aports, branch 2.5-stable

main/xen: security upgrade to 4.2.5 and patches

2014-10-23T09:48:32+00:00

The 4.2.5 release fixes:
CVE-2014-2599 / XSA-89 HVMOP_set_mem_access is not preemptible
CVE-2014-3124 / XSA-92 HVMOP_set_mem_type allows invalid P2M entries to be
                       created
CVE-2014-3967,CVE-2014-3968 / XSA-96 Vulnerabilities in HVM MSI injection
CVE-2014-4021 / XSA-100 Hypervisor heap contents leaked to guests

In addition we add patches for:
CVE-2014-7154 / XSA-104 Race condition in HVMOP_track_dirty_vram
CVE-2014-7155 / XSA-105 Missing privilege level checks in x86 HLT, LGDT,
                        LIDT, and LMSW emulation
CVE-2014-7156 / XSA-106 Missing privilege level checks in x86 emulation of
                        software interrupts
CVE-2014-7188 / XSA-108 Improper MSR range used for x2APIC emulation

fixes #3412
fixes #3457

main/dbus: security upgrade to 1.6.24 (CVE-2014-3635,CVE-2014-3636,CVE-2014-3637,CVE-2014-3638,CVE-2014-3639)

2014-10-22T12:56:04+00:00

fixes #3449

main/python: security upgrade to 2.7.8 (CVE-2014-7185)

2014-10-22T12:45:52+00:00

fixes #3462

main/openssl: security upgrade to 1.0.1j (CVE-2014-3513,CVE-2014-3567,CVE-2014-3568)

2014-10-16T07:21:12+00:00

fixes #3434

main/bash: security upgrade to 4.2.051 (CVE-2014-7186,CVE-2014-7187)

2014-10-02T14:13:56+00:00

fixes #3408

main/sqiod: fix CVE-2014-6270, CVE-2014-7141 and CVE-2014-7142

2014-10-01T09:10:24+00:00

fixes #3388

main/squid: security fix for CVE-2014-3609

2014-10-01T08:42:21+00:00

fixes #3384

main/perl-plack: security upgrade to 1.0031 (CVE-2014-5269)

2014-09-30T07:59:43+00:00

fixes #3327

main/perl-file-sharedir-install: new aport

2014-09-30T07:50:35+00:00

Install shared files
http://search.cpan.org/dist/File-ShareDir-Install/
(cherry picked from commit 6861ecf094bb7090efa45976e4f945da3faa9a43)

main/bash: security upgrade to 4.2.50 (CVE-2014-7169)

2014-09-30T07:08:54+00:00

fixes #3403