Skip to content
This repository was archived by the owner on Mar 16, 2022. It is now read-only.

1.182.0

Choose a tag to compare

@cf-buildpacks-eng cf-buildpacks-eng released this 25 Jan 18:37
· 109 commits to master since this release

Notably, this release addresses:

USN-3538-1 Ubuntu Security Notice USN-3538-1:

  • CVE-2016-10009: Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.
  • CVE-2016-10010: sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.
  • CVE-2016-10011: authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process.
  • CVE-2016-10012: The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures.
  • CVE-2017-15906: The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.
-rc  libmysqlclient18:amd64 5.5.58-0ubuntu0.14.04.1 amd64 MySQL database client library
+rc  libmysqlclient18:amd64 5.5.59-0ubuntu0.14.04.1 amd64 MySQL database client library
-ii  mysql-common           5.5.58-0ubuntu0.14.04.1 all   MySQL database common files, e.g. /etc/mysql/my.cnf
+ii  mysql-common           5.5.59-0ubuntu0.14.04.1 all   MySQL database common files, e.g. /etc/mysql/my.cnf
-ii  openssh-client         1:6.6p1-2ubuntu2.8      amd64 secure shell (SSH) client, for secure access to remote machines
-ii  openssh-server         1:6.6p1-2ubuntu2.8      amd64 secure shell (SSH) server, for secure access from remote machines
-ii  openssh-sftp-server    1:6.6p1-2ubuntu2.8      amd64 secure shell (SSH) sftp server module, for SFTP access from remote machines
+ii  openssh-client         1:6.6p1-2ubuntu2.10     amd64 secure shell (SSH) client, for secure access to remote machines
+ii  openssh-server         1:6.6p1-2ubuntu2.10     amd64 secure shell (SSH) server, for secure access from remote machines
+ii  openssh-sftp-server    1:6.6p1-2ubuntu2.10     amd64 secure shell (SSH) sftp server module, for SFTP access from remote machines