[Bug 1960773] Re: Potentially unpatched security vulnerability

2022-06-30 Thread Reiner Herrmann
Fixed upstream in 0.9.68.
0.9.70 is available in kinetic.

** Changed in: firejail (Ubuntu)
   Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1960773

Title:
  Potentially unpatched security vulnerability

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1960773/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1950683] Re: firejail firefox is blocking website functionality

2022-01-21 Thread Reiner Herrmann
this is fixed in firejail 0.9.66.

** Changed in: firejail (Ubuntu)
   Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1950683

Title:
  firejail  firefox is blocking website functionality

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1950683/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1916767] Re: firejail version in Ubuntu 20.04 LTS is vulnerable to CVE-2021-26910

2021-11-06 Thread Reiner Herrmann
Hi Steve,
thanks for taking care of this issue!
The patch disables overlayfs support completely (at build time), which is (was) 
one of many confinement features of firejail. But this is not really a problem, 
as the feature was already otherwise broken with newer kernel versions (~4.19):
https://github.com/netblue30/firejail/issues/2799
https://bugs.debian.org/971578
All other confinement features stay effective.

** Bug watch added: github.com/netblue30/firejail/issues #2799
   https://github.com/netblue30/firejail/issues/2799

** Bug watch added: Debian Bug tracker #971578
   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=971578

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1916767

Title:
  firejail version in Ubuntu 20.04 LTS is vulnerable to CVE-2021-26910

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1916767/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1949194] Re: Urgent Security Vulnerability [upgrade-software-version]

2021-10-29 Thread Reiner Herrmann
The "fix" released in 0.9.64.4 was to disable overlayfs support in firejail.
The same is being done by the patch in 1916767 for 0.9.62.
(with "invalid" I mean that there is already a duplicate bug. launchpad does 
not have a status "duplicate".)
The fix is unfortunately not live yet, it's waiting for someone from the 
security team to sponsor the upload.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1949194

Title:
  Urgent Security Vulnerability [upgrade-software-version]

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1949194/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1949194] Re: Urgent Security Vulnerability [upgrade-software-version]

2021-10-29 Thread Reiner Herrmann
Duplicate of #1916767

** Changed in: firejail (Ubuntu)
   Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1949194

Title:
  Urgent Security Vulnerability [upgrade-software-version]

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1949194/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1934698] Re: "too short arguments" error

2021-07-11 Thread Reiner Herrmann
Thanks for the report. I have forwarded it upstream:
https://github.com/netblue30/firejail/issues/4395

** Bug watch added: github.com/netblue30/firejail/issues #4395
   https://github.com/netblue30/firejail/issues/4395

** Changed in: firejail (Ubuntu)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1934698

Title:
  "too short arguments" error

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1934698/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1925800] Re: Many failures on Kubutu 20.10

2021-05-05 Thread Reiner Herrmann
** Changed in: firejail (Ubuntu)
   Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1925800

Title:
  Many failures on Kubutu 20.10

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1925800/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1925800] Re: Many failures on Kubutu 20.10

2021-05-04 Thread Reiner Herrmann
Can you please give some additional information about what went wrong?
For example run "firejail --debug firefox" and post the output when it works, 
and once when it doesn't work. Same for VSCode.
And for doplhin can you try to run the scripts from a terminal but using the 
dolphin profile? "firejail --profile=/etc/firejail/dolphin.profile 
script_that_does_not_work.sh"

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1925800

Title:
  Many failures on Kubutu 20.10

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1925800/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1921640] Re: Profile file should include app version number(s)

2021-05-04 Thread Reiner Herrmann
I think maintaining that is difficult. There are currently more than 1000 
profiles.
Many of them exist already for quite some time, others are regularly 
contributed by many users.
It will get quickly out of date.
And even if upstream maintains this information, that does not mean that the 
version matches the software packaged in Debian or Ubuntu.

I'll close this bug, as it is out of scope of package maintenance.
If you want to move this forward, I would suggest to start a discussion 
upstream.

** Changed in: firejail (Ubuntu)
   Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1921640

Title:
  Profile file should include app version number(s)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1921640/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1916767] Re: firejail version in Ubuntu 20.04 LTS is vulnarable to CVE-2021-26910

2021-03-27 Thread Reiner Herrmann
The launchpad also seems to have been mangled (converted tabs to spaces).
Please get the debdiff from here: https://paste.ubuntu.com/p/t6wF6253Yq/

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1916767

Title:
  firejail version in Ubuntu 20.04 LTS is vulnarable to CVE-2021-26910

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1916767/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1916767] Re: firejail version in Ubuntu 20.04 LTS is vulnarable to CVE-2021-26910

2021-03-27 Thread Reiner Herrmann
Attached is a debdiff that backports the upstream fix for this issue,
which disables the vulnerable overlayfs support (which was anyway broken
on recent kernel versions).

It compiles in an Ubuntu Focal chroot. I also verified that after
installation in the same chroot the overlayfs suppor is disabled
(firejail --version -> "overlayfs support is disabled").

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1916767

Title:
  firejail version in Ubuntu 20.04 LTS is vulnarable to CVE-2021-26910

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1916767/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1916767] Re: firejail version in Ubuntu 20.04 LTS is vulnarable to CVE-2021-26910

2021-03-27 Thread Reiner Herrmann
I can't currently post patches, something seems broken in Launchpad. So
here is the full patch in a comment:

diff -Nru firejail-0.9.62/debian/changelog firejail-0.9.62/debian/changelog
--- firejail-0.9.62/debian/changelog2020-01-20 18:53:34.0 +
+++ firejail-0.9.62/debian/changelog2021-03-27 15:20:50.0 +
@@ -1,3 +1,12 @@
+firejail (0.9.62-3ubuntu0.1) focal-security; urgency=low
+
+  * SECURITY UPDATE: bypass of access restrictions (LP: #1916767)
+- disable OverlayFS support which contains a TOCTOU race condition
+  between a stat operation and an OverlayFS mount.
+- CVE-2021-26910
+
+ -- Reiner Herrmann   Sat, 27 Mar 2021 15:20:50 +
+
 firejail (0.9.62-3) unstable; urgency=medium
 
   * Import upstream profile fixes:
diff -Nru firejail-0.9.62/debian/control firejail-0.9.62/debian/control
--- firejail-0.9.62/debian/control  2020-01-01 19:14:43.0 +
+++ firejail-0.9.62/debian/control  2021-03-27 15:18:59.0 +
@@ -1,7 +1,8 @@
 Source: firejail
 Section: utils
 Priority: optional
-Maintainer: Reiner Herrmann 
+Maintainer: Ubuntu Developers 
+XSBC-Original-Maintainer: Reiner Herrmann 
 Build-Depends: debhelper-compat (= 12), dh-apparmor, libapparmor-dev, 
pkg-config
 Standards-Version: 4.4.1
 Rules-Requires-Root: no
diff -Nru firejail-0.9.62/debian/patches/CVE-2021-26910.patch 
firejail-0.9.62/debian/patches/CVE-2021-26910.patch
--- firejail-0.9.62/debian/patches/CVE-2021-26910.patch 1970-01-01 
00:00:00.0 +
+++ firejail-0.9.62/debian/patches/CVE-2021-26910.patch 2021-03-27 
15:20:50.0 +
@@ -0,0 +1,32 @@
+Author: netblue30 
+Description: disable overlayfs, which is broken on current kernel releases
+ and has security vulnerabilities (CVE-2021-26910)
+Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1916767
+
+Index: firejail-0.9.62/configure.ac
+===
+--- firejail-0.9.62.orig/configure.ac
 firejail-0.9.62/configure.ac
+@@ -52,13 +52,16 @@ AC_SUBST([EXTRA_CFLAGS])
+ AC_SUBST([EXTRA_LDFLAGS])
+ 
+ 
++# overlayfs features temporarely disabled pending fixes
+ HAVE_OVERLAYFS=""
+-AC_ARG_ENABLE([overlayfs],
+-AS_HELP_STRING([--disable-overlayfs], [disable overlayfs]))
+-AS_IF([test "x$enable_overlayfs" != "xno"], [
+-  HAVE_OVERLAYFS="-DHAVE_OVERLAYFS"
+-  AC_SUBST(HAVE_OVERLAYFS)
+-])
++AC_SUBST(HAVE_OVERLAYFS)
++#
++#AC_ARG_ENABLE([overlayfs],
++#AS_HELP_STRING([--disable-overlayfs], [disable overlayfs]))
++#AS_IF([test "x$enable_overlayfs" != "xno"], [
++# HAVE_OVERLAYFS="-DHAVE_OVERLAYFS"
++# AC_SUBST(HAVE_OVERLAYFS)
++#])
+ 
+ HAVE_FIRETUNNEL=""
+ AC_ARG_ENABLE([firetunnel],
diff -Nru firejail-0.9.62/debian/patches/series 
firejail-0.9.62/debian/patches/series
--- firejail-0.9.62/debian/patches/series   2020-01-20 17:59:35.0 
+
+++ firejail-0.9.62/debian/patches/series   2021-03-27 15:12:56.0 
+
@@ -5,3 +5,4 @@
 m4_check_compile_flag.patch
 fix-tests.patch
 profile-fixes.patch
+CVE-2021-26910.patch


** Tags added: patch patch-accepted-debian patch-accepted-upstream

** Changed in: firejail (Ubuntu)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1916767

Title:
  firejail version in Ubuntu 20.04 LTS is vulnarable to CVE-2021-26910

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1916767/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1899334] Re: firejail AppArmor profile not compatible with AA 3.0

2020-10-18 Thread Reiner Herrmann
** Changed in: apparmor (Ubuntu)
   Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1899334

Title:
  firejail AppArmor profile not compatible with AA 3.0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1899334/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1899334] Re: firejail AppArmor profile not compatible with AA 3.0

2020-10-17 Thread Reiner Herrmann
** Also affects: apparmor (Ubuntu)
   Importance: Undecided
   Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1899334

Title:
  firejail AppArmor profile not compatible with AA 3.0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1899334/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1899334] Re: firejail AppArmor profile not compatible with AA 3.0

2020-10-17 Thread Reiner Herrmann
@ubuntu-release, the recent AppArmor 3.0 update broke the firejail
AppArmor profile, which no longer loads, and causes apparmor itself to
not load properly.

Please sync 0.9.62.4-3 from Debian, in which the problem has been fixed by 
adding an additional include in firejail's AppArmor profile.
See upstream fix: 
https://github.com/netblue30/firejail/pull/3660/commits/bba750c73469ea315d859464ddd19e495d830a72

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1899334

Title:
  firejail AppArmor profile not compatible with AA 3.0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1899334/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1899334] Re: firejail AppArmor profile not compatible with AA 3.0

2020-10-17 Thread Reiner Herrmann
I've just imported the profile fix into the next Debian revision (0.9.62.4-3).
I'll try to get it into Groovy, though I'm not yet sure about the process to 
get it included.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1899334

Title:
  firejail AppArmor profile not compatible with AA 3.0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1899334/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1899334] Re: firejail breaks apparmor.service

2020-10-11 Thread Reiner Herrmann
That has been broken by the new AppArmor version 3.0.
It has recently been fixed upstream and will be part of the next release:  
https://github.com/netblue30/firejail/pull/3660

** Summary changed:

- firejail breaks apparmor.service
+ firejail AppArmor profile not compatible with AA 3.0

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1899334

Title:
  firejail AppArmor profile not compatible with AA 3.0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1899334/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1832333] Re: There is no firejail-default profile in Ubuntu

2020-05-21 Thread Reiner Herrmann
The AppArmor local override file is generated since 0.9.58.2-1.

** Changed in: firejail (Ubuntu)
   Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1832333

Title:
  There is no firejail-default profile in Ubuntu

To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/1832333/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1873183] Re: Firejail package wants to remove "xorg" packages

2020-05-21 Thread Reiner Herrmann
** Changed in: firejail (Ubuntu)
   Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1873183

Title:
  Firejail package wants to remove "xorg" packages

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1873183/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1868184] Re: sng requires rgb.txt

2020-05-21 Thread Reiner Herrmann
** Changed in: sng (Ubuntu)
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1868184

Title:
  sng requires rgb.txt

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sng/+bug/1868184/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Re: [Bug 1873183] Re: Firejail package wants to remove "xorg" packages

2020-04-22 Thread Reiner Herrmann
On Wed, Apr 22, 2020 at 09:37:49AM -, ^rooker wrote:
> I've never used firejail before, but it installed without errors.
> I've also tried starting some applications and it seems to work.
> 
> Do you agree that this is still an issue, since the regular install way
> seems to have "contradicting" dependency issues that could be fixed?

Okay, thanks for confirming that it's not because of the installation of
firejail itself.
firejail recommends the following packages currently:
 Recommends: firejail-profiles, iproute2, iptables, xauth, xpra | 
xserver-xephyr | xvfb

You could try to install them manually one by one (as they are needed for
some of the firejail features), but I would guess it's because of one of
the X-related packages.
Maybe the bug can be reassigned when you find the package that causes
the issue.

Thanks!

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1873183

Title:
  Firejail package wants to remove "xorg" packages

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1873183/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1873183] Re: Firejail package wants to remove "xorg" packages

2020-04-16 Thread Reiner Herrmann
Can you please try "apt install --no-install-recommends firejail"?
This should skip installation of the recommended packages for firejail and 
there should be no problem.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1873183

Title:
  Firejail package wants to remove "xorg" packages

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1873183/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1873183] Re: Firejail package wants to remove "xorg" packages

2020-04-16 Thread Reiner Herrmann
Are you sure it's related to firejail? In your output I don't see firejail 
mentioned, only xorg-related packages.
firejail does not have any xorg dependency (only recommmendation on either 
xpra, xeyhr or xvfb).

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1873183

Title:
  Firejail package wants to remove "xorg" packages

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1873183/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1868184] Re: sng requires rgb.txt

2020-03-19 Thread Reiner Herrmann
Thanks for the report.
It's already fixed in 1.1.0-3 (available in focal fossa).

** Changed in: sng (Ubuntu)
   Status: New => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1868184

Title:
  sng requires rgb.txt

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sng/+bug/1868184/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1547971] Re: provide glob2-dbg package

2020-02-02 Thread Reiner Herrmann
glob2-dbgsym is available.

** Changed in: glob2 (Ubuntu)
   Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1547971

Title:
  provide glob2-dbg package

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/glob2/+bug/1547971/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1631588] Re: [wishlist] provide a snap

2020-01-07 Thread Reiner Herrmann
why would it be better than a normal package?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1631588

Title:
  [wishlist] provide a snap

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/supertux/+bug/1631588/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1858468] Re: Please sync Supertuxkart 1.1 from Debian unstable beforce 20.04 freeze

2020-01-07 Thread Reiner Herrmann
It has already been imported. :)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1858468

Title:
  Please sync Supertuxkart 1.1 from Debian unstable beforce 20.04 freeze

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/supertuxkart/+bug/1858468/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1849740] Re: arp-scan returns an empty scan

2019-11-06 Thread Reiner Herrmann
** Bug watch added: Debian Bug tracker #944129
   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=944129

** Also affects: arp-scan (Debian) via
   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=944129
   Importance: Unknown
   Status: Unknown

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1849740

Title:
  arp-scan returns an empty scan

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/arp-scan/+bug/1849740/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1814815] Re: surf needs to depend on 'apparmor-profiles-extra' or apparmor.service fails

2019-02-05 Thread Reiner Herrmann
Fixed in 2.0+git20181009-1.

** Changed in: surf (Ubuntu)
   Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1814815

Title:
  surf needs to depend on 'apparmor-profiles-extra' or apparmor.service
  fails

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/surf/+bug/1814815/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1251469] Re: Update Extreme Tux Racer package to new 0.6 version

2019-02-03 Thread Reiner Herrmann
** Changed in: extremetuxracer (Ubuntu)
   Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1251469

Title:
  Update Extreme Tux Racer package to new 0.6 version

To manage notifications about this bug go to:
https://bugs.launchpad.net/getdeb.net/+bug/1251469/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1784023] Re: Update profiles for usrmerge

2019-01-12 Thread Reiner Herrmann
Fixed in 2.0+git20181009-2.

** Changed in: surf (Ubuntu)
   Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1784023

Title:
  Update profiles for usrmerge

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1784023/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1809766] Re: package firejail 0.9.52-2 failed to install/upgrade: poging tot overschrijven van '/etc/firejail/etr.profile', wat ook in pakket firejail-profiles 0.9.52-2 zit

2018-12-26 Thread Reiner Herrmann
You are trying to install a package from upstream 
(firejail_0.9.56-LTS_1_amd64.deb) over a firejail version from Ubuntu.
This makes problems, because they are slighlty differently packaged.
To install the package you downloaded, first remove firejail and 
firejail-profiles cleanly from your system and then install the downloaded .deb.
But I would recommend to stay with the version provided by Ubuntu and maybe use 
this PPA to get a newer firejail for your Ubuntu release: 
https://launchpad.net/~deki/+archive/ubuntu/firejail

** Changed in: firejail (Ubuntu)
   Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1809766

Title:
  package firejail 0.9.52-2 failed to install/upgrade: poging tot
  overschrijven van '/etc/firejail/etr.profile', wat ook in pakket
  firejail-profiles 0.9.52-2 zit

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1809766/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1776175] Re: No Internet connection when starting 'firejail firefox' since firefox 60

2018-10-19 Thread Reiner Herrmann
Fixed in 0.9.54-1.

** Changed in: firejail (Ubuntu)
   Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1776175

Title:
  No Internet connection when starting 'firejail firefox' since firefox
  60

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1776175/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1781988] Re: firejail firefox, does not web searches and after closing a firefox crash window appears

2018-10-19 Thread Reiner Herrmann
*** This bug is a duplicate of bug 1776175 ***
https://bugs.launchpad.net/bugs/1776175

** This bug has been marked a duplicate of bug 1776175
   No Internet connection when starting 'firejail firefox' since firefox 60

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1781988

Title:
  firejail firefox, does not web searches and after closing a firefox
  crash window appears

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1781988/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1232781] Re: 13.10 ships awesome 3.4.15 which needs oocairo and not lua-lgi, but oocairo is removed.

2018-08-11 Thread Reiner Herrmann
** Changed in: awesome (Ubuntu)
   Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1232781

Title:
  13.10 ships awesome 3.4.15 which needs oocairo and not lua-lgi, but
  oocairo is removed.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/awesome/+bug/1232781/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1480701] Re: Add support to mega.nz URLs

2018-05-27 Thread Reiner Herrmann
** Changed in: megatools (Ubuntu)
   Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1480701

Title:
  Add support to mega.nz URLs

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/megatools/+bug/1480701/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 453238] Re: solfege assert failure: Gtk:ERROR:/build/buildd/gtk+2.0-2.18.2/gtk/gtktextview.c:4568:gtk_text_view_paint: code should not be reached

2018-02-10 Thread Reiner Herrmann
*** This bug is a duplicate of bug 425505 ***
https://bugs.launchpad.net/bugs/425505

** This bug has been marked a duplicate of bug 425505
   solfege dumps core if you try to view the help file

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/453238

Title:
  solfege assert failure:
  
Gtk:ERROR:/build/buildd/gtk+2.0-2.18.2/gtk/gtktextview.c:4568:gtk_text_view_paint:
  code should not be reached

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/solfege/+bug/453238/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 472071] Re: solfege crashes on access to the theory file

2018-02-10 Thread Reiner Herrmann
*** This bug is a duplicate of bug 425505 ***
https://bugs.launchpad.net/bugs/425505

** This bug has been marked a duplicate of bug 425505
   solfege dumps core if you try to view the help file

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/472071

Title:
  solfege crashes on access to the theory file

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/solfege/+bug/472071/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 425505] Re: solfege dumps core if you try to view the help file

2018-02-09 Thread Reiner Herrmann
** Changed in: solfege (Ubuntu)
   Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/425505

Title:
  solfege dumps core if you try to view the help file

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/solfege/+bug/425505/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 371133] Re: package solfege 3.9.3-4ubuntu0.1 failed to install/upgrade: problèmes de dépendances - laissé non configuré

2018-02-09 Thread Reiner Herrmann
reassigning to timidity, as this failed to start during installation
according to the log.

** Package changed: solfege (Ubuntu) => timidity (Ubuntu)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/371133

Title:
  package solfege 3.9.3-4ubuntu0.1 failed to install/upgrade: problèmes
  de dépendances - laissé non configuré

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/timidity/+bug/371133/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 886929] Re: zenburn widget icons are missing

2017-11-13 Thread Reiner Herrmann
The mentioned icons (e.g. icons/separator.png) are meanwhile available
in the awesome-configs repository.

** Changed in: awesome (Ubuntu)
   Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/886929

Title:
  zenburn widget icons are missing

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/awesome/+bug/886929/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 535580] Re: awesome should create an application entry

2017-11-04 Thread Reiner Herrmann
awesome ships .desktop file in /usr/share/xsessions/awesome.desktop.
see also: https://bugs.debian.org/573302

** Changed in: awesome (Ubuntu)
   Status: Confirmed => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/535580

Title:
  awesome should create an application entry

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/awesome/+bug/535580/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 369630] Re: awesome depends on libxcb-keysyms0, but xcb-util now has libxcb-keysyms1

2017-11-04 Thread Reiner Herrmann
** Changed in: awesome (Ubuntu)
   Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/369630

Title:
  awesome depends on libxcb-keysyms0, but xcb-util now has libxcb-
  keysyms1

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/awesome/+bug/369630/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 997192] Re: Awesome WM fails to run user rc.lua

2017-11-04 Thread Reiner Herrmann
** Changed in: awesome (Ubuntu)
   Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/997192

Title:
  Awesome WM fails to run user rc.lua

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/awesome/+bug/997192/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1638720] Re: awesome crashes on vncserver

2017-11-04 Thread Reiner Herrmann
** Changed in: awesome (Ubuntu)
   Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1638720

Title:
  awesome crashes on vncserver

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/awesome/+bug/1638720/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1668744] Re: shell metacharacters mishandled

2017-10-20 Thread Reiner Herrmann
Tested with latest upstream version (0.9.50) and can't reproduce the bug.
This is included in Ubuntu 17.10.

** Changed in: firejail (Ubuntu)
   Status: Incomplete => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1668744

Title:
  shell metacharacters mishandled

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1668744/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1398062] Re: tkdesk: dangling symbolic link for doc

2017-09-28 Thread Reiner Herrmann
fixed in 2.0-9.2.

** Changed in: tkdesk (Ubuntu)
   Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1398062

Title:
  tkdesk: dangling symbolic link for doc

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/tkdesk/+bug/1398062/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1668744] Re: shell metacharacters mishandled

2017-06-20 Thread Reiner Herrmann
** Changed in: firejail (Ubuntu)
   Status: Incomplete => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1668744

Title:
  shell metacharacters mishandled

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1668744/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1556735] Re: surf crashed with SIGSEGV in JSC::JSCell::getPrimitiveNumber()

2017-06-18 Thread Reiner Herrmann
** Changed in: surf (Ubuntu)
   Status: Confirmed => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1556735

Title:
  surf crashed with SIGSEGV in JSC::JSCell::getPrimitiveNumber()

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/surf/+bug/1556735/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1588150] Re: Remove webkitgtk from archive

2017-04-14 Thread Reiner Herrmann
** Changed in: surf (Ubuntu)
   Status: Triaged => In Progress

** Changed in: surf (Ubuntu)
 Assignee: (unassigned) => Reiner Herrmann (deki)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1588150

Title:
  Remove webkitgtk from archive

To manage notifications about this bug go to:
https://bugs.launchpad.net/bijiben/+bug/1588150/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1655136] Re: Multiple CVEs in xenial

2017-01-17 Thread Reiner Herrmann
** Patch removed: "firejail.diff"
   
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1655136/+attachment/4802095/+files/firejail.diff

** Patch added: "firejail.diff"
   
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1655136/+attachment/4805479/+files/firejail.diff

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1655136

Title:
  Multiple CVEs in xenial

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1655136/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1655136] Re: Multiple CVEs in xenial

2017-01-17 Thread Reiner Herrmann
Thanks for the review Chris.
I attached an updated debdiff with your proposed changes.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1655136

Title:
  Multiple CVEs in xenial

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1655136/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1655136] Re: Multiple CVEs in xenial

2017-01-16 Thread Reiner Herrmann
I have now prepared an update to 0.9.38.10 (firejail LTS-branch update), which 
contains only security- and other bug fixes.
It is available in this PPA: 
https://launchpad.net/~deki/+archive/ubuntu/lp-1655136

Please include it in Xenial.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1655136

Title:
  Multiple CVEs in xenial

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1655136/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1655136] Re: Multiple CVEs in xenial

2017-01-09 Thread Reiner Herrmann
** Description changed:

  firejail 0.9.38 is affected by the following CVEs:
  - CVE-2016-9016: sandbox escape
  - CVE-2016-10118: overwrite /etc/resolv.conf
  - CVE-2017-5180: local root exploit
  
  Please apply the attached debdiff.
  
- firejail 0.9.40 is also affected by those (and perhaps other) CVEs. It still 
needs to be checked by which ones exactly.
- I will file a separate bug for it.
+ firejail 0.9.40 is also affected by those (and perhaps other) CVEs.
+ But fixing that looks like a bit more effort (patches don't apply cleanly), 
and there were several related upstream commits that attempted to fix them.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1655136

Title:
  Multiple CVEs in xenial

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1655136/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1655136] [NEW] Multiple CVEs in xenial

2017-01-09 Thread Reiner Herrmann
Public bug reported:

firejail 0.9.38 is affected by the following CVEs:
- CVE-2016-9016: sandbox escape
- CVE-2016-10118: overwrite /etc/resolv.conf
- CVE-2017-5180: local root exploit

Please apply the attached debdiff.

firejail 0.9.40 is also affected by those (and perhaps other) CVEs. It still 
needs to be checked by which ones exactly.
I will file a separate bug for it.

** Affects: firejail (Ubuntu)
 Importance: High
 Status: Fix Released

** Affects: firejail (Ubuntu Xenial)
 Importance: High
 Assignee: Reiner Herrmann (deki)
 Status: In Progress

** Affects: firejail (Ubuntu Zesty)
 Importance: High
 Status: Fix Released

** Patch added: "firejail.diff"
   
https://bugs.launchpad.net/bugs/1655136/+attachment/4802095/+files/firejail.diff

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2017-5180

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2016-9016

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2016-10118

** Description changed:

- firejail 0.9.38 is affected by CVE-2016-9016, CVE-2016-10118,
- CVE-2017-5180.
+ firejail 0.9.38 is affected by the following CVEs:
+ - CVE-2016-9016: sandbox escape
+ - CVE-2016-10118: overwrite /etc/resolv.conf
+ - CVE-2017-5180: local root exploit
  
  Please apply the attached debdiff.
+ 
+ firejail 0.9.40 is also affected by those (and perhaps other) CVEs. It still 
needs to be checked by which ones exactly.
+ I will file a separate bug for it.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1655136

Title:
  Multiple CVEs in xenial

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1655136/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1655108] Re: Please update, important security fixes!

2017-01-09 Thread Reiner Herrmann
Current version is already available.

** Changed in: firejail (Ubuntu)
   Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1655108

Title:
  Please update, important security fixes!

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1655108/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1616334] Re: Firejail symlink for firefox does not work because of wrapper script

2016-08-26 Thread Reiner Herrmann
** Changed in: firejail (Ubuntu)
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1616334

Title:
  Firejail symlink for firefox does not work because of wrapper script

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1616334/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1616334] Re: Firejail symlink for firefox does not work because of wrapper script

2016-08-25 Thread Reiner Herrmann
@ MarcS: the issue with the symlink to the firefox.sh wrapper is fixed in 
0.9.40, which is available in Yakkety, or backported in my PPA 
(ppa:deki/firejail).
A more general fix will also be available in the next upstream release (0.9.42).

** Changed in: firejail (Ubuntu)
   Status: New => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1616334

Title:
  Firejail symlink for firefox does not work because of wrapper script

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1616334/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1616334] Re: Firejail symlink for firefox does not work because of wrapper script

2016-08-24 Thread Reiner Herrmann
An upstream issue for symlinked programs not using the profile of the symlink 
source is already existing:
https://github.com/netblue30/firejail/issues/690

** Bug watch added: github.com/netblue30/firejail/issues #690
   https://github.com/netblue30/firejail/issues/690

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1616334

Title:
  Firejail symlink for firefox does not work because of wrapper script

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firejail/+bug/1616334/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1541109] Re: on https sites, subresource certificates are not validated

2016-05-29 Thread Reiner Herrmann
** Changed in: surf (Ubuntu)
   Status: Confirmed => Fix Committed

** Changed in: surf (Ubuntu)
 Assignee: (unassigned) => Reiner Herrmann (deki)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1541109

Title:
  on https sites, subresource certificates are not validated

To manage notifications about this bug go to:
https://bugs.launchpad.net/liferea/+bug/1541109/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1580924] Re: xrctl has perl syntax related error

2016-05-27 Thread Reiner Herrmann
** Changed in: crossroads (Ubuntu)
   Status: New => In Progress

** Changed in: crossroads (Ubuntu)
 Assignee: (unassigned) => Reiner Herrmann (deki)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1580924

Title:
  xrctl has perl syntax related error

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/crossroads/+bug/1580924/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 908081] Re: surf x-www-browser priority is broken

2016-01-09 Thread Reiner Herrmann
This was fixed in version 0.4.1-5.

** Changed in: surf (Ubuntu)
   Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/908081

Title:
  surf x-www-browser priority is broken

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/surf/+bug/908081/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1027787] Re: luakit crashed with SIGILL in execute()

2016-01-09 Thread Reiner Herrmann
** Package changed: surf (Ubuntu) => webkitgtk (Ubuntu)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1027787

Title:
  luakit crashed with SIGILL in execute()

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/luakit/+bug/1027787/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 1394903] Re: surf/midori www browser svg rendering broken

2016-01-09 Thread Reiner Herrmann
** Package changed: surf (Ubuntu) => webkitgtk (Ubuntu)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1394903

Title:
  surf/midori www browser svg rendering broken

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/webkitgtk/+bug/1394903/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs