[Bug 1957077] Re: SIGSEGV during processing of unicode string

2024-10-02 Thread Marc Deslauriers
tatus: Fix Released => In Progress ** Changed in: unzip (Ubuntu Noble) Status: New => In Progress ** Changed in: unzip (Ubuntu Noble) Assignee: (unassigned) => Marc Deslauriers (mdeslaur) ** Changed in: unzip (Ubuntu Oracular) Assignee: (unassigned) => Marc Desl

[Bug 2083176] Re: grub-efi/install_devices becoming stale due to by-id/nvme-eui.* symlinks disappearing

2024-09-30 Thread Marc Deslauriers
grub-install worked, and the laptop reboot successfully. Thanks! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2083176 Title: grub-efi/install_devices becoming stale due to by-id/nvme-eui.* symlin

[Bug 2083176] Re: grub-efi/install_devices becoming stale due to by-id/nvme-eui.* symlinks disappearing

2024-09-30 Thread Marc Deslauriers
So now that we've identified the root cause, I have checked the box beside the disk that is displayed, clicked the Next button and am presented with a dialog with an unchecked box that says "Continue without installing grub". If I don't check that, I get a warning and I go back to the disk selectio

[Bug 2083176] Re: grub-efi/install_devices becoming stale due to by-id/nvme-eui.* symlinks disappearing

2024-09-30 Thread Marc Deslauriers
We have a winner! 01:00.0 Non-Volatile memory controller [0108]: SK hynix Gold P31 SSD [1c5c:174a] -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2083176 Title: grub-efi/install_devices becoming sta

[Bug 2083176] Re: grub-efi/install_devices becoming stale due to by-id/nvme-eui.* symlinks disappearing

2024-09-30 Thread Marc Deslauriers
/sys/class/block/nvme0n1/wwid is: nvme.1c5c-465342334e3636383131343130334f3259-534b48796e69785f48464d35313247443348583031354e-0001 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2083176 Title: g

[Bug 2083176] Re: grub-efi install device being prompted on upgrade, despite only /boot/efi being an option.

2024-09-30 Thread Marc Deslauriers
I didn't migrate the installation. It looks like I installed it with jammy. Here are the /var/log/installer contents if that helps any. ** Attachment added: "Contents of /var/log/installer" https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/2083176/+attachment/5823468/+files/installer.tgz -

[Bug 2083176] Re: grub-efi install device being prompted on upgrade, despite only /boot/efi being an option.

2024-09-30 Thread Marc Deslauriers
** Attachment added: "Contents of /dev/disk/by-id" https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/2083176/+attachment/5823467/+files/by-id.txt -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/20

[Bug 2083176] Re: grub-efi install device being prompted on upgrade, despite only /boot/efi being an option.

2024-09-30 Thread Marc Deslauriers
Here's the output of debconf-show grub-pc. debconf-show grub-efi-amd64 didn't return anything. ** Attachment added: "grub-pc debconf" https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/2083176/+attachment/5823439/+files/output.txt -- You received this bug notification because you are a mem

[Bug 2083176] Re: grub-efi install device being prompted on upgrade, despite only /boot/efi being an option.

2024-09-30 Thread Marc Deslauriers
The laptop is still waiting at this dialog in case there's some relevant information that would be useful for this bug -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2083176 Title: grub-efi install d

[Bug 2083176] Re: grub-efi install device being prompted on upgrade

2024-09-30 Thread Marc Deslauriers
> Is it possible that something was changed about this installation / computer since it was originally installed that could have caused the install device to become invalid? There nothing special about this device. It's just an HP laptop with a single disk that was installed by me in a default way

[Bug 2083176] [NEW] Technical dialog during upgrade

2024-09-29 Thread Marc Deslauriers
Public bug reported: A family member just sent me this dialog that popped up when they installed their updates today. I'm not sure how a regular user is supposed to be able to handle what is presented here. Do they check the box? What happens if they don't? Heck, even I don't know what the proper

[Bug 2082335] Re: Sept 2024 security issue tracking bug

2024-09-27 Thread Marc Deslauriers
** Changed in: cups (Ubuntu Oracular) Status: New => Fix Committed ** Changed in: cups (Ubuntu Focal) Assignee: Kevin bush (akjk32002) => (unassigned) ** Changed in: cups (Ubuntu Jammy) Assignee: Kevin bush (akjk32002) => (unassigned) ** Changed in: cups (Ubuntu Noble) Assi

[Bug 2082335] Re: Sept 2024 security issue tracking bug

2024-09-26 Thread Marc Deslauriers
** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2082335 Title: Sept 2024 security issue tracking bug To manage notifications about

[Bug 2081756] Re: Annoying pop-ups from gpgsm

2024-09-24 Thread Marc Deslauriers
** Information type changed from Private Security to Public Security ** Changed in: gnupg2 (Ubuntu) Status: New => Confirmed ** Changed in: gnupg2 (Ubuntu) Importance: Undecided => Wishlist -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscri

[Bug 2081875] [NEW] Update to 20240203 bundle

2024-09-24 Thread Marc Deslauriers
) Importance: Undecided Assignee: Marc Deslauriers (mdeslaur) Status: In Progress ** Affects: ca-certificates (Ubuntu Jammy) Importance: Undecided Assignee: Marc Deslauriers (mdeslaur) Status: In Progress ** Affects: ca-certificates (Ubuntu Noble) Importance: Undecided

[Bug 2072370]

2024-09-24 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is availabl

[Bug 2073033] Re: request to /storage/v2/edit_partition crashed with Exception | I like specifc byte count with files in Gnome It is no longer available I use them for comparison Only GB & MB are avai

2024-09-24 Thread Marc Deslauriers
** Information type changed from Public Security to Public ** Tags added: noble -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2073033 Title: request to /storage/v2/edit_partition crashed with Excep

[Bug 2073515] Re: functionality loss in mod_proxy rewritten path

2024-09-24 Thread Marc Deslauriers
** Changed in: apache2 (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2073515 Title: functionality loss in mod_proxy rewritten path To manage notifications a

[Bug 2076471] Re: Screen locking issue

2024-09-24 Thread Marc Deslauriers
** Information type changed from Public Security to Public -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/2076471 Title: Screen locking issue To manage notifications about this bug go to: ht

[Bug 2075118] Re: PNG images in .deb don't match md5sums file or local build

2024-09-24 Thread Marc Deslauriers
** Also affects: pkgbinarymangler (Ubuntu) Importance: Undecided Status: New ** Changed in: pkgbinarymangler (Ubuntu) Status: New => Confirmed ** Changed in: sunpy (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu

[Bug 2076397] Re: Ghostwrite mitigation

2024-09-24 Thread Marc Deslauriers
** Changed in: opensbi (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2076397 Title: Ghostwrite mitigation To manage notifications about this bug go to: http

[Bug 2080555] Re: ubunutu 20 has many vulnerability for the package linux-aws-5.15

2024-09-24 Thread Marc Deslauriers
** Changed in: linux-aws-5.15 (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2080555 Title: ubunutu 20 has many vulnerability for the package linux-aws-5.15

[Bug 2079834] Re: libssh2-1 lacks support for rsa-sha2-{512,256}

2024-09-24 Thread Marc Deslauriers
** Changed in: libssh2 (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2079834 Title: libssh2-1 lacks support for rsa-sha2-{512,256} To manage notifications a

[Bug 2081600] Re: Issue with upgrading

2024-09-24 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 2081605] Re: 3.32.2 Deprecated

2024-09-24 Thread Marc Deslauriers
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2081605 Title: 3.32.2 Deprecated To manage notifications about this bug go to: https://bugs

[Bug 2081855] Re: Following recent Ubuntu 24.04.1 LTS upgrade an 'Error: opening the cache'.

2024-09-24 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 2080940] Re: unattended-upgrades broken by python-upgrade

2024-09-17 Thread Marc Deslauriers
** Bug watch added: github.com/python/cpython/issues #124170 https://github.com/python/cpython/issues/124170 ** Also affects: python via https://github.com/python/cpython/issues/124170 Importance: Unknown Status: Unknown ** Bug watch added: Debian Bug tracker #1079780 https://b

[Bug 2075145] Re: exfatprogs CVE-2023-45897 backport to jammy

2024-08-20 Thread Marc Deslauriers
Update has been published now, thanks for testing! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2075145 Title: exfatprogs CVE-2023-45897 backport to jammy To manage notifications about this bug go

[Bug 2075145] Re: exfatprogs CVE-2023-45897 backport to jammy

2024-08-19 Thread Marc Deslauriers
Thanks for the debdiff for this issue. I've validated that that is the only commit that affects jammy. I have uploaded this package for building in the security team PPA here: https://launchpad.net/~ubuntu-security- proposed/+archive/ubuntu/ppa/+packages Once the package has finished building, c

[Bug 2051574] Re: gnome-shell-portal-helper crashed with SIGTRAP in waitUntilSyncedOrDie() from WebKit::XDGDBusProxy::launch() ["bwrap: setting up uid map: Permission denied" ; "Failed to fully launch

2024-08-16 Thread Marc Deslauriers
I'll let someone else decide if this bug is still worth fixing even though we aren't using the helper anymore. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2051574 Title: gnome-shell-portal-helper

[Bug 2051574] Re: gnome-shell-portal-helper crashed with SIGTRAP in waitUntilSyncedOrDie() from WebKit::XDGDBusProxy::launch() ["bwrap: setting up uid map: Permission denied" ; "Failed to fully launch

2024-08-16 Thread Marc Deslauriers
Ah yes, this should be fixed now because of the security update. I meant to update this bug, but forgot. Thanks for noticing. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2051574 Title: gnome-shell

[Bug 2077001] Re: Clipboard contents available at locked screen

2024-08-14 Thread Marc Deslauriers
Thanks! ** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2077001 Title: Clipboard contents available at locked screen To manage no

[Bug 2076130] Re: CVE-2024-6472

2024-08-13 Thread Marc Deslauriers
Thanks Rico! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2076130 Title: CVE-2024-6472 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/2076

[Bug 2076130] Re: CVE-2024-6472

2024-08-13 Thread Marc Deslauriers
Hi Rico, the debdiff in comment #1 contains a patch that doesn't actually apply to jammy. Could you please fix it? Thanks! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2076130 Title: CVE-2024-6472

[Bug 2076130] Re: CVE-2024-6472

2024-08-13 Thread Marc Deslauriers
Thanks for preparing these Rico, I'll prepare the security updates! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2076130 Title: CVE-2024-6472 To manage notifications about this bug go to: https://

[Bug 1967245] Re: 'net usershare' returned error 255 on jammy-desktop-amd64

2024-08-13 Thread Marc Deslauriers
** Changed in: nautilus-share (Ubuntu Focal) Assignee: (unassigned) => Marc Deslauriers (mdeslaur) ** Changed in: nautilus-share (Ubuntu Focal) Status: Triaged => In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to

[Bug 2075542] Re: bind9 1:9.18.28-0ubuntu0.20.04.1 breakes local system

2024-08-03 Thread Marc Deslauriers
Unfortunately, we did not have access to the simplified patches for 9.16 when the security issues were published, and since 9.16 is no longer supported by ISC since April 2024, we weren't expecting them to become available. The patches for 9.18 were much more sophisticated rendering backporting to

[Bug 2074837] Re: bind9 crashes after an update to 9.18 version

2024-08-01 Thread Marc Deslauriers
I don't believe Ubuntu 20.04 shipped with a dnssec-enable directive. Could you perhaps have upgraded from a previous release, or kept an old configuration file? Did you get warnings in your log file about the deprecated directive? -- You received this bug notification because you are a member of

[Bug 2073942] Re: Fox News Site Not Working

2024-07-24 Thread Marc Deslauriers
** Package changed: apache2 (Ubuntu) => firefox (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2073942 Title: Fox News Site Not Working To manage notifications about this bug go to: https:/

[Bug 1999814] Re: [SRU] Allow for specifying common baseline CPU model with disabled feature

2024-07-23 Thread Marc Deslauriers
Unfortunately the nova package in jammy-proposed got superseded by a security update and will have to be re-uploaded. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1999814 Title: [SRU] Allow for spe

[Bug 2073515] Re: functionality loss in mod_proxy rewritten path

2024-07-22 Thread Marc Deslauriers
Thanks, that is very helpful, so we're getting an extra slash here: rewrite '/asd.example.com/' -> 'http:///asd:8000/' instead of: rewrite '/asd.example.com/' -> 'http://asd:8000/' and I can confirm this issue exists with upstream's 2.4.62 release too, so I will keep an eye out for new fixes th

[Bug 2073515] Re: functionality loss in mod_proxy rewritten path

2024-07-22 Thread Marc Deslauriers
I'm having difficulty reproducing your exact issue. Could you please run apache with "rewrite:trace3" and show working and non-working requests from error.log? Thanks. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launch

[Bug 2073515] Re: functionality loss in mod_proxy rewritten path

2024-07-18 Thread Marc Deslauriers
** Information type changed from Public to Public Security -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2073515 Title: functionality loss in mod_proxy rewritten path To manage notifications about

[Bug 2073515] Re: functionality loss in mod_proxy rewritten path

2024-07-18 Thread Marc Deslauriers
: (unassigned) => Marc Deslauriers (mdeslaur) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2073515 Title: functionality loss in mod_proxy rewritten path To manage notifications about this bug go to: ht

[Bug 2072648] Re: Regression in Apache 2.4.52-1ubuntu4.10 causes intermittent errors in mod_proxy_http2 backend

2024-07-11 Thread Marc Deslauriers
Regression fix USN has now been published: https://ubuntu.com/security/notices/USN-6885-2 Thanks! ** Changed in: apache2 (Ubuntu) Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.

[Bug 2072648] Re: Regression in Apache 2.4.52-1ubuntu4.10 causes intermittent errors in mod_proxy_http2 backend

2024-07-11 Thread Marc Deslauriers
s: apache2 (Ubuntu Jammy) Importance: Undecided Status: New ** Also affects: apache2 (Ubuntu Focal) Importance: Undecided Status: New ** Changed in: apache2 (Ubuntu Focal) Assignee: (unassigned) => Marc Deslauriers (mdeslaur) ** Changed in: apache2 (Ubuntu Jammy)

[Bug 2072648] Re: Regression in Apache 2.4.52-1ubuntu4.10 causes intermittent errors in mod_proxy_http2 backend

2024-07-11 Thread Marc Deslauriers
I have uploaded a test package to the security team PPA here: https://launchpad.net/~ubuntu-security- proposed/+archive/ubuntu/ppa/+packages If you could give it a spin and see if it fixes the issue, that would be great. If it does, I'll release it as a regression update. Thanks! -- You receiv

[Bug 2072648] Re: Regression in Apache 2.4.52-1ubuntu4.10 causes intermittent errors in mod_proxy_http2 backend

2024-07-11 Thread Marc Deslauriers
This is a stab in the dark but perhaps this is part of the problem: https://github.com/apache/httpd/commit/4d3a308014be26e5407113b4c827a1ea2882bf38 Would you be willing to try a test package if I build one? -- You received this bug notification because you are a member of Ubuntu Bugs, which is

[Bug 2072648] Re: Regression in Apache 2.4.52-1ubuntu4.10 causes intermittent errors in mod_proxy_http2 backend

2024-07-11 Thread Marc Deslauriers
** Changed in: apache2 (Ubuntu) Assignee: (unassigned) => Marc Deslauriers (mdeslaur) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2072648 Title: Regression in Apache 2.4.52-1ubuntu4

[Bug 2072648] Re: Regression in Apache 2.4.52-1ubuntu4.10 causes intermittent errors in mod_proxy_http2 backend

2024-07-11 Thread Marc Deslauriers
Is this all your are getting? "Reason: URI has no hostname: /…" Or did you edit that to remove sensitive info? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2072648 Title: Regression in Apache 2.4.5

[Bug 2069596] Re: blocks wrong IPv4 and IPv6 addresses on LE systems (reversed byte order)

2024-07-05 Thread Marc Deslauriers
** Changed in: crowdsec-firewall-bouncer (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2069596 Title: blocks wrong IPv4 and IPv6 addresses on LE systems (rev

[Bug 2068823] Re: gofmt in golang-1.22-go flagged by multiple EDR software

2024-07-05 Thread Marc Deslauriers
We have no way of knowing why virustotal is flagging this as being malicious, so there is no actionable item we can take with this bug report. Could you get more details on the issue? ** Changed in: golang-1.22 (Ubuntu) Status: New => Incomplete -- You received this bug notification beca

[Bug 2069301] Re: Xorg crash

2024-07-05 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 2070259]

2024-07-05 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is availabl

[Bug 2069382] Re: The Gnome graphics session disappears with SSH errors

2024-07-05 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 2069490] Re: Possible fingerjacking vulnerability: CVE-2024-37408

2024-07-05 Thread Marc Deslauriers
** Changed in: pam (Ubuntu) Status: New => Triaged -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2069490 Title: Possible fingerjacking vulnerability: CVE-2024-37408 To manage notifications a

[Bug 2069596]

2024-07-05 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is availabl

[Bug 2070418]

2024-07-05 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is availabl

[Bug 2071634] Re: [81DE, Realtek ALC236, Mic, Internal] No sound at all

2024-07-05 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 2071614] Re: package libc-bin 2.35-0ubuntu3.8 failed to install/upgrade: installed libc-bin package post-installation script subprocess returned error exit status 126

2024-07-05 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 2071924] Re: package libavahi-ui-gtk3-0 0.7-4ubuntu7 failed to install/upgrade: dpkg-deb --fsys-tarfile subprocess returned error exit status 2

2024-07-05 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 2072168] Re: package click 0.5.2-2ubuntu4 failed to install/upgrade: installed click package post-installation script subprocess returned error exit status 1

2024-07-05 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 2071777] Re: Unable to ssh to servers in other subnet

2024-07-03 Thread Marc Deslauriers
Thanks for reporting this issue. It's a pretty odd issue, because all the OpenSSH update did was disable a line that logged something, so I'm not sure how it could be related to connecting from a different subnet. Can you confirm that downgrading to the previous release fixes the issue? -- You r

[Bug 2071815] Re: Investigate ASLR re-randomization being disabled for children

2024-07-03 Thread Marc Deslauriers
** Summary changed: - Investigate ASLR being disabled for children + Investigate ASLR re-randomization being disabled for children -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2071815 Title: Inves

[Bug 2071815] Re: Investigate ASLR being disabled for children

2024-07-03 Thread Marc Deslauriers
Subscribing Nick, who appears to be the original delta author. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2071815 Title: Investigate ASLR being disabled for children To manage notifications abou

[Bug 2071815] [NEW] Investigate ASLR being disabled for children

2024-07-03 Thread Marc Deslauriers
*** This bug is a security vulnerability *** Public security bug reported: The systemd-socket-activation.patch patch has an Ubuntu delta to fix bug 2011458, but this results in ASLR not being re-randomized for children because the patch delta does "rexec_flag = 0;". This was discovered as part o

[Bug 2070497] Re: June 2024 security issue

2024-07-02 Thread Marc Deslauriers
** Information type changed from Private Security to Public Security ** Changed in: openssh (Ubuntu Oracular) Status: In Progress => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2

[Bug 2070315] Re: error in /etc/cups/cupsd.conf from today's patch

2024-06-26 Thread Marc Deslauriers
It looks like upstream released a follow-up commit to fix this issue, or one similar to it: https://github.com/OpenPrinting/cups/commit/145b946a86062aafab76c656ee9c1112bfd4f804 We will build test packages to see if this solves the regression, and if so, we will publish updates. ** Also affects:

[Bug 2067742] Re: [SRU] CVE-2024-36041 Fix ksmserver: Unauthorized users can access session manager

2024-06-19 Thread Marc Deslauriers
I have built packages in the security team proposed PPA for testing. Additional packages required no-change rebuilds in the -security pocket also. For Jammy, the additional packages are breeze, libksysguard, layer-shell-qt, kwin, kwayland-server. For Focal, the additional packages are kwin and bree

[Bug 2067742] Re: [SRU] CVE-2024-36041 Fix ksmserver: Unauthorized users can access session manager

2024-06-18 Thread Marc Deslauriers
ACK on the debdiffs, packages are building now! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2067742 Title: [SRU] CVE-2024-36041 Fix ksmserver: Unauthorized users can access session manager To m

[Bug 2065579] Re: [UBUNTU 22.04] OS guest boot issues on 9p filesystem

2024-06-03 Thread Marc Deslauriers
In response to comment #7, I have no issue releasing a security update regression fix for focal and jammy that relaxes the CVE fix for sockets since that is a change in behaviour. Let me know once the proposed patch has been successfully tested to resolve the issue. -- You received this bug notif

[Bug 2065579] Re: [UBUNTU 22.04] OS guest boot issues on 9p filesystem

2024-05-30 Thread Marc Deslauriers
This is the upstream commit which introduced the change in behaviour: https://gitlab.com/qemu- project/qemu/-/commit/f6b0de53fb87ddefed348a39284c8e2f28dc4eda There is no subsequent fix to the new restrictions, and the only more recent commit is one to deprecate the whole proxy backend: https://g

[Bug 2065728] Re: CVE-2024-3044

2024-05-28 Thread Marc Deslauriers
These were all released: https://ubuntu.com/security/notices/USN-6789-1 ** Changed in: libreoffice (Ubuntu Focal) Status: In Progress => Fix Released ** Changed in: libreoffice (Ubuntu Jammy) Status: In Progress => Fix Released ** Changed in: libreoffice (Ubuntu Mantic) Sta

[Bug 2059852] Re: Invalid free called during libfreetype FT_Done_Glyph

2024-05-25 Thread Marc Deslauriers
** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2059852 Title: Invalid free called during libfreetype FT_Done_Glyph To manage noti

[Bug 2039354] Re: GDM does not prevent users with login shell /sbin/nologin from logging on

2024-05-24 Thread Marc Deslauriers
Adding gnome-session as this is where the logic exists. I don't see any changes in the latest gnome-session script. Could you please file a bug with the upstream gnome-session developers here?: https://gitlab.gnome.org/GNOME/gnome-session/-/issues Thanks! ** Also affects: gnome-session (Ubuntu)

[Bug 2041751] Re: RM: Remove dangerously insecure MPPE PPTP from Ubuntu

2024-05-24 Thread Marc Deslauriers
** Changed in: linux (Ubuntu) Status: New => Invalid ** Changed in: network-manager-pptp (Ubuntu) Status: New => Won't Fix ** Changed in: ubuntu-release-notes Status: New => Fix Released ** Changed in: pptp-linux (Ubuntu) Status: New => Confirmed -- You received thi

[Bug 2045330] Re: Please remove these packages before 24.04 LTS release

2024-05-24 Thread Marc Deslauriers
** Changed in: openjdk-22 (Ubuntu) Status: Triaged => Fix Committed ** Changed in: openjdk-22 (Ubuntu) Status: Fix Committed => Fix Released ** Changed in: openjdk-23 (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Ubun

[Bug 2058434] Re: leakage of private information through window list preview

2024-05-24 Thread Marc Deslauriers
** Changed in: mate-desktop (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2058434 Title: leakage of private information through window list preview To manag

[Bug 2063034]

2024-05-24 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is availabl

[Bug 2063035] Re: CVE-2023-28100: TIOCLINUX can send commands outside sandbox if running on a virtual console

2024-05-24 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is availabl

[Bug 2063055]

2024-05-24 Thread Marc Deslauriers
** Tags added: community-security -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2063055 Title: Boot failure 24.04 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+bu

[Bug 2067044] Re: package man-db 2.12.0-4build2 failed to install/upgrade: error writing to '': Input/output error

2024-05-24 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 2066368] Re: package linux-image-5.4.0-150-generic 5.4.0-150.167 failed to install/upgrade: installed linux-image-5.4.0-150-generic package post-installation script subprocess returned error exit

2024-05-24 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 2065678] Re: nvidia-graphics-drivers-545 package fails to launch graphical session with latest linux 5.15.0-107 update

2024-05-24 Thread Marc Deslauriers
** Also affects: linux (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2065678 Title: nvidia-graphics-drivers-545 package fails to launch graphical

[Bug 2066372]

2024-05-24 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is availabl

[Bug 2065728] Re: CVE-2024-3044

2024-05-15 Thread Marc Deslauriers
Since they are new upstream versions, and are already going through the SRU process, I'll wait until they are verified-done, and I will do a no- change rebuild of them into the -security pocket. Does that sound reasonable? Thanks! -- You received this bug notification because you are a member of

[Bug 2065728] Re: CVE-2024-3044

2024-05-15 Thread Marc Deslauriers
Thanks for the debdiffs, I will prepare packages in the security PPA and will comment back -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2065728 Title: CVE-2024-3044 To manage notifications about t

[Bug 2062389] Re: [SRU] Fix segfault in systemdunitdependency probe

2024-04-26 Thread Marc Deslauriers
ACK on the debdiffs. Uploaded for processing by the SRU team. Thanks! ** Changed in: openscap (Ubuntu Focal) Status: New => In Progress ** Changed in: openscap (Ubuntu Jammy) Status: New => In Progress -- You received this bug notification because you are a member of Ubuntu Bugs,

[Bug 2060880] Re: squid crashes after update to 4.10-1ubuntu1.10

2024-04-23 Thread Marc Deslauriers
The regression fix has now been published: https://ubuntu.com/security/notices/USN-6728-3 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2060880 Title: squid crashes after update to 4.10-1ubuntu1.10

[Bug 2062916] Re: evolution has undefined symbol in newest libwebkit2gtk

2024-04-22 Thread Marc Deslauriers
That is pretty odd, I can't reproduce this issue on jammy. what's the output of "ldd /lib/x86_64-linux- gnu/libwebkit2gtk-4.0.so.37"? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2062916 Title: ev

[Bug 2060880] Re: squid crashes after update to 4.10-1ubuntu1.10

2024-04-22 Thread Marc Deslauriers
Thanks for testing it, it's much appreciated! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2060880 Title: squid crashes after update to 4.10-1ubuntu1.10 To manage notifications about this bug go t

[Bug 2060880] Re: squid crashes after update to 4.10-1ubuntu1.10

2024-04-19 Thread Marc Deslauriers
I have located the issue and have prepared an updated package that will reintroduce the fixes for CVE-2023-5824. I have uploaded the updated package to the security team PPA here: https://launchpad.net/~ubuntu-security- proposed/+archive/ubuntu/ppa/+packages Once it has finished building, could y

[Bug 2061816] Re: apache2 2.4.41-4ubuntu3.17 defaults to transfer-encoding=chunked where this is undesired

2024-04-16 Thread Marc Deslauriers
That's good to see! Since this is a deliberate side-effect of the security change, I am marking this bug as "invalid". Thanks ** Changed in: apache2 (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubunt

[Bug 2061816] Re: apache2 2.4.41-4ubuntu3.17 defaults to transfer-encoding=chunked where this is undesired

2024-04-16 Thread Marc Deslauriers
I think this is actually the correct new behaviour for the security update...could you please try using ap_trust_cgilike_cl as instructed here: https://bz.apache.org/bugzilla/show_bug.cgi?id=68872 ** Bug watch added: bz.apache.org/bugzilla/ #68872 https://bz.apache.org/bugzilla/show_bug.cgi?id

[Bug 2061816] Re: apache2 2.4.41-4ubuntu3.17 defaults to transfer-encoding=chunked where this is undesired

2024-04-16 Thread Marc Deslauriers
Thanks for testing, I'll keep digging... -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2061816 Title: apache2 2.4.41-4ubuntu3.17 defaults to transfer-encoding=chunked where this is undesired To m

[Bug 2061816] Re: apache2 2.4.41-4ubuntu3.17 defaults to transfer-encoding=chunked where this is undesired

2024-04-16 Thread Marc Deslauriers
I have uploaded a package with a possible fix to the security team PPA here: https://launchpad.net/~ubuntu-security- proposed/+archive/ubuntu/ppa/+packages Once it's finished building, could you please give it a try and see if it solves the issue for you? If so, I will publish it as a security re

[Bug 2061816] Re: apache2 2.4.41-4ubuntu3.17 defaults to transfer-encoding=chunked where this is undesired

2024-04-16 Thread Marc Deslauriers
I believe I've spotted the regression and will have a package to test soon. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2061816 Title: apache2 2.4.41-4ubuntu3.17 defaults to transfer-encoding=chun

[Bug 2061816] Re: apache2 2.4.41-4ubuntu3.17 defaults to transfer-encoding=chunked where this is undesired

2024-04-16 Thread Marc Deslauriers
Thanks for filing this bug, I'll investigate the changes and will report back. Have you seen this behaviour on anything other than focal? ** Changed in: apache2 (Ubuntu) Assignee: (unassigned) => Marc Deslauriers (mdeslaur) ** Information type changed from Public to Public

[Bug 2058023] Re: New versions of amavis with security fixes

2024-04-15 Thread Marc Deslauriers
There are packages for focal, jammy, and mantic available for testing in the security team PPA here: https://launchpad.net/~ubuntu-security- proposed/+archive/ubuntu/ppa/+packages If they work in your environment, please mention it in this bug. Thanks! -- You received this bug notification beca

[Bug 2053215] Re: postinst didn't ask for configuration → SECURITY ISSUE

2024-04-12 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

  1   2   3   4   5   6   7   8   9   10   >