[Desktop-packages] [Bug 2062916] Re: evolution has undefined symbol in newest libwebkit2gtk

2024-04-22 Thread Marc Deslauriers
That is pretty odd, I can't reproduce this issue on jammy. what's the output of "ldd /lib/x86_64-linux- gnu/libwebkit2gtk-4.0.so.37"? -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to webkit2gtk in Ubuntu.

[Desktop-packages] [Bug 2051543] Re: When I use a keyboard shortcut to lower a window, the window retains its keyboard focus.

2024-04-12 Thread Marc Deslauriers
** Information type changed from Public Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-shell in Ubuntu. https://bugs.launchpad.net/bugs/2051543 Title: When I use a keyboard shortcut to lower a window, the

[Desktop-packages] [Bug 2060859] Re: Xorg freeze

2024-04-12 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Desktop-packages] [Bug 2060900] Re: gst-plugin-scanner crashed with SIGABRT in __assert_fail_base()

2024-04-12 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Desktop-packages] [Bug 2051536] Re: security update regression tracking bug

2024-01-29 Thread Marc Deslauriers
** Also affects: xwayland (Ubuntu) Importance: Undecided Status: New ** Changed in: xwayland (Ubuntu Focal) Status: New => Invalid ** Changed in: xwayland (Ubuntu Mantic) Status: New => Fix Released ** Changed in: xwayland (Ubuntu Noble) Status: New => Fix

[Desktop-packages] [Bug 2051536] [NEW] security update regression tracking bug

2024-01-29 Thread Marc Deslauriers
://gitlab.freedesktop.org/xorg/xserver/-/commit/8b75ec34dfbe435cd3a17e64138e22a37395a6d8 ** Affects: xorg-server (Ubuntu) Importance: Undecided Status: Fix Released ** Affects: xorg-server (Ubuntu Focal) Importance: Undecided Assignee: Marc Deslauriers (mdeslaur) Status

[Desktop-packages] [Bug 2046633] Re: Don't include 'nmcli -f all con' output in bug report (for privacy)

2024-01-19 Thread Marc Deslauriers
** Information type changed from Public Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/2046633 Title: Don't include 'nmcli -f all con' output in bug report

[Desktop-packages] [Bug 2047595] Re: sound control panel security

2024-01-19 Thread Marc Deslauriers
** Package changed: ubuntu-meta (Ubuntu) => gnome-shell (Ubuntu) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-shell in Ubuntu. https://bugs.launchpad.net/bugs/2047595 Title: sound control panel security Status in gnome-shell

[Desktop-packages] [Bug 2047595] Re: sound control panel security

2024-01-19 Thread Marc Deslauriers
What desktop environment are you using? -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to ubuntu-meta in Ubuntu. https://bugs.launchpad.net/bugs/2047595 Title: sound control panel security Status in gnome-shell package in Ubuntu: New

[Desktop-packages] [Bug 2046037] Re: CVE-2023-6185 and CVE-2023-6186

2023-12-14 Thread Marc Deslauriers
These have been published now, thanks! https://ubuntu.com/security/notices/USN-6546-1 https://ubuntu.com/security/notices/USN-6546-2 ** Changed in: libreoffice (Ubuntu Focal) Status: In Progress => Fix Released ** Changed in: libreoffice (Ubuntu Jammy) Status: In Progress => Fix

[Desktop-packages] [Bug 2042350] Re: When switching workspaces with mouse, no dot in indicator

2023-10-31 Thread Marc Deslauriers
Reproduced this on mantic also. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-shell-extension-ubuntu-dock in Ubuntu. https://bugs.launchpad.net/bugs/2042350 Title: When switching workspaces with mouse, no dot in indicator

[Desktop-packages] [Bug 2042350] [NEW] When switching workspaces with mouse, no dot in indicator

2023-10-31 Thread Marc Deslauriers
Public bug reported: When switching between workspaces with ctrl-alt-arrow, there is an indicator that pops up with a bright dot highlighting which workspace is being switched to. When switching between workspaces by scrolling the mouse wheel over the "show applications" icon, the indicator pops

[Desktop-packages] [Bug 1967632] Re: [snap] apparmor denied when trying to load pkcs11 module for smart card authentication

2023-10-20 Thread Marc Peña
> Can you ascertain if your smart card is supported by OpenSC? Yes, totally. It's a DNIe: https://github.com/OpenSC/OpenSC/wiki/DNIe-(OpenDNIe)/dca4ae71aac1deb510df0d2b9afebb59afd07feb -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to

[Desktop-packages] [Bug 1967632] Re: [snap] apparmor denied when trying to load pkcs11 module for smart card authentication

2023-10-19 Thread Marc Peña
OK, now chromium starts, but when I try to access some website that requires the certificate on my smartcard, it seems like it's doing nothing to access the smartcard, so to speak. Eveything works OK on my non-snaped Firefox. -- You received this bug notification because you are a member of

[Desktop-packages] [Bug 1967632] Re: [snap] apparmor denied when trying to load pkcs11 module for smart card authentication

2023-10-18 Thread Marc Peña
Hi! I wanted to try this. This is what I did: $ sudo snap set system experimental.parallel-instances=true $ snap refresh --beta snapd $ sudo snap install --channel stable/pkcs chromium_pkcs $ sudo snap connect chromium_pkcs:pcscd But I get an error when trying to execute chromium: $

[Desktop-packages] [Bug 2036310] Re: gnome shell crash after sleep mode

2023-10-13 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Desktop-packages] [Bug 2036321] Re: Periodically flickering of speaker icon

2023-10-13 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Desktop-packages] [Bug 2036746] Re: CVE-2023-43090: avoid exposing window previews on lock screen via keyboard

2023-09-20 Thread Marc Deslauriers
** Changed in: gnome-shell (Ubuntu Lunar) Assignee: (unassigned) => Marc Deslauriers (mdeslaur) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-shell in Ubuntu. https://bugs.launchpad.net/bugs/2036746 Title: CVE-2023-43

[Desktop-packages] [Bug 1971242] Re: printing PDF appears always grey, no color

2023-09-12 Thread Marc Deslauriers
I have tested the lunar-proposed package (2.4.2-3ubuntu2.3), and after updating the package, and recreating the printer, it now defaults to printing in colour when using Okular. ** Tags removed: verification-needed verification-needed-lunar ** Tags added: verification-done verification-done-lunar

[Desktop-packages] [Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2023-07-25 Thread Marc Deslauriers
Kinetic has now reached end-of-life. There is nothing else to sponsor in this bug for now. I am unsubscribing ubuntu-security-sponsors. If a new debdiff is attached for sponsoring, please re-subscribe the team. Thanks! ** Changed in: nemo (Ubuntu Kinetic) Status: In Progress => Won't Fix

[Desktop-packages] [Bug 2021484] Re: Editing a VPN ask to introduce credentials but if you cancel can be accessed anyway

2023-07-18 Thread Marc Deslauriers
Are you in the admin or the sudo group? What's the output of the "groups" command? -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to ubuntu-settings in Ubuntu. https://bugs.launchpad.net/bugs/2021484 Title: Editing a VPN ask to

[Desktop-packages] [Bug 2024182] Re: GHSL-2023-139: use-after-free in user.c

2023-06-28 Thread Marc Deslauriers
** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to accountsservice in Ubuntu. https://bugs.launchpad.net/bugs/2024182 Title: GHSL-2023-139: use-after-free in user.c

[Desktop-packages] [Bug 2024642] Re: Upgrading libx11-6_2:1.6.2-1ubuntu2.1+esm3 failed

2023-06-23 Thread Marc Deslauriers
Updates were pushed to fix this issue. Please re-open this bug if this problem is still occurring. ** Changed in: libx11 (Ubuntu) Status: New => Invalid ** Changed in: libx11 (Ubuntu Trusty) Status: New => Fix Released -- You received this bug notification because you are a

[Desktop-packages] [Bug 1971242] Re: printing PDF appears always grey, no color

2023-06-22 Thread Marc Deslauriers
Unfortunately the package in -proposed was superseded by a security update, and will need to be updated again. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to cups in Ubuntu. https://bugs.launchpad.net/bugs/1971242 Title: printing PDF

[Desktop-packages] [Bug 2022391] Re: security breach

2023-06-09 Thread Marc Deslauriers
** Package changed: ubuntu => gnome-control-center (Ubuntu) ** Information type changed from Public Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-control-center in Ubuntu.

[Desktop-packages] [Bug 2022002] Re: browsers are not working suddenly...

2023-06-09 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Desktop-packages] [Bug 2021935] Re: ubuntu desktop (mantic) error on post-install login

2023-06-09 Thread Marc Deslauriers
** Attachment removed: "CoreDump.gz" https://bugs.launchpad.net/ubuntu/+source/ayatana-indicator-messages/+bug/2021935/+attachment/5676873/+files/CoreDump.gz ** Information type changed from Public Security to Public ** Tags added: lunar -- You received this bug notification because you

[Desktop-packages] [Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2023-05-31 Thread Marc Deslauriers
Oh, that would be great, I could release them all at once. Thanks! -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to nautilus in Ubuntu. https://bugs.launchpad.net/bugs/1998060 Title: CVE-2022-37290: Pasted zip archive/invalid file

[Desktop-packages] [Bug 2017362] Re: package firefox 112.0.1+build1-0ubuntu0.22.04.1~mt1 failed to install/upgrade: new firefox package pre-installation script subprocess returned error exit status 1

2023-04-28 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Desktop-packages] [Bug 2017426] Re: Can't connect with RDP from/to LTS22.04

2023-04-28 Thread Marc Deslauriers
** Information type changed from Public Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-remote-desktop in Ubuntu. https://bugs.launchpad.net/bugs/2017426 Title: Can't connect with RDP from/to LTS22.04 Status

[Desktop-packages] [Bug 2007743] Re: intramfs Failed: ZSTD-compressed data

2023-03-29 Thread Marc Püschel
@Julian Andres Klode (~juliank) thank you very much for this information, I appreciate your work very much! Do I have to do something, or comes this update for 22.04.2 LTS automatically? I'm honestly afraid of testing it, I could get more problems as before. Furthermore, I really don't want to

[Desktop-packages] [Bug 2007743] Re: intramfs Failed: ZSTD-compressed data

2023-03-29 Thread Marc Püschel
@Julian Andres Klode (~juliank) thank you very much for this information, I appreciate your work very much! do i have to do something or comes this update for 22.04.2 LTS automatically? I have a productive system, here i will not test anything. Oh, and I'm a pro user, so I have the functionality

[Desktop-packages] [Bug 2007743] Re: intramfs Failed: ZSTD-compressed data

2023-03-25 Thread Marc Püschel
now added to this bug: @Andy Whitcroft (~apw) @Andy Whitcroft (~apw2) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/2007743 Title: intramfs Failed: ZSTD-compressed data Status in

[Desktop-packages] [Bug 2007743] Re: intramfs Failed: ZSTD-compressed data

2023-03-25 Thread Marc Püschel
@Julian Andres Klode (~juliank) what is the current status of progress here? Does anyone working on this? Or should I wait for 23.04.X LTS release and cross my fingers? -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to the bug report.

[Desktop-packages] [Bug 2001503] Re: gnome-control-center crashed with SIGSEGV -- pipewire

2023-03-17 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Desktop-packages] [Bug 2008662] Re: How do I fix error : "Appear a prohibit icon

2023-03-17 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Desktop-packages] [Bug 2009948] Re: Problem with xorg

2023-03-17 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Desktop-packages] [Bug 2011284] Re: A flickering and glitching problem

2023-03-17 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Desktop-packages] [Bug 2000644] Re: switching workspaces with shortcut sometimes freezes screen

2023-03-13 Thread marc
I also experience this.. But mostly i cant exit overview. so its not frozen, just stuck. i can still click things i think i also crash when i use a workspace sorting extension. and i think i crashed when using pixel safer and with xprop installed -- You received this bug notification

[Desktop-packages] [Bug 2007743] Re: intramfs Failed: ZSTD-compressed data

2023-03-13 Thread Marc Püschel
@Julian Andres Klode (~juliank) what is the current status of progress here? it would be really nice, if a bugfix will be released soon. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to the bug report.

[Desktop-packages] [Bug 2007743] Re: intramfs Failed: ZSTD-compressed data

2023-03-02 Thread Marc Püschel
@Julian Andres Klode (juliank) thanks for getting back. Okay, please keep me up-to-date and do not forget the bug -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/2007743 Title: intramfs

[Desktop-packages] [Bug 2008907] Re: Ubuntu 22.04.2 Update GNOME-Software fails

2023-03-01 Thread Marc Püschel
the problem solved itself by unknown reason. Unfortunately i can't close or delete this bug. ** Changed in: gnome-software (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to the bug report.

[Desktop-packages] [Bug 2008907] Re: Ubuntu 22.04.2 Update GNOME-Software fails

2023-03-01 Thread Marc Püschel
sorry, please ignore this BUG here, i don't know why but now i was able to download the updates and install it successfully. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/2008907 Title:

[Desktop-packages] [Bug 2007743] Re: intramfs Failed: ZSTD-compressed data

2023-03-01 Thread Marc Püschel
what is the current status of progress here? it would be really nice, if a bugfix will be released soon. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/2007743 Title: intramfs Failed:

[Desktop-packages] [Bug 2008907] Re: Ubuntu 22.04.2 Update GNOME-Software fails

2023-03-01 Thread Marc Püschel
** Description changed: I have currently some updates on the Ubuntu Store, but i can't install them, the Ubuntu Store results Prepared update not found: /var/lib/PackageKit/prepared-update If i run # sudo apt-get update && sudo apt-get dist-upgrade I get this (sorry german

[Desktop-packages] [Bug 2008907] Re: Ubuntu 22.04.2 Update fails

2023-03-01 Thread Marc Püschel
** Description changed: I have currently some updates on the Ubuntu Store, but i can't install them, the Ubuntu Store results Prepared update not found: /var/lib/PackageKit/prepared-update If i run # sudo apt-get update && sudo apt-get dist-upgrade I get this (sorry german

[Desktop-packages] [Bug 2008907] Re: Ubuntu 22.04.2 Update fails

2023-03-01 Thread Marc Püschel
** Description changed: I have currently some updates on the Ubuntu Store, but i can't install them, the Ubuntu Store results Prepared update not found: /var/lib/PackageKit/prepared-update If i run # sudo apt-get update && sudo apt-get dist-upgrade I get this (sorry german

[Desktop-packages] [Bug 2008907] Re: Ubuntu 22.04.2 Update fails

2023-03-01 Thread Marc Püschel
** Package changed: ubuntu => gnome-software (Ubuntu) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-software in Ubuntu. https://bugs.launchpad.net/bugs/2008907 Title: Ubuntu 22.04.2 Update fails Status in gnome-software

[Desktop-packages] [Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2023-02-17 Thread Marc Deslauriers
The update is for kinetic, did you test it on kinetic? -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to nautilus in Ubuntu. https://bugs.launchpad.net/bugs/1998060 Title: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

[Desktop-packages] [Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2023-02-09 Thread Marc Deslauriers
ACK on the debdiff in comment #8. I have slightly adjusted it to add the bug number to the changelog and to fix the urls in the patch. I have uploaded it to the security team PPA here: https://launchpad.net/~ubuntu-security-proposed/+archive/ubuntu/ppa Please test it to make sure it works

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

2023-02-07 Thread Marc Deslauriers
We are not going to release these yet, we are blocked on comment #8. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gjs in Ubuntu. https://bugs.launchpad.net/bugs/1993214 Title: [jammy] Update gjs to 1.74 using mozjs102 102.3 Status

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

2023-02-06 Thread Marc Deslauriers
The image builds are pulling in -proposed? -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gjs in Ubuntu. https://bugs.launchpad.net/bugs/1993214 Title: [jammy] Update gjs to 1.74 using mozjs102 102.3 Status in gjs package in Ubuntu:

[Desktop-packages] [Bug 1816497] Re: [snap] vaapi chromium no video hardware decoding

2023-01-07 Thread Marc Peña
Hi again @nteodosio and happy new year! Any progress to report in the last 2 months? Thanks! -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to chromium-browser in Ubuntu. https://bugs.launchpad.net/bugs/1816497 Title: [snap] vaapi

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

2022-12-15 Thread Marc Deslauriers
mozjs102 and gjs packages have been uploaded for jammy, and mozjs102 for kinetic, into the security team PPA here: https://launchpad.net/~ubuntu-security- proposed/+archive/ubuntu/ppa/+packages Once they are finished building, they can be pocket-copied by an archive admin into the -proposed

[Desktop-packages] [Bug 1993214] Re: [jammy] Update gjs to 1.74 using mozjs102 102.3

2022-12-12 Thread Marc Deslauriers
Looks like a few more CVEs have been published between 102.3 in karmic and 102.5 in lunar: 102.4 CVE-2022-42928 bug 1791520 102.5 CVE-2022-45406 bug 1791975 102.5 CVE-2022-45409 bug 1796901 Perhaps we should move to 102.5? I have to admit, bumping to a new major release of mozjs sounds risky.

[Desktop-packages] [Bug 1816497] Re: [snap] vaapi chromium no video hardware decoding

2022-11-10 Thread Marc Peña
Hi! From: https://code.launchpad.net/~nteodosio/chromium- browser/+git/chromium-browser/+merge/428038/comments/1137194 Is there any ETA for finishing the legal review of the inclusion of the non-free driver? Thanks! -- You received this bug notification because you are a member of Desktop

[Desktop-packages] [Bug 1995300] Re: package libice-dev:amd64 2:1.0.10-1build2 failed to install/upgrade: package is in a very bad inconsistent state; you should reinstall it before attempting config

2022-11-04 Thread Marc Deslauriers
Thank you for using Ubuntu and taking the time to report a bug. Your report should contain, at a minimum, the following information so we can better find the source of the bug and work to resolve it. Submitting the bug about the proper source package is essential. For help see

[Desktop-packages] [Bug 1992279] Re: package libreoffice-ogltrans 1:7.3.6-0ubuntu0.22.04.1 failed to install/upgrade: bağımlılık sorunları - yapılandırılmadan bırakılıyor

2022-10-27 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Desktop-packages] [Bug 1994067] Re: "Windows 11 Pro" and "Ubuntu 22.04.1 LTS" are installed and up to date on the laptop. There is no hardware problem with the laptop. No sound from operating system

2022-10-27 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Desktop-packages] [Bug 1972654] Re: [security review] Sync policykit-1 121+compat0.1-5 (main) from Debian unstable

2022-10-13 Thread Marc Deslauriers
ACK from the security team to sync from unstable. Please make sure the policy overrides in policykit-desktop-privileges still work or are converted to their equivalent JS before doing so. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to

[Desktop-packages] [Bug 1983778] Re: Major security issue in Ubuntu Desktop default config - Removable Media

2022-09-23 Thread Marc Deslauriers
I personally don't think the reasons you've listed above are good enough to change the default setting, but please file a bug with the upstream project and you can convince them to change them: https://gitlab.gnome.org/GNOME/gnome-control-center/-/issues Once you've filed a bug with the GNOME

[Desktop-packages] [Bug 1988378] Re: Firefox allows a user to alter/delete a third party website cookie

2022-09-16 Thread Marc Deslauriers
Thanks for your comments. This does not appear to be a bug report and we are closing it. We appreciate the difficulties you are facing, but it would make more sense to raise your question in the support tracker. Please visit https://answers.launchpad.net/ubuntu/+addquestion ** Information type

[Desktop-packages] [Bug 1989729] Re: Problem with graphics card

2022-09-16 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Desktop-packages] [Bug 1989953] Re: to update media key session

2022-09-16 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Desktop-packages] [Bug 1972654] Re: [security review] Sync policykit-1 0.120-6 (main) from Debian experimental

2022-09-12 Thread Marc Deslauriers
I also don't think this is a blocker anymore, as long as polkitd-pkla is a strong dependency in Ubuntu, so we don't inadvertently stop shipping it. It would be nice to get a similar list of packages in Ubuntu, as I suspect we have many more than Debian. We may also need to update the

[Desktop-packages] [Bug 1930140] Re: GUI "Extract Here" bug - loop until disk is full

2022-08-24 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Desktop-packages] [Bug 1914279] Re: linux from security may force reboots without complete dkms modules

2022-08-24 Thread Marc Deslauriers
** Changed in: openafs (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to nvidia-graphics-drivers-340 in Ubuntu. https://bugs.launchpad.net/bugs/1914279 Title: linux from security may force

[Desktop-packages] [Bug 1987162] Re: 43: New Device Security feature is confusing and unhelpful currently

2022-08-22 Thread Marc Deslauriers
Another issue to consider here is that there is no secure way to display the information in the first place. If some of those settings are disabled, malware can simply modify the app to display a green checkbox next to Level 3, leading to a false sense of security. -- You received this bug

[Desktop-packages] [Bug 1987162] Re: 43: New Device Security feature is confusing and unhelpful currently

2022-08-20 Thread Marc Deslauriers
I don't understand not only why those advanced features would be exposed in a GUI, but why ordinary users would care at all about most of those settings. If we're going to expose "security information" to users, we should probably start by showing basic stuff, like if they are properly getting

[Desktop-packages] [Bug 1982898] Re: CVE-2021-46829: Buffer overwrite in io-gif-animation.c composite_frame() in gdk-pixbuf

2022-08-09 Thread Marc Deslauriers
** Changed in: gdk-pixbuf (Ubuntu) Status: In Progress => Fix Released -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gdk-pixbuf in Ubuntu. https://bugs.launchpad.net/bugs/1982898 Title: CVE-2021-46829: Buffer overwrite in

[Desktop-packages] [Bug 1982898] Re: CVE-2021-46829: Buffer overwrite in io-gif-animation.c composite_frame() in gdk-pixbuf

2022-08-05 Thread Marc Deslauriers
ACK on the debdiff in comment #5, I am currently building it (with a slight change to add the bug number to the changelog) and will release it as a security update next week. Thanks! -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to

[Desktop-packages] [Bug 1816497] Re: [snap] vaapi chromium no video hardware decoding

2022-07-29 Thread Marc Peña
@seb128 & @nteodosio: is there any more tests to do? Is there any ETA for this to be released to the latest/* channels? Thanks! -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to chromium-browser in Ubuntu.

[Desktop-packages] [Bug 1816497] Re: [snap] vaapi chromium no video hardware decoding

2022-07-09 Thread Marc Peña
I've tested this again with the updated instructions: $ sudo snap refresh --channel candidate/hwacc chromium $ snap run chromium --disable-features=UseChromeOSDirectVideoDecoder --enable-features=VaapiVideoDecoder And it also worked OK. The only thing is that I'm seeing the following warnings

[Desktop-packages] [Bug 1977968] [NEW] Security update tracking bug

2022-06-08 Thread Marc Deslauriers
*** This bug is a security vulnerability *** Public security bug reported: This bug is to track the security update that will contain these possibly security-relevant commits: https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=e2b0f0d8d63e1223bb714a9efb37e2257818268b

[Desktop-packages] [Bug 1972654] Re: [security review] Sync policykit-1 0.120-6 (main) from Debian experimental

2022-06-06 Thread Marc Deslauriers
My understanding is the Debian experimental version doesn't support both at the same time, it's one or the other depending on which binary package you install. We definitely don't want that. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed

[Desktop-packages] [Bug 1975602] Re: 2.36.2 security update tracking bug

2022-05-24 Thread Marc Deslauriers
** Changed in: webkit2gtk (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to webkit2gtk in Ubuntu. https://bugs.launchpad.net/bugs/1975602 Title: 2.36.2 security update tracking bug Status in

[Desktop-packages] [Bug 1975602] [NEW] 2.36.2 security update tracking bug

2022-05-24 Thread Marc Deslauriers
*** This bug is a security vulnerability *** Public security bug reported: Bug to track the 2.36.2 security update. ** Affects: webkit2gtk (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Desktop Packages, which is

[Desktop-packages] [Bug 1974250] Re: ~/.pam_environment gets created as owned by root

2022-05-24 Thread Marc Deslauriers
** Information type changed from Private Security to Public Security ** Also affects: accountsservice (Ubuntu Jammy) Importance: Undecided Status: New ** Also affects: accountsservice (Ubuntu Kinetic) Importance: High Status: Fix Released ** Changed in: accountsservice

[Desktop-packages] [Bug 1971415] Re: Remote desktop is automatically enabled after login

2022-05-18 Thread Marc Deslauriers
This patch is still broken. The same thing happens with VNC: 1- Turn on remote desktop, turn on VNC. 2- Only turn off remote desktop while leaving VNC checked 3- Reboot 4- The VNC port is listening to connections even though remote desktop says off in the control center. -- You received this

[Desktop-packages] [Bug 1967626] Re: 22.04 beta Network Manager still sets wrong IPv6 routing

2022-05-11 Thread Marc Deslauriers
** Bug watch added: gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues #840 https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/840 ** Also affects: network-manager via https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/840 Importance:

[Desktop-packages] [Bug 1969593] Re: rules to prevent non-root users from rebooting not taken into account

2022-05-11 Thread Marc Deslauriers
Great, thanks! ** Changed in: policykit-1 (Ubuntu) Status: Incomplete => Invalid ** Changed in: systemd (Ubuntu) Status: Incomplete => Invalid -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to policykit-1 in Ubuntu.

[Desktop-packages] [Bug 1969593] Re: rules to prevent non-root users from rebooting not taken into account

2022-05-10 Thread Marc Deslauriers
I'm setting the status of this bug as "incomplete". Please let us know if that solved the problem for you or not. Thanks! ** Changed in: policykit-1 (Ubuntu) Status: New => Incomplete ** Changed in: systemd (Ubuntu) Status: New => Incomplete -- You received this bug notification

[Desktop-packages] [Bug 1969593] Re: rules to prevent non-root users from rebooting not taken into account

2022-05-10 Thread Marc Deslauriers
Systemd has a bunch of "imply" rules on other actionstry adding the following: [Disable more reboot actions] Identity=unix-user:* Action=org.freedesktop.login1.reboot-ignore-inhibit;org.freedesktop.login1.set-reboot-* ResultActive=no ResultInactive=no ResultAny=no -- You received this bug

[Desktop-packages] [Bug 1972654] Re: [security review] Sync policykit-1 0.120-6 (main) from Debian experimental

2022-05-09 Thread Marc Deslauriers
We do not want policykit to use the unmaintainable mozjs backend. That would be a hard NACK from the Security Team. The duktape backend has been merged upstream. So in order to sync this to Ubuntu, the following must be done: 1- Get Debian to switch to the duktape backend 2- Get Debian to

[Desktop-packages] [Bug 1970148] Re: Brave & Chrome browsers freezes on download and print to pdf

2022-05-01 Thread Marc H.
I have the same issue on Windows 11, Chrome/Edge freezing for about 3-4 seconds when you save any file to disk. This started a few days ago. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to chromium-browser in Ubuntu.

[Desktop-packages] [Bug 1971058] [NEW] package yaru-theme-gnome-shell 21.10.2 failed to install/upgrade: new yaru-theme-gnome-shell package pre-installation script subprocess returned error exit statu

2022-04-30 Thread Marc Cabana
Public bug reported: Can't install do-release-upgrade ProblemType: Package DistroRelease: Ubuntu 21.10 Package: yaru-theme-gnome-shell 21.10.2 ProcVersionSignature: Ubuntu 5.13.0-40.45-generic 5.13.19 Uname: Linux 5.13.0-40-generic x86_64 ApportVersion: 2.20.11-0ubuntu71.1 Architecture: amd64

[Desktop-packages] [Bug 1971001] Re: Multiple vulnerabilities in Trusty, Xenial, Bionic, Focal, Impish and Jammy

2022-04-30 Thread Marc Deslauriers
** Changed in: tiff (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to tiff in Ubuntu. https://bugs.launchpad.net/bugs/1971001 Title: Multiple vulnerabilities in Trusty, Xenial, Bionic, Focal,

[Desktop-packages] [Bug 1970783] Re: Multiple vulnerabilities in Bionic

2022-04-29 Thread Marc Deslauriers
We are no longer able to update webkit2gtk in bionic as it has new toolchain requirements that can't be met. See: https://wiki.ubuntu.com/SecurityTeam/FAQ#WebKitGTK ** Changed in: webkit2gtk (Ubuntu) Importance: Undecided => Wishlist ** Changed in: webkit2gtk (Ubuntu) Status: New =>

[Desktop-packages] [Bug 1969932] Re: Security issue in Ghostscript 9.26 due to missing patch

2022-04-25 Thread Marc Deslauriers
Thanks for filing the upstream bug, I am making this bug public since the commits are public and the issue is fixed in later releases. Thanks! ** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Desktop Packages,

[Desktop-packages] [Bug 1970121] Re: sharing enabled by default on 22.04

2022-04-24 Thread Marc Deslauriers
*** This bug is a duplicate of bug 1969619 *** https://bugs.launchpad.net/bugs/1969619 ** This bug has been marked a duplicate of bug 1969619 RDP Sharing appears on by default in jammy -- You received this bug notification because you are a member of Desktop Packages, which is subscribed

[Desktop-packages] [Bug 1964724] Re: the laptop is slowing down I suspect the graphics

2022-03-30 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Desktop-packages] [Bug 1964795] Re: gnome-keyring-daemon crashed with signal 7

2022-03-30 Thread Marc Deslauriers
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Desktop-packages] [Bug 1965114] Re: computer errs

2022-03-30 Thread Marc Deslauriers
Thank you for using Ubuntu and taking the time to report a bug. Your report should contain, at a minimum, the following information so we can better find the source of the bug and work to resolve it. Submitting the bug about the proper source package is essential. For help see

[Desktop-packages] [Bug 1965686] Re: After the laptop comes out of sleep mode, the desktop environment for some reason breaks and appears crashes window

2022-03-30 Thread Marc Deslauriers
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-shell in Ubuntu. https://bugs.launchpad.net/bugs/1965686 Title: After the laptop comes out of sleep mode, the desktop

[Desktop-packages] [Bug 1965869] Re: Screen only partially locked. Password promt was visible, but switching to window and typing eg in terminal was possible

2022-03-30 Thread Marc Deslauriers
** Package changed: ubuntu => gnome-shell (Ubuntu) ** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-shell in Ubuntu. https://bugs.launchpad.net/bugs/1965869 Title:

[Desktop-packages] [Bug 1966572] Re: Chromium Zero Day

2022-03-30 Thread Marc Deslauriers
This is published now: https://ubuntu.com/security/notices/USN-5350-1 ** Changed in: chromium-browser (Ubuntu) Status: New => Fix Released ** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Desktop

[Desktop-packages] [Bug 1816497] Re: [snap] vaapi chromium no video hardware decoding

2022-03-10 Thread Marc Peña
Hi again! @Olivier, maybe I'm a bit lost, but don't we need "use_vaapi = true" in the GN arguments? https://chromium.googlesource.com/chromium/src/+/refs/heads/main/docs/gpu/vaapi.md#vaapi- on-linux I don't see it set here: https://git.launchpad.net/~chromium-

[Desktop-packages] [Bug 1963751] Re: focal security update 2.34.6-0ubuntu0.20.04.1 cannot be automatically installed due to new dependency

2022-03-09 Thread Marc Deslauriers
Thanks! -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to webkit2gtk in Ubuntu. https://bugs.launchpad.net/bugs/1963751 Title: focal security update 2.34.6-0ubuntu0.20.04.1 cannot be automatically installed due to new dependency

[Desktop-packages] [Bug 1963751] Re: focal security update 2.34.6-0ubuntu0.20.04.1 cannot be automatically installed due to new dependency

2022-03-08 Thread Marc Deslauriers
** Package changed: unattended-upgrades (Ubuntu) => webkit2gtk (Ubuntu) ** Changed in: webkit2gtk (Ubuntu) Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to webkit2gtk in Ubuntu.

[Desktop-packages] [Bug 1963751] Re: focal security update 2.34.6-0ubuntu0.20.04.1 cannot be automatically installed due to new dependency

2022-03-07 Thread Marc Deslauriers
The new dependency on libopengl0 is expected. The new version of WebKitGTK fixed opengl detection and the new dependency is now required. I am going to re-assign this bug to unattended-upgrades. If it's not willing to install new dependencies, it definitely should get fixed as some security

  1   2   3   4   5   6   7   8   9   10   >