16.04.4

Revision 3 as of 2018-02-20 15:50:59

Clear message

This is a brief summary of bugs fixed between Ubuntu 16.04.2 and 16.04.3. This summary covers only changes to packages in main and restricted, which account for all packages in the officially-supported CD images; there are further changes to various packages in universe and multiverse. Some of these fixes were by Ubuntu developers directly, while others were by upstream developers and backported to Ubuntu. For full details, see the individual package changelogs.

In addition to the bugs listed below, this update includes all security updates from the Ubuntu Security Notice list affecting Ubuntu 16.04.2 LTS that were released up to and including July 31, 2017. The last update included was USN-3366-2 (OpenJDK 8 regression).

Installation bug fixes

Updated CD images are provided with this release, including fixes for some installation bugs. (Many installation problems are hardware-specific; for those, see "Hardware support bugs" below.)

livecd-rootfs

1513529

Replace sources.list generated using COMPONENTS with the sources.list from an Ubuntu Server installation (i.e. with all components enabled, and all deb-src lines commented).

livecd-rootfs

1627931

Fix the manifest generation in OVA files so that ovf files don't have double extensions.

livecd-rootfs

1656293

Fix the OVF's metadata to include Ubuntu specific identifiers and descriptions instead of the generic Linux ones.

livecd-rootfs

1637290

ubuntu-cpc: Remove redundant copy of grub files.

live-build

1668847

debian/patches/ubuntu-debootstrap-demotions.patch: remove packages after bootstrap that have been demoted.

live-build

1678042

ubuntu-debootstrap-demotions.patch: Hard-code the removals instead of trying to play fancy games with detection of demotions

dpkg

1663749

Cherry-pick patch from git to limit preallocation to files over 16KiB, fixing installation performance regression

livecd-rootfs

1687752

live-build/ubuntu-cpc/hooks/999-extras.binary: Exit on first failure.

debian-installer

1705137

Use predictable names for non-PCI platform NICs.

livecd-rootfs

1704013

live-build/auto/config: Filter libgles1-mesa out of tasks, as it is not a dependency of anything in updates anymore, fixing mate/myth

ubiquity

1622686

src/panel/panel.c: set stricter size/extend rules for the panel so that it looks nicer if its scaling is too great.

ubiquity

1646585

Automatic update of included source packages: console-setup 1.108ubuntu15.3, flash-kernel 3.0~rc.4ubuntu62.2, grub-installer 1.128ubuntu5.1, hw-detect 1.117ubuntu2.1, netcfg 1.135ubuntu4.5, partman-auto 134ubuntu1.1, partman-btrfs 18ubuntu1.1, partman- partitioning 110ubuntu4.1, preseed 1.71ubuntu1.1, hw-detect 1.117ubuntu2.2.

Upgrade bug fixes

These changes fix upgrade issues, smoothing the way for future upgrades to later releases of Ubuntu.

makedev

1675163

Don't attempt to create /dev devices when inside a container.

update-manager

1654008

Use a 64 bit integer for launch-time instead of a 32 bit one which won't work someday.

update-notifier

1654008

Switch to using a 64 bit integer for launch-time as update-manager also did.

unattended-upgrades

1654600

Complete the solution for the unattended-upgrades.service unit not correctly working:

software-properties

1679784

depend on libgtk2-perl to ensure it's available, since it was not seeded on the desktop at release time. This is only a Recommends: in zesty, but we need to ensure this isn't ignored on upgrade.

unattended-upgrades

1687129

Add UbuntuESM to the list of sources automatically upgraded from by default.

isc-dhcp

1176046

debian/control : Add "Replaces:" option for package isc-dhcp-client to allow the packaging system to remove "isc-dhcp-client-noddns" on systems on which it is installed and replace it by "isc-dhcp-client" during a release upgrade from Trusty to Xenial.

ubuntu-release-upgrader

1700829

do-release-upgrade: Clarify that the "-d" switch is only for upgrading from the latest supported release to the development release, not any release. Additionally, provide a specific error message if run with -d and not running the latest supported release.

update-manager

1700829

update-manager: Clarify that the "-d" switch is only for upgrading from the latest supported release to the development release, not any release.

unattended-upgrades

1686470

download-only option, enabling us to download updates at a random time of day by default but apply them predictably in the 6am-7am window.

Desktop fixes

These changes mainly affect desktop installations of Ubuntu, Kubuntu, Edubuntu and other Ubuntu-based systems.

xserver-xorg-video-amdgpu

1639896

further support for Polaris

imagemagick

1589580

SECURITY REGRESSION: text coder issue

libreoffice

1569500

fix crash with nullptr SdrObjList

libreoffice

1566050

fix crash with ScCsvGrid living beyond VCL shutdown

libreoffice

1560328

fix crash with non-empty BlendFrameCache in late VCL shutdown

libappindicator

1600136

AppIndicator: fix icon and theme paths when running in $SNAP environment

appmenu-qt5

1600136

IconCache: get the proper theme path based on the fact we're using a themed icon or not

appmenu-qt5

1606246

AppMenuPlatformMenuBar: Don't initialize X11 related functions in other environments

sni-qt

627195

statusnotifieritem: reset app usertime on activation to ensure compiz will raise it

sni-qt

1600136

IconCache: get the proper theme path based on the fact we're using a themed icon or not

network-manager-applet

1619354

New upstream bug fix release

network-manager-applet

1651019

Add patches showing wwan options after logout/in:

desktop-file-utils

1666100

Use GNOME Software as default snap: URL handler

gtk+3.0

1550983

d/p/gdk-x11-Check-if-we-have-access-to-GL-before-using-G.patch: add proposed patch from upstream Bugzilla to let GDK X11 initialization complete successfully when libGL.so.1 is not available

gnome-software

1662750

Hide 3rd party / non-free license warnings and just show as "Unknown"

gnome-software

1621971

Add handler for snap:// URLs

gnome-software

1662749

Hide .desktop file from startup applications

firefox

1671079

Don't crash if LOGNAME is not set in the environment

oxide-qt

1649577

Revert "Decide focus state of webview based on activeFocusItem check of window", as it caused a regression in popup menu handling

oxide-qt

1654363

Fails to build with vivid gcc

oxide-qt

1654512

Unbreak component build

oxide-qt

1649577

Decide the webview focus state from ItemChanged event not the focusIn/Out events

oxide-qt

1637194

Add <select> popup menu implementation to UbuntuWebView

oxide-qt

1656303

Test hang at the start of tst_focus.qml

oxide-qt

1649861

Session save/restore across oxide versions

oxide-qt

1647799

Don't run ubuntu-api and ubuntu-ui test sequences when built without ENABLE_UITK_WEBVIEW

oxide-qt

1568296

Change the behaviour of JS dialogs.

oxide-qt

1656905

Change the behaviour of JS dialogs.

oxide-qt

1637195

Add JS dialog implementation to UbuntuWebView

oxide-qt

1665978

Sync ParamTraits for content::WebPreferences to make double-tap-to-zoom work again

oxide-qt

1668614

Fix build failure with GCC 4.8 due to lack of stdatomic.h

firefox

1671079

Don't crash if LOGNAME is not set in the environment

firefox

1671273

Build with --enable-alsa for now to re-enable the unmaintained ALSA backend. Note that problems with the ALSA backend will not block future updates and Ubuntu flavors that ship without Pulseaudio need to participate in maintaining this code

metacity

1675369

Backport upstream commit to fix send synthetic ConfigureNotify events when receiving ConfigureRequests (synthetic_configurenotify_events.diff).

appstream

1663695

modern-metadata-in-qt.patch: Fix type label for desktop applications in the Qt library.

gtk+3.0

1562002

Backport upstream patch to fix lagging and visual issues in Nautilus (toggled-not-clicked.patch).

activity-log-manager

1303508

Fix calendars not working when selecting date range to clear

webkit2gtk

1687019

Backport from 2.16.2 to fix Google login in Epiphany, GNOME Online Accounts, etc.

gnome-software

1679435

Support debconf prompts

gnome-software

1672424

Fix local .deb files not being installable:

apport

1673557

data/general/ubuntu.py: Collect a minimal version of /proc/cpuinfo in every report.

apport

1689093

data/general/ubuntu-gnome.py: The GNOME3 PPAs are no longer supported for 14.04 or 16.04 so set an UnreportableReason in those reports.

apport

1690437

test_backend_apt_dpkg.py: Move tests from Ubuntu 15.10 "wily" (which is EoL now) to 16.04 LTS "xenial".

whoopsie

1673557

src/whoopsie.c: Add ProcCpuinfoMinimal which can be larger than 1KB to the list of accepted fields.

vino

1607663

Add debian/links to symlink the hidden vino autostart .desktop to /usr/share/applications/ which is needed for the Desktop Sharing feature in GNOME's Settings app to work. Thanks Florian Apolloner for the bug report and suggested fix.

network-manager-applet

1641889

Fix wrong status for wireless toggle

webkit2gtk

1690536

New upstream release

gnome-software

1689425

Fix crash when debconf socket fails

nvidia-graphics-drivers-375

1566446

Drop nvidia-prime and bumblebee Recommends on armhf.

nvidia-graphics-drivers-375

1688431

Limit the amount of cores to a maximum of 16.

nvidia-graphics-drivers-375

1674677

install glvnd EGL vendor configuration file.

qtbase-opensource-src

1380702

Backport upstream change to fix behavior of QMenuBar::isNativeMenuBar() method (fix_isNativeMenuBar.diff). This should finally fix.

libepoxy

1647600

Fix mesa crash (NPE) when no GL is available on X server

mir

1685186

Mir needs to be updated to 0.26 in 16.04LTS

mir

1672955

unity-system-compositor crashed with SIGSEGV in libinput_device_config_accel_is_available() from libinput_device_config_accel_set_speed() from mir::input::evdev::LibInputDevice::apply_settings()

mir

1675138

Please transition to Boost 1.62

mir

1675357

Mir sending key repeat events continually to nested shell after VT switch (causes Unity8 lockup for a while)

mir

1677239

mir_demo_standalone_render_overlays fails to link

nautilus

797485

Due to the floating bar being in an overlay, it can obscure the content under it.

gnome-software

1688721

Handle multiple debconf connections

gnome-software

1692398

Limit search entry in case of accidental input

pulseaudio

1283003

Bluetooth headset/speakers listed but not selectable in Sound settings

pulseaudio

1438510

regression] Bluetooth audio no longer supports A2DP (stuck in HSP/HFP mode)

pulseaudio

1582213

xenial] Bluetooth device doesn't play any sound in A2DP mode unless set to HSP/HFP first

unity-control-center

1630156

user-accounts: Reset the AccountsService password mode when setting the password. There's a codepath for directly setting the password when the user is setting their own, but this doesn't set the AS mode back to ACT_USER_PASSWORD_MODE_REGULAR. If you don't change this and you're in ACT_USER_PASSWORD_MODE_NONE, then you end up staying in the nopasswdlogin group.

unity-control-center

1639507

Add AppData

gtk+2.0

1576424

GtkEntry: Explicitly disconnect keymap signals.

libepoxy

1698233

this patch is causing some troubles on proprietary drivers.

nvidia-graphics-drivers-340

1677327

Sync patch with the one in Zesty to fix build issue with linux-image-generic-hwe-16.04-edge.

session-shortcuts

1575222

Add X-Ubuntu-Gettext-Domain=session-shortcuts so translations are loaded.

gnome-software

1702122

Fix crash when failing to load icons from cache

gnome-software

1703461

Rebase on stable 3.20.5 release.

gnome-software

1697565

Fix snaps without icons not showing reliably

gnome-software

1663097

Show featured snaps

appstream-glib

1700994

Don't load .desktop files provided by snapd - we already have this information from snapd.

These changes mainly affect installations of Ubuntu on server systems and clouds.

snapd

1665729

New bugfix release

postgresql-9.5

1664478

New upstream release

tcpdump

1624633

Merge from Debian unstable. Remaining changes:

tcpdump

1632399

debian/usr.sbin.tcpdump: Allow the tcpdump binary to be mapped as required by version 4.8 and newer kernels. tcpdump was immediately segfaulting when used inside of LXD containers before this AppArmor profile change.

cloud-init

1662221

debian/update-grub-legacy-ec2: fix shell syntax error.

cloud-init

1379080

debian/update-grub-legacy-ec2: fix to include kernels whose config has CONFIG_XEN=y.

cloud-init

1582323

Wesley Wiedenmeier]

cloud-init

1647910

Lars Kellogg-Stedman]

cloud-init

1354694

Scott Moser]

cloud-init

1354694

Lars Kellogg-Stedman]

cloud-init

1625766

Joshua Harlow]

cloud-init

1643990

Just use file logging by default [Joshua Harlow]

php7.0

1663405

New upstream release

php7.0

1658289

debian/patches/0050-Fix-pdo_pgsql.patch: Fixed #73959 - lastInsertId fails to throw an exception in pdsql. Thanks to andrewnester <andrew.nester.dev@gmail.com>.

multipath-tools

1621340

Cherrypick from upstream: wait for udev in dm_simplecmd_noflush().

pollinate

1656484

Add missing dependency on vim-common, for xxd.

strongswan

1587886

fix strongswan ipsec status issue with apparmor

curtin

1662346

Install zipl in target on s390x arch.

curtin

1661337

gpg: retry when recv'ing gpg keys fail

curtin

1659509

Add clear_holders checks to disk and partition handlers

curtin

1649652

net: add new lines after rendered static routes.

curtin

1656369

multipath: don't run update-grub; setup_grub will handle this better.

lxd

1667406

0002-list-Fix-regression-in-json-output.patch

php7.0

1668017

SECURITY REGRESSION: large mysql requests broken

snapd

1667105

New upstream release

sssd

1641875

d/p/restart_providers_on_timeshift.patch: Implement watchdog and use SIGUSR2 after watchdog detects time shift to execute pending scheduled tasks that could be stuck

python-os-brick

1655047

d/p/s390-fc-device-path.patch: Patch added to fix LUN attachment error for Ubuntu on s390 host setups.

snapd

1665608

New upstream release

snapd

1665608

New upstream release

snapd

1626359

interfaces/mount-observe: add quotactl with arg filtering

snapd

1667105

New upstream release

cloud-init

1669675 1660385

debian/patches/ds-identify-behavior-xenial.patch: adjust default behavior of ds-identify for SRU.

cloud-init

1669675

Support warning if the used datasource is not in ds-identify's list.

cloud-init

1660385

DatasourceEc2: add warning message when not on AWS.

cloud-init

1657940

Fix eni rendering of multiple IPs per interface [Ryan Harper]

cloud-init

1638312

EC2: Do not cache security credentials on disk [Andrew Jorgensen]

cloud-init

1657130

Lars Kellogg-Stedman]

ceph

1671117

New upstream stable point release:

walinuxagent

1661750

New upstream release

walinuxagent

1657528

Change the maintainer to Ubuntu Developers

walinuxagent

1673862

Add the dependency of isc-dhcp-client as our maintainer scripts assume it's installed.

walinuxagent

1650522

We now ship with auto-updates enabled.

walinuxagent

1673152

Add a maintscript to rename the old logrotate file on upgrade from an ancient version of walinuxagent.

neutron

1668313

New upstream stable point release for OpenStack Mitaka.

horizon

1668313

New upstream point release for OpenStack Mitaka.

heat

1668313

New upstream stable point release for OpenStack Mitaka

ceilometer

1668313

New upstream point release for OpenStack Mitaka.

swift

1668313

New upstream point release for Openstack Mitaka.

nova-lxd

1668313

New upstream point release for Openstack Mitaka

neutron-lbaas

1664203

Add patch to ensure namespace deleted by v1 driver delete_pool

nova

1668313

New upstream point release for OpenStack Mitaka.

nova

1567807

d/patches/uefi-delete-instances.patch: Fix deletion of instances with UEFI is enabled.

qemu

1490611

debian/patches/ubuntu/add_force_size_option.patch: block/vpc: fix VHD size calculation.

keepalived

1644530

Add PIDFile to avoid misdetection of MainPID on restart.

mysql-5.7

1631338

Add libjson-perl dependency for test suite The last two python tests in the mtr suite were rewritten in perl, and require this package. Added for mysql-testsuite and as a build-dep.

mysql-5.7

1631339

Build with DWITH_LZ4=system Package was previously built with bundled liblz4, though it was specified as a build-dep.

mysql-5.7

1574782

Add support for custom datadir to systemd service The service was reporting an error if no database could be found in /var/lib/mysql. It now checks the location specified in the config. Note that user must still handle apparmor access for custom datadir.

mysql-5.7

1598992

Escape special characters in password Special characters in the root password would cause syntax errors and postinst failures.

mysql-5.7

1646488

Failing tests on platforms supported by upstream fail build A passing test suite is now enforced on i386 and amd64 platforms at build-time.

rabbitmq-server

1634989

debian/patches/0001-Remove-custom-stderr-formatting.patch: [PATCH] Remove custom stderr formatting. Thanks to Alexey Lebedeff <alebedev@mirantis.com>.

openvswitch

1673063

New upstream point release.

cloud-init

1676460

debian/cloud-init.templates: add Bigstep to list of sources.

cloud-init

1674946

OpenStack: add 'dvs' to the list of physical link types.

cloud-init

1669860

Fix bug that resulted in an attempt to rename bonds or vlans.

cloud-init

1675576

net: in netplan renderer delete known image-builtin content.

cloud-init

1677710

ds-identify: fix detecting of maas datasource.

cloud-init

1677376

support resizing partition and rootfs on system booted without initramfs. [Steve Langasek]

cloud-init

1675185

apt_configure: run only when needed.

cloud-init

1675349

OpenStack: identify OpenStack by product 'OpenStack Compute'.

cloud-init

1674861

GCE: Search GCE in ds-identify, consider serial number in check.

cloud-init

1570325

Add support for setting hashed passwords [Tore S. Lonoy]

cloud-init

1634678

Jonathan Ballet]

cloud-init

1673411

ConfigDrive: support reading config drive data from /config-drive.

cloud-init

1674766

ds-identify: fix detection of Bigstep datasource.

cloud-init

1674685

Brent Baude]

cloud-init

1674317

net: Fix incorrect call to isfile [Joshua Powers]

cloud-init

1673818

doc: fix config drive doc with regard to unpartitioned disks.

cloud-init

1583837

Fix chef config module in omnibus install. [Jeremy Melvin]

cloud-init

1665694

Sergio Lystopad]

cloud-init

1665773

Sergio Lystopad]

cloud-init

1669504

Lars Kellogg-Stedman]

cloud-init

1670052

Lars Kellogg-Stedman]

cinder

1631561

d/p/log-message-cleanup-for-volume-usage-audit.patch: Fixes broken tests introduced by 8.1.1-0ubuntu2.

snapd

1681799

New upstream release

snapd

1681799

New upstream release

python-os-brick

1623700

d/p/Stop-calling-multipath-r-when-attaching-detaching-iS.patch: Backport Backport fix for stopping calling 'multipath -r'

software-properties

1670385

Add knowledge of OpenStack releases Pike and Queens.

software-properties

1532855

When failing to retrieve a GPG key, raise an exception such that e.g. add-apt-repository can fail when it did not manage to retrieve a GPG key for the shortcut repository.

walinuxagent

1683521

New upstream release.

sssd

1566508

d/p/pidfile-creation.diff: Delay the pidfile creation until the responders are up

sssd

1669712

d/p/sanitize_newline.diff: Sanitize newline and carriage return characters before LDAP queries.

neutron-lbaas

1623664

debian/neutron-lbaas-common.install: Remove cron jobs since it will cause a race with L3 agents and neutron.

neutron

1648242

Backport fix for Failure to retry update_ha_routers_states

neutron

1623664

d/neutron-common.install, d/neutron-dhcp-agent.install: Remove cron jobs since they will cause a race when using an L3 agent. The L3 agent cleans up after itself now.

snapd

1686713

New upstream release

snapd

1664638

interfaces: add kubernetes-support interface and adjust related interfaces

nova

1602057

Fix exception due to BDM race in get_available_resource()

keystone

1680098

New upstream point release for Openstack Mitaka.

horizon

1680098

New upstream point release for OpenStack Mitaka

cloud-init

1682160

debian/update-grub-legacy-ec2: fix early exit failure no /etc/fstab file.

cloud-init

1685810

nova-lxd: read product_name from environment, not platform.

cloud-init

1367899

rsyslog: replace ~ with stop [Joshua Powers]

cloud-init

1684869

Fix growpart for some cases when booted with root=PARTUUID.

cloud-init

1673637

Daniel Watkins]

cloud-init

1676908

Ben Howard]

cloud-init

1676908

Ben Howard]

cloud-init

1644064

Lars Kellogg-Stedman]

cloud-init

1676908

Ben Howard]

cloud-init

1636531

tests: fix AltCloud tests to not rely on blkid

ceph

1636322

Start ceph-all after static-network-up:

ceph

1684527

New upstream point release:

cloud-initramfs-tools

1688606

Add cloud-initramfs-rooturl package.

libvirt

1680384

Fix bad SRU backport to match apparmor structure of libvirt in Xenial

libvirt

1680384

Add missing apparmor profile entries

strongswan

1687711

d/p/ikev2-Only-add-NAT-D-notifies-to-DPDs-as-initiator.patch: fix issue related to DPD vs iOS10

tomcat8

1666570

Fix an upgrade error when JAVA_OPTS in /etc/default/tomcat8 contains the '%' character.

php7.0

1686237

New upstream release 7.0.18

php7.0

1674892

New upstream release 7.0.18

php7.0

1689646

d/control{,.in}: Backport "libapache2-mod-phpX.Y now recommends apache2 package (as this is what most people want anyway)" from Debian 8.0.7-3.

maas

1669498

Stable Release Update. New MAAS upstream bugfix release 2.1.5

walinuxagent

1690854

New upstream release.

lxcfs

1691239

New upstream bugfix release (2.0.7):

zfs-linux

1684731

Fix incorrect path to rm in zfs-share.service.in

zfs-linux

1614789

Set zfs-share.service to Wants in zfs.target

lxd

1693340

New upstream bugfix release (2.0.10)

cloud-init

1689346 1684349

Dimitri John Ledkov

cloud-init

1692093

disk_setup: udev settle before attempting partitioning or fs creation.

cloud-init

1693582

Daniel Watkins]

cloud-init

1690480

Dimitri John Ledkov]

cloud-init

1692087

disk_setup: fix several issues with gpt disk partitions.

cloud-init

1692028

Fix get_interfaces_by_mac for empty macs

cloud-init

1681531

Ben Howard]

cloud-init

1690388

Dimitri John Ledkov]

cloud-init

1645644

Ryan Harper]

cloud-init

1691517

tests: fix hardcoded path to mkfs.ext4 [Joshua Powers]

cloud-init

1691551

Chris Brinker]

cloud-init

1685944

Dimitri John Ledkov]

cloud-init

1686514

Azure: fix reformatting of ephemeral disks on resize to large types.

cloud-init

1685935

make deb: Add devscripts dependency for make deb. Cleanup packages/bddeb. [Chad Smith]

cloud-init

1689944

Improve detection of snappy to include os-release and kernel cmdline.

cloud-init

1691135

Julien Castets]

cloud-init

1687485

Chad Smith]

cloud-init

1636345

Hongjiang Zhang]

cloud-init

1687712

Paul Meyer]

cloud-init

1693939

cherry-pick 5fb49bac: azure: identify platform by well known value in chassis asset

cloud-init

1690430

cherry-pick ebc9ecbc: Azure: Add network-config, Refactor net layer to handle duplicate macs.

cloud-init

1693361

cherry-pick 11121fe4: systemd: make cloud-final.service run before apt daily

curtin

1697545

New upstream snapshot.

nova

1696177

New upstream point release for OpenStack Mitaka.

heat

1696177

New upstream point release for OpenStack Mitaka.

ceilometer

1696177

New upstream point release for OpenStack Mitaka.

neutron

1662804

d/p/avoid-router-ri.process-if-initialize-fails: Backport fix for avoid router ri process if initialize fails.

lxcfs

1654310

Cherrypick patch reverting the virtualization of bstat field

keystone

1649616

d/p/0001-Make-flushing-tokens-more-robust.patch: Commit token flushes between batches in order to lower resource consumption and make flushing more robust for replication.

sssd

1695870

Fix regression where SSSD doesn't start on boot if autofs is not installed:

sssd

1566508

sssd-common.sssd-autofs.upstart.in: Restart autofs to read direct mounts after SSSD and autofs have started (only on startup). This keeps the fix for the autofs and SSSD race condition

walinuxagent

1701350

New upstream release.

maas

1696752

Stable Release Update. New MAAS upstream release 2.2.0

libvirt

1644507

d/apparmor/usr.lib.libvirt.virt-aa-helper: Allow access to base images and snapshots stored in nova-hypervisor snap's $SNAP_COMMON directory, enabling use of the libvirt deb from the nova-hypervisor snap.

swift

1683076

Fix issue where swift daemons crash while writing logs to a stopped rsyslogd /dev/log socket.

pptpd

1610500

Backport "Fix systemd check in postinst." from 1.4.0-9 fixed via Debian bug 829418

freeipmi

1699933

Backport to xenial Use kernel DMI table interface, when available, instead of trolling /dev/mem to avoid a crash on ARM.

libvirt

1705132

d/p/ubuntu/bug-1705132-* qemu: Adaptive timeout for connecting to monitor

open-iscsi

1684039

Cherry pick upstream patches to parse IP origin passed in by IBFT. iscsistart -f will now display the correct iface.bootproto (e.g. static or dhcp)

Kernel and Hardware support updates

Considerable work has been done in Ubuntu 16.04.1 on improving support for many specific items of hardware.

Note that upstream commits to stable kernel releases are listed separately below.

linux

1660704

Release Tracking Bug

linux

1630238

regression 4.8.0-14 -> 4.8.0-17] keyboard and touchscreen lost on Acer Chromebook R11

linux

1652132

Call trace when testing fstat stressor on ppc64el with virtual keyboard and mouse present

linux

1658491

VLAN SR-IOV regression for IXGBE driver

linux

1655842

"Out of memory" errors after upgrade to 4.4.0-59

linux

1657194

Backport 3 patches to fix bugs with AIX clients using IBMVSCSI Target Driver

linux

1656913

NVMe: adapter is missing after abnormal shutdown followed by quick reboot, quirk needed

linux

1625318

Ubuntu 16.10 KVM SRIOV: if enable sriov while ping flood is running ping will stop working

linux

1649718

Linux rtc self test fails in a VM under xenial

linux

1658091

Xenial update to v4.4.44 stable release

linux

1657674

Add support for RT5660 codec based sound cards on Baytrail

linux

1657682

Support latest Redpine WLAN/BT RS9113 driver

linux

1657540

Hyper-V] netvsc: add rcu_read locked to netvsc callback

linux

1650059

Hyper-V] Rebase Hyper-V in 16.04 and 16.10 to the the upstream 4.9 kernel

linux

1655420

Ubuntu - ibmveth: abnormally large TCP MSS value caused a TCP session to hang with a zero window

linux

1640786

netfilter regression introducing a performance slowdown in binary arp/ip/ip6tables

linux

1655002

Move some kernel modules to the main kernel package (part 2)

linux

1656876

Xenial update to v4.4.43 stable release

linux

1655969

Xenial update to v4.4.42 stable release

linux

1655041

Xenial update to v4.4.41 stable release

linux-meta

1601954

ensure all items are included in changelog and standardise packaging

linux

1665935

CVE-2017-6074

linux-hwe

1665935

CVE-2017-6074

makedumpfile

1557751

d/p/0006-PATCH-Support-newer-kernels.patch : Support kernel versions up to 4.8

makedumpfile

1641235

Turn hardcoded timeo and retrans NFS options into parameters that can be modified in /etc/default/kdump-tools. Also use the NFS defaults (timeo=600, retrans=3) for these parameters. Make those values visible in the 'show' command if NFS is configured

makedumpfile

1655625

Complete support for kernel versions 4.8 and later : d/p/0007-PATCH-Looking-for-page.compound_order-compound_dtor-.patch, d/p/0008-PATCH-Skip-examining-compound-tail-pages.patch

linux

1667052

linux: 4.4.0-65.86 -proposed tracker

linux

1665211

Upgrade Redpine RS9113 driver to support AP mode

linux

1649292

NFS client : permission denied when trying to access subshare, since kernel 4.4.0-31

linux

1665097

Hyper-V] SAUCE: pci-hyperv fixes for SR-IOV on Azure

linux

1664960

Xenial update to v4.4.49 stable release

linux

1650336

NFS client : kernel 4.4.0-57 crash with nfsv4 enries in /etc/fstab

linux

1664809

0bda:0328] Card reader failed after S3

linux

1662551

ibmvscsis: Add SGL LIMIT

linux

1662666

ISST-LTE:pNV: ppc64_cpu command is hung w HDs, SSDs and NVMe

linux

1624164

Possible missing firmware /lib/firmware/i915/kbl_dmc_ver1.bin for module i915_bpo

linux

1662763

Intel I210 ethernet does not work both after S3

linux

1661430

Hyper-V] Fix ring buffer handling to avoid host throttling

linux

1645037

apparmor_parser hangs indefinitely when called by multiple threads

linux

1660842

apparmor not checking error if security_pin_fs() fails

linux

1659417

docker permission issues with overlay2 storage driver

linux

1663657

Xenial update to v4.4.48 stable release

linux

1662507

Xenial update to v4.4.47 stable release

linux

1660994

Xenial update to v4.4.46 stable release

linux

1660993

Xenial update to v4.4.45 stable release

linux

1665935

CVE-2017-6074

grub2

1640878

debian/patches/support_initrd-less_boot.patch: Added knobs to allow non-initrd boot config. Thanks Chris Glass!

grub2-signed

1640878

Rebuild against grub2 2.02~beta2-36ubuntu3.8.

curtin

1666986

debian/rules: record debian package version in installed package.

curtin

1645515

Add iSCSI disk support.

curtin

1665701

vmtest: handle change in btrfs-progs when finding fs UUID.

linux

1667052

linux: 4.4.0-67.88 -proposed tracker

linux

1668594

Recent KVM RTC cherry-picks break (some) Windows Live-Migrations

linux

1665211

Upgrade Redpine RS9113 driver to support AP mode

linux

1649292

NFS client : permission denied when trying to access subshare, since kernel 4.4.0-31

linux

1665097

Hyper-V] SAUCE: pci-hyperv fixes for SR-IOV on Azure

linux

1664960

Xenial update to v4.4.49 stable release

linux

1650336

NFS client : kernel 4.4.0-57 crash with nfsv4 enries in /etc/fstab

linux

1664809

0bda:0328] Card reader failed after S3

linux

1662551

ibmvscsis: Add SGL LIMIT

linux

1662666

ISST-LTE:pNV: ppc64_cpu command is hung w HDs, SSDs and NVMe

linux

1624164

Possible missing firmware /lib/firmware/i915/kbl_dmc_ver1.bin for module i915_bpo

linux

1662763

Intel I210 ethernet does not work both after S3

linux

1661430

Hyper-V] Fix ring buffer handling to avoid host throttling

linux

1645037

apparmor_parser hangs indefinitely when called by multiple threads

linux

1660842

apparmor not checking error if security_pin_fs() fails

linux

1659417

docker permission issues with overlay2 storage driver

linux

1663657

Xenial update to v4.4.48 stable release

linux

1662507

Xenial update to v4.4.47 stable release

linux

1660994

Xenial update to v4.4.46 stable release

linux

1660993

Xenial update to v4.4.45 stable release

linux-meta

1666897

make linux-image-* Breaks: snapd before 2.23.1

linux-meta-hwe

1666897

make linux-image-* Breaks: snapd before 2.23.1

linux-hwe

1671408

linux-hwe: 4.8.0-42.45~16.04.1 -proposed tracker

linux-hwe

1649292

NFS client : permission denied when trying to access subshare, since kernel 4.4.0-31

linux-hwe

1651981

shaking screen

linux-hwe

1664809

0bda:0328] Card reader failed after S3

linux-hwe

1656908

In Ubuntu 17.04 : after reboot getting message in console like Unable to open file: /etc/keys/x509_ima.der (-2)

linux-hwe

1664564

16.04.2: Extra patches for POWER9

linux-hwe

1662551

ibmvscsis: Add SGL LIMIT

linux-hwe

1662666

ISST-LTE:pNV: ppc64_cpu command is hung w HDs, SSDs and NVMe

linux-hwe

1662673

systemd-udevd hung in blk_mq_freeze_queue_wait testing unpartitioned NVMe drive

linux-hwe

1662554

Yakkety SRU] Enable KEXEC support in ARM64 kernel

linux-hwe

1661430

Hyper-V] Fix ring buffer handling to avoid host throttling

linux-hwe

1645037

apparmor_parser hangs indefinitely when called by multiple threads

linux-hwe

1660842

apparmor not checking error if security_pin_fs() fails

linux-hwe

1659340

Linux kernel 4.8 hangs at boot up

linux-hwe

1557690

s390/kconfig: CONFIG_NUMA without CONFIG_NUMA_EMU does not make any sense on s390x

linux

1674938

linux: 4.4.0-70.91 -proposed tracker

linux

1666897

snaps with classic + jailmode confinement started to fail on zesty

linux-hwe

1674988

linux-hwe: 4.8.0-44.47~16.04.1 -proposed tracker

linux-hwe

1666897

snaps with classic + jailmode confinement started to fail on zesty

linux-hwe

1671176

linux: 4.8.0-42.45 -proposed tracker

linux-hwe

1649292

NFS client : permission denied when trying to access subshare, since kernel 4.4.0-31

linux-hwe

1651981

shaking screen

linux-hwe

1664809

0bda:0328] Card reader failed after S3

linux-hwe

1656908

In Ubuntu 17.04 : after reboot getting message in console like Unable to open file: /etc/keys/x509_ima.der (-2)

linux-hwe

1664564

16.04.2: Extra patches for POWER9

linux-hwe

1662551

ibmvscsis: Add SGL LIMIT

linux-hwe

1662666

ISST-LTE:pNV: ppc64_cpu command is hung w HDs, SSDs and NVMe

linux-hwe

1662673

systemd-udevd hung in blk_mq_freeze_queue_wait testing unpartitioned NVMe drive

linux-hwe

1662554

Yakkety SRU] Enable KEXEC support in ARM64 kernel

linux-hwe

1661430

Hyper-V] Fix ring buffer handling to avoid host throttling

linux-hwe

1645037

apparmor_parser hangs indefinitely when called by multiple threads

linux-hwe

1660842

apparmor not checking error if security_pin_fs() fails

linux-hwe

1659340

Linux kernel 4.8 hangs at boot up

linux-hwe

1557690

s390/kconfig: CONFIG_NUMA without CONFIG_NUMA_EMU does not make any sense on s390x

linux-meta-hwe

1666897

make linux-image-* Breaks: snapd before 2.23.1

shim

1644806

debian/patches/0001-shim-fix-the-mirroring-MokSBState-fail.patch: guard against errors in mirroring MokSBState to MokSBStateRT. Thanks to Ivan Hu for the patch. This will fix issues updating MokSBStateRT if the variable already exists with different attributes.

shim-signed

1637290

Backport shim 0.9+1474479173.6c180c6-1ubuntu1 to 16.04.

shim-signed

1673817

detect when we have no debconf prompting and error out instead of ending up in an infinite loop.

shim-signed

1673817

some more fixes to properly handle non-interactive mode.

shim-signed

1581299

Update to the signed 0.9+1474479173.6c180c6-0ubuntu1 binary from Microsoft.

grub2

1637290

debian/patches/install_signed.patch: update to use the new names for the shim binary (shim$arch), MokManager (mm$arch) and add fallback (fb$arch).

grub2-signed

1637290

Rebuild against grub2 2.02~beta2-36ubuntu3.8.

linux-hwe-edge

1673837

Release Tracking Bug

linux-hwe-edge

1667567

msleep() bug causes Nuvoton I2C TPM device driver delays

linux-hwe-edge

1396654

C++ demangling support missing from perf

linux-hwe-edge

1483101

Broadcom bluetooth modules sometimes fail to initialize

linux-hwe-edge

1673118

Zesty update to v4.10.3 stable release

linux-hwe-edge

1672544

Zesty update to v4.10.2 stable release

linux-hwe-edge

1672510

kernel selftests ADT failure with linux 4.10.0-13.15 on ppc64el

linux-hwe-edge

1672486

arm64: Workaround QDF2400 erratum 0065

linux-hwe-edge

1672502

arm64 MSI/PCIe passthrough patches break build of certain configs

linux-hwe-edge

1672504

pinctrl: qcom: add get_direction function

linux-hwe-edge

1671917

perf probes on arm64 don't work with 4.10 kernel b/c of register name issue

linux-hwe-edge

1672372

Revert "UBUNTU: SAUCE: Disable timers selftest for now"

linux-hwe-edge

1671613

POWER9: Additional power9 patches

pciutils

1665436

debian/patches/lspci-Support-GEN4-speed-16GT-s.patch: Cherry-pick from upstream to support PCI gen4 cards in lspci.

linux-hwe-edge

1673805

Release Tracking Bug

linux-hwe-edge

1667567

msleep() bug causes Nuvoton I2C TPM device driver delays

linux-hwe-edge

1396654

C++ demangling support missing from perf

linux-hwe-edge

1483101

Broadcom bluetooth modules sometimes fail to initialize

linux-hwe-edge

1673118

Zesty update to v4.10.3 stable release

linux-hwe-edge

1672544

Zesty update to v4.10.2 stable release

linux-hwe-edge

1672510

kernel selftests ADT failure with linux 4.10.0-13.15 on ppc64el

linux-hwe-edge

1672486

arm64: Workaround QDF2400 erratum 0065

linux-hwe-edge

1672502

arm64 MSI/PCIe passthrough patches break build of certain configs

linux-hwe-edge

1672504

pinctrl: qcom: add get_direction function

linux-hwe-edge

1671917

perf probes on arm64 don't work with 4.10 kernel b/c of register name issue

linux-hwe-edge

1672372

Revert "UBUNTU: SAUCE: Disable timers selftest for now"

linux-hwe-edge

1671613

POWER9: Additional power9 patches

linux

1676747

Enable lspcon on i915

linux

1483101

Broadcom bluetooth modules sometimes fail to initialize

linux-aws

1676747

Enable lspcon on i915

linux-aws

1483101

Broadcom bluetooth modules sometimes fail to initialize

linux-hwe

1676747

Enable lspcon on i915

linux-hwe

1483101

Broadcom bluetooth modules sometimes fail to initialize

linux-hwe-edge

1684492

linux-hwe-edge: 4.10.0-20.22~16.04.1 -proposed tracker

linux-hwe-edge

1684491

linux: 4.10.0-20.22 -proposed tracker

linux

1686040

linux: 4.4.0-77.98 -proposed tracker

linux

1669672

Upgrade Redpine WLAN/BT driver to ver. 1.2.RC4

linux

1685133

Fix RX fail issue on Exar USB serial driver after resume from S3/S4

linux-hwe

1686121

linux-hwe: 4.8.0-51.54~16.04.1 -proposed tracker

linux-hwe

1686070

linux: 4.8.0-51.54 -proposed tracker

linux-hwe

1685847

linux: 4.8.0-50.53 -proposed tracker

linux-hwe

1683947

ubuntu 4.8 kernel, virtio_net error causes NAT packets to be lost

linux

1686645

linux: 4.4.0-78.99 -proposed tracker

linux

1659111

UbuntuKVM guest crashed while running I/O stress test with Ubuntu kernel 4.4.0-47-generic

linux

1683728

Xenial update to v4.4.62 stable release

linux

1591641

Feature] KBL: intel_powerclamp driver support

linux

1682103

sysfs channel reads of lps22hb pressure sensor are stale

linux

1667323

Backlight control does not work and there are no entries in /sys/class/backlight

linux

1591640

Feature] KBL: intel_rapl driver support

linux

1682140

Xenial update to v4.4.61 stable release

linux

1681862

Xenial update to v4.4.60 stable release

qemu

1684239

debian/patches/ubuntu/vvfat-fix-volume-name-assertion.patch: Fix the volume name assertion in vvfat rw mode

qemu

1656112

debian/patches/ubuntu/bug-1656112-POWER8NVL-[12]-*.patch: Add PowerISA 2.07 compatibility mode to fix execution on POWER8NVL processors such as in S822LC (8335-GTB) machines

linux-firmware

1647826

intel 8260 doesn't work with linux kernel 4.8+ when using ucode version 22

linux-firmware

1675443

Update linux-firmware in xenial for 4.10 hwe-edge kernel

linux-aws

1686651

linux-aws: 4.4.0-1017.26 -proposed tracker

linux-aws

1686645

linux: 4.4.0-78.99 -proposed tracker

linux-aws

1659111

UbuntuKVM guest crashed while running I/O stress test with Ubuntu kernel 4.4.0-47-generic

linux-aws

1683728

Xenial update to v4.4.62 stable release

linux-aws

1591641

Feature] KBL: intel_powerclamp driver support

linux-aws

1682103

sysfs channel reads of lps22hb pressure sensor are stale

linux-aws

1667323

Backlight control does not work and there are no entries in /sys/class/backlight

linux-aws

1591640

Feature] KBL: intel_rapl driver support

linux-aws

1682140

Xenial update to v4.4.61 stable release

linux-aws

1681862

Xenial update to v4.4.60 stable release

linux-aws

1686040

linux: 4.4.0-77.98 -proposed tracker

linux-aws

1669672

Upgrade Redpine WLAN/BT driver to ver. 1.2.RC4

linux-aws

1685133

Fix RX fail issue on Exar USB serial driver after resume from S3/S4

linux-hwe

1690957

linux-hwe: 4.8.0-53.56~16.04.1 -proposed tracker

linux-hwe

1690956

linux: 4.8.0-53.56 -proposed tracker

linux-firmware

1686815

Missing Bluetooth firmware for intel 8265 on Ubuntu 16.04

util-linux

1674258

Cherrypick upstream fix to prevent lscpu crash on arm64 by accessing DMI in sysfs instead of /dev/mem.

autofs

1686679

autofs-5.1.1-improve-scalability-of-direct-mount-pat.patch

powerpc-utils

1692837

d/p/Improve-perf-of-drmgr-lsslot-with-large-num-of-virt.patch: Fix scaling with large number of virtual adapters.

powerpc-utils

1696434

d/p/drmgr-Stale-errno-usage-corrections.patch, d/p/drmgr-Correct-errno-usage-use-in-validate_paltform.patch, d/p/drmgr-Correct-errno-usage-in-init_cpu_info.patch: Fix failures during scale-up test on Novalink System.

s390-tools

1683808

chzdev: Fix ineffective zfcp-lun udev rule preventing activation of unordered WWPNs.

fwupdate

1684034

Backport new version to Xenial.

fwupdate-signed

1684034

Build-depend on fwupdate 0.5-2ubuntu5

binutils

1655181

POWER backports

kmod

1696710

depmod-ignore-powerpc64-abiv2-toc-symbol.patch: Ignore the TOC symbol in depmod on PPC64 as it does not need to be relocated

shim-signed

1700170

Backport shim-signed 1.32 to 16.04.

shim-signed

1695578

update-secureboot-policy: track the installed DKMS modules so we can skip failing unattended upgrades if they hasn't changed (ie. if no new DKMS modules have been installed, just honour the user's previous decision to not disable shim validation).

shim-signed

1673904

update-secureboot-policy: allow re-enabling shim validation when no DKMS packages are installed.

shim-signed

1680279

debian/source_shim-signed.py: add the textual representation of SecureBoot and MokSBStateRT EFI variables rather than just adding the files directly; also, make sure we include the relevant EFI bits from kernel log.

grub2

1696599

debian/patches: Rework linuxefi/SecureBoot support and sync with upstream SB patch set:

grub2

1689687

Removed linuxefi_require_shim.patch; superseded by the above.

grub2-signed

1696599

Rebuild against grub2 2.02~beta2-36ubuntu3.12.

Unsorted changes

nano

1641592

Apply upstream patch to allocate enough space for the prompt when finding a lock file.

resolvconf

1649931

debian/resolvconf.service: resolvconf service must run before any of the possible network configuration services (ifupdown, networkd, NetworkManager) so use network-pre.target instead of service names.

network-manager

1645698

Rebase to upstream 1.2.6 release

mdadm

1635049

Backport initramfs changes from 3.4-4, to improve reliability of booting with degraded arrays.

init-system-helpers

1596056

script/invoke-rc.d: backport change from 1.36 so that logs showing a failure to start a service with systemd will include the necessary information to debug, not just instructions to run an additional command. .

exiv2

1584853

SRU 0.25-3 to Ubuntu xenial

thermald

1656528

fix spamming of logs when writes file

cups

1642966

Make cups.path unit be part of the cups.service, since cups.path should stop if and when cups.service is stopped.

wget

1573307

debian/patches/Sanitize-value-sent-to-memset-to-prevent-SEGFAULT.patch upstream commited 7099f489 patch to fix segmentation fault

landscape-client

1668583

Don't report packages that are coming from backports, so that Landscape doesn't try to upgrade to versions of packages that are in backports.

tftp-hpa

1342580

Replace the default value of TFTP_ADDRESS to :69 instead of [::]:69. The previous default caused a failure to start when the NIC is not available at startup time

dnsmasq

1639776

Add two upstream patches to fix binding to an interface being destroyed and recreated..

nfs-utils

1590799

Fixing nfs-mountd dependency on rpcbind (race condition) by adding "rpcbind.socket" to "nfs-mountd.service" as a dependency to avoid race conditions:

ntp

1656801

Fix ntp.dhcp to also check for pool and better handle spaces and tabs.

distro-info-data

1685055

Copy data from 0.35

golang-1.6

1681294

Backport fix for ugly "pthread_create failed: Resource temporarily unavailable" message when calling syscall.Exec.

apt

1668285

Microrelease covering fixes of 1.4~rc2

apt

1657440

keep Release.gpg on untrusted to trusted IMS-Hit (Closes: 838779)

apt

1645815

bash-completion: Only complete understood file paths for install

apt

1657567

basehttp: Only read Content-Range on 416 and 206 responses

cifs-utils

1611816

Add pam_cifscreds. Patch by David McBride.

thermald

1683829

Add missing support for Kabylake and Broadwell-GT

thermald

1683825

Fix energy preference default

sane-backends

1564778

control: add breaks/replaces between libsane and libsane-common to fix earlier packaging mistake.

systemd

1649931

Make systemd-networkd-resolvconf-update.{service,path} run earlier to ensure DNS is configured prior to reaching network-online.target.

mtx

1642582

Remove bash completions, they are also in the bash-completion package. This avoids file-conflict on the s390x architecture, as new enough bash-completion debhelper addon generated the conflict on that architecture only.

sosreport

1614052

Collection of the OPAL msglog

sosreport

1666239

Add ZFS sosreport plugin

sosreport

1605243

Take into account the iscsi initiator config and logs

zlib

1512992

Move zconf.h back to /usr/include (not differing across architectures) anymore.

logrotate

1630516

createOutputFile: rename already existing file

openssh

1668093

Fix ssh-keygen -H accidentally corrupting known_hosts that contained already-hashed entries.

openssh

1670745

Fix ssh-keyscan to correctly hash hosts with a port number.

google-perftools

1647864

d/p/Use-initial-exec-tls-for-libunwind-s-recursion-flag.patch: Use initial-exec tls for libunwind's recursion flag avoiding deadlock in dlopen on startup.

iproute2

1668813

PATCH] tc.8: Fix reference to tc-tcindex.8. Thanks to Phil Sutter <phil@nwl.cc>.

sphinx

1690574

Update jstests for compatibility with WebKitGTK+ 2.16.2. Now the title property can be no longer than 1000 characters, so we cannot fetch the whole page using it. Instead, we compute the needed numbers with JavaScript and then fetch them using the title property.

shim-signed

1680279

Adjust apport hook to include key files that tell us about the system's current SB state.

openssl

1674399

aes/asm/aesni-sha*-x86_64.pl: fix IV handling in SHAEXT paths.

ebtables

1645324

Use real locking in ebtables

vlan

1573272

Correct previous patch, to work for ifupdown configuration where a vlan is configured but the vlan's raw device has no ifupdown config.

kexec-tools

1671246

d/p/arm-do-not-build-iomem.o-target-with-no-soruce.patch: Fix regression in previous release that caused armhf to FTBFS.

click

1693226

Rename the python package this installs from click to click_package.

less

1562308

Fix east asian width problem

btrfs-tools

1694891

debian/patches/09c052a8b4dcaa96fe5e6c28b12ce24729e827a4.patch: backport upstream commit to add new "quiet option" and prevent printing of messages on stderr

autopkgtest

1686082

tests/adt-run: Filter out $ADT_NORMAL_USER from the chroot tests; we don't want this set when testing autopkgtest from within autopkgtest. Fixes a test failure when running our own autopkgtests. Cherry-pick of upstream commit cbac10742cc44d66c82ee9776157273a5cce7a59

coreutils

1667407

Add -fno-schedule-insns to CFLAGS for sha256.o on ppc64el to fix performance regression.

apport

1692127

data/general-hooks/ubuntu.py: Modify how a duplicate signature is created for package installation failures.

livecd-rootfs

1690440

Add basic but configurable autopkgtest

debootstrap

1698686

Add (Debian) buster and bullseye as a symlink to sid.

sudo

1686803

Terminate with the same signal as the command This fixes a regression introduced in sudo 1.8.15 changeset 10229:153f016db8f1.

netcfg

1697914

Add description for non-PCI platform network interfaces.

whoopsie

1697375

src/connectivity.c: query the correct property when trying to network-manager's state.

whoopsie

1696814

src/whoopsie.c: Add HotspotError from the openjdk-8 package hook which can be larger than 1KB to the list of accepted fields.

ntp

1593907

debian/ntpdate.if-up: Drop delta to stop/start service around ntpdate updates - fixes ntp restart storms due to network changes, fixes accidential start of ntp, avoids issues of ntpdate jumping too far while running ntp was supposed to drift

whoopsie

1706195

Modify the whoopsie service file to wants=networking-online.target too.

apt

1694697

Fix parsing of or groups in build-deps with ignored packages

apt

1686470

Split apt-daily timer into two

apt

1672710

Fix and avoid quoting in CommandLine::AsString

imagemagick

1707015

SECURITY REGRESSION: image composite function regression

openjdk-8

1707082

Fix regression introduced by security fix S8169392.