rebuilds for libssl0.9.7 -> libssl0.9.8

( 0 + 73) - Tabled varargs codes: 27 ( 0 + 27) make[1]: *** [instrs.h] Segmentation fault (core dumped) Ignore for now since it's in multiverse? Thanks! [1] https://launchpad.net/distros/ubuntu/edgy/+source/aolserver4/4.0.10-6 -- Kees Cook signature.asc Description: Digital signature -

Re: Amule crash on search Clear/Seach tab closing

rted (core dumped) Hi Bruno! Please file a bug report in launchpad[1]. It is usually pretty hard to track bugs on a mailing list. Thanks! [1] https://launchpad.net/distros/ubuntu/+source/amule/+filebug -- Kees Cook signature.asc Description: Digital signature -- Ubuntu-motu mailing list Ubu

Re: new team: motu-swat

o bypass the -changes mailing lists (and as a result, the Newsletter). Thanks motu-swat! :) -- Kees Cook signature.asc Description: Digital signature -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu

Re: How do I request a package be updated?

cific changes in the current package: > https://wiki.ubuntu.com/SyncRequestProcess > > If there are Ubuntu specific changes it may need to be merged instead: > https://wiki.ubuntu.com/MOTU/Merging Out of curiosity, which package is it? -- Kees Cook signature.asc Description: Digit

Re: Audacity package

you've got packages ready? Thanks, -Kees [1] https://wiki.ubuntu.com/FreezeExceptionProcess -- Kees Cook signature.asc Description: Digital signature -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu

Re: package ettercap-gtk: typo in ettercap.desktop

you want to maximize your contribution, the best leverage will come from using the Ubuntu bug tracker. :) -- Kees Cook signature.asc Description: Digital signature -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu

Re: Wordpress 2.1.1 Security Issue

was taken prior to wordpress.org getting broken into. Based on the report, the described backdoor wasn't present. To avoid (this kind of) confusion, wordpress.org simply declared all of 2.1.1 as "bad", just to make sure no one had a bad version. -- Kees Cook signature.asc Descrip

Re: Clamav?

e, file an SRU, and then follow it through the SRU testing process. I'm happy to help test (I use clamav myself), but I don't have the time to drive the process at the moment. Would you be willing to help out with the SRUs? Thanks, -Kees [1] https://launchpad.net/ubuntu/dapper

needing help: vnc4

vnc4 with a more recent Xorg source[2], but it still fails. Does anyone have some time and knowledge to throw at this problem? Thanks, -Kees [1] https://bugs.launchpad.net/ubuntu/+source/vnc4/+bug/78282 [2] http://people.ubuntu.com/~kees/feisty/vnc4/ -- Kees Cook signature.asc Descri

Re: cacti 0.8.6h-1ubuntu3.1 testing

at it's fixed. :) > cacti (0.8.6h-1ubuntu3.1) dapper-security; urgency=low I've uploaded this, it should be available on the archives shortly. Thanks again and take care, -Kees [1] https://bugs.launchpad.net/ubuntu/+source/cacti/+bug/78453 -- Kees Cook signature.asc Description: Di

motu security reviews

list, so I would expect the impact here to be small as well. Assuming no one has any objections, I can update the SUP[1] to reflect the new place to discuss MOTU security stuff. Thanks! -Kees [1] https://wiki.ubuntu.com/SecurityUpdateProcedures -- Kees Cook signature.asc Description: Di

REVU: mythbuntu-gdm-theme_0.1-0ubuntu1 uploaded

NEW: mythbuntu-gdm-theme_0.1-0ubuntu1.dsc OK: mythbuntu-gdm-theme_0.1.orig.tar.gz OK: mythbuntu-gdm-theme_0.1-0ubuntu1.diff.gz Format: 1.7 Date: Tue, 05 June 2007 16:41:23 -0500 Source: mythbuntu-gdm-theme Binary: mythbuntu-gdm-theme Architecture: source Version: 0.1-0ubuntu1 Distribution: guts

Re: SRU for xvid in feisty

://archive.ubuntu.com feisty-updates/multiverse Packages libxvidcore4 | 2:1.1.2-0.1ubuntu1 | http://archive.ubuntu.com feisty/multiverse Packages xvidcore | 2:1.1.2-0.1ubuntu1 | http://archive.ubuntu.com feisty/multiverse Sources xvidcore | 2:1.1.2-0.1ubuntu1.1 | http://archive.ubu

Re: KVIrc Security Issue

feisty - use regular versioning for gutsy - don't adjust maintainer for dapper/edgy since the build tools for this are less well tested. They are all building now, and I should have them published shortly. Thanks! -Kees -- Kees Cook signature.asc Description: Digital signature --

Re: packaging xca

I think the packaging section[2] of the Devel wiki is useful, and found the packaging tutorial[3] quite good. Good luck! -Kees [1] in the "devscripts" package [2] https://wiki.ubuntu.com/UbuntuDevelopment#head-86b3c262f4e4b222c867211cb06bb46523c7cc6f [3] http://women.debian

Security Team IRC Meeting 2007-01-30 20:00 UTC

Kees [1] https://launchpad.net/~motu-swat/+members [2] https://lists.ubuntu.com/archives/ubuntu-devel/2008-January/024958.html [3] https://lists.ubuntu.com/archives/ubuntu-hardened/2007-November/000230.html [4] http://www.outflux.net/blog/archives/2008/01/15/full-aslr-in-hardy/ -- Kees Cook Ubuntu Security T

Re: Security Team IRC Meeting 2007-01-30 20:00 UTC

On Fri, Feb 01, 2008 at 02:47:52PM +, Matt Zimmerman wrote: > On Tue, Jan 29, 2008 at 10:58:52AM -0800, Kees Cook wrote: > > Given all the updates that the MOTU-SWAT[1] team have been doing, the > > testing I'd like to help coordinate for hardened compiler options

new default compiler flags

in Ubuntu. To disable these checks, use "-U_FORTIFY_SOURCE" in your CPPFLAGS. Further details and examples of failure conditions are written up in the wiki: https://wiki.ubuntu.com/CompilerFlags Thanks in advance for everyone's time and attention for fixing the issues that will crop u

Upcoming Ubuntu Security Team meeting - Thursday, 8th of May - 20:00 UTC - #ubuntu-meeting

e add them to the agenda: https://wiki.ubuntu.com/SecurityTeam/Meeting Thanks, and hope to see everyone there, -Kees -- Kees Cook Ubuntu Security Team -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu

Re: Good communication with upstream is good idea

to make Florian > happy :) Perhaps the best short-term solution would be to have the tool check the LSB info and abort on non-Debian machines? -Kees [1] https://launchpad.net/ubuntu-cve-tracker/trunk [2] http://people.ubuntu.com/~ubuntu-security/cve/open.html -- Kees Cook Ubuntu Security Te

Re: motu-release will revert libgems-ruby to the old state.

case of setting path for ruby gems running in CGI environments? A /usr/local symlink works for that, but /etc/environment doesn't. -- Kees Cook Ubuntu Security Team -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu

Re: Launchpadlib support in Ubuntu Developer Tools

unchpad.get_token_and_login(sys.argv[0], EDGE_SERVICE_ROOT, cachedir) -Kees [1] https://help.launchpad.net/API/launchpadlib -- Kees Cook Ubuntu Security Team -- Ubuntu-motu mailing list Ubuntu-motu@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-motu

Re: Launchpadlib support in Ubuntu Developer Tools

On Wed, Jan 14, 2009 at 10:58:58AM -0800, Kees Cook wrote: > On Wed, Jan 14, 2009 at 02:54:11PM +, Jonathan Davies wrote: > > I've improved the error message so that it asks people to see the > > manage-credentials manpage. > > Please make sure that the tool th