linux (4.9.189-3+deb9u1) stretch-security; urgency=high * vhost: make sure log_num < in_num (CVE-2019-14835) * ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit (CVE-2019-15117) * ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term (CVE-2019-15118) * [x86] ptrace: fix up botched merge of spectrev1 fix (CVE-2019-15902) * KVM: coalesced_mmio: add bounds checking (CVE-2019-14821) -- Salvatore Bonaccorso <carnil(a)debian.org> Fri, 20 Sep 2019 13:03:45 +0200 --- Modifications pour libdatetime-timezone-perl --- libdatetime-timezone-perl (1:2.09-1+2019c) stretch; urgency=medium * Update to Olson database version 2019c. This update contains contemporary changes for Fiji and Norfolk Island. -- gregor herrmann <gregoa(a)debian.org> Sat, 14 Sep 2019 16:09:21 +0200 --- Modifications pour php7.0 (libapache2-mod-php7.0 php7.0 php7.0-cli php7.0-common php7.0-json php7.0-ldap php7.0-opcache php7.0-readline) --- php7.0 (7.0.33-0+deb9u5) stretch-security; urgency=medium * Backported security fixes from PHP 7.1.29: - EXIF: . Fixed bug #77950 (Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG). - Mail: . Fixed bug #77821 (Potential heap corruption in TSendMail()). * Backported from 7.1.30 - EXIF: . Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16). (CVE-2019-11040) - GD: . Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm). (CVE-2019-11038) - Iconv: . Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflow). (CVE-2019-11039). - SQLite: . Fixed bug #77967 (Bypassing open_basedir restrictions via file uris). * Backported from 7.1.31 - EXIF: . Fixed bug #78256 (heap-buffer-overflow on exif_process_user_comment). (CVE-2019-11042) . Fixed bug #78222 (heap-buffer-overflow on exif_scan_thumbnail). (CVE-2019-11041) - Phar: . Fixed bug #77919 (Potential UAF in Phar RSHUTDOWN). - SQLite: . Upgraded to SQLite 3.28.0. * Backported from 7.1.32 - mbstring: . Fixed CVE-2019-13224 (don't allow different encodings for onig_new_deluxe) - pcre: . Fixed bug #75457 (heap use-after-free in pcrelib) -- Ondřej Surý <ondrej(a)sury.org> Wed, 18 Sep 2019 11:55:34 +0200 php7.0 (7.0.33-0+deb9u4) stretch-security; urgency=medium * Update d/watch for new php.net pages * Backported from 7.1.28 - EXIF: . (CVE-2019-11034) Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s). . (CVE-2019-11035) Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value). - SQLite3: . Added sqlite3.defensive INI directive. * Backported from PHP 7.1.29 - EXIF: . (CVE-2019-11036) Fixed bug #77950 (Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG). - Mail: . Fixed bug #77821 (Potential heap corruption in TSendMail()). * Backported from 7.1.30 - EXIF: . (CVE-2019-11040) Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16). - GD: . (CVE-2019-11038) Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm). - Iconv: . (CVE-2019-11039) Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflow). - SQLite: . Fixed bug #77967 (Bypassing open_basedir restrictions via file uris). -- Ondřej Surý <ondrej(a)sury.org> Sun, 09 Jun 2019 11:25:27 +0200 --- Modifications pour tzdata --- tzdata (2019c-0+deb9u1) stretch; urgency=medium * New upstream version, affecting the following future timestamps: - Fiji's next DST transitions will be 2019-11-10 and 2020-01-12 instead of 2019-11-03 and 2020-01-19. - Norfolk Island will observe Australian-style DST starting in spring 2019. The first transition is on 2019-10-06. -- Aurelien Jarno <aurel32(a)debian.org> Wed, 18 Sep 2019 00:40:44 +0200 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on quigon.federez.net -- apticron

5 années, 6 mois

21 Debian package update(s) for nonagon.federez.net

par club-federez＠crans.org

apticron report [Mon, 30 Sep 2019 13:49:10 +0200] ======================================================================== apticron has detected that some packages need upgrading on: nonagon.federez.net [ 185.230.78.42 2a0c:700:0:23:67:e5ff:fee9:3 ] The following packages are currently pending an upgrade: e2fslibs 1.43.4-2+deb9u1 e2fsprogs 1.43.4-2+deb9u1 libapache2-mod-php7.3 7.3.9-1~deb10u1 libcom-err2 1.44.5-1+deb10u2 libcomerr2 1.44.5-1+deb10u2 libexpat1 2.2.0-2+deb9u3 libexpat1-dev 2.2.0-2+deb9u3 libss2 1.43.4-2+deb9u1 linux-libc-dev 4.9.189-3+deb9u1 php7.3 7.3.9-1~deb10u1 php7.3-cli 7.3.9-1~deb10u1 php7.3-common 7.3.9-1~deb10u1 php7.3-curl 7.3.9-1~deb10u1 php7.3-gd 7.3.9-1~deb10u1 php7.3-json 7.3.9-1~deb10u1 php7.3-ldap 7.3.9-1~deb10u1 php7.3-mbstring 7.3.9-1~deb10u1 php7.3-mysql 7.3.9-1~deb10u1 php7.3-opcache 7.3.9-1~deb10u1 php7.3-readline 7.3.9-1~deb10u1 tzdata 2019c-0+deb9u1 ======================================================================== Package Details: apt-listchanges : Lecture des fichiers de modifications (« changelog »)... apt-listchanges : journaux des modifications (« changelogs ») ------------------------------------------------------------- --- Modifications pour e2fsprogs (e2fslibs e2fsprogs libcom-err2 libcomerr2 libss2) --- e2fsprogs (1.44.5-1+deb10u2) buster-security; urgency=high * Fix CVE-2019-5094: potential buffer overrun in e2fsck (Closes: #941139) -- Theodore Y. Ts'o <tytso(a)mit.edu> Wed, 25 Sep 2019 13:37:44 -0400 --- Modifications pour expat (libexpat1 libexpat1-dev) --- expat (2.2.0-2+deb9u3) stretch-security; urgency=high * Non-maintainer upload by the Security Team. * xmlparse.c: Deny internal entities closing the doctype (CVE-2019-15903) (Closes: #939394) -- Salvatore Bonaccorso <carnil(a)debian.org> Thu, 19 Sep 2019 23:43:05 +0200 --- Modifications pour linux (linux-libc-dev) --- linux (4.9.189-3+deb9u1) stretch-security; urgency=high * vhost: make sure log_num < in_num (CVE-2019-14835) * ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit (CVE-2019-15117) * ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term (CVE-2019-15118) * [x86] ptrace: fix up botched merge of spectrev1 fix (CVE-2019-15902) * KVM: coalesced_mmio: add bounds checking (CVE-2019-14821) -- Salvatore Bonaccorso <carnil(a)debian.org> Fri, 20 Sep 2019 13:03:45 +0200 --- Modifications pour php7.3 (libapache2-mod-php7.3 php7.3 php7.3-cli php7.3-common php7.3-curl php7.3-gd php7.3-json php7.3-ldap php7.3-mbstring php7.3-mysql php7.3-opcache php7.3-readline) --- php7.3 (7.3.9-1~deb10u1) buster-security; urgency=high * New upstream version 7.3.9 * php7.3-curl: Add Breaks against php7.0-curl for smoother upgrades from stretch. (Closes: #929689) -- Ondřej Surý <ondrej(a)sury.org> Wed, 18 Sep 2019 12:33:23 +0200 --- Modifications pour tzdata --- tzdata (2019c-0+deb9u1) stretch; urgency=medium * New upstream version, affecting the following future timestamps: - Fiji's next DST transitions will be 2019-11-10 and 2020-01-12 instead of 2019-11-03 and 2020-01-19. - Norfolk Island will observe Australian-style DST starting in spring 2019. The first transition is on 2019-10-06. -- Aurelien Jarno <aurel32(a)debian.org> Wed, 18 Sep 2019 00:40:44 +0200 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on nonagon.federez.net -- apticron

5 années, 6 mois

18 Debian package update(s) for quigon.federez.net

par root＠quigon.federez.net

apticron report [Sun, 29 Sep 2019 22:38:04 +0200] ======================================================================== apticron has detected that some packages need upgrading on: quigon.federez.net [ 160.228.155.65 ] The following packages are currently pending an upgrade: e2fslibs 1.43.4-2+deb9u1 e2fsprogs 1.43.4-2+deb9u1 libapache2-mod-php7.0 7.0.33-0+deb9u5 libcomerr2 1.43.4-2+deb9u1 libdatetime-timezone-perl 1:2.09-1+2019c libexpat1 2.2.0-2+deb9u3 libexpat1-dev 2.2.0-2+deb9u3 libss2 1.43.4-2+deb9u1 linux-image-4.9.0-11-amd64 4.9.189-3+deb9u1 linux-libc-dev 4.9.189-3+deb9u1 php7.0 7.0.33-0+deb9u5 php7.0-cli 7.0.33-0+deb9u5 php7.0-common 7.0.33-0+deb9u5 php7.0-json 7.0.33-0+deb9u5 php7.0-ldap 7.0.33-0+deb9u5 php7.0-opcache 7.0.33-0+deb9u5 php7.0-readline 7.0.33-0+deb9u5 tzdata 2019c-0+deb9u1 ======================================================================== Package Details: apt-listchanges : Lecture des fichiers de modifications (« changelog »)... apt-listchanges : journaux des modifications (« changelogs ») ------------------------------------------------------------- --- Modifications pour e2fsprogs (e2fslibs e2fsprogs libcomerr2 libss2) --- e2fsprogs (1.43.4-2+deb9u1) stretch-security; urgency=high * Fix CVE-2019-5094: potential buffer overrun in e2fsck (Closes: #941139) -- Theodore Y. Ts'o <tytso(a)mit.edu> Wed, 25 Sep 2019 19:17:45 -0400 --- Modifications pour expat (libexpat1 libexpat1-dev) --- expat (2.2.0-2+deb9u3) stretch-security; urgency=high * Non-maintainer upload by the Security Team. * xmlparse.c: Deny internal entities closing the doctype (CVE-2019-15903) (Closes: #939394) -- Salvatore Bonaccorso <carnil(a)debian.org> Thu, 19 Sep 2019 23:43:05 +0200 --- Modifications pour linux (linux-image-4.9.0-11-amd64 linux-libc-dev) --- linux (4.9.189-3+deb9u1) stretch-security; urgency=high * vhost: make sure log_num < in_num (CVE-2019-14835) * ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit (CVE-2019-15117) * ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term (CVE-2019-15118) * [x86] ptrace: fix up botched merge of spectrev1 fix (CVE-2019-15902) * KVM: coalesced_mmio: add bounds checking (CVE-2019-14821) -- Salvatore Bonaccorso <carnil(a)debian.org> Fri, 20 Sep 2019 13:03:45 +0200 --- Modifications pour libdatetime-timezone-perl --- libdatetime-timezone-perl (1:2.09-1+2019c) stretch; urgency=medium * Update to Olson database version 2019c. This update contains contemporary changes for Fiji and Norfolk Island. -- gregor herrmann <gregoa(a)debian.org> Sat, 14 Sep 2019 16:09:21 +0200 --- Modifications pour php7.0 (libapache2-mod-php7.0 php7.0 php7.0-cli php7.0-common php7.0-json php7.0-ldap php7.0-opcache php7.0-readline) --- php7.0 (7.0.33-0+deb9u5) stretch-security; urgency=medium * Backported security fixes from PHP 7.1.29: - EXIF: . Fixed bug #77950 (Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG). - Mail: . Fixed bug #77821 (Potential heap corruption in TSendMail()). * Backported from 7.1.30 - EXIF: . Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16). (CVE-2019-11040) - GD: . Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm). (CVE-2019-11038) - Iconv: . Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflow). (CVE-2019-11039). - SQLite: . Fixed bug #77967 (Bypassing open_basedir restrictions via file uris). * Backported from 7.1.31 - EXIF: . Fixed bug #78256 (heap-buffer-overflow on exif_process_user_comment). (CVE-2019-11042) . Fixed bug #78222 (heap-buffer-overflow on exif_scan_thumbnail). (CVE-2019-11041) - Phar: . Fixed bug #77919 (Potential UAF in Phar RSHUTDOWN). - SQLite: . Upgraded to SQLite 3.28.0. * Backported from 7.1.32 - mbstring: . Fixed CVE-2019-13224 (don't allow different encodings for onig_new_deluxe) - pcre: . Fixed bug #75457 (heap use-after-free in pcrelib) -- Ondřej Surý <ondrej(a)sury.org> Wed, 18 Sep 2019 11:55:34 +0200 php7.0 (7.0.33-0+deb9u4) stretch-security; urgency=medium * Update d/watch for new php.net pages * Backported from 7.1.28 - EXIF: . (CVE-2019-11034) Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s). . (CVE-2019-11035) Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value). - SQLite3: . Added sqlite3.defensive INI directive. * Backported from PHP 7.1.29 - EXIF: . (CVE-2019-11036) Fixed bug #77950 (Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG). - Mail: . Fixed bug #77821 (Potential heap corruption in TSendMail()). * Backported from 7.1.30 - EXIF: . (CVE-2019-11040) Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16). - GD: . (CVE-2019-11038) Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm). - Iconv: . (CVE-2019-11039) Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflow). - SQLite: . Fixed bug #77967 (Bypassing open_basedir restrictions via file uris). -- Ondřej Surý <ondrej(a)sury.org> Sun, 09 Jun 2019 11:25:27 +0200 --- Modifications pour tzdata --- tzdata (2019c-0+deb9u1) stretch; urgency=medium * New upstream version, affecting the following future timestamps: - Fiji's next DST transitions will be 2019-11-10 and 2020-01-12 instead of 2019-11-03 and 2020-01-19. - Norfolk Island will observe Australian-style DST starting in spring 2019. The first transition is on 2019-10-06. -- Aurelien Jarno <aurel32(a)debian.org> Wed, 18 Sep 2019 00:40:44 +0200 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on quigon.federez.net -- apticron

5 années, 6 mois

21 Debian package update(s) for nonagon.federez.net

par club-federez＠crans.org

apticron report [Sun, 29 Sep 2019 13:49:10 +0200] ======================================================================== apticron has detected that some packages need upgrading on: nonagon.federez.net [ 185.230.78.42 2a0c:700:0:23:67:e5ff:fee9:3 ] The following packages are currently pending an upgrade: e2fslibs 1.43.4-2+deb9u1 e2fsprogs 1.43.4-2+deb9u1 libapache2-mod-php7.3 7.3.9-1~deb10u1 libcom-err2 1.44.5-1+deb10u2 libcomerr2 1.44.5-1+deb10u2 libexpat1 2.2.0-2+deb9u3 libexpat1-dev 2.2.0-2+deb9u3 libss2 1.43.4-2+deb9u1 linux-libc-dev 4.9.189-3+deb9u1 php7.3 7.3.9-1~deb10u1 php7.3-cli 7.3.9-1~deb10u1 php7.3-common 7.3.9-1~deb10u1 php7.3-curl 7.3.9-1~deb10u1 php7.3-gd 7.3.9-1~deb10u1 php7.3-json 7.3.9-1~deb10u1 php7.3-ldap 7.3.9-1~deb10u1 php7.3-mbstring 7.3.9-1~deb10u1 php7.3-mysql 7.3.9-1~deb10u1 php7.3-opcache 7.3.9-1~deb10u1 php7.3-readline 7.3.9-1~deb10u1 tzdata 2019c-0+deb9u1 ======================================================================== Package Details: apt-listchanges : Lecture des fichiers de modifications (« changelog »)... apt-listchanges : journaux des modifications (« changelogs ») ------------------------------------------------------------- --- Modifications pour e2fsprogs (e2fslibs e2fsprogs libcom-err2 libcomerr2 libss2) --- e2fsprogs (1.44.5-1+deb10u2) buster-security; urgency=high * Fix CVE-2019-5094: potential buffer overrun in e2fsck (Closes: #941139) -- Theodore Y. Ts'o <tytso(a)mit.edu> Wed, 25 Sep 2019 13:37:44 -0400 --- Modifications pour expat (libexpat1 libexpat1-dev) --- expat (2.2.0-2+deb9u3) stretch-security; urgency=high * Non-maintainer upload by the Security Team. * xmlparse.c: Deny internal entities closing the doctype (CVE-2019-15903) (Closes: #939394) -- Salvatore Bonaccorso <carnil(a)debian.org> Thu, 19 Sep 2019 23:43:05 +0200 --- Modifications pour linux (linux-libc-dev) --- linux (4.9.189-3+deb9u1) stretch-security; urgency=high * vhost: make sure log_num < in_num (CVE-2019-14835) * ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit (CVE-2019-15117) * ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term (CVE-2019-15118) * [x86] ptrace: fix up botched merge of spectrev1 fix (CVE-2019-15902) * KVM: coalesced_mmio: add bounds checking (CVE-2019-14821) -- Salvatore Bonaccorso <carnil(a)debian.org> Fri, 20 Sep 2019 13:03:45 +0200 --- Modifications pour php7.3 (libapache2-mod-php7.3 php7.3 php7.3-cli php7.3-common php7.3-curl php7.3-gd php7.3-json php7.3-ldap php7.3-mbstring php7.3-mysql php7.3-opcache php7.3-readline) --- php7.3 (7.3.9-1~deb10u1) buster-security; urgency=high * New upstream version 7.3.9 * php7.3-curl: Add Breaks against php7.0-curl for smoother upgrades from stretch. (Closes: #929689) -- Ondřej Surý <ondrej(a)sury.org> Wed, 18 Sep 2019 12:33:23 +0200 --- Modifications pour tzdata --- tzdata (2019c-0+deb9u1) stretch; urgency=medium * New upstream version, affecting the following future timestamps: - Fiji's next DST transitions will be 2019-11-10 and 2020-01-12 instead of 2019-11-03 and 2020-01-19. - Norfolk Island will observe Australian-style DST starting in spring 2019. The first transition is on 2019-10-06. -- Aurelien Jarno <aurel32(a)debian.org> Wed, 18 Sep 2019 00:40:44 +0200 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on nonagon.federez.net -- apticron

5 années, 6 mois

18 Debian package update(s) for quigon.federez.net

par root＠quigon.federez.net

apticron report [Sat, 28 Sep 2019 22:38:05 +0200] ======================================================================== apticron has detected that some packages need upgrading on: quigon.federez.net [ 160.228.155.65 ] The following packages are currently pending an upgrade: e2fslibs 1.43.4-2+deb9u1 e2fsprogs 1.43.4-2+deb9u1 libapache2-mod-php7.0 7.0.33-0+deb9u5 libcomerr2 1.43.4-2+deb9u1 libdatetime-timezone-perl 1:2.09-1+2019c libexpat1 2.2.0-2+deb9u3 libexpat1-dev 2.2.0-2+deb9u3 libss2 1.43.4-2+deb9u1 linux-image-4.9.0-11-amd64 4.9.189-3+deb9u1 linux-libc-dev 4.9.189-3+deb9u1 php7.0 7.0.33-0+deb9u5 php7.0-cli 7.0.33-0+deb9u5 php7.0-common 7.0.33-0+deb9u5 php7.0-json 7.0.33-0+deb9u5 php7.0-ldap 7.0.33-0+deb9u5 php7.0-opcache 7.0.33-0+deb9u5 php7.0-readline 7.0.33-0+deb9u5 tzdata 2019c-0+deb9u1 ======================================================================== Package Details: apt-listchanges : Lecture des fichiers de modifications (« changelog »)... apt-listchanges : journaux des modifications (« changelogs ») ------------------------------------------------------------- --- Modifications pour e2fsprogs (e2fslibs e2fsprogs libcomerr2 libss2) --- e2fsprogs (1.43.4-2+deb9u1) stretch-security; urgency=high * Fix CVE-2019-5094: potential buffer overrun in e2fsck (Closes: #941139) -- Theodore Y. Ts'o <tytso(a)mit.edu> Wed, 25 Sep 2019 19:17:45 -0400 --- Modifications pour expat (libexpat1 libexpat1-dev) --- expat (2.2.0-2+deb9u3) stretch-security; urgency=high * Non-maintainer upload by the Security Team. * xmlparse.c: Deny internal entities closing the doctype (CVE-2019-15903) (Closes: #939394) -- Salvatore Bonaccorso <carnil(a)debian.org> Thu, 19 Sep 2019 23:43:05 +0200 --- Modifications pour linux (linux-image-4.9.0-11-amd64 linux-libc-dev) --- linux (4.9.189-3+deb9u1) stretch-security; urgency=high * vhost: make sure log_num < in_num (CVE-2019-14835) * ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit (CVE-2019-15117) * ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term (CVE-2019-15118) * [x86] ptrace: fix up botched merge of spectrev1 fix (CVE-2019-15902) * KVM: coalesced_mmio: add bounds checking (CVE-2019-14821) -- Salvatore Bonaccorso <carnil(a)debian.org> Fri, 20 Sep 2019 13:03:45 +0200 --- Modifications pour libdatetime-timezone-perl --- libdatetime-timezone-perl (1:2.09-1+2019c) stretch; urgency=medium * Update to Olson database version 2019c. This update contains contemporary changes for Fiji and Norfolk Island. -- gregor herrmann <gregoa(a)debian.org> Sat, 14 Sep 2019 16:09:21 +0200 --- Modifications pour php7.0 (libapache2-mod-php7.0 php7.0 php7.0-cli php7.0-common php7.0-json php7.0-ldap php7.0-opcache php7.0-readline) --- php7.0 (7.0.33-0+deb9u5) stretch-security; urgency=medium * Backported security fixes from PHP 7.1.29: - EXIF: . Fixed bug #77950 (Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG). - Mail: . Fixed bug #77821 (Potential heap corruption in TSendMail()). * Backported from 7.1.30 - EXIF: . Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16). (CVE-2019-11040) - GD: . Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm). (CVE-2019-11038) - Iconv: . Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflow). (CVE-2019-11039). - SQLite: . Fixed bug #77967 (Bypassing open_basedir restrictions via file uris). * Backported from 7.1.31 - EXIF: . Fixed bug #78256 (heap-buffer-overflow on exif_process_user_comment). (CVE-2019-11042) . Fixed bug #78222 (heap-buffer-overflow on exif_scan_thumbnail). (CVE-2019-11041) - Phar: . Fixed bug #77919 (Potential UAF in Phar RSHUTDOWN). - SQLite: . Upgraded to SQLite 3.28.0. * Backported from 7.1.32 - mbstring: . Fixed CVE-2019-13224 (don't allow different encodings for onig_new_deluxe) - pcre: . Fixed bug #75457 (heap use-after-free in pcrelib) -- Ondřej Surý <ondrej(a)sury.org> Wed, 18 Sep 2019 11:55:34 +0200 php7.0 (7.0.33-0+deb9u4) stretch-security; urgency=medium * Update d/watch for new php.net pages * Backported from 7.1.28 - EXIF: . (CVE-2019-11034) Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s). . (CVE-2019-11035) Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value). - SQLite3: . Added sqlite3.defensive INI directive. * Backported from PHP 7.1.29 - EXIF: . (CVE-2019-11036) Fixed bug #77950 (Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG). - Mail: . Fixed bug #77821 (Potential heap corruption in TSendMail()). * Backported from 7.1.30 - EXIF: . (CVE-2019-11040) Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16). - GD: . (CVE-2019-11038) Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm). - Iconv: . (CVE-2019-11039) Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflow). - SQLite: . Fixed bug #77967 (Bypassing open_basedir restrictions via file uris). -- Ondřej Surý <ondrej(a)sury.org> Sun, 09 Jun 2019 11:25:27 +0200 --- Modifications pour tzdata --- tzdata (2019c-0+deb9u1) stretch; urgency=medium * New upstream version, affecting the following future timestamps: - Fiji's next DST transitions will be 2019-11-10 and 2020-01-12 instead of 2019-11-03 and 2020-01-19. - Norfolk Island will observe Australian-style DST starting in spring 2019. The first transition is on 2019-10-06. -- Aurelien Jarno <aurel32(a)debian.org> Wed, 18 Sep 2019 00:40:44 +0200 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on quigon.federez.net -- apticron

5 années, 6 mois

21 Debian package update(s) for nonagon.federez.net

par club-federez＠crans.org

apticron report [Sat, 28 Sep 2019 13:49:13 +0200] ======================================================================== apticron has detected that some packages need upgrading on: nonagon.federez.net [ 185.230.78.42 2a0c:700:0:23:67:e5ff:fee9:3 ] The following packages are currently pending an upgrade: e2fslibs 1.43.4-2+deb9u1 e2fsprogs 1.43.4-2+deb9u1 libapache2-mod-php7.3 7.3.9-1~deb10u1 libcom-err2 1.44.5-1+deb10u2 libcomerr2 1.44.5-1+deb10u2 libexpat1 2.2.0-2+deb9u3 libexpat1-dev 2.2.0-2+deb9u3 libss2 1.43.4-2+deb9u1 linux-libc-dev 4.9.189-3+deb9u1 php7.3 7.3.9-1~deb10u1 php7.3-cli 7.3.9-1~deb10u1 php7.3-common 7.3.9-1~deb10u1 php7.3-curl 7.3.9-1~deb10u1 php7.3-gd 7.3.9-1~deb10u1 php7.3-json 7.3.9-1~deb10u1 php7.3-ldap 7.3.9-1~deb10u1 php7.3-mbstring 7.3.9-1~deb10u1 php7.3-mysql 7.3.9-1~deb10u1 php7.3-opcache 7.3.9-1~deb10u1 php7.3-readline 7.3.9-1~deb10u1 tzdata 2019c-0+deb9u1 ======================================================================== Package Details: apt-listchanges : Lecture des fichiers de modifications (« changelog »)... apt-listchanges : journaux des modifications (« changelogs ») ------------------------------------------------------------- --- Modifications pour e2fsprogs (e2fslibs e2fsprogs libcom-err2 libcomerr2 libss2) --- e2fsprogs (1.44.5-1+deb10u2) buster-security; urgency=high * Fix CVE-2019-5094: potential buffer overrun in e2fsck (Closes: #941139) -- Theodore Y. Ts'o <tytso(a)mit.edu> Wed, 25 Sep 2019 13:37:44 -0400 --- Modifications pour expat (libexpat1 libexpat1-dev) --- expat (2.2.0-2+deb9u3) stretch-security; urgency=high * Non-maintainer upload by the Security Team. * xmlparse.c: Deny internal entities closing the doctype (CVE-2019-15903) (Closes: #939394) -- Salvatore Bonaccorso <carnil(a)debian.org> Thu, 19 Sep 2019 23:43:05 +0200 --- Modifications pour linux (linux-libc-dev) --- linux (4.9.189-3+deb9u1) stretch-security; urgency=high * vhost: make sure log_num < in_num (CVE-2019-14835) * ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit (CVE-2019-15117) * ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term (CVE-2019-15118) * [x86] ptrace: fix up botched merge of spectrev1 fix (CVE-2019-15902) * KVM: coalesced_mmio: add bounds checking (CVE-2019-14821) -- Salvatore Bonaccorso <carnil(a)debian.org> Fri, 20 Sep 2019 13:03:45 +0200 --- Modifications pour php7.3 (libapache2-mod-php7.3 php7.3 php7.3-cli php7.3-common php7.3-curl php7.3-gd php7.3-json php7.3-ldap php7.3-mbstring php7.3-mysql php7.3-opcache php7.3-readline) --- php7.3 (7.3.9-1~deb10u1) buster-security; urgency=high * New upstream version 7.3.9 * php7.3-curl: Add Breaks against php7.0-curl for smoother upgrades from stretch. (Closes: #929689) -- Ondřej Surý <ondrej(a)sury.org> Wed, 18 Sep 2019 12:33:23 +0200 --- Modifications pour tzdata --- tzdata (2019c-0+deb9u1) stretch; urgency=medium * New upstream version, affecting the following future timestamps: - Fiji's next DST transitions will be 2019-11-10 and 2020-01-12 instead of 2019-11-03 and 2020-01-19. - Norfolk Island will observe Australian-style DST starting in spring 2019. The first transition is on 2019-10-06. -- Aurelien Jarno <aurel32(a)debian.org> Wed, 18 Sep 2019 00:40:44 +0200 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on nonagon.federez.net -- apticron

5 années, 6 mois

14 Debian package update(s) for quigon.federez.net

par root＠quigon.federez.net

apticron report [Fri, 27 Sep 2019 22:38:04 +0200] ======================================================================== apticron has detected that some packages need upgrading on: quigon.federez.net [ 160.228.155.65 ] The following packages are currently pending an upgrade: libapache2-mod-php7.0 7.0.33-0+deb9u5 libdatetime-timezone-perl 1:2.09-1+2019c libexpat1 2.2.0-2+deb9u3 libexpat1-dev 2.2.0-2+deb9u3 linux-image-4.9.0-11-amd64 4.9.189-3+deb9u1 linux-libc-dev 4.9.189-3+deb9u1 php7.0 7.0.33-0+deb9u5 php7.0-cli 7.0.33-0+deb9u5 php7.0-common 7.0.33-0+deb9u5 php7.0-json 7.0.33-0+deb9u5 php7.0-ldap 7.0.33-0+deb9u5 php7.0-opcache 7.0.33-0+deb9u5 php7.0-readline 7.0.33-0+deb9u5 tzdata 2019c-0+deb9u1 ======================================================================== Package Details: apt-listchanges : Lecture des fichiers de modifications (« changelog »)... apt-listchanges : journaux des modifications (« changelogs ») ------------------------------------------------------------- --- Modifications pour expat (libexpat1 libexpat1-dev) --- expat (2.2.0-2+deb9u3) stretch-security; urgency=high * Non-maintainer upload by the Security Team. * xmlparse.c: Deny internal entities closing the doctype (CVE-2019-15903) (Closes: #939394) -- Salvatore Bonaccorso <carnil(a)debian.org> Thu, 19 Sep 2019 23:43:05 +0200 --- Modifications pour linux (linux-image-4.9.0-11-amd64 linux-libc-dev) --- linux (4.9.189-3+deb9u1) stretch-security; urgency=high * vhost: make sure log_num < in_num (CVE-2019-14835) * ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit (CVE-2019-15117) * ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term (CVE-2019-15118) * [x86] ptrace: fix up botched merge of spectrev1 fix (CVE-2019-15902) * KVM: coalesced_mmio: add bounds checking (CVE-2019-14821) -- Salvatore Bonaccorso <carnil(a)debian.org> Fri, 20 Sep 2019 13:03:45 +0200 --- Modifications pour libdatetime-timezone-perl --- libdatetime-timezone-perl (1:2.09-1+2019c) stretch; urgency=medium * Update to Olson database version 2019c. This update contains contemporary changes for Fiji and Norfolk Island. -- gregor herrmann <gregoa(a)debian.org> Sat, 14 Sep 2019 16:09:21 +0200 --- Modifications pour php7.0 (libapache2-mod-php7.0 php7.0 php7.0-cli php7.0-common php7.0-json php7.0-ldap php7.0-opcache php7.0-readline) --- php7.0 (7.0.33-0+deb9u5) stretch-security; urgency=medium * Backported security fixes from PHP 7.1.29: - EXIF: . Fixed bug #77950 (Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG). - Mail: . Fixed bug #77821 (Potential heap corruption in TSendMail()). * Backported from 7.1.30 - EXIF: . Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16). (CVE-2019-11040) - GD: . Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm). (CVE-2019-11038) - Iconv: . Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflow). (CVE-2019-11039). - SQLite: . Fixed bug #77967 (Bypassing open_basedir restrictions via file uris). * Backported from 7.1.31 - EXIF: . Fixed bug #78256 (heap-buffer-overflow on exif_process_user_comment). (CVE-2019-11042) . Fixed bug #78222 (heap-buffer-overflow on exif_scan_thumbnail). (CVE-2019-11041) - Phar: . Fixed bug #77919 (Potential UAF in Phar RSHUTDOWN). - SQLite: . Upgraded to SQLite 3.28.0. * Backported from 7.1.32 - mbstring: . Fixed CVE-2019-13224 (don't allow different encodings for onig_new_deluxe) - pcre: . Fixed bug #75457 (heap use-after-free in pcrelib) -- Ondřej Surý <ondrej(a)sury.org> Wed, 18 Sep 2019 11:55:34 +0200 php7.0 (7.0.33-0+deb9u4) stretch-security; urgency=medium * Update d/watch for new php.net pages * Backported from 7.1.28 - EXIF: . (CVE-2019-11034) Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s). . (CVE-2019-11035) Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value). - SQLite3: . Added sqlite3.defensive INI directive. * Backported from PHP 7.1.29 - EXIF: . (CVE-2019-11036) Fixed bug #77950 (Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG). - Mail: . Fixed bug #77821 (Potential heap corruption in TSendMail()). * Backported from 7.1.30 - EXIF: . (CVE-2019-11040) Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16). - GD: . (CVE-2019-11038) Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm). - Iconv: . (CVE-2019-11039) Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflow). - SQLite: . Fixed bug #77967 (Bypassing open_basedir restrictions via file uris). -- Ondřej Surý <ondrej(a)sury.org> Sun, 09 Jun 2019 11:25:27 +0200 --- Modifications pour tzdata --- tzdata (2019c-0+deb9u1) stretch; urgency=medium * New upstream version, affecting the following future timestamps: - Fiji's next DST transitions will be 2019-11-10 and 2020-01-12 instead of 2019-11-03 and 2020-01-19. - Norfolk Island will observe Australian-style DST starting in spring 2019. The first transition is on 2019-10-06. -- Aurelien Jarno <aurel32(a)debian.org> Wed, 18 Sep 2019 00:40:44 +0200 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on quigon.federez.net -- apticron

5 années, 6 mois

16 Debian package update(s) for nonagon.federez.net

par club-federez＠crans.org

apticron report [Fri, 27 Sep 2019 13:49:10 +0200] ======================================================================== apticron has detected that some packages need upgrading on: nonagon.federez.net [ 185.230.78.42 2a0c:700:0:23:67:e5ff:fee9:3 ] The following packages are currently pending an upgrade: libapache2-mod-php7.3 7.3.9-1~deb10u1 libexpat1 2.2.0-2+deb9u3 libexpat1-dev 2.2.0-2+deb9u3 linux-libc-dev 4.9.189-3+deb9u1 php7.3 7.3.9-1~deb10u1 php7.3-cli 7.3.9-1~deb10u1 php7.3-common 7.3.9-1~deb10u1 php7.3-curl 7.3.9-1~deb10u1 php7.3-gd 7.3.9-1~deb10u1 php7.3-json 7.3.9-1~deb10u1 php7.3-ldap 7.3.9-1~deb10u1 php7.3-mbstring 7.3.9-1~deb10u1 php7.3-mysql 7.3.9-1~deb10u1 php7.3-opcache 7.3.9-1~deb10u1 php7.3-readline 7.3.9-1~deb10u1 tzdata 2019c-0+deb9u1 ======================================================================== Package Details: apt-listchanges : Lecture des fichiers de modifications (« changelog »)... apt-listchanges : journaux des modifications (« changelogs ») ------------------------------------------------------------- --- Modifications pour expat (libexpat1 libexpat1-dev) --- expat (2.2.0-2+deb9u3) stretch-security; urgency=high * Non-maintainer upload by the Security Team. * xmlparse.c: Deny internal entities closing the doctype (CVE-2019-15903) (Closes: #939394) -- Salvatore Bonaccorso <carnil(a)debian.org> Thu, 19 Sep 2019 23:43:05 +0200 --- Modifications pour linux (linux-libc-dev) --- linux (4.9.189-3+deb9u1) stretch-security; urgency=high * vhost: make sure log_num < in_num (CVE-2019-14835) * ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit (CVE-2019-15117) * ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term (CVE-2019-15118) * [x86] ptrace: fix up botched merge of spectrev1 fix (CVE-2019-15902) * KVM: coalesced_mmio: add bounds checking (CVE-2019-14821) -- Salvatore Bonaccorso <carnil(a)debian.org> Fri, 20 Sep 2019 13:03:45 +0200 --- Modifications pour php7.3 (libapache2-mod-php7.3 php7.3 php7.3-cli php7.3-common php7.3-curl php7.3-gd php7.3-json php7.3-ldap php7.3-mbstring php7.3-mysql php7.3-opcache php7.3-readline) --- php7.3 (7.3.9-1~deb10u1) buster-security; urgency=high * New upstream version 7.3.9 * php7.3-curl: Add Breaks against php7.0-curl for smoother upgrades from stretch. (Closes: #929689) -- Ondřej Surý <ondrej(a)sury.org> Wed, 18 Sep 2019 12:33:23 +0200 --- Modifications pour tzdata --- tzdata (2019c-0+deb9u1) stretch; urgency=medium * New upstream version, affecting the following future timestamps: - Fiji's next DST transitions will be 2019-11-10 and 2020-01-12 instead of 2019-11-03 and 2020-01-19. - Norfolk Island will observe Australian-style DST starting in spring 2019. The first transition is on 2019-10-06. -- Aurelien Jarno <aurel32(a)debian.org> Wed, 18 Sep 2019 00:40:44 +0200 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on nonagon.federez.net -- apticron

5 années, 6 mois

14 Debian package update(s) for quigon.federez.net

par root＠quigon.federez.net

apticron report [Thu, 26 Sep 2019 22:38:09 +0200] ======================================================================== apticron has detected that some packages need upgrading on: quigon.federez.net [ 160.228.155.65 ] The following packages are currently pending an upgrade: libapache2-mod-php7.0 7.0.33-0+deb9u5 libdatetime-timezone-perl 1:2.09-1+2019c libexpat1 2.2.0-2+deb9u3 libexpat1-dev 2.2.0-2+deb9u3 linux-image-4.9.0-11-amd64 4.9.189-3+deb9u1 linux-libc-dev 4.9.189-3+deb9u1 php7.0 7.0.33-0+deb9u5 php7.0-cli 7.0.33-0+deb9u5 php7.0-common 7.0.33-0+deb9u5 php7.0-json 7.0.33-0+deb9u5 php7.0-ldap 7.0.33-0+deb9u5 php7.0-opcache 7.0.33-0+deb9u5 php7.0-readline 7.0.33-0+deb9u5 tzdata 2019c-0+deb9u1 ======================================================================== Package Details: apt-listchanges : Lecture des fichiers de modifications (« changelog »)... apt-listchanges : journaux des modifications (« changelogs ») ------------------------------------------------------------- --- Modifications pour expat (libexpat1 libexpat1-dev) --- expat (2.2.0-2+deb9u3) stretch-security; urgency=high * Non-maintainer upload by the Security Team. * xmlparse.c: Deny internal entities closing the doctype (CVE-2019-15903) (Closes: #939394) -- Salvatore Bonaccorso <carnil(a)debian.org> Thu, 19 Sep 2019 23:43:05 +0200 --- Modifications pour linux (linux-image-4.9.0-11-amd64 linux-libc-dev) --- linux (4.9.189-3+deb9u1) stretch-security; urgency=high * vhost: make sure log_num < in_num (CVE-2019-14835) * ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit (CVE-2019-15117) * ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term (CVE-2019-15118) * [x86] ptrace: fix up botched merge of spectrev1 fix (CVE-2019-15902) * KVM: coalesced_mmio: add bounds checking (CVE-2019-14821) -- Salvatore Bonaccorso <carnil(a)debian.org> Fri, 20 Sep 2019 13:03:45 +0200 --- Modifications pour libdatetime-timezone-perl --- libdatetime-timezone-perl (1:2.09-1+2019c) stretch; urgency=medium * Update to Olson database version 2019c. This update contains contemporary changes for Fiji and Norfolk Island. -- gregor herrmann <gregoa(a)debian.org> Sat, 14 Sep 2019 16:09:21 +0200 --- Modifications pour php7.0 (libapache2-mod-php7.0 php7.0 php7.0-cli php7.0-common php7.0-json php7.0-ldap php7.0-opcache php7.0-readline) --- php7.0 (7.0.33-0+deb9u5) stretch-security; urgency=medium * Backported security fixes from PHP 7.1.29: - EXIF: . Fixed bug #77950 (Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG). - Mail: . Fixed bug #77821 (Potential heap corruption in TSendMail()). * Backported from 7.1.30 - EXIF: . Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16). (CVE-2019-11040) - GD: . Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm). (CVE-2019-11038) - Iconv: . Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflow). (CVE-2019-11039). - SQLite: . Fixed bug #77967 (Bypassing open_basedir restrictions via file uris). * Backported from 7.1.31 - EXIF: . Fixed bug #78256 (heap-buffer-overflow on exif_process_user_comment). (CVE-2019-11042) . Fixed bug #78222 (heap-buffer-overflow on exif_scan_thumbnail). (CVE-2019-11041) - Phar: . Fixed bug #77919 (Potential UAF in Phar RSHUTDOWN). - SQLite: . Upgraded to SQLite 3.28.0. * Backported from 7.1.32 - mbstring: . Fixed CVE-2019-13224 (don't allow different encodings for onig_new_deluxe) - pcre: . Fixed bug #75457 (heap use-after-free in pcrelib) -- Ondřej Surý <ondrej(a)sury.org> Wed, 18 Sep 2019 11:55:34 +0200 php7.0 (7.0.33-0+deb9u4) stretch-security; urgency=medium * Update d/watch for new php.net pages * Backported from 7.1.28 - EXIF: . (CVE-2019-11034) Fixed bug #77753 (Heap-buffer-overflow in php_ifd_get32s). . (CVE-2019-11035) Fixed bug #77831 (Heap-buffer-overflow in exif_iif_add_value). - SQLite3: . Added sqlite3.defensive INI directive. * Backported from PHP 7.1.29 - EXIF: . (CVE-2019-11036) Fixed bug #77950 (Heap-buffer-overflow in _estrndup via exif_process_IFD_TAG). - Mail: . Fixed bug #77821 (Potential heap corruption in TSendMail()). * Backported from 7.1.30 - EXIF: . (CVE-2019-11040) Fixed bug #77988 (heap-buffer-overflow on php_jpg_get16). - GD: . (CVE-2019-11038) Fixed bug #77973 (Uninitialized read in gdImageCreateFromXbm). - Iconv: . (CVE-2019-11039) Fixed bug #78069 (Out-of-bounds read in iconv.c:_php_iconv_mime_decode() due to integer overflow). - SQLite: . Fixed bug #77967 (Bypassing open_basedir restrictions via file uris). -- Ondřej Surý <ondrej(a)sury.org> Sun, 09 Jun 2019 11:25:27 +0200 --- Modifications pour tzdata --- tzdata (2019c-0+deb9u1) stretch; urgency=medium * New upstream version, affecting the following future timestamps: - Fiji's next DST transitions will be 2019-11-10 and 2020-01-12 instead of 2019-11-03 and 2020-01-19. - Norfolk Island will observe Australian-style DST starting in spring 2019. The first transition is on 2019-10-06. -- Aurelien Jarno <aurel32(a)debian.org> Wed, 18 Sep 2019 00:40:44 +0200 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on quigon.federez.net -- apticron

5 années, 6 mois

16 Debian package update(s) for nonagon.federez.net

par club-federez＠crans.org

apticron report [Thu, 26 Sep 2019 13:49:09 +0200] ======================================================================== apticron has detected that some packages need upgrading on: nonagon.federez.net [ 185.230.78.42 2a0c:700:0:23:67:e5ff:fee9:3 ] The following packages are currently pending an upgrade: libapache2-mod-php7.3 7.3.9-1~deb10u1 libexpat1 2.2.0-2+deb9u3 libexpat1-dev 2.2.0-2+deb9u3 linux-libc-dev 4.9.189-3+deb9u1 php7.3 7.3.9-1~deb10u1 php7.3-cli 7.3.9-1~deb10u1 php7.3-common 7.3.9-1~deb10u1 php7.3-curl 7.3.9-1~deb10u1 php7.3-gd 7.3.9-1~deb10u1 php7.3-json 7.3.9-1~deb10u1 php7.3-ldap 7.3.9-1~deb10u1 php7.3-mbstring 7.3.9-1~deb10u1 php7.3-mysql 7.3.9-1~deb10u1 php7.3-opcache 7.3.9-1~deb10u1 php7.3-readline 7.3.9-1~deb10u1 tzdata 2019c-0+deb9u1 ======================================================================== Package Details: apt-listchanges : Lecture des fichiers de modifications (« changelog »)... apt-listchanges : journaux des modifications (« changelogs ») ------------------------------------------------------------- --- Modifications pour expat (libexpat1 libexpat1-dev) --- expat (2.2.0-2+deb9u3) stretch-security; urgency=high * Non-maintainer upload by the Security Team. * xmlparse.c: Deny internal entities closing the doctype (CVE-2019-15903) (Closes: #939394) -- Salvatore Bonaccorso <carnil(a)debian.org> Thu, 19 Sep 2019 23:43:05 +0200 --- Modifications pour linux (linux-libc-dev) --- linux (4.9.189-3+deb9u1) stretch-security; urgency=high * vhost: make sure log_num < in_num (CVE-2019-14835) * ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit (CVE-2019-15117) * ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term (CVE-2019-15118) * [x86] ptrace: fix up botched merge of spectrev1 fix (CVE-2019-15902) * KVM: coalesced_mmio: add bounds checking (CVE-2019-14821) -- Salvatore Bonaccorso <carnil(a)debian.org> Fri, 20 Sep 2019 13:03:45 +0200 --- Modifications pour php7.3 (libapache2-mod-php7.3 php7.3 php7.3-cli php7.3-common php7.3-curl php7.3-gd php7.3-json php7.3-ldap php7.3-mbstring php7.3-mysql php7.3-opcache php7.3-readline) --- php7.3 (7.3.9-1~deb10u1) buster-security; urgency=high * New upstream version 7.3.9 * php7.3-curl: Add Breaks against php7.0-curl for smoother upgrades from stretch. (Closes: #929689) -- Ondřej Surý <ondrej(a)sury.org> Wed, 18 Sep 2019 12:33:23 +0200 --- Modifications pour tzdata --- tzdata (2019c-0+deb9u1) stretch; urgency=medium * New upstream version, affecting the following future timestamps: - Fiji's next DST transitions will be 2019-11-10 and 2020-01-12 instead of 2019-11-03 and 2020-01-19. - Norfolk Island will observe Australian-style DST starting in spring 2019. The first transition is on 2019-10-06. -- Aurelien Jarno <aurel32(a)debian.org> Wed, 18 Sep 2019 00:40:44 +0200 ======================================================================== You can perform the upgrade by issuing the command: apt-get dist-upgrade as root on nonagon.federez.net -- apticron

5 années, 7 mois

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

Monitoring Septembre 2019