Ticket #692 (new maintenance)

Opened 3 years ago

Last modified 8 minutes ago

Debian Updates

Reported by: chris Owned by: chris
Priority: major Milestone: Maintenance
Component: Live server Keywords:
Cc: sam Estimated Number of Hours: 0.0
Add Hours to Ticket: 0 Billable?: yes
Total Hours: 84.77

Description (last modified by chris) (diff)

This is a ticket to track debian upgrades to the wiki:PuffinServer, wiki:PenguinServer and wiki:ParrotServer the time they take.

See:

These updates are generally done using the wiki:AptitudeUpdateScript and this records all the changes in the /root/Changelog and then the contents of the Changelog are pasted into the ticket to document the upgrade.

This ticket took over from ticket:218 on 2014-02-25.

Change History

comment:1 Changed 3 years ago by chris

wiki:PuffinServer MySQL update MariaDB 5.5.36:

2014-02-25      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated
Last edited 3 years ago by chris (previous) (diff)

comment:2 Changed 3 years ago by chris

  • Description modified (diff)

comment:3 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 0.0 to 0.25

Debian php5 security update, on wiki:ParrotServer:

2014-03-02      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

wiki:PenguinServer:

2014-03-02      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

wiki:PuffinServer hasn't been updated as it's running php compiled from source code and the last time an update was tried, 3 months ago, it failed, see ticket:629#comment:12

comment:4 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 0.25 to 0.5

Debian gnutls26 security update, on wiki:PuffinServer:

014-03-03      chris
        *       libgnutls-dev/wheezy libgnutls-openssl27/wheezy libgnutls26/wheezy libgnutlsxx27/wheezy : updated

on wiki:PenguinServer:

14-03-03      chris
        *       libgnutls26/wheezy : updated

on wiki:ParrotServer:

2014-03-03      chris
        *       libgnutls26/wheezy : updated

comment:5 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 0.5 to 0.75

It looks like I forgot to record any time for the updates done on ticket:692#comment:1 so I'm addimg some time for that now.

comment:6 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 0.75 to 1.0

wiki:PenguinServer update, no announcement I can find on the phusion-passenger-announcements list about this:

2014-03-07      chris
        *       ruby-daemon-controller/wheezy : updated
Last edited 3 years ago by chris (previous) (diff)

comment:7 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 1.0 to 1.25

wiki:PenguinServer updates:

2014-03-10      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

wiki:PuffinServer updates:

2014-03-10      chris
        *       udisks/wheezy : updated

comment:8 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 1.25 to 1.5

wiki:PuffinServer updates:

014-03-11      chris
        *       file/wheezy libmagic1/wheezy python-magic/wheezy : updated

wiki:ParrotServer updates:

014-03-11      chris
        *       file/wheezy libmagic1/wheezy : updated

wiki:PenguinServer updates:

014-03-11      chris
        *       file/wheezy libmagic1/wheezy : updated

comment:9 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 1.5 to 1.75

mutt security update done yesterday but not reported at the time, wiki:PuffinServer:

2014-03-12      chris
        *       mutt/wheezy : updated

wiki:PenguinServer:

2014-03-12      chris
        *       mutt/wheezy : updated

wiki:ParrotServer:

2014-03-12      chris
        *       mutt/wheezy : updated

comment:10 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 1.75 to 2.0

Debian python2.7 security update, wiki:PenguinServer updates:

2014-03-17      chris
        *       libpython2.7/wheezy python2.7/wheezy python2.7-minimal/wheezy : updated

comment:11 Changed 3 years ago by chris

wiki:PuffinServer:

2014-03-17      chris
        *       libpython2.7/wheezy python2.7/wheezy python2.7-dev/wheezy python2.7-minimal/wheezy : updated

wiki:ParrotServer:

2014-03-17      chris
        *       python2.7/wheezy python2.7-minimal/wheezy : updated

comment:12 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 2.0 to 2.25
  • Description modified (diff)

wiki:PenguinServer updates follow, note that the reason for the updates from phusion generally come out after the updates have been available:

2014-03-18      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:13 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 2.25 to 2.5

wiki:PenguinServer updates:

2014-03-19      chris
*       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

announcement here, this must be a recression update http://blog.phusion.nl/2014/03/18/phusion-passenger-4-0-39-released/

comment:14 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 2.5 to 2.75

Debian file regression update, wiki:ParrotServer:

2014-03-24      chris
        *       file/wheezy libmagic1/wheezy : updated

wiki:PenguinServer:

014-03-24      chris
        *       file/wheezy libmagic1/wheezy : updated

wiki:PuffinServer:

14-03-24      chris
        *       file/wheezy libmagic1/wheezy python-magic/wheezy : updated

comment:15 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 2.75 to 3.0

Debian libyaml security update:

a specially-crafted YAML document that, when parsed by an application using libyaml, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application

wiki:PenguinServer:

2014-03-26      chris
        *       libyaml-0-2/wheezy : updated

comment:16 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 3.0 to 3.25

openssh security update:

wiki:PenguinServer:

014-04-05      chris
        *       openssh-client/wheezy openssh-server/wheezy : updated

wiki:ParrotServer:

14-04-05      chris
        *       openssh-client/wheezy openssh-server/wheezy : updated

wiki:PuffinServer has an issue:

/etc/ssh/sshd_config: line 1: Bad configuration option: Package
/etc/ssh/sshd_config: terminating, 1 bad configuration options
invoke-rc.d: initscript ssh, action "restart" failed.
dpkg: error processing openssh-server (--configure):
 subprocess installed post-installation script returned error exit status 1
Errors were encountered while processing:
 openssh-server

comment:17 Changed 3 years ago by chris

Puffin had a missing # on the first line of sshd_config, no idea why, updates:

014-04-05      chris
        *       openssh-client/wheezy openssh-server/wheezy ssh/wheezy : updated

comment:18 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 3.25 to 3.5

Serious OpenSSL bug, I upgraded the severs last night:

wiki:ParrotServer:

2014-04-07      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

wiki:PenguinServer:

2014-04-07      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

wiki:PuffinServer:

2014-04-07      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

I need to create new SSL keys on the servers and we also need to look at which sites have been running with PFS and ones that haven't might need users to change their passwords, more detail here:

comment:19 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 3.5 to 3.75

The Netcraft toolbar has a PFS indicator and these sites are all running with PFS:

Which is good:

Use of Perfect Forward Secrecy (PFS), which is unfortunately rare but powerful, should protect past communications from retrospective decryption.

http://heartbleed.com/

I have generated new CSRs for *.transitionnetwork.org/ and *.transitionresearchnetwork.org and submitted them to Gandi.

comment:20 Changed 3 years ago by chris

For the new cert for patterns.transitionresearchnetwork.org the notes on ticket:691#comment:13 were followed and the wiki:SecurityInfo page has been updated with the new wiki:SecurityInfo#Fingerprints

Version 0, edited 3 years ago by chris (next)

comment:21 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 3.75 to 4.0

New OpenSSL again, this time to restart services, wiki:PuffinServer:

2014-04-08      chris
        *       postfix ssh : restarted by new openssl
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

wiki:PenguinServer:

2014-04-08      chris
        *       postfix ssh nginx fetchmail : restarted by new openssl
        *       libssl1.0.0/wheezy openssl/wheezy : updated

wiki:ParrotServer:

2014-04-08      chris
        *       ssh exim4 : restarted by openssl update
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated
Last edited 3 years ago by chris (previous) (diff)

comment:22 Changed 3 years ago by chris

wiki:PenguinServer heartbleed update:

2014-04-09      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:23 Changed 3 years ago by chris

Drupal response to heartbleed:

https://drupal.org/news/2014-04-08-security-update

We should seriously consider doing some of these things.

comment:24 Changed 3 years ago by ed

suggest starting a new ticket and cc-ing paul, sam, jim?

comment:25 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 4.0 to 4.25

Debian imagemagick security update, wiki:PuffinServer:

2014-04-09      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore-dev/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand-dev/wheezy libmagickwand5/wheezy : updated

wiki:PenguinServer:

2014-04-09      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore-dev/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand-dev/wheezy libmagickwand5/wheezy : updated

wiki:ParrotServer:

2014-04-09      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand5/wheezy : updated

comment:26 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 4.25 to 4.5

Debian jbigkit security update, wiki:PuffinServer:

2014-04-11      chris
        *       libjbig-dev/wheezy libjbig0/wheezy : updated

wiki:PenguinServer:

2014-04-11      chris
        *       libjbig-dev/wheezy libjbig0/wheezy : updated

wiki:ParrotServer:

2014-04-11      chris
        *       libjbig0/wheezy : updated

comment:27 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 4.5 to 4.75

wiki:PenguinServer:

2014-04-13      chris
*       nodejs/wheezy-backports nodejs-legacy/wheezy-backports : updated

comment:28 Changed 3 years ago by chris

Following on from the nodejs update pslparsoid was restarted and the wiki wysiwig editor was tested, https://wiki.transitionnetwork.org/Sandbox

Last edited 3 years ago by chris (previous) (diff)

comment:29 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 4.75 to 5.0

Debian curl security update, wiki:PuffinServer:

2014-04-13      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy libcurl4-openssl-dev/wheezy : updated

wiki:PenguinServer:

2014-04-13      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

wiki:ParrotServer:

2014-04-13      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

comment:30 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 5.0 to 5.25

Debian openssl security update, wiki:PuffinServer:

14-04-18      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

wiki:PenguinServer:

14-04-18      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

wiki:ParrotServer:

2014-04-18      chris
          *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

comment:31 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 5.25 to 5.5

Updated MariaDB 5.5.37, installed on wiki:PuffinServer:

2014-04-18      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

comment:32 Changed 3 years ago by chris

Debian openjpeg regression update, wiki:PuffinServer:

014-04-23      chris
           *       libopenjpeg2/wheezy : updated

comment:33 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 5.5 to 5.75

wiki:PuffinServer debian openjdk-6 security update:

2014-04-25      chris
        *       icedtea-6-jre-cacao/wheezy icedtea-6-jre-jamvm/wheezy openjdk-6-jdk/wheezy openjdk-6-jre/wheezy openjdk-6-jre-headless/wheezy openjdk-6-jre-lib/wheezy : updated

comment:34 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 5.75 to 6.0

Debian linux-2.6 and other updates, wiki:PuffinServer:

2014-04-26      chris
        *       base-files/wheezy conkeror/wheezy conkeror-spawn-process-helper/wheezy liblcms2-2/wheezy libpq5/wheezy libsmbclient/wheezy libsnmp-base/wheezy libsnmp15/wheezy libsvn1/wheezy libwbclient0/wheezy libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy linux-libc-dev/wheezy samba-common/wheezy samba-common-bin/wheezy smbclient/wheezy subversion/wheezy tzdata/wheezy tzdata-java/wheezy : updated

wiki:PenguinServer:

2014-04-26      chris
        *       base-files/wheezy liblcms2-2/wheezy libsvn1/wheezy libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy linux-libc-dev/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy python-subversion/wheezy subversion/wheezy tzdata/wheezy : updated

wiki:ParrotServer:

2014-04-26      chris
        *       base-files/wheezy libapache2-mod-php5/wheezy liblcms2-2/wheezy libsvn1/wheezy libxml2/wheezy linux-libc-dev/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy subversion/wheezy tzdata/wheezy : updated

comment:35 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 6.0 to 6.25

Debian dpkg security update, wiki:PuffinServer:

2014-04-28      chris
        *       dpkg/wheezy dpkg-dev/wheezy libdpkg-perl/wheezy : updated

wiki:PenguinServer:

2014-04-28      chris
        *       dpkg/wheezy dpkg-dev/wheezy libdpkg-perl/wheezy : updated

wiki:ParrotServer:

2014-04-28      chris
        *       dpkg/wheezy : updated
Last edited 3 years ago by chris (previous) (diff)

comment:36 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 6.25 to 6.5

Debian dpkg security update, wiki:PuffinServer:

2014-04-30      chris
        *       dpkg/wheezy dpkg-dev/wheezy libdpkg-perl/wheezy : updated

wiki:PenguinServer, also updated iceweasel earlier today, not a security issue really as it was just used once to upload the In Transition 2.0 movie to archive.org:

2014-04-30      chris
        *       dpkg/wheezy dpkg-dev/wheezy libdpkg-perl/wheezy : updated

2014-04-30      chris
        *       iceweasel/wheezy libmozjs24d/wheezy xulrunner-24.0/wheezy : updated

wiki:ParrotServer:

2014-04-30      chris
        *       dpkg/wheezy : updated

comment:37 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 6.5 to 6.75

Debian mysql-5.5 security update, wiki:PenguinServer:

2014-05-03      chris
        *       libmysqlclient-dev/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

wiki:ParrotServer:

2014-05-03      chris
        *       libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

comment:38 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 6.75 to 7.0

This Debian openjdk-7 security update. was applied to wiki:PuffinServer last night but it wasn't posted here at the time:

2014-05-05      chris
        *       icedtea-7-jre-jamvm/wheezy openjdk-7-jdk/wheezy openjdk-7-jre/wheezy openjdk-7-jre-headless/wheezy openjdk-7-jre-lib/wheezy : updated

comment:39 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 7.0 to 7.25

No announcement on the list yet but this is a new Nginx for wiki:PenguinServer:

2014-05-07      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

There was this suggested config change to /etc/nginx/fastcgi_params:

-fastcgi_param  HTTPS                   $https;
+fastcgi_param  HTTPS                   $https if_not_empty;

There was also this error:

Errors were encountered while processing:
 nginx-extras
E: Sub-process /usr/bin/dpkg returned an error code (1)
A package failed to install.  Trying to recover:
Setting up nginx-extras (1:1.6.0-2.4.0.42~wheezy1) ...
cat: /var/run/nginx.pid.old: No such file or directory
dpkg: error processing nginx-extras (--configure):
 subprocess installed post-installation script returned error exit status 1
Errors were encountered while processing:
 nginx-extras

Tried to fix it:

aptitude upgrade
The following partially installed packages will be configured:
  nginx-extras 
No packages will be installed, upgraded, or removed.
0 packages upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B of archives. After unpacking 0 B will be used.
Setting up nginx-extras (1:1.6.0-2.4.0.42~wheezy1) ...
cat: /var/run/nginx.pid.old: No such file or directory
dpkg: error processing nginx-extras (--configure):
 subprocess installed post-installation script returned error exit status 1
Errors were encountered while processing:
 nginx-extras
E: Sub-process /usr/bin/dpkg returned an error code (1)
A package failed to install.  Trying to recover:
Setting up nginx-extras (1:1.6.0-2.4.0.42~wheezy1) ...
cat: /var/run/nginx.pid.old: No such file or directory
dpkg: error processing nginx-extras (--configure):
 subprocess installed post-installation script returned error exit status 1
Errors were encountered while processing:
 nginx-extras
dpkg -l | grep nginx-extras      
iF  nginx-extras                            1:1.6.0-2.4.0.42~wheezy1     amd64        nginx web/proxy server (extended version)

There is a nginx.pid.oldbin in /var/run but not a nginx.pid.old.

But all the sites appear to be working OK so I think this is safe to ignore for now.

comment:40 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 7.25 to 7.5

New Nginx on wiki:PenguinServer, no announcement on the list yet:

2014-05-10      chris
        *       nginx-common/wheezy nginx-extras/wheezy : updated

comment:41 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 7.5 to 7.75

Debian linux security update, wiki:ParrotServer:

2014-05-12      chris
        *       linux-libc-dev/wheezy : updated

wiki:PenguinServer:

2014-05-12      chris
        *       linux-libc-dev/wheezy : updated

wiki:PuffinServer:

2014-05-12      chris
        *       linux-libc-dev/wheezy : updated

comment:42 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 7.75 to 8.0

Debian libxfont1 update, an announcement for the reason yet, wiki:PenguinServer, wiki:ParrotServer and wiki:PuffinServer:

4-05-13      chris                                                                        *       libxfont1/wheezy : updated

comment:43 Changed 3 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 8.0 to 8.25

Debian openssl security update, wiki:PuffinServer:

2014-05-18      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

wiki:PenguinServer:

14-05-18      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

wiki:ParrotServer:

014-05-18      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

comment:44 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 8.25 to 8.5

A couple of sets of updates on wiki:PenguinServer today:

2014-05-28      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

2014-05-28      chris
        *       libv8-3.14.5/wheezy-backports : updated

comment:45 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 8.5 to 8.75

Another new Ngnix for wiki:PenguinServer and again nothing about it in the ​phusion-passenger-announcements archive:

2014-05-29      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:46 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 8.75 to 9.0

Debian php5 security update:

The default PHP FPM socket permission has been changed from 0666
to 0660 to mitigate a security vulnerability (CVE-2014-0185) in PHP
FPM that allowed any local user to run a PHP code under the active
user of FPM process via crafted FastCGI client.

The default Debian setup now correctly sets the listen.owner and
listen.group to www-data:www-data in default php-fpm.conf. If you
have more FPM instances or a webserver not running under www-data
user you need to adjust the configuration of FPM pools in
/etc/php5/fpm/pool.d/ so the accessing process has rights to
access the socket.

This needed the following setting:

listen.owner = www-data
listen.group = www-data
listen.mode = 0660

In /etc/php5/fpm/pool.d/www.conf on wiki:PenguinServer, updates on that server:

2014-06-01      chris
        *       libgnutls26/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy python-lxml/wheezy : updated

And on wiki:ParrotServer:

2014-06-01      chris
        *       libapache2-mod-php5/wheezy libgnutls26/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

comment:47 Changed 2 years ago by chris

Yesterday GNU TLS was also upgraded on all 3 servers due to the gnutls26 security update, the updates on the other server are on ticket:692#comment:46 and the wiki:PuffinServer update were:

2014-06-01      chris
        *       libgnutls-dev/wheezy libgnutls-openssl27/wheezy libgnutls26/wheezy libgnutlsxx27/wheezy : updated

comment:48 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 9.0 to 9.25

Debian openssl security update, wiki:PuffinServer:

2014-06-05      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy linux-libc-dev/wheezy openssl/wheezy : updated

wiki:ParrotServer:

2014-06-05      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy linux-libc-dev/wheezy openssl/wheezy : updated

wiki:PenguinServer:

2014-06-05      chris
        *       libssl1.0.0/wheezy linux-libc-dev/wheezy openssl/wheezy : updated

comment:49 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 9.25 to 9.5

Debian ​dpkg security update, these were done last night, wiki:PuffinServer:

2014-06-08      chris
        *       dpkg/wheezy dpkg-dev/wheezy libdpkg-perl/wheezy : updated

wiki:ParrotServer:

2014-06-08      chris
        *       dpkg/wheezy : updated

wiki:PenguinServer:

2014-06-08      chris
        *       dpkg/wheezy dpkg-dev/wheezy libdpkg-perl/wheezy : updated

comment:50 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 9.5 to 9.75

wiki:PuffinServer MariaDB 5.5.38:

2014-06-09      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

comment:51 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 9.75 to 10.0

wiki:PenguinServer updates:

2014-06-12      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:52 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 10.0 to 10.25

Debian apt security update, applied last night to wiki:PuffinServer:

2014-06-12      chris
        *       apt/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

wiki:PenguinServer:

2014-06-12      chris
        *       apt/wheezy apt-transport-https/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

and wiki:ParrotServer:

2014-06-12      chris
        *       apt/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

comment:53 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 10.25 to 10.75

Lots of updates last night, first one was the Debian openssl update, wiki:ParrotServer:

2014-06-16      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

wiki:PenguinServer:

2014-06-16      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

wiki:PuffinServer:

2014-06-16      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

And a few hours later there was a Debian php5 security update, wiki:ParrotServer:

2014-06-16      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

wiki:PenguinServer:

2014-06-17      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated
Last edited 2 years ago by chris (previous) (diff)

comment:54 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 10.75 to 11.0

wiki:PuffinServer Debian samba security update:

2014-06-23      chris
        *       libsmbclient/wheezy libwbclient0/wheezy samba-common/wheezy samba-common-bin/wheezy smbclient/wheezy : updated

comment:55 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 11.0 to 11.25

Debian gnupg security update, wiki:PuffinServer:

2014-06-25      chris
        *       gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy : updated

wiki:PenguinServer:

2014-06-25      chris
        *       gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy : updated

wiki:ParrotServer:

2014-06-25      chris
        *       gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy : updated

comment:56 follow-up: ↓ 57 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 11.25 to 11.5

Debian dbus security update has been applied to all 3 servers, I'll post the list of updated packages for each server tomorrow (on train now).

comment:57 in reply to: ↑ 56 Changed 2 years ago by chris

Replying to chris:

Debian dbus security update has been applied to all 3 servers, I'll post the list of updated packages for each server tomorrow (on train now).

wiki:ParrotServer:

2014-07-02      chris
        *       dbus/wheezy libdbus-1-3/wheezy : updated

wiki:PenguinServer:

2014-07-02      chris
        *       dbus/wheezy libdbus-1-3/wheezy : updated

wiki:PuffinServer:

2014-07-02      chris
        *       dbus/wheezy dbus-x11/wheezy libdbus-1-3/wheezy : updated

comment:58 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 11.5 to 11.75

Debian linux security update, wiki:PuffinServer:

2014-07-06      chris
        *       linux-libc-dev/wheezy : updated

wiki:PenguinServer:

2014-07-06      chris
        *       linux-libc-dev/wheezy : updated

wiki:ParrotServer:

2014-07-06      chris
        *       linux-libc-dev/wheezy : updated

comment:59 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 11.75 to 12.0

Debian php5 security update, wiki:ParrotServer:

2014-07-08      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

wiki:PenguinServer:

2014-07-08      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

comment:60 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 12.0 to 12.5

Yesterday a Debian phpmyadmin security update was applied to wiki:ParrotServer:

2014-07-09      chris
        *       phpmyadmin/wheezy : updated

And I have just applied the Debian eglibc security update to, wiki:ParrotServer:

2014-07-10      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

wiki:PenguinServer:

2014-07-10      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

and wiki:PuffinServer:

2014-07-10      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dbg/wheezy libc6-dev/wheezy locales/wheezy locales-all/wheezy multiarch-support/wheezy : updated

comment:61 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 12.5 to 12.75

Debian libxml2 security update on wiki:ParrotServer:

2014-07-11      chris
        *       libxml2/wheezy : updated

wiki:PenguinServer:

2014-07-11      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy : updated

and wiki:PuffinServer:

2014-07-11      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy : updated

comment:62 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 12.75 to 13.0

Various Debian updates applied on Saturday, including openssh, wiki:PuffinServer:

2014-07-12      chris
        *       base-files/wheezy cups-bsd/wheezy cups-client/wheezy cups-common/wheezy libcups2/wheezy libcupsimage2/wheezy libdbi-perl/wheezy libjpeg62/wheezy libjpeg8/wheezy libjpeg8-dev/wheezy openssh-client/wheezy openssh-server/wheezy ssh/wheezy tzdata/wheezy tzdata-java/wheezy : updated

wiki:PenguinServer:

2014-07-12      chris
        *       base-files/wheezy libcups2/wheezy libcupsimage2/wheezy libdbi-perl/wheezy libjpeg62/wheezy libjpeg8/wheezy libjpeg8-dev/wheezy openssh-client/wheezy openssh-server/wheezy tzdata/wheezy : updated

wiki:ParrotServer:

2014-07-12      chris
        *       apache2-mpm-itk/wheezy apache2-utils/wheezy apache2.2-bin/wheezy apache2.2-common/wheezy base-files/wheezy libcups2/wheezy libcupsimage2/wheezy libdbi-perl/wheezy libjpeg8/wheezy openssh-client/wheezy openssh-server/wheezy tzdata/wheezy : updated

comment:63 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 13.0 to 13.25

New Nginx and Phusion Passenger installed wiki:PenguinServer last night:

2014-07-14      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:64 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 13.25 to 13.5

Debian openjdk-6 security update on wiki:PuffinServer:

2014-07-17      chris
        *       icedtea-6-jre-cacao/wheezy icedtea-6-jre-jamvm/wheezy openjdk-6-jre-headless/wheezy openjdk-6-jre-lib/wheezy : updated

comment:65 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 13.5 to 13.75

Debian mysql-5.5 security update on wiki:ParrotServer:

2014-07-22      chris
        *       acpi-fakekey/wheezy acpi-support/wheezy acpi-support-base/wheezy libmysqlclient18/wheezy mysql-common/wheezy mysql-server-core-5.5/wheezy : updated

And wiki:PenguinServer:

2014-07-22      chris
        *       libmysqlclient-dev/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

wiki:PuffinServer is running MariaDB.

Last edited 2 years ago by chris (previous) (diff)

comment:66 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 13.75 to 14.0

Debian openjdk-7 security update on wiki:PuffinServer:

014-07-23      chris
        *       icedtea-7-jre-jamvm/wheezy openjdk-7-jre-headless/wheezy : updated

comment:67 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 14.0 to 14.25

wiki:PenguinServer updates:

2014-07-24      chris
*       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:68 Changed 2 years ago by chris

Debian apache2 security update for wiki:ParrotServer:

14-07-25      chris
       *      apache2-mpm-itk/wheezy apache2-utils/wheezy apache2.2-bin/wheezy apache2.2-common/wheezy : updated

comment:69 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 14.25 to 14.5

Oops time missing for Apache update above.

Last edited 2 years ago by chris (previous) (diff)

comment:70 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 14.5 to 14.75

Debian cups security update, wiki:ParrotServer:

2014-07-27      chris
        *       libcups2/wheezy libcupsimage2/wheezy : updated

wiki:PenguinServer:

2014-07-27      chris
        *       libcups2/wheezy libcupsimage2/wheezy : updated

wiki:PuffinServer:

2014-07-27      chris
        *       cups-bsd/wheezy cups-client/wheezy cups-common/wheezy libcups2/wheezy libcupsimage2/wheezy : updated

comment:71 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 14.75 to 15.0

Debian linux security update, wiki:PuffinServer:

2014-07-29      chris
        *       linux-libc-dev/wheezy : updated

wiki:PenguinServer:

2014-07-29      chris
        *       linux-libc-dev/wheezy : updated

wiki:ParrotServer:

2014-07-29      chris
        *       linux-libc-dev/wheezy : updated

comment:72 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 15.0 to 15.25

No announcement in the archives yet but I just installed a new version of NSS on wiki:PuffinServer:

2014-07-31      chris
        *       libnss3/wheezy libnss3-1d/wheezy : updated

When the email is archived I expect it'll be available here:

comment:73 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 15.25 to 15.5

Debian Backports Nodejs update on wiki:PenguinServer:

2014-08-03      chris
        *       nodejs/wheezy-backports nodejs-legacy/wheezy-backports : updated

The thread about this update:

I have check the MediaWiki WYSIWYG editor, this is the only thing using Nodejs, and it's still working fine.

comment:74 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 15.5 to 15.75

wiki:PuffinServer MariaDB 5.5.39 update:

2014-08-05      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

comment:75 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 15.75 to 16.0

Debian openssl security update, wiki:PuffinServer:

2014-08-07      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

wiki:PenguinServer:

2014-08-07      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

wiki:ParrotServer:

2014-08-07      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated
Last edited 2 years ago by chris (previous) (diff)

comment:76 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 16.0 to 16.25
Last edited 2 years ago by chris (previous) (diff)

comment:77 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 16.25 to 16.5

Debian gpgme1.0 security update on wiki:PuffinServer, wiki:PenguinServer and wiki:ParrotServer:

2014-08-14      chris
        *       libgpgme11/wheezy : updated

comment:78 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 16.5 to 16.75

Debian xen security update on wiki:PuffinServer:

2014-08-18      chris
        *       libxenstore3.0/wheezy : updated

comment:79 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 16.75 to 17.0

Debian php5 security update on wiki:PenguinServer:

2014-08-21      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

and wiki:ParrotServer:

2014-08-21      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

comment:80 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 17.0 to 17.25

Debian php5 regression update, same packages as updated this morning on last comment.

comment:81 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 17.25 to 17.5

Debian python-imaging security update on wiki:PenguinServer:

2014-08-21      chris
        *       python-imaging/wheezy : updated
Last edited 2 years ago by chris (previous) (diff)

comment:82 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 17.5 to 17.75

wiki:PenguinServer Nginx updates:

2014-08-22      chris
               *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:83 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 17.75 to 18.0

Debian eglibc security update, wiki:PuffinServer:

2014-08-27      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dbg/wheezy libc6-dev/wheezy locales/wheezy locales-all/wheezy multiarch-support/wheezy : updated

wiki:PenguinServer:

014-08-27      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

wiki:ParrotServer:

014-08-27      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

comment:84 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 18.0 to 18.25

wiki:PenguinServer Nginx updates:

2014-08-27      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:85 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 18.25 to 18.5

Debian lua5.1 security update on PuffinServer, PenguinServer and ParrotServer:

2014-09-01      chris
        *       liblua5.1-0/wheezy : updated

comment:86 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 18.5 to 18.75

Debian procmail security update on ParrotServer:

2014-09-04      chris
        *       procmail/wheezy : updated

and PenguinServer:

2014-09-04      chris
        *       procmail/wheezy : updated

and PuffinServer:

2014-09-04      chris
        *       procmail/wheezy : updated

I think we are only using procmail for the trac email features on PenguinServer.

Last edited 2 years ago by chris (previous) (diff)

comment:87 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 18.75 to 19.0

Debian file security update, PuffinServer:

2014-09-09      chris
        *       file/wheezy libmagic1/wheezy python-magic/wheezy : updated

PenguinServer:

2014-09-09      chris
        *       file/wheezy libmagic1/wheezy : updated

ParrotServer:

2014-09-09      chris
        *       file/wheezy libmagic1/wheezy : updated

comment:88 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 19.0 to 19.25

Debian curl security update on PuffinServer:

2014-09-10      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy libcurl4-openssl-dev/wheezy : updated

PenguinServer:

2014-09-10      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

ParrotServer:

2014-09-10      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

comment:89 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 19.25 to 19.5

Debian file regression update on PuffinServer:

2014-09-10      chris
        *       file/wheezy libmagic1/wheezy python-magic/wheezy : updated

PenguinServer:

2014-09-10      chris
        *       file/wheezy libmagic1/wheezy : updated

ParrotServer:

2014-09-10      chris
        *       file/wheezy libmagic1/wheezy : updated

comment:90 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 19.5 to 19.75

Debian bind9 security update and gnupg security update on PuffinServer:

2014-09-11      chris
        *       bind9-host/wheezy dnsutils/wheezy gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

PenguinServer:

2014-09-11      chris
        *       gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy : updated

ParrotServer:

2014-09-11      chris
        *       bind9-host/wheezy dnsutils/wheezy gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

These updates were done last night.

comment:91 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 19.75 to 20.0

This is a shocker, Debian apt security update:

It was discovered that APT, the high level package manager, does not
properly invalidate unauthenticated data (CVE-2014-0488), performs
incorrect verification of 304 replies (CVE-2014-0487), does not perform
the checksum check when the Acquire::GzipIndexes option is used
(CVE-2014-0489) and does not properly perform validation for binary
packages downloaded by the apt-get download command (CVE-2014-0490).

I have installed apt-transport-https as well as updating, PuffinServer:

2014-09-16      chris
        *       apt/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

2014-09-16      chris
        *       apt-transport-https : install

PenguinServer:

2014-09-16      chris
        *       apt/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

2014-09-16      chris
        *       apt-transport-https : install

ParrotServer:

2014-09-16      chris
        *       apt/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

2014-09-16      chris
        *       apt-transport-https : install

comment:92 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 20.0 to 20.25

Just like busses... Debian dbus security update, PuffinServer:

2014-09-16      chris
        *       dbus/wheezy dbus-x11/wheezy libdbus-1-3/wheezy : updated

PenguinServer:

2014-09-16      chris
        *       dbus/wheezy libdbus-1-3/wheezy : updated

ParrotServer:

2014-09-16      chris
        *       dbus/wheezy libdbus-1-3/wheezy : updated

I still need to work out which Debian mirrors support HTTPS for the apt-transport-https packages installed on the last ticket.

comment:93 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 20.25 to 20.5

Incredible:

An attacker able to man-in-the-middle a HTTP request to an apt repository can trigger the buffer overflow, leading to a crash of the 'http' apt method binary, or potentially to arbitrary code execution.

Debian apt security update on PuffinServer:

2014-09-23      chris
        *       apt/wheezy apt-transport-https/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

PenguinServer:

2014-09-23      chris
        *       apt/wheezy apt-transport-https/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

ParrotServer:

2014-09-23      chris
        *       apt/wheezy apt-transport-https/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

comment:94 Changed 2 years ago by chris

New Nginx on PenguinServer:

2014-09-24      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:95 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 20.5 to 21.0

Bad bash security update, see Bash bug fallout: Are you Shell Shocked yet? You will be when this becomes a worm, the servers were all updated last night, also there is a Debian nss security update this morning, wiki:PuffinServer updates:

2014-09-25      chris
        *       libnss3/wheezy libnss3-1d/wheezy : updated

2014-09-24      chris
        *       bash/wheezy : updated

wiki:PenguinServer:

2014-09-24      chris
        *       bash/wheezy : updated

wiki:ParrotServer:

2014-09-24      chris
        *       bash/wheezy : updated

PS Minimum time increment of 15 mins was omitted from ticket:692#comment:94 so it's been added here.

comment:96 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 21.0 to 21.25

I installed a new version of bash in the early hours, see bash security update, PuffinServer:

2014-09-26      chris
        *       bash/wheezy : updated

PenguinServer:

2014-09-26      chris
        *       bash/wheezy : updated

ParrotServer:

2014-09-26      chris
        *       bash/wheezy : updated

comment:97 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 21.25 to 21.75

Missed posting the Debian libvirt security update on PuffinServer from a few days ago:

2014-09-27      chris
        *       libvirt0/wheezy : updated

Debian rsyslog security update applied in the early hours, to PuffinServer, PenguinServer and ParrotServer:

2014-10-01      chris
        *       rsyslog/wheezy : updated

comment:98 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 21.75 to 22.0

PenguinServer Nginx and Passenger update:

2014-10-01      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:99 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 22.0 to 22.25

Debian rsyslog security update, PuffinServer:

2014-10-08      chris
        *       rsyslog/wheezy : updated

PenguinServer:

2014-10-08      chris
        *       rsyslog/wheezy : updated

ParrotServer:

2014-10-08      chris
        *       rsyslog/wheezy : updated

comment:100 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 22.25 to 22.5

Debian apt security update, PuffinServer:

2014-10-08      chris
        *       apt/wheezy apt-transport-https/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

PenguinServer:

2014-10-08      chris
        *       apt/wheezy apt-transport-https/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

ParrotServer:

2014-10-08      chris
        *       apt/wheezy apt-transport-https/wheezy apt-utils/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy : updated

comment:101 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 22.5 to 22.75

Debian openssl security update on PuffinServer:

2014-10-16      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

PenguinServer:

2014-10-16      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

ParrotServer:

2014-10-16      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

comment:102 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 22.75 to 23.0

Debian system updates on PuffinServer:

2014-10-18      chris
        *       at/wheezy base-files/wheezy ca-certificates/wheezy debian-archive-keyring/wheezy libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dbg/wheezy libc6-dev/wheezy libkeyutils1/wheezy libperl5.14/wheezy libpq5/wheezy libsnmp-base/wheezy libsnmp15/wheezy linux-libc-dev/wheezy locales/wheezy locales-all/wheezy multiarch-support/wheezy perl/wheezy perl-base/wheezy perl-modules/wheezy tzdata/wheezy tzdata-java/wheezy unattended-upgrades/wheezy xdg-utils/wheezy : updated

PenguinServer:

2014-10-18      chris
        *       base-files/wheezy ca-certificates/wheezy debian-archive-keyring/wheezy libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy libcgi-fast-perl/wheezy libkeyutils1/wheezy libperl5.14/wheezy linux-libc-dev/wheezy locales/wheezy multiarch-support/wheezy perl/wheezy perl-base/wheezy perl-modules/wheezy tzdata/wheezy : updated

ParrotServer:

2014-10-18      chris
        *       base-files/wheezy ca-certificates/wheezy debian-archive-keyring/wheezy exim4/wheezy exim4-base/wheezy exim4-config/wheezy exim4-daemon-light/wheezy libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy libkeyutils1/wheezy linux-libc-dev/wheezy locales/wheezy multiarch-support/wheezy perl/wheezy perl-base/wheezy perl-modules/wheezy tzdata/wheezy : updated

comment:103 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 23.0 to 23.5

Debian mysql-5.5 security update, applied last night, PenguinServer:

2014-10-20      chris
        *       libmysqlclient-dev/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

ParrotServer:

2014-10-20      chris
        *       libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

On PenguinServer there was this error:

Err http://parsoid.wmflabs.org wmf-production Release
Fetched 837 B in 2s (341 B/s)
W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://parsoid.wmflabs.org wmf-production Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 811780265C927F7C

W: Failed to fetch http://parsoid.wmflabs.org:8080/deb/dists/wmf-production/Release: 
W: Some index files failed to download. They have been ignored, or old ones used instead.

So, following the steps documented on ticket:793#comment:1

gpg --keyserver subkeys.pgp.net --recv-keys 811780265C927F7C
  gpg: requesting key 5C927F7C from hkp server subkeys.pgp.net
  gpg: key 5C927F7C: public key "parsoid@wikimedia.org (Parsoid repository key signing key) <parsoid@wikimedia.org>" imported
  gpg: Total number processed: 1
  gpg:               imported: 1  (RSA: 1)
gpg -a --export 5C927F7C | apt-key add -
  OK

Then parasoid was updated:

2014-10-21      chris
        *       parsoid/wmf-production : updated

And now using the MediaWiki visual editor results on this error:

Error loading data from server: parsoidserver-http-bad-status: 500. Would you like to retry?

I'm going to follow this matter up on a new ticket, ticket:799

comment:104 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 23.5 to 23.75

Debian libtasn1-3 security update applied earlier this afternoon, on PuffinServer:

2014-10-26      chris
        *       libtasn1-3/wheezy libtasn1-3-dev/wheezy : updated

PenguinServer:

2014-10-26      chris
        *       libtasn1-3/wheezy : updated

ParrotServer:

2014-10-26      chris
        *       libtasn1-3/wheezy : updated

comment:105 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 23.75 to 24.0

Debian libxml2 security update, PuffinServer:

2014-10-26      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy : updated

PenguinServer:

2014-10-26      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy : updated

ParrotServer:

2014-10-26      chris
        *       libxml2/wheezy : updated

comment:106 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 24.0 to 24.25

Debian linux security update on PuffinServer:

2014-10-31      chris
        *       linux-libc-dev/wheezy : updated

PenguinServer:

2014-10-31      chris
        *       linux-libc-dev/wheezy : updated

and ParrotServer:

2014-10-31      chris
        *       linux-libc-dev/wheezy : updated

comment:107 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 24.25 to 24.5

Debian wget security update applied to PuffinServer, PenguinServer and ParrotServer last night:

2014-11-02      chris
        *       wget/wheezy : updated

comment:108 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 24.5 to 24.75

Debian php5 security update on PenguinServer:

2014-11-04      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

ParrotServer:

2014-11-04      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

comment:109 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 24.75 to 25.0

Debian curl security update, PuffinServer:

2014-11-07      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy libcurl4-openssl-dev/wheezy : updated

PenguinServer:

2014-11-07      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

ParrotServer:

2014-11-07      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

comment:110 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 25.0 to 25.25

PuffinServer, no email yet:

2014-11-11      chris
        *       file/wheezy libmagic1/wheezy libnss3/wheezy libnss3-1d/wheezy python-magic/wheezy : updated

PenguinServer:

2014-11-11      chris
        *       file/wheezy libmagic1/wheezy : updated

ParrotServer:

2014-11-11      chris
        *       file/wheezy libmagic1/wheezy : updated

comment:111 Changed 2 years ago by chris

Debian file security update which was applied last night on ticket:692#comment:110

Last edited 2 years ago by chris (previous) (diff)

comment:112 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 25.25 to 25.5

Debian libgcrypt11 security update, PuffinServer:

2014-11-16      chris
        *       libgcrypt11/wheezy libgcrypt11-dev/wheezy : updated

PenguinServer and ParrotServer:

2014-11-16      chris
        *       libgcrypt11/wheezy : updated

comment:113 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 25.5 to 26.0

Debian php5 security update:

Francisco Alonso of Red Hat Product Security found an issue in the file
utility, whose code is embedded in PHP, a general-purpose scripting
language.  When checking ELF files, note headers are incorrectly
checked, thus potentially allowing attackers to cause a denial of
service (out-of-bounds read and application crash) by supplying a
specially crafted ELF file.

As announced in DSA-3064-1 it has been decided to follow the stable
5.4.x releases for the Wheezy php5 packages. Consequently the
vulnerability is addressed by upgrading PHP to a new upstream version
5.4.35, which includes additional bug fixes, new features and possibly
incompatible changes. Please refer to the upstream changelog for more
information:

http://php.net/ChangeLog-5.php#5.4.35

ParrotServer:

2014-11-19      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

PenguinServer:

2014-11-19      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

And after applying those updates and checking the servers a Debian php5 regression update:

The previous update for php5, DSA-3074-1, introduced regression in the
sessionclean cron script. The change was intended to fix a potential
symlink attack using filenames including the NULL character (Debian bug
#766147), but depended on sed package version too recent, not in Wheezy.

This update reverts the fix, so people are advised to keep kernel
symlink protection (sysctl fs.protected_symlinks=1) enabled as it is by
default on Wheezy, which is enough to prevent successful exploitation.

PenguinServer:

2014-11-19      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

ParrotServer:

2014-11-19      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

comment:114 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 26.0 to 26.25

PuffinServer openjdk-6 security update:

2014-11-27      chris
        *       icedtea-6-jre-cacao/wheezy icedtea-6-jre-jamvm/wheezy openjdk-6-jre-headless/wheezy openjdk-6-jre-lib/wheezy : updated

comment:115 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 26.25 to 26.5

PuffinServer Debian openjdk-7 security update:

2014-11-29      chris
        *       icedtea-7-jre-jamvm/wheezy openjdk-7-jre-headless/wheezy : updated

comment:116 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 26.5 to 26.75

Debian flac security update and mutt security update, PuffinServer:

2014-11-30      chris
        *       libflac8/wheezy mutt/wheezy : updated

PenguinServer:

2014-11-30      chris
        *       mutt/wheezy : updated

ParrotServer:

2014-11-30      chris
        *       mutt/wheezy : updated

comment:117 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 26.75 to 27.0

Debian tcpdump security update, ParrotServer and PuffinServer

2014-12-03      chris
        *       tcpdump/wheezy : updated

comment:118 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 27.0 to 27.25

Debian jasper security update, PuffinServer:

2014-12-04      chris
        *       libjasper-dev/wheezy libjasper1/wheezy : updated

PenguinServer:

2014-12-04      chris
        *       libjasper-dev/wheezy libjasper1/wheezy : updated

ParrotServer:

2014-12-04      chris
        *       libjasper1/wheezy : updated

comment:119 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 27.25 to 27.5

Debian libc update, PuffinServer:

2014-12-08      chris
        *       linux-libc-dev/wheezy : updated

PenguinServer:

2014-12-08      chris
        *       linux-libc-dev/wheezy : updated

ParrotServer:

2014-12-08      chris
        *       linux-libc-dev/wheezy : updated

comment:120 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 27.5 to 27.75

Yesterdays Debian linux security update announcement (it wasn't out when the updates were applied), see ticket:692#comment:119.

Debian bind9 security update, PuffinServer:

2014-12-09      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

ParrotServer:

2014-12-09      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

comment:121 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 27.75 to 28.0

Debian graphviz security update, PuffinServer:

2014-12-11      chris
        *       libcdt4/wheezy libcgraph5/wheezy libgraph4/wheezy libgraphviz-dev/wheezy libgvc5/wheezy libgvpr1/wheezy libpathplan4/wheezy libxdot4/wheezy : updated

PenguinServer:

2014-12-11      chris
        *       libcdt4/wheezy libcgraph5/wheezy libgraph4/wheezy libgraphviz-dev/wheezy libgvc5/wheezy libgvpr1/wheezy libpathplan4/wheezy libxdot4/wheezy : updated

comment:122 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 28.0 to 28.25

Debian dbus security update, PuffinServer:

2014-12-12      chris
        *       dbus/wheezy dbus-x11/wheezy libdbus-1-3/wheezy : updated

PenguinServer:

2014-12-12      chris
        *       dbus/wheezy libdbus-1-3/wheezy : updated

comment:123 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 28.25 to 28.5

Debian libyaml security update done on PenguinServer in the early hours this morning:

2014-12-14      chris
        *       libyaml-0-2/wheezy : updated

comment:124 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 28.5 to 28.75

The day before yesterday Ngnix and Passenger were updated on PenguinServer, no announcement email has been posted to the list about this update yet:

2014-12-12      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:125 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 28.75 to 29.0

Debian heirloom-mailx security update applied last night to PuffinServer:

2014-12-16      chris
        *       heirloom-mailx/wheezy : updated

PenguinServer:

2014-12-16      chris
        *       heirloom-mailx/wheezy : updated

and ParrotServer:

2014-12-16      chris
        *       heirloom-mailx/wheezy : updated

comment:126 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 29.0 to 29.25

A couple of days ago Ngnix / Passenger was updated and tested on PenguinServer:

2014-12-18      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

And this time there is a post explaining the update.

comment:127 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 29.25 to 29.5

Debian jasper security update on PuffinServer:

2014-12-20      chris
        *       libjasper-dev/wheezy libjasper1/wheezy : updated

PenguinServer:

2014-12-20      chris
        *       libjasper-dev/wheezy libjasper1/wheezy : updated

ParrotServer:

2014-12-20      chris
        *       libjasper1/wheezy : updated

comment:128 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 29.5 to 29.75

Debian ntp security update, subversion security update and subversion regression update, PuffinServer:

2014-12-20      chris
        *       libsvn1/wheezy ntpdate/wheezy subversion/wheezy : updated

PenguinServer:

2014-12-20      chris
        *       libsvn1/wheezy ntpdate/wheezy python-subversion/wheezy subversion/wheezy : updated

ParrotServer:

2014-12-20      chris
        *       libsvn1/wheezy subversion/wheezy : updated

comment:129 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 29.75 to 30.0

MariaDB 5.5.41 update on PuffinServer:

2014-12-22      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

comment:130 Changed 2 years ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 30.0 to 30.25

Debian cpio security update, Puffin Server:

2014-12-23      chris
        *       cpio/wheezy : updated

Penguin Server:

2014-12-23      chris
        *       cpio/wheezy : updated

ParrotServer:

2014-12-23      chris
        *       cpio/wheezy : updated

comment:131 Changed 23 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 30.25 to 30.75

Debian unzip security update applied yesterday to PuffinServer, PenguinServer and ParrotServer:

2014-12-28      chris
        *       unzip/wheezy : updated

Debian mime-support security update applied to PuffinServer, PenguinServer and ParrotServer:

2014-12-29      chris
        *       mime-support/wheezy : updated

comment:132 Changed 23 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 30.75 to 31.0

Debian php5 security update, PenguinServer:

2014-12-31      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

ParrotServer:

2014-12-31      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

comment:133 Changed 23 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 31.0 to 31.25

New Phusion Passenger and Nginx on PenguinServer, no announcement on the list to link to yet:

2015-01-03      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

Sites checked, all seems fine.

comment:134 Changed 23 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 31.25 to 31.5

Debian libevent security update, updated on PenguinServer:

2015-01-06      chris
        *       libevent-2.0-5/wheezy : updated

The Passenger / Nginx update on PenguinServer done on ticket:692#comment:133 now has an announcement, Phusion Passenger 4.0.57: better Ruby 2.2 support, Nginx 1.7.9 support.

comment:135 Changed 23 months ago by chris

  • Cc ade added; ed removed
  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 31.5 to 32.0

Two sets of Debian security updates were applied to the servers last night, file security update and curl security update, PuffinServer:

2015-01-08      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy libcurl4-openssl-dev/wheezy : updated

2015-01-08      chris
        *       file/wheezy libmagic1/wheezy python-magic/wheezy : updated

PenguinServer:

2015-01-08      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

2015-01-08      chris
        *       file/wheezy libmagic1/wheezy : updated

ParrotServer:

2015-01-08      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

2015-01-08      chris
        *       file/wheezy libmagic1/wheezy : updated

comment:136 Changed 23 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.75
  • Total Hours changed from 32.0 to 32.75

Three separate updates were done over the weekend:

  1. Debian binutils security update
  2. Debian Wheezy 7.8 update
  3. Debian openssl security update

The Changelogs for the three servers, PuffinServer:

2015-01-11      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

2015-01-10      chris
        *       apt/wheezy apt-transport-https/wheezy apt-utils/wheezy base-files/wheezy debian-archive-keyring/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy linux-libc-dev/wheezy tzdata/wheezy tzdata-java/wheezy : updated

2015-01-09      chris
        *       binutils/wheezy : updated

PenguinServer:

2015-01-11      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

2015-01-10      chris
        *       apt/wheezy apt-transport-https/wheezy apt-utils/wheezy base-files/wheezy debian-archive-keyring/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy linux-libc-dev/wheezy tzdata/wheezy : updated

2015-01-09      chris
        *       binutils/wheezy : updated

ParrotServer:

2015-01-11      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

2015-01-10      chris
        *       apache2-mpm-itk/wheezy apache2-utils/wheezy apache2.2-bin/wheezy apache2.2-common/wheezy apt/wheezy apt-transport-https/wheezy apt-utils/wheezy base-files/wheezy debian-archive-keyring/wheezy libapt-inst1.5/wheezy libapt-pkg4.12/wheezy linux-libc-dev/wheezy tzdata/wheezy : updated

2015-01-09      chris
        *       binutils/wheezy : updated

I have also updated the sources.list files to use HTTPS updates were there are mirrors that support this.

This is the main /etc/apt/sources.list for PuffinServer:

## MAIN REPOSITORIES
deb https://mirrors.kernel.org/debian/ wheezy main contrib non-free
deb-src https://mirrors.kernel.org/debian/ wheezy main contrib non-free

## MAJOR BUG FIX UPDATES produced after the final release
deb https://mirrors.kernel.org/debian/ wheezy-updates main
deb-src https://mirrors.kernel.org/debian/ wheezy-updates main

## DEBIAN SECURITY UPDATES
deb http://security.debian.org/ wheezy/updates main contrib non-free
deb-src http://security.debian.org/ wheezy/updates main contrib non-free

## DEBIAN PROPOSED UPDATES
deb https://mirrors.kernel.org/debian/ wheezy-proposed-updates main

PenguinServer:

#
#  /etc/apt/sources.list
#


#
# wheezy
#
deb     https://mirrors.kernel.org/debian/     wheezy main contrib non-free
deb-src https://mirrors.kernel.org/debian/     wheezy main contrib non-free

# 
#  Security updates
# 
deb     http://security.debian.org/ wheezy/updates  main contrib non-free
deb-src http://security.debian.org/ wheezy/updates  main contrib non-free

And ParrotServer:

#
# wheezy
#
#deb     http://ftp.uk.debian.org/debian/     wheezy main contrib non-free
#deb-src http://ftp.uk.debian.org/debian/     wheezy main contrib non-free
deb     https://mirrors.kernel.org/debian/     wheezy main contrib non-free
deb-src https://mirrors.kernel.org/debian/     wheezy main contrib non-free

# 
#  Security updates
# 
deb     http://security.debian.org/ wheezy/updates  main contrib non-free
deb-src http://security.debian.org/ wheezy/updates  main contrib non-free

comment:137 Changed 22 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.75
  • Total Hours changed from 32.75 to 33.5

Debian xdg-utils security update on PuffinServer:

2015-01-19      chris
        *       xdg-utils/wheezy : updated

And, from last week, Debian linux security update on PuffinServer, PenguinServer and ParrotServer:

2015-01-15      chris
        *       linux-libc-dev/wheezy : updated

Also from last week, Debian php5 security update on PenguinServer:

2015-01-12      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

And ParrotServer:

2015-01-12      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

Sorry not to have reported all these all at the time they were done -- when security updates are done out of office hours I tend to prioritise doing the update over reporting.

comment:138 Changed 22 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 33.5 to 33.75

PenguinServer updates:

2015-01-22      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

No email announcement about this update yet.

comment:139 Changed 22 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 33.75 to 34.25

Updates done over the weekend, Debian mysql-5.5 security update on PenguinServer:

2015-01-23      chris
        *       libmysqlclient-dev/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

And ParrotServer:

2015-01-23      chris
        *       libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

Debian jasper security update on PenguinServer:

2015-01-25      chris
        *       libjasper-dev/wheezy libjasper1/wheezy : updated

PuffinServer:

2015-01-25      chris
        *       libjasper-dev/wheezy libjasper1/wheezy : updated

And ParrorServer?:

2015-01-25      chris
        *       libjasper1/wheezy : updated

comment:140 Changed 22 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 34.25 to 34.75

Updates applied yesterday and late last night, Debian xen security update on PuffinServer:

2015-01-27      chris
        *       libxenstore3.0/wheezy : updated

Debian eglibc security update on PuffinServer:

2015-01-27      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dbg/wheezy libc6-dev/wheezy locales/wheezy locales-all/wheezy multiarch-support/wheezy : updated

PenguinServer:

2015-01-27      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

ParrotServer:

2015-01-27      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

comment:141 Changed 22 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 34.75 to 35.0

Debian openjdk-7 security update on PuffinServer last night:

2015-01-30      chris
        *       icedtea-7-jre-jamvm/wheezy openjdk-7-jre-headless/wheezy : updated

comment:142 Changed 22 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 35.0 to 35.25

Debian openjdk-6 security update on PuffinServer:

2015-01-30      chris
        *       icedtea-6-jre-cacao/wheezy icedtea-6-jre-jamvm/wheezy openjdk-6-jre-headless/wheezy openjdk-6-jre-lib/wheezy : updated

comment:143 Changed 22 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 35.25 to 35.5

Debian unzip security update on PuffinServer, PenguinServer and ParrotServer:

2015-02-03      chris
        *       unzip/wheezy : updated

comment:144 Changed 22 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 35.5 to 35.75

Debian krb5 security update, PuffinServer:

2015-02-03      chris
        *       krb5-multidev/wheezy libgssapi-krb5-2/wheezy libgssrpc4/wheezy libk5crypto3/wheezy libkadm5clnt-mit8/wheezy libkadm5srv-mit8/wheezy libkdb5-6/wheezy libkrb5-3/wheezy libkrb5-dev/wheezy libkrb5support0/wheezy : updated

PenguinServer:

2015-02-03      chris
        *       libgssapi-krb5-2/wheezy libk5crypto3/wheezy libkrb5-3/wheezy libkrb5support0/wheezy : updated

ParrotServer:

2015-02-03      chris
        *       krb5-locales/wheezy libgssapi-krb5-2/wheezy libk5crypto3/wheezy libkrb5-3/wheezy libkrb5support0/wheezy : updated

comment:145 Changed 22 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 35.75 to 36.0

Debian ntp security update on PuffinServer and PenguinServer:

2015-02-05      chris
        *       ntpdate/wheezy : updated

comment:146 Changed 22 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 36.0 to 36.25

Debian postgresql-9.1 security update on PuffinServer:

2015-02-06      chris
        *       libpq5/wheezy : updated

comment:147 Changed 22 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 36.25 to 36.5

Debian libxml2 security update on PuffinServer and PenguinServer:

2015-02-06      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy : updated

ParrotServer:

2015-02-06      chris
        *       libxml2/wheezy : updated

comment:148 Changed 22 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.75
  • Total Hours changed from 36.5 to 37.25

Debian ntp security update on PuffinServer and PenguinServer from some days ago:

2015-02-07      chris
        *       ntpdate/wheezy : updated

The day before yesterday a Debian ruby1.9.1 security update was applied to PenguinServer:

2015-02-09      chris
        *       libruby1.9.1/wheezy libruby1.9.1-dbg/wheezy libtcltk-ruby1.9.1/wheezy ri1.9.1/wheezy ruby1.9.1/wheezy ruby1.9.1-dev/wheezy ruby1.9.1-examples/wheezy ruby1.9.1-full/wheezy ruby1.9.3/wheezy : updated

A new Nginx and Passenger was deployed on PenguinServer last night (emails about updates tend to come days after the updates, see the list archive):

2015-02-10      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

Debian unrtf security update on PuffinServer, also applied last night:

2015-02-10      chris
        *       unrtf/wheezy : updated

comment:149 Changed 22 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 37.25 to 37.5

Debian ruby1.8 security update on PuffinServer:

2015-02-10      chris
        *       libruby1.8/wheezy ruby1.8/wheezy : updated

and PenguinServer:

2015-02-10      chris
        *       libruby1.8/wheezy ruby1.8/wheezy ruby1.8-dev/wheezy : updated

comment:150 Changed 22 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 37.5 to 37.75

Debian dbus security update applied last night on PuffinServer:

2015-02-11      chris
        *       dbus/wheezy dbus-x11/wheezy libdbus-1-3/wheezy : updated

PenguinServer:

2015-02-11      chris
        *       dbus/wheezy libdbus-1-3/wheezy : updated

ParrotServer:

2015-02-11      chris
        *       dbus/wheezy libdbus-1-3/wheezy : updated

comment:151 Changed 21 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 37.75 to 38.0

Debian bind9 security update on PuffinServer:

2015-02-18      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

ParrotServer:

2015-02-18      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

comment:152 Changed 21 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.75
  • Total Hours changed from 38.0 to 38.75

3 Debian security updates done over the weekend, e2fsprogs security update, sudo security update and eglibc security update, PuffinServer:

2015-02-23      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dbg/wheezy libc6-dev/wheezy locales/wheezy locales-all/wheezy multiarch-support/wheezy : updated

2015-02-22      chris
        *       sudo/wheezy : updated

2015-02-22      chris
        *       comerr-dev/wheezy e2fslibs/wheezy e2fsprogs/wheezy libcomerr2/wheezy libss2/wheezy xdg-utils/wheezy : updated

PenguinServer:

2015-02-23      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

2015-02-22      chris
        *       sudo/wheezy : updated

2015-02-22      chris
        *       e2fslibs/wheezy e2fsprogs/wheezy libcomerr2/wheezy libss2/wheezy : updated

ParrotServer:

2015-02-23      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

2015-02-22      chris
        *       sudo/wheezy : updated

2015-02-22      chris
        *       e2fslibs/wheezy e2fsprogs/wheezy libcomerr2/wheezy libss2/wheezy : updated

comment:153 Changed 21 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 38.75 to 39.25

Debian samba security update on PuffinServer last night:

2015-02-23      chris
        *       libsmbclient/wheezy libwbclient0/wheezy samba-common/wheezy samba-common-bin/wheezy smbclient/wheezy : updated

Also later in the night a Debian linux security update was installed on PuffinServer, PenguinServer and ParrotServer:

2015-02-23      chris
        *       linux-libc-dev/wheezy : updated

comment:154 Changed 21 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 39.25 to 39.5

Sorry, I forgot to record this last month, Debian cups security update, PuffinServer:

2015-02-25      chris
        *       cups-bsd/wheezy cups-client/wheezy cups-common/wheezy libcups2/wheezy libcupsimage2/wheezy : updated

PenguinServer:

2015-02-25      chris
        *       libcups2/wheezy libcupsimage2/wheezy : updated

ParrotServer:

2015-02-25      chris
        *       libcups2/wheezy libcupsimage2/wheezy : updated

comment:155 Changed 21 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 39.5 to 39.75

New Nginx and Passenger on Penguin server:

2015-03-07      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:156 Changed 21 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 39.75 to 40.0

Debian xen security update on PuffinServer:

2015-03-11      chris
        *       libxenstore3.0/wheezy : updated

comment:157 Changed 21 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 40.0 to 40.25

Debian libssh2 security update on PuffinServer:

2015-03-11      chris
        *       libssh2-1/wheezy libssh2-1-dev/wheezy : updated

PenguinServer:

2015-03-11      chris
        *       libssh2-1/wheezy : updated

ParrotServer:

2015-03-11      chris
        *       libssh2-1/wheezy : updated

comment:158 Changed 21 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 40.25 to 40.5

Passenger 5.0.4, more on their blog, on PenguinServer:

2015-03-12      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:159 Changed 21 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 40.5 to 40.75

comment:160 Changed 21 months ago by chris

Oops ticket:692#comment:159 added 15 mins to this ticket by mistake -- I'll not add time for the next update to compensate.

comment:161 Changed 21 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 40.75 to 41.0

Update from last night, gnupg security update and libgcrypt11 security update, and today, nss security update, PuffinServer:

2015-03-13      chris
        *       libnss3/wheezy libnss3-1d/wheezy : updated

2015-03-12      chris
        *       gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy libgcrypt11/wheezy libgcrypt11-dev/wheezy : updated

PenguinServer:

2015-03-12      chris
        *       gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy libgcrypt11/wheezy : updated

ParrotServer:

2015-03-12      chris
        *       gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy libgcrypt11/wheezy : updated

comment:162 Changed 21 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 41.0 to 41.25

A few updates were applied over the weekend, icu security update, freetype security update and gnutls26 security update.

PuffinServer:

2015-03-16      chris
        *       libgnutls-dev/wheezy libgnutls-openssl27/wheezy libgnutls26/wheezy libgnutlsxx27/wheezy : updated

2015-03-15      chris
        *       libfreetype6/wheezy libfreetype6-dev/wheezy : updated

PenguinServer:

2015-03-16      chris
        *       libgnutls26/wheezy : updated

2015-03-15      chris
        *       libfreetype6/wheezy libfreetype6-dev/wheezy : updated

ParrotServer:

2015-03-16      chris
        *       libgnutls26/wheezy : updated

2015-03-15      chris
        *       libfreetype6/wheezy : updated

2015-03-15      chris
        *       libicu48/wheezy : updated

Since posting updates to this ticket generally takes as long as doing the updates I think I'm going to start applying the minimum unit of time to the comments here rather than to the updates to the server, so this is being recorded as 15 min rather 45 mins.

Last edited 21 months ago by chris (previous) (diff)

comment:163 follow-up: ↓ 164 Changed 20 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 41.25 to 41.5

Debian tcpdump update (security alert email not archived yet) on PuffinServer and ParrotServer:

2015-03-17      chris
        *       tcpdump/wheezy : updated
Last edited 20 months ago by chris (previous) (diff)

comment:164 in reply to: ↑ 163 Changed 20 months ago by chris

Replying to chris:

Debian tcpdump update (security alert email not archived yet)

It is now in the archive, Debian tcpdump security update.

comment:165 Changed 20 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 41.5 to 41.75

Yesterday the Debian libxfont security update was applied on PuffinServer:

2015-03-17      chris
        *       libxfont1/wheezy : updated

Today Debian the php5 security update has been applied to PenguinServer:

2015-03-18      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

2015-03-17      chris
        *       libxfont1/wheezy : updated

And ParrotServer:

2015-03-18      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

comment:166 Changed 20 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 41.75 to 42.0

Debian file security update on PuffinServer:

2015-03-18      chris
        *       file/wheezy libmagic1/wheezy python-magic/wheezy : updated

PenguinServer:

2015-03-18      chris
        *       file/wheezy libmagic1/wheezy : updated

ParrotServer:

2015-03-18      chris
        *       file/wheezy libmagic1/wheezy : updated

comment:167 Changed 20 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 42.0 to 42.25

Debian openssl security update on PuffinServer:

2015-03-19      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

PenguinServer:

2015-03-19      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

ParrotServer:

2015-03-19      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

And I have restarted the web servers.

comment:168 Changed 20 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 42.25 to 42.5

Debian php5 security update on PenguinServer:

2015-03-20      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

And ParrotServer:

2015-03-20      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

comment:169 Changed 20 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 42.5 to 42.75

New Nginx and Passenger on PenguinServer:

2015-03-24      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:170 Changed 20 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 42.75 to 43.0

Debian openssl regression update applied last night to PuffinServer:

2015-03-24      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

PenguinServer:

2015-03-24      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

And ParrotServer:

2015-03-24      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

comment:171 Changed 20 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 43.0 to 43.25

Debian php5 regression update on PenguinServer:

2015-03-28      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

ParrotServer:

2015-03-28      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

comment:172 Changed 20 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 43.25 to 43.5

Debian openldap security update on PuffinServer:

2015-03-31      chris
        *       ldap-utils/wheezy libldap-2.4-2/wheezy libldap2-dev/wheezy : updated

PenguinServer:

2015-03-31      chris
        *       libldap-2.4-2/wheezy : updated

ParrotServer:

2015-03-31      chris
        *       libldap-2.4-2/wheezy : updated

Phusion Passenger 5.0.6 update on PenguinServer:

2015-03-31      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:173 Changed 20 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 43.5 to 43.75

Debian libgd2 security update applied yesterday to PuffinServer, PenguinServer and ParrotServer:

2015-04-06      chris
        *       libgd2-xpm/wheezy : updated

comment:174 Changed 20 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 43.75 to 44.0

Debian libxml2 regression update on PuffinServer:

2015-04-07      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy : updated

PenguinServer:

2015-04-07      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy : updated

ParrotServer:

2015-04-07      chris
        *       libxml2/wheezy : updated

comment:175 Changed 20 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 44.0 to 44.25

Debian dpkg security update on PuffinServer:

2015-04-09      chris
        *       dpkg/wheezy dpkg-dev/wheezy libdpkg-perl/wheezy : updated

PenguinServer:

2015-04-09      chris
        *       dpkg/wheezy dpkg-dev/wheezy libdpkg-perl/wheezy : updated

ParrotServer:

2015-04-09      chris
        *       dpkg/wheezy : updated

comment:176 Changed 20 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 44.25 to 44.5

Several Debian updates done over the weekend, libtasn1-3 security update, chrony security update, ntp security update and libx11 security update on PuffinServer:

2015-04-12      chris
        *       libx11-6/wheezy libx11-data/wheezy libx11-dev/wheezy libx11-xcb1/wheezy : updated

2015-04-12      chris
        *       chrony/wheezy ntpdate/wheezy : updated

2015-04-11      chris
        *       libtasn1-3/wheezy libtasn1-3-dev/wheezy : updated

PenguinServer:

2015-04-12      chris
        *       libx11-6/wheezy libx11-data/wheezy libx11-dev/wheezy libx11-xcb1/wheezy : updated

2015-04-12      chris
        *       chrony/wheezy ntpdate/wheezy : updated

2015-04-11      chris
        *       libtasn1-3/wheezy : updated

and ParrotServer:

2015-04-12      chris
        *       libx11-6/wheezy libx11-data/wheezy : updated

2015-04-12      chris
        *       chrony/wheezy : updated

2015-04-11      chris
        *       libtasn1-3/wheezy : updated

comment:177 Changed 20 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 44.5 to 44.75

Debian libxrender update (no email announcement yet) on PuffinServer:

2015-04-13      chris
        *       libxrender-dev/wheezy libxrender1/wheezy : updated

PenguinServer:

2015-04-13      chris
        *       libxrender-dev/wheezy libxrender1/wheezy : updated

ParrotServer:

2015-04-13      chris
        *       libxrender1/wheezy : updated

The load on Puffin hit over 100 while this update was being run, mostly caused by the FTP server, which we don't need or use, this is from top:

  PID USER      PR  NI  VIRT  RES  SHR S  %CPU %MEM    TIME+  COMMAND

 4653 tn.web    20   0 1249m  77m  52m S    18  0.9   0:02.33 php-fpm
 6378 root      20   0 28904  448   52 R    11  0.0   0:00.33 pure-ftpd
 6382 root      20   0 28904  444   52 R     9  0.0   0:00.28 pure-ftpd
 6387 root      20   0 28904  448   52 R     4  0.0   0:00.13 pure-ftpd

I'll open another ticket about how we can disable this unwanted service.

comment:178 Changed 19 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 44.75 to 45.0

There was an additional X11 update which didn't have a security email, on PuffinServer:

2015-04-14      chris
        *       libxrender-dev/wheezy libxrender1/wheezy : updated

PenguinServer:

2015-04-14      chris
        *       libxrender-dev/wheezy libxrender1/wheezy : updated

And ParrotServer:

2015-04-14      chris
        *       libxrender1/wheezy : updated

And today a mysql-5.5 security update on PenguinServer:

2015-04-19      chris
        *       libmysqlclient-dev/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

And ParrotServer:

2015-04-19      chris
        *       libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

Regarding the FTP issue on the comment above, this was resolved on ticket:845.

comment:179 Changed 19 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 45.0 to 45.25

Debian subversion security update from last night plus a, as yet unannounced, curl security update on PuffinServer:

2015-04-22      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy libcurl4-openssl-dev/wheezy : updated

2015-04-21      chris
        *       libsvn1/wheezy subversion/wheezy : updated

PenguinServer:

2015-04-22      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

2015-04-21      chris
        *       libsvn1/wheezy python-subversion/wheezy subversion/wheezy : updated

ParrotServer:

2015-04-22      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

2015-04-21      chris
        *       libsvn1/wheezy subversion/wheezy : updated

comment:180 Changed 19 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 45.25 to 45.75

Several updates last week and over the weekend, Debian curl security update, openjdk-6 security update and openjdk-7 securityupdate, and a linux security update on PuffinServer:

2015-04-26      chris
        *       linux-libc-dev/wheezy : updated

2015-04-26      chris
        *       liblcms1/wheezy-proposed-updates liblcms1-dev/wheezy-proposed-updates libnetcf1/wheezy-proposed-updates tzdata/wheezy-proposed-updates tzdata-java/wheezy-proposed-updates : updated

2015-04-25      chris
        *       linux-libc-dev/wheezy-proposed-updates : updated

2015-04-25      chris
        *       icedtea-6-jre-cacao/wheezy icedtea-6-jre-jamvm/wheezy icedtea-7-jre-jamvm/wheezy openjdk-6-jre-headless/wheezy openjdk-6-jre-lib/wheezy openjdk-7-jre-headless/wheezy : updated

2015-04-22      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy libcurl4-openssl-dev/wheezy : updated

PenguinServer:

2015-04-26      chris
        *       linux-libc-dev/wheezy : updated

And ParrotServer:

2015-04-26      chris
        *       linux-libc-dev/wheezy : updated

Note that PuffinServer has had updates from wheezy-proposed-updates, this is the first time I have noticed that BOA has enabled this repo, I'm not sure we want the proposed updates so I have commented this line out from /etc/apt/sources.list on the server:

## DEBIAN PROPOSED UPDATES
#deb http://ftp.debian.org/debian/ wheezy-proposed-updates main

There was also this issues on ParrotServer and PuffinServer due to the release of Jessie, see ticket:847:

W: Conflicting distribution: http://mirror.stshosting.co.uk stable Release (expected stable but got jessie)
...
E: The value 'stable' is invalid for APT::Default-Release as such a release is not available in the sources

So on both servers /etc/apt/apt.conf was edited to change "stable" to "wheezy" and on PuffinServer /etc/apt/sources.list.d/dotdeb.list was also edited:

//
//http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=638024
//

APT::Default-Release "wheezy" ;
## Dotdeb APT Repository
#deb http://packages.dotdeb.org wheezy all
#deb-src http://packages.dotdeb.org wheezy all
deb http://mirror.stshosting.co.uk/dotdeb/ wheezy all
deb-src http://mirror.stshosting.co.uk/dotdeb/ wheezy all

Also there was a conflict on PuffinServer with the Dotdeb Debian MySQL packages and the MariaDB ones:

About to upgrade libmysqlclient18/wheezy mysql-common/wheezy
The following NEW packages will be installed:
  mysql-common-5.6{a} 
The following packages will be upgraded:
  libmysqlclient18 mysql-common 
2 packages upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 1269 kB of archives. After unpacking 4166 kB will be used.
The following packages have unmet dependencies:
 libmariadbclient18 : Depends: libmysqlclient18 (= 5.5.42+maria-1~wheezy) but 5.6.23-1~dotdeb.3 is to be installed.
The following actions will resolve these dependencies:

     Remove the following packages:
1)     libmariadbclient-dev        
2)     libmariadbclient18          
3)     libmariadbd-dev             
4)     mariadb-client-5.5          
5)     mariadb-client-core-5.5     
6)     mariadb-server-5.5          
7)     mariadb-server-core-5.5     

Accept this solution? [Y/n/q/?] q

I commented out the Dotdeb repo to solve this, I don't think we use any packages from it since BOA stopped using their PHP packages, but there is the same issues with the Debian packages:

About to upgrade libmysqlclient18/wheezy mysql-common/wheezy
The following packages will be upgraded: 
  libmysqlclient18 mysql-common 
2 packages upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 750 kB of archives. After unpacking 3588 kB will be used.
The following packages have unmet dependencies:
 libmariadbclient18 : Depends: libmysqlclient18 (= 5.5.42+maria-1~wheezy) but 5.5.43-0+deb7u1 is to be installed.
The following actions will resolve these dependencies:

     Remove the following packages:
1)     libmariadbclient-dev        
2)     libmariadbclient18          
3)     libmariadbd-dev             
4)     mariadb-client-5.5          
5)     mariadb-client-core-5.5     
6)     mariadb-server-5.5          
7)     mariadb-server-core-5.5     



Accept this solution? [Y/n/q/?] q

So I think this will have to wait till a new version of MariaDB comes out.

comment:181 Changed 19 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 45.75 to 46.0

The MariaDB issue has been resolved on ticket:844#comment:9.

The /etc/apt/apt.conf file on all 3 server was edited the day before yesterday to change stable to wheezy and this was also done for /etc/munin/plugins/apt_all.

On PenguinServer Nginx was also updated the day before yesterday as Phusion Passenger 5.0.7 released:

2015-04-29      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:182 Changed 19 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 46.0 to 46.25

Debian ruby1.8 security update on PenguinServer:

2015-05-02      chris
        *       libruby1.8/wheezy libruby1.9.1/wheezy libruby1.9.1-dbg/wheezy libtcltk-ruby1.9.1/wheezy ri1.9.1/wheezy ruby1.8/wheezy ruby1.8-dev/wheezy ruby1.9.1/wheezy ruby1.9.1-dev/wheezy ruby1.9.1-examples/wheezy ruby1.9.1-full/wheezy ruby1.9.3/wheezy : updated

Nginx was restarted and the wiki:TransitionResearchWagn site was checked and everything seems to be working OK.

comment:183 Changed 19 months ago by chris

Ruby was also updated on PuffinServer:

2015-05-02      chris
        *       libruby1.8/wheezy ruby1.8/wheezy : updated

comment:184 Changed 18 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 46.25 to 46.5

New version of Nginx and Phusion Passenger, 5.0.8 on PenguinServer, no announcement yet on the list:

2015-05-20      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:185 Changed 18 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 46.5 to 46.75

Debian xen security update, fuse security update and ntfs-3g security update on PuffinServer:

2015-05-22      chris
        *       ntfs-3g/wheezy : updated

2015-05-21      chris
        *       fuse/wheezy libfuse2/wheezy : updated

2015-05-19      chris
        *       libxenstore3.0/wheezy : updated

comment:186 Changed 18 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 46.75 to 47.0

Debian ntfs-3g security update on PuffinServer:

2015-05-26      chris
        *       ntfs-3g/wheezy : updated

When this was run errors were generated:

a-up
About to upgrade ntfs-3g/wheezy
The following packages will be upgraded: 
  ntfs-3g 
1 packages upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 630 kB of archives. After unpacking 0 B will be used.
Do you want to continue? [Y/n/?] y
Get: 1 http://security.debian.org/ wheezy/updates/main ntfs-3g amd64 1:2012.1.15AR.5-2.1+deb7u2 [630 kB]
Fetched 630 kB in 0s (2513 kB/s)
Reading changelogs... Done
Preconfiguring packages ...
(Reading database ... 64598 files and directories currently installed.)
Preparing to replace ntfs-3g 1:2012.1.15AR.5-2.1+deb7u1 (using .../ntfs-3g_1%3a2012.1.15AR.5-2.1+deb7u2_amd64.deb) ...
Unpacking replacement ntfs-3g ...
Processing triggers for initramfs-tools ...
update-initramfs: Generating /boot/initrd.img-2.6.32-5-xen-amd64
WARNING: could not open /tmp/mkinitramfs_kBhe1o/lib/modules/2.6.32-5-xen-amd64/modules.builtin: No such file or directory
Processing triggers for man-db ...
Setting up ntfs-3g (1:2012.1.15AR.5-2.1+deb7u2) ...
update-initramfs: deferring update (trigger activated)
Processing triggers for initramfs-tools ...
update-initramfs: Generating /boot/initrd.img-2.6.32-5-xen-amd64
WARNING: could not open /tmp/mkinitramfs_P9iTIJ/lib/modules/2.6.32-5-xen-amd64/modules.builtin: No such file or directory
                                         
Current status: 0 updates [-1].

I'm not sure what this means and I wonder if a BOA cron job is deleting things in /tmp or something?

comment:187 Changed 18 months ago by chris

We don't need to mount NTFS filesystems, so:

aptitude remove ntfs-3g
The following packages will be REMOVED:  
  ntfs-3g 
0 packages upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
Need to get 0 B of archives. After unpacking 1485 kB will be freed.
(Reading database ... 64597 files and directories currently installed.)
Removing ntfs-3g ...
Processing triggers for initramfs-tools ...
update-initramfs: Generating /boot/initrd.img-2.6.32-5-xen-amd64
WARNING: could not open /tmp/mkinitramfs_7OoiCF/lib/modules/2.6.32-5-xen-amd64/modules.builtin: No such file or directory
Processing triggers for man-db ...

I still don't understanding why the warning is being generated, there is no shortage of disk space:

df -h
Filesystem     Type      Size  Used Avail Use% Mounted on
rootfs         rootfs     79G   34G   42G  45% /
udev           devtmpfs   10M     0   10M   0% /dev
tmpfs          tmpfs     818M  140K  818M   1% /run
/dev/xvda2     ext4       79G   34G   42G  45% /
tmpfs          tmpfs     5.0M     0  5.0M   0% /run/lock
tmpfs          tmpfs     1.6G  5.6M  1.6G   1% /run/shm

The /tmp directory is world writable and there are load of files in it:

ls -lah / | grep tmp
drwxrwxrwt  13 root root  40K May 27 11:10 tmp/
cd /tmp/; ls | wc -l
524

comment:188 Changed 18 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 47.0 to 47.25

Phusion Passenger 5.0.9 update applied last night to PenguinServer:

2015-06-03      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:189 Changed 18 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 47.25 to 47.5

Debian php5 security update on PenguinServer:

2015-06-07      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

ParrotServer:

2015-06-07      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

comment:190 Changed 18 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 47.5 to 47.75

Debian cups security update on PuffinServer:

2015-06-09      chris
        *       cups-bsd/wheezy cups-client/wheezy cups-common/wheezy libcups2/wheezy libcupsimage2/wheezy : updated

PenguinServer:

2015-06-09      chris
        *       libcups2/wheezy libcupsimage2/wheezy : updated

And ParrotServer:

2015-06-09      chris
        *       libcups2/wheezy libcupsimage2/wheezy : updated

comment:191 Changed 18 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 47.75 to 48.0

New version of Passanger, no announcement for it yet, see: https://blog.phusion.nl/tag/passenger-releases/ on PenguinServer:

2015-06-11      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:192 Changed 18 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.1
  • Total Hours changed from 48.0 to 48.1

New version of MySQL mariadb 5.5.44 on PuffinServer, also no announcement for this yet, see http://lists.askmonty.org/pipermail/announce/2015-June/thread.html

2015-06-11      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

comment:193 Changed 17 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 48.1 to 48.35

Debian p7zip security update, sqlite3 security update, openssl security update and xen security update on PuffinServer:

2015-06-15      chris
        *       p7zip-full/wheezy : updated

2015-06-14      chris
        *       lemon/wheezy libsqlite3-0/wheezy : updated

2015-06-14      chris
        *       lemon/wheezy libsqlite3-0/wheezy : updated

2015-06-13      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy libxenstore3.0/wheezy openssl/wheezy : updated

PenguinServer:

2015-06-14      chris
        *       libsqlite3-0/wheezy sqlite3/wheezy : updated

2015-06-13      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

And ParrotServer:

2015-06-14      chris
        *       libsqlite3-0/wheezy : updated

2015-06-13      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

comment:194 Changed 17 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 48.35 to 48.6

Debian linux security update and time zone update (not sure why a proposed update got pulled in...):

2015-06-18      chris
        *       linux-libc-dev/wheezy : updated

2015-06-17      chris
        *       tzdata/wheezy-proposed-updates tzdata-java/wheezy-proposed-updates : updated

PenguinServer:

2015-06-18      chris
        *       linux-libc-dev/wheezy : updated

ParrotServer:

2015-06-18      chris
        *       linux-libc-dev/wheezy : updated

comment:195 Changed 17 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 48.6 to 48.85

New version of Nginx / Passenger, no announcement email yet, PenguinServer:

2015-06-23      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:196 Changed 17 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 48.85 to 49.1

Debian unattended-upgrades security update on PuffinServer:

2015-06-29      chris
        *       unattended-upgrades/wheezy : updated

comment:197 Changed 17 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 49.1 to 49.35

New Nginx and Passanger on PenguinServer, no release announcement yet:

2015-07-03      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:198 Changed 17 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 49.35 to 49.6

Debian libwmf security update on PuffinServer, PenguinServer

2015-07-07      chris
        *       libwmf-dev/wheezy libwmf0.2-7/wheezy : updated

And ParrotServer:

2015-07-07      chris
        *       libwmf0.2-7/wheezy : updated

comment:199 Changed 17 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 49.6 to 49.85

Debian bind9 security update applied last night to PuffinServer:

2015-07-07      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

And ParrotServer:

2015-07-07      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

comment:200 Changed 16 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 49.85 to 50.1

Passenger 5.0.14: OpenSSL CVE-2015-1793 update on PenguinServer:

2015-07-18      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

Debian mysql-5.5 security update on PenguinServer and ParrotServer:

2015-07-18      chris
        *       libmysqlclient-dev/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

comment:201 Changed 16 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 50.1 to 50.35

Debian openjdk-7 security update on PuffinServer and Debian expat security update on all 3 servers. PuffinServer:

2015-07-26      chris
        *       libexpat1/wheezy libexpat1-dev/wheezy : updated

2015-07-25      chris
        *       icedtea-7-jre-jamvm/wheezy openjdk-7-jre-headless/wheezy : updated

PenguinServer:

2015-07-26      chris
        *       libexpat1/wheezy libexpat1-dev/wheezy : updated

ParrotServer:

2015-07-26      chris
        *       libexpat1/wheezy : updated

comment:202 Changed 16 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 50.35 to 50.6

Debian bind9 security update on PuffinServer:

2015-07-28      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

ParrotServer:

2015-07-28      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

comment:203 Changed 16 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 1.0
  • Total Hours changed from 50.6 to 51.6

Debian ghostscript security update on PuffinServer:

2015-08-02      chris
        *       ghostscript/wheezy libgs9/wheezy libgs9-common/wheezy : updated

Debian ruby-rack security update, Passenger 5.0.15 update and ghostscript security update on PenguinServer:

2015-08-02      chris
        *       ghostscript/wheezy libgs9/wheezy libgs9-common/wheezy : updated

2015-08-01      chris
        *       ruby-rack/wheezy : updated

2015-07-29      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

Debian icu security update, apache2 security update and ghostscript security update on ParrotServer:

2015-08-02      chris
        *       ghostscript/wheezy libgs9/wheezy libgs9-common/wheezy : updated

2015-08-02      chris
        *       apache2-mpm-itk/wheezy apache2-utils/wheezy apache2.2-bin/wheezy apache2.2-common/wheezy : updated

2015-08-01      chris
        *       libicu48/wheezy : updated

comment:204 Changed 15 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 1.0
  • Total Hours changed from 51.6 to 52.6

Three weeks worth of Debian updates on PuffinServer, including updates for MariaDB 5.5.45, openjdk-6 and others, see the Debian security list archive for details:

2015-08-20      root
        *       icedtea-6-jre-cacao/wheezy icedtea-6-jre-jamvm/wheezy openjdk-6-jre-headless/wheezy openjdk-6-jre-lib/wheezy : updated

2015-08-18      chris
        *       gir1.2-gdkpixbuf-2.0/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libgdk-pixbuf2.0-dev/wheezy libnss3/wheezy libnss3-1d/wheezy : updated

2015-08-12      chris
        *       tzdata/wheezy-proposed-updates tzdata-java/wheezy-proposed-updates : updated

2015-08-10      chris
        *       libsvn1/wheezy subversion/wheezy : updated

2015-08-07      chris
        *       linux-libc-dev/wheezy : updated

2015-08-06      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

PenguinServer:

2015-08-18      chris
        *       gir1.2-gdkpixbuf-2.0/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libgdk-pixbuf2.0-dev/wheezy : updated

2015-08-10      chris
        *       libsvn1/wheezy python-subversion/wheezy subversion/wheezy : updated

2015-08-07      chris
        *       linux-libc-dev/wheezy : updated

And ParrotServer:

2015-08-18      chris
        *       apache2-mpm-itk/wheezy apache2-utils/wheezy apache2.2-bin/wheezy apache2.2-common/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy : updated

2015-08-10      chris
        *       libsvn1/wheezy subversion/wheezy : updated

2015-08-07      chris
        *       linux-libc-dev/wheezy : updated

comment:205 Changed 15 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 52.6 to 52.85

PenguinServer upgrade Passenger 5.0.16: fixes Node.js/io.js regression and other bugs:

2015-08-25      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:206 Changed 15 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 52.85 to 53.1

Debian php5 security update on PenguinServer:

2015-08-27      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

And ParrotServer:

2015-08-27      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

comment:207 Changed 15 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 53.1 to 53.35

Debian bind9 security update on PuffinServer:

2015-09-03      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

ParrotServer:

202015-09-03      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

comment:208 Changed 15 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 53.35 to 53.6

Debian screen security update on PuffinServer, PenguinServer and ParrotServer:

2015-09-04      chris
        *       screen/wheezy : updated

comment:209 Changed 15 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 53.6 to 53.85

Debian updates on PuffinServer:

2015-09-05      chris
        *       base-files/wheezy libpq5/wheezy ssl-cert/wheezy sudo/wheezy unzip/wheezy : updated

PenguinServer:

2015-09-05      chris
        *       base-files/wheezy libfcgi0ldbl/wheezy liblcms1/wheezy liblcms1-dev/wheezy ssl-cert/wheezy sudo/wheezy tzdata/wheezy unzip/wheezy : updated

ParrotServer:

2015-09-05      chris
        *       base-files/wheezy liblcms1/wheezy ssl-cert/wheezy sudo/wheezy tzdata/wheezy unzip/wheezy : updated

comment:210 Changed 15 months ago by chris

The large number of updates on ticket:692#comment:209 was the upgrade to Debian 7.9.

comment:211 Changed 14 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 53.85 to 54.35

Debian php5 security update on PenguinServer:

2015-09-13      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

And ParrotServer:

2015-09-13      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

And a couple of Nginx updates on PenguinServer from a few days ago:

2015-09-10      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

2015-09-08      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

And a Debian openldap security update on PuffinServer:

2015-09-12      chris
        *       ldap-utils/wheezy libldap-2.4-2/wheezy libldap2-dev/wheezy : updated

And PenguinServer:

2015-09-12      chris
        *       libldap-2.4-2/wheezy : updated

comment:212 Changed 14 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 54.35 to 54.5

Debian linux security update applied last night to PuffinServer:

2015-09-21      chris
        *       linux-libc-dev/wheezy : updated

PenguinServer:

2015-09-21      chris
        *       linux-libc-dev/wheezy : updated

ParrotServer:

2015-09-21      chris
        *       linux-libc-dev/wheezy : updated

comment:213 Changed 14 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 54.5 to 54.75

New Phusion Passenger and Ngnix (no announcement email on the list about this yet) installed on PenguinServer last night:

2015-09-24      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:214 Changed 14 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 54.75 to 55.0

Passenger 5.0.20 update on PenguinServer:

2015-09-26      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:215 Changed 14 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 55.0 to 55.25

Update on PuffinServer, MariaDB 5.5.46:

2015-10-12      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

Last week a Debian freetype security update was applied to all three servers:

2015-10-06      chris
        *       libfreetype6/wheezy libfreetype6-dev/wheezy : updated

comment:216 Changed 13 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 55.25 to 55.5

Debian linux security update on PuffinServer, PenguinServer and ParrotServer:

2015-10-13      chris
        *       linux-libc-dev/wheezy : updated

comment:217 Changed 13 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 55.5 to 55.65

Passenger 5.0.21 update on PenguinServer:

2015-10-23      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:218 Changed 13 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 55.65 to 56.15

Debian gdk-pixbuf security update and openjdk-7 security update on PuffinServer:

2015-10-27      chris
        *       icedtea-7-jre-jamvm/wheezy openjdk-7-jre-headless/wheezy : updated

2015-10-25      chris
        *       gir1.2-gdkpixbuf-2.0/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libgdk-pixbuf2.0-dev/wheezy : updated

Debian mysql-5.5 security update and php5 security update on PenguinServer updates:

2015-10-27      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

2015-10-25      chris
        *       gir1.2-gdkpixbuf-2.0/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libgdk-pixbuf2.0-dev/wheezy : updated

2015-10-24      chris
        *       libmysqlclient-dev/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

ParrotServer:

2015-10-27      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

2015-10-25      chris
        *       libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy : updated

2015-10-24      chris
        *       libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

comment:219 Changed 13 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 56.15 to 56.65

PuffinServer unzip security update and ntp security update:

2015-11-02      chris
        *       ntpdate/wheezy : updated

2015-10-31      chris
        *       unzip/wheezy : updated

PenguinServer:

2015-11-02      chris
        *       ntpdate/wheezy : updated

2015-10-31      chris
        *       unzip/wheezy : updated

ParrotServer, phpmyadmin security update:

2015-10-31      chris
        *       unzip/wheezy : updated

2015-10-28      chris
        *       phpmyadmin/wheezy : updated

comment:220 Changed 13 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 56.65 to 56.9

Debian https://lists.debian.org/debian-security-announce/2015/msg00291.htmlxen security update and krb5 security update updated on PuffinServer:

2015-11-06      chris
        *       krb5-multidev/wheezy libgssapi-krb5-2/wheezy libgssrpc4/wheezy libk5crypto3/wheezy libkadm5clnt-mit8/wheezy libkadm5srv-mit8/wheezy libkdb5-6/wheezy libkrb5-3/wheezy libkrb5-dev/wheezy libkrb5support0/wheezy : updated

2015-11-02      chris
        *       libxenstore3.0/wheezy : updated

PenguinServer:

2015-11-06      chris
        *       libgssapi-krb5-2/wheezy libk5crypto3/wheezy libkrb5-3/wheezy libkrb5support0/wheezy : updated

And ParrotServer:

2015-11-06      chris
        *       krb5-locales/wheezy libgssapi-krb5-2/wheezy libk5crypto3/wheezy libkrb5-3/wheezy libkrb5support0/wheezy : updated

comment:221 Changed 12 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 56.9 to 57.4

Debian unzip regression update, linux security update and krb5 security update on PuffinServer:

2015-11-12      chris
        *       krb5-multidev/wheezy libgssapi-krb5-2/wheezy libgssrpc4/wheezy libk5crypto3/wheezy libkadm5clnt-mit8/wheezy libkadm5srv-mit8/wheezy libkdb5-6/wheezy libkrb5-3/wheezy libkrb5-dev/wheezy libkrb5support0/wheezy : updated

2015-11-10      chris
        *       linux-libc-dev/wheezy : updated

2015-11-09      chris
        *       unzip/wheezy : updated

PenguinServer:

2015-11-12      chris
        *       libgssapi-krb5-2/wheezy libk5crypto3/wheezy libkrb5-3/wheezy libkrb5support0/wheezy : updated

2015-11-10      chris
        *       linux-libc-dev/wheezy : updated

2015-11-09      chris
        *       unzip/wheezy : updated

And ParrotServer:

2015-11-12      chris
        *       krb5-locales/wheezy libgssapi-krb5-2/wheezy libk5crypto3/wheezy libkrb5-3/wheezy libkrb5support0/wheezy : updated

2015-11-10      chris
        *       linux-libc-dev/wheezy : updated

2015-11-09      chris
        *       unzip/wheezy : updated

comment:222 Changed 12 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 57.4 to 57.65

Debian libpng security update applied last night to all 3 servers, PuffinServer:

2015-11-18      chris
        *       libpng12-0/wheezy libpng12-dev/wheezy : updated

PenguinServer:

2015-11-18      chris
        *       libpng12-0/wheezy libpng12-dev/wheezy : updated

And ParrotServer:

2015-11-18      chris
        *       libpng12-0/wheezy : updated

comment:223 Changed 12 months ago by chris

Debian openjdk-7 security update on PuffinServer:

2015-11-23      chris
        *       icedtea-7-jre-jamvm/wheezy openjdk-7-jre-headless/wheezy : updated

comment:224 Changed 12 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 57.65 to 57.8

Debian nspr security update on PuffinServer:

2015-11-26      chris
        *       libnspr4/wheezy libnspr4-0d/wheezy : updated

comment:225 Changed 12 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 57.8 to 58.05

Debian nspr security update and dpkg security update on PuffinServer:

2015-11-26      chris
        *       dpkg/wheezy dpkg-dev/wheezy libdpkg-perl/wheezy : updated

2015-11-26      chris
        *       libnspr4/wheezy libnspr4-0d/wheezy : updated

PenguinServer:

2015-11-26      chris
        *       dpkg/wheezy dpkg-dev/wheezy libdpkg-perl/wheezy : updated

And ParrotServer:

2015-11-26      chris
        *       dpkg/wheezy : updated

comment:226 Changed 12 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 58.05 to 58.3

Debian gnutls26 security update and openssl security update on PuffinServer:

2015-12-04      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

2015-12-01      chris
        *       libgnutls-dev/wheezy libgnutls-openssl27/wheezy libgnutls26/wheezy libgnutlsxx27/wheezy : updated

PenguinServer:

2015-12-04      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

2015-12-01      chris
        *       libgnutls26/wheezy : updated

ParrotServer:

2015-12-04      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

2015-12-01      chris
        *       libgnutls26/wheezy : updated

comment:227 Changed 12 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 58.3 to 58.55

PenguinServer updates: Passenger 5.0.22 and 4.0.60 released; security advisory for CVE-2015-7519:

2015-12-07      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:228 Changed 12 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 58.55 to 58.8

MariaDB 5.5.47 update on PuffinServer:

2015-12-10      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

comment:229 Changed 11 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 58.8 to 59.05

Debian bouncycastle security update, bind9 security update,gdk-pixbuf security update on PuffinServer:

2015-12-17      chris
        *       gir1.2-gdkpixbuf-2.0/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libgdk-pixbuf2.0-dev/wheezy : updated

2015-12-15      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

2015-12-14      chris
        *       libbcmail-java/wheezy libbcmail-java-gcj/wheezy libbcprov-java/wheezy libbcprov-java-gcj/wheezy libbctsp-java/wheezy : updated

ParrotServer:

2015-12-17      chris
        *       libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy : updated

2015-12-15      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

And PenguinServer:

2015-12-17      chris
        *       gir1.2-gdkpixbuf-2.0/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libgdk-pixbuf2.0-dev/wheezy : updated

comment:230 Changed 11 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 59.05 to 59.3

Debian linux security update and Passenger 5.0.23 on PenguinServer:

2015-12-22      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

2015-12-17      chris
        *       linux-libc-dev/wheezy : updated

PuffinServer:

2015-12-17      chris
        *       linux-libc-dev/wheezy : updated

ParrotServer:

2015-12-17      chris
        *       linux-libc-dev/wheezy : updated

comment:231 Changed 11 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 59.3 to 59.55

Debian libxml2 security update update on PuffinServer:

2015-12-23      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy : updated

PenguinServer:

2015-12-23      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy : updated

And ParrotServer:

2015-12-23      chris
        *       libxml2/wheezy : updated

comment:232 Changed 11 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 59.55 to 59.8

I have no idea why BOA installed samba but since it was installed it has been updated due to this Debian samba security update:

2016-01-03      chris
        *       libsmbclient/wheezy libwbclient0/wheezy samba-common/wheezy samba-common-bin/wheezy smbclient/wheezy : updated

comment:233 Changed 11 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 59.8 to 60.05

Debian git security update on PuffinServer:

2016-01-05      chris
        *       git/wheezy git-core/wheezy git-man/wheezy linux-libc-dev/wheezy : updated

Debian git and linux security update on PenguinServer:

2016-01-05      chris
        *       git/wheezy git-core/wheezy git-man/wheezy : updated

2016-01-05      chris
        *       linux-libc-dev/wheezy : updated

ParrotServer:

2016-01-05      chris
        *       git/wheezy git-man/wheezy : updated

2016-01-05      chris
        *       linux-libc-dev/wheezy : updated

comment:234 Changed 11 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 60.05 to 60.3

Debian openssl security update on PuffinServer:

2016-01-08      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

PenguinServer:

2016-01-08      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

And ParrotServer:

2016-01-08      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

comment:235 Changed 11 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 60.3 to 60.55

Debian gnutls26 security update on puffinServer:

2016-01-09      chris
        *       libgnutls-dev/wheezy libgnutls-openssl27/wheezy libgnutls26/wheezy libgnutlsxx27/wheezy : updated

PenguinServer:

2016-01-09      chris
        *       libgnutls26/wheezy : updated

ParrotServer:

2016-01-09      chris
        *       libgnutls26/wheezy : updated

comment:236 Changed 10 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 60.55 to 60.8

Debian sudo security update (not yet archived, should be here when it is) on PuffinServer, PenguinServer and ParrotServer:

2016-01-11      chris
        *       sudo/wheezy : updated

comment:237 Changed 10 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 60.8 to 61.05

Debian isc-dhcp security update on PuffinServer:

2016-01-13      chris
        *       isc-dhcp-client/wheezy isc-dhcp-common/wheezy : updated

PenguinServer:

2016-01-13      chris
        *       isc-dhcp-client/wheezy isc-dhcp-common/wheezy : updated

And ParrotServer:

2016-01-13      chris
        *       isc-dhcp-client/wheezy isc-dhcp-common/wheezy : updated

comment:238 Changed 10 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 61.05 to 61.55

Debian libpng security update which was applied last night and openssh security update has just been applied on PuffinServer:

2016-01-14      chris
        *       openssh-client/wheezy openssh-server/wheezy ssh/wheezy : updated

2016-01-13      chris
        *       libpng12-0/wheezy libpng12-dev/wheezy : updated

PenguinServer:

2016-01-14      chris
        *       openssh-client/wheezy openssh-server/wheezy : updated

2016-01-13      chris
        *       libpng12-0/wheezy libpng12-dev/wheezy python-pygments/wheezy : updated

And ParrotServer:

2016-01-14      chris
        *       openssh-client/wheezy openssh-server/wheezy : updated

2016-01-13      chris
        *       libpng12-0/wheezy : updated

comment:239 Changed 10 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 61.55 to 61.8

Debian openssh security update applied last night on PuffinServer:

2016-01-14      chris
        *       openssh-client/wheezy openssh-server/wheezy ssh/wheezy : updated

PenguinServer:

2016-01-14      chris
        *       openssh-client/wheezy openssh-server/wheezy : updated

And ParrotServer:

2016-01-14      chris
        *       openssh-client/wheezy openssh-server/wheezy : updated

comment:240 Changed 10 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 61.8 to 62.05

Debian bind9 security update applied last night on PuffinServer:

2016-01-19      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

ParrotServer:

2016-01-19      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

comment:241 Changed 10 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 62.05 to 62.2

Debian openjdk-7 security update on PuffinServer:

2016-01-28      chris
        *       icedtea-7-jre-jamvm/wheezy openjdk-7-jre-headless/wheezy : updated

comment:242 Changed 10 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 62.2 to 62.45

Debian mysql-5.5 security update on Penguinserver:

2016-01-28      chris
        *       libmysqlclient-dev/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

And ParrotServer:

2016-01-28      chris
        *       libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

comment:243 Changed 10 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 62.45 to 62.7

Debian freetype security update on PuffinServer:

2016-01-31      chris
        *       libfreetype6/wheezy libfreetype6-dev/wheezy : updated

PenguinServer:

2016-01-31      chris
        *       libfreetype6/wheezy libfreetype6-dev/wheezy : updated

And ParrotServer:

2016-01-31      chris
        *       libfreetype6/wheezy : updated

comment:244 Changed 10 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 62.7 to 62.85

New version of Passenger and Nginx installed last night on PenguinServer, no announcement yet on the list regarding this update:

2016-02-01      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:245 Changed 10 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 62.85 to 63.1

Debian openjdk-6 security update update on PuffinServer:

2016-02-03      chris
        *       icedtea-6-jre-cacao/wheezy icedtea-6-jre-jamvm/wheezy openjdk-6-jre-headless/wheezy openjdk-6-jre-lib/wheezy : updated

comment:246 Changed 10 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 63.1 to 63.35

Debian krb5 security update applied last night on PuffinServer:

2016-02-04      chris
        *       krb5-multidev/wheezy libgssapi-krb5-2/wheezy libgssrpc4/wheezy libk5crypto3/wheezy libkadm5clnt-mit8/wheezy libkadm5srv-mit8/wheezy libkdb5-6/wheezy libkrb5-3/wheezy libkrb5-dev/wheezy libkrb5support0/wheezy : updated

PenguinServer:

2016-02-04      chris
        *       libgssapi-krb5-2/wheezy libk5crypto3/wheezy libkrb5-3/wheezy libkrb5support0/wheezy : updated

ParrotServer:

2016-02-04      chris
        *       krb5-locales/wheezy libgssapi-krb5-2/wheezy libk5crypto3/wheezy libkrb5-3/wheezy libkrb5support0/wheezy : updated

comment:247 Changed 9 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 63.35 to 63.5

Debian MariaDB 5.5.48 update on PuffinServer:

2016-02-12      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

comment:248 Changed 9 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 63.5 to 63.65

Updates applied over the weekend, Debian postgresql-9.1 security update and postgresql-9.4 security update on PuffinServer:

2016-02-14      chris
        *       libpq5/wheezy : updated

2016-02-13      chris
        *       libpq5/wheezy : updated

comment:249 Changed 9 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 63.65 to 63.8

Debian libgcrypt11 security update applied last night to PuffinServer:

2016-02-15      chris
        *       libgcrypt11/wheezy libgcrypt11-dev/wheezy : updated

PenguinServer:

2016-02-15      chris
        *       libgcrypt11/wheezy : updated

ParrotServer:

2016-02-15      chris
        *       libgcrypt11/wheezy : updated

comment:250 follow-up: ↓ 251 Changed 9 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 63.8 to 63.95

Debian glibc security update on PuffinServer:

2016-02-16      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dbg/wheezy libc6-dev/wheezy locales/wheezy locales-all/wheezy multiarch-support/wheezy : updated

PenguinServer:

2016-02-16      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

and ParrotServer

2016-02-16      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

comment:251 in reply to: ↑ 250 ; follow-up: ↓ 252 Changed 9 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.02
  • Total Hours changed from 63.95 to 63.97

This is a serious one and so many services use libc6 that all the servers need rebooting, so I'm going to do that now.

Replying to chris:

Debian glibc security update on PuffinServer:

2016-02-16      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dbg/wheezy libc6-dev/wheezy locales/wheezy locales-all/wheezy multiarch-support/wheezy : updated

PenguinServer:

2016-02-16      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

and ParrotServer

2016-02-16      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

comment:252 in reply to: ↑ 251 Changed 9 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.1
  • Total Hours changed from 63.97 to 64.07

All the servers have been rebooted and all the web sites appear to be up.

Replying to chris:

This is a serious one and so many services use libc6 that all the servers need rebooting, so I'm going to do that now.

Replying to chris:

Debian glibc security update on PuffinServer:

2016-02-16      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dbg/wheezy libc6-dev/wheezy locales/wheezy locales-all/wheezy multiarch-support/wheezy : updated

PenguinServer:

2016-02-16      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

and ParrotServer

2016-02-16      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

comment:253 Changed 9 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 64.07 to 64.22

Debian cpio security update on PuffinServer:

2016-02-19      chris
        *       cpio/wheezy : updated

PenguinServer also had a new Nginx and Passenger installed due to Passenger 5.0.25: Rails 5 and Action Cable integration, crash fixes:

2016-02-19      chris
        *       cpio/wheezy nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

And ParrotServer:

2016-02-19      chris
        *       cpio/wheezy : updated

comment:254 Changed 9 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 64.22 to 64.37

Debian libssh2 security update applied last night to PuffinServer:

2016-02-23      chris
        *       libssh2-1/wheezy libssh2-1-dev/wheezy : updated

PenguinServer:

2016-02-23      chris
        *       libssh2-1/wheezy : updated

And ParrotServer:

2016-02-23      chris
        *       libssh2-1/wheezy : updated

comment:255 Changed 9 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 64.37 to 64.62

Debian openssl security update and perl security update applied last night to PuffinServer:

2016-03-01      chris
        *       libperl5.14/wheezy perl/wheezy perl-base/wheezy perl-modules/wheezy : updated

2016-03-01      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

And PenguinServer:

2016-03-01      chris
        *       libcgi-fast-perl/wheezy libperl5.14/wheezy nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy perl/wheezy perl-base/wheezy perl-modules/wheezy : updated

2016-03-01      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

And ParrotServer:

2016-03-01      chris
        *       perl/wheezy perl-base/wheezy perl-modules/wheezy : updated

2016-03-01      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

comment:256 Changed 9 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 64.62 to 64.87

Debian linux security update applied last night to PuffinServer:

2016-03-03      chris
        *       linux-libc-dev/wheezy : updated

PenguinServer:

2016-03-03      chris
        *       linux-libc-dev/wheezy : updated

And ParrotServer:

2016-03-03      chris
        *       linux-libc-dev/wheezy : updated

comment:257 Changed 9 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 64.87 to 65.02

Debian jasper security update applied to PuffinServer:

2016-03-06      chris
        *       libjasper-dev/wheezy libjasper1/wheezy : updated

PenguinServer:

2016-03-06      chris
        *       libjasper-dev/wheezy libjasper1/wheezy : updated

And ParrotServer:

2016-03-06      chris
        *       libjasper1/wheezy : updated

comment:258 Changed 9 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 65.02 to 65.17

Debian bind9 security update applied last night to PuffinServer:

2016-03-09      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

And ParrotServer:

2016-03-09      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

comment:259 Changed 8 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 65.17 to 65.67

Sorry to have not reported the Debian updates done over the last few weeks sooner, samba security update, git security update and pixman security update on PuffinServer:

2016-03-23      chris
        *       libpixman-1-0/wheezy libpixman-1-dev/wheezy : updated

2016-03-19      chris
        *       git/wheezy git-core/wheezy git-man/wheezy : updated

2016-03-12      chris
        *       libsmbclient/wheezy libwbclient0/wheezy samba-common/wheezy samba-common-bin/wheezy smbclient/wheezy : updated

And on PenguinServer:

2016-03-23      chris
        *       libpixman-1-0/wheezy libpixman-1-dev/wheezy : updated

2016-03-19      chris
        *       git/wheezy git-core/wheezy git-man/wheezy : updated

And on ParrotServer an additional exim4 security update:

2016-03-23      chris
        *       libpixman-1-0/wheezy : updated

2016-03-19      chris
        *       git/wheezy git-man/wheezy : updated

2016-03-14      chris
        *       exim4/wheezy exim4-base/wheezy exim4-config/wheezy exim4-daemon-light/wheezy : updated

comment:260 Changed 8 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 65.67 to 65.82

Debian Wheezy 7.10 was released at the weekend and these packages were updated on PuffinServer:

2016-04-03      chris
        *       base-files/wheezy gir1.2-rsvg-2.0/wheezy librsvg2-2/wheezy librsvg2-common/wheezy librsvg2-dev/wheezy linux-libc-dev/wheezy tzdata/wheezy tzdata-java/wheezy : updated

And PenguinServer:

2016-04-03      chris
        *       base-files/wheezy gir1.2-rsvg-2.0/wheezy librsvg2-2/wheezy librsvg2-common/wheezy librsvg2-dev/wheezy linux-libc-dev/wheezy tzdata/wheezy : updated

And ParrotServer:

2016-04-03      chris
        *       base-files/wheezy dbconfig-common/wheezy exim4/wheezy exim4-base/wheezy exim4-config/wheezy exim4-daemon-light/wheezy librsvg2-2/wheezy librsvg2-common/wheezy linux-libc-dev/wheezy tzdata/wheezy : updated

comment:261 Changed 8 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 65.82 to 65.97

New Ngnix and Passenger on PenguinServer, no announcement on the list about this yet:

2016-04-09      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:262 Changed 7 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 65.97 to 66.12

Debian imagemagick security update applied last night to PuffinServer:

2016-04-11      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore-dev/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand-dev/wheezy libmagickwand5/wheezy : updated

PenguinServer:

2016-04-11      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore-dev/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand-dev/wheezy libmagickwand5/wheezy : updated

And ParrotServer:

2016-04-11      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand5/wheezy : updated

comment:263 Changed 7 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 66.12 to 66.27

Debian samba security update on PuffinServer:

2016-04-14      chris
        *       libsmbclient/wheezy libwbclient0/wheezy samba-common/wheezy samba-common-bin/wheezy smbclient/wheezy : updated

comment:264 Changed 7 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 66.27 to 66.77

Debian openssh security update, MariaDB 5.5.49 update and libgd2 security update on PuffinServer:

2016-04-24      chris
        *       libgd2-xpm/wheezy : updated

2016-04-22      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy libvarnishapi1/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

2016-04-15      chris
        *       openssh-client/wheezy openssh-server/wheezy ssh/wheezy : updated

And PenguinServer:

2016-04-24      chris
        *       libgd2-xpm/wheezy : updated

2016-04-15      chris
        *       openssh-client/wheezy openssh-server/wheezy : updated

And ParrotServer:

2016-04-24      chris
        *       libgd2-xpm/wheezy : updated

2016-04-15      chris
        *       openssh-client/wheezy openssh-server/wheezy : updated

comment:265 Changed 7 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 66.77 to 66.92

Not sure where the LTS security emails can be found, on PuffinServer:

apticron has detected that some packages need upgrading on:                                                                       
                                                                                                                                  
        puffin.webarch.net                                                                                                        
        [ 81.95.52.103 ]                                                                                                          
                                                                                                                                  
The following packages are currently pending an upgrade:                                                                          
                                                                                                                                  
        libpoppler19 0.18.4-6+deb7u1                                                                                              
        poppler-utils 0.18.4-6+deb7u1                                                                                             
                                                                                                                                  
========================================================================                                                          
                                                                                                                                  
Package Details:                                                                                                                  
                                                                                                                                  
Reading changelogs...                                                                                                             
--- Changes for poppler (libpoppler19 poppler-utils) ---                                                                          
poppler (0.18.4-6+deb7u1) wheezy-security; urgency=high                                                                           
                                                                                                                                  
  * Non-maintainer upload by the Wheezy LTS Team.                                                                                 
  * CVE-2015-8868 (Closes: #822578)                                                                                               
    patch taken from the Sid version                                                                                              
    Backport upstream commit b3425dd3261679958cd56c0f71995c15d2124433 to fix                                                      
    a crash on invalid files, reported also as CVE-2015-8868; patch                                                               
    upstream_Do-not-crash-on-invalid-files.patch.                                                                                 
                                                                                                                                  
 -- Thorsten Alteholz <debian@alteholz.de>  Thu, 28 Apr 2016 19:03:02 +0200                                                       
                                                                                                                                  
========================================================================           

So:

2016-04-29      chris
        *       libpoppler19/wheezy poppler-utils/wheezy : updated

comment:266 Changed 7 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 66.92 to 67.07

Passenger 5.0.28: rails server, Nginx 1.10, memleak fix on PenguinServer:

2016-04-29      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:267 Changed 7 months ago by chris

  • Description modified (diff)

comment:268 Changed 7 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 67.07 to 67.22

Debian LTS mysql-5.5 security update is due on PenguinServer and ParrotServer but the mirrors haven't yet caught up so it isn't available yet.

Last edited 7 months ago by chris (previous) (diff)

comment:269 Changed 7 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 67.22 to 67.47

The LTS updates have finally come through, gdk-pixbuf security update and subversion security update on PuffinServer:

2016-05-01      chris
        *       gir1.2-gdkpixbuf-2.0/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libgdk-pixbuf2.0-dev/wheezy libsvn1/wheezy subversion/wheezy : updated

mysql-5.5 security update on PenguinServer:

2016-05-01      chris
        *       gir1.2-gdkpixbuf-2.0/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libgdk-pixbuf2.0-dev/wheezy libmysqlclient-dev/wheezy libmysqlclient18/wheezy libsvn1/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy python-subversion/wheezy subversion/wheezy : updated

And ParrotServer:

2016-05-01      chris
        *       libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libmysqlclient18/wheezy libsvn1/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy subversion/wheezy : updated

comment:270 Changed 7 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 67.47 to 67.62

Debian Java update (can't find the email announcement) on PuffinServer:

2016-05-02      chris
        *       icedtea-7-jre-jamvm/wheezy openjdk-7-jre-headless/wheezy : updated

comment:271 Changed 7 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 67.62 to 67.87

Debian LTS openssl security update applied last night to PuffinServer:

2016-05-03      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

PenguinServer:

2016-05-03      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

And ParrotServer:

2016-05-03      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

comment:272 Changed 7 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 1.0
  • Total Hours changed from 67.87 to 68.87

Debian Wheezy LTS debian-security-support update (no email announcement yet), on PuffinServer there were this error:

/usr/bin/check-support-status: 19: /usr/bin/check-support-status: cut: Permission denied
/usr/bin/check-support-status: 19: /usr/bin/check-support-status: cat: Permission denied

So:

chmod 755 /bin/cat
chmod 755 /usr/bin/cut 
dpkg -r check-support-status
aptitude install debian-security-support

More errors:

/usr/bin/check-support-status: 35: /usr/bin/check-support-status: date: Permission denied
/usr/bin/check-support-status: 177: /usr/bin/check-support-status: mkdir: Permission denied
/usr/bin/check-support-status: 182: /usr/bin/check-support-status: head: Permission denied

This went on for a while and then I (stupidly with hindsight) set all the binaries in /usr/bin and /bin to 755, (it was BOA that originally wrecked all the permissions on the server), this allowed the install to run and it generated this:

  ┌────────────────────────────────────────────┤  ├─────────────────────────────────────────────┐
  │                                                                                             │
  │ Ended security support for one or more packages                                             │
  │                                                                                             │
  │ Unfortunately, it has been necessary to end security support for some packages before the   │
  │ end of the regular security maintenance life cycle.                                         │
  │                                                                                             │
  │ The following packages found on this system are affected by this:                           │
  │                                                                                             │
  │                                                                                             │
  │ * Source:openjdk-6, ended on 2016-04-15 at version 6b38-1.13.10-1~deb7u1                    │
  │  Details: Not supported in Wheezy LTS                                                       │
  │ https://lists.debian.org/debian-lts/2016/02/msg00153.html                                   │
  │  Affected binary packages:                                                                  │
  │  - icedtea-6-jre-jamvm:amd64 (installed version: 6b38-1.13.10-1~deb7u1)                     │
  │  - openjdk-6-jre-headless:amd64 (installed version: 6b38-1.13.10-1~deb7u1)                  │
  │  - openjdk-6-jre-lib (installed version: 6b38-1.13.10-1~deb7u1)                             │
  │                                                                                             │
  │                                           <Ok>                                              │
  │                                                                                             │
  └─────────────────────────────────────────────────────────────────────────────────────────────┘

However this created another problem with sudo and su:

sudo -i
sudo: effective uid is not 0, is sudo installed setuid root?
su - root
Password: 
su: Authentication failure

It is however possible to login as root via the console, so I have added my and Paul's ssh keys to the root ~/.ssh/authorized_keys file and set /etc/ssh/sshd_config to:

PermitRootLogin without-password

So Paul and I can now ssh in as root rather than as other users if needs be, I also reinstalled sudo so it works again .

Updates on the other servers, PenguinServer:

aptitude install debian-security-support


 ┌──────────────────┤ Configuring debian-security-support ├──────────────────┐
 │                                                                           │
 │ Limited security support for one or more packages                         │
 │                                                                           │
 │ Unfortunately, it has been necessary to limit security support for some   │
 │ packages.                                                                 │
 │                                                                           │
 │ The following packages found on this system are affected by this:         │
 │                                                                           │
 │                                                                           │
 │ * Source:libv8-3.14                                                       │
 │  Details: Not covered by security support, only suitable for trusted      │
 │ content                                                                   │
 │  Affected binary package:                                                 │
 │  - libv8-3.14.5 (installed version: 3.14.5.8-8~bpo70+1)                   │
 │                                                                           │
 │                                  <Ok>                                     │
 │                                                                           │
 └───────────────────────────────────────────────────────────────────────────┘

This is something which, I expect, was installed for the wiki:TransitionResearchWagn site, I'm not sure how much of a concern this should be.

ParrotServer:

2016-05-10      chris
        *       debian-security-support/wheezy : updated

I think we are getting to the stage with all three servers that an upgrade to Debian Jessie would be better done by migrating everything to new server rather than upgrading the existing ones, see also ticket:847.

comment:273 Changed 6 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.35
  • Total Hours changed from 68.87 to 69.22

Debian ocaml security update, dosfstools security update and some other unannounced security updates on PuffinServer:

2016-05-16      chris
        *       dosfstools/wheezy gir1.2-rsvg-2.0/wheezy libidn11/wheezy libidn11-dev/wheezy librsvg2-2/wheezy librsvg2-common/wheezy librsvg2-dev/wheezy : updated

2016-05-13      chris
        *       libksba8/wheezy ocaml-base-nox/wheezy : updated

On PenguinServer:

2016-05-16      chris
        *       gir1.2-rsvg-2.0/wheezy libidn11/wheezy librsvg2-2/wheezy librsvg2-common/wheezy librsvg2-dev/wheezy ocaml-base-nox/wheezy : updated

And ParrotServer:

2016-05-16      chris
        *       libidn11/wheezy librsvg2-2/wheezy librsvg2-common/wheezy : updated

comment:274 Changed 6 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.4
  • Total Hours changed from 69.22 to 69.62

Debian xen security update, nss security update, libgd2 security update and expat security update on PuffinServer:

2016-05-19      chris
        *       libexpat1/wheezy libexpat1-dev/wheezy : updated

2016-05-19      chris
        *       libgd2-xpm/wheezy : updated

2016-05-18      chris
        *       libnss3/wheezy libnss3-1d/wheezy : updated

2016-05-17      chris
        *       libxenstore3.0/wheezy : updated

On PenguinServer:

2016-05-19      chris
        *       libexpat1/wheezy libexpat1-dev/wheezy : updated

2016-05-19      chris
        *       libgd2-xpm/wheezy : updated

And also phpmyadmin security update on Parrot server:

2016-05-19      chris
        *       libexpat1/wheezy : updated

2016-05-19      chris
        *       libgd2-xpm/wheezy : updated

2016-05-18      chris
        *       phpmyadmin/wheezy : updated

comment:275 Changed 6 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 69.62 to 69.77

Debian LTS imagemagick security update on PuffinServer:

2016-05-23      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore-dev/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand-dev/wheezy libmagickwand5/wheezy : updated

On PenguinServer:

2016-05-23      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore-dev/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand-dev/wheezy libmagickwand5/wheezy : updated

And ParrotServer:

2016-05-23      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand5/wheezy : updated

comment:276 Changed 6 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 69.77 to 69.92

Debian LTS debian-security-support - Long term security support update and a as yet unannounced libpq5 update on PuffinServer:

2016-05-27      chris
        *       libpq5/wheezy : updated

2016-05-25      chris
        *       debian-security-support/wheezy : updated

And on PenguinServer:

2016-05-25      chris
        *       debian-security-support/wheezy : updated

And ParrotServer:

2016-05-25      chris
        *       debian-security-support/wheezy : updated

comment:277 Changed 6 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 69.92 to 70.17

Debian LTS postgresql-9.1 bugfix update and eglibc security update on PuffinServer:

2016-05-29      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dbg/wheezy libc6-dev/wheezy locales/wheezy locales-all/wheezy multiarch-support/wheezy : updated

2016-05-27      chris
        *       libpq5/wheezy : updated

And PenguinServer:

2016-05-29      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

And ParrotServer:

2016-05-29      chris
        *       libc-bin/wheezy libc-dev-bin/wheezy libc6/wheezy libc6-dev/wheezy locales/wheezy multiarch-support/wheezy : updated

comment:278 Changed 6 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 70.17 to 70.32

Debian LTS phpmyadmin update on ParrotServer, no announcement yet:

2016-05-30      chris
        *       phpmyadmin/wheezy : updated

comment:279 Changed 6 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 70.32 to 70.47

The Debian LTS phpmyadmin regression update notification is now out.

Debian LTS libtasn1-3 updated on PuffinServer:

2016-05-30      chris
        *       libtasn1-3/wheezy libtasn1-3-dev/wheezy : updated

On PenguinServer:

2016-05-30      chris
        *       libtasn1-3/wheezy : updated

And ParrotServer:

2016-05-30      chris
        *       libtasn1-3/wheezy : updated

comment:280 Changed 6 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 70.47 to 70.72

Debian LTS php5 security update on PenguinServer:

2016-05-31      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

And ParrotServer:

2016-05-31      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

comment:281 Changed 6 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 70.72 to 70.97

Debian LTS graphicsmagick security update on PuffinServer:

2016-06-02      chris
        *       gir1.2-gdkpixbuf-2.0/wheezy imagemagick/wheezy imagemagick-common/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libgdk-pixbuf2.0-dev/wheezy libmagickcore-dev/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand-dev/wheezy libmagickwand5/wheezy : updated

And PenguinServer:

2016-06-02      chris
        *       gir1.2-gdkpixbuf-2.0/wheezy imagemagick/wheezy imagemagick-common/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libgdk-pixbuf2.0-dev/wheezy libmagickcore-dev/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand-dev/wheezy libmagickwand5/wheezy : updated

And ParrotServer:

2016-06-02      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libgdk-pixbuf2.0-0/wheezy libgdk-pixbuf2.0-common/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand5/wheezy : updated
Last edited 6 months ago by chris (previous) (diff)

comment:282 Changed 6 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 70.97 to 71.47

Debian LTS libxml2 security update and Updated Debian 7: 7.11 released updates on PuffinServer:

2016-06-05      chris
        *       base-files/wheezy dpkg/wheezy dpkg-dev/wheezy ldap-utils/wheezy libdpkg-perl/wheezy libgtk-3-0/wheezy libgtk-3-bin/wheezy libgtk-3-common/wheezy libldap-2.4-2/wheezy libldap2-dev/wheezy libxapian22/wheezy tzdata/wheezy tzdata-java/wheezy : updated

2016-06-03      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy : updated

PenguinServer:

2016-06-05      chris
        *       base-files/wheezy dpkg/wheezy dpkg-dev/wheezy libdpkg-perl/wheezy libldap-2.4-2/wheezy libxapian22/wheezy tzdata/wheezy : updated

2016-06-03      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy : updated

And ParrotServer:

2016-06-05      chris
        *       base-files/wheezy dpkg/wheezy libldap-2.4-2/wheezy libxapian22/wheezy tzdata/wheezy : updated

2016-06-03      chris
        *       libxml2/wheezy : updated

comment:283 Changed 6 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 71.47 to 71.62

Debian nss security update on PuffinServer:

2016-06-06      chris
        *       libnss3/wheezy libnss3-1d/wheezy : updated

comment:284 Changed 6 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 71.62 to 71.77

Debian LTS expat security update on PuffinServer:

2016-06-08      chris
        *       libexpat1/wheezy libexpat1-dev/wheezy : updated

PenguinServer:

2016-06-08      chris
        *       libexpat1/wheezy libexpat1-dev/wheezy : updated

And ParrotServer:

2016-06-08      chris
        *       libexpat1/wheezy : updated

comment:285 Changed 5 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 71.77 to 72.27

Debian LTS samba security update, p7zip security update, nspr security update and libxslt security update on PuffinServer:

2016-06-13      chris
        *       libxslt1-dbg/wheezy libxslt1-dev/wheezy libxslt1.1/wheezy : updated

2016-06-12      chris
        *       libnspr4/wheezy libnspr4-0d/wheezy p7zip-full/wheezy : updated

2016-06-09      chris
        *       libsmbclient/wheezy libwbclient0/wheezy samba-common/wheezy samba-common-bin/wheezy smbclient/wheezy : updated

And on PenguinServer:

2016-06-13      chris
        *       libxslt1.1/wheezy : updated

comment:286 Changed 5 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 72.27 to 72.52

Debian LTS imagemagick security update on PuffinServer:

2016-06-17      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore-dev/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand-dev/wheezy libmagickwand5/wheezy linux-libc-dev/wheezy : updated

PenguinServer:

2016-06-17      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore-dev/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand-dev/wheezy libmagickwand5/wheezy linux-libc-dev/wheezy : updated

And ParrotServer:

2016-06-17      chris
        *       imagemagick/wheezy imagemagick-common/wheezy libmagickcore5/wheezy libmagickcore5-extra/wheezy libmagickwand5/wheezy linux-libc-dev/wheezy : updated

comment:287 Changed 5 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 72.52 to 72.77

Upgrade to MariaDB 5.5.50 on PuffinServer on Friday night:

2016-06-17      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

Also note that updates on 2016-06-17 also included a linux security update.

comment:288 Changed 5 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 72.77 to 73.27

Debian LTS python2.7 security update on PuffinServer:

2016-06-21      chris
        *       libpython2.7/wheezy python2.7/wheezy python2.7-dev/wheezy python2.7-minimal/wheezy : updated

And also a Nginx and Passenger update on PenguinServer:

2016-06-23      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

2016-06-21      chris
        *       libpython2.7/wheezy python2.7/wheezy python2.7-minimal/wheezy : updated

And on ParrotServer:

2016-06-21      chris
        *       python2.7/wheezy python2.7-minimal/wheezy : updated

comment:289 Changed 5 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 73.27 to 73.77

Debian LTS nss security update and java-common security update on PuffinServer:

2016-06-27      chris
        *       java-common/wheezy : updated

2016-06-25      chris
        *       libnss3/wheezy libnss3-1d/wheezy : updated

Unannounced Ngnix and Passenger update on PenguinServer:

2016-06-24      chris
        *       nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

comment:290 Changed 5 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 73.77 to 74.02

Debian LTS PHP update (no announcement email about the changes yet), on PenguinServer:

2016-06-29      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

And on ParrotServer:

2016-06-29      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

comment:291 Changed 5 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 74.02 to 74.27

Debian LTS libgd2-xpm update (no announcement email yet) on PuffinServer:

2016-06-29      chris
        *       libgd2-xpm/wheezy : updated

PenguinServer:

2016-06-29      chris
        *       libgd2-xpm/wheezy : updated

And ParrotServer:

2016-06-29      chris
        *       libgd2-xpm/wheezy : updated

comment:292 Changed 5 months ago by chris

The Debian LTS php5 security update and libgd2 security update emails are now available, see the two comments above.

comment:293 Changed 5 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 74.27 to 74.52

Debian LTS wget security update, no email announcement yet, PuffinServer:

2016-06-30      chris
        *       wget/wheezy : updated

PenguinServer:

2016-06-30      chris
        *       wget/wheezy : updated

And ParrotServer:

2016-06-30      chris
        *       wget/wheezy : updated

comment:294 Changed 5 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 74.52 to 75.02

Debian LTS libvirt security update, [https://lists.debian.org/debian-lts-announce/2016/07/msg00004.html sqlite3 security update and icu security update on PuffinServer:

2016-07-06      chris
        *       lemon/wheezy libsqlite3-0/wheezy : updated

2016-07-01      chris
        *       libvirt0/wheezy : updated

Note that I don't see a email regarding the lemon update, it it an installed package I haven't come across before:

aptitude search lemon | grep ^i
i   lemon                           - LALR(1) Parser Generator for C or C++    

On PenguinServer:

2016-07-06      chris
        *       libsqlite3-0/wheezy sqlite3/wheezy : updated

And on ParrotServer:

2016-07-07      chris
        *       libicu48/wheezy : updated

2016-07-06      chris
        *       libsqlite3-0/wheezy : updated

comment:295 Changed 4 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 75.02 to 75.27

Debian LTS binutils security update on PuffinServer:

2016-07-18      chris
        *       binutils/wheezy : updated

And PenguinServer:

2016-07-18      chris
        *       binutils/wheezy : updated

And also phpmyadmin security update on ParrotServer:

2016-07-18      chris
        *       binutils/wheezy : updated

2016-07-17      chris
        *       phpmyadmin/wheezy : updated

comment:296 Changed 4 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 75.27 to 75.42

Debian LTS apache2 security update on ParrotServer, note this issue was addressed yesterday on ticket:921:

2016-07-20      chris
        *       apache2-mpm-itk/wheezy apache2-utils/wheezy apache2.2-bin/wheezy apache2.2-common/wheezy : updated

comment:297 Changed 3 months ago by chris

  • Cc sam added; ade removed
  • Add Hours to Ticket changed from 0.0 to 1.75
  • Total Hours changed from 75.42 to 77.17

Lots of updates done while away and with limited net access -- so they were not reported here at the time, including Debian LTS openssh security update, fontconfig security update, MariaDB 5.5.51, openjdk-7 security update, mysql-5.5 security and regression update, curl security update, openssh security update and perl security update.

On PuffinServer:

2016-08-13      chris
        *       openssh-client/wheezy openssh-server/wheezy ssh/wheezy : updated

2016-08-12      chris
        *       fontconfig/wheezy fontconfig-config/wheezy libfontconfig1/wheezy libfontconfig1-dev/wheezy libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy libpq5/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

2016-08-05      chris
        *       curl/wheezy icedtea-7-jre-jamvm/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy libcurl4-openssl-dev/wheezy libidn11/wheezy libidn11-dev/wheezy openjdk-7-jre-headless/wheezy : updated

2016-08-02      chris
        *       libdbd-mysql-perl/wheezy libxenstore3.0/wheezy openssh-client/wheezy openssh-server/wheezy ssh/wheezy : updated

2016-07-29      chris
        *       libperl5.14/wheezy perl/wheezy perl-base/wheezy perl-modules/wheezy : updated

2016-07-27      chris
        *       libgd2-xpm/wheezy : updated

2016-07-22      chris
        *       ntpdate/wheezy : updated

PenguinServer:

2016-08-13      chris
        *       openssh-client/wheezy openssh-server/wheezy : updated

2016-08-08      chris
        *       fontconfig/wheezy fontconfig-config/wheezy libfontconfig1/wheezy libfontconfig1-dev/wheezy : updated

2016-08-05      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy libidn11/wheezy libmysqlclient-dev/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

2016-08-02      chris
        *       libdbd-mysql-perl/wheezy openssh-client/wheezy openssh-server/wheezy : updated

2016-07-29      chris
        *       libcgi-fast-perl/wheezy libperl5.14/wheezy perl/wheezy perl-base/wheezy perl-modules/wheezy : updated

2016-07-27      chris
        *       libgd2-xpm/wheezy nginx-common/wheezy nginx-extras/wheezy passenger/wheezy passenger-dev/wheezy passenger-doc/wheezy : updated

2016-07-22      chris
        *       ntpdate/wheezy : updated

And ParrotServer:

2016-08-13      chris
        *       openssh-client/wheezy openssh-server/wheezy : updated

2016-08-08      chris
        *       fontconfig/wheezy fontconfig-config/wheezy libfontconfig1/wheezy : updated

2016-08-05      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy libidn11/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

2016-08-02      chris
        *       libdbd-mysql-perl/wheezy openssh-client/wheezy openssh-server/wheezy : updated

2016-07-29      chris
        *       perl/wheezy perl-base/wheezy perl-modules/wheezy : updated

2016-07-27      chris
        *       libgd2-xpm/wheezy : updated

I also noticed that Ade was CC'd on this ticket so I have removed him and added Sam.

comment:298 Changed 3 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 1.0
  • Total Hours changed from 77.17 to 78.17

Once again sorry for not posting these as they were done but I have not been back in the office until today, Debian LTS, tiff3 security update, linux security update, gnupg security and hardening update and libgcrypt11 security update on PuffinServer:

2016-09-04      chris
        *       libtiff4/wheezy libtiff4-dev/wheezy libtiffxx0c2/wheezy : updated

2016-09-03      chris
        *       linux-libc-dev/wheezy : updated

2016-08-27      chris
        *       gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy : updated

2016-08-23      chris
        *       libgcrypt11/wheezy libgcrypt11-dev/wheezy : updated

PenguinServer:

2016-09-04      chris
        *       libtiff4/wheezy libtiff4-dev/wheezy libtiffxx0c2/wheezy : updated

2016-09-03      chris
        *       linux-libc-dev/wheezy : updated

2016-08-27      chris
        *       gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy : updated

2016-08-23      chris
        *       libgcrypt11/wheezy : updated

And ParrotServer:

2016-09-04      chris
        *       libtiff4/wheezy : updated

2016-09-03      chris
        *       linux-libc-dev/wheezy : updated

2016-08-27      chris
        *       gnupg/wheezy gnupg-curl/wheezy gpgv/wheezy : updated

2016-08-23      chris
        *       libgcrypt11/wheezy : updated

comment:299 Changed 2 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 78.17 to 78.67

Debian LTS xen security update, curl security update and MariaDB 5.5.52 updates on PuffinServer:

2016-09-14      chris
        *       libmariadbclient-dev/wheezy libmariadbclient18/wheezy libmariadbd-dev/wheezy libmysqlclient18/wheezy mariadb-client-5.5/wheezy mariadb-client-core-5.5/wheezy mariadb-common/wheezy mariadb-server-5.5/wheezy mariadb-server-core-5.5/wheezy mysql-common/wheezy : updated

2016-09-09      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy libcurl4-openssl-dev/wheezy : updated

2016-09-08      chris
        *       libxenstore3.0/wheezy : updated

PenguinServer:

2016-09-09      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

And icu security update on ParrotServer:

2016-09-09      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

2016-09-08      chris
        *       libicu48/wheezy : updated
Last edited 2 months ago by chris (previous) (diff)

comment:300 Changed 2 months ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.75
  • Total Hours changed from 78.67 to 79.42

Debian LTS curl security update on PuffinServer:

2016-09-17      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy libcurl4-openssl-dev/wheezy : updated

And in addition on PenguinServer, Debian LTS php5 security update and mysql-5.5 security update:

2016-09-18      chris
        *       php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-fpm/wheezy php5-gd/wheezy php5-mysql/wheezy : updated

2016-09-17      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

2016-09-16      chris
        *       libmysqlclient-dev/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

The updates were also applied to ParrotServer above plus Debian LTS phpmyadmin security update:

2016-09-18      chris
        *       libapache2-mod-php5/wheezy php-pear/wheezy php5/wheezy php5-cli/wheezy php5-common/wheezy php5-curl/wheezy php5-dev/wheezy php5-gd/wheezy php5-intl/wheezy php5-mcrypt/wheezy php5-mysql/wheezy php5-xmlrpc/wheezy : updated

2016-09-18      chris
        *       phpmyadmin/wheezy : updated

2016-09-17      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

2016-09-16      chris
        *       libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

comment:301 Changed 8 weeks ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 79.42 to 79.67

Debian LTS OpenSSL security update (announcement email not yet in the archive), on PenguinServer:

2016-09-25      chris
        *       libssl1.0.0/wheezy openssl/wheezy : updated

And ParrotServer:

2016-09-25      chris
        *       libssl-dev/wheezy libssl-doc/wheezy libssl1.0.0/wheezy openssl/wheezy : updated

comment:302 Changed 6 weeks ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 79.67 to 79.92

Debian LTS c-ares security update on PenguinServer:

2016-10-07      chris
        *       libc-ares2/wheezy : updated

comment:303 Changed 5 weeks ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 79.92 to 80.17

Debian LTS libxfixes security update on PenguinServer:

2016-10-14      chris
        *       libxfixes-dev/wheezy libxfixes3/wheezy : updated

And ParrotServer:

2016-10-14      chris
        *       libxfixes3/wheezy : updated

comment:304 Changed 5 weeks ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 80.17 to 80.42

Debian LTS libdbd-mysql-perl security update on PenguinServer:

2016-10-15      chris
        *       libdbd-mysql-perl/wheezy : updated

And ParrotServer:

2016-10-15      chris
        *       libdbd-mysql-perl/wheezy : updated

comment:305 Changed 5 weeks ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 80.42 to 80.67

Debian LTS libsystemd-login update on PenguinServer:

2016-10-17      chris
        *       libsystemd-login0/wheezy : updated

ParrotServer:

2016-10-17      chris
        *       libsystemd-login0/wheezy : updated

comment:306 Changed 5 weeks ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 80.67 to 80.92

Debian LTS libxrandr2 security update on PenguinServer:

2016-10-17      chris
        *       libxrandr-dev/wheezy libxrandr2/wheezy : updated

And ParrotServer:

2016-10-17      chris
        *       libxrandr2/wheezy : updated

comment:307 Changed 5 weeks ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 80.92 to 81.17

Debian LTS libxrender security update on PenguinServer:

2016-10-18      chris
        *       libxrender-dev/wheezy libxrender1/wheezy : updated

And Parrot:Server:

2016-10-18      chris
        *       libxrender1/wheezy : updated

comment:308 Changed 5 weeks ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 81.17 to 81.42

Debian LTS libgd2-xpm update on PenguinServer:

2016-10-18      chris
        *       libgd2-xpm/wheezy : updated

And ParrotServer:

2016-10-18      chris
        *       libgd2-xpm/wheezy : updated

comment:309 Changed 5 weeks ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 81.42 to 81.67

Debian LTS linux security update on PenguinServer:

2016-10-20      chris
        *       libxv1/wheezy linux-libc-dev/wheezy : updated

And ParrotServer:

2016-10-20      chris
        *       linux-libc-dev/wheezy : updated

comment:310 Changed 5 weeks ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.1
  • Total Hours changed from 81.67 to 81.77

Debian LTS bind9 security update on ParrotServer:

2016-10-20      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

comment:311 Changed 4 weeks ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 81.77 to 82.02

Debian LTS ghostscript security update on PenguinServer:

2016-10-25      chris
        *       ghostscript/wheezy libgs9/wheezy libgs9-common/wheezy : updated

And ParrotServer:

2016-10-25      chris
        *       ghostscript/wheezy libgs9/wheezy libgs9-common/wheezy : updated

comment:312 Changed 4 weeks ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 82.02 to 82.27

Debian LTS bash security update and TZ update on PenguinServer:

2016-10-26      chris
        *       tzdata/wheezy : updated

2016-10-26      chris
        *       bash/wheezy : updated

And ParrotServer:

2016-10-26      chris
        *       tzdata/wheezy : updated

2016-10-26      chris
        *       bash/wheezy : updated

comment:313 Changed 4 weeks ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 82.27 to 82.52

Debian LTS libx11 security update, libxi security update and libxtst security update on PenguinServer:

2016-10-27      chris
        *       libx11-6/wheezy libx11-data/wheezy libx11-dev/wheezy libx11-xcb1/wheezy libxi-dev/wheezy libxi6/wheezy libxtst6/wheezy : updated

And ParrotServer:

2016-10-27      chris
        *       libx11-6/wheezy libx11-data/wheezy libxi6/wheezy : updated

comment:314 Changed 3 weeks ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 82.52 to 83.02

Debian LTS tar security update, cairo security update and ghostscript regression update on PenguinServer:

2016-10-31      chris
        *       libxml2/wheezy libxml2-dev/wheezy libxml2-utils/wheezy tar/wheezy : updated

2016-10-28      chris
        *       libcairo-gobject2/wheezy libcairo-script-interpreter2/wheezy libcairo2/wheezy libcairo2-dev/wheezy : updated

2016-10-28      chris
        *       ghostscript/wheezy libgs9/wheezy libgs9-common/wheezy : updated

And ParrotServer:

2016-10-31      chris
        *       libxml2/wheezy tar/wheezy : updated

2016-10-28      chris
        *       libcairo2/wheezy : updated

2016-10-28      chris
        *       ghostscript/wheezy libgs9/wheezy libgs9-common/wheezy : updated
Last edited 3 weeks ago by chris (previous) (diff)

comment:315 Changed 3 weeks ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 83.02 to 83.17

Oops on the last comment I missed reporting Debian LTS tre security update on PenguinServer:

2016-10-27      chris
        *       libtre5/wheezy : updated

comment:316 Changed 3 weeks ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 83.17 to 83.42

Debian LTS tiff3 security update and tiff security update on PenguinServer:

2016-11-02      chris
        *       libtiff4/wheezy libtiff4-dev/wheezy libtiffxx0c2/wheezy : updated

And ParrotServer:

2016-11-02      chris
        *       libtiff4/wheezy : updated

comment:317 Changed 3 weeks ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.1
  • Total Hours changed from 83.42 to 83.52

Debian LTS libwmf update (no email announcement yet) on PenguinServer:

2016-11-02      chris
        *       libwmf-dev/wheezy libwmf0.2-7/wheezy : updated

And ParrotServer:

2016-11-02      chris
        *       libwmf0.2-7/wheezy : updated
Last edited 3 weeks ago by chris (previous) (diff)

comment:318 Changed 3 weeks ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 83.52 to 83.77

The Debian LTS libwmf security update email and last night bind9 security update on ParrotServer:

2016-11-02      chris
        *       bind9-host/wheezy dnsutils/wheezy libbind9-80/wheezy libdns88/wheezy libisc84/wheezy libisccc80/wheezy libisccfg82/wheezy liblwres80/wheezy : updated

comment:319 Changed 2 weeks ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.25
  • Total Hours changed from 83.77 to 84.02

Debian LTS libxslt security update on PenguinServer:

2016-11-06      chris
        *       libxslt1.1/wheezy : updated

comment:320 Changed 2 weeks ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.1
  • Total Hours changed from 84.02 to 84.12

Debian LTS tzdata new upstream version on PenguinServer:

2016-11-06      chris
        *       tzdata/wheezy : updated

And ParrotServer:

2016-11-06      chris
        *       tzdata/wheezy : updated

comment:321 Changed 11 days ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.15
  • Total Hours changed from 84.12 to 84.27

Debian LTS python-imaging security update on PenguinServer:

2016-11-10      chris
        *       python-imaging/wheezy : updated

comment:322 Changed 9 minutes ago by chris

  • Add Hours to Ticket changed from 0.0 to 0.5
  • Total Hours changed from 84.27 to 84.77

Debian LTS sudo security update, mysql-5.5 security update and curl security update applied last week on PenguinServer:

2016-11-17      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

2016-11-16      chris
        *       libmysqlclient-dev/wheezy libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy sudo/wheezy : updated

And ParrotServer:

2016-11-17      chris
        *       curl/wheezy libcurl3/wheezy libcurl3-gnutls/wheezy : updated

2016-11-16      chris
        *       libmysqlclient18/wheezy mysql-client-5.5/wheezy mysql-common/wheezy mysql-server/wheezy mysql-server-5.5/wheezy mysql-server-core-5.5/wheezy : updated

2016-11-14      chris
        *       sudo/wheezy : updated
Last edited 8 minutes ago by chris (previous) (diff)
Note: See TracTickets for help on using tickets.