[Touch-packages] [Bug 2084100] [NEW] systemd-oomd wakeups every second

2024-10-09 Thread Seth Arnold
Public bug reported: Hello, I noticed via opensnoop-bpfcc that systemd-oomd was opening a set of files every single second. We're trying to reduce the overall power use of our systems and this feels like a lot of overhead. A bit of the strace from it: gettid()= 21

[Touch-packages] [Bug 2084097] [NEW] requests.exceptions.HTTPError: 410 Client Error: Gone for url: https://api.github.com/repositories/44672744/issues

2024-10-09 Thread Seth Arnold
Public bug reported: Hello, I found I can't use apport to report bugs in snap. After authorizing github to connect my account to my device, I get back an error: # ubuntu-bug snapd *** Collecting problem information The collected information can be sent to the developers to improve the applicati

[Touch-packages] [Bug 2077576] Re: SSH client doesn't handle properly non-ASCII chars

2024-09-04 Thread Seth Arnold
This change makes me uneasy: - I see no terminal-aware filtering applied in the notify_start() -> xvasprintf() -> writemsg() -> write() path. The remote server may not be entirely untrusted but it's also not exactly trusted, either, especially on the first use. There's a long and glorious history

[Touch-packages] [Bug 2062667] Re: Fails on (and should be removed from) raspi desktop

2024-04-29 Thread Seth Arnold
I'm having trouble seeing what the consequences are: > the result is a permanently failed service vs > this is was a major annoyance on my m2 air after upgrading to noble Was it it more than a red line in systemctl status output? Does it have annoying logging behaviour or break some other servi

[Touch-packages] [Bug 2056627] Re: PHPStorm crashes when opening a project

2024-04-26 Thread Seth Arnold
The unfortunate thing with AppImage is that there's no easy default path that can be confined as can be done for other systems. So you'll need to construct an AppArmor profile for your applications following the instructions at https://discourse.ubuntu.com/t/noble-numbat-release- notes/39890#unpriv

[Touch-packages] [Bug 2063536] Re: flickering screen

2024-04-26 Thread Seth Arnold
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to xorg in Ubuntu. https://bugs.launchpad.net/bugs/2063536 Title: flickering screen Status in xorg package in Ubuntu:

[Touch-packages] [Bug 2063884] [NEW] ubuntu-bug can't report bugs in Ubuntu Pro packages

2024-04-26 Thread Seth Arnold
Public bug reported: Hello, ubuntu-bug can't report bugs in packages provided by Ubuntu Pro. For example, I have lynx installed, which has an update issued through esm-apps: $ dpkg -l lynx | grep ^ii ii lynx 2.9.0dev.5-1ubuntu0.1~esm1 amd64classic non-graphical (text-mode) web

[Touch-packages] [Bug 2063271] Re: Illegal opcode in libssl

2024-04-23 Thread Seth Arnold
** Package changed: openssh (Ubuntu) => openssl (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssl in Ubuntu. https://bugs.launchpad.net/bugs/2063271 Title: Illegal opcode in libssl Status in openssl package

[Touch-packages] [Bug 2061869] Re: Snaps unable to connect to network under linux-lowlatency 6.8.0-25.25.3

2024-04-23 Thread Seth Arnold
*** This bug is a duplicate of bug 2061851 *** https://bugs.launchpad.net/bugs/2061851 ** This bug has been marked a duplicate of bug 2061851 linux-gcp 6.8.0-1005.5 (+ others) Noble kernel regression with new apparmor profiles/features -- You received this bug notification because you ar

[Touch-packages] [Bug 2058690] Re: aa-easyprof: allow mmap and link from easyprof generated profiles

2024-04-19 Thread Seth Arnold
The 'm' permission shouldn't be a default; restricting what the CPU will execute is a very useful security mitigation. Thanks -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs

[Touch-packages] [Bug 2057943] Re: Can't disable or modify snap package apparmor rules

2024-04-19 Thread Seth Arnold
I'm adding the snapd package as it feels plausible that snapd could make this task easier, too. ** Also affects: snapd (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to appar

[Touch-packages] [Bug 2059367] Re: SSH-RSA not supported for Self-SSH in Ubuntu 22.04 FIPS

2024-03-28 Thread Seth Arnold
Hello Arunaav, I'm curious if you could double-check the testing environment to make sure the user accounts are as you expected? chmod 0600 /home/core/.ssh/authorized_keys ssh -i .ssh/id_rsa onprem_shell@10.14.169.25 ssh -v user@10.14.169.25 debug1: identity file /root/.ssh/id_rsa type -1 There'

[Touch-packages] [Bug 2055521] Re: Xorg freeze

2024-03-01 Thread Seth Arnold
Hello, thanks for the bug report. I suggest taking your dmesg output (from CurrentDmesg.txt) to the virtualbox developers, it looks very unhappy. Thanks ** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Ubuntu Touch see

[Touch-packages] [Bug 2055226] Re: mount option `users` blocks ntfs to mount

2024-02-29 Thread Seth Arnold
Hello, thanks for the report; note that the fstab(5) and mount(8) man pages both say "user", singular, not "users", plural. That's probably why your mount command didn't work when run as a user. I don't know about the gio or udisksctl tool errors, I'm unfamiliar with their operation. Maybe they we

[Touch-packages] [Bug 2055135] Re: [CREF-XX, Conexant SN6140, Black Headphone Out, Left] No sound at all

2024-02-29 Thread Seth Arnold
I suggest talking with the virtualbox devs: [4.040754] UBSAN: array-index-out-of-bounds in /tmp/vbox.0/common/log/log.c:1791:41 It may or may not be related to your audio issues, but it can't be good. Thanks ** Information type changed from Private Security to Public -- You received this

[Touch-packages] [Bug 2046844] Re: AppArmor user namespace creation restrictions cause many applications to crash with SIGTRAP

2024-02-14 Thread Seth Arnold
Scarlett, Simon and I had discussed preparing a small program that could prepare a wrapper profile: given a path to an appimage, it could emit a small profile to /etc/apparmor.d/ for the file, with the right attachment path and then load the profile. As I understand our new strategy, it would prob

[Touch-packages] [Bug 2049402] Re: sshd doesn't properly disable KbdInteractiveAuthentication

2024-02-09 Thread Seth Arnold
** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssh in Ubuntu. https://bugs.launchpad.net/bugs/2049402 Title: sshd doesn't properly disable KbdInterac

[Touch-packages] [Bug 1117804] Re: ausearch doesn't show AppArmor denial messages

2024-02-09 Thread Seth Arnold
As far as I know, no one has made an effort to try to improve the situation lately. There's some discussion at https://lists.ubuntu.com/archives/apparmor/2024-February/013091.html that may be enlightening, if not encouraging. Thanks -- You received this bug notification because you are a member

[Touch-packages] [Bug 2046633] Re: Don't include 'nmcli -f all con' output in bug report (for privacy)

2023-12-27 Thread Seth Arnold
** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/2046633 Title: Don't include 'nmcli -f all con'

[Touch-packages] [Bug 2046526] Re: pam_access Configuration Treats TTY Names as Hostnames

2023-12-15 Thread Seth Arnold
I wondered if it would look up LOCAL too but figured the reference in the manual to pam_get_item(3) meant that it would special case this one without any lookups. I should have looked at the source instead. I like your idea of using two different files for local vs networked services. (Though that

[Touch-packages] [Bug 2046367] Re: AlphaSSL SHA256 G4 Intermediate Certificate missing

2023-12-14 Thread Seth Arnold
Hey Andrey, thanks; I think they've almost got it right -- the Qualys TLS compliance tool says the chain is in the wrong order so it might not work everywhere, but certainly it'll work better than just Ubuntu adding one intermediate: https://www.ssllabs.com/ssltest/analyze.html?d=smsc.kz Thanks

[Touch-packages] [Bug 2046367] Re: AlphaSSL SHA256 G4 Intermediate Certificate missing

2023-12-13 Thread Seth Arnold
Normally, intermediate certificates are supposed to be included by the leaf certificate owners in their chain of certificates to their roots. It is unusual for intermediate certificates to be included in the CA bundle. GlobalSign has instructions for many applications on their website: https://supp

[Touch-packages] [Bug 2045250] Re: pam_lastlog doesn't handle localtime_r related errors properly

2023-12-13 Thread Seth Arnold
I'm uncomfortable with the idea of printing nothing when the routines fail. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to pam in Ubuntu. https://bugs.launchpad.net/bugs/2045250 Title: pam_lastlog doesn't handle localtime_

[Touch-packages] [Bug 2045855] Re: package bluez 5.64-0ubuntu1.1 failed to install/upgrade: end of file on stdin at conffile prompt

2023-12-08 Thread Seth Arnold
There's over 2k instances of errors like this in the terminal log: dpkg: 경고: files list file for package 'libctf0:amd64' missing; assuming package has no files currently installed This is not a happy installation. I recommend a fresh install when convenient. As for the prompt, the history log su

[Touch-packages] [Bug 2045668] Re: Please merge dbus 1.14.10-3 (main) from Debian unstable

2023-12-07 Thread Seth Arnold
usr-is-merged should probably be in main, it serves as an indicator that the system is already using the usrmerge layout. From: https://lists.debian.org/debian-ctte/2022/07/msg00019.html The usrmerge package has been updated to pick up a few fixes from Ubuntu, and most importantly to provide a new

[Touch-packages] [Bug 2039541] Re: groupmems prompts for password when run as sudo/root

2023-11-20 Thread Seth Arnold
Nice find. My guess is that the Debian maintainer forgot to include the pam.d configuration file supplied by upstream when this new tool was included: - https://github.com/shadow-maint/shadow/blob/master/etc/pam.d/groupmems - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=663117 We could deci

[Touch-packages] [Bug 2039294] Re: apparmor docker

2023-11-17 Thread Seth Arnold
Are you perhaps mixing Docker packages from one source with Docker AppArmor profiles from another source? AppArmor policy around signals is a bit more involved than around files: - The sending process must have permission to send the signal to the recipient - The receiving process must have permi

[Touch-packages] [Bug 2035644] Re: apt status not updated ubuntu 20 LTS

2023-11-17 Thread Seth Arnold
** Package changed: isc-dhcp (Ubuntu) => apt (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apt in Ubuntu. https://bugs.launchpad.net/bugs/2035644 Title: apt status not updated ubuntu 20 LTS Status in apt package

[Touch-packages] [Bug 1965439] Re: [SRU] kdesu fails to authenticate with sudo from Jammy

2023-11-16 Thread Seth Arnold
BlackMage, the publishing history page suggests the fix was published a year earlier: https://launchpad.net/ubuntu/+source/kdesu/5.92.0-0ubuntu1.1 What is the output of: apt policy libkf5su-data namei -l /etc/sudoers.d/kdesu-sudoers Thanks -- You received this bug notification because you are

Re: [Touch-packages] [Bug 1971650] Re: wrong check for "server" in libssl3.postinst

2023-08-31 Thread Seth Arnold
On Tue, Aug 29, 2023 at 03:06:58PM -, Adrien Nader wrote: > Shall we assume on both desktops and servers that an openssl update > always requires a reboot? At least until we do anything related to > needrestart. Our needrestart work is already live, those big obnoxious modal dialogs are someth

[Touch-packages] [Bug 2028774] Re: ssh fails to load opensc-pkcs11.so

2023-07-26 Thread Seth Arnold
Can you run fatrace or opensnoop-bpfcc to discover what exact paths are being probed? Thanks -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssh in Ubuntu. https://bugs.launchpad.net/bugs/2028774 Title: ssh fails to lo

[Touch-packages] [Bug 1966203] Re: Syslog shows "systemd-udevd[2837]: nvme0n1: Process ... failed with exit code 1." in Ubuntu 22.04

2023-07-20 Thread Seth Arnold
(why is this file installed in desktop systems anyway?) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to systemd in Ubuntu. https://bugs.launchpad.net/bugs/1966203 Title: Syslog shows "systemd-udevd[2837]: nvme0n1: Process .

[Touch-packages] [Bug 1966203] Re: Syslog shows "systemd-udevd[2837]: nvme0n1: Process ... failed with exit code 1." in Ubuntu 22.04

2023-07-20 Thread Seth Arnold
I have to imagine mardy isn't going to bother investigating further, so lets unsubscribe him. I'm hoping that will be enough for the snap team to see this bug again. Thanks ** Changed in: snapd Assignee: Alberto Mardegan (mardy) => (unassigned) -- You received this bug notification because

[Touch-packages] [Bug 2027797] Re: systemd-resolved DNSSEC implementation does not protect against cache poisoning

2023-07-14 Thread Seth Arnold
Thanks for the report; it's my understanding that "real" DNSSEC deployments at sites that care will do all the DNSSEC enforcement with a local recursor because the application APIs are immature / underspecified / etc. Such centralization also makes it far easier for the DNS operations team to work

[Touch-packages] [Bug 2024540] Re: Vulnerability Can Gain Access even with Time OTP Enabled

2023-06-23 Thread Seth Arnold
What exactly is suspicious about remmina using shared memory? -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssh in Ubuntu. https://bugs.launchpad.net/bugs/2024540 Title: Vulnerability Can Gain Access even with Time OT

[Touch-packages] [Bug 2019970] Re: OpenSSL 3.0.2 crash in Ubuntu 22.04.2 LTS

2023-06-23 Thread Seth Arnold
That's awesome! I figure post-quantum cryptography will feel like something for years in the future until the week when we all realize we should have moved years earlier. Capture-and-store has to be going on right now, on the assumptions that someone will bring a reliable quantum machine to market.

[Touch-packages] [Bug 2023342] Re: apparmor needs read access to no-stub-resolv.conf

2023-06-22 Thread Seth Arnold
Hi Chris, thanks for the report. In this case, reporting to Debian probably wouldn't help much, they're less active than they used to be. If you're motivated and interested enough, a merge request on https://gitlab.com/apparmor/apparmor/-/blob/master/profiles/apparmor.d/abstractions/nameservice w

[Touch-packages] [Bug 2019970] Re: OpenSSL 3.0.2 crash in Ubuntu 22.04.2 LTS

2023-06-22 Thread Seth Arnold
It's less about bug completeness and more about the risks of breaking users. The general rule for the whole distribution is backporting specific fixes for specific bugs; however, there's a handful of packages where that's not feasible, desired, etc. Firefox and Chromium are the most obvious cases

[Touch-packages] [Bug 2019970] Re: OpenSSL 3.0.2 crash in Ubuntu 22.04.2 LTS

2023-06-16 Thread Seth Arnold
Michael, Ubuntu backports specific fixes as they are identified; you can check the status of our OpenSSL packages on our website: All OpenSSL issues: https://ubuntu.com/security/cves?q=&package=openssl&priority=&version=&status= OpenSSL issues, restricted to just Jammy: https://ubuntu.com/secur

[Touch-packages] [Bug 2023741] Re: package apparmor 3.0.4-2ubuntu2.2 failed to install/upgrade: installed apparmor package post-installation script subprocess was killed by signal (Broken pipe)

2023-06-14 Thread Seth Arnold
Hello Stephan, it looks a bit like you had an external hard drive disconnect or suffer low power immediately before these error messages. My guess is that making sure all the cables are plugged in tightly, rebooting, and then: sudo apt update sudo apt install -f will get you back up and running

[Touch-packages] [Bug 2008846] Re: package libssl3:amd64 3.0.2-0ubuntu1.8 failed to install/upgrade: installed libssl3:amd64 package post-installation script subprocess returned error exit status 1

2023-06-02 Thread Seth Arnold
Of your suggestions, I like #1 the most; a reboot is usually a good idea *anyway*, since there's always kernel updates to install, but I'd hold off rebooting until you get the machine back into a happy state. Try: sudo kill 1224036 sudo apt install -f You might also need: sudo dpkg --configure

[Touch-packages] [Bug 2008846] Re: package libssl3:amd64 3.0.2-0ubuntu1.8 failed to install/upgrade: installed libssl3:amd64 package post-installation script subprocess returned error exit status 1

2023-06-02 Thread Seth Arnold
Thanks Adrien, that feels less worrying than I initially thought. Yesterday I missed an unattended-upgrades that's been running since March. Oof. I honestly don't know what to suggest to Derek; killing those processes feels like a good idea, since there's no terminal available to interact with deb

[Touch-packages] [Bug 2021484] Re: Editing a VPN ask to introduce credentials but if you cancel can be accessed anyway

2023-06-02 Thread Seth Arnold
** Changed in: ubuntu-settings (Ubuntu) Status: Incomplete => New -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to ubuntu-settings in Ubuntu. https://bugs.launchpad.net/bugs/2021484 Title: Editing a VPN ask to introdu

[Touch-packages] [Bug 2021484] Re: Editing a VPN ask to introduce credentials but if you cancel can be accessed anyway

2023-06-01 Thread Seth Arnold
Hello Cristobal, can you make changes from that interface? Or is it read-only? Thanks ** Information type changed from Private Security to Public Security ** Changed in: ubuntu-settings (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of

[Touch-packages] [Bug 2008846] Re: package libssl3:amd64 3.0.2-0ubuntu1.8 failed to install/upgrade: installed libssl3:amd64 package post-installation script subprocess returned error exit status 1

2023-06-01 Thread Seth Arnold
Am I reading the ps faux output from comment #5 correctly, that needrestart is responsible for starting a dpkg process that starts a debconf frontend, but there's no terminal available to this process? Why is needrestart doing operations that would need a debconf frontend? Should it be doing them,

[Touch-packages] [Bug 2020838] Re: [regression][jammy] augenrules Error sending add rule data request (No such file or directory)

2023-06-01 Thread Seth Arnold
Awesome find! Probably for many users, that's a perfectly fine change, I suspect that auditing home directories isn't going to be a top priority for many people. However, the sheer confusion of this issue is troubling: going from these error messages to "I have to remove a systemd configuration di

[Touch-packages] [Bug 2020840] Re: package linux-image-5.15.0-72-generic 5.15.0-72.79 failed to install/upgrade: run-parts: /etc/kernel/postinst.d/initramfs-tools exited with return code 1

2023-05-26 Thread Seth Arnold
Hello, it looks like your /boot filesystem is probably full. Recovering from this isn't great fun. There's some advice on https://askubuntu.com/q/89710/33812 that might be helpful. Processing triggers for linux-image-5.15.0-72-generic (5.15.0-72.79) ... /etc/kernel/postinst.d/initramfs-tools: upda

[Touch-packages] [Bug 2020838] Re: [regression][jammy] augenrules Error sending add rule data request (No such file or directory)

2023-05-26 Thread Seth Arnold
Hello, my guess is /home or /home/ubuntu may not exist when the audit rules are loaded. The file and directory watches work by setting up inotify watches on the underlying objects, and if the file or directory doesn't exist, there's nothing to watch. So, it errors. You can add -i to the configura

[Touch-packages] [Bug 2019496] Re: Security implications of SUDO_ASKPASS

2023-05-17 Thread Seth Arnold
Hello Heinrich, I suspect once you can set aliases in shells used by people with sudo privileges, the game is already over regardless of environment variables used. Is there something I'm missing where setting aliases in someone else's shell is fine except for this variable? Thanks -- You recei

[Touch-packages] [Bug 1457020] Re: x86_64-specific crash with one-word modulus

2023-05-17 Thread Seth Arnold
Lets set this to WONTFIX then; this isn't exactly a promise we won't get to it, but ideally any 14.04 LTS users affected by this would re-open or file a support request etc. ** Changed in: openssl (Ubuntu) Status: New => Won't Fix -- You received this bug notification because you are a me

[Touch-packages] [Bug 2019496] Re: Security implications of SUDO_ASKPASS

2023-05-17 Thread Seth Arnold
** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to sudo in Ubuntu. https://bugs.launchpad.net/bugs/2019496 Title: Security implications of SUDO_ASKPASS Stat

[Touch-packages] [Bug 2019940] Re: Directly manipulating NetworkManager keyfiles

2023-05-17 Thread Seth Arnold
jammy, lunary, and mantic: for distro in jammy lunar mantic ; do for component in main universe multiverse restricted ; do for-archive /srv/mirror/ubuntu/dists/$distro/$component/source/Sources.gz /srv/mirror/ubuntu/ ~/bin/for-archive-tools/unpack-search '/system- connections' ; done ; done | tee

[Touch-packages] [Bug 1066101] Re: netbase 5.0ubuntu1 fails to cleanly upgrade, asks about conffiles

2023-05-02 Thread Seth Arnold
Note to future-sarnold: Remove 'devscripts' from ~/.mk-sbuild.rc Install devscripts into the -source schroot by hand later. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to netbase in Ubuntu. https://bugs.launchpad.net/bugs/1

[Touch-packages] [Bug 2017594] Re: package leaves non-updated copy of /usr/sbin/apparmor_parser after update to apparmor-2.13.3-7ubuntu5.2. Orphaned older executable breaks docker

2023-04-25 Thread Seth Arnold
Your dpkg -S hits an ancient issue https://bugs.debian.org/cgi- bin/bugreport.cgi?bug=134758 You're also exactly right about status quo being an unhappy place. Debian is currently trying to figure out a solution: https://lists.debian.org/debian-devel/2023/04/msg8.html -- it's been in progress

[Touch-packages] [Bug 2017594] Re: package leaves non-updated copy of /usr/sbin/apparmor_parser after update to apparmor-2.13.3-7ubuntu5.2. Orphaned older executable breaks docker

2023-04-24 Thread Seth Arnold
Ah, interesting, TIL that focal is a bit odd here: - we changed to usrmerge as default in the disco installer - we added the 'usrmerge' package to convert old installations to this format in hirsute: https://bugs.launchpad.net/ubuntu/+source/usrmerge/+bug/1906671 So, if you installed with foca

[Touch-packages] [Bug 2017594] Re: package leaves non-updated copy of /usr/sbin/apparmor_parser after update to apparmor-2.13.3-7ubuntu5.2. Orphaned older executable breaks docker

2023-04-24 Thread Seth Arnold
Hello Paul-Andre, I don't see any /usr/sbin/apparmor_parser files in any of the binary packages that I've got very easy access to: sarnold@wopr:/dev/shm/apparmor $ find . -name apparmor_parser -ls 331800394 1472 -rwxr-xr-x 1 sarnold sarnold 1506552 Feb 28 14:18 ./apparmor_3.0.8-1ubuntu2/sb

[Touch-packages] [Bug 2015067] Re: package libpam-runtime 1.4.0-11ubuntu2.3 failed to install/upgrade: installed libpam-runtime package post-installation script subprocess returned error exit status 1

2023-04-03 Thread Seth Arnold
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to pam in Ubuntu. https://bugs.launchpad.net/bugs/2015067 Title: package libpam-runtime 1.4.0-11ubuntu2.3 failed to in

[Touch-packages] [Bug 1978351] Re: MITM vector: ifupdown puts .domains TLD in resolv.conf

2023-04-03 Thread Seth Arnold
We were asked privately if this should receive a CVE. I'll copy my reply here: In this case I don't believe a CVE is appropriate: - DNS is typically plain-text unauthenticated - DNS cache poisoning can be insanely easy if poor-quality DNS recursors are in use - DNS cache poisoning is possibl

[Touch-packages] [Bug 2009738] Re: no lxc manpage

2023-03-21 Thread Seth Arnold
Ah but it's still plenty useful, Simon showed me I was holding the tool the wrong way around. Having 300 manpages in a directory is a pretty fantastic starting point. Thanks :) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to l

[Touch-packages] [Bug 2009738] Re: no lxc manpage

2023-03-09 Thread Seth Arnold
Ah, thanks twice over. I've poked the old bug with a hope for a happier answer today :) Unfortunately lxc manpage isn't exactly ideal: $ lxc manpage lxc Error: open /var/lib/snapd/hostfs/home/sarnold/tmp/takehometests/lxc/lxc.alias.add.1: no such file or directory -- You received this bug noti

[Touch-packages] [Bug 2009738] [NEW] no lxc manpage

2023-03-08 Thread Seth Arnold
Public bug reported: Hello, I don't have an lxc manpage on my focal system: $ man lxc No manual entry for lxc $ dpkg -l lxd | grep lxd ; snap info lxd | grep installed un lxd (no description available) installed: 5.11-ad0b61e (24483) 149MB - It loo

[Touch-packages] [Bug 2009544] [NEW] OpenSSL 3 performance regression

2023-03-06 Thread Seth Arnold
Public bug reported: Hello, it sounds like there's some significant performance regressions in OpenSSL 3: https://github.com/openssl/openssl/issues/20286#issuecomment-1438826816 Some we might be able to address with: https://github.com/openssl/openssl/pull/18151 Some of the performance differen

[Touch-packages] [Bug 2008141] Re: apt pattern to list packages from universe

2023-02-24 Thread Seth Arnold
Awesome! Thanks, I thought 'section' would have been something like libs vs oldlibs in Debian, so I didn't even try it. Sorry. apt list '?installed?section(^universe/)' -- seems to work as I wanted. Thanks -- You received this bug notification because you are a member of Ubuntu Touch seeded pa

[Touch-packages] [Bug 2008507] Re: package login 1:4.11.1+dfsg1-2ubuntu1 failed to install/upgrade: unable to make backup link of './usr/bin/faillog' before installing new version: Input/output error

2023-02-24 Thread Seth Arnold
Hello, note the following lines from your dmesg: [3.791052] ata3.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [3.791095] ata3.00: BMDMA stat 0x65 [3.791116] ata3.00: failed command: READ DMA [3.791137] ata3.00: cmd c8/00:08:00:00:00/00:00:00:00:00/e0 tag 0 dma 4096 in

[Touch-packages] [Bug 2008507] Re: package login 1:4.11.1+dfsg1-2ubuntu1 failed to install/upgrade: unable to make backup link of './usr/bin/faillog' before installing new version: Input/output error

2023-02-24 Thread Seth Arnold
Thank you for taking the time to report this bug and helping to make Ubuntu better. Reviewing your dmesg attachment to this bug report it seems that there may be a problem with your hardware. I'd recommend performing a back up and then investigating the situation. Measures you might take include

[Touch-packages] [Bug 2008151] Re: package base-files 12ubuntu4.2 failed to install/upgrade: subprocess new pre-removal script returned error exit status 1

2023-02-22 Thread Seth Arnold
Your logs suggest that your /usr/bin/dpkg has been corrupted. There is no easy way to recover from this situation. If you have another computer of the same architecture and running the same release, you can copy the /usr/bin/dpkg file from one computer to the other. If you don't have this, you can

[Touch-packages] [Bug 2008051] Re: package linux-firmware 1.187.36 failed to install/upgrade: installed linux-firmware package post-installation script subprocess returned error exit status 1

2023-02-22 Thread Seth Arnold
These look like the important errors: update-initramfs: Generating /boot/initrd.img-5.15.0-60-generic I: The initramfs will attempt to resume from /dev/dm-2 I: (/dev/mapper/vgubuntu-swap_1) I: Set the RESUME variable to override this. Error 24 : Write error : cannot write compressed block E: mkin

[Touch-packages] [Bug 2008051] Re: package linux-firmware 1.187.36 failed to install/upgrade: installed linux-firmware package post-installation script subprocess returned error exit status 1

2023-02-22 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Touch-packages] [Bug 2008141] [NEW] apt pattern to list packages from universe

2023-02-22 Thread Seth Arnold
Public bug reported: Hello, a friend would like to remove all universe packages from their system but I do not know an easy way to discover which installed packages came from universe. I expected one of these two apt patterns to work: ?archive(REGEX), ~AREGEX Selects versions th

[Touch-packages] [Bug 2006793] Re: package linux-image-5.15.0-60-generic 5.15.0-60.66~20.04.1 failed to install/upgrade: run-parts: /etc/kernel/postinst.d/initramfs-tools exited with return code 1

2023-02-10 Thread Seth Arnold
Hello, my guess is your /boot filesystem is out of space. You might be able to free up enough space by running: sudo apt autoremove If that doesn't make enough free space, you might want to ask for help on https://askubuntu.com or #ubuntu on https://libera.chat Thanks -- You received this bug

[Touch-packages] [Bug 2006793] Re: package linux-image-5.15.0-60-generic 5.15.0-60.66~20.04.1 failed to install/upgrade: run-parts: /etc/kernel/postinst.d/initramfs-tools exited with return code 1

2023-02-10 Thread Seth Arnold
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to initramfs-tools in Ubuntu. https://bugs.launchpad.net/bugs/2006793 Title: package linux-image-5.15.0-60-generic 5.1

[Touch-packages] [Bug 2004505] [NEW] apt-key is still packaged

2023-02-01 Thread Seth Arnold
Public bug reported: The apt-key(8) manpage includes: apt-key(8) will last be available in Debian 11 and Ubuntu 22.04. It appears that apt-key was shipped in Ubuntu 22.10 by accident. apt-key is still in the 2.5.5 apt packaged for Lunar: https://launchpad.net/ubuntu/lunar/amd64/apt/2.5.5 ⏚ [sar

[Touch-packages] [Bug 2003759] [NEW] apt phasing should be documented in apt.conf(5) rather than apt_preferences(5)

2023-01-23 Thread Seth Arnold
Public bug reported: Hello, the apt documentation on controlling apt phasing is in apt_preferences(5). However, putting the records into a file in /etc/apt/preferences.d leads to an error: $ rg -l APT::Machine-ID -g '*.xml' apt_2.2.2ubuntu1/doc/apt_preferences.5.xml apt_2.3.10/doc/apt_preference

[Touch-packages] [Bug 1988819] Re: When apt keeps back packages due to phased updates, it should say nothing

2023-01-23 Thread Seth Arnold
So far I've been arguing that apt should be more verbose about phasing, and why these packages are held back. A friend has suggested that instead apt should say *nothing*. I can see the appeal. Thanks -- You received this bug notification because you are a member of Ubuntu Touch seeded packages,

[Touch-packages] [Bug 1916931] Re: omshell returns inconsistent results or segfaults

2023-01-19 Thread Seth Arnold
** Changed in: isc-dhcp (Ubuntu) Status: Expired => New -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to isc-dhcp in Ubuntu. https://bugs.launchpad.net/bugs/1916931 Title: omshell returns inconsistent results or segfa

[Touch-packages] [Bug 2002891] Re: avahi_service_browser_new() failed: Invalid service type

2023-01-19 Thread Seth Arnold
Hello Hadmut, my first inclination is that this isn't a security issue: - services should use cryptographic verification of both peers, if this is important - network administrators can use port security settings on their equipment to restrict which hosts can communicate in which fashions If I'

[Touch-packages] [Bug 2002891] Re: avahi_service_browser_new() failed: Invalid service type

2023-01-19 Thread Seth Arnold
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to avahi in Ubuntu. https://bugs.launchpad.net/bugs/2002891 Title: avahi_service_browser_new() failed: Invalid service

[Touch-packages] [Bug 1916931] Re: omshell returns inconsistent results or segfaults

2023-01-04 Thread Seth Arnold
Bill, Lukas asked a question in comment #10 and set the bug to 'incomplete', hoping to get feedback from someone who could reproduce the problem. If you can provide an answer, please do set the bug back to 'confirmed' when answering. Thanks -- You received this bug notification because you are a

[Touch-packages] [Bug 1999155] Re: UFW Disabled by default

2022-12-08 Thread Seth Arnold
Hello Pedro, thanks for the report; this was an explicit decision: https://wiki.ubuntu.com/SecurityTeam/FAQ#UFW Making firewall rules that are tight enough to stop threats yet open enough for the computer to still be useful in a wide variety of environments is very challenging. We've decided that

[Touch-packages] [Bug 1998058] Re: dpkg error libflac8_1.3.2-1ubuntu0.1_i386.deb

2022-12-05 Thread Seth Arnold
Hector, ureadahead was more useful in the era of slow hard drives. It loads files that are needed during system boot, with the intention of having the files in memory before they are needed. It's significantly less useful with SSDs, and even with spinning hard drives it's not always a win. (It assu

[Touch-packages] [Bug 1996937] Re: "install vim failed"package tzdata 2022f-0ubuntu0.22.04.1 failed to install/upgrade: le paquet est dans un état vraiment incohérent; vous devriez le réinstaller ava

2022-11-30 Thread Seth Arnold
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to tzdata in Ubuntu. https://bugs.launchpad.net/bugs/1996937 Title: "install vim failed"package tzdata 2022f-0ubuntu0.

[Touch-packages] [Bug 1998265] Re: OverFlow error when using cnf-extractor

2022-11-29 Thread Seth Arnold
Here's my guess: $ echo "l(2875204834)/l(2)" | bc -ql 31.42101759351087610555 Package: dotnet-sdk-6.0-source-built-artifacts Architecture: amd64 Version: 6.0.111-0ubuntu3 Priority: optional Section: universe/devel Source: dotnet6 Origin: Ubuntu Maintainer: Ubuntu Developers Bugs: https://bugs.l

[Touch-packages] [Bug 1993732] Re: Sound

2022-10-20 Thread Seth Arnold
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to alsa-driver in Ubuntu. https://bugs.launchpad.net/bugs/1993732 Title: Sound Status in alsa-driver package in Ubunt

[Touch-packages] [Bug 1991975] Re: dev file system is mounted without nosuid or noexec

2022-10-13 Thread Seth Arnold
Just a heads-up that SGX has been deprecated by Intel: https://edc.intel.com/content/www/us/en/design/ipla/software- development-platforms/client/platforms/alder-lake-desktop/12th- generation-intel-core-processors-datasheet-volume-1-of-2/004/deprecated- technologies/ === The processor has deprec

[Touch-packages] [Bug 1992025] Re: When sudo does not require a password, it alters stty as though it is reading a password

2022-10-06 Thread Seth Arnold
I wasn't able to reproduce on 20.04 LTS. I was able to reproduce on 22.04 LTS. This little script should work out of the box: $ cat /tmp/sudo-stty #!/bin/bash sudo ls mkdir /tmp/stty for i in `seq -w 1 999`; do stty -a > /tmp/stty/before.${i}; sudo sleep 1 & stty -a > /tmp/stty/after.${i} 2

[Touch-packages] [Bug 1992025] Re: When sudo does not require a password, it alters stty as though it is reading a password

2022-10-06 Thread Seth Arnold
** Changed in: sudo (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to sudo in Ubuntu. https://bugs.launchpad.net/bugs/1992025 Title: When sudo does not require a password, it alters st

[Touch-packages] [Bug 1842320] Re: Can't boot: "error: out of memory." immediately after the grub menu

2022-09-29 Thread Seth Arnold
I've been asked to prepare a summary of the current status of this bug: - there's a grub2 security update that's been published and then pulled: https://launchpad.net/ubuntu/+source/grub2-unsigned/2.06-2ubuntu10/+publishinghistory https://bugs.launchpad.net/ubuntu/+source/grub2-signed/+bug/19

[Touch-packages] [Bug 1988819] Re: When apt keeps back packages due to phased updates, it should say so

2022-09-20 Thread Seth Arnold
An alternative, proposed by user avih on IRC, is to not report any of these packages to the user at all: however, these phased updates are quite a big list which adds a lot of noise to my regular dist-upgrade, and it interferes with me reviewing what's about to get updated the kept back list

[Touch-packages] [Bug 1988819] Re: When apt keeps back packages due to phased updates, it should say so

2022-09-20 Thread Seth Arnold
apt-cache policy knows when packages are phased; when apt needs to report that packages are held back, apt could look up each one to report phased status. Not fixing this because the strings need translating is an argument for declaring APT a finished project and moving on to the Next Big Thing.

Re: [Touch-packages] [Bug 48734] Re: Home permissions too open

2022-09-12 Thread Seth Arnold
On Mon, Sep 12, 2022 at 07:39:37AM -, Alkis Georgopoulos wrote: > This change takes away the ability of the users to share some of their > data WITHOUT involving the administrator. Hello Alkis, do note that it is typical for users to own their own home directory; if a user wishes to share, the

[Touch-packages] [Bug 1988819] Re: When apt keeps back packages due to phased updates, it should say so

2022-09-06 Thread Seth Arnold
I have seen many people on IRC *very* upset after wasting a lot of time trying to install updates that apt will not let them install. Fixing this is critical to our reputation. Thanks -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscri

[Touch-packages] [Bug 1988588] Re: Xeon E3-1200 v2/3rd Gen Core processor Graphics Controller Drivers missing

2022-09-02 Thread Seth Arnold
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to xorg in Ubuntu. https://bugs.launchpad.net/bugs/1988588 Title: Xeon E3-1200 v2/3rd Gen Core processor Graphics Cont

[Touch-packages] [Bug 1988010] Re: systemd ignoring DHCP DNS servers and DNS servers set in Network Manager GUI

2022-08-30 Thread Seth Arnold
Cool, thanks Josh -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to systemd in Ubuntu. https://bugs.launchpad.net/bugs/1988010 Title: systemd ignoring DHCP DNS servers and DNS servers set in Network Manager GUI Status in s

[Touch-packages] [Bug 1988010] Re: systemd ignoring DHCP DNS servers and DNS servers set in Network Manager GUI

2022-08-30 Thread Seth Arnold
Hello Josh, which GUI are you using to change dns or dhcp settings? Thanks ** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to systemd in Ubuntu. https://bugs.l

[Touch-packages] [Bug 1987228] Re: Bug display when turning to hibernation

2022-08-22 Thread Seth Arnold
** Information type changed from Private Security to Public Security ** Also affects: gnome-shell (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to xorg in Ubuntu. https://bu

[Touch-packages] [Bug 1839598] Re: tcp_wrappers does not whitelisting of domains, vs IPs

2022-08-18 Thread Seth Arnold
** Changed in: tcp-wrappers (Ubuntu) Status: New => Won't Fix -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to tcp-wrappers in Ubuntu. https://bugs.launchpad.net/bugs/1839598 Title: tcp_wrappers does not whitelisting

[Touch-packages] [Bug 1958055] Re: sudo apport-kde is in a different design (stripped XDG_CURRENT_DESKTOP)

2022-07-28 Thread Seth Arnold
I'm a bit surprised ubuntu-bug shows a GUI when run under sudo at all. I think I'd expect the usual X11 "no cookies" failure to connect. Running X programs as another user is bound to be trouble. Perhaps ubuntu-bug should quit immediately if it detects running via sudo, su, etc things? Thanks --

[Touch-packages] [Bug 1982898] Re: CVE-2021-46829: Buffer overwrite in io-gif-animation.c composite_frame() in gdk-pixbuf

2022-07-27 Thread Seth Arnold
** Description changed: [Impact]  * A buffer overwrite exists in gdk-pixbuf's thumbnailer.  * The GIF loader runs out of memory with specifically crafted files with bad frame data (and images with its sizes) over the integer limit.  * After gdk-pixbuf-thum runs out of memory, ot

[Touch-packages] [Bug 1981807] Re: qt5-network openssl3 armhf does not support tls1.3

2022-07-15 Thread Seth Arnold
** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to qtbase-opensource-src in Ubuntu. https://bugs.launchpad.net/bugs/1981807 Title: qt5-network openssl3 armhf

[Touch-packages] [Bug 1981362] Re: rehash command not working on armhf architecture inside chroot

2022-07-11 Thread Seth Arnold
Hello Oscar, I didn't think systemd-nspawn would do architecture emulation on its own. Did you perhaps set up qemu-user-static yourself on systems where this is working, but not set it up on the system where it is failing? Or am I missing a new systemd-nspawn feature? Thanks ** Changed in: open

  1   2   3   4   5   6   7   8   9   10   >