This repository was archived by the owner on Mar 16, 2022. It is now read-only.
1.182.0
·
109 commits
to master
since this release
Notably, this release addresses:
USN-3538-1 Ubuntu Security Notice USN-3538-1:
- CVE-2016-10009: Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.
- CVE-2016-10010: sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.
- CVE-2016-10011: authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process.
- CVE-2016-10012: The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures.
- CVE-2017-15906: The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.
-rc libmysqlclient18:amd64 5.5.58-0ubuntu0.14.04.1 amd64 MySQL database client library
+rc libmysqlclient18:amd64 5.5.59-0ubuntu0.14.04.1 amd64 MySQL database client library
-ii mysql-common 5.5.58-0ubuntu0.14.04.1 all MySQL database common files, e.g. /etc/mysql/my.cnf
+ii mysql-common 5.5.59-0ubuntu0.14.04.1 all MySQL database common files, e.g. /etc/mysql/my.cnf
-ii openssh-client 1:6.6p1-2ubuntu2.8 amd64 secure shell (SSH) client, for secure access to remote machines
-ii openssh-server 1:6.6p1-2ubuntu2.8 amd64 secure shell (SSH) server, for secure access from remote machines
-ii openssh-sftp-server 1:6.6p1-2ubuntu2.8 amd64 secure shell (SSH) sftp server module, for SFTP access from remote machines
+ii openssh-client 1:6.6p1-2ubuntu2.10 amd64 secure shell (SSH) client, for secure access to remote machines
+ii openssh-server 1:6.6p1-2ubuntu2.10 amd64 secure shell (SSH) server, for secure access from remote machines
+ii openssh-sftp-server 1:6.6p1-2ubuntu2.10 amd64 secure shell (SSH) sftp server module, for SFTP access from remote machines