[Bug 930962] Re: dhcp3-server reports many bad udp checksums to syslog using virtio NIC
This bug was fixed in the package dhcp3 - 3.1.3-2ubuntu3.5 --- dhcp3 (3.1.3-2ubuntu3.5) lucid-proposed; urgency=low * Include patch from RedHat/Fedora to deal with hardware/xen/virtio offload of UDP checksums. (LP: #930962) * Update apparmor profile to add required the network packet raw rule for the checksum change. -- Stephane Graber stgra...@ubuntu.com Thu, 23 May 2013 19:58:28 -0400 ** Changed in: dhcp3 (Ubuntu Lucid) Status: Fix Committed = Fix Released ** Changed in: isc-dhcp (Ubuntu Precise) Status: Fix Committed = Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu. https://bugs.launchpad.net/bugs/930962 Title: dhcp3-server reports many bad udp checksums to syslog using virtio NIC To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dhcp3/+bug/930962/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 930962] Re: dhcp3-server reports many bad udp checksums to syslog using virtio NIC
This bug was fixed in the package isc-dhcp - 4.1.ESV-R4-0ubuntu5.8 --- isc-dhcp (4.1.ESV-R4-0ubuntu5.8) precise-proposed; urgency=low [ Dave Chiluk ] * Allow dhcpd to read /etc/ldap/ldap.conf for isc-dhcp-server-ldap. (LP: #1057358). Backported from Stéphane Graber's quantal patch. [ Stéphane Graber ] * Include patch from RedHat/Fedora to deal with hardware/xen/virtio offload of UDP checksums. (LP: #930962) * Update apparmor profile to add required the network packet raw rule for the checksum change. -- Stephane Graber stgra...@ubuntu.com Thu, 23 May 2013 11:13:07 -0400 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dhcp3 in Ubuntu. https://bugs.launchpad.net/bugs/930962 Title: dhcp3-server reports many bad udp checksums to syslog using virtio NIC To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dhcp3/+bug/930962/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1156486] Re: Update package to latest LTS version (= 5.7.2)
https://launchpad.net/ubuntu/+source/net-snmp/5.7.2~dfsg-4ubuntu1 ** Changed in: net-snmp (Ubuntu) Status: Triaged = Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to net-snmp in Ubuntu. https://bugs.launchpad.net/bugs/1156486 Title: Update package to latest LTS version (= 5.7.2) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/net-snmp/+bug/1156486/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1004606] Re: virsh create-snapshot fails to create external snapshot (blockdev-snapshot-sync fails in json monitor)
In the /etc/apparmor.d/local/usr.sbin.libvirtd file I just created one
rule to give libvirtd read'n'write access to the images in my storage
pool with the following line:
/var/lib/libvirt/images/*.img rw,
As preliminary: I have created my own naming convention for my overlays,
these are used for incremental backups to another server. This
convention can be found in my abstractation and has to be adjusted to
your own needs.
First of all I've created my own abstraction as /etc/apparmor.d/local
/abstraction-libvirt-storage. This file gives the clients access to the
important images like that:
/var/lib/libvirt/images/*.base.imgrw,
/var/lib/libvirt/images/*.base.imgrw,
/var/lib/libvirt/images/*.stable_overlay.img rw,
/var/lib/libvirt/images/*.running.img rw,
The /etc/apparmor.d/libvirt/TEMPLATE file is a source for all rule files
in /etc/apparmor.d/libvirt/. There you need to source the abstraction-
libvirt-storage so the TEMPLATE looks similar to this one (adjust to
your own needs):
profile LIBVIRT_TEMPLATE {
#include abstractions/libvirt-qemu
#include local/abstractation-libvirt-storage
}
It is also possible to put the information of the abstraction-libvirt-
storage file directly into the TEMPLATE but a change on some of the
rules would require to edit multiple files ( /etc/apparmor.d/libvirt/*)
I hope this will help. This adjustments should be fine for safety
requirement, because the host should still be secured against guests and
thats the only thing you can do with libvirt+apparmor.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to qemu-kvm in Ubuntu.
https://bugs.launchpad.net/bugs/1004606
Title:
virsh create-snapshot fails to create external snapshot (blockdev-
snapshot-sync fails in json monitor)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1004606/+subscriptions
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1184440] Re: package bind9 1:9.9.2.dfsg.P1-2ubuntu2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privilege boundaries nor directly cause loss of data/privacy. Please feel free to report any other bugs you may find. ** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to bind9 in Ubuntu. https://bugs.launchpad.net/bugs/1184440 Title: package bind9 1:9.9.2.dfsg.P1-2ubuntu2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/1184440/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1184223] Re: CVE-2013-2061: use of non-constant-time memcmp in HMAC comparison in openvpn_decrypt
** Also affects: openvpn (Ubuntu Precise) Importance: Undecided Status: New ** Also affects: openvpn (Ubuntu Quantal) Importance: Undecided Status: New ** Also affects: openvpn (Ubuntu Saucy) Importance: Undecided Status: New ** Also affects: openvpn (Ubuntu Raring) Importance: Undecided Status: New ** Changed in: openvpn (Ubuntu Precise) Status: New = Confirmed ** Changed in: openvpn (Ubuntu Precise) Importance: Undecided = Low ** Changed in: openvpn (Ubuntu Quantal) Status: New = Confirmed ** Changed in: openvpn (Ubuntu Quantal) Importance: Undecided = Low ** Changed in: openvpn (Ubuntu Raring) Status: New = Confirmed ** Changed in: openvpn (Ubuntu Raring) Importance: Undecided = Low ** Changed in: openvpn (Ubuntu Saucy) Status: New = Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openvpn in Ubuntu. https://bugs.launchpad.net/bugs/1184223 Title: CVE-2013-2061: use of non-constant-time memcmp in HMAC comparison in openvpn_decrypt To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openvpn/+bug/1184223/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1186260] [NEW] nova-compute-xen depends on xen-system-amd64 but it is not installable on precise
Public bug reported: I am using ubuntu precise with the cloud-archive for grizzly enabled. Trying to install nova-compute-xen and I get the following error: # apt-get install nova-compute-xen Reading package lists... Done Building dependency tree Reading state information... Done Some packages could not be installed. This may mean that you have requested an impossible situation or if you are using the unstable distribution that some required packages have not yet been created or been moved out of Incoming. The following information may help to resolve the situation: The following packages have unmet dependencies: nova-compute-xen : Depends: xen-system-amd64 but it is not installable or xen-system-i386 but it is not installable E: Unable to correct problems, you have held broken packages. ** Affects: nova (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to nova in Ubuntu. https://bugs.launchpad.net/bugs/1186260 Title: nova-compute-xen depends on xen-system-amd64 but it is not installable on precise To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nova/+bug/1186260/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-openstack-charms] OpenStack Charm work for Saucy/Havana
Blueprint changed by Andres Rodriguez: Work items changed: Work items: openstack-dashboard python rewrite: TODO - [andreserl] glance python rewrite: TODO + [andreserl] glance python rewrite: INPROGRESS cinder python rewrite: TODO swift-storage python rewrite: TODO nova-compute python rewrite: TODO nova-cloud-controller python rewrite: TODO Integrate current openstack-charm-helpers into lp:charm-helpers: TODO Implement targetted test for HA aspects of charms: TODO Determine interop testing matrix: TODO Implement testing of interop matrix: TODO Automate basic smoke test of proposed charm change: TODO Update help.ubuntu.com wiki to point to current deployment guide: TODO Merge back all Grizzly charm work to charm store ASAP: INPROGRESS [gandelman-a] keystone public endpoint SSL: TODO nova-cloud-controller quantum network configuration during HTTP-HTTPS reconfiguration: TODO subordinate - templated-based principle config refactoring: TODO Investigate cinder subordinate approach to plugins: TODO -- OpenStack Charm work for Saucy/Havana https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-openstack-charms -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1175600] Re: python-cinder has a dependency on python-glance, this is no longer required
This bug was fixed in the package cinder - 1:2013.2~b1-0ubuntu1 --- cinder (1:2013.2~b1-0ubuntu1) saucy; urgency=low [ Chuck Short ] * New upstream version. * debian/patches/fix_cinder_dependencies.patch: Dropped. * debian/control: Bump standards version to 3.9.4. * debian/control: Add python-pbr and python-d2to1 to build-depends. * debian/control: Add python-testtools and python-fixtures to build-depends * debian/rules: Add work around to remove wonky setup.py setup * debian/cinder-common.install: Add cinder-rpc-zmq-receiver binary. [ James Page ] * debian/control: Drop surplus dependency on python-glance (LP: #1175600). * debian/control,rules: Drop dependency on pep8, don't run pep8 tests during package build process (its just way to late). * debian/control: Drop surplus BD on python-cheetah. [ Adam Gandelman ] * debian/patches/avoid_paramiko_vers_depends.patch: Avoid version requirement on paramiko. -- Chuck Short zul...@ubuntu.com Fri, 31 May 2013 10:01:03 -0500 ** Changed in: cinder (Ubuntu Saucy) Status: Triaged = Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to cinder in Ubuntu. https://bugs.launchpad.net/bugs/1175600 Title: python-cinder has a dependency on python-glance, this is no longer required To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/cinder/+bug/1175600/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1026836] Re: Upgrade 12.04 - 12.10 - open-vm-dkms - open-vm-tools kernel module failed to build 2011.12.20-562307-0ubuntu2: open-vm-tools kernel module failed to build
This also affects Ubuntu 12.04 with linux-image-3.5.0-32-generic (depended on by linux-image-generic-lts-quantal). Can the fix be backported to precise? -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to open-vm-tools in Ubuntu. https://bugs.launchpad.net/bugs/1026836 Title: Upgrade 12.04 - 12.10 - open-vm-dkms - open-vm-tools kernel module failed to build 2011.12.20-562307-0ubuntu2: open-vm-tools kernel module failed to build To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/open-vm-tools/+bug/1026836/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 801338] Re: package amavisd-new-postfix 1:2.6.5-0ubuntu2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1
My Ubuntu 12.04 have problem ? ubuntu@iluvmy:~$ sudo apt-get upgrade Reading package lists... Done Building dependency tree Reading state information... Done 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. 1 not fully installed or removed. After this operation, 0 B of additional disk space will be used. Do you want to continue [Y/n]? Y Setting up amavisd-new-postfix (1:2.6.5-0ubuntu3.2) ... Selected policy name, policy-spf, already in master.cf. Master.cf not updated. Selected service name, smtp-amavis, or smtpd port, 10025, already in master.cf. Master.cf not updated. * Stopping Postfix Mail Transport Agent postfix [ OK ] * Starting Postfix Mail Transport Agent postfix [ OK ] Stopping amavisd: (not running). Starting amavisd: head: cannot open `/etc/mailname' for reading: No such file or directory The value of variable $myhostname is iluvmy, but should have been a fully qualified domain name; perhaps uname(3) did not provide such. You must explicitly assign a FQDN of this host to variable $myhostname in /etc/amavis/conf.d/05-node_id, or fix what uname(3) provides as a host's network name! (failed). invoke-rc.d: initscript amavis, action restart failed. dpkg: error processing amavisd-new-postfix (--configure): subprocess installed post-installation script returned error exit status 1 No apport report written because MaxReports is reached already Errors were encountered while processing: amavisd-new-postfix E: Sub-process /usr/bin/dpkg returned an error code (1) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to amavisd-new in Ubuntu. https://bugs.launchpad.net/bugs/801338 Title: package amavisd-new-postfix 1:2.6.5-0ubuntu2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/amavisd-new/+bug/801338/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1119145] [nagios-plugins/precise] verification still needed
The fix for this bug has been awaiting testing feedback in the -proposed repository for precise for more than 90 days. Please test this fix and update the bug appropriately with the results. In the event that the fix for this bug is still not verified 15 days from now, the package will be removed from the -proposed repository. ** Tags added: removal-candidate -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to nagios-plugins in Ubuntu. https://bugs.launchpad.net/bugs/1119145 Title: check_dhcp -s hostaddress doesn't work if dhcp-server answers with different next-server ip To manage notifications about this bug go to: https://bugs.launchpad.net/nagios-plugins/+bug/1119145/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1119145] Re: check_dhcp -s hostaddress doesn't work if dhcp-server answers with different next-server ip
aw, oops, sorry, will test on monday. imo it made no sense that the same person tests this again. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to nagios-plugins in Ubuntu. https://bugs.launchpad.net/bugs/1119145 Title: check_dhcp -s hostaddress doesn't work if dhcp-server answers with different next-server ip To manage notifications about this bug go to: https://bugs.launchpad.net/nagios-plugins/+bug/1119145/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [ebiederm] Push fix for XFS and user namespaces: TODO [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE - [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: TODO + [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Pursue subuid patchset for shadow: TODO [serge-hallyn] Add console support to API (Dwight): TODO [serge-hallyn] Add attach support to API (Christian): TODO [serge-hallyn] Add snapshot support to API: TODO [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List all other lxc-* programs to be converted to use the API: TODO - [serge-hallyn] Update locking in API to handle killed programs: INPROGRESS - [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): TODO + [serge-hallyn] Update locking in API to handle killed programs: DONE + [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: TODO [serge-hallyn] Work distro lxc tests upstream: TODO [serge-hallyn] Discuss upstream stable branches with upstream: TODO [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED [serge-hallyn] Merge qemu 1.5.0: DONE [serge-hallyn] Write a libvirt drive using the lxc API: TODO [serge-hallyn] Write loopback backingstore driver: TODO [serge-hallyn] Write qemu-nbd backingstore driver: TODO [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: TODO [serge-hallyn] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: TODO [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO [zulcss] Merge libvirt 1.0.6: TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [stefan-bader-canonical] Merge xen 4.3: TODO -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-openstack-charms] OpenStack Charm work for Saucy/Havana
Blueprint changed by Adam Gandelman: Work items changed: Work items: openstack-dashboard python rewrite: TODO [andreserl] glance python rewrite: INPROGRESS - cinder python rewrite: TODO + [gandelman-a] cinder python rewrite: INPROGRESS swift-storage python rewrite: TODO nova-compute python rewrite: TODO nova-cloud-controller python rewrite: TODO Integrate current openstack-charm-helpers into lp:charm-helpers: TODO Implement targetted test for HA aspects of charms: TODO Determine interop testing matrix: TODO Implement testing of interop matrix: TODO Automate basic smoke test of proposed charm change: TODO Update help.ubuntu.com wiki to point to current deployment guide: TODO Merge back all Grizzly charm work to charm store ASAP: INPROGRESS [gandelman-a] keystone public endpoint SSL: TODO nova-cloud-controller quantum network configuration during HTTP-HTTPS reconfiguration: TODO subordinate - templated-based principle config refactoring: TODO Investigate cinder subordinate approach to plugins: TODO -- OpenStack Charm work for Saucy/Havana https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-openstack-charms -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
