Author: Scott Moser
Revision Date: 2016-09-28 01:21:02 UTC

releasing package cloud-utils version 0.29-0ubuntu4

Author: Kamal Mostafa
Revision Date: 2016-09-27 12:05:14 UTC

linux ABI 4.4.0-41

Author: Kamal Mostafa
Revision Date: 2016-09-27 12:02:16 UTC

Master Version 4.4.0-41.61~14.04.1

Author: Ike Panhc
Revision Date: 2016-09-26 15:32:15 UTC

linux-meta-keystone ABI 68

Author: Joseph Salisbury
Revision Date: 2016-09-23 13:25:35 UTC

Master Version 3.19.0-70.78~14.04.1

Author: Joseph Salisbury
Revision Date: 2016-09-22 17:10:55 UTC

linux ABI 3.19.0-70

Author: Joseph Salisbury
Revision Date: 2016-09-22 16:05:57 UTC

Master Version 3.13.0-97.144~precise1

Author: Joseph Salisbury
Revision Date: 2016-09-22 15:56:53 UTC

linux ABI 3.13.0-97

Author: Joseph Salisbury
Revision Date: 2016-09-22 14:17:19 UTC

linux-ti-omap4 ABI 3.2.0-1489

Author: Joseph Salisbury
Revision Date: 2016-09-21 13:42:15 UTC

Bump ABI

Author: Mathieu Trudel-Lapierre
Revision Date: 2016-09-20 00:39:30 UTC

Update to the signed 0.9+1465500757.14a5905-0ubuntu1 binary from Microsoft.
(LP: #1581299)

Author: Otto Kekäläinen
Revision Date: 2016-09-14 21:01:08 UTC

* SECURITY UPDATE: New upstream release 5.5.52 (LP: #1605493)
  - Latest maintenance release includes only fixes to serious bugs.
* Previous release 5.5.51 included included fixes for
  the following security vulnerabilities:
  - CVE-2016-6662
* Previous release 5.5.50 included included fixes for
  the following security vulnerabilities:
  - CVE-2016-5440
  - CVE-2016-3615
  - CVE-2016-3521
  - CVE-2016-3477
* Update previous changelog entries to contain new CVE identifiers

Author: Steve Langasek
Revision Date: 2016-09-19 22:42:43 UTC

Merge git into history

Author: Nicholas Skaggs
Revision Date: 2016-09-15 18:00:03 UTC

force --build-agent instead

Author: Otto Kekäläinen
Revision Date: 2016-09-14 21:01:08 UTC

* SECURITY UPDATE: New upstream release 5.5.52 (LP: #1605493)
  - Latest maintenance release includes only fixes to serious bugs.
* Previous release 5.5.51 included included fixes for
  the following security vulnerabilities:
  - CVE-2016-6662
* Previous release 5.5.50 included included fixes for
  the following security vulnerabilities:
  - CVE-2016-5440
  - CVE-2016-3615
  - CVE-2016-3521
  - CVE-2016-3477
* Update previous changelog entries to contain new CVE identifiers

Author: Felipe Reyes
Revision Date: 2016-09-13 17:03:17 UTC

Skip empty lines when iterating hosts file

If the hosts file contains empty lines a list index out of range exception
is raised

Traceback (most recent call last):
  File "/usr/bin/serverstack-tenant-dns", line 256, in <module>
    add_current_instances()
  File "/usr/bin/serverstack-tenant-dns", line 144, in add_current_instances
    add_host_entry(hostname, ip_addr, "")
  File "/usr/bin/serverstack-tenant-dns", line 81, in add_host_entry
    hn = _hostname[1]
IndexError: list index out of range

Author: Marc Deslauriers
Revision Date: 2016-09-12 15:26:14 UTC

* SECURITY UPDATE: Update to 5.5.52 to fix security issues
  - CVE-2016-6662

Author: Marc Deslauriers
Revision Date: 2016-09-12 15:26:14 UTC

* SECURITY UPDATE: Update to 5.5.52 to fix security issues
  - CVE-2016-6662

Author: Marc Deslauriers
Revision Date: 2016-09-12 15:06:08 UTC

* SECURITY UPDATE: Update to 5.5.52 to fix security issues
  - CVE-2016-6662

Author: Marc Deslauriers
Revision Date: 2016-09-12 15:06:08 UTC

* SECURITY UPDATE: Update to 5.5.52 to fix security issues
  - CVE-2016-6662

Author: Martin Pitt
Revision Date: 2016-09-12 13:43:04 UTC

debian/tests/upstream-system: Create and export $GNUPGHOME

To work with gnupg2.

Author: Emily Ratliff
Revision Date: 2016-09-09 14:45:49 UTC

* SECURITY UPDATE: Fixes for buffer overflows
  - PIL/IcnsImagePlugin.py, libImaging/PcdDecode.c, libImaging/FliDecode.c
  - CVE-2016-0775
  - CVE-2016-2533
  - CVE-2014-3596
  - Kudos to Andrew Drake and Eric Soroos for discovering these issues.

Author: Emily Ratliff
Revision Date: 2016-09-09 14:45:49 UTC

* SECURITY UPDATE: Fixes for buffer overflows
  - PIL/IcnsImagePlugin.py, libImaging/PcdDecode.c, libImaging/FliDecode.c
  - CVE-2016-0775
  - CVE-2016-2533
  - CVE-2014-3596
  - Kudos to Andrew Drake and Eric Soroos for discovering these issues.

Author: Simon Déziel
Revision Date: 2016-09-08 20:57:30 UTC

Install grub-legacy-ec2 post(inst|rm) scripts into /etc/kernel (LP: #1581416)

Author: Andy Whitcroft
Revision Date: 2016-09-08 13:29:54 UTC

Master Version 4.4.0-38.57~14.04.1

Author: Andy Whitcroft
Revision Date: 2016-09-08 13:29:54 UTC

Master Version 4.4.0-38.57~14.04.1

Author: Tim Gardner
Revision Date: 2016-09-06 11:06:23 UTC

linux ABI 4.4.0-38

Author: Tim Gardner
Revision Date: 2016-09-06 11:06:23 UTC

linux ABI 4.4.0-38

Author: Nicholas Skaggs
Revision Date: 2016-09-01 18:50:54 UTC

Realign with upstream; remove prometheus fixtures

Author: Brian Murray
Revision Date: 2016-08-26 15:21:51 UTC

Add conflicts for fglrx, fglrx-core, fglrx-updates, and fglrx-updates-core
because support for fglrx was removed in 16.04. (LP: #1617448)

Author: Kamal Mostafa
Revision Date: 2016-08-16 10:19:30 UTC

[ Tim Gardner ]

* Release Tracking Bug
  - LP: #1618251

* MacBookPro11,4 fails to poweroff or suspend (LP: #1587714)
  - SAUCE: PCI: Workaround to enable poweroff on Mac Pro 11

* xfrm: ipsec crash when updating spd thresholds (LP: #1613787)
  - xfrm: Ignore socket policies when rebuilding hash tables

* CVE-2016-3841
  - ipv6: add complete rcu protection around np->opt

Author: Ike Panhc
Revision Date: 2016-08-30 15:51:18 UTC

linux-meta-keystone ABI 67

Author: Ike Panhc
Revision Date: 2016-08-30 15:51:18 UTC

linux-meta-keystone ABI 67

Author: Tim Gardner
Revision Date: 2016-08-30 14:26:21 UTC

Master Version 3.13.0-96.143~precise1

Author: Tim Gardner
Revision Date: 2016-08-30 14:26:21 UTC

Master Version 3.13.0-96.143~precise1

Author: Tim Gardner
Revision Date: 2016-08-30 09:12:42 UTC

linux-ti-omap4 ABI 3.2.0-1488

Author: Tim Gardner
Revision Date: 2016-08-30 09:12:42 UTC

linux-ti-omap4 ABI 3.2.0-1488

Author: Tim Gardner
Revision Date: 2016-08-30 08:48:27 UTC

Bump ABI

Author: Tim Gardner
Revision Date: 2016-08-30 08:48:27 UTC

Bump ABI

Author: Tim Gardner
Revision Date: 2016-08-30 08:28:57 UTC

linux ABI 3.13.0-96

Author: Tim Gardner
Revision Date: 2016-08-30 08:28:57 UTC

linux ABI 3.13.0-96

Author: Tim Gardner
Revision Date: 2016-08-29 19:14:34 UTC

linux ABI 3.19.0-69

Author: Tim Gardner
Revision Date: 2016-08-29 19:14:34 UTC

linux ABI 3.19.0-69

Author: Tim Gardner
Revision Date: 2016-08-29 19:13:07 UTC

Master Version 3.19.0-69.77~14.04.1

Author: Tim Gardner
Revision Date: 2016-08-29 19:13:07 UTC

Master Version 3.19.0-69.77~14.04.1

Author: Stefan Bader
Revision Date: 2016-08-12 12:10:44 UTC

[ Stefan Bader ]

* Release Tracking Bug
  - LP: #1612564

* CVE-2016-5696
  - tcp: make challenge acks less predictable

Author: Nicholas Skaggs
Revision Date: 2016-08-26 20:05:07 UTC

Update changelog

Author: Brian Murray
Revision Date: 2016-08-26 15:21:51 UTC

Add conflicts for fglrx, fglrx-core, fglrx-updates, and fglrx-updates-core
because support for fglrx was removed in 16.04. (LP: #1617448)

Author: Stuart Bishop
Revision Date: 2016-08-24 05:54:33 UTC

Disable tests for backport

Author: Adam Stokes
Revision Date: 2016-08-19 19:41:00 UTC

fix version string

Author: Martin Pitt
Revision Date: 2016-08-17 16:37:41 UTC

* New upstream security/bug fix release (LP: #1614113):
  - Fix possible mis-evaluation of nested CASE-WHEN expressions
    A CASE expression appearing within the test value subexpression of
    another CASE could become confused about whether its own test value was
    null or not. Also, inlining of a SQL function implementing the equality
    operator used by a CASE expression could result in passing the wrong
    test value to functions called within a CASE expression in the SQL
    function's body. If the test values were of different data types, a
    crash might result; moreover such situations could be abused to allow
    disclosure of portions of server memory. (CVE-2016-5423)

  - Fix client programs' handling of special characters in database and role
    names
    Numerous places in vacuumdb and other client programs could become
    confused by database and role names containing double quotes or
    backslashes. Tighten up quoting rules to make that safe. Also, ensure
    that when a conninfo string is used as a database name parameter to
    these programs, it is correctly treated as such throughout.

    Fix handling of paired double quotes in psql's \connect and \password
    commands to match the documentation.

    Introduce a new -reuse-previous option in psql's \connect command to
    allow explicit control of whether to re-use connection parameters from a
    previous connection. (Without this, the choice is based on whether the
    database name looks like a conninfo string, as before.) This allows
    secure handling of database names containing special characters in
    pg_dumpall scripts.

    pg_dumpall now refuses to deal with database and role names containing
    carriage returns or newlines, as it seems impractical to quote those
    characters safely on Windows. In future we may reject such names on the
    server side, but that step has not been taken yet.

    These are considered security fixes because crafted object names
    containing special characters could have been used to execute commands
    with superuser privileges the next time a superuser executes pg_dumpall
    or other routine maintenance operations. (CVE-2016-5424)

  - Details: http://www.postgresql.org/docs/9.3/static/release-9-3-14.html

Author: Martin Pitt
Revision Date: 2016-08-17 16:37:41 UTC

* New upstream security/bug fix release (LP: #1614113):
  - Fix possible mis-evaluation of nested CASE-WHEN expressions
    A CASE expression appearing within the test value subexpression of
    another CASE could become confused about whether its own test value was
    null or not. Also, inlining of a SQL function implementing the equality
    operator used by a CASE expression could result in passing the wrong
    test value to functions called within a CASE expression in the SQL
    function's body. If the test values were of different data types, a
    crash might result; moreover such situations could be abused to allow
    disclosure of portions of server memory. (CVE-2016-5423)

  - Fix client programs' handling of special characters in database and role
    names
    Numerous places in vacuumdb and other client programs could become
    confused by database and role names containing double quotes or
    backslashes. Tighten up quoting rules to make that safe. Also, ensure
    that when a conninfo string is used as a database name parameter to
    these programs, it is correctly treated as such throughout.

    Fix handling of paired double quotes in psql's \connect and \password
    commands to match the documentation.

    Introduce a new -reuse-previous option in psql's \connect command to
    allow explicit control of whether to re-use connection parameters from a
    previous connection. (Without this, the choice is based on whether the
    database name looks like a conninfo string, as before.) This allows
    secure handling of database names containing special characters in
    pg_dumpall scripts.

    pg_dumpall now refuses to deal with database and role names containing
    carriage returns or newlines, as it seems impractical to quote those
    characters safely on Windows. In future we may reject such names on the
    server side, but that step has not been taken yet.

    These are considered security fixes because crafted object names
    containing special characters could have been used to execute commands
    with superuser privileges the next time a superuser executes pg_dumpall
    or other routine maintenance operations. (CVE-2016-5424)

  - Details: http://www.postgresql.org/docs/9.3/static/release-9-3-14.html

Author: Marc Deslauriers
Revision Date: 2016-08-17 13:41:27 UTC

* SECURITY UPDATE: random number generator prediction
  - debian/patches/CVE-2016-6313-1.patch: improve the diagram showing the
    random mixing in random/random-csprng.c.
  - debian/patches/CVE-2016-6313-2.patch: hash continuous areas in the
    csprng pool in random/random-csprng.c.
  - CVE-2016-6313

Author: Marc Deslauriers
Revision Date: 2016-08-17 13:41:27 UTC

* SECURITY UPDATE: random number generator prediction
  - debian/patches/CVE-2016-6313-1.patch: improve the diagram showing the
    random mixing in random/random-csprng.c.
  - debian/patches/CVE-2016-6313-2.patch: hash continuous areas in the
    csprng pool in random/random-csprng.c.
  - CVE-2016-6313

Author: Marc Deslauriers
Revision Date: 2016-08-17 13:39:25 UTC

* SECURITY UPDATE: random number generator prediction
  - debian/patches/CVE-2016-6313-1.patch: improve the diagram showing the
    random mixing in random/random-csprng.c.
  - debian/patches/CVE-2016-6313-2.patch: hash continuous areas in the
    csprng pool in random/random-csprng.c.
  - CVE-2016-6313

Author: Marc Deslauriers
Revision Date: 2016-08-17 13:39:25 UTC

* SECURITY UPDATE: random number generator prediction
  - debian/patches/CVE-2016-6313-1.patch: improve the diagram showing the
    random mixing in random/random-csprng.c.
  - debian/patches/CVE-2016-6313-2.patch: hash continuous areas in the
    csprng pool in random/random-csprng.c.
  - CVE-2016-6313

Author: Nicholas Skaggs
Revision Date: 2016-08-16 13:11:51 UTC

fix debian/compat to 7

Author: Adam Stokes
Revision Date: 2016-08-16 08:53:34 UTC

add sru bug to changelog

Author: LocutusOfBorg
Revision Date: 2016-02-23 14:28:26 UTC

Use lts-xenial stack. Build only guest additions (LP: #1424769).

Author: LocutusOfBorg
Revision Date: 2016-02-23 14:28:26 UTC

Use lts-xenial stack. Build only guest additions (LP: #1424769).

Author: LocutusOfBorg
Revision Date: 2016-02-23 14:28:26 UTC

Use lts-vivid stack. Build only guest additions (LP: #1424769).

Author: LocutusOfBorg
Revision Date: 2016-02-23 14:28:26 UTC

Use lts-wily stack. Build only guest additions (LP: #1424769).

Author: LocutusOfBorg
Revision Date: 2016-02-23 14:28:26 UTC

Use lts-vivid stack. Build only guest additions (LP: #1424769).

Author: LocutusOfBorg
Revision Date: 2016-02-23 14:28:26 UTC

Use lts-wily stack. Build only guest additions (LP: #1424769).

Author: Stefan Bader
Revision Date: 2016-08-12 12:10:44 UTC

[ Stefan Bader ]

* Release Tracking Bug
  - LP: #1612564

* CVE-2016-5696
  - tcp: make challenge acks less predictable

Author: Timo Aaltonen
Revision Date: 2016-07-27 13:21:25 UTC

control: Add old video drivers back to -video-all to match lts-wily.

Author: Timo Aaltonen
Revision Date: 2016-07-27 13:21:25 UTC

control: Add old video drivers back to -video-all to match lts-wily.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:50 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:50 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:47 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:47 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:49 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:44 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:49 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:48 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:46 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:44 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:48 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:41 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:46 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:41 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:39 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:39 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:45 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:45 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:42 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:43 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:42 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:40 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:43 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:40 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:38 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:38 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:33 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:35 UTC

* Backport for lts-xenial stack.
* control: libxcb-util-dev -> libxcb-util0-dev

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:32 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:32 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:35 UTC

* Backport for lts-xenial stack.
* control: libxcb-util-dev -> libxcb-util0-dev

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:37 UTC

Backport for lts-xenial stack.

Author: Timo Aaltonen
Revision Date: 2016-05-03 14:02:37 UTC

Backport for lts-xenial stack.