Package changes:
-adobe-flash-properties-gtk 1:
20190514.1-0ubuntu0.18.04.1 amd64
-adobe-flashplugin 1:
20190514.1-0ubuntu0.18.04.1 amd64
+adobe-flash-properties-gtk 1:
20190709.1-0ubuntu0.18.04.1 amd64
+adobe-flashplugin 1:
20190709.1-0ubuntu0.18.04.1 amd64
-apache2-bin 2.4.29-1ubuntu4.6 amd64
+apache2-bin 2.4.29-1ubuntu4.8 amd64
-apport 2.20.9-0ubuntu7.6 all
-apport-gtk 2.20.9-0ubuntu7.6 all
+apport 2.20.9-0ubuntu7.7 all
+apport-gtk 2.20.9-0ubuntu7.7 all
-aptdaemon 1.1.1+bzr982-0ubuntu19 all
-aptdaemon-data 1.1.1+bzr982-0ubuntu19 all
+aptdaemon 1.1.1+bzr982-0ubuntu19.1 all
+aptdaemon-data 1.1.1+bzr982-0ubuntu19.1 all
-base-files 10.1ubuntu2.4 amd64
+base-files 10.1ubuntu2.5 amd64
-bash 4.4.18-2ubuntu1.1 amd64
+bash 4.4.18-2ubuntu1.2 amd64
-bind9-host 1:9.11.3+dfsg-1ubuntu1.7 amd64
+bind9-host 1:9.11.3+dfsg-1ubuntu1.8 amd64
-bzip2 1.0.6-8.1 amd64
+bzip2 1.0.6-8.1ubuntu0.2 amd64
-dkms 2.3-3ubuntu9.2 all
+dkms 2.3-3ubuntu9.4 all
-dmeventd 2:1.02.145-4.1ubuntu3 amd64
+dmeventd 2:1.02.145-4.1ubuntu3.18.04.1 amd64
-dmsetup 2:1.02.145-4.1ubuntu3 amd64
+dmsetup 2:1.02.145-4.1ubuntu3.18.04.1 amd64
-dnsutils 1:9.11.3+dfsg-1ubuntu1.7 amd64
+dnsutils 1:9.11.3+dfsg-1ubuntu1.8 amd64
-evince 3.28.4-0ubuntu1.1 amd64
+evince 3.28.4-0ubuntu1.2 amd64
-firefox 67.0.2+build2-0ubuntu0.18.04.1 amd64
-firefox-locale-de 67.0.2+build2-0ubuntu0.18.04.1 amd64
+firefox 68.0.1+build1-0ubuntu0.18.04.1 amd64
+firefox-locale-de 68.0.1+build1-0ubuntu0.18.04.1 amd64
-fonts-noto-cjk 1:
20170601+repack1-2 all
+fonts-noto-cjk 1:
20190409+repack1-0ubuntu0.18.04 all
-fonts-opensymbol 2:102.10+LibO6.0.7-0ubuntu0.18.04.6 all
+fonts-opensymbol 2:102.10+LibO6.0.7-0ubuntu0.18.04.8 all
-friendly-recovery 0.2.38ubuntu1 all
+friendly-recovery 0.2.38ubuntu1.1 all
-geth 1.8.27+build18537+bionic amd64
+geth 1.9.1+build19532+bionic amd64
-gir1.2-evince-3.0 3.28.4-0ubuntu1.1 amd64
+gir1.2-evince-3.0 3.28.4-0ubuntu1.2 amd64
-gir1.2-gnomedesktop-3.0 3.28.2-0ubuntu1.3 amd64
+gir1.2-gnomedesktop-3.0 3.28.2-0ubuntu1.5 amd64
-gir1.2-gst-plugins-base-1.0 1.14.1-1ubuntu1~ubuntu18.04.2 amd64
-gir1.2-gstreamer-1.0 1.14.1-1~ubuntu18.04.2 amd64
-gir1.2-gtk-3.0 3.22.30-1ubuntu3 amd64
+gir1.2-gst-plugins-base-1.0 1.14.4-1ubuntu1.1~ubuntu18.04.1 amd64
+gir1.2-gstreamer-1.0 1.14.4-1~ubuntu18.04.1 amd64
+gir1.2-gtk-3.0 3.22.30-1ubuntu4 amd64
-gnome-desktop3-data 3.28.2-0ubuntu1.3 all
+gnome-desktop3-data 3.28.2-0ubuntu1.5 all
-gnome-settings-daemon 3.28.1-0ubuntu1.2 amd64
-gnome-settings-daemon-schemas 3.28.1-0ubuntu1.2 all
+gnome-settings-daemon 3.28.1-0ubuntu1.3 amd64
+gnome-settings-daemon-schemas 3.28.1-0ubuntu1.3 all
-gstreamer1.0-alsa 1.14.1-1ubuntu1~ubuntu18.04.2 amd64
+gstreamer1.0-alsa 1.14.4-1ubuntu1.1~ubuntu18.04.1 amd64
-gstreamer1.0-libav 1.14.1-1~ubuntu18.04.1 amd64
+gstreamer1.0-libav 1.14.4-0ubuntu1~ubuntu18.04.1 amd64
-gstreamer1.0-plugins-base 1.14.1-1ubuntu1~ubuntu18.04.2 amd64
-gstreamer1.0-plugins-base 1.14.1-1ubuntu1~ubuntu18.04.2 i386
-gstreamer1.0-plugins-base-apps 1.14.1-1ubuntu1~ubuntu18.04.2 amd64
-gstreamer1.0-plugins-good 1.14.1-1ubuntu1~ubuntu18.04.1 amd64
-gstreamer1.0-plugins-ugly 1.14.1-1~ubuntu18.04.1 amd64
-gstreamer1.0-pulseaudio 1.14.1-1ubuntu1~ubuntu18.04.1 amd64
-gstreamer1.0-tools 1.14.1-1~ubuntu18.04.2 amd64
+gstreamer1.0-plugins-base 1.14.4-1ubuntu1.1~ubuntu18.04.1 amd64
+gstreamer1.0-plugins-base 1.14.4-1ubuntu1.1~ubuntu18.04.1 i386
+gstreamer1.0-plugins-base-apps 1.14.4-1ubuntu1.1~ubuntu18.04.1 amd64
+gstreamer1.0-plugins-good 1.14.4-1ubuntu1~ubuntu18.04.1 amd64
+gstreamer1.0-plugins-ugly 1.14.4-1~ubuntu18.04.1 amd64
+gstreamer1.0-pulseaudio 1.14.4-1ubuntu1~ubuntu18.04.1 amd64
+gstreamer1.0-tools 1.14.4-1~ubuntu18.04.1 amd64
-gstreamer1.0-x 1.14.1-1ubuntu1~ubuntu18.04.2 amd64
+gstreamer1.0-x 1.14.4-1ubuntu1.1~ubuntu18.04.1 amd64
-gtk-update-icon-cache 3.22.30-1ubuntu3 amd64
+gtk-update-icon-cache 3.22.30-1ubuntu4 amd64
-gvfs 1.36.1-0ubuntu1.3 amd64
-gvfs-backends 1.36.1-0ubuntu1.3 amd64
-gvfs-bin 1.36.1-0ubuntu1.3 amd64
-gvfs-common 1.36.1-0ubuntu1.3 all
-gvfs-daemons 1.36.1-0ubuntu1.3 amd64
-gvfs-fuse 1.36.1-0ubuntu1.3 amd64
-gvfs-libs 1.36.1-0ubuntu1.3 amd64
+gvfs 1.36.1-0ubuntu1.3.3 amd64
+gvfs-backends 1.36.1-0ubuntu1.3.3 amd64
+gvfs-bin 1.36.1-0ubuntu1.3.3 amd64
+gvfs-common 1.36.1-0ubuntu1.3.3 all
+gvfs-daemons 1.36.1-0ubuntu1.3.3 amd64
+gvfs-fuse 1.36.1-0ubuntu1.3.3 amd64
+gvfs-libs 1.36.1-0ubuntu1.3.3 amd64
-imagemagick 8:6.9.7.4+dfsg-16ubuntu6.4 amd64
-imagemagick-6-common 8:6.9.7.4+dfsg-16ubuntu6.4 all
-imagemagick-6.q16 8:6.9.7.4+dfsg-16ubuntu6.4 amd64
-imagemagick-common 8:6.9.7.4+dfsg-16ubuntu6.4 all
+imagemagick 8:6.9.7.4+dfsg-16ubuntu6.7 amd64
+imagemagick-6-common 8:6.9.7.4+dfsg-16ubuntu6.7 all
+imagemagick-6.q16 8:6.9.7.4+dfsg-16ubuntu6.7 amd64
+imagemagick-common 8:6.9.7.4+dfsg-16ubuntu6.7 all
-intel-microcode 3.
20190514.0ubuntu0.18.04.3 amd64
+intel-microcode 3.
20190618.0ubuntu0.18.04.1 amd64
-iperf 2.0.10+dfsg1-1ubuntu0.18.04.1 amd64
+iperf 2.0.10+dfsg1-1ubuntu0.18.04.2 amd64
-iputils-arping 3:
20161105-1ubuntu2 amd64
-iputils-ping 3:
20161105-1ubuntu2 amd64
-iputils-tracepath 3:
20161105-1ubuntu2 amd64
+iputils-arping 3:
20161105-1ubuntu3 amd64
+iputils-ping 3:
20161105-1ubuntu3 amd64
+iputils-tracepath 3:
20161105-1ubuntu3 amd64
-language-pack-en 1:18.04+
20180712 all
+language-pack-en 1:18.04+
20190718 all
-language-pack-gnome-en 1:18.04+
20180712 all
+language-pack-gnome-en 1:18.04+
20190718 all
-language-selector-common 0.188.2 all
-language-selector-gnome 0.188.2 all
+language-selector-common 0.188.3 all
+language-selector-gnome 0.188.3 all
-libbind9-160 1:9.11.3+dfsg-1ubuntu1.7 amd64
+libbind9-160 1:9.11.3+dfsg-1ubuntu1.8 amd64
-libbz2-1.0 1.0.6-8.1 amd64
-libbz2-1.0 1.0.6-8.1 i386
+libbz2-1.0 1.0.6-8.1ubuntu0.2 amd64
+libbz2-1.0 1.0.6-8.1ubuntu0.2 i386
-libdevmapper-event1.02.1 2:1.02.145-4.1ubuntu3 amd64
-libdevmapper1.02.1 2:1.02.145-4.1ubuntu3 amd64
+libdevmapper-event1.02.1 2:1.02.145-4.1ubuntu3.18.04.1 amd64
+libdevmapper1.02.1 2:1.02.145-4.1ubuntu3.18.04.1 amd64
-libdns-export1100 1:9.11.3+dfsg-1ubuntu1.7 amd64
+libdns-export1100 1:9.11.3+dfsg-1ubuntu1.8 amd64
-libdns1100 1:9.11.3+dfsg-1ubuntu1.7 amd64
+libdns1100 1:9.11.3+dfsg-1ubuntu1.8 amd64
-libdrm-amdgpu1 2.4.95-1~18.04.1 amd64
-libdrm-amdgpu1 2.4.95-1~18.04.1 i386
-libdrm-common 2.4.95-1~18.04.1 all
-libdrm-dev 2.4.95-1~18.04.1 amd64
-libdrm-intel1 2.4.95-1~18.04.1 amd64
-libdrm-intel1 2.4.95-1~18.04.1 i386
-libdrm-nouveau2 2.4.95-1~18.04.1 amd64
-libdrm-nouveau2 2.4.95-1~18.04.1 i386
-libdrm-radeon1 2.4.95-1~18.04.1 amd64
-libdrm-radeon1 2.4.95-1~18.04.1 i386
-libdrm2 2.4.95-1~18.04.1 amd64
-libdrm2 2.4.95-1~18.04.1 i386
+libdrm-amdgpu1 2.4.97-1ubuntu1~18.04.1 amd64
+libdrm-amdgpu1 2.4.97-1ubuntu1~18.04.1 i386
+libdrm-common 2.4.97-1ubuntu1~18.04.1 all
+libdrm-dev 2.4.97-1ubuntu1~18.04.1 amd64
+libdrm-intel1 2.4.97-1ubuntu1~18.04.1 amd64
+libdrm-intel1 2.4.97-1ubuntu1~18.04.1 i386
+libdrm-nouveau2 2.4.97-1ubuntu1~18.04.1 amd64
+libdrm-nouveau2 2.4.97-1ubuntu1~18.04.1 i386
+libdrm-radeon1 2.4.97-1ubuntu1~18.04.1 amd64
+libdrm-radeon1 2.4.97-1ubuntu1~18.04.1 i386
+libdrm2 2.4.97-1ubuntu1~18.04.1 amd64
+libdrm2 2.4.97-1ubuntu1~18.04.1 i386
-libebml4v5 1.3.5-2 amd64
+libebml4v5 1.3.5-2ubuntu0.1 amd64
-libegl-mesa0 18.2.8-0ubuntu0~18.04.2 amd64
+libegl-mesa0 19.0.2-1ubuntu1.1~18.04.2 amd64
-libegl1-mesa 18.2.8-0ubuntu0~18.04.2 amd64
+libegl1-mesa 19.0.2-1ubuntu1.1~18.04.2 amd64
-libevdocument3-4 3.28.4-0ubuntu1.1 amd64
+libevdocument3-4 3.28.4-0ubuntu1.2 amd64
-libevview3-3 3.28.4-0ubuntu1.1 amd64
+libevview3-3 3.28.4-0ubuntu1.2 amd64
-libexiv2-14 0.25-3.1ubuntu0.18.04.2 amd64
+libexiv2-14 0.25-3.1ubuntu0.18.04.3 amd64
-libexpat1 2.2.5-3 amd64
-libexpat1 2.2.5-3 i386
-libexpat1-dev 2.2.5-3 amd64
+libexpat1 2.2.5-3ubuntu0.1 amd64
+libexpat1 2.2.5-3ubuntu0.1 i386
+libexpat1-dev 2.2.5-3ubuntu0.1 amd64
-libgbm1 18.2.8-0ubuntu0~18.04.2 amd64
+libgbm1 19.0.2-1ubuntu1.1~18.04.2 amd64
-libgl1-mesa-dev 18.2.8-0ubuntu0~18.04.2 amd64
+libgl1-mesa-dev 19.0.2-1ubuntu1.1~18.04.2 amd64
-libgl1-mesa-glx 18.2.8-0ubuntu0~18.04.2 amd64
-libgl1-mesa-glx 18.2.8-0ubuntu0~18.04.2 i386
+libgl1-mesa-glx 19.0.2-1ubuntu1.1~18.04.2 amd64
+libgl1-mesa-glx 19.0.2-1ubuntu1.1~18.04.2 i386
-libgles2-mesa 18.2.8-0ubuntu0~18.04.2 amd64
+libgles2-mesa 19.0.2-1ubuntu1.1~18.04.2 amd64
-libglib2.0-0 2.56.4-0ubuntu0.18.04.3 amd64
-libglib2.0-0 2.56.4-0ubuntu0.18.04.3 i386
-libglib2.0-bin 2.56.4-0ubuntu0.18.04.3 amd64
-libglib2.0-data 2.56.4-0ubuntu0.18.04.3 all
-libglib2.0-dev 2.56.4-0ubuntu0.18.04.3 amd64
-libglib2.0-dev-bin 2.56.4-0ubuntu0.18.04.3 amd64
+libglib2.0-0 2.56.4-0ubuntu0.18.04.4 amd64
+libglib2.0-0 2.56.4-0ubuntu0.18.04.4 i386
+libglib2.0-bin 2.56.4-0ubuntu0.18.04.4 amd64
+libglib2.0-data 2.56.4-0ubuntu0.18.04.4 all
+libglib2.0-dev 2.56.4-0ubuntu0.18.04.4 amd64
+libglib2.0-dev-bin 2.56.4-0ubuntu0.18.04.4 amd64
-libgnome-desktop-3-17 3.28.2-0ubuntu1.3 amd64
+libgnome-desktop-3-17 3.28.2-0ubuntu1.5 amd64
-libgstreamer-plugins-base1.0-0 1.14.1-1ubuntu1~ubuntu18.04.2 amd64
-libgstreamer-plugins-base1.0-0 1.14.1-1ubuntu1~ubuntu18.04.2 i386
-libgstreamer-plugins-good1.0-0 1.14.1-1ubuntu1~ubuntu18.04.1 amd64
-libgstreamer1.0-0 1.14.1-1~ubuntu18.04.2 amd64
-libgstreamer1.0-0 1.14.1-1~ubuntu18.04.2 i386
+libgstreamer-plugins-base1.0-0 1.14.4-1ubuntu1.1~ubuntu18.04.1 amd64
+libgstreamer-plugins-base1.0-0 1.14.4-1ubuntu1.1~ubuntu18.04.1 i386
+libgstreamer-plugins-good1.0-0 1.14.4-1ubuntu1~ubuntu18.04.1 amd64
+libgstreamer1.0-0 1.14.4-1~ubuntu18.04.1 amd64
+libgstreamer1.0-0 1.14.4-1~ubuntu18.04.1 i386
-libgtk-3-common 3.22.30-1ubuntu3 all
+libgtk-3-common 3.22.30-1ubuntu4 all
-libimage-magick-perl 8:6.9.7.4+dfsg-16ubuntu6.4 all
-libimage-magick-q16-perl 8:6.9.7.4+dfsg-16ubuntu6.4 amd64
+libimage-magick-perl 8:6.9.7.4+dfsg-16ubuntu6.7 all
+libimage-magick-q16-perl 8:6.9.7.4+dfsg-16ubuntu6.7 amd64
-libirs160 1:9.11.3+dfsg-1ubuntu1.7 amd64
+libirs160 1:9.11.3+dfsg-1ubuntu1.8 amd64
-libisc-export169 1:9.11.3+dfsg-1ubuntu1.7 amd64
+libisc-export169 1:9.11.3+dfsg-1ubuntu1.8 amd64
-libisc169 1:9.11.3+dfsg-1ubuntu1.7 amd64
+libisc169 1:9.11.3+dfsg-1ubuntu1.8 amd64
-libisccc160 1:9.11.3+dfsg-1ubuntu1.7 amd64
+libisccc160 1:9.11.3+dfsg-1ubuntu1.8 amd64
-libisccfg160 1:9.11.3+dfsg-1ubuntu1.7 amd64
+libisccfg160 1:9.11.3+dfsg-1ubuntu1.8 amd64
-liblvm2app2.2 2.02.176-4.1ubuntu3 amd64
-liblvm2cmd2.02 2.02.176-4.1ubuntu3 amd64
+liblvm2app2.2 2.02.176-4.1ubuntu3.18.04.1 amd64
+liblvm2cmd2.02 2.02.176-4.1ubuntu3.18.04.1 amd64
-liblwres160 1:9.11.3+dfsg-1ubuntu1.7 amd64
+liblwres160 1:9.11.3+dfsg-1ubuntu1.8 amd64
-libmagick++-6.q16-7 8:6.9.7.4+dfsg-16ubuntu6.4 amd64
-libmagickcore-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.4 amd64
-libmagickcore-6.q16-3-extra 8:6.9.7.4+dfsg-16ubuntu6.4 amd64
-libmagickwand-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.4 amd64
+libmagick++-6.q16-7 8:6.9.7.4+dfsg-16ubuntu6.7 amd64
+libmagickcore-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.7 amd64
+libmagickcore-6.q16-3-extra 8:6.9.7.4+dfsg-16ubuntu6.7 amd64
+libmagickwand-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.7 amd64
-libmspack0 0.6-3ubuntu0.2 amd64
+libmspack0 0.6-3ubuntu0.3 amd64
-libmysofa0 0.6~dfsg0-2 amd64
-libmysqlclient20 5.7.26-0ubuntu0.18.04.1 amd64
+libmysofa0 0.6~dfsg0-2ubuntu0.18.04.1 amd64
+libmysqlclient20 5.7.27-0ubuntu0.18.04.1 amd64
-libnss-myhostname 237-3ubuntu10.22 amd64
-libnss-systemd 237-3ubuntu10.22 amd64
-libnss3 2:3.35-2ubuntu2.2 amd64
-libnss3 2:3.35-2ubuntu2.2 i386
+libnss-myhostname 237-3ubuntu10.24 amd64
+libnss-systemd 237-3ubuntu10.24 amd64
+libnss3 2:3.35-2ubuntu2.3 amd64
+libnss3 2:3.35-2ubuntu2.3 i386
-libpam-systemd 237-3ubuntu10.22 amd64
+libpam-systemd 237-3ubuntu10.24 amd64
-libpoppler-glib8 0.62.0-2ubuntu2.8 amd64
+libpoppler-glib8 0.62.0-2ubuntu2.9 amd64
-libpoppler73 0.62.0-2ubuntu2.8 amd64
+libpoppler73 0.62.0-2ubuntu2.9 amd64
-libpq5 10.8-0ubuntu0.18.04.1 amd64
+libpq5 10.9-0ubuntu0.18.04.1 amd64
-librados2 12.2.11-0ubuntu0.18.04.2 amd64
+librados2 12.2.12-0ubuntu0.18.04.1 amd64
-librbd1 12.2.11-0ubuntu0.18.04.2 amd64
+librbd1 12.2.12-0ubuntu0.18.04.1 amd64
-libreoffice-common 1:6.0.7-0ubuntu0.18.04.6 all
+libreoffice-common 1:6.0.7-0ubuntu0.18.04.8 all
-libreoffice-gtk 1:6.0.7-0ubuntu0.18.04.6 all
+libreoffice-gtk 1:6.0.7-0ubuntu0.18.04.8 all
-libreoffice-help-de 1:6.0.7-0ubuntu0.18.04.4 all
-libreoffice-help-en-us 1:6.0.7-0ubuntu0.18.04.4 all
+libreoffice-help-de 1:6.0.7-0ubuntu0.18.04.8 all
+libreoffice-help-en-us 1:6.0.7-0ubuntu0.18.04.8 all
-libreoffice-l10n-de 1:6.0.7-0ubuntu0.18.04.4 all
+libreoffice-l10n-de 1:6.0.7-0ubuntu0.18.04.8 all
-libreoffice-pdfimport 1:6.0.7-0ubuntu0.18.04.6 all
-libreoffice-style-breeze 1:6.0.7-0ubuntu0.18.04.6 all
-libreoffice-style-galaxy 1:6.0.7-0ubuntu0.18.04.6 all
-libreoffice-style-tango 1:6.0.7-0ubuntu0.18.04.6 all
+libreoffice-pdfimport 1:6.0.7-0ubuntu0.18.04.8 all
+libreoffice-style-breeze 1:6.0.7-0ubuntu0.18.04.8 all
+libreoffice-style-galaxy 1:6.0.7-0ubuntu0.18.04.8 all
+libreoffice-style-tango 1:6.0.7-0ubuntu0.18.04.8 all
-libreofficekit-data 1:6.0.7-0ubuntu0.18.04.6 all
+libreofficekit-data 1:6.0.7-0ubuntu0.18.04.8 all
-libsane-common 1.0.27-1~experimental3ubuntu2 all
+libsane-common 1.0.27-1~experimental3ubuntu2.1 all
-libsane1 1.0.27-1~experimental3ubuntu2 amd64
-libsane1 1.0.27-1~experimental3ubuntu2 i386
+libsane1 1.0.27-1~experimental3ubuntu2.1 amd64
+libsane1 1.0.27-1~experimental3ubuntu2.1 i386
-libsqlite3-0 3.22.0-1 amd64
-libsqlite3-0 3.22.0-1 i386
+libsqlite3-0 3.22.0-1ubuntu0.1 amd64
+libsqlite3-0 3.22.0-1ubuntu0.1 i386
-libssl-dev 1.1.1-1ubuntu2.1~18.04.2 amd64
-libssl-doc 1.1.1-1ubuntu2.1~18.04.2 all
+libssl-dev 1.1.1-1ubuntu2.1~18.04.4 amd64
+libssl-doc 1.1.1-1ubuntu2.1~18.04.4 all
-libssl1.1 1.1.1-1ubuntu2.1~18.04.2 amd64
-libssl1.1 1.1.1-1ubuntu2.1~18.04.2 i386
+libssl1.1 1.1.1-1ubuntu2.1~18.04.4 amd64
+libssl1.1 1.1.1-1ubuntu2.1~18.04.4 i386
-libsystemd0 237-3ubuntu10.22 amd64
-libsystemd0 237-3ubuntu10.22 i386
+libsystemd0 237-3ubuntu10.24 amd64
+libsystemd0 237-3ubuntu10.24 i386
-libudev-dev 237-3ubuntu10.22 amd64
+libudev-dev 237-3ubuntu10.24 amd64
-libudev1 237-3ubuntu10.22 amd64
-libudev1 237-3ubuntu10.22 i386
+libudev1 237-3ubuntu10.24 amd64
+libudev1 237-3ubuntu10.24 i386
-libvlc-bin 3.0.4-1ubuntu0.2 amd64
-libvlc5 3.0.4-1ubuntu0.2 amd64
+libvlc-bin 3.0.7.1-0ubuntu18.04.1 amd64
+libvlc5 3.0.7.1-0ubuntu18.04.1 amd64
-libvlccore9 3.0.4-1ubuntu0.2 amd64
+libvlccore9 3.0.7.1-0ubuntu18.04.1 amd64
-libwavpack1 5.1.0-2ubuntu1.3 amd64
+libwavpack1 5.1.0-2ubuntu1.4 amd64
-libwhoopsie0 0.2.62 amd64
+libwhoopsie0 0.2.62ubuntu0.1 amd64
-libzmq5 4.2.5-1ubuntu0.1 amd64
+libzmq5 4.2.5-1ubuntu0.2 amd64
-linux-firmware 1.173.6 all
+linux-firmware 1.173.9 all
-linux-libc-dev 4.15.0-51.55 amd64
+linux-libc-dev 4.15.0-55.60 amd64
-lvm2 2.02.176-4.1ubuntu3 amd64
+lvm2 2.02.176-4.1ubuntu3.18.04.1 amd64
-mariadb-client-10.3 1:10.3.15+maria~bionic amd64
-mariadb-client-core-10.3 1:10.3.15+maria~bionic amd64
-mariadb-common 1:10.3.15+maria~bionic all
-mariadb-server 1:10.3.15+maria~bionic all
+mariadb-client-10.3 1:10.3.16+maria~bionic amd64
+mariadb-client-core-10.3 1:10.3.16+maria~bionic amd64
+mariadb-common 1:10.3.16+maria~bionic all
+mariadb-server 1:10.3.16+maria~bionic all
-mariadb-server-10.3 1:10.3.15+maria~bionic amd64
-mariadb-server-core-10.3 1:10.3.15+maria~bionic amd64
+mariadb-server-10.3 1:10.3.16+maria~bionic amd64
+mariadb-server-core-10.3 1:10.3.16+maria~bionic amd64
-mesa-common-dev 18.2.8-0ubuntu0~18.04.2 amd64
+mesa-common-dev 19.0.2-1ubuntu1.1~18.04.2 amd64
-metasploit-framework 5.0.30+
20190613190935~1rapid7-1 amd64
+metasploit-framework 5.0.38+
20190725102540~1rapid7-1 amd64
-mysql-common 1:10.3.15+maria~bionic all
+mysql-common 1:10.3.16+maria~bionic all
-openssl 1.1.1-1ubuntu2.1~18.04.2 amd64
-openvpn 2.4.4-2ubuntu1.2 amd64
+openssl 1.1.1-1ubuntu2.1~18.04.4 amd64
+openvpn 2.4.4-2ubuntu1.3 amd64
-patch 2.7.6-2ubuntu1 amd64
+patch 2.7.6-2ubuntu1.1 amd64
-policykit-desktop-privileges 0.20 all
+policykit-desktop-privileges 0.20ubuntu18.04.1 all
-poppler-utils 0.62.0-2ubuntu2.8 amd64
+poppler-utils 0.62.0-2ubuntu2.9 amd64
-python3-apport 2.20.9-0ubuntu7.6 all
+python3-apport 2.20.9-0ubuntu7.7 all
-python3-aptdaemon 1.1.1+bzr982-0ubuntu19 all
-python3-aptdaemon.gtk3widgets 1.1.1+bzr982-0ubuntu19 all
+python3-aptdaemon 1.1.1+bzr982-0ubuntu19.1 all
+python3-aptdaemon.gtk3widgets 1.1.1+bzr982-0ubuntu19.1 all
-python3-distupgrade 1:18.04.33 all
+python3-distupgrade 1:18.04.34 all
-python3-problem-report 2.20.9-0ubuntu7.6 all
+python3-problem-report 2.20.9-0ubuntu7.7 all
-qemu-block-extra 1:2.11+dfsg-1ubuntu7.14 amd64
-qemu-kvm 1:2.11+dfsg-1ubuntu7.14 amd64
-qemu-system-common 1:2.11+dfsg-1ubuntu7.14 amd64
-qemu-system-x86 1:2.11+dfsg-1ubuntu7.14 amd64
-qemu-utils 1:2.11+dfsg-1ubuntu7.14 amd64
+qemu-block-extra 1:2.11+dfsg-1ubuntu7.15 amd64
+qemu-kvm 1:2.11+dfsg-1ubuntu7.15 amd64
+qemu-system-common 1:2.11+dfsg-1ubuntu7.15 amd64
+qemu-system-x86 1:2.11+dfsg-1ubuntu7.15 amd64
+qemu-utils 1:2.11+dfsg-1ubuntu7.15 amd64
-sane-utils 1.0.27-1~experimental3ubuntu2 amd64
+sane-utils 1.0.27-1~experimental3ubuntu2.1 amd64
-snapd 2.38+18.04 amd64
+snapd 2.39.2+18.04 amd64
-sqlite3 3.22.0-1 amd64
+sqlite3 3.22.0-1ubuntu0.1 amd64
-systemd 237-3ubuntu10.22 amd64
-systemd-sysv 237-3ubuntu10.22 amd64
+systemd 237-3ubuntu10.24 amd64
+systemd-sysv 237-3ubuntu10.24 amd64
-teamviewer 14.3.4730 amd64
+teamviewer 14.4.2669 amd64
-thunderbird 1:60.7.0+build1-0ubuntu0.18.04.1 amd64
-thunderbird-gnome-support 1:60.7.0+build1-0ubuntu0.18.04.1 amd64
-thunderbird-locale-de 1:60.7.0+build1-0ubuntu0.18.04.1 amd64
-thunderbird-locale-en 1:60.7.0+build1-0ubuntu0.18.04.1 amd64
-thunderbird-locale-en-us 1:60.7.0+build1-0ubuntu0.18.04.1 all
+thunderbird 1:60.8.0+build1-0ubuntu0.18.04.1 amd64
+thunderbird-gnome-support 1:60.8.0+build1-0ubuntu0.18.04.1 amd64
+thunderbird-locale-de 1:60.8.0+build1-0ubuntu0.18.04.1 amd64
+thunderbird-locale-en 1:60.8.0+build1-0ubuntu0.18.04.1 amd64
+thunderbird-locale-en-us 1:60.8.0+build1-0ubuntu0.18.04.1 all
-tzdata 2019a-0ubuntu0.18.04 all
+tzdata 2019b-0ubuntu0.18.04 all
-ubuntu-core-launcher 2.38+18.04 amd64
+ubuntu-core-launcher 2.39.2+18.04 amd64
-ubuntu-minimal 1.417.1 amd64
+ubuntu-minimal 1.417.2 amd64
-ubuntu-release-upgrader-core 1:18.04.33 all
-ubuntu-release-upgrader-gtk 1:18.04.33 all
+ubuntu-release-upgrader-core 1:18.04.34 all
+ubuntu-release-upgrader-gtk 1:18.04.34 all
-ubuntu-standard 1.417.1 amd64
+ubuntu-standard 1.417.2 amd64
-udev 237-3ubuntu10.22 amd64
+udev 237-3ubuntu10.24 amd64
-uno-libs3 6.0.7-0ubuntu0.18.04.6 amd64
+uno-libs3 6.0.7-0ubuntu0.18.04.8 amd64
-ure 6.0.7-0ubuntu0.18.04.6 amd64
+ure 6.0.7-0ubuntu0.18.04.8 amd64
-usb-creator-common 0.3.5 amd64
-usb-creator-gtk 0.3.5 amd64
+usb-creator-common 0.3.5ubuntu18.04.1 amd64
+usb-creator-gtk 0.3.5ubuntu18.04.1 amd64
-vlc 3.0.4-1ubuntu0.2 amd64
-vlc-bin 3.0.4-1ubuntu0.2 amd64
-vlc-data 3.0.4-1ubuntu0.2 all
-vlc-l10n 3.0.4-1ubuntu0.2 all
+vlc 3.0.7.1-0ubuntu18.04.1 amd64
+vlc-bin 3.0.7.1-0ubuntu18.04.1 amd64
+vlc-data 3.0.7.1-0ubuntu18.04.1 all
+vlc-l10n 3.0.7.1-0ubuntu18.04.1 all
-vlc-plugin-base 3.0.4-1ubuntu0.2 amd64
-vlc-plugin-notify 3.0.4-1ubuntu0.2 amd64
-vlc-plugin-qt 3.0.4-1ubuntu0.2 amd64
-vlc-plugin-samba 3.0.4-1ubuntu0.2 amd64
-vlc-plugin-skins2 3.0.4-1ubuntu0.2 amd64
-vlc-plugin-video-output 3.0.4-1ubuntu0.2 amd64
-vlc-plugin-video-splitter 3.0.4-1ubuntu0.2 amd64
-vlc-plugin-visualization 3.0.4-1ubuntu0.2 amd64
+vlc-plugin-base 3.0.7.1-0ubuntu18.04.1 amd64
+vlc-plugin-notify 3.0.7.1-0ubuntu18.04.1 amd64
+vlc-plugin-qt 3.0.7.1-0ubuntu18.04.1 amd64
+vlc-plugin-samba 3.0.7.1-0ubuntu18.04.1 amd64
+vlc-plugin-skins2 3.0.7.1-0ubuntu18.04.1 amd64
+vlc-plugin-video-output 3.0.7.1-0ubuntu18.04.1 amd64
+vlc-plugin-video-splitter 3.0.7.1-0ubuntu18.04.1 amd64
+vlc-plugin-visualization 3.0.7.1-0ubuntu18.04.1 amd64
-whoopsie 0.2.62 amd64
+whoopsie 0.2.62ubuntu0.1 amd64
-xserver-common 2:1.19.6-1ubuntu4.2 all
-xserver-xephyr 2:1.19.6-1ubuntu4.2 amd64
+xserver-common 2:1.19.6-1ubuntu4.3 all
+xserver-xephyr 2:1.19.6-1ubuntu4.3 amd64
-xserver-xorg-core 2:1.19.6-1ubuntu4.2 amd64
+xserver-xorg-core 2:1.19.6-1ubuntu4.3 amd64
-xserver-xorg-legacy 2:1.19.6-1ubuntu4.2 amd64
+xserver-xorg-legacy 2:1.19.6-1ubuntu4.3 amd64
-xwayland 2:1.19.6-1ubuntu4.2 amd64
+xwayland 2:1.19.6-1ubuntu4.3 amd64
-youtube-dl 2018.03.14-1 all
+youtube-dl 2018.03.14-1ubuntu18.04.1 all
maybe chmod 0644 'vim/vimrc'
maybe chmod 0644 'vim/vimrc.tiny'
maybe chmod 0644 'wgetrc'
-maybe chmod 0644 'whoopsie'
maybe chmod 0755 'wildmidi'
maybe chmod 0644 'wildmidi/wildmidi.cfg'
maybe chmod 0755 'wireshark'
<policy domain="cache" name="shared-secret" value="passphrase" stealth="true"/>
<!-- disable ghostscript format types -->
<policy domain="coder" rights="none" pattern="PS" />
- <policy domain="coder" rights="none" pattern="EPI" />
+ <policy domain="coder" rights="none" pattern="EPS" />
<policy domain="coder" rights="none" pattern="PDF" />
<policy domain="coder" rights="none" pattern="XPS" />
</policymap>
# from directly.
#include <abstractions/private-files>
- audit deny @{HOME}/.gnupg/** mrwkl,
- audit deny @{HOME}/.ssh/** mrwkl,
- audit deny @{HOME}/.gnome2_private/** mrwkl,
- audit deny @{HOME}/.gnome2/keyrings/** mrwkl,
- audit deny @{HOME}/.kde/share/apps/kwallet/** mrwkl,
- audit deny @{HOME}/.pki/nssdb/** w,
-
+ audit deny @{HOME}/.gnupg/{,**} mrwkl,
+ audit deny @{HOME}/.ssh/{,**} mrwkl,
+ audit deny @{HOME}/.gnome2_private/{,**} mrwkl,
+ audit deny @{HOME}/.gnome2/ w,
+ audit deny @{HOME}/.gnome2/keyrings/{,**} mrwkl,
+ audit deny @{HOME}/.kde/{,share/,share/apps/} w,
+ audit deny @{HOME}/.kde/share/apps/kwallet/{,**} mrwkl,
+ audit deny @{HOME}/.pki/{,nssdb/} w,
+ audit deny @{HOME}/.pki/nssdb/{,**} wl,
+
+ audit deny @{HOME}/.mozilla/{,**/} w,
audit deny @{HOME}/.mozilla/*/*/* mrwkl,
- audit deny @{HOME}/.mozilla/**/bookmarkbackups/** mrwkl,
- audit deny @{HOME}/.mozilla/**/chrome/** mrwkl,
- audit deny @{HOME}/.mozilla/**/extensions/** mrwkl,
- audit deny @{HOME}/.mozilla/**/gm_scripts/** mrwkl,
-
- audit deny @{HOME}/.config/chromium/** mrwkl,
- audit deny @{HOME}/.evolution/** mrwkl,
- audit deny @{HOME}/.config/evolution/** mrwkl,
- audit deny @{HOME}/.kde/share/config/** mrwkl,
- audit deny @{HOME}/.kde/share/apps/kmail/** mrwkl,
+ audit deny @{HOME}/.mozilla/**/bookmarkbackups/{,**} mrwkl,
+ audit deny @{HOME}/.mozilla/**/chrome/{,**} mrwkl,
+ audit deny @{HOME}/.mozilla/**/extensions/{,**} mrwkl,
+ audit deny @{HOME}/.mozilla/**/gm_scripts/{,**} mrwkl,
+
+ audit deny @{HOME}/.config/ w,
+ audit deny @{HOME}/.config/chromium/{,**} mrwkl,
+ audit deny @{HOME}/.config/evolution/{,**} mrwkl,
+ audit deny @{HOME}/.evolution/{,**} mrwkl,
+ audit deny @{HOME}/.kde/{,share/,share/apps/} w,
+ audit deny @{HOME}/.kde/share/config/{,**} mrwkl,
+ audit deny @{HOME}/.kde/share/apps/kmail/{,**} mrwkl,
+ audit deny @{HOME}/.{,mozilla-}thunderbird/{,**/} w,
audit deny @{HOME}/.{,mozilla-}thunderbird/*/* mrwkl,
- audit deny @{HOME}/.{,mozilla-}thunderbird/*/[^C][^a][^c][^h][^e]*/** mrwkl,
+ audit deny @{HOME}/.{,mozilla-}thunderbird/*/[^C][^a][^c][^h][^e]*/{,**} mrwkl,
# When LP: #451422 is fixed, change the above to simply be:
##include <abstractions/private-files-strict>
# vim:syntax=apparmor
-# Author: Kees Cook <kees@canonical.com>
-# Jamie Strandboge <jamie@canonical.com>
+
+# evince is not written with application confinement in mind and is designed to
+# operate within a trusted desktop session where anything running within the
+# user's session is trusted. That said, evince will often process untrusted
+# input (PDFs, images, etc). Ideally evince would be written in such a way that
+# image processing is separate from the main process and that processing
+# happens in a restrictive sandbox, but unfortunately that is not currently the
+# case. Because evince will process untrusted input, this profile aims to
+# provide some hardening, but considering evince's design and other factors such
+# as X, gsettings, accessibility, translations, DBus session and system
+# services, etc, complete confinement is not possible.
#include <tunables/global>
#include <abstractions/audio>
#include <abstractions/bash>
#include <abstractions/cups-client>
- #include <abstractions/dbus>
- #include <abstractions/dbus-session>
#include <abstractions/dbus-accessibility>
#include <abstractions/evince>
#include <abstractions/ibus>
#include <abstractions/ubuntu-console-email>
#include <abstractions/ubuntu-media-players>
+ # For now, let evince talk to any session services over dbus. We can
+ # blacklist any problematic ones (but note, evince uses libsecret :\)
+ #include <abstractions/dbus-session>
+
+ #include <abstractions/dbus-strict>
+ dbus (receive) bus=system,
+ # Allow getting information from various system services
+ dbus (send)
+ bus=system
+ member="Get*"
+ peer=(label=unconfined),
+ # Allow talking to avahi with whatever polkit allows
+ dbus (send)
+ bus=system
+ interface="org.freedesktop.Avahi{,.*}",
+ # Allow talking to colord with whatever polkit allows
+ dbus (send)
+ bus=system
+ interface="org.freedesktop.ColorManager{,.*}",
+
# Terminals for using console applications. These abstractions should ideally
# have 'ix' to restrict access to what only evince is allowed to do
#include <abstractions/ubuntu-gnome-terminal>
# For Send to
/usr/bin/nautilus-sendto Cx -> sanitized_helper,
+ # GLib desktop launch helper (used under the hood by g_app_info_launch)
+ /usr/lib/@{multiarch}/glib-[0-9]*/gio-launch-desktop rmix,
+ /usr/bin/env ixr,
+
# allow directory listings (ie 'r' on directories) so browsing via the file
# dialog works
/ r,
#include <abstractions/audio>
#include <abstractions/bash>
#include <abstractions/cups-client>
- #include <abstractions/dbus-session>
#include <abstractions/dbus-accessibility>
- #include <abstractions/dbus-strict>
#include <abstractions/evince>
#include <abstractions/ibus>
#include <abstractions/nameservice>
#include <abstractions/ubuntu-console-email>
#include <abstractions/ubuntu-media-players>
+ # For now, let evince talk to any session services over dbus. We can
+ # blacklist any problematic ones (but note, evince uses libsecret :\)
+ #include <abstractions/dbus-session>
+
+ #include <abstractions/dbus-strict>
+ dbus (receive) bus=system,
+ # Allow getting information from various system services
+ dbus (send)
+ bus=system
+ member="Get*"
+ peer=(label=unconfined),
+ # Allow talking to avahi with whatever polkit allows
+ dbus (send)
+ bus=system
+ interface="org.freedesktop.Avahi{,.*}",
+ # Allow talking to colord with whatever polkit allows
+ dbus (send)
+ bus=system
+ interface="org.freedesktop.ColorManager{,.*}",
+
+
# Terminals for using console applications. These abstractions should ideally
# have 'ix' to restrict access to what only evince is allowed to do
#include <abstractions/ubuntu-gnome-terminal>
}
/usr/bin/evince-thumbnailer {
- #include <abstractions/dbus-session>
- #include <abstractions/evince>
+ #include <abstractions/base>
+ #include <abstractions/private-files-strict>
+
+ #include <abstractions/fonts>
+ deny @{HOME}/.{,cache/}fontconfig/** wl,
+ deny @{HOME}/missfont.log wl,
+
+ #include <abstractions/dbus-session-strict>
+ dbus (receive) bus=session,
+ dbus (send)
+ bus=session
+ path="/org/gtk/vfs/mounttracker"
+ interface="org.gtk.vfs.MountTracker"
+ member="ListMountableInfo"
+ peer=(label=unconfined),
+
+ # updating gvfs-metadata for thumbnails is unneeded, so explicitly deny it
+ deny dbus (send)
+ bus=session
+ path="/org/gtk/vfs/metadata"
+ interface="org.gtk.vfs.Metadata"
+ member="GetTreeFromDevice"
+ peer=(label=unconfined),
+ deny @{HOME}/.local/share/gvfs-metadata/* r,
# The thumbnailer doesn't need access to everything in the nameservice
# abstraction. Allow reading of /etc/passwd and /etc/group, but suppress
network inet dgram,
network inet6 dgram,
+ /etc/papersize r,
+
/usr/bin/evince-thumbnailer mr,
- # Lenient, but remember we still have abstractions/private-files-strict in
- # effect).
+ /etc/texmf/ r,
+ /etc/texmf/** r,
+ /etc/xpdf/* r,
+
+ /usr/bin/gs-esp ixr,
+ /usr/bin/mktexpk Cx -> sanitized_helper,
+ /usr/bin/mktextfm Cx -> sanitized_helper,
+ /usr/bin/dvipdfm Cx -> sanitized_helper,
+ /usr/bin/dvipdfmx Cx -> sanitized_helper,
+
+ # supported archivers
+ /{usr/,}bin/gzip ixr,
+ /{usr/,}bin/bzip2 ixr,
+ /usr/bin/unrar* ixr,
+ /usr/bin/unzip ixr,
+ /usr/bin/7zr ixr,
+ /usr/lib/p7zip/7zr ixr,
+ /usr/bin/7za ixr,
+ /usr/lib/p7zip/7za ixr,
+ /usr/bin/zipnote ixr,
+ /{usr/,}bin/tar ixr,
+ /usr/bin/xz ixr,
+
+ # miscellaneous access for the above
+ owner @{PROC}/@{pid}/fd/ r,
+ owner @{PROC}/@{pid}/mountinfo r,
+ /sys/devices/system/cpu/ r,
+
+ # allow read access to anything in /usr/share, for plugins and input methods
+ /usr/local/share/** r,
+ /usr/share/** r,
+ /usr/lib/ghostscript/** mr,
+ /var/lib/ghostscript/** r,
+ /var/lib/texmf/** r,
+
+ # from http://live.gnome.org/Evince/SupportedDocumentFormats. Allow
+ # read for all supported file formats
+ /**.[bB][mM][pP] r,
+ /**.[dD][jJ][vV][uU] r,
+ /**.[dD][vV][iI] r,
+ /**.[gG][iI][fF] r,
+ /**.[jJ][pP][gG] r,
+ /**.[jJ][pP][eE][gG] r,
+ /**.[oO][dD][pP] r,
+ /**.[fFpP][dD][fF] r,
+ /**.[pP][nN][mM] r,
+ /**.[pP][nN][gG] r,
+ /**.[pP][sS] r,
+ /**.[eE][pP][sS] r,
+ /**.[eE][pP][sS][fFiI23] r,
+ /**.[tT][iI][fF] r,
+ /**.[tT][iI][fF][fF] r,
+ /**.[xX][pP][mM] r,
+ /**.[gG][zZ] r,
+ /**.[bB][zZ]2 r,
+ /**.[cC][bB][rRzZ7] r,
+ /**.[xX][zZ] r,
+
+ owner @{HOME}/.texlive*/** r,
+ owner @{HOME}/.texmf*/** r,
+ owner @{HOME}/.local/share/{,flatpak/exports/share/}mime/** r,
+ owner @{HOME}/.local/share/{,flatpak/exports/share/}mime/** r,
+
+ # With the network rules above, this allows data exfiltration for files
+ # not covered by private-files-strict.
@{HOME}/ r,
- owner @{HOME}/** rw,
- owner /media/** rw,
+ owner @{HOME}/[^.]** r,
+ owner /media/** r,
+
+ owner /tmp/.gnome_desktop_thumbnail* w,
+ owner /tmp/gnome-desktop-thumbnailer* w,
+ owner /tmp/evince-thumbnailer*/{,**} rw,
+
+ # Site-specific additions and overrides. See local/README for details.
+ #include <local/usr.bin.evince>
}
# set up snap-specific private /tmp dir
capability chown,
/tmp/ rw,
- /tmp/snap.*/ w,
- /tmp/snap.*/tmp/ w,
+ /tmp/snap.*/ rw,
+ /tmp/snap.*/tmp/ rw,
mount options=(rw private) -> /tmp/,
mount options=(rw bind) /tmp/snap.*/tmp/ -> /tmp/,
mount fstype=devpts options=(rw) devpts -> /dev/pts/,
@{HOMEDIRS}/.ecryptfs/*/.Private/ r,
@{HOMEDIRS}/.ecryptfs/*/.Private/** mrixwlk,
- # Allow snap-confine to move to the void
- /var/lib/snapd/void/ r,
+ # Allow snap-confine to move to the void, creating it if necessary.
+ /var/lib/snapd/void/ rw,
# Allow snap-confine to read snap contexts
/var/lib/snapd/context/snap.* r,
/var/lib/snapd/hostfs/usr/lib{,exec,64}/snapd/snap-update-ns r,
# ..snap-confine is, conceptually, re-executing and uses snap-update-ns
- # from the core snap. Note that the location of the core snap varies from
- # distribution to distribution. The variants here represent different
- # locations of snap mount directory across distributions.
- /{,var/lib/snapd/}snap/core/*/usr/lib/snapd/snap-update-ns r,
+ # from the core or snapd snaps. Note that the location of the actual snap
+ # varies from distribution to distribution. The variants here represent
+ # different locations of snap mount directory across distributions.
+ /{,var/lib/snapd/}snap/{core,snapd}/*/usr/lib/snapd/snap-update-ns r,
# ...snap-confine is, conceptually, re-executing and uses snap-update-ns
- # from the core snap but we are already inside the constructed mount
- # namespace. Here the apparmor kernel module re-constructs the path to
- # snap-update-ns using the "hostfs" mount entry rather than the more
- # "natural" /snap mount entry but we have no control over that. This is
- # reported as (LP: #1716339). The variants here represent different
- # locations of snap mount directory across distributions.
- /var/lib/snapd/hostfs/{,var/lib/snapd/}snap/core/*/usr/lib/snapd/snap-update-ns r,
+ # from the core snap or snapd snap, but we are already inside the
+ # constructed mount namespace. Here the apparmor kernel module
+ # re-constructs the path to snap-update-ns using the "hostfs" mount entry
+ # rather than the more "natural" /snap mount entry but we have no control
+ # over that. This is reported as (LP: #1716339). The variants here
+ # represent different locations of snap mount directory across
+ # distributions.
+ /var/lib/snapd/hostfs/{,var/lib/snapd/}snap/{core,snapd}/*/usr/lib/snapd/snap-update-ns r,
# Allow executing snap-discard-ns, just like the set for snap-update-ns
# above but with the key difference that snap-discard-ns does not
/usr/lib{,exec,64}/snapd/snap-discard-ns rix,
/var/lib/snapd/hostfs/usr/lib{,exec,64}/snapd/snap-discard-ns rix,
- /{,var/lib/snapd/}snap/core/*/usr/lib/snapd/snap-discard-ns rix,
- /var/lib/snapd/hostfs/{,var/lib/snapd/}snap/core/*/usr/lib/snapd/snap-discard-ns rix,
+ /{,var/lib/snapd/}snap/{core,snapd}/*/usr/lib/snapd/snap-discard-ns rix,
+ /var/lib/snapd/hostfs/{,var/lib/snapd/}snap/{core,snapd}/*/usr/lib/snapd/snap-discard-ns rix,
# Allow mounting /var/lib/jenkinks from the host into the snap.
mount options=(rw rbind) /var/lib/jenkins/ -> /tmp/snap.rootfs_*/var/lib/jenkins/,
flashso="/usr/lib/adobe-flashplugin/libpepflashplayer.so"
if test -f "$flashso"; then
- CHROMIUM_FLAGS="$CHROMIUM_FLAGS --ppapi-flash-path=$flashso --ppapi-flash-version=32.0.0.192"
+ CHROMIUM_FLAGS="$CHROMIUM_FLAGS --ppapi-flash-path=$flashso --ppapi-flash-version=32.0.0.223"
echo "Using PPAPI flash."
else
echo "PPAPI flash has config file in /etc, but library does not exist and won't be used. Package is uninstalled, not purged."
<family>Noto Sans CJK KR</family>
<family>Noto Sans CJK SC</family>
<family>Noto Sans CJK TC</family>
+ <family>Noto Sans CJK HK</family>
</prefer>
</alias>
<alias>
<family>Noto Sans Mono CJK KR</family>
<family>Noto Sans Mono CJK SC</family>
<family>Noto Sans Mono CJK TC</family>
+ <family>Noto Sans Mono CJK HK</family>
</prefer>
</alias>
</fontconfig>
<string>zh-hk</string>
</test>
<edit name="family" mode="prepend" binding="strong">
- <string>Noto Sans CJK TC</string>
+ <string>Noto Sans CJK HK</string>
<string>AR PL UMing HK</string>
<string>AR PL New Sung</string>
<string>HYSong</string>
</test>
<edit name="family" mode="prepend" binding="strong">
<string>DejaVu Sans Mono</string>
- <string>Noto Sans Mono CJK TC</string>
+ <string>Noto Sans Mono CJK HK</string>
<string>AR PL UMing HK</string>
<string>AR PL New Sung</string>
<string>HYSong</string>
esac
if [ -x /usr/lib/dkms/dkms_autoinstaller ]; then
- exec /usr/lib/dkms/dkms_autoinstaller start $inst_kern > /dev/null
+ exec /usr/lib/dkms/dkms_autoinstaller start $inst_kern
fi
if ! _check_kernel_dir $inst_kern ; then
esac
if [ -x /usr/lib/dkms/dkms_autoinstaller ]; then
- exec /usr/lib/dkms/dkms_autoinstaller start $inst_kern > /dev/null
+ exec /usr/lib/dkms/dkms_autoinstaller start $inst_kern
fi
if ! _check_kernel_dir $inst_kern ; then
-# Generated by LVM2 version 2.02.176(2) (2017-11-03): Fri Aug 24 15:23:51 2018
+# Generated by LVM2 version 2.02.176(2) (2017-11-03): Fri Jul 26 08:39:04 2019
contents = "Text Format Volume Group"
version = 1
description = "Created *after* executing 'vgcfgbackup'"
-creation_host = "zenbook" # Linux zenbook 4.10.0-32-generic #36~16.04.1-Ubuntu SMP Wed Aug 9 09:19:02 UTC 2017 x86_64
-creation_time = 1535117031 # Fri Aug 24 15:23:51 2018
+creation_host = "zenbook" # Linux zenbook 4.18.5-041805-generic #201808241320 SMP Fri Aug 24 13:22:12 UTC 2018 x86_64
+creation_time = 1564123144 # Fri Jul 26 08:39:04 2019
ubuntu-vg {
id = "iGNPYk-QMOA-fa9p-L6CG-71WP-vdqm-C1xbGg"
[bin ] PK = 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
[bin ] SK = dc5641dcd04e9cd404982e9177002743a5c27b8b39636d56e6544f76061760dac23de5710782c706e1766f98e619d4956ec4ecfcd49c940d1d79e8c1739446312c0bbdfcac0aac5560cc809780b963a1134d209cb9e8843961f8951e97955f1dae30b15a42621daa619deafead896bf9082d7bc0f790f7d7dc2aeccceacda7cde3ff5c851348e565927f4967f02469623724e037f03626d7b5e907317f9ea60ee2f2ea08a8cb9287e0210121d53cd2faed19aec2c85e613683af2ddbd01ce47559af9a1bc2b7ed122982a818c1845f122f2bdac8e9c2ed8dc9a9a5384ec641c39d85012d4bdc62d0848fa5f1956e46596058af165be3be3d3c1dc5be02380aad7c7ffd4b48ee6f9a7399ad05517884315bfd48b076a8eac73bd8e90b4b76f267ac1d3a94eb0821cc3d0bb23766e2f0974df5232d340cea565797a2b9b2d27494991f955e30ed2e5c26ff7507957f2c8d6be113d34270555453dcba58942e6d6e89550e990b9f4ec4327e9fc6325ed9ea01e77c2df60381582b4c51d896d99e10c1ffdcb6e5c14c1854f164c5c017f89584617ae6fdb3a146582d281903e0d8c07f3db0fb00acf47fa69a8b6fe3581644533b04970457a04d19ce22efb74d6fef395b1fcc3cfd11e14f0690d5c49552fd1a3b8a69b74618a451426e688acdc19505de4add131bbd4d290d5d61c2ab9dbfa59c509679bfa8d6f569b3c7f136f7582eabb467ccb5094d141bfc49fdbe1eb99f63bd41d7f8e99fd3195cb2d851d7e9ef976922abf8665fec03b803c22d159a74f9965ae3efef4d556ecb6fe112fd8af2f8777b48eab4ded1a8370b64d532a397c8166cad26c126d3d4e6802367bd874bde66c8573f631b9680922f8495b9a8c221407a01b0e572cbbafc4a9564ec05
[bin ] SRPPasswordMachineIdentifier = 2331d140c7670af7230122a130323e7b0a4dc9af0d6179e2b247bad4eb1a272d30f7344d56e2a1aad0159a6eb0369ef70146854bf3a3b9d9da302aa3fb519f88c64cd7a190541e91a4d432ea891ca731b1e2cbc060bfbe624da88e3368aaf0fffd7ea4b8e3a8f5414047fa3ee2f6ed9d
-[strng] Version = "14.3.4730 "
+[strng] Version = "14.4.2669 "
+++ /dev/null
-[General]
-report_metrics=true