committing changes in /etc after apt run

Package changes:
-collaboraoffice 22.05.10-2 amd64
-collaboraoffice-ure 22.05.10-2 amd64
+collaboraoffice 22.05.10-7 amd64
+collaboraoffice-ure 22.05.10-7 amd64
-collaboraofficebasis-calc 22.05.10-2 amd64
-collaboraofficebasis-core 22.05.10-2 amd64
-collaboraofficebasis-draw 22.05.10-2 amd64
-collaboraofficebasis-en-us 22.05.10-2 amd64
-collaboraofficebasis-extension-pdf-import 22.05.10-2 amd64
-collaboraofficebasis-graphicfilter 22.05.10-2 amd64
-collaboraofficebasis-images 22.05.10-2 amd64
-collaboraofficebasis-impress 22.05.10-2 amd64
-collaboraofficebasis-math 22.05.10-2 amd64
-collaboraofficebasis-ooofonts 22.05.10-2 amd64
-collaboraofficebasis-ooolinguistic 22.05.10-2 amd64
-collaboraofficebasis-writer 22.05.10-2 amd64
+collaboraofficebasis-calc 22.05.10-7 amd64
+collaboraofficebasis-core 22.05.10-7 amd64
+collaboraofficebasis-draw 22.05.10-7 amd64
+collaboraofficebasis-en-us 22.05.10-7 amd64
+collaboraofficebasis-extension-pdf-import 22.05.10-7 amd64
+collaboraofficebasis-graphicfilter 22.05.10-7 amd64
+collaboraofficebasis-images 22.05.10-7 amd64
+collaboraofficebasis-impress 22.05.10-7 amd64
+collaboraofficebasis-math 22.05.10-7 amd64
+collaboraofficebasis-ooofonts 22.05.10-7 amd64
+collaboraofficebasis-ooolinguistic 22.05.10-7 amd64
+collaboraofficebasis-writer 22.05.10-7 amd64
-coolwsd 22.05.10.2-1 amd64
+coolwsd 22.05.10.8-1 amd64
-curl 7.58.0-2ubuntu3.22 amd64
+curl 7.58.0-2ubuntu3.23 amd64
-firefox 110.0+linuxmint1+tricia amd64
-firefox-locale-de 110.0+linuxmint1+tricia amd64
-firefox-locale-en 110.0+linuxmint1+tricia amd64
+firefox 110.0.1+linuxmint1+tricia amd64
+firefox-locale-de 110.0.1+linuxmint1+tricia amd64
+firefox-locale-en 110.0.1+linuxmint1+tricia amd64
-git 1:2.17.1-1ubuntu0.16 amd64
-git-man 1:2.17.1-1ubuntu0.16 all
-gitweb 1:2.17.1-1ubuntu0.16 all
+git 1:2.17.1-1ubuntu0.17 amd64
+git-man 1:2.17.1-1ubuntu0.17 all
+gitweb 1:2.17.1-1ubuntu0.17 all
-libapache2-mod-php7.2 7.2.24-0ubuntu0.18.04.16 amd64
+libapache2-mod-php7.2 7.2.24-0ubuntu0.18.04.17 amd64
-libc-ares2 1.14.0-1ubuntu0.1 amd64
+libc-ares2 1.14.0-1ubuntu0.2 amd64
-libcurl3-gnutls 7.58.0-2ubuntu3.22 amd64
-libcurl4 7.58.0-2ubuntu3.22 amd64
+libcurl3-gnutls 7.58.0-2ubuntu3.23 amd64
+libcurl4 7.58.0-2ubuntu3.23 amd64
-libnss3 2:3.35-2ubuntu2.15 amd64
-libnss3 2:3.35-2ubuntu2.15 i386
+libnss3 2:3.35-2ubuntu2.16 amd64
+libnss3 2:3.35-2ubuntu2.16 i386
-libsox-fmt-alsa 14.4.2-3ubuntu0.18.04.1 amd64
-libsox-fmt-base 14.4.2-3ubuntu0.18.04.1 amd64
+libsox-fmt-alsa 14.4.2-3ubuntu0.18.04.2 amd64
+libsox-fmt-base 14.4.2-3ubuntu0.18.04.2 amd64
-libsox3 14.4.2-3ubuntu0.18.04.1 amd64
+libsox3 14.4.2-3ubuntu0.18.04.2 amd64
-linux-libc-dev 4.15.0-204.215 amd64
+linux-libc-dev 4.15.0-206.217 amd64
-openjdk-11-jre 11.0.17+8-1ubuntu2~18.04 amd64
-openjdk-11-jre-headless 11.0.17+8-1ubuntu2~18.04 amd64
-openjdk-17-jre 17.0.5+8-2ubuntu1~18.04 amd64
-openjdk-17-jre-headless 17.0.5+8-2ubuntu1~18.04 amd64
+openjdk-11-jre 11.0.18+10-0ubuntu1~18.04.1 amd64
+openjdk-11-jre-headless 11.0.18+10-0ubuntu1~18.04.1 amd64
+openjdk-17-jre 17.0.6+10-0ubuntu1~18.04.1 amd64
+openjdk-17-jre-headless 17.0.6+10-0ubuntu1~18.04.1 amd64
-openjdk-8-jre 8u352-ga-1~18.04 amd64
-openjdk-8-jre-headless 8u352-ga-1~18.04 amd64
+openjdk-8-jre 8u362-ga-0ubuntu1~18.04.1 amd64
+openjdk-8-jre-headless 8u362-ga-0ubuntu1~18.04.1 amd64
-php7.2 7.2.24-0ubuntu0.18.04.16 all
-php7.2-bcmath 7.2.24-0ubuntu0.18.04.16 amd64
-php7.2-bz2 7.2.24-0ubuntu0.18.04.16 amd64
-php7.2-cli 7.2.24-0ubuntu0.18.04.16 amd64
-php7.2-common 7.2.24-0ubuntu0.18.04.16 amd64
-php7.2-curl 7.2.24-0ubuntu0.18.04.16 amd64
-php7.2-fpm 7.2.24-0ubuntu0.18.04.16 amd64
-php7.2-gd 7.2.24-0ubuntu0.18.04.16 amd64
-php7.2-gmp 7.2.24-0ubuntu0.18.04.16 amd64
-php7.2-intl 7.2.24-0ubuntu0.18.04.16 amd64
-php7.2-json 7.2.24-0ubuntu0.18.04.16 amd64
-php7.2-ldap 7.2.24-0ubuntu0.18.04.16 amd64
-php7.2-mbstring 7.2.24-0ubuntu0.18.04.16 amd64
-php7.2-mysql 7.2.24-0ubuntu0.18.04.16 amd64
-php7.2-opcache 7.2.24-0ubuntu0.18.04.16 amd64
-php7.2-readline 7.2.24-0ubuntu0.18.04.16 amd64
-php7.2-soap 7.2.24-0ubuntu0.18.04.16 amd64
-php7.2-sqlite3 7.2.24-0ubuntu0.18.04.16 amd64
-php7.2-xml 7.2.24-0ubuntu0.18.04.16 amd64
-php7.2-zip 7.2.24-0ubuntu0.18.04.16 amd64
+php7.2 7.2.24-0ubuntu0.18.04.17 all
+php7.2-bcmath 7.2.24-0ubuntu0.18.04.17 amd64
+php7.2-bz2 7.2.24-0ubuntu0.18.04.17 amd64
+php7.2-cli 7.2.24-0ubuntu0.18.04.17 amd64
+php7.2-common 7.2.24-0ubuntu0.18.04.17 amd64
+php7.2-curl 7.2.24-0ubuntu0.18.04.17 amd64
+php7.2-fpm 7.2.24-0ubuntu0.18.04.17 amd64
+php7.2-gd 7.2.24-0ubuntu0.18.04.17 amd64
+php7.2-gmp 7.2.24-0ubuntu0.18.04.17 amd64
+php7.2-intl 7.2.24-0ubuntu0.18.04.17 amd64
+php7.2-json 7.2.24-0ubuntu0.18.04.17 amd64
+php7.2-ldap 7.2.24-0ubuntu0.18.04.17 amd64
+php7.2-mbstring 7.2.24-0ubuntu0.18.04.17 amd64
+php7.2-mysql 7.2.24-0ubuntu0.18.04.17 amd64
+php7.2-opcache 7.2.24-0ubuntu0.18.04.17 amd64
+php7.2-readline 7.2.24-0ubuntu0.18.04.17 amd64
+php7.2-soap 7.2.24-0ubuntu0.18.04.17 amd64
+php7.2-sqlite3 7.2.24-0ubuntu0.18.04.17 amd64
+php7.2-xml 7.2.24-0ubuntu0.18.04.17 amd64
+php7.2-zip 7.2.24-0ubuntu0.18.04.17 amd64
-python-pip 9.0.1-2.3~ubuntu1.18.04.6 all
-python-pip-whl 9.0.1-2.3~ubuntu1.18.04.6 all
+python-pip 9.0.1-2.3~ubuntu1.18.04.8 all
+python-pip-whl 9.0.1-2.3~ubuntu1.18.04.8 all
-sox 14.4.2-3ubuntu0.18.04.1 amd64
+sox 14.4.2-3ubuntu0.18.04.2 amd64
-tar 1.29b-2ubuntu0.3 amd64
+tar 1.29b-2ubuntu0.4 amd64
-tcpdump 4.9.3-0ubuntu0.18.04.2 amd64
+tcpdump 4.9.3-0ubuntu0.18.04.3 amd64
-ubuntu-advantage-tools 27.13.5~18.04.1 amd64
+ubuntu-advantage-tools 27.13.6~18.04.1 amd64

diff --git a/apparmor.d/usr.sbin.tcpdump b/apparmor.d/usr.sbin.tcpdump
index 7a7da4f954f66a035af8ebbb8954c23075442f2f..c8c7f6649cfe80d46c57a46063037e1348275cdc 100644 (file)
--- a/apparmor.d/usr.sbin.tcpdump
+++ b/apparmor.d/usr.sbin.tcpdump
@@ -58,6 +58,10 @@
 
   /usr/sbin/tcpdump mr,
 
+  # allow printing to stdout/stderr when inside a container
+  # (LP: #1667016)
+  /dev/pts/* rw,
+
   # Site-specific additions and overrides. See local/README for details.
   #include <local/usr.sbin.tcpdump>
 }

diff --git a/java-17-openjdk/jfr/default.jfc b/java-17-openjdk/jfr/default.jfc
index 653d4235c2d3b2191b7a91971c79036908fc6c95..74a7c487e1f93fe1dd3ad1ba438cda2922c71fa5 100644 (file)
--- a/java-17-openjdk/jfr/default.jfc
+++ b/java-17-openjdk/jfr/default.jfc
@@ -521,6 +521,10 @@
       <setting name="enabled" control="compiler-enabled-failure">false</setting>
     </event>
 
+    <event name="jdk.JITRestart">
+      <setting name="enabled" control="compiler-enabled">true</setting>
+    </event>
+
     <event name="jdk.CodeSweeperConfiguration">
       <setting name="enabled" control="compiler-enabled">true</setting>
       <setting name="period">beginChunk</setting>

diff --git a/java-17-openjdk/jfr/profile.jfc b/java-17-openjdk/jfr/profile.jfc
index cb66119791f55e3f7dfa86b642c5b586dbdd51b3..df9c599661d433c76400986ee60cd8c6bb5d0ca3 100644 (file)
--- a/java-17-openjdk/jfr/profile.jfc
+++ b/java-17-openjdk/jfr/profile.jfc
@@ -521,6 +521,10 @@
       <setting name="enabled" control="compiler-enabled-failure">false</setting>
     </event>
 
+    <event name="jdk.JITRestart">
+      <setting name="enabled" control="compiler-enabled">true</setting>
+    </event>
+
     <event name="jdk.CodeSweeperConfiguration">
       <setting name="enabled" control="compiler-enabled">true</setting>
       <setting name="period">beginChunk</setting>

diff --git a/java-8-openjdk/security/java.security b/java-8-openjdk/security/java.security
index d5d429ac9f0f393e47ae25bb51531ced978d5759..7c546b9d7265a1b69966a45f2f7bb297fabce892 100644 (file)
--- a/java-8-openjdk/security/java.security
+++ b/java-8-openjdk/security/java.security
@@ -528,7 +528,7 @@ jdk.disabled.namedCurves = secp112r1, secp112r2, secp128r1, secp128r2, \
 # can be included in the disabledAlgorithms properties.  These properties are
 # to help manage common actions easier across multiple disabledAlgorithm
 # properties.
-# There is one defined security property:  jdk.disabled.NamedCurves
+# There is one defined security property:  jdk.disabled.namedCurves
 # See the property for more specific details.
 #
 #
@@ -605,6 +605,7 @@ jdk.disabled.namedCurves = secp112r1, secp112r2, secp128r1, secp128r2, \
 #
 jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \
     RSA keySize < 1024, DSA keySize < 1024, EC keySize < 224, \
+    SHA1 usage SignedJAR & denyAfter 2019-01-01, \
     include jdk.disabled.namedCurves
 
 #
@@ -669,7 +670,8 @@ jdk.security.legacyAlgorithms=SHA1, \
 # See "jdk.certpath.disabledAlgorithms" for syntax descriptions.
 #
 jdk.jar.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, \
-      DSA keySize < 1024, include jdk.disabled.namedCurves
+      DSA keySize < 1024, SHA1 denyAfter 2019-01-01, \
+      include jdk.disabled.namedCurves
 
 #
 # Algorithm restrictions for Secure Socket Layer/Transport Layer Security