Debian Updates

[chris]

This is a ticket to track debian upgrades to the wiki:PuffinServer, wiki:PenguinServer and wiki:ParrotServer the time they take.

See:

• ​Recent Debian security announcements
• ​Recent Debian LTS security announcements
• ​MariaDB Announce List archives
• ​phusion-passenger-announcements archive

These updates are generally done using the wiki:AptitudeUpdateScript and this records all the changes in the /root/Changelog and then the contents of the Changelog are pasted into the ticket to document the upgrade.

This ticket took over from ticket:218 on 2014-02-25.

[chris]

wiki:PuffinServer MySQL update ​MariaDB 5.5.36:

2014-02-25      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

[chris]

Debian ​php5 security update, on wiki:ParrotServer:

2014-03-02      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

wiki:PenguinServer:

2014-03-02      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

wiki:PuffinServer hasn't been updated as it's running php compiled from source code and the last time an update was tried, 3 months ago, it failed, see ticket:629#comment:12

[chris]

Debian ​gnutls26 security update, on wiki:PuffinServer:

014-03-03      chris
        *       libgnutls-dev/wheezy libgnutls-openssl27/wheezy libgnutls26/wheezy libgnutlsxx27/wheezy : updated

on wiki:PenguinServer:

14-03-03      chris
        *       libgnutls26/wheezy : updated

on wiki:ParrotServer:

2014-03-03      chris
        *       libgnutls26/wheezy : updated

[chris]

It looks like I forgot to record any time for the updates done on ticket:692#comment:1 so I'm addimg some time for that now.

[chris]

wiki:PenguinServer update, no announcement I can find on the ​phusion-passenger-announcements list about this:

2014-03-07      chris
        *       ruby-daemon-controller/wheezy : updated

[chris]

wiki:PenguinServer updates:

2014-03-10      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

wiki:PuffinServer updates:

2014-03-10      chris
        *       udisks/wheezy : updated

[chris]

wiki:PuffinServer updates:

014-03-11      chris
        *       file/wheezy libmagic1/wheezy python-magic/wheezy : updated

wiki:ParrotServer updates:

014-03-11      chris
        *       file/wheezy libmagic1/wheezy : updated

wiki:PenguinServer updates:

014-03-11      chris
        *       file/wheezy libmagic1/wheezy : updated

[chris]

​mutt security update done yesterday but not reported at the time, wiki:PuffinServer:

2014-03-12      chris
        *       mutt/wheezy : updated

wiki:PenguinServer:

2014-03-12      chris
        *       mutt/wheezy : updated

wiki:ParrotServer:

2014-03-12      chris
        *       mutt/wheezy : updated

[chris]

Debian ​python2.7 security update, wiki:PenguinServer updates:

2014-03-17      chris
        *       libpython2.7/wheezy python2.7/wheezy python2.7-minimal/wheezy : updated

[chris]

wiki:PuffinServer:

2014-03-17      chris
        *       libpython2.7/wheezy python2.7/wheezy python2.7-dev/wheezy python2.7-minimal/wheezy : updated

wiki:ParrotServer:

2014-03-17      chris
        *       python2.7/wheezy python2.7-minimal/wheezy : updated

[chris]

wiki:PenguinServer updates follow, note that the reason for the updates from phusion generally come out after the updates have been available:

2014-03-18      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

wiki:PenguinServer updates:

2014-03-19      chris
*       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

announcement here, this must be a recression update ​http://blog.phusion.nl/2014/03/18/phusion-passenger-4-0-39-released/

[chris]

Debian ​file regression update, wiki:ParrotServer:

2014-03-24      chris
        *       file/wheezy libmagic1/wheezy : updated

wiki:PenguinServer:

014-03-24      chris
        *       file/wheezy libmagic1/wheezy : updated

wiki:PuffinServer:

14-03-24      chris
        *       file/wheezy libmagic1/wheezy python-magic/wheezy : updated

[chris]

Debian ​libyaml security update:

a specially-crafted YAML document that, when parsed by an application using libyaml, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application

wiki:PenguinServer:

2014-03-26      chris
        *       libyaml-0-2/wheezy : updated

[chris]

​openssh security update:

wiki:PenguinServer:

014-04-05      chris
        *       openssh-client/wheezy openssh-server/wheezy : updated

wiki:ParrotServer:

14-04-05      chris
        *       openssh-client/wheezy openssh-server/wheezy : updated

wiki:PuffinServer has an issue:

/etc/ssh/sshd_config: line 1: Bad configuration option: Package
/etc/ssh/sshd_config: terminating, 1 bad configuration options
invoke-rc.d: initscript ssh, action "restart" failed.
dpkg: error processing openssh-server (--configure):
 subprocess installed post-installation script returned error exit status 1
Errors were encountered while processing:
 openssh-server

[chris]

Puffin had a missing # on the first line of sshd_config, no idea why, updates:

014-04-05      chris
        *       openssh-client/wheezy openssh-server/wheezy ssh/wheezy : updated

[chris]

Serious ​OpenSSL bug, I upgraded the severs last night:

wiki:ParrotServer:

2014-04-07      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

wiki:PenguinServer:

2014-04-07      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

wiki:PuffinServer:

2014-04-07      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

I need to create new SSL keys on the servers and we also need to look at which sites have been running with PFS and ones that haven't might need users to change their passwords, more detail here:

• ​http://heartbleed.com/

[chris]

The ​Netcraft toolbar has a PFS indicator and these sites are all running with PFS:

• ​https://trac.transitionnetwork.org/
• ​https://stats.transitionnetwork.org/
• ​https://www.transitionnetwork.org/
• ​https://patterns.transitionresearchnetwork.org/

Which is good:

Use of Perfect Forward Secrecy (PFS), which is unfortunately rare but powerful, should protect past communications from retrospective decryption.

​http://heartbleed.com/

I have generated new CSRs for *.transitionnetwork.org/ and *.transitionresearchnetwork.org and submitted them to Gandi.

[chris]

For the new cert for patterns.transitionresearchnetwork.org the notes on ticket:691#comment:13 were followed and the wiki:SecurityInfo page has been updated with the new wiki:SecurityInfo#Fingerprints

[chris]

New OpenSSL again, this time to restart services, wiki:PuffinServer:

2014-04-08      chris
        *       postfix ssh : restarted by new openssl
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

wiki:PenguinServer:

2014-04-08      chris
        *       postfix ssh nginx fetchmail : restarted by new openssl
        *       libssl1.0.0/wheezy openssl/wheezy : updated

wiki:ParrotServer:

2014-04-08      chris
        *       ssh exim4 : restarted by openssl update
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

[chris]

wiki:PenguinServer ​heartbleed update:

2014-04-09      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Drupal response to heartbleed:

​https://drupal.org/news/2014-04-08-security-update

We should seriously consider doing some of these things.

[ed]

suggest starting a new ticket and cc-ing paul, sam, jim?

[chris]

Debian ​imagemagick security update, wiki:PuffinServer:

2014-04-09      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore-dev/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand-dev/wheezy libmagickwand5/wheezy : updated

wiki:PenguinServer:

2014-04-09      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore-dev/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand-dev/wheezy libmagickwand5/wheezy : updated

wiki:ParrotServer:

2014-04-09      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand5/wheezy : updated

[chris]

Debian ​jbigkit security update, wiki:PuffinServer:

2014-04-11      chris
        *       libjbig-dev/wheezy libjbig0/wheezy : updated

wiki:PenguinServer:

2014-04-11      chris
        *       libjbig-dev/wheezy libjbig0/wheezy : updated

wiki:ParrotServer:

2014-04-11      chris
        *       libjbig0/wheezy : updated

[chris]

wiki:PenguinServer:

2014-04-13      chris
*       nodejs/wheezy-backports nodejs-legacy/wheezy-backports : updated

[chris]

Following on from the nodejs update pslparsoid was restarted and the wiki wysiwig editor was tested, ​https://wiki.transitionnetwork.org/Sandbox

[chris]

Debian ​curl security update, wiki:PuffinServer:

2014-04-13      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy libcurl4-openssl-dev/wheezy : updated

wiki:PenguinServer:

2014-04-13      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

wiki:ParrotServer:

2014-04-13      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

[chris]

Debian ​openssl security update, wiki:PuffinServer:

14-04-18      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

wiki:PenguinServer:

14-04-18      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

wiki:ParrotServer:

2014-04-18      chris
          *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

[chris]

Updated ​MariaDB 5.5.37, installed on wiki:PuffinServer:

2014-04-18      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

[chris]

Debian ​openjpeg regression update, wiki:PuffinServer:

014-04-23      chris
           *       libopenjpeg2/wheezy : updated

[chris]

wiki:PuffinServer debian ​openjdk-6 security update:

2014-04-25      chris
        *       icedtea-6-jre-cacao/wheezy icedtea-6-jre-jamvm/wheezy openjdk-6-jdk/wheezy openjdk-6-jre/wheezy openjdk-6-jre-headless/wheezy openjdk-6-jre-lib/wheezy : updated

[chris]

Debian ​linux-2.6 and other updates, wiki:PuffinServer:

2014-04-26      chris
        *       base-files/wheezy conkeror/wheezy conkeror-spawn-process-helper/wheezy liblcms2-2/wheezy libpq5/wheezy libsmbclient/wheezy libsnmp-base/wheezy libsnmp15/wheezy libsvn1/wheezy libwbclient0/wheezy libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy linux-libc-dev/wheezy samba-common/wheezy samba-common-bin/wheezy smbclient/wheezy subversion/wheezy tzdata/wheezy tzdata-java/wheezy : updated

wiki:PenguinServer:

2014-04-26      chris
        *       base-files/wheezy liblcms2-2/wheezy libsvn1/wheezy libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy linux-libc-dev/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy python-subversion/wheezy subversion/wheezy tzdata/wheezy : updated

wiki:ParrotServer:

2014-04-26      chris
        *       base-files/wheezy libapache2-mod-php5/wheezy liblcms2-2/wheezy libsvn1/wheezy libxml2/wheezy linux-libc-dev/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy subversion/wheezy tzdata/wheezy : updated

[chris]

Debian ​dpkg security update, wiki:PuffinServer:

2014-04-28      chris
        *       dpkg/wheezy dpkg-dev/wheezy libdpkg-perl/wheezy : updated

wiki:PenguinServer:

2014-04-28      chris
        *       dpkg/wheezy dpkg-dev/wheezy libdpkg-perl/wheezy : updated

wiki:ParrotServer:

2014-04-28      chris
        *       dpkg/wheezy : updated

[chris]

Debian ​dpkg security update, wiki:PuffinServer:

2014-04-30      chris
        *       dpkg/wheezy dpkg-dev/wheezy libdpkg-perl/wheezy : updated

wiki:PenguinServer, also updated iceweasel earlier today, not a security issue really as it was just used once to upload the In Transition 2.0 movie to archive.org:

2014-04-30      chris
        *       dpkg/wheezy dpkg-dev/wheezy libdpkg-perl/wheezy : updated

2014-04-30      chris
        *       iceweasel/wheezy libmozjs24d/wheezy xulrunner-24.0/wheezy : updated

wiki:ParrotServer:

2014-04-30      chris
        *       dpkg/wheezy : updated

[chris]

Debian ​mysql-5.5 security update, wiki:PenguinServer:

2014-05-03      chris
        *       libmysqlclient-dev/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

wiki:ParrotServer:

2014-05-03      chris
        *       libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

[chris]

This Debian ​openjdk-7 security update. was applied to wiki:PuffinServer last night but it wasn't posted here at the time:

2014-05-05      chris
        *       icedtea-7-jre-jamvm/wheezy openjdk-7-jdk/wheezy openjdk-7-jre/wheezy openjdk-7-jre-headless/wheezy openjdk-7-jre-lib/wheezy : updated

[chris]

No announcement on ​the list yet but this is a new Nginx for wiki:PenguinServer:

2014-05-07      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

There was this suggested config change to /etc/nginx/fastcgi_params:

-fastcgi_param  HTTPS                   $https;
+fastcgi_param  HTTPS                   $https if_not_empty;

There was also this error:

Errors were encountered while processing:
 nginx-extras
E: Sub-process /usr/bin/dpkg returned an error code (1)
A package failed to install.  Trying to recover:
Setting up nginx-extras (1:1.6.0-2.4.0.42~wheezy1) ...
cat: /var/run/nginx.pid.old: No such file or directory
dpkg: error processing nginx-extras (--configure):
 subprocess installed post-installation script returned error exit status 1
Errors were encountered while processing:
 nginx-extras

Tried to fix it:

aptitude upgrade
The following partially installed packages will be configured:
  nginx-extras 
No packages will be installed, upgraded, or removed.
0 packages upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B of archives. After unpacking 0 B will be used.
Setting up nginx-extras (1:1.6.0-2.4.0.42~wheezy1) ...
cat: /var/run/nginx.pid.old: No such file or directory
dpkg: error processing nginx-extras (--configure):
 subprocess installed post-installation script returned error exit status 1
Errors were encountered while processing:
 nginx-extras
E: Sub-process /usr/bin/dpkg returned an error code (1)
A package failed to install.  Trying to recover:
Setting up nginx-extras (1:1.6.0-2.4.0.42~wheezy1) ...
cat: /var/run/nginx.pid.old: No such file or directory
dpkg: error processing nginx-extras (--configure):
 subprocess installed post-installation script returned error exit status 1
Errors were encountered while processing:
 nginx-extras

dpkg -l | grep nginx-extras      
iF  nginx-extras                            1:1.6.0-2.4.0.42~wheezy1     amd64        nginx web/proxy server (extended version)

There is a nginx.pid.oldbin in /var/run but not a nginx.pid.old.

But all the sites appear to be working OK so I think this is safe to ignore for now.

[chris]

New Nginx on wiki:PenguinServer, no announcement on ​the list yet:

2014-05-10      chris
        *       nginx-common/wheezy nginx-extras/wheezy : updated

[chris]

Debian ​linux security update, wiki:ParrotServer:

2014-05-12      chris
        *       linux-libc-dev/wheezy : updated

wiki:PenguinServer:

2014-05-12      chris
        *       linux-libc-dev/wheezy : updated

wiki:PuffinServer:

2014-05-12      chris
        *       linux-libc-dev/wheezy : updated

[chris]

Debian libxfont1 update, an announcement for the reason yet, wiki:PenguinServer, wiki:ParrotServer and wiki:PuffinServer:

4-05-13      chris                                                                        *       libxfont1/wheezy : updated

[chris]

Debian ​openssl security update, wiki:PuffinServer:

2014-05-18      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

wiki:PenguinServer:

14-05-18      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

wiki:ParrotServer:

014-05-18      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

[chris]

A couple of sets of updates on wiki:PenguinServer today:

2014-05-28      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

2014-05-28      chris
        *       libv8-3.14.5/wheezy-backports : updated

[chris]

Another new Ngnix for wiki:PenguinServer and again nothing about it in the ​​phusion-passenger-announcements archive:

2014-05-29      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Debian ​php5 security update:

The default PHP FPM socket permission has been changed from 0666
to 0660 to mitigate a security vulnerability (CVE-2014-0185) in PHP
FPM that allowed any local user to run a PHP code under the active
user of FPM process via crafted FastCGI client.

The default Debian setup now correctly sets the listen.owner and
listen.group to www-data:www-data in default php-fpm.conf. If you
have more FPM instances or a webserver not running under www-data
user you need to adjust the configuration of FPM pools in
/etc/php5/fpm/pool.d/ so the accessing process has rights to
access the socket.

This needed the following setting:

listen.owner = www-data
listen.group = www-data
listen.mode = 0660

In /etc/php5/fpm/pool.d/www.conf on wiki:PenguinServer, updates on that server:

2014-06-01      chris
        *       libgnutls26/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy python-lxml/wheezy : updated

And on wiki:ParrotServer:

2014-06-01      chris
        *       libapache2-mod-php5/wheezy libgnutls26/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

[chris]

Yesterday GNU TLS was also upgraded on all 3 servers due to the ​gnutls26 security update, the updates on the other server are on ticket:692#comment:46 and the wiki:PuffinServer update were:

2014-06-01      chris
        *       libgnutls-dev/wheezy libgnutls-openssl27/wheezy libgnutls26/wheezy libgnutlsxx27/wheezy : updated

[chris]

Debian ​openssl security update, wiki:PuffinServer:

2014-06-05      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy linux-libc-dev/wheezy openssl/wheezy : updated

wiki:ParrotServer:

2014-06-05      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy linux-libc-dev/wheezy openssl/wheezy : updated

wiki:PenguinServer:

2014-06-05      chris
        *       libssl1.0.0/wheezy linux-libc-dev/wheezy openssl/wheezy : updated

[chris]

Debian ​​dpkg security update, these were done last night, wiki:PuffinServer:

2014-06-08      chris
        *       dpkg/wheezy dpkg-dev/wheezy libdpkg-perl/wheezy : updated

wiki:ParrotServer:

2014-06-08      chris
        *       dpkg/wheezy : updated

wiki:PenguinServer:

2014-06-08      chris
        *       dpkg/wheezy dpkg-dev/wheezy libdpkg-perl/wheezy : updated

[chris]

wiki:PuffinServer ​MariaDB 5.5.38:

2014-06-09      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

[chris]

wiki:PenguinServer updates:

2014-06-12      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Debian ​apt security update, applied last night to wiki:PuffinServer:

2014-06-12      chris
        *       apt/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

wiki:PenguinServer:

2014-06-12      chris
        *       apt/wheezy apt-transport-https/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

and wiki:ParrotServer:

2014-06-12      chris
        *       apt/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

[chris]

Lots of updates last night, first one was the Debian ​openssl update, wiki:ParrotServer:

2014-06-16      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

wiki:PenguinServer:

2014-06-16      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

wiki:PuffinServer:

2014-06-16      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

And a few hours later there was a Debian ​php5 security update, wiki:ParrotServer:

2014-06-16      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

wiki:PenguinServer:

2014-06-17      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

[chris]

wiki:PuffinServer Debian ​samba security update:

2014-06-23      chris
        *       libsmbclient/wheezy libwbclient0/wheezy samba-common/wheezy samba-common-bin/wheezy smbclient/wheezy : updated

[chris]

Debian ​gnupg security update, wiki:PuffinServer:

2014-06-25      chris
        *       gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy : updated

wiki:PenguinServer:

2014-06-25      chris
        *       gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy : updated

wiki:ParrotServer:

2014-06-25      chris
        *       gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy : updated

[chris]

Debian ​dbus security update has been applied to all 3 servers, I'll post the list of updated packages for each server tomorrow (on train now).

[chris]

Replying to chris:

Debian ​dbus security update has been applied to all 3 servers, I'll post the list of updated packages for each server tomorrow (on train now).

wiki:ParrotServer:

2014-07-02      chris
        *       dbus/wheezy libdbus-1-3/wheezy : updated

wiki:PenguinServer:

2014-07-02      chris
        *       dbus/wheezy libdbus-1-3/wheezy : updated

wiki:PuffinServer:

2014-07-02      chris
        *       dbus/wheezy dbus-x11/wheezy libdbus-1-3/wheezy : updated

[chris]

Debian ​linux security update, wiki:PuffinServer:

2014-07-06      chris
        *       linux-libc-dev/wheezy : updated

wiki:PenguinServer:

2014-07-06      chris
        *       linux-libc-dev/wheezy : updated

wiki:ParrotServer:

2014-07-06      chris
        *       linux-libc-dev/wheezy : updated

[chris]

Debian ​php5 security update, wiki:ParrotServer:

2014-07-08      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

wiki:PenguinServer:

2014-07-08      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

[chris]

Yesterday a Debian ​phpmyadmin security update was applied to wiki:ParrotServer:

2014-07-09      chris
        *       phpmyadmin/wheezy : updated

And I have just applied the Debian ​eglibc security update to, wiki:ParrotServer:

2014-07-10      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

wiki:PenguinServer:

2014-07-10      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

and wiki:PuffinServer:

2014-07-10      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dbg/wheezy libc6-dev/wheezy locales/wheezy locales-all/wheezy multiarch-support/wheezy : updated

[chris]

Debian ​libxml2 security update on wiki:ParrotServer:

2014-07-11      chris
        *       libxml2/wheezy : updated

wiki:PenguinServer:

2014-07-11      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy : updated

and wiki:PuffinServer:

2014-07-11      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy : updated

[chris]

Various Debian updates applied on Saturday, including ​openssh, wiki:PuffinServer:

2014-07-12      chris
        *       base-files/wheezy cups-bsd/wheezy cups-client/wheezy cups-common/wheezy libcups2/wheezy libcupsimage2/wheezy libdbi-perl/wheezy libjpeg62/wheezy libjpeg8/wheezy libjpeg8-dev/wheezy openssh-client/wheezy openssh-server/wheezy ssh/wheezy tzdata/wheezy tzdata-java/wheezy : updated

wiki:PenguinServer:

2014-07-12      chris
        *       base-files/wheezy libcups2/wheezy libcupsimage2/wheezy libdbi-perl/wheezy libjpeg62/wheezy libjpeg8/wheezy libjpeg8-dev/wheezy openssh-client/wheezy openssh-server/wheezy tzdata/wheezy : updated

wiki:ParrotServer:

2014-07-12      chris
        *       apache2-mpm-itk/wheezy apache2-utils/wheezy apache2.2-bin/wheezy apache2.2-common/wheezy base-files/wheezy libcups2/wheezy libcupsimage2/wheezy libdbi-perl/wheezy libjpeg8/wheezy openssh-client/wheezy openssh-server/wheezy tzdata/wheezy : updated

[chris]

New Nginx and Phusion Passenger installed wiki:PenguinServer last night:

2014-07-14      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Debian ​openjdk-6 security update on wiki:PuffinServer:

2014-07-17      chris
        *       icedtea-6-jre-cacao/wheezy icedtea-6-jre-jamvm/wheezy openjdk-6-jre-headless/wheezy openjdk-6-jre-lib/wheezy : updated

[chris]

Debian ​mysql-5.5 security update on wiki:ParrotServer:

2014-07-22      chris
        *       acpi-fakekey/wheezy acpi-support/wheezy acpi-support-base/wheezy libmysqlclient18/wheezy mysql-common/wheezy mysql-server-core-5.5/wheezy : updated

And wiki:PenguinServer:

2014-07-22      chris
        *       libmysqlclient-dev/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

wiki:PuffinServer is running MariaDB.

[chris]

Debian ​openjdk-7 security update on wiki:PuffinServer:

014-07-23      chris
        *       icedtea-7-jre-jamvm/wheezy openjdk-7-jre-headless/wheezy : updated

[chris]

wiki:PenguinServer updates:

2014-07-24      chris
*       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Debian ​apache2 security update for wiki:ParrotServer:

14-07-25      chris
       *      apache2-mpm-itk/wheezy apache2-utils/wheezy apache2.2-bin/wheezy apache2.2-common/wheezy : updated

[chris]

Oops time missing for Apache update above.

[chris]

Debian ​cups security update, wiki:ParrotServer:

2014-07-27      chris
        *       libcups2/wheezy libcupsimage2/wheezy : updated

wiki:PenguinServer:

2014-07-27      chris
        *       libcups2/wheezy libcupsimage2/wheezy : updated

wiki:PuffinServer:

2014-07-27      chris
        *       cups-bsd/wheezy cups-client/wheezy cups-common/wheezy libcups2/wheezy libcupsimage2/wheezy : updated

[chris]

Debian ​linux security update, wiki:PuffinServer:

2014-07-29      chris
        *       linux-libc-dev/wheezy : updated

wiki:PenguinServer:

2014-07-29      chris
        *       linux-libc-dev/wheezy : updated

wiki:ParrotServer:

2014-07-29      chris
        *       linux-libc-dev/wheezy : updated

[chris]

No announcement in the archives yet but I just installed a new version of NSS on wiki:PuffinServer:

2014-07-31      chris
        *       libnss3/wheezy libnss3-1d/wheezy : updated

When the email is archived I expect it'll be available here:

• ​https://lists.debian.org/debian-security-announce/2014/msg00176.html

[chris]

Debian Backports Nodejs update on wiki:PenguinServer:

2014-08-03      chris
        *       nodejs/wheezy-backports nodejs-legacy/wheezy-backports : updated

The thread about this update:

• ​https://lists.debian.org/debian-backports/2014/07/threads.html#00013
• ​https://lists.debian.org/debian-backports/2014/08/threads.html#00003

I have check the MediaWiki WYSIWYG editor, this is the only thing using Nodejs, and it's still working fine.

[chris]

wiki:PuffinServer ​MariaDB 5.5.39 update:

2014-08-05      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

[chris]

Debian ​openssl security update, wiki:PuffinServer:

2014-08-07      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

wiki:PenguinServer:

2014-08-07      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

wiki:ParrotServer:

2014-08-07      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

[chris]

krb5 updated on all 3 servers, see ​https://lists.debian.org/debian-security-announce/2014/msg00182.html

[chris]

Debian ​gpgme1.0 security update on wiki:PuffinServer, wiki:PenguinServer and wiki:ParrotServer:

2014-08-14      chris
        *       libgpgme11/wheezy : updated

[chris]

Debian ​xen security update on wiki:PuffinServer:

2014-08-18      chris
        *       libxenstore3.0/wheezy : updated

[chris]

Debian ​php5 security update on wiki:PenguinServer:

2014-08-21      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

and wiki:ParrotServer:

2014-08-21      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

[chris]

Debian ​php5 regression update, same packages as updated this morning on last comment.

[chris]

Debian ​python-imaging security update on wiki:PenguinServer:

2014-08-21      chris
        *       python-imaging/wheezy : updated

[chris]

wiki:PenguinServer Nginx updates:

2014-08-22      chris
               *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Debian ​eglibc security update, wiki:PuffinServer:

2014-08-27      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dbg/wheezy libc6-dev/wheezy locales/wheezy locales-all/wheezy multiarch-support/wheezy : updated

wiki:PenguinServer:

014-08-27      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

wiki:ParrotServer:

014-08-27      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

[chris]

wiki:PenguinServer Nginx updates:

2014-08-27      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Debian ​lua5.1 security update on PuffinServer, PenguinServer and ParrotServer:

2014-09-01      chris
        *       liblua5.1-0/wheezy : updated

[chris]

Debian ​procmail security update on ParrotServer:

2014-09-04      chris
        *       procmail/wheezy : updated

and PenguinServer:

2014-09-04      chris
        *       procmail/wheezy : updated

and PuffinServer:

2014-09-04      chris
        *       procmail/wheezy : updated

I think we are only using procmail for the trac email features on PenguinServer.

[chris]

Debian ​file security update, PuffinServer:

2014-09-09      chris
        *       file/wheezy libmagic1/wheezy python-magic/wheezy : updated

PenguinServer:

2014-09-09      chris
        *       file/wheezy libmagic1/wheezy : updated

ParrotServer:

2014-09-09      chris
        *       file/wheezy libmagic1/wheezy : updated

[chris]

Debian ​curl security update on PuffinServer:

2014-09-10      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy libcurl4-openssl-dev/wheezy : updated

PenguinServer:

2014-09-10      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

ParrotServer:

2014-09-10      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

[chris]

Debian ​file regression update on PuffinServer:

2014-09-10      chris
        *       file/wheezy libmagic1/wheezy python-magic/wheezy : updated

PenguinServer:

2014-09-10      chris
        *       file/wheezy libmagic1/wheezy : updated

ParrotServer:

2014-09-10      chris
        *       file/wheezy libmagic1/wheezy : updated

[chris]

Debian ​bind9 security update and ​gnupg security update on PuffinServer:

2014-09-11      chris
        *       bind9-host/wheezy dnsutils/wheezy gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

PenguinServer:

2014-09-11      chris
        *       gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy : updated

ParrotServer:

2014-09-11      chris
        *       bind9-host/wheezy dnsutils/wheezy gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

These updates were done last night.

[chris]

This is a shocker, Debian ​apt security update:

It was discovered that APT, the high level package manager, does not
properly invalidate unauthenticated data (CVE-2014-0488), performs
incorrect verification of 304 replies (CVE-2014-0487), does not perform
the checksum check when the Acquire::GzipIndexes option is used
(CVE-2014-0489) and does not properly perform validation for binary
packages downloaded by the apt-get download command (CVE-2014-0490).

I have installed apt-transport-https as well as updating, PuffinServer:

2014-09-16      chris
        *       apt/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

2014-09-16      chris
        *       apt-transport-https : install

PenguinServer:

2014-09-16      chris
        *       apt/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

2014-09-16      chris
        *       apt-transport-https : install

ParrotServer:

2014-09-16      chris
        *       apt/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

2014-09-16      chris
        *       apt-transport-https : install

[chris]

Just like busses... Debian ​dbus security update, PuffinServer:

2014-09-16      chris
        *       dbus/wheezy dbus-x11/wheezy libdbus-1-3/wheezy : updated

PenguinServer:

2014-09-16      chris
        *       dbus/wheezy libdbus-1-3/wheezy : updated

ParrotServer:

2014-09-16      chris
        *       dbus/wheezy libdbus-1-3/wheezy : updated

I still need to work out which Debian mirrors support HTTPS for the apt-transport-https packages installed on the last ticket.

[chris]

Incredible:

An attacker able to man-in-the-middle a HTTP request to an apt repository can trigger the buffer overflow, leading to a crash of the 'http' apt method binary, or potentially to arbitrary code execution.

Debian ​apt security update on PuffinServer:

2014-09-23      chris
        *       apt/wheezy apt-transport-https/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

PenguinServer:

2014-09-23      chris
        *       apt/wheezy apt-transport-https/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

ParrotServer:

2014-09-23      chris
        *       apt/wheezy apt-transport-https/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

[chris]

New Nginx on PenguinServer:

2014-09-24      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Bad ​bash security update, see ​Bash bug fallout: Are you Shell Shocked yet? You will be when this becomes a worm, the servers were all updated last night, also there is a Debian ​nss security update this morning, wiki:PuffinServer updates:

2014-09-25      chris
        *       libnss3/wheezy libnss3-1d/wheezy : updated

2014-09-24      chris
        *       bash/wheezy : updated

wiki:PenguinServer:

2014-09-24      chris
        *       bash/wheezy : updated

wiki:ParrotServer:

2014-09-24      chris
        *       bash/wheezy : updated

PS Minimum time increment of 15 mins was omitted from ticket:692#comment:94 so it's been added here.

[chris]

I installed a new version of bash in the early hours, see ​bash security update, PuffinServer:

2014-09-26      chris
        *       bash/wheezy : updated

PenguinServer:

2014-09-26      chris
        *       bash/wheezy : updated

ParrotServer:

2014-09-26      chris
        *       bash/wheezy : updated

[chris]

Missed posting the Debian ​libvirt security update on PuffinServer from a few days ago:

2014-09-27      chris
        *       libvirt0/wheezy : updated

Debian ​rsyslog security update applied in the early hours, to PuffinServer, PenguinServer and ParrotServer:

2014-10-01      chris
        *       rsyslog/wheezy : updated

[chris]

PenguinServer Nginx and Passenger update:

2014-10-01      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Debian ​rsyslog security update, PuffinServer:

2014-10-08      chris
        *       rsyslog/wheezy : updated

PenguinServer:

2014-10-08      chris
        *       rsyslog/wheezy : updated

ParrotServer:

2014-10-08      chris
        *       rsyslog/wheezy : updated

[chris]

Debian ​apt security update, PuffinServer:

2014-10-08      chris
        *       apt/wheezy apt-transport-https/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

PenguinServer:

2014-10-08      chris
        *       apt/wheezy apt-transport-https/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

ParrotServer:

2014-10-08      chris
        *       apt/wheezy apt-transport-https/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

[chris]

Debian ​openssl security update on PuffinServer:

2014-10-16      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

PenguinServer:

2014-10-16      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

ParrotServer:

2014-10-16      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

[chris]

Debian system updates on PuffinServer:

2014-10-18      chris
        *       at/wheezy base-files/wheezy ca-certificates/wheezy debian-archive-keyring/wheezy libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dbg/wheezy libc6-dev/wheezy libkeyutils1/wheezy libperl5.14/wheezy libpq5/wheezy libsnmp-base/wheezy libsnmp15/wheezy linux-libc-dev/wheezy locales/wheezy locales-all/wheezy multiarch-support/wheezy perl/wheezy perl-base/wheezy perl-modules/wheezy tzdata/wheezy tzdata-java/wheezy unattended-upgrades/wheezy xdg-utils/wheezy : updated

PenguinServer:

2014-10-18      chris
        *       base-files/wheezy ca-certificates/wheezy debian-archive-keyring/wheezy libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy libcgi-fast-perl/wheezy libkeyutils1/wheezy libperl5.14/wheezy linux-libc-dev/wheezy locales/wheezy multiarch-support/wheezy perl/wheezy perl-base/wheezy perl-modules/wheezy tzdata/wheezy : updated

ParrotServer:

2014-10-18      chris
        *       base-files/wheezy ca-certificates/wheezy debian-archive-keyring/wheezy exim4/wheezy exim4-base/wheezy exim4-config/wheezy exim4-daemon-light/wheezy libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy libkeyutils1/wheezy linux-libc-dev/wheezy locales/wheezy multiarch-support/wheezy perl/wheezy perl-base/wheezy perl-modules/wheezy tzdata/wheezy : updated

[chris]

Debian ​mysql-5.5 security update, applied last night, PenguinServer:

2014-10-20      chris
        *       libmysqlclient-dev/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

ParrotServer:

2014-10-20      chris
        *       libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

On PenguinServer there was this error:

Err http://parsoid.wmflabs.org wmf-production Release
Fetched 837 B in 2s (341 B/s)
W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://parsoid.wmflabs.org wmf-production Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 811780265C927F7C

W: Failed to fetch http://parsoid.wmflabs.org:8080/deb/dists/wmf-production/Release: 
W: Some index files failed to download. They have been ignored, or old ones used instead.

So, following the steps documented on ticket:793#comment:1

gpg --keyserver subkeys.pgp.net --recv-keys 811780265C927F7C
  gpg: requesting key 5C927F7C from hkp server subkeys.pgp.net
  gpg: key 5C927F7C: public key "parsoid@wikimedia.org (Parsoid repository key signing key) <parsoid@wikimedia.org>" imported
  gpg: Total number processed: 1
  gpg:               imported: 1  (RSA: 1)
gpg -a --export 5C927F7C | apt-key add -
  OK

Then parasoid was updated:

2014-10-21      chris
        *       parsoid/wmf-production : updated

And now using the MediaWiki visual editor results on this error:

Error loading data from server: parsoidserver-http-bad-status: 500. Would you like to retry?

I'm going to follow this matter up on a new ticket, ticket:799

[chris]

Debian ​libtasn1-3 security update applied earlier this afternoon, on PuffinServer:

2014-10-26      chris
        *       libtasn1-3/wheezy libtasn1-3-dev/wheezy : updated

PenguinServer:

2014-10-26      chris
        *       libtasn1-3/wheezy : updated

ParrotServer:

2014-10-26      chris
        *       libtasn1-3/wheezy : updated

[chris]

Debian ​libxml2 security update, PuffinServer:

2014-10-26      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy : updated

PenguinServer:

2014-10-26      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy : updated

ParrotServer:

2014-10-26      chris
        *       libxml2/wheezy : updated

[chris]

Debian ​linux security update on PuffinServer:

2014-10-31      chris
        *       linux-libc-dev/wheezy : updated

PenguinServer:

2014-10-31      chris
        *       linux-libc-dev/wheezy : updated

and ParrotServer:

2014-10-31      chris
        *       linux-libc-dev/wheezy : updated

[chris]

Debian ​wget security update applied to PuffinServer, PenguinServer and ParrotServer last night:

2014-11-02      chris
        *       wget/wheezy : updated

[chris]

Debian ​php5 security update on PenguinServer:

2014-11-04      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

ParrotServer:

2014-11-04      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

[chris]

Debian ​curl security update, PuffinServer:

2014-11-07      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy libcurl4-openssl-dev/wheezy : updated

PenguinServer:

2014-11-07      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

ParrotServer:

2014-11-07      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

[chris]

PuffinServer, no email yet:

2014-11-11      chris
        *       file/wheezy libmagic1/wheezy libnss3/wheezy libnss3-1d/wheezy python-magic/wheezy : updated

PenguinServer:

2014-11-11      chris
        *       file/wheezy libmagic1/wheezy : updated

ParrotServer:

2014-11-11      chris
        *       file/wheezy libmagic1/wheezy : updated

[chris]

Debian ​file security update which was applied last night on ticket:692#comment:110

[chris]

Debian ​libgcrypt11 security update, PuffinServer:

2014-11-16      chris
        *       libgcrypt11/wheezy libgcrypt11-dev/wheezy : updated

PenguinServer and ParrotServer:

2014-11-16      chris
        *       libgcrypt11/wheezy : updated

[chris]

Debian ​php5 security update:

Francisco Alonso of Red Hat Product Security found an issue in the file
utility, whose code is embedded in PHP, a general-purpose scripting
language.  When checking ELF files, note headers are incorrectly
checked, thus potentially allowing attackers to cause a denial of
service (out-of-bounds read and application crash) by supplying a
specially crafted ELF file.

As announced in DSA-3064-1 it has been decided to follow the stable
5.4.x releases for the Wheezy php5 packages. Consequently the
vulnerability is addressed by upgrading PHP to a new upstream version
5.4.35, which includes additional bug fixes, new features and possibly
incompatible changes. Please refer to the upstream changelog for more
information:

http://php.net/ChangeLog-5.php#5.4.35

ParrotServer:

2014-11-19      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

PenguinServer:

2014-11-19      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

And after applying those updates and checking the servers a Debian ​php5 regression update:

The previous update for php5, DSA-3074-1, introduced regression in the
sessionclean cron script. The change was intended to fix a potential
symlink attack using filenames including the NULL character (Debian bug
#766147), but depended on sed package version too recent, not in Wheezy.

This update reverts the fix, so people are advised to keep kernel
symlink protection (sysctl fs.protected_symlinks=1) enabled as it is by
default on Wheezy, which is enough to prevent successful exploitation.

PenguinServer:

2014-11-19      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

ParrotServer:

2014-11-19      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

[chris]

PuffinServer ​openjdk-6 security update:

2014-11-27      chris
        *       icedtea-6-jre-cacao/wheezy icedtea-6-jre-jamvm/wheezy openjdk-6-jre-headless/wheezy openjdk-6-jre-lib/wheezy : updated

[chris]

PuffinServer Debian ​openjdk-7 security update:

2014-11-29      chris
        *       icedtea-7-jre-jamvm/wheezy openjdk-7-jre-headless/wheezy : updated

[chris]

Debian ​flac security update and ​mutt security update, PuffinServer:

2014-11-30      chris
        *       libflac8/wheezy mutt/wheezy : updated

PenguinServer:

2014-11-30      chris
        *       mutt/wheezy : updated

ParrotServer:

2014-11-30      chris
        *       mutt/wheezy : updated

[chris]

Debian ​tcpdump security update, ParrotServer and PuffinServer

2014-12-03      chris
        *       tcpdump/wheezy : updated

[chris]

Debian ​jasper security update, PuffinServer:

2014-12-04      chris
        *       libjasper-dev/wheezy libjasper1/wheezy : updated

PenguinServer:

2014-12-04      chris
        *       libjasper-dev/wheezy libjasper1/wheezy : updated

ParrotServer:

2014-12-04      chris
        *       libjasper1/wheezy : updated

[chris]

Debian libc update, PuffinServer:

2014-12-08      chris
        *       linux-libc-dev/wheezy : updated

PenguinServer:

2014-12-08      chris
        *       linux-libc-dev/wheezy : updated

ParrotServer:

2014-12-08      chris
        *       linux-libc-dev/wheezy : updated

[chris]

Yesterdays Debian ​linux security update announcement (it wasn't out when the updates were applied), see ticket:692#comment:119.

Debian ​bind9 security update, PuffinServer:

2014-12-09      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

ParrotServer:

2014-12-09      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

[chris]

Debian ​graphviz security update, PuffinServer:

2014-12-11      chris
        *       libcdt4/wheezy libcgraph5/wheezy libgraph4/wheezy libgraphviz-dev/wheezy libgvc5/wheezy libgvpr1/wheezy libpathplan4/wheezy libxdot4/wheezy : updated

PenguinServer:

2014-12-11      chris
        *       libcdt4/wheezy libcgraph5/wheezy libgraph4/wheezy libgraphviz-dev/wheezy libgvc5/wheezy libgvpr1/wheezy libpathplan4/wheezy libxdot4/wheezy : updated

[chris]

Debian ​dbus security update, PuffinServer:

2014-12-12      chris
        *       dbus/wheezy dbus-x11/wheezy libdbus-1-3/wheezy : updated

PenguinServer:

2014-12-12      chris
        *       dbus/wheezy libdbus-1-3/wheezy : updated

[chris]

Debian ​libyaml security update done on PenguinServer in the early hours this morning:

2014-12-14      chris
        *       libyaml-0-2/wheezy : updated

[chris]

The day before yesterday Ngnix and Passenger were updated on PenguinServer, no announcement email has been posted to the list about this update yet:

2014-12-12      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Debian ​heirloom-mailx security update applied last night to PuffinServer:

2014-12-16      chris
        *       heirloom-mailx/wheezy : updated

PenguinServer:

2014-12-16      chris
        *       heirloom-mailx/wheezy : updated

and ParrotServer:

2014-12-16      chris
        *       heirloom-mailx/wheezy : updated

[chris]

A couple of days ago Ngnix / Passenger was updated and tested on PenguinServer:

2014-12-18      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

And this time there is ​a post explaining the update.

[chris]

Debian ​jasper security update on PuffinServer:

2014-12-20      chris
        *       libjasper-dev/wheezy libjasper1/wheezy : updated

PenguinServer:

2014-12-20      chris
        *       libjasper-dev/wheezy libjasper1/wheezy : updated

ParrotServer:

2014-12-20      chris
        *       libjasper1/wheezy : updated

[chris]

Debian ​ntp security update, ​subversion security update and ​subversion regression update, PuffinServer:

2014-12-20      chris
        *       libsvn1/wheezy ntpdate/wheezy subversion/wheezy : updated

PenguinServer:

2014-12-20      chris
        *       libsvn1/wheezy ntpdate/wheezy python-subversion/wheezy subversion/wheezy : updated

ParrotServer:

2014-12-20      chris
        *       libsvn1/wheezy subversion/wheezy : updated

[chris]

​MariaDB 5.5.41 update on PuffinServer:

2014-12-22      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

[chris]

Debian ​cpio security update, Puffin Server:

2014-12-23      chris
        *       cpio/wheezy : updated

Penguin Server:

2014-12-23      chris
        *       cpio/wheezy : updated

ParrotServer:

2014-12-23      chris
        *       cpio/wheezy : updated

[chris]

Debian ​unzip security update applied yesterday to PuffinServer, PenguinServer and ParrotServer:

2014-12-28      chris
        *       unzip/wheezy : updated

Debian ​mime-support security update applied to PuffinServer, PenguinServer and ParrotServer:

2014-12-29      chris
        *       mime-support/wheezy : updated

[chris]

Debian ​php5 security update, PenguinServer:

2014-12-31      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

ParrotServer:

2014-12-31      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

[chris]

New Phusion Passenger and Nginx on PenguinServer, no announcement on the list to link to yet:

2015-01-03      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

Sites checked, all seems fine.

[chris]

Debian ​libevent security update, updated on PenguinServer:

2015-01-06      chris
        *       libevent-2.0-5/wheezy : updated

The Passenger / Nginx update on PenguinServer done on ticket:692#comment:133 now has an announcement, ​Phusion Passenger 4.0.57: better Ruby 2.2 support, Nginx 1.7.9 support.

[chris]

Two sets of Debian security updates were applied to the servers last night, ​file security update and ​curl security update, PuffinServer:

2015-01-08      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy libcurl4-openssl-dev/wheezy : updated

2015-01-08      chris
        *       file/wheezy libmagic1/wheezy python-magic/wheezy : updated

PenguinServer:

2015-01-08      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

2015-01-08      chris
        *       file/wheezy libmagic1/wheezy : updated

ParrotServer:

2015-01-08      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

2015-01-08      chris
        *       file/wheezy libmagic1/wheezy : updated

[chris]

Three separate updates were done over the weekend:

1. Debian ​binutils security update
2. Debian ​Wheezy 7.8 update
3. Debian ​openssl security update

The Changelogs for the three servers, PuffinServer:

2015-01-11      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

2015-01-10      chris
        *       apt/wheezy apt-transport-https/wheezy apt-utils/wheezy base-files/wheezy debian-archive-keyring/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy linux-libc-dev/wheezy tzdata/wheezy tzdata-java/wheezy : updated

2015-01-09      chris
        *       binutils/wheezy : updated

PenguinServer:

2015-01-11      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

2015-01-10      chris
        *       apt/wheezy apt-transport-https/wheezy apt-utils/wheezy base-files/wheezy debian-archive-keyring/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy linux-libc-dev/wheezy tzdata/wheezy : updated

2015-01-09      chris
        *       binutils/wheezy : updated

ParrotServer:

2015-01-11      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

2015-01-10      chris
        *       apache2-mpm-itk/wheezy apache2-utils/wheezy apache2.2-bin/wheezy apache2.2-common/wheezy apt/wheezy apt-transport-https/wheezy apt-utils/wheezy base-files/wheezy debian-archive-keyring/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy linux-libc-dev/wheezy tzdata/wheezy : updated

2015-01-09      chris
        *       binutils/wheezy : updated

I have also updated the sources.list files to use HTTPS updates were there are mirrors that support this.

This is the main /etc/apt/sources.list for PuffinServer:

## MAIN REPOSITORIES
deb https://mirrors.kernel.org/debian/ wheezy main contrib non-free
deb-src https://mirrors.kernel.org/debian/ wheezy main contrib non-free

## MAJOR BUG FIX UPDATES produced after the final release
deb https://mirrors.kernel.org/debian/ wheezy-updates main
deb-src https://mirrors.kernel.org/debian/ wheezy-updates main

## DEBIAN SECURITY UPDATES
deb http://security.debian.org/ wheezy/updates main contrib non-free
deb-src http://security.debian.org/ wheezy/updates main contrib non-free

## DEBIAN PROPOSED UPDATES
deb https://mirrors.kernel.org/debian/ wheezy-proposed-updates main

PenguinServer:

#
#  /etc/apt/sources.list
#


#
# wheezy
#
deb     https://mirrors.kernel.org/debian/     wheezy main contrib non-free
deb-src https://mirrors.kernel.org/debian/     wheezy main contrib non-free

# 
#  Security updates
# 
deb     http://security.debian.org/ wheezy/updates  main contrib non-free
deb-src http://security.debian.org/ wheezy/updates  main contrib non-free

And ParrotServer:

#
# wheezy
#
#deb     http://ftp.uk.debian.org/debian/     wheezy main contrib non-free
#deb-src http://ftp.uk.debian.org/debian/     wheezy main contrib non-free
deb     https://mirrors.kernel.org/debian/     wheezy main contrib non-free
deb-src https://mirrors.kernel.org/debian/     wheezy main contrib non-free

# 
#  Security updates
# 
deb     http://security.debian.org/ wheezy/updates  main contrib non-free
deb-src http://security.debian.org/ wheezy/updates  main contrib non-free

[chris]

Debian ​xdg-utils security update on PuffinServer:

2015-01-19      chris
        *       xdg-utils/wheezy : updated

And, from last week, Debian ​linux security update on PuffinServer, PenguinServer and ParrotServer:

2015-01-15      chris
        *       linux-libc-dev/wheezy : updated

Also from last week, Debian ​php5 security update on PenguinServer:

2015-01-12      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

And ParrotServer:

2015-01-12      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

Sorry not to have reported all these all at the time they were done -- when security updates are done out of office hours I tend to prioritise doing the update over reporting.

[chris]

PenguinServer updates:

2015-01-22      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

No email announcement about this update yet.

[chris]

Updates done over the weekend, Debian ​mysql-5.5 security update on PenguinServer:

2015-01-23      chris
        *       libmysqlclient-dev/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

And ParrotServer:

2015-01-23      chris
        *       libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

Debian ​jasper security update on PenguinServer:

2015-01-25      chris
        *       libjasper-dev/wheezy libjasper1/wheezy : updated

PuffinServer:

2015-01-25      chris
        *       libjasper-dev/wheezy libjasper1/wheezy : updated

And ParrorServer?:

2015-01-25      chris
        *       libjasper1/wheezy : updated

[chris]

Updates applied yesterday and late last night, Debian ​xen security update on PuffinServer:

2015-01-27      chris
        *       libxenstore3.0/wheezy : updated

Debian ​eglibc security update on PuffinServer:

2015-01-27      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dbg/wheezy libc6-dev/wheezy locales/wheezy locales-all/wheezy multiarch-support/wheezy : updated

PenguinServer:

2015-01-27      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

ParrotServer:

2015-01-27      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

[chris]

Debian ​openjdk-7 security update on PuffinServer last night:

2015-01-30      chris
        *       icedtea-7-jre-jamvm/wheezy openjdk-7-jre-headless/wheezy : updated

[chris]

Debian ​openjdk-6 security update on PuffinServer:

2015-01-30      chris
        *       icedtea-6-jre-cacao/wheezy icedtea-6-jre-jamvm/wheezy openjdk-6-jre-headless/wheezy openjdk-6-jre-lib/wheezy : updated

[chris]

Debian ​unzip security update on PuffinServer, PenguinServer and ParrotServer:

2015-02-03      chris
        *       unzip/wheezy : updated

[chris]

Debian ​krb5 security update, PuffinServer:

2015-02-03      chris
        *       krb5-multidev/wheezy libgssapi-krb5-2/wheezy libgssrpc4/wheezy libk5crypto3/wheezy libkadm5clnt-mit8/wheezy libkadm5srv-mit8/wheezy libkdb5-6/wheezy libkrb5-3/wheezy libkrb5-dev/wheezy libkrb5support0/wheezy : updated

PenguinServer:

2015-02-03      chris
        *       libgssapi-krb5-2/wheezy libk5crypto3/wheezy libkrb5-3/wheezy libkrb5support0/wheezy : updated

ParrotServer:

2015-02-03      chris
        *       krb5-locales/wheezy libgssapi-krb5-2/wheezy libk5crypto3/wheezy libkrb5-3/wheezy libkrb5support0/wheezy : updated

[chris]

Debian ​ntp security update on PuffinServer and PenguinServer:

2015-02-05      chris
        *       ntpdate/wheezy : updated

[chris]

Debian ​postgresql-9.1 security update on PuffinServer:

2015-02-06      chris
        *       libpq5/wheezy : updated

[chris]

Debian ​libxml2 security update on PuffinServer and PenguinServer:

2015-02-06      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy : updated

ParrotServer:

2015-02-06      chris
        *       libxml2/wheezy : updated

[chris]

Debian ​ntp security update on PuffinServer and PenguinServer from some days ago:

2015-02-07      chris
        *       ntpdate/wheezy : updated

The day before yesterday a Debian ​ruby1.9.1 security update was applied to PenguinServer:

2015-02-09      chris
        *       libruby1.9.1/wheezy libruby1.9.1-dbg/wheezy libtcltk-ruby1.9.1/wheezy ri1.9.1/wheezy ruby1.9.1/wheezy ruby1.9.1-dev/wheezy ruby1.9.1-examples/wheezy ruby1.9.1-full/wheezy ruby1.9.3/wheezy : updated

A new Nginx and Passenger was deployed on PenguinServer last night (emails about updates tend to come days after the updates, see ​the list archive):

2015-02-10      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

Debian ​unrtf security update on PuffinServer, also applied last night:

2015-02-10      chris
        *       unrtf/wheezy : updated

[chris]

Debian ​ruby1.8 security update on PuffinServer:

2015-02-10      chris
        *       libruby1.8/wheezy ruby1.8/wheezy : updated

and PenguinServer:

2015-02-10      chris
        *       libruby1.8/wheezy ruby1.8/wheezy ruby1.8-dev/wheezy : updated

[chris]

Debian ​dbus security update applied last night on PuffinServer:

2015-02-11      chris
        *       dbus/wheezy dbus-x11/wheezy libdbus-1-3/wheezy : updated

PenguinServer:

2015-02-11      chris
        *       dbus/wheezy libdbus-1-3/wheezy : updated

ParrotServer:

2015-02-11      chris
        *       dbus/wheezy libdbus-1-3/wheezy : updated

[chris]

Debian ​bind9 security update on PuffinServer:

2015-02-18      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

ParrotServer:

2015-02-18      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

[chris]

3 Debian security updates done over the weekend, ​e2fsprogs security update, ​sudo security update and ​eglibc security update, PuffinServer:

2015-02-23      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dbg/wheezy libc6-dev/wheezy locales/wheezy locales-all/wheezy multiarch-support/wheezy : updated

2015-02-22      chris
        *       sudo/wheezy : updated

2015-02-22      chris
        *       comerr-dev/wheezy e2fslibs/wheezy e2fsprogs/wheezy libcomerr2/wheezy libss2/wheezy xdg-utils/wheezy : updated

PenguinServer:

2015-02-23      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

2015-02-22      chris
        *       sudo/wheezy : updated

2015-02-22      chris
        *       e2fslibs/wheezy e2fsprogs/wheezy libcomerr2/wheezy libss2/wheezy : updated

ParrotServer:

2015-02-23      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

2015-02-22      chris
        *       sudo/wheezy : updated

2015-02-22      chris
        *       e2fslibs/wheezy e2fsprogs/wheezy libcomerr2/wheezy libss2/wheezy : updated

[chris]

Debian ​samba security update on PuffinServer last night:

2015-02-23      chris
        *       libsmbclient/wheezy libwbclient0/wheezy samba-common/wheezy samba-common-bin/wheezy smbclient/wheezy : updated

Also later in the night a Debian ​linux security update was installed on PuffinServer, PenguinServer and ParrotServer:

2015-02-23      chris
        *       linux-libc-dev/wheezy : updated

[chris]

Sorry, I forgot to record this last month, Debian ​cups security update, PuffinServer:

2015-02-25      chris
        *       cups-bsd/wheezy cups-client/wheezy cups-common/wheezy libcups2/wheezy libcupsimage2/wheezy : updated

PenguinServer:

2015-02-25      chris
        *       libcups2/wheezy libcupsimage2/wheezy : updated

ParrotServer:

2015-02-25      chris
        *       libcups2/wheezy libcupsimage2/wheezy : updated

[chris]

New Nginx and Passenger on Penguin server:

2015-03-07      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Debian ​xen security update on PuffinServer:

2015-03-11      chris
        *       libxenstore3.0/wheezy : updated

[chris]

Debian ​libssh2 security update on PuffinServer:

2015-03-11      chris
        *       libssh2-1/wheezy libssh2-1-dev/wheezy : updated

PenguinServer:

2015-03-11      chris
        *       libssh2-1/wheezy : updated

ParrotServer:

2015-03-11      chris
        *       libssh2-1/wheezy : updated

[chris]

​Passenger 5.0.4, more on ​their blog, on PenguinServer:

2015-03-12      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Oops ticket:692#comment:159 added 15 mins to this ticket by mistake -- I'll not add time for the next update to compensate.

[chris]

Update from last night, ​gnupg security update and ​libgcrypt11 security update, and today, ​nss security update, PuffinServer:

2015-03-13      chris
        *       libnss3/wheezy libnss3-1d/wheezy : updated

2015-03-12      chris
        *       gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy libgcrypt11/wheezy libgcrypt11-dev/wheezy : updated

PenguinServer:

2015-03-12      chris
        *       gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy libgcrypt11/wheezy : updated

ParrotServer:

2015-03-12      chris
        *       gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy libgcrypt11/wheezy : updated

[chris]

A few updates were applied over the weekend, ​icu security update, ​freetype security update and ​gnutls26 security update.

PuffinServer:

2015-03-16      chris
        *       libgnutls-dev/wheezy libgnutls-openssl27/wheezy libgnutls26/wheezy libgnutlsxx27/wheezy : updated

2015-03-15      chris
        *       libfreetype6/wheezy libfreetype6-dev/wheezy : updated

PenguinServer:

2015-03-16      chris
        *       libgnutls26/wheezy : updated

2015-03-15      chris
        *       libfreetype6/wheezy libfreetype6-dev/wheezy : updated

ParrotServer:

2015-03-16      chris
        *       libgnutls26/wheezy : updated

2015-03-15      chris
        *       libfreetype6/wheezy : updated

2015-03-15      chris
        *       libicu48/wheezy : updated

Since posting updates to this ticket generally takes as long as doing the updates I think I'm going to start applying the minimum unit of time to the comments here rather than to the updates to the server, so this is being recorded as 15 min rather 45 mins.

[chris]

Debian tcpdump update (security alert email not archived yet) on PuffinServer and ParrotServer:

2015-03-17      chris
        *       tcpdump/wheezy : updated

[chris]

Replying to chris:

Debian tcpdump update (security alert email not archived yet)

It is now in the archive, Debian ​tcpdump security update.

[chris]

Yesterday the Debian ​libxfont security update was applied on PuffinServer:

2015-03-17      chris
        *       libxfont1/wheezy : updated

Today Debian the ​php5 security update has been applied to PenguinServer:

2015-03-18      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

2015-03-17      chris
        *       libxfont1/wheezy : updated

And ParrotServer:

2015-03-18      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

[chris]

Debian ​file security update on PuffinServer:

2015-03-18      chris
        *       file/wheezy libmagic1/wheezy python-magic/wheezy : updated

PenguinServer:

2015-03-18      chris
        *       file/wheezy libmagic1/wheezy : updated

ParrotServer:

2015-03-18      chris
        *       file/wheezy libmagic1/wheezy : updated

[chris]

Debian ​openssl security update on PuffinServer:

2015-03-19      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

PenguinServer:

2015-03-19      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

ParrotServer:

2015-03-19      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

And I have restarted the web servers.

[chris]

Debian ​php5 security update on PenguinServer:

2015-03-20      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

And ParrotServer:

2015-03-20      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

[chris]

New Nginx and Passenger on PenguinServer:

2015-03-24      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Debian ​openssl regression update applied last night to PuffinServer:

2015-03-24      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

PenguinServer:

2015-03-24      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

And ParrotServer:

2015-03-24      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

[chris]

Debian ​php5 regression update on PenguinServer:

2015-03-28      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

ParrotServer:

2015-03-28      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

[chris]

Debian ​openldap security update on PuffinServer:

2015-03-31      chris
        *       ldap-utils/wheezy libldap-2.4-2/wheezy libldap2-dev/wheezy : updated

PenguinServer:

2015-03-31      chris
        *       libldap-2.4-2/wheezy : updated

ParrotServer:

2015-03-31      chris
        *       libldap-2.4-2/wheezy : updated

​Phusion Passenger 5.0.6 update on PenguinServer:

2015-03-31      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Debian ​libgd2 security update applied yesterday to PuffinServer, PenguinServer and ParrotServer:

2015-04-06      chris
        *       libgd2-xpm/wheezy : updated

[chris]

Debian ​libxml2 regression update on PuffinServer:

2015-04-07      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy : updated

PenguinServer:

2015-04-07      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy : updated

ParrotServer:

2015-04-07      chris
        *       libxml2/wheezy : updated

[chris]

Debian ​dpkg security update on PuffinServer:

2015-04-09      chris
        *       dpkg/wheezy dpkg-dev/wheezy libdpkg-perl/wheezy : updated

PenguinServer:

2015-04-09      chris
        *       dpkg/wheezy dpkg-dev/wheezy libdpkg-perl/wheezy : updated

ParrotServer:

2015-04-09      chris
        *       dpkg/wheezy : updated

[chris]

Several Debian updates done over the weekend, ​libtasn1-3 security update, ​chrony security update, ​ntp security update and ​libx11 security update on PuffinServer:

2015-04-12      chris
        *       libx11-6/wheezy libx11-data/wheezy libx11-dev/wheezy libx11-xcb1/wheezy : updated

2015-04-12      chris
        *       chrony/wheezy ntpdate/wheezy : updated

2015-04-11      chris
        *       libtasn1-3/wheezy libtasn1-3-dev/wheezy : updated

PenguinServer:

2015-04-12      chris
        *       libx11-6/wheezy libx11-data/wheezy libx11-dev/wheezy libx11-xcb1/wheezy : updated

2015-04-12      chris
        *       chrony/wheezy ntpdate/wheezy : updated

2015-04-11      chris
        *       libtasn1-3/wheezy : updated

and ParrotServer:

2015-04-12      chris
        *       libx11-6/wheezy libx11-data/wheezy : updated

2015-04-12      chris
        *       chrony/wheezy : updated

2015-04-11      chris
        *       libtasn1-3/wheezy : updated

[chris]

Debian libxrender update (no email announcement yet) on PuffinServer:

2015-04-13      chris
        *       libxrender-dev/wheezy libxrender1/wheezy : updated

PenguinServer:

2015-04-13      chris
        *       libxrender-dev/wheezy libxrender1/wheezy : updated

ParrotServer:

2015-04-13      chris
        *       libxrender1/wheezy : updated

The load on Puffin hit over 100 while this update was being run, mostly caused by the FTP server, which we don't need or use, this is from top:

  PID USER      PR  NI  VIRT  RES  SHR S  %CPU %MEM    TIME+  COMMAND

 4653 tn.web    20   0 1249m  77m  52m S    18  0.9   0:02.33 php-fpm
 6378 root      20   0 28904  448   52 R    11  0.0   0:00.33 pure-ftpd
 6382 root      20   0 28904  444   52 R     9  0.0   0:00.28 pure-ftpd
 6387 root      20   0 28904  448   52 R     4  0.0   0:00.13 pure-ftpd

I'll open another ticket about how we can disable this unwanted service.

[chris]

There was an additional X11 update which didn't have a security email, on PuffinServer:

2015-04-14      chris
        *       libxrender-dev/wheezy libxrender1/wheezy : updated

PenguinServer:

2015-04-14      chris
        *       libxrender-dev/wheezy libxrender1/wheezy : updated

And ParrotServer:

2015-04-14      chris
        *       libxrender1/wheezy : updated

And today a ​mysql-5.5 security update on PenguinServer:

2015-04-19      chris
        *       libmysqlclient-dev/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

And ParrotServer:

2015-04-19      chris
        *       libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

Regarding the FTP issue on the comment above, this was resolved on ticket:845.

[chris]

Debian ​subversion security update from last night plus a, as yet unannounced, curl security update on PuffinServer:

2015-04-22      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy libcurl4-openssl-dev/wheezy : updated

2015-04-21      chris
        *       libsvn1/wheezy subversion/wheezy : updated

PenguinServer:

2015-04-22      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

2015-04-21      chris
        *       libsvn1/wheezy python-subversion/wheezy subversion/wheezy : updated

ParrotServer:

2015-04-22      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

2015-04-21      chris
        *       libsvn1/wheezy subversion/wheezy : updated

[chris]

Several updates last week and over the weekend, Debian ​curl security update, ​openjdk-6 security update and ​openjdk-7 securityupdate, and a ​linux security update on PuffinServer:

2015-04-26      chris
        *       linux-libc-dev/wheezy : updated

2015-04-26      chris
        *       liblcms1/wheezy-proposed-updates liblcms1-dev/wheezy-proposed-updates libnetcf1/wheezy-proposed-updates tzdata/wheezy-proposed-updates tzdata-java/wheezy-proposed-updates : updated

2015-04-25      chris
        *       linux-libc-dev/wheezy-proposed-updates : updated

2015-04-25      chris
        *       icedtea-6-jre-cacao/wheezy icedtea-6-jre-jamvm/wheezy icedtea-7-jre-jamvm/wheezy openjdk-6-jre-headless/wheezy openjdk-6-jre-lib/wheezy openjdk-7-jre-headless/wheezy : updated

2015-04-22      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy libcurl4-openssl-dev/wheezy : updated

PenguinServer:

2015-04-26      chris
        *       linux-libc-dev/wheezy : updated

And ParrotServer:

2015-04-26      chris
        *       linux-libc-dev/wheezy : updated

Note that PuffinServer has had updates from wheezy-proposed-updates, this is the first time I have noticed that BOA has enabled this repo, I'm not sure we want the proposed updates so I have commented this line out from /etc/apt/sources.list on the server:

## DEBIAN PROPOSED UPDATES
#deb http://ftp.debian.org/debian/ wheezy-proposed-updates main

There was also this issues on ParrotServer and PuffinServer due to the release of Jessie, see ticket:847:

W: Conflicting distribution: http://mirror.stshosting.co.uk stable Release (expected stable but got jessie)
...
E: The value 'stable' is invalid for APT::Default-Release as such a release is not available in the sources

So on both servers /etc/apt/apt.conf was edited to change "stable" to "wheezy" and on PuffinServer /etc/apt/sources.list.d/dotdeb.list was also edited:

//
//http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=638024
//

APT::Default-Release "wheezy" ;

## Dotdeb APT Repository
#deb http://packages.dotdeb.org wheezy all
#deb-src http://packages.dotdeb.org wheezy all
deb http://mirror.stshosting.co.uk/dotdeb/ wheezy all
deb-src http://mirror.stshosting.co.uk/dotdeb/ wheezy all

Also there was a conflict on PuffinServer with the Dotdeb Debian MySQL packages and the MariaDB ones:

About to upgrade libmysqlclient18/wheezy mysql-common/wheezy
The following NEW packages will be installed:
  mysql-common-5.6{a} 
The following packages will be upgraded:
  libmysqlclient18 mysql-common 
2 packages upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 1269 kB of archives. After unpacking 4166 kB will be used.
The following packages have unmet dependencies:
 libmariadbclient18 : Depends: libmysqlclient18 (= 5.5.42+maria-1~wheezy) but 5.6.23-1~dotdeb.3 is to be installed.
The following actions will resolve these dependencies:

     Remove the following packages:
1)     libmariadbclient-dev        
2)     libmariadbclient18          
3)     libmariadbd-dev             
4)     mariadb-client-5.5          
5)     mariadb-client-core-5.5     
6)     mariadb-server-5.5          
7)     mariadb-server-core-5.5     

Accept this solution? [Y/n/q/?] q

I commented out the Dotdeb repo to solve this, I don't think we use any packages from it since BOA stopped using their PHP packages, but there is the same issues with the Debian packages:

About to upgrade libmysqlclient18/wheezy mysql-common/wheezy
The following packages will be upgraded: 
  libmysqlclient18 mysql-common 
2 packages upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 750 kB of archives. After unpacking 3588 kB will be used.
The following packages have unmet dependencies:
 libmariadbclient18 : Depends: libmysqlclient18 (= 5.5.42+maria-1~wheezy) but 5.5.43-0+deb7u1 is to be installed.
The following actions will resolve these dependencies:

     Remove the following packages:
1)     libmariadbclient-dev        
2)     libmariadbclient18          
3)     libmariadbd-dev             
4)     mariadb-client-5.5          
5)     mariadb-client-core-5.5     
6)     mariadb-server-5.5          
7)     mariadb-server-core-5.5     



Accept this solution? [Y/n/q/?] q

So I think this will have to wait till a new version of MariaDB comes out.

[chris]

The MariaDB issue has been resolved on ticket:844#comment:9.

The /etc/apt/apt.conf file on all 3 server was edited the day before yesterday to change stable to wheezy and this was also done for /etc/munin/plugins/apt_all.

On PenguinServer Nginx was also updated the day before yesterday as ​Phusion Passenger 5.0.7 released:

2015-04-29      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Debian ​ruby1.8 security update on PenguinServer:

2015-05-02      chris
        *       libruby1.8/wheezy libruby1.9.1/wheezy libruby1.9.1-dbg/wheezy libtcltk-ruby1.9.1/wheezy ri1.9.1/wheezy ruby1.8/wheezy ruby1.8-dev/wheezy ruby1.9.1/wheezy ruby1.9.1-dev/wheezy ruby1.9.1-examples/wheezy ruby1.9.1-full/wheezy ruby1.9.3/wheezy : updated

Nginx was restarted and the wiki:TransitionResearchWagn site was checked and everything seems to be working OK.

[chris]

Ruby was also updated on PuffinServer:

2015-05-02      chris
        *       libruby1.8/wheezy ruby1.8/wheezy : updated

[chris]

New version of Nginx and Phusion Passenger, 5.0.8 on PenguinServer, no announcement yet on ​the list:

2015-05-20      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Debian ​xen security update, ​fuse security update and ​ntfs-3g security update on PuffinServer:

2015-05-22      chris
        *       ntfs-3g/wheezy : updated

2015-05-21      chris
        *       fuse/wheezy libfuse2/wheezy : updated

2015-05-19      chris
        *       libxenstore3.0/wheezy : updated

[chris]

Debian ​ntfs-3g security update on PuffinServer:

2015-05-26      chris
        *       ntfs-3g/wheezy : updated

When this was run errors were generated:

a-up
About to upgrade ntfs-3g/wheezy
The following packages will be upgraded: 
  ntfs-3g 
1 packages upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 630 kB of archives. After unpacking 0 B will be used.
Do you want to continue? [Y/n/?] y
Get: 1 http://security.debian.org/ wheezy/updates/main ntfs-3g amd64 1:2012.1.15AR.5-2.1+deb7u2 [630 kB]
Fetched 630 kB in 0s (2513 kB/s)
Reading changelogs... Done
Preconfiguring packages ...
(Reading database ... 64598 files and directories currently installed.)
Preparing to replace ntfs-3g 1:2012.1.15AR.5-2.1+deb7u1 (using .../ntfs-3g_1%3a2012.1.15AR.5-2.1+deb7u2_amd64.deb) ...
Unpacking replacement ntfs-3g ...
Processing triggers for initramfs-tools ...
update-initramfs: Generating /boot/initrd.img-2.6.32-5-xen-amd64
WARNING: could not open /tmp/mkinitramfs_kBhe1o/lib/modules/2.6.32-5-xen-amd64/modules.builtin: No such file or directory
Processing triggers for man-db ...
Setting up ntfs-3g (1:2012.1.15AR.5-2.1+deb7u2) ...
update-initramfs: deferring update (trigger activated)
Processing triggers for initramfs-tools ...
update-initramfs: Generating /boot/initrd.img-2.6.32-5-xen-amd64
WARNING: could not open /tmp/mkinitramfs_P9iTIJ/lib/modules/2.6.32-5-xen-amd64/modules.builtin: No such file or directory
                                         
Current status: 0 updates [-1].

I'm not sure what this means and I wonder if a BOA cron job is deleting things in /tmp or something?

[chris]

We don't need to mount NTFS filesystems, so:

aptitude remove ntfs-3g
The following packages will be REMOVED:  
  ntfs-3g 
0 packages upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
Need to get 0 B of archives. After unpacking 1485 kB will be freed.
(Reading database ... 64597 files and directories currently installed.)
Removing ntfs-3g ...
Processing triggers for initramfs-tools ...
update-initramfs: Generating /boot/initrd.img-2.6.32-5-xen-amd64
WARNING: could not open /tmp/mkinitramfs_7OoiCF/lib/modules/2.6.32-5-xen-amd64/modules.builtin: No such file or directory
Processing triggers for man-db ...

I still don't understanding why the warning is being generated, there is no shortage of disk space:

df -h
Filesystem     Type      Size  Used Avail Use% Mounted on
rootfs         rootfs     79G   34G   42G  45% /
udev           devtmpfs   10M     0   10M   0% /dev
tmpfs          tmpfs     818M  140K  818M   1% /run
/dev/xvda2     ext4       79G   34G   42G  45% /
tmpfs          tmpfs     5.0M     0  5.0M   0% /run/lock
tmpfs          tmpfs     1.6G  5.6M  1.6G   1% /run/shm

The /tmp directory is world writable and there are load of files in it:

ls -lah / | grep tmp
drwxrwxrwt  13 root root  40K May 27 11:10 tmp/
cd /tmp/; ls | wc -l
524

[chris]

​Phusion Passenger 5.0.9 update applied last night to PenguinServer:

2015-06-03      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Debian ​php5 security update on PenguinServer:

2015-06-07      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

ParrotServer:

2015-06-07      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

[chris]

Debian ​cups security update on PuffinServer:

2015-06-09      chris
        *       cups-bsd/wheezy cups-client/wheezy cups-common/wheezy libcups2/wheezy libcupsimage2/wheezy : updated

PenguinServer:

2015-06-09      chris
        *       libcups2/wheezy libcupsimage2/wheezy : updated

And ParrotServer:

2015-06-09      chris
        *       libcups2/wheezy libcupsimage2/wheezy : updated

[chris]

New version of Passanger, no announcement for it yet, see: ​https://blog.phusion.nl/tag/passenger-releases/ on PenguinServer:

2015-06-11      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

New version of MySQL mariadb 5.5.44 on PuffinServer, also no announcement for this yet, see ​http://lists.askmonty.org/pipermail/announce/2015-June/thread.html

2015-06-11      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

[chris]

Debian ​p7zip security update, ​sqlite3 security update, ​openssl security update and ​xen security update on PuffinServer:

2015-06-15      chris
        *       p7zip-full/wheezy : updated

2015-06-14      chris
        *       lemon/wheezy libsqlite3-0/wheezy : updated

2015-06-14      chris
        *       lemon/wheezy libsqlite3-0/wheezy : updated

2015-06-13      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy libxenstore3.0/wheezy openssl/wheezy : updated

PenguinServer:

2015-06-14      chris
        *       libsqlite3-0/wheezy sqlite3/wheezy : updated

2015-06-13      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

And ParrotServer:

2015-06-14      chris
        *       libsqlite3-0/wheezy : updated

2015-06-13      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

[chris]

Debian ​linux security update and time zone update (not sure why a proposed update got pulled in...):

2015-06-18      chris
        *       linux-libc-dev/wheezy : updated

2015-06-17      chris
        *       tzdata/wheezy-proposed-updates tzdata-java/wheezy-proposed-updates : updated

PenguinServer:

2015-06-18      chris
        *       linux-libc-dev/wheezy : updated

ParrotServer:

2015-06-18      chris
        *       linux-libc-dev/wheezy : updated

[chris]

New version of Nginx / Passenger, no announcement email yet, PenguinServer:

2015-06-23      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Debian ​unattended-upgrades security update on PuffinServer:

2015-06-29      chris
        *       unattended-upgrades/wheezy : updated

[chris]

New Nginx and Passanger on PenguinServer, no release announcement yet:

2015-07-03      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Debian ​libwmf security update on PuffinServer, PenguinServer

2015-07-07      chris
        *       libwmf-dev/wheezy libwmf0.2-7/wheezy : updated

And ParrotServer:

2015-07-07      chris
        *       libwmf0.2-7/wheezy : updated

[chris]

Debian ​bind9 security update applied last night to PuffinServer:

2015-07-07      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

And ParrotServer:

2015-07-07      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

[chris]

​Passenger 5.0.14: OpenSSL CVE-2015-1793 update on PenguinServer:

2015-07-18      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

Debian ​mysql-5.5 security update on PenguinServer and ParrotServer:

2015-07-18      chris
        *       libmysqlclient-dev/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

[chris]

Debian ​openjdk-7 security update on PuffinServer and Debian ​expat security update on all 3 servers. PuffinServer:

2015-07-26      chris
        *       libexpat1/wheezy libexpat1-dev/wheezy : updated

2015-07-25      chris
        *       icedtea-7-jre-jamvm/wheezy openjdk-7-jre-headless/wheezy : updated

PenguinServer:

2015-07-26      chris
        *       libexpat1/wheezy libexpat1-dev/wheezy : updated

ParrotServer:

2015-07-26      chris
        *       libexpat1/wheezy : updated

[chris]

Debian ​bind9 security update on PuffinServer:

2015-07-28      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

ParrotServer:

2015-07-28      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

[chris]

Debian ​ghostscript security update on PuffinServer:

2015-08-02      chris
        *       ghostscript/wheezy libgs9/wheezy libgs9-common/wheezy : updated

Debian ​ruby-rack security update, ​Passenger 5.0.15 update and ​ghostscript security update on PenguinServer:

2015-08-02      chris
        *       ghostscript/wheezy libgs9/wheezy libgs9-common/wheezy : updated

2015-08-01      chris
        *       ruby-rack/wheezy : updated

2015-07-29      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

Debian ​icu security update, ​apache2 security update and ​ghostscript security update on ParrotServer:

2015-08-02      chris
        *       ghostscript/wheezy libgs9/wheezy libgs9-common/wheezy : updated

2015-08-02      chris
        *       apache2-mpm-itk/wheezy apache2-utils/wheezy apache2.2-bin/wheezy apache2.2-common/wheezy : updated

2015-08-01      chris
        *       libicu48/wheezy : updated

[chris]

Three weeks worth of Debian updates on PuffinServer, including updates for ​MariaDB 5.5.45, ​openjdk-6 and others, see ​the Debian security list archive for details:

2015-08-20      root
        *       icedtea-6-jre-cacao/wheezy icedtea-6-jre-jamvm/wheezy openjdk-6-jre-headless/wheezy openjdk-6-jre-lib/wheezy : updated

2015-08-18      chris
        *       gir1.2-gdkpixbuf-2.0/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libgdk-pixbuf2.0-dev/wheezy libnss3/wheezy libnss3-1d/wheezy : updated

2015-08-12      chris
        *       tzdata/wheezy-proposed-updates tzdata-java/wheezy-proposed-updates : updated

2015-08-10      chris
        *       libsvn1/wheezy subversion/wheezy : updated

2015-08-07      chris
        *       linux-libc-dev/wheezy : updated

2015-08-06      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

PenguinServer:

2015-08-18      chris
        *       gir1.2-gdkpixbuf-2.0/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libgdk-pixbuf2.0-dev/wheezy : updated

2015-08-10      chris
        *       libsvn1/wheezy python-subversion/wheezy subversion/wheezy : updated

2015-08-07      chris
        *       linux-libc-dev/wheezy : updated

And ParrotServer:

2015-08-18      chris
        *       apache2-mpm-itk/wheezy apache2-utils/wheezy apache2.2-bin/wheezy apache2.2-common/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy : updated

2015-08-10      chris
        *       libsvn1/wheezy subversion/wheezy : updated

2015-08-07      chris
        *       linux-libc-dev/wheezy : updated

[chris]

PenguinServer upgrade ​Passenger 5.0.16: fixes Node.js/io.js regression and other bugs:

2015-08-25      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Debian ​php5 security update on PenguinServer:

2015-08-27      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

And ParrotServer:

2015-08-27      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

[chris]

Debian ​bind9 security update on PuffinServer:

2015-09-03      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

ParrotServer:

202015-09-03      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

[chris]

Debian ​screen security update on PuffinServer, PenguinServer and ParrotServer:

2015-09-04      chris
        *       screen/wheezy : updated

[chris]

Debian updates on PuffinServer:

2015-09-05      chris
        *       base-files/wheezy libpq5/wheezy ssl-cert/wheezy sudo/wheezy unzip/wheezy : updated

PenguinServer:

2015-09-05      chris
        *       base-files/wheezy libfcgi0ldbl/wheezy liblcms1/wheezy liblcms1-dev/wheezy ssl-cert/wheezy sudo/wheezy tzdata/wheezy unzip/wheezy : updated

ParrotServer:

2015-09-05      chris
        *       base-files/wheezy liblcms1/wheezy ssl-cert/wheezy sudo/wheezy tzdata/wheezy unzip/wheezy : updated

[chris]

The large number of updates on ticket:692#comment:209 was the upgrade to ​Debian 7.9.

[chris]

Debian ​php5 security update on PenguinServer:

2015-09-13      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

And ParrotServer:

2015-09-13      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

And a couple of ​Nginx updates on PenguinServer from a few days ago:

2015-09-10      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

2015-09-08      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

And a Debian ​openldap security update on PuffinServer:

2015-09-12      chris
        *       ldap-utils/wheezy libldap-2.4-2/wheezy libldap2-dev/wheezy : updated

And PenguinServer:

2015-09-12      chris
        *       libldap-2.4-2/wheezy : updated

[chris]

Debian ​linux security update applied last night to PuffinServer:

2015-09-21      chris
        *       linux-libc-dev/wheezy : updated

PenguinServer:

2015-09-21      chris
        *       linux-libc-dev/wheezy : updated

ParrotServer:

2015-09-21      chris
        *       linux-libc-dev/wheezy : updated

[chris]

New Phusion Passenger and Ngnix (no announcement email on the list about this yet) installed on PenguinServer last night:

2015-09-24      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

​Passenger 5.0.20 update on PenguinServer:

2015-09-26      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Update on PuffinServer, ​MariaDB 5.5.46:

2015-10-12      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

Last week a Debian ​freetype security update was applied to all three servers:

2015-10-06      chris
        *       libfreetype6/wheezy libfreetype6-dev/wheezy : updated

[chris]

Debian ​linux security update on PuffinServer, PenguinServer and ParrotServer:

2015-10-13      chris
        *       linux-libc-dev/wheezy : updated

[chris]

​Passenger 5.0.21 update on PenguinServer:

2015-10-23      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Debian ​gdk-pixbuf security update and ​openjdk-7 security update on PuffinServer:

2015-10-27      chris
        *       icedtea-7-jre-jamvm/wheezy openjdk-7-jre-headless/wheezy : updated

2015-10-25      chris
        *       gir1.2-gdkpixbuf-2.0/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libgdk-pixbuf2.0-dev/wheezy : updated

Debian ​mysql-5.5 security update and ​php5 security update on PenguinServer updates:

2015-10-27      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

2015-10-25      chris
        *       gir1.2-gdkpixbuf-2.0/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libgdk-pixbuf2.0-dev/wheezy : updated

2015-10-24      chris
        *       libmysqlclient-dev/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

ParrotServer:

2015-10-27      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

2015-10-25      chris
        *       libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy : updated

2015-10-24      chris
        *       libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

[chris]

PuffinServer ​unzip security update and ​ntp security update:

2015-11-02      chris
        *       ntpdate/wheezy : updated

2015-10-31      chris
        *       unzip/wheezy : updated

PenguinServer:

2015-11-02      chris
        *       ntpdate/wheezy : updated

2015-10-31      chris
        *       unzip/wheezy : updated

ParrotServer, ​phpmyadmin security update:

2015-10-31      chris
        *       unzip/wheezy : updated

2015-10-28      chris
        *       phpmyadmin/wheezy : updated

[chris]

Debian ​https://lists.debian.org/debian-security-announce/2015/msg00291.htmlxen security update and ​krb5 security update updated on PuffinServer:

2015-11-06      chris
        *       krb5-multidev/wheezy libgssapi-krb5-2/wheezy libgssrpc4/wheezy libk5crypto3/wheezy libkadm5clnt-mit8/wheezy libkadm5srv-mit8/wheezy libkdb5-6/wheezy libkrb5-3/wheezy libkrb5-dev/wheezy libkrb5support0/wheezy : updated

2015-11-02      chris
        *       libxenstore3.0/wheezy : updated

PenguinServer:

2015-11-06      chris
        *       libgssapi-krb5-2/wheezy libk5crypto3/wheezy libkrb5-3/wheezy libkrb5support0/wheezy : updated

And ParrotServer:

2015-11-06      chris
        *       krb5-locales/wheezy libgssapi-krb5-2/wheezy libk5crypto3/wheezy libkrb5-3/wheezy libkrb5support0/wheezy : updated

[chris]

Debian ​unzip regression update, ​linux security update and ​krb5 security update on PuffinServer:

2015-11-12      chris
        *       krb5-multidev/wheezy libgssapi-krb5-2/wheezy libgssrpc4/wheezy libk5crypto3/wheezy libkadm5clnt-mit8/wheezy libkadm5srv-mit8/wheezy libkdb5-6/wheezy libkrb5-3/wheezy libkrb5-dev/wheezy libkrb5support0/wheezy : updated

2015-11-10      chris
        *       linux-libc-dev/wheezy : updated

2015-11-09      chris
        *       unzip/wheezy : updated

PenguinServer:

2015-11-12      chris
        *       libgssapi-krb5-2/wheezy libk5crypto3/wheezy libkrb5-3/wheezy libkrb5support0/wheezy : updated

2015-11-10      chris
        *       linux-libc-dev/wheezy : updated

2015-11-09      chris
        *       unzip/wheezy : updated

And ParrotServer:

2015-11-12      chris
        *       krb5-locales/wheezy libgssapi-krb5-2/wheezy libk5crypto3/wheezy libkrb5-3/wheezy libkrb5support0/wheezy : updated

2015-11-10      chris
        *       linux-libc-dev/wheezy : updated

2015-11-09      chris
        *       unzip/wheezy : updated

[chris]

Debian ​libpng security update applied last night to all 3 servers, PuffinServer:

2015-11-18      chris
        *       libpng12-0/wheezy libpng12-dev/wheezy : updated

PenguinServer:

2015-11-18      chris
        *       libpng12-0/wheezy libpng12-dev/wheezy : updated

And ParrotServer:

2015-11-18      chris
        *       libpng12-0/wheezy : updated

[chris]

Debian ​openjdk-7 security update on PuffinServer:

2015-11-23      chris
        *       icedtea-7-jre-jamvm/wheezy openjdk-7-jre-headless/wheezy : updated

[chris]

Debian ​nspr security update on PuffinServer:

2015-11-26      chris
        *       libnspr4/wheezy libnspr4-0d/wheezy : updated

[chris]

Debian ​nspr security update and ​dpkg security update on PuffinServer:

2015-11-26      chris
        *       dpkg/wheezy dpkg-dev/wheezy libdpkg-perl/wheezy : updated

2015-11-26      chris
        *       libnspr4/wheezy libnspr4-0d/wheezy : updated

PenguinServer:

2015-11-26      chris
        *       dpkg/wheezy dpkg-dev/wheezy libdpkg-perl/wheezy : updated

And ParrotServer:

2015-11-26      chris
        *       dpkg/wheezy : updated

[chris]

Debian ​gnutls26 security update and ​openssl security update on PuffinServer:

2015-12-04      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

2015-12-01      chris
        *       libgnutls-dev/wheezy libgnutls-openssl27/wheezy libgnutls26/wheezy libgnutlsxx27/wheezy : updated

PenguinServer:

2015-12-04      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

2015-12-01      chris
        *       libgnutls26/wheezy : updated

ParrotServer:

2015-12-04      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

2015-12-01      chris
        *       libgnutls26/wheezy : updated

[chris]

PenguinServer updates: ​Passenger 5.0.22 and 4.0.60 released; security advisory for CVE-2015-7519:

2015-12-07      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

​MariaDB 5.5.47 update on PuffinServer:

2015-12-10      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

[chris]

Debian ​bouncycastle security update, ​bind9 security update,​gdk-pixbuf security update on PuffinServer:

2015-12-17      chris
        *       gir1.2-gdkpixbuf-2.0/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libgdk-pixbuf2.0-dev/wheezy : updated

2015-12-15      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

2015-12-14      chris
        *       libbcmail-java/wheezy libbcmail-java-gcj/wheezy libbcprov-java/wheezy libbcprov-java-gcj/wheezy libbctsp-java/wheezy : updated

ParrotServer:

2015-12-17      chris
        *       libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy : updated

2015-12-15      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

And PenguinServer:

2015-12-17      chris
        *       gir1.2-gdkpixbuf-2.0/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libgdk-pixbuf2.0-dev/wheezy : updated

[chris]

Debian ​linux security update and ​Passenger 5.0.23 on PenguinServer:

2015-12-22      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

2015-12-17      chris
        *       linux-libc-dev/wheezy : updated

PuffinServer:

2015-12-17      chris
        *       linux-libc-dev/wheezy : updated

ParrotServer:

2015-12-17      chris
        *       linux-libc-dev/wheezy : updated

[chris]

Debian ​libxml2 security update update on PuffinServer:

2015-12-23      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy : updated

PenguinServer:

2015-12-23      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy : updated

And ParrotServer:

2015-12-23      chris
        *       libxml2/wheezy : updated

[chris]

I have no idea why BOA installed samba but since it was installed it has been updated due to this Debian ​samba security update:

2016-01-03      chris
        *       libsmbclient/wheezy libwbclient0/wheezy samba-common/wheezy samba-common-bin/wheezy smbclient/wheezy : updated

[chris]

Debian ​git security update on PuffinServer:

2016-01-05      chris
        *       git/wheezy git-core/wheezy git-man/wheezy linux-libc-dev/wheezy : updated

Debian git and ​linux security update on PenguinServer:

2016-01-05      chris
        *       git/wheezy git-core/wheezy git-man/wheezy : updated

2016-01-05      chris
        *       linux-libc-dev/wheezy : updated

ParrotServer:

2016-01-05      chris
        *       git/wheezy git-man/wheezy : updated

2016-01-05      chris
        *       linux-libc-dev/wheezy : updated

[chris]

Debian ​openssl security update on PuffinServer:

2016-01-08      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

PenguinServer:

2016-01-08      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

And ParrotServer:

2016-01-08      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

[chris]

Debian ​gnutls26 security update on puffinServer:

2016-01-09      chris
        *       libgnutls-dev/wheezy libgnutls-openssl27/wheezy libgnutls26/wheezy libgnutlsxx27/wheezy : updated

PenguinServer:

2016-01-09      chris
        *       libgnutls26/wheezy : updated

ParrotServer:

2016-01-09      chris
        *       libgnutls26/wheezy : updated

[chris]

Debian sudo security update (not yet archived, should be ​here when it is) on PuffinServer, PenguinServer and ParrotServer:

2016-01-11      chris
        *       sudo/wheezy : updated

[chris]

Debian ​isc-dhcp security update on PuffinServer:

2016-01-13      chris
        *       isc-dhcp-client/wheezy isc-dhcp-common/wheezy : updated

PenguinServer:

2016-01-13      chris
        *       isc-dhcp-client/wheezy isc-dhcp-common/wheezy : updated

And ParrotServer:

2016-01-13      chris
        *       isc-dhcp-client/wheezy isc-dhcp-common/wheezy : updated

[chris]

Debian ​libpng security update which was applied last night and ​openssh security update has just been applied on PuffinServer:

2016-01-14      chris
        *       openssh-client/wheezy openssh-server/wheezy ssh/wheezy : updated

2016-01-13      chris
        *       libpng12-0/wheezy libpng12-dev/wheezy : updated

PenguinServer:

2016-01-14      chris
        *       openssh-client/wheezy openssh-server/wheezy : updated

2016-01-13      chris
        *       libpng12-0/wheezy libpng12-dev/wheezy python-pygments/wheezy : updated

And ParrotServer:

2016-01-14      chris
        *       openssh-client/wheezy openssh-server/wheezy : updated

2016-01-13      chris
        *       libpng12-0/wheezy : updated

[chris]

Debian ​openssh security update applied last night on PuffinServer:

2016-01-14      chris
        *       openssh-client/wheezy openssh-server/wheezy ssh/wheezy : updated

PenguinServer:

2016-01-14      chris
        *       openssh-client/wheezy openssh-server/wheezy : updated

And ParrotServer:

2016-01-14      chris
        *       openssh-client/wheezy openssh-server/wheezy : updated

[chris]

Debian ​bind9 security update applied last night on PuffinServer:

2016-01-19      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

ParrotServer:

2016-01-19      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

[chris]

Debian ​openjdk-7 security update on PuffinServer:

2016-01-28      chris
        *       icedtea-7-jre-jamvm/wheezy openjdk-7-jre-headless/wheezy : updated

[chris]

Debian ​mysql-5.5 security update on Penguinserver:

2016-01-28      chris
        *       libmysqlclient-dev/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

And ParrotServer:

2016-01-28      chris
        *       libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

[chris]

Debian ​freetype security update on PuffinServer:

2016-01-31      chris
        *       libfreetype6/wheezy libfreetype6-dev/wheezy : updated

PenguinServer:

2016-01-31      chris
        *       libfreetype6/wheezy libfreetype6-dev/wheezy : updated

And ParrotServer:

2016-01-31      chris
        *       libfreetype6/wheezy : updated

[chris]

New version of Passenger and Nginx installed last night on PenguinServer, no announcement yet on ​the list regarding this update:

2016-02-01      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Debian ​openjdk-6 security update update on PuffinServer:

2016-02-03      chris
        *       icedtea-6-jre-cacao/wheezy icedtea-6-jre-jamvm/wheezy openjdk-6-jre-headless/wheezy openjdk-6-jre-lib/wheezy : updated

[chris]

Debian ​krb5 security update applied last night on PuffinServer:

2016-02-04      chris
        *       krb5-multidev/wheezy libgssapi-krb5-2/wheezy libgssrpc4/wheezy libk5crypto3/wheezy libkadm5clnt-mit8/wheezy libkadm5srv-mit8/wheezy libkdb5-6/wheezy libkrb5-3/wheezy libkrb5-dev/wheezy libkrb5support0/wheezy : updated

PenguinServer:

2016-02-04      chris
        *       libgssapi-krb5-2/wheezy libk5crypto3/wheezy libkrb5-3/wheezy libkrb5support0/wheezy : updated

ParrotServer:

2016-02-04      chris
        *       krb5-locales/wheezy libgssapi-krb5-2/wheezy libk5crypto3/wheezy libkrb5-3/wheezy libkrb5support0/wheezy : updated

[chris]

Debian ​MariaDB 5.5.48 update on PuffinServer:

2016-02-12      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

[chris]

Updates applied over the weekend, Debian ​postgresql-9.1 security update and ​postgresql-9.4 security update on PuffinServer:

2016-02-14      chris
        *       libpq5/wheezy : updated

2016-02-13      chris
        *       libpq5/wheezy : updated

[chris]

Debian ​libgcrypt11 security update applied last night to PuffinServer:

2016-02-15      chris
        *       libgcrypt11/wheezy libgcrypt11-dev/wheezy : updated

PenguinServer:

2016-02-15      chris
        *       libgcrypt11/wheezy : updated

ParrotServer:

2016-02-15      chris
        *       libgcrypt11/wheezy : updated

[chris]

Debian ​glibc security update on PuffinServer:

2016-02-16      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dbg/wheezy libc6-dev/wheezy locales/wheezy locales-all/wheezy multiarch-support/wheezy : updated

PenguinServer:

2016-02-16      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

and ParrotServer

2016-02-16      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

[chris]

This is a ​serious one and so many services use libc6 that all the servers need rebooting, so I'm going to do that now.

Replying to chris:

Debian ​glibc security update on PuffinServer:

2016-02-16      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dbg/wheezy libc6-dev/wheezy locales/wheezy locales-all/wheezy multiarch-support/wheezy : updated

PenguinServer:

2016-02-16      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

and ParrotServer

2016-02-16      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

[chris]

All the servers have been rebooted and all the web sites appear to be up.

Replying to chris:

This is a ​serious one and so many services use libc6 that all the servers need rebooting, so I'm going to do that now.

Replying to chris:

Debian ​glibc security update on PuffinServer:

2016-02-16      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dbg/wheezy libc6-dev/wheezy locales/wheezy locales-all/wheezy multiarch-support/wheezy : updated

PenguinServer:

2016-02-16      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

and ParrotServer

2016-02-16      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

[chris]

Debian ​cpio security update on PuffinServer:

2016-02-19      chris
        *       cpio/wheezy : updated

PenguinServer also had a new Nginx and Passenger installed due to ​Passenger 5.0.25: Rails 5 and Action Cable integration, crash fixes:

2016-02-19      chris
        *       cpio/wheezy nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

And ParrotServer:

2016-02-19      chris
        *       cpio/wheezy : updated

[chris]

Debian ​libssh2 security update applied last night to PuffinServer:

2016-02-23      chris
        *       libssh2-1/wheezy libssh2-1-dev/wheezy : updated

PenguinServer:

2016-02-23      chris
        *       libssh2-1/wheezy : updated

And ParrotServer:

2016-02-23      chris
        *       libssh2-1/wheezy : updated

[chris]

Debian ​openssl security update and ​perl security update applied last night to PuffinServer:

2016-03-01      chris
        *       libperl5.14/wheezy perl/wheezy perl-base/wheezy perl-modules/wheezy : updated

2016-03-01      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

And PenguinServer:

2016-03-01      chris
        *       libcgi-fast-perl/wheezy libperl5.14/wheezy nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy perl/wheezy perl-base/wheezy perl-modules/wheezy : updated

2016-03-01      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

And ParrotServer:

2016-03-01      chris
        *       perl/wheezy perl-base/wheezy perl-modules/wheezy : updated

2016-03-01      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

[chris]

Debian ​linux security update applied last night to PuffinServer:

2016-03-03      chris
        *       linux-libc-dev/wheezy : updated

PenguinServer:

2016-03-03      chris
        *       linux-libc-dev/wheezy : updated

And ParrotServer:

2016-03-03      chris
        *       linux-libc-dev/wheezy : updated

[chris]

Debian ​jasper security update applied to PuffinServer:

2016-03-06      chris
        *       libjasper-dev/wheezy libjasper1/wheezy : updated

PenguinServer:

2016-03-06      chris
        *       libjasper-dev/wheezy libjasper1/wheezy : updated

And ParrotServer:

2016-03-06      chris
        *       libjasper1/wheezy : updated

[chris]

Debian ​bind9 security update applied last night to PuffinServer:

2016-03-09      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

And ParrotServer:

2016-03-09      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

[chris]

Sorry to have not reported the Debian updates done over the last few weeks sooner, ​samba security update, ​git security update and ​pixman security update on PuffinServer:

2016-03-23      chris
        *       libpixman-1-0/wheezy libpixman-1-dev/wheezy : updated

2016-03-19      chris
        *       git/wheezy git-core/wheezy git-man/wheezy : updated

2016-03-12      chris
        *       libsmbclient/wheezy libwbclient0/wheezy samba-common/wheezy samba-common-bin/wheezy smbclient/wheezy : updated

And on PenguinServer:

2016-03-23      chris
        *       libpixman-1-0/wheezy libpixman-1-dev/wheezy : updated

2016-03-19      chris
        *       git/wheezy git-core/wheezy git-man/wheezy : updated

And on ParrotServer an additional ​exim4 security update:

2016-03-23      chris
        *       libpixman-1-0/wheezy : updated

2016-03-19      chris
        *       git/wheezy git-man/wheezy : updated

2016-03-14      chris
        *       exim4/wheezy exim4-base/wheezy exim4-config/wheezy exim4-daemon-light/wheezy : updated

[chris]

Debian ​Wheezy 7.10 was released at the weekend and these packages were updated on PuffinServer:

2016-04-03      chris
        *       base-files/wheezy gir1.2-rsvg-2.0/wheezy librsvg2-2/wheezy librsvg2-common/wheezy librsvg2-dev/wheezy linux-libc-dev/wheezy tzdata/wheezy tzdata-java/wheezy : updated

And PenguinServer:

2016-04-03      chris
        *       base-files/wheezy gir1.2-rsvg-2.0/wheezy librsvg2-2/wheezy librsvg2-common/wheezy librsvg2-dev/wheezy linux-libc-dev/wheezy tzdata/wheezy : updated

And ParrotServer:

2016-04-03      chris
        *       base-files/wheezy dbconfig-common/wheezy exim4/wheezy exim4-base/wheezy exim4-config/wheezy exim4-daemon-light/wheezy librsvg2-2/wheezy librsvg2-common/wheezy linux-libc-dev/wheezy tzdata/wheezy : updated

[chris]

New Ngnix and Passenger on PenguinServer, no announcement on ​the list about this yet:

2016-04-09      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Debian ​imagemagick security update applied last night to PuffinServer:

2016-04-11      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore-dev/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand-dev/wheezy libmagickwand5/wheezy : updated

PenguinServer:

2016-04-11      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore-dev/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand-dev/wheezy libmagickwand5/wheezy : updated

And ParrotServer:

2016-04-11      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand5/wheezy : updated

[chris]

Debian ​samba security update on PuffinServer:

2016-04-14      chris
        *       libsmbclient/wheezy libwbclient0/wheezy samba-common/wheezy samba-common-bin/wheezy smbclient/wheezy : updated

[chris]

Debian ​openssh security update, ​MariaDB 5.5.49 update and ​libgd2 security update on PuffinServer:

2016-04-24      chris
        *       libgd2-xpm/wheezy : updated

2016-04-22      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy libvarnishapi1/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

2016-04-15      chris
        *       openssh-client/wheezy openssh-server/wheezy ssh/wheezy : updated

And PenguinServer:

2016-04-24      chris
        *       libgd2-xpm/wheezy : updated

2016-04-15      chris
        *       openssh-client/wheezy openssh-server/wheezy : updated

And ParrotServer:

2016-04-24      chris
        *       libgd2-xpm/wheezy : updated

2016-04-15      chris
        *       openssh-client/wheezy openssh-server/wheezy : updated

[chris]

Not sure where the LTS security emails can be found, on PuffinServer:

apticron has detected that some packages need upgrading on:                                                                       
                                                                                                                                  
        puffin.webarch.net                                                                                                        
        [ 81.95.52.103 ]                                                                                                          
                                                                                                                                  
The following packages are currently pending an upgrade:                                                                          
                                                                                                                                  
        libpoppler19 0.18.4-6+deb7u1                                                                                              
        poppler-utils 0.18.4-6+deb7u1                                                                                             
                                                                                                                                  
========================================================================                                                          
                                                                                                                                  
Package Details:                                                                                                                  
                                                                                                                                  
Reading changelogs...                                                                                                             
--- Changes for poppler (libpoppler19 poppler-utils) ---                                                                          
poppler (0.18.4-6+deb7u1) wheezy-security; urgency=high                                                                           
                                                                                                                                  
  * Non-maintainer upload by the Wheezy LTS Team.                                                                                 
  * CVE-2015-8868 (Closes: #822578)                                                                                               
    patch taken from the Sid version                                                                                              
    Backport upstream commit b3425dd3261679958cd56c0f71995c15d2124433 to fix                                                      
    a crash on invalid files, reported also as CVE-2015-8868; patch                                                               
    upstream_Do-not-crash-on-invalid-files.patch.                                                                                 
                                                                                                                                  
 -- Thorsten Alteholz <debian@alteholz.de>  Thu, 28 Apr 2016 19:03:02 +0200                                                       
                                                                                                                                  
========================================================================           

So:

2016-04-29      chris
        *       libpoppler19/wheezy poppler-utils/wheezy : updated

[chris]

​Passenger 5.0.28: rails server, Nginx 1.10, memleak fix on PenguinServer:

2016-04-29      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Debian LTS ​mysql-5.5 security update is due on PenguinServer and ParrotServer but the mirrors haven't yet caught up so it isn't available yet.

[chris]

The LTS updates have finally come through, ​gdk-pixbuf security update and ​subversion security update on PuffinServer:

2016-05-01      chris
        *       gir1.2-gdkpixbuf-2.0/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libgdk-pixbuf2.0-dev/wheezy libsvn1/wheezy subversion/wheezy : updated

​mysql-5.5 security update on PenguinServer:

2016-05-01      chris
        *       gir1.2-gdkpixbuf-2.0/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libgdk-pixbuf2.0-dev/wheezy libmysqlclient-dev/wheezy libmysqlclient18/wheezy libsvn1/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy python-subversion/wheezy subversion/wheezy : updated

And ParrotServer:

2016-05-01      chris
        *       libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libmysqlclient18/wheezy libsvn1/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy subversion/wheezy : updated

[chris]

Debian Java update (can't find the email announcement) on PuffinServer:

2016-05-02      chris
        *       icedtea-7-jre-jamvm/wheezy openjdk-7-jre-headless/wheezy : updated

[chris]

Debian LTS ​openssl security update applied last night to PuffinServer:

2016-05-03      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

PenguinServer:

2016-05-03      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

And ParrotServer:

2016-05-03      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

[chris]

Debian Wheezy LTS debian-security-support update (no email announcement yet), on PuffinServer there were this error:

/usr/bin/check-support-status: 19: /usr/bin/check-support-status: cut: Permission denied
/usr/bin/check-support-status: 19: /usr/bin/check-support-status: cat: Permission denied

So:

chmod 755 /bin/cat
chmod 755 /usr/bin/cut 
dpkg -r check-support-status
aptitude install debian-security-support

More errors:

/usr/bin/check-support-status: 35: /usr/bin/check-support-status: date: Permission denied
/usr/bin/check-support-status: 177: /usr/bin/check-support-status: mkdir: Permission denied
/usr/bin/check-support-status: 182: /usr/bin/check-support-status: head: Permission denied

This went on for a while and then I (stupidly with hindsight) set all the binaries in /usr/bin and /bin to 755, (it was BOA that originally wrecked all the permissions on the server), this allowed the install to run and it generated this:

  ┌────────────────────────────────────────────┤  ├─────────────────────────────────────────────┐
  │                                                                                             │
  │ Ended security support for one or more packages                                             │
  │                                                                                             │
  │ Unfortunately, it has been necessary to end security support for some packages before the   │
  │ end of the regular security maintenance life cycle.                                         │
  │                                                                                             │
  │ The following packages found on this system are affected by this:                           │
  │                                                                                             │
  │                                                                                             │
  │ * Source:openjdk-6, ended on 2016-04-15 at version 6b38-1.13.10-1~deb7u1                    │
  │  Details: Not supported in Wheezy LTS                                                       │
  │ https://lists.debian.org/debian-lts/2016/02/msg00153.html                                   │
  │  Affected binary packages:                                                                  │
  │  - icedtea-6-jre-jamvm:amd64 (installed version: 6b38-1.13.10-1~deb7u1)                     │
  │  - openjdk-6-jre-headless:amd64 (installed version: 6b38-1.13.10-1~deb7u1)                  │
  │  - openjdk-6-jre-lib (installed version: 6b38-1.13.10-1~deb7u1)                             │
  │                                                                                             │
  │                                           <Ok>                                              │
  │                                                                                             │
  └─────────────────────────────────────────────────────────────────────────────────────────────┘

However this created another problem with sudo and su:

sudo -i
sudo: effective uid is not 0, is sudo installed setuid root?
su - root
Password: 
su: Authentication failure

It is however possible to login as root via the console, so I have added my and Paul's ssh keys to the root ~/.ssh/authorized_keys file and set /etc/ssh/sshd_config to:

PermitRootLogin without-password

So Paul and I can now ssh in as root rather than as other users if needs be, I also reinstalled sudo so it works again .

Updates on the other servers, PenguinServer:

aptitude install debian-security-support


 ┌──────────────────┤ Configuring debian-security-support ├──────────────────┐
 │                                                                           │
 │ Limited security support for one or more packages                         │
 │                                                                           │
 │ Unfortunately, it has been necessary to limit security support for some   │
 │ packages.                                                                 │
 │                                                                           │
 │ The following packages found on this system are affected by this:         │
 │                                                                           │
 │                                                                           │
 │ * Source:libv8-3.14                                                       │
 │  Details: Not covered by security support, only suitable for trusted      │
 │ content                                                                   │
 │  Affected binary package:                                                 │
 │  - libv8-3.14.5 (installed version: 3.14.5.8-8~bpo70+1)                   │
 │                                                                           │
 │                                  <Ok>                                     │
 │                                                                           │
 └───────────────────────────────────────────────────────────────────────────┘

This is something which, I expect, was installed for the wiki:TransitionResearchWagn site, I'm not sure how much of a concern this should be.

ParrotServer:

2016-05-10      chris
        *       debian-security-support/wheezy : updated

I think we are getting to the stage with all three servers that an upgrade to Debian Jessie would be better done by migrating everything to new server rather than upgrading the existing ones, see also ticket:847.

[chris]

Debian ​ocaml security update, ​dosfstools security update and some other unannounced security updates on PuffinServer:

2016-05-16      chris
        *       dosfstools/wheezy gir1.2-rsvg-2.0/wheezy libidn11/wheezy libidn11-dev/wheezy librsvg2-2/wheezy librsvg2-common/wheezy librsvg2-dev/wheezy : updated

2016-05-13      chris
        *       libksba8/wheezy ocaml-base-nox/wheezy : updated

On PenguinServer:

2016-05-16      chris
        *       gir1.2-rsvg-2.0/wheezy libidn11/wheezy librsvg2-2/wheezy librsvg2-common/wheezy librsvg2-dev/wheezy ocaml-base-nox/wheezy : updated

And ParrotServer:

2016-05-16      chris
        *       libidn11/wheezy librsvg2-2/wheezy librsvg2-common/wheezy : updated

[chris]

Debian ​xen security update, ​nss security update, ​libgd2 security update and ​expat security update on PuffinServer:

2016-05-19      chris
        *       libexpat1/wheezy libexpat1-dev/wheezy : updated

2016-05-19      chris
        *       libgd2-xpm/wheezy : updated

2016-05-18      chris
        *       libnss3/wheezy libnss3-1d/wheezy : updated

2016-05-17      chris
        *       libxenstore3.0/wheezy : updated

On PenguinServer:

2016-05-19      chris
        *       libexpat1/wheezy libexpat1-dev/wheezy : updated

2016-05-19      chris
        *       libgd2-xpm/wheezy : updated

And also ​phpmyadmin security update on Parrot server:

2016-05-19      chris
        *       libexpat1/wheezy : updated

2016-05-19      chris
        *       libgd2-xpm/wheezy : updated

2016-05-18      chris
        *       phpmyadmin/wheezy : updated

[chris]

Debian LTS ​imagemagick security update on PuffinServer:

2016-05-23      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore-dev/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand-dev/wheezy libmagickwand5/wheezy : updated

On PenguinServer:

2016-05-23      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore-dev/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand-dev/wheezy libmagickwand5/wheezy : updated

And ParrotServer:

2016-05-23      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand5/wheezy : updated

[chris]

Debian LTS ​debian-security-support - Long term security support update and a as yet unannounced libpq5 update on PuffinServer:

2016-05-27      chris
        *       libpq5/wheezy : updated

2016-05-25      chris
        *       debian-security-support/wheezy : updated

And on PenguinServer:

2016-05-25      chris
        *       debian-security-support/wheezy : updated

And ParrotServer:

2016-05-25      chris
        *       debian-security-support/wheezy : updated

[chris]

Debian LTS ​postgresql-9.1 bugfix update and ​eglibc security update on PuffinServer:

2016-05-29      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dbg/wheezy libc6-dev/wheezy locales/wheezy locales-all/wheezy multiarch-support/wheezy : updated

2016-05-27      chris
        *       libpq5/wheezy : updated

And PenguinServer:

2016-05-29      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

And ParrotServer:

2016-05-29      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

[chris]

Debian LTS phpmyadmin update on ParrotServer, no announcement yet:

2016-05-30      chris
        *       phpmyadmin/wheezy : updated

[chris]

The Debian LTS ​phpmyadmin regression update notification is now out.

Debian LTS libtasn1-3 updated on PuffinServer:

2016-05-30      chris
        *       libtasn1-3/wheezy libtasn1-3-dev/wheezy : updated

On PenguinServer:

2016-05-30      chris
        *       libtasn1-3/wheezy : updated

And ParrotServer:

2016-05-30      chris
        *       libtasn1-3/wheezy : updated

[chris]

Debian LTS ​php5 security update on PenguinServer:

2016-05-31      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

And ParrotServer:

2016-05-31      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

[chris]

Debian LTS ​graphicsmagick security update on PuffinServer:

2016-06-02      chris
        *       gir1.2-gdkpixbuf-2.0/wheezy imagemagick/wheezy imagemagick-common/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libgdk-pixbuf2.0-dev/wheezy libmagickcore-dev/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand-dev/wheezy libmagickwand5/wheezy : updated

And PenguinServer:

2016-06-02      chris
        *       gir1.2-gdkpixbuf-2.0/wheezy imagemagick/wheezy imagemagick-common/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libgdk-pixbuf2.0-dev/wheezy libmagickcore-dev/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand-dev/wheezy libmagickwand5/wheezy : updated

And ParrotServer:

2016-06-02      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand5/wheezy : updated

[chris]

Debian LTS ​libxml2 security update and ​Updated Debian 7: 7.11 released updates on PuffinServer:

2016-06-05      chris
        *       base-files/wheezy dpkg/wheezy dpkg-dev/wheezy ldap-utils/wheezy libdpkg-perl/wheezy libgtk-3-0/wheezy libgtk-3-bin/wheezy libgtk-3-common/wheezy libldap-2.4-2/wheezy libldap2-dev/wheezy libxapian22/wheezy tzdata/wheezy tzdata-java/wheezy : updated

2016-06-03      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy : updated

PenguinServer:

2016-06-05      chris
        *       base-files/wheezy dpkg/wheezy dpkg-dev/wheezy libdpkg-perl/wheezy libldap-2.4-2/wheezy libxapian22/wheezy tzdata/wheezy : updated

2016-06-03      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy : updated

And ParrotServer:

2016-06-05      chris
        *       base-files/wheezy dpkg/wheezy libldap-2.4-2/wheezy libxapian22/wheezy tzdata/wheezy : updated

2016-06-03      chris
        *       libxml2/wheezy : updated

[chris]

Debian ​nss security update on PuffinServer:

2016-06-06      chris
        *       libnss3/wheezy libnss3-1d/wheezy : updated

[chris]

Debian LTS ​expat security update on PuffinServer:

2016-06-08      chris
        *       libexpat1/wheezy libexpat1-dev/wheezy : updated

PenguinServer:

2016-06-08      chris
        *       libexpat1/wheezy libexpat1-dev/wheezy : updated

And ParrotServer:

2016-06-08      chris
        *       libexpat1/wheezy : updated

[chris]

Debian LTS ​samba security update, ​p7zip security update, ​nspr security update and ​libxslt security update on PuffinServer:

2016-06-13      chris
        *       libxslt1-dbg/wheezy libxslt1-dev/wheezy libxslt1.1/wheezy : updated

2016-06-12      chris
        *       libnspr4/wheezy libnspr4-0d/wheezy p7zip-full/wheezy : updated

2016-06-09      chris
        *       libsmbclient/wheezy libwbclient0/wheezy samba-common/wheezy samba-common-bin/wheezy smbclient/wheezy : updated

And on PenguinServer:

2016-06-13      chris
        *       libxslt1.1/wheezy : updated

[chris]

Debian LTS ​imagemagick security update on PuffinServer:

2016-06-17      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore-dev/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand-dev/wheezy libmagickwand5/wheezy linux-libc-dev/wheezy : updated

PenguinServer:

2016-06-17      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore-dev/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand-dev/wheezy libmagickwand5/wheezy linux-libc-dev/wheezy : updated

And ParrotServer:

2016-06-17      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand5/wheezy linux-libc-dev/wheezy : updated

[chris]

Upgrade to ​MariaDB 5.5.50 on PuffinServer on Friday night:

2016-06-17      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

Also note that updates on 2016-06-17 also included a ​linux security update.

[chris]

Debian LTS ​python2.7 security update on PuffinServer:

2016-06-21      chris
        *       libpython2.7/wheezy python2.7/wheezy python2.7-dev/wheezy python2.7-minimal/wheezy : updated

And also a ​Nginx and Passenger update on PenguinServer:

2016-06-23      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

2016-06-21      chris
        *       libpython2.7/wheezy python2.7/wheezy python2.7-minimal/wheezy : updated

And on ParrotServer:

2016-06-21      chris
        *       python2.7/wheezy python2.7-minimal/wheezy : updated

[chris]

Debian LTS ​nss security update and ​java-common security update on PuffinServer:

2016-06-27      chris
        *       java-common/wheezy : updated

2016-06-25      chris
        *       libnss3/wheezy libnss3-1d/wheezy : updated

Unannounced Ngnix and Passenger update on PenguinServer:

2016-06-24      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

[chris]

Debian LTS PHP update (no announcement email about the changes yet), on PenguinServer:

2016-06-29      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

And on ParrotServer:

2016-06-29      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

[chris]

Debian LTS libgd2-xpm update (no announcement email yet) on PuffinServer:

2016-06-29      chris
        *       libgd2-xpm/wheezy : updated

PenguinServer:

2016-06-29      chris
        *       libgd2-xpm/wheezy : updated

And ParrotServer:

2016-06-29      chris
        *       libgd2-xpm/wheezy : updated

[chris]

The Debian LTS ​php5 security update and ​libgd2 security update emails are now available, see the two comments above.

[chris]

Debian LTS wget security update, no email announcement yet, PuffinServer:

2016-06-30      chris
        *       wget/wheezy : updated

PenguinServer:

2016-06-30      chris
        *       wget/wheezy : updated

And ParrotServer:

2016-06-30      chris
        *       wget/wheezy : updated

[chris]

Debian LTS ​libvirt security update, [https://lists.debian.org/debian-lts-announce/2016/07/msg00004.html sqlite3 security update and ​icu security update on PuffinServer:

2016-07-06      chris
        *       lemon/wheezy libsqlite3-0/wheezy : updated

2016-07-01      chris
        *       libvirt0/wheezy : updated

Note that I don't see a email regarding the lemon update, it it an installed package I haven't come across before:

aptitude search lemon | grep ^i
i   lemon                           - LALR(1) Parser Generator for C or C++    

On PenguinServer:

2016-07-06      chris
        *       libsqlite3-0/wheezy sqlite3/wheezy : updated

And on ParrotServer:

2016-07-07      chris
        *       libicu48/wheezy : updated

2016-07-06      chris
        *       libsqlite3-0/wheezy : updated

[chris]

Debian LTS ​binutils security update on PuffinServer:

2016-07-18      chris
        *       binutils/wheezy : updated

And PenguinServer:

2016-07-18      chris
        *       binutils/wheezy : updated

And also ​phpmyadmin security update on ParrotServer:

2016-07-18      chris
        *       binutils/wheezy : updated

2016-07-17      chris
        *       phpmyadmin/wheezy : updated

[chris]

Debian LTS ​apache2 security update on ParrotServer, note this issue was addressed yesterday on ticket:921:

2016-07-20      chris
        *       apache2-mpm-itk/wheezy apache2-utils/wheezy apache2.2-bin/wheezy apache2.2-common/wheezy : updated

[chris]

Lots of updates done while away and with limited net access -- so they were not reported here at the time, including Debian LTS ​openssh security update, ​fontconfig security update, ​MariaDB 5.5.51, ​openjdk-7 security update, ​mysql-5.5 security and regression update, ​curl security update, ​openssh security update and ​perl security update.

On PuffinServer:

2016-08-13      chris
        *       openssh-client/wheezy openssh-server/wheezy ssh/wheezy : updated

2016-08-12      chris
        *       fontconfig/wheezy fontconfig-config/wheezy libfontconfig1/wheezy libfontconfig1-dev/wheezy libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy libpq5/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

2016-08-05      chris
        *       curl/wheezy icedtea-7-jre-jamvm/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy libcurl4-openssl-dev/wheezy libidn11/wheezy libidn11-dev/wheezy openjdk-7-jre-headless/wheezy : updated

2016-08-02      chris
        *       libdbd-mysql-perl/wheezy libxenstore3.0/wheezy openssh-client/wheezy openssh-server/wheezy ssh/wheezy : updated

2016-07-29      chris
        *       libperl5.14/wheezy perl/wheezy perl-base/wheezy perl-modules/wheezy : updated

2016-07-27      chris
        *       libgd2-xpm/wheezy : updated

2016-07-22      chris
        *       ntpdate/wheezy : updated

PenguinServer:

2016-08-13      chris
        *       openssh-client/wheezy openssh-server/wheezy : updated

2016-08-08      chris
        *       fontconfig/wheezy fontconfig-config/wheezy libfontconfig1/wheezy libfontconfig1-dev/wheezy : updated

2016-08-05      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy libidn11/wheezy libmysqlclient-dev/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

2016-08-02      chris
        *       libdbd-mysql-perl/wheezy openssh-client/wheezy openssh-server/wheezy : updated

2016-07-29      chris
        *       libcgi-fast-perl/wheezy libperl5.14/wheezy perl/wheezy perl-base/wheezy perl-modules/wheezy : updated

2016-07-27      chris
        *       libgd2-xpm/wheezy nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

2016-07-22      chris
        *       ntpdate/wheezy : updated

And ParrotServer:

2016-08-13      chris
        *       openssh-client/wheezy openssh-server/wheezy : updated

2016-08-08      chris
        *       fontconfig/wheezy fontconfig-config/wheezy libfontconfig1/wheezy : updated

2016-08-05      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy libidn11/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

2016-08-02      chris
        *       libdbd-mysql-perl/wheezy openssh-client/wheezy openssh-server/wheezy : updated

2016-07-29      chris
        *       perl/wheezy perl-base/wheezy perl-modules/wheezy : updated

2016-07-27      chris
        *       libgd2-xpm/wheezy : updated

I also noticed that Ade was CC'd on this ticket so I have removed him and added Sam.

[chris]

Once again sorry for not posting these as they were done but I have not been back in the office until today, Debian LTS, ​tiff3 security update, ​linux security update, ​gnupg security and hardening update and ​libgcrypt11 security update on PuffinServer:

2016-09-04      chris
        *       libtiff4/wheezy libtiff4-dev/wheezy libtiffxx0c2/wheezy : updated

2016-09-03      chris
        *       linux-libc-dev/wheezy : updated

2016-08-27      chris
        *       gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy : updated

2016-08-23      chris
        *       libgcrypt11/wheezy libgcrypt11-dev/wheezy : updated

PenguinServer:

2016-09-04      chris
        *       libtiff4/wheezy libtiff4-dev/wheezy libtiffxx0c2/wheezy : updated

2016-09-03      chris
        *       linux-libc-dev/wheezy : updated

2016-08-27      chris
        *       gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy : updated

2016-08-23      chris
        *       libgcrypt11/wheezy : updated

And ParrotServer:

2016-09-04      chris
        *       libtiff4/wheezy : updated

2016-09-03      chris
        *       linux-libc-dev/wheezy : updated

2016-08-27      chris
        *       gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy : updated

2016-08-23      chris
        *       libgcrypt11/wheezy : updated

[chris]

Debian LTS ​xen security update, ​curl security update and ​MariaDB 5.5.52 updates on PuffinServer:

2016-09-14      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

2016-09-09      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy libcurl4-openssl-dev/wheezy : updated

2016-09-08      chris
        *       libxenstore3.0/wheezy : updated

PenguinServer:

2016-09-09      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

And ​icu security update on ParrotServer:

2016-09-09      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

2016-09-08      chris
        *       libicu48/wheezy : updated

[chris]

Debian LTS ​curl security update on PuffinServer:

2016-09-17      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy libcurl4-openssl-dev/wheezy : updated

And in addition on PenguinServer, Debian LTS ​php5 security update and ​mysql-5.5 security update:

2016-09-18      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

2016-09-17      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

2016-09-16      chris
        *       libmysqlclient-dev/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

The updates were also applied to ParrotServer above plus Debian LTS ​phpmyadmin security update:

2016-09-18      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

2016-09-18      chris
        *       phpmyadmin/wheezy : updated

2016-09-17      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

2016-09-16      chris
        *       libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

[chris]

Debian LTS OpenSSL security update (announcement email not yet in the ​archive), on PenguinServer:

2016-09-25      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

And ParrotServer:

2016-09-25      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

[chris]

Debian LTS ​c-ares security update on PenguinServer:

2016-10-07      chris
        *       libc-ares2/wheezy : updated

[chris]

Debian LTS ​libxfixes security update on PenguinServer:

2016-10-14      chris
        *       libxfixes-dev/wheezy libxfixes3/wheezy : updated

And ParrotServer:

2016-10-14      chris
        *       libxfixes3/wheezy : updated

[chris]

Debian LTS ​libdbd-mysql-perl security update on PenguinServer:

2016-10-15      chris
        *       libdbd-mysql-perl/wheezy : updated

And ParrotServer:

2016-10-15      chris
        *       libdbd-mysql-perl/wheezy : updated

[chris]

Debian LTS libsystemd-login update on PenguinServer:

2016-10-17      chris
        *       libsystemd-login0/wheezy : updated

ParrotServer:

2016-10-17      chris
        *       libsystemd-login0/wheezy : updated

[chris]

Debian LTS libxrandr2 security update on PenguinServer:

2016-10-17      chris
        *       libxrandr-dev/wheezy libxrandr2/wheezy : updated

And ParrotServer:

2016-10-17      chris
        *       libxrandr2/wheezy : updated

[chris]

Debian LTS libxrender security update on PenguinServer:

2016-10-18      chris
        *       libxrender-dev/wheezy libxrender1/wheezy : updated

And Parrot:Server:

2016-10-18      chris
        *       libxrender1/wheezy : updated

[chris]

Debian LTS libgd2-xpm update on PenguinServer:

2016-10-18      chris
        *       libgd2-xpm/wheezy : updated

And ParrotServer:

2016-10-18      chris
        *       libgd2-xpm/wheezy : updated

[chris]

Debian LTS ​linux security update on PenguinServer:

2016-10-20      chris
        *       libxv1/wheezy linux-libc-dev/wheezy : updated

And ParrotServer:

2016-10-20      chris
        *       linux-libc-dev/wheezy : updated

[chris]

Debian LTS ​bind9 security update on ParrotServer:

2016-10-20      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

[chris]

Debian LTS ​ghostscript security update on PenguinServer:

2016-10-25      chris
        *       ghostscript/wheezy libgs9/wheezy libgs9-common/wheezy : updated

And ParrotServer:

2016-10-25      chris
        *       ghostscript/wheezy libgs9/wheezy libgs9-common/wheezy : updated

[chris]

Debian LTS ​bash security update and TZ update on PenguinServer:

2016-10-26      chris
        *       tzdata/wheezy : updated

2016-10-26      chris
        *       bash/wheezy : updated

And ParrotServer:

2016-10-26      chris
        *       tzdata/wheezy : updated

2016-10-26      chris
        *       bash/wheezy : updated

[chris]

Debian LTS ​libx11 security update, ​libxi security update and ​libxtst security update on PenguinServer:

2016-10-27      chris
        *       libx11-6/wheezy libx11-data/wheezy libx11-dev/wheezy libx11-xcb1/wheezy libxi-dev/wheezy libxi6/wheezy libxtst6/wheezy : updated

And ParrotServer:

2016-10-27      chris
        *       libx11-6/wheezy libx11-data/wheezy libxi6/wheezy : updated

[chris]

Debian LTS ​tar security update, ​cairo security update and ​ghostscript regression update on PenguinServer:

2016-10-31      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy tar/wheezy : updated

2016-10-28      chris
        *       libcairo-gobject2/wheezy libcairo-script-interpreter2/wheezy libcairo2/wheezy libcairo2-dev/wheezy : updated

2016-10-28      chris
        *       ghostscript/wheezy libgs9/wheezy libgs9-common/wheezy : updated

And ParrotServer:

2016-10-31      chris
        *       libxml2/wheezy tar/wheezy : updated

2016-10-28      chris
        *       libcairo2/wheezy : updated

2016-10-28      chris
        *       ghostscript/wheezy libgs9/wheezy libgs9-common/wheezy : updated

[chris]

Oops on the last comment I missed reporting Debian LTS ​tre security update on PenguinServer:

2016-10-27      chris
        *       libtre5/wheezy : updated

[chris]

Debian LTS ​tiff3 security update and ​tiff security update on PenguinServer:

2016-11-02      chris
        *       libtiff4/wheezy libtiff4-dev/wheezy libtiffxx0c2/wheezy : updated

And ParrotServer:

2016-11-02      chris
        *       libtiff4/wheezy : updated

[chris]

Debian LTS libwmf update (no email announcement yet) on PenguinServer:

2016-11-02      chris
        *       libwmf-dev/wheezy libwmf0.2-7/wheezy : updated

And ParrotServer:

2016-11-02      chris
        *       libwmf0.2-7/wheezy : updated

[chris]

The Debian LTS ​libwmf security update email and last night ​bind9 security update on ParrotServer:

2016-11-02      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

[chris]

Debian LTS ​libxslt security update on PenguinServer:

2016-11-06      chris
        *       libxslt1.1/wheezy : updated

[chris]

Debian LTS ​tzdata new upstream version on PenguinServer:

2016-11-06      chris
        *       tzdata/wheezy : updated

And ParrotServer:

2016-11-06      chris
        *       tzdata/wheezy : updated

[chris]

Debian LTS ​python-imaging security update on PenguinServer:

2016-11-10      chris
        *       python-imaging/wheezy : updated

[chris]

Debian LTS ​sudo security update, ​mysql-5.5 security update and ​curl security update applied last week on PenguinServer:

2016-11-17      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

2016-11-16      chris
        *       libmysqlclient-dev/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy sudo/wheezy : updated

And ParrotServer:

2016-11-17      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

2016-11-16      chris
        *       libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

2016-11-14      chris
        *       sudo/wheezy : updated