Debian 8.8 megjelenés, Debian GNU/Linux 8 “Jessie” frissítés

Debian 8.8 megjelenés, Debian GNU/Linux 8 “Jessie” frissítés

Megjelent az új GNU/Linux, a Debian 8.8-es verziója, A “Jessie” kódnévre keresztelt linux disztribúció megjelenésével az első debian, amelyik a systemd-s initet tartalmazza. Két új architektúra támogatottsága is bekerült a Debian 8-ba, így már arm64 és ppc64-el  architektúrákon is futtatható a az új stabil debian.

Nagyon sok verzióban tölthető le a Debian Jessie, a szokásos architektúrákban, 32bites és 64bites verzióban, teljes DVD set, CD image. live DVD, a leggyakoribb Desktop verziókban, és a szokásos minimális “net-install” verziót is ingyen használhatjuk.

A Debian 8.8 linux frissítései

+-------------------------+-------------------------------------------+
| Package                 | Reason                                    |
+-------------------------+-------------------------------------------+
| activemq [1]            | Fix DoS in activemq-core via shutdown     |
|                         | command [CVE-2015-7559]                   |
|                         |                                           |
| apf-firewall [2]        | Add compatibility with kernels >= 3.X     |
|                         |                                           |
| apt-xapian-index [3]    | Remove call to update-python-modules      |
|                         |                                           |
| base-files [4]          | Update for the point release              |
|                         |                                           |
| binutils [5]            | Apply patch from upstream to fix gold on  |
|                         | arm64                                     |
|                         |                                           |
| ca-certificates [6]     | Update-ca-certificates: update local      |
|                         | certificates directory when calling --    |
|                         | fresh; support running without hooks      |
|                         |                                           |
| commons-daemon [7]      | Fix ppc64el support                       |
|                         |                                           |
| crafty [8]              | Do not generate CPU specific code         |
|                         |                                           |
| debian-edu-doc [9]      | Update translations                       |
|                         |                                           |
| debian-installer [10]   | Rebuild for the point release             |
|                         |                                           |
| debian-installer-       | Rebuild for the point release             |
| netboot-images [11]     |                                           |
|                         |                                           |
| dropbear [12]           | Fix command restriction bypass in         |
|                         | authorized_keys [CVE-2016-3116], format   |
|                         | string injection [CVE-2016-7406] and      |
|                         | arbitrary code execution issues           |
|                         | [CVE-2016-7407 CVE-2016-7408]             |
|                         |                                           |
| erlang [13]             | Fix heap overflow vulnerability in        |
|                         | regular expression parsing [CVE-2016-     |
|                         | 10253]                                    |
|                         |                                           |
| glibc [14]              | Fix PowerPC sqrt inaccuracy               |
|                         |                                           |
| gnome-media [15]        | Add missing Breaks: gnome-media-common,   |
|                         | libgnome-media-dev, libgnome-media0 to    |
|                         | match Replaces                            |
|                         |                                           |
| gnome-screenshot [16]   | Use dash for time format separator        |
|                         |                                           |
| gnome-settings-         | Use dash for time format separator        |
| daemon [17]             |                                           |
|                         |                                           |
| gnutls28 [18]           | Fix truncation issue in PKCS#12 password  |
|                         | encoding; fix double free in certificate  |
|                         | information printing [CVE-2017-5334]; fix |
|                         | memory leak in server side error path;    |
|                         | fix memory leaks and an infinite loop in  |
|                         | OpenPGP certificate parsing [CVE-2017-    |
|                         | 5335 CVE-2017-5336 CVE-2017-5337]; fix    |
|                         | integer overflow in OpenPGP certificate   |
|                         | parsing [CVE-2017-7869]; fix read past    |
|                         | the end of buffer in OpenPGP certificate  |
|                         | parsing; fix crashes in OpenPGP           |
|                         | certificate parsing, related to private   |
|                         | key parsing [GNUTLS-SA-2017-3B]; fix      |
|                         | possible OOM in OpenPGP certificate       |
|                         | parsing [GNUTLS-SA-2017-3C]               |
|                         |                                           |
| groovy [19]             | Fix remote code execution vulnerability   |
|                         | via crafted serialized object [CVE-2016-  |
|                         | 6814]                                     |
|                         |                                           |
| groovy2 [20]            | Fix remote code execution vulnerability   |
|                         | via crafted serialized object [CVE-2016-  |
|                         | 6814]                                     |
|                         |                                           |
| guile-2.0 [21]          | Fix REPL server vulnerability [CVE-2016-  |
|                         | 8606], mkdir umask-related vulnerability  |
|                         | [CVE-2016-8605]                           |
|                         |                                           |
| initramfs-tools [22]    | Include drivers for all keyboards when    |
|                         | MODULES=dep; include most USB host        |
|                         | drivers and all bus driver modules;       |
|                         | remove code that prunes 'broken' symlinks |
|                         | and sometimes /etc/mtab; add all I2C bus  |
|                         | and mux drivers when MODULES=most; stop   |
|                         | force-loading drivers found through sysfs |
|                         | when MODULES=dep                          |
|                         |                                           |
| installation-guide [23] | Fix instructions for creating             |
|                         | syslinux.cfg to work with syslinux 5      |
|                         |                                           |
| irqbalance [24]         | Only warn once for affinity hint subset   |
|                         | empty irqs                                |
|                         |                                           |
| kup [25]                | Backport changes needed to work with      |
|                         | kernel.org in future                      |
|                         |                                           |
| libdatetime-timezone-   | Update included data to 2017b             |
| perl [26]               |                                           |
|                         |                                           |
| libindicate [27]        | libindicate-gtk3-dev: depend on           |
|                         | libindicate-gtk3-3 instead of             |
|                         | libindicate-gtk3                          |
|                         |                                           |
| libmateweather [28]     | Rename Rangoon timezone to Yangon (follow |
|                         | tzdata 2016g change)                      |
|                         |                                           |
| libvirt [29]            | Improve qemu v2.6+ compatibility          |
|                         |                                           |
| libvorbisidec [30]      | Add libogg-dev dependency to              |
|                         | libvorbisidec-dev                         |
|                         |                                           |
| libxslt [31]            | Check for integer overflow in             |
|                         | xsltAddTextString [CVE-2017-5029]         |
|                         |                                           |
| linux [32]              | Update to new stable release 3.16.43; mm/ |
|                         | huge_memory.c: fix up  "mm/huge_memory.c: |
|                         | respect FOLL_FORCE/FOLL_COW for thp"      |
|                         | backort                                   |
|                         |                                           |
| logback [33]            | Don't deserialize data from untrusted     |
|                         | sockets [CVE-2017-5929]                   |
|                         |                                           |
| lxc [34]                | Ensure target netns is caller-owned       |
|                         | [CVE-2017-5985]                           |
|                         |                                           |
| minicom [35]            | Fix out of bounds write in vt100.c        |
|                         | [CVE-2017-7467]                           |
|                         |                                           |
| modsecurity-crs [36]    | Fix typo in                               |
|                         | modsecurity_crs_16_session_hijacking.conf |
|                         |                                           |
| mongodb [37]            | Fix permissions on .dbshell [CVE-2016-    |
|                         | 6494]; redact key and nonce from auth     |
|                         | attempt logs                              |
|                         |                                           |
| ndisc6 [38]             | Use upstream default merge hook when      |
|                         | resolvconf is not available               |
|                         |                                           |
| ndoutils [39]           | Postrm purge: Check for ucf before        |
|                         | calling it                                |
|                         |                                           |
| nvidia-graphics-        | New upstream version (340.102) containing |
| drivers [40]            | security fixes [CVE-2017-0309 CVE-2017-   |
|                         | 0310 CVE-2017-0311 CVE-2017-0318          |
|                         | CVE-2017-0321]; fix module build on Linux |
|                         | 4.10 and newer                            |
|                         |                                           |
| nvidia-graphics-        | New upstream version (304.135) containing |
| drivers-                | security fixes [CVE-2017-0309 CVE-2017-   |
| legacy-304xx [41]       | 0310 CVE-2017-0311 CVE-2017-0318          |
|                         | CVE-2017-0321]; fix module build on Linux |
|                         | 4.10 and newer                            |
|                         |                                           |
| nvidia-graphics-        | Rebuild using nvidia-kernel-source        |
| modules [42]            | 340.102                                   |
|                         |                                           |
| openchange [43]         | Fix build failure with samba 4.2          |
|                         |                                           |
| openmpi [44]            | libopenmpi1.6: Fix two incorrect soname   |
|                         | links, Use versioned Conflicts:           |
|                         | libopenmpi2 (<< 1.6) to not interfere     |
|                         | with upgrades to stretch                  |
|                         |                                           |
| plv8 [45]               | Check for permission to call functions    |
|                         |                                           |
| postfix [46]            | Fix build failure with Linux 4.x kernels; |
|                         | add delmap to .prerm for all packages     |
|                         | that contain map data types exposed       |
|                         | through external .so files so that        |
|                         | upgrades to stretch (where the associated |
|                         | files have moved) will be functional      |
|                         |                                           |
| postgresql-9.4 [47]     | New upstream release                      |
|                         |                                           |
| python-                 | Fix HKDF issue with small key sizes       |
| cryptography [48]       | [CVE-2016-9243]; fix build failure due to |
|                         | SSL2 method detection                     |
|                         |                                           |
| radare2 [49]            | Fix denial of service vulnerability       |
|                         | [CVE-2017-6197]                           |
|                         |                                           |
| sane-backends [50]      | Fix security issue [CVE-2017-6318]        |
|                         |                                           |
| sendmail [51]           | Only touch files as smmsp:smmsp in /var/  |
|                         | run/sendmail/stampdir to avoid possible   |
|                         | privilege escalation; use lockfile-create |
|                         | (from lockfile-progs) instead of touch to |
|                         | manage the cronjob lockfiles; sendmail-   |
|                         | base: Add Depends: netbase for /etc/      |
|                         | services                                  |
|                         |                                           |
| sitesummary [52]        | Fix package pre-removal script            |
|                         |                                           |
| smemstat [53]           | Fix null pointer dereference when UID     |
|                         | can't be read                             |
|                         |                                           |
| spip [54]               | Fix multiple cross-site scripting issues, |
|                         | server side request forgery attacks       |
|                         | [CVE-2016-7999], directory traversal      |
|                         | [CVE-2016-7982], arbitrary code execution |
|                         | [CVE-2016-7998], cross-site request       |
|                         | forgery [CVE-2016-7980], cross-site       |
|                         | scripting vulnerabilities [CVE-2016-7981  |
|                         | CVE-2016-9997 CVE-2016-9998 CVE-2016-     |
|                         | 9152]                                     |
|                         |                                           |
| sus [55]                | Update for SUSv4 TC2                      |
|                         |                                           |
| synergy [56]            | Fix a crash when synergyc starts          |
|                         |                                           |
| systemd [57]            | Fix boolean properties retrieved via sd-  |
|                         | bus on big-endian architectures;          |
|                         | systemctl: Add is-enabled support for     |
|                         | SysV init scripts; if the start command   |
|                         | vanishes during runtime don't hit an      |
|                         | assert; if an automount unit is masked,   |
|                         | don't react to activation                 |
|                         |                                           |
| transmissionrpc [58]    | Add missing dependency from Python        |
|                         | modules to python-six                     |
|                         |                                           |
| tzdata [59]             | Update included data to 2017b; enable     |
|                         | partial translations of debconf templates |
|                         |                                           |
| unzip [60]              | Fix buffer overflows in unzip [CVE-2014-  |
|                         | 9913] and zipinfo [CVE-2016-9844]         |
|                         |                                           |
| uwsgi [61]              | Fix build failure with recent glibc       |
|                         |                                           |
| vim [62]                | Fix buffer overflows when reading         |
|                         | corrupted undo files [CVE-2017-6349       |
|                         | CVE-2017-6350]                            |
|                         |                                           |
| vlc [63]                | New upstream release                      |
|                         |                                           |
| webissues-server [64]   | postrm purge: Check for ucf before        |
|                         | calling it                                |
|                         |                                           |
| wget [65]               | Fix CRLF injection in URL host parts      |
|                         | [CVE-2017-6508]                           |
|                         |                                           |
| xmobar [66]             | Update weather feed URL                   |
|                         |                                           |
| xshisen [67]            | Fix frequent segfault on start            |
|                         |                                           |
| yara [68]               | Fix several security issues [CVE-2016-    |
|                         | 10210 CVE-2016-10211 CVE-2017-5923        |
|                         | CVE-2017-5924]                            |
|                         |                                           |
+-------------------------+-------------------------------------------+

A Debian 8.8 linux biztonsági frissítései

+----------------+--------------------------------+
| Advisory ID    | Package                        |
+----------------+--------------------------------+
| DSA-3690 [69]  | icedove [70]                   |
|                |                                |
| DSA-3711 [71]  | mariadb-10.0 [72]              |
|                |                                |
| DSA-3730 [73]  | icedove [74]                   |
|                |                                |
| DSA-3743 [75]  | python-bottle [76]             |
|                |                                |
| DSA-3756 [77]  | icoutils [78]                  |
|                |                                |
| DSA-3757 [79]  | icedove [80]                   |
|                |                                |
| DSA-3758 [81]  | bind9 [82]                     |
|                |                                |
| DSA-3759 [83]  | python-pysaml2 [84]            |
|                |                                |
| DSA-3760 [85]  | ikiwiki [86]                   |
|                |                                |
| DSA-3761 [87]  | rabbitmq-server [88]           |
|                |                                |
| DSA-3762 [89]  | tiff [90]                      |
|                |                                |
| DSA-3763 [91]  | pdns-recursor [92]             |
|                |                                |
| DSA-3764 [93]  | pdns [94]                      |
|                |                                |
| DSA-3765 [95]  | icoutils [96]                  |
|                |                                |
| DSA-3766 [97]  | mapserver [98]                 |
|                |                                |
| DSA-3767 [99]  | mysql-5.5 [100]                |
|                |                                |
| DSA-3768 [101] | openjpeg2 [102]                |
|                |                                |
| DSA-3769 [103] | libphp-swiftmailer [104]       |
|                |                                |
| DSA-3770 [105] | mariadb-10.0 [106]             |
|                |                                |
| DSA-3771 [107] | firefox-esr [108]              |
|                |                                |
| DSA-3772 [109] | libxpm [110]                   |
|                |                                |
| DSA-3773 [111] | openssl [112]                  |
|                |                                |
| DSA-3774 [113] | lcms2 [114]                    |
|                |                                |
| DSA-3775 [115] | tcpdump [116]                  |
|                |                                |
| DSA-3776 [117] | chromium-browser [118]         |
|                |                                |
| DSA-3777 [119] | libgd2 [120]                   |
|                |                                |
| DSA-3778 [121] | ruby-archive-tar-minitar [122] |
|                |                                |
| DSA-3779 [123] | wordpress [124]                |
|                |                                |
| DSA-3780 [125] | ntfs-3g [126]                  |
|                |                                |
| DSA-3781 [127] | svgsalamander [128]            |
|                |                                |
| DSA-3783 [129] | php5 [130]                     |
|                |                                |
| DSA-3784 [131] | viewvc [132]                   |
|                |                                |
| DSA-3785 [133] | jasper [134]                   |
|                |                                |
| DSA-3786 [135] | vim [136]                      |
|                |                                |
| DSA-3787 [137] | tomcat7 [138]                  |
|                |                                |
| DSA-3788 [139] | tomcat8 [140]                  |
|                |                                |
| DSA-3789 [141] | libevent [142]                 |
|                |                                |
| DSA-3790 [143] | spice [144]                    |
|                |                                |
| DSA-3791 [145] | linux [146]                    |
|                |                                |
| DSA-3792 [147] | libreoffice [148]              |
|                |                                |
| DSA-3793 [149] | shadow [150]                   |
|                |                                |
| DSA-3794 [151] | munin [152]                    |
|                |                                |
| DSA-3795 [153] | bind9 [154]                    |
|                |                                |
| DSA-3796 [155] | apache2 [156]                  |
|                |                                |
| DSA-3796 [157] | sitesummary [158]              |
|                |                                |
| DSA-3797 [159] | mupdf [160]                    |
|                |                                |
| DSA-3798 [161] | tnef [162]                     |
|                |                                |
| DSA-3799 [163] | imagemagick [164]              |
|                |                                |
| DSA-3800 [165] | libquicktime [166]             |
|                |                                |
| DSA-3801 [167] | ruby-zip [168]                 |
|                |                                |
| DSA-3802 [169] | zabbix [170]                   |
|                |                                |
| DSA-3803 [171] | texlive-base [172]             |
|                |                                |
| DSA-3804 [173] | linux [174]                    |
|                |                                |
| DSA-3805 [175] | firefox-esr [176]              |
|                |                                |
| DSA-3806 [177] | pidgin [178]                   |
|                |                                |
| DSA-3807 [179] | icoutils [180]                 |
|                |                                |
| DSA-3808 [181] | imagemagick [182]              |
|                |                                |
| DSA-3809 [183] | mariadb-10.0 [184]             |
|                |                                |
| DSA-3810 [185] | chromium-browser [186]         |
|                |                                |
| DSA-3811 [187] | wireshark [188]                |
|                |                                |
| DSA-3812 [189] | ioquake3 [190]                 |
|                |                                |
| DSA-3813 [191] | r-base [192]                   |
|                |                                |
| DSA-3814 [193] | audiofile [194]                |
|                |                                |
| DSA-3815 [195] | wordpress [196]                |
|                |                                |
| DSA-3816 [197] | samba [198]                    |
|                |                                |
| DSA-3817 [199] | jbig2dec [200]                 |
|                |                                |
| DSA-3818 [201] | gst-plugins-bad1.0 [202]       |
|                |                                |
| DSA-3819 [203] | gst-plugins-base1.0 [204]      |
|                |                                |
| DSA-3820 [205] | gst-plugins-good1.0 [206]      |
|                |                                |
| DSA-3821 [207] | gst-plugins-ugly1.0 [208]      |
|                |                                |
| DSA-3822 [209] | gstreamer1.0 [210]             |
|                |                                |
| DSA-3823 [211] | eject [212]                    |
|                |                                |
| DSA-3824 [213] | firebird2.5 [214]              |
|                |                                |
| DSA-3825 [215] | jhead [216]                    |
|                |                                |
| DSA-3826 [217] | tryton-server [218]            |
|                |                                |
| DSA-3827 [219] | jasper [220]                   |
|                |                                |
| DSA-3828 [221] | dovecot [222]                  |
|                |                                |
| DSA-3829 [223] | bouncycastle [224]             |
|                |                                |
| DSA-3830 [225] | icu [226]                      |
|                |                                |
| DSA-3831 [227] | firefox-esr [228]              |
|                |                                |
| DSA-3832 [229] | hunspell-en-us [230]           |
|                |                                |
| DSA-3832 [231] | uzbek-wordlist [232]           |
|                |                                |
| DSA-3832 [233] | icedove [234]                  |
|                |                                |
| DSA-3833 [235] | libav [236]                    |
|                |                                |
| DSA-3834 [237] | mysql-5.5 [238]                |
|                |                                |
| DSA-3835 [239] | python-django [240]            |
|                |                                |
| DSA-3836 [241] | weechat [242]                  |
|                |                                |
| DSA-3837 [243] | libreoffice [244]              |
|                |                                |
| DSA-3838 [245] | ghostscript [246]              |
|                |                                |
| DSA-3839 [247] | freetype [248]                 |
|                |                                |
+----------------+--------------------------------+

No Comments.

Leave a Reply