[Touch-packages] [Bug 1366790] Re: Fix for CVE-2014-1949 (GTK 3.10.x)

2014-09-08 Thread Seth Arnold
** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to gtk+3.0 in Ubuntu. https://bugs.launchpad.net/bugs/1366790 Title: Fix for CVE-2014-1949 (GTK 3.10.x)

[Touch-packages] [Bug 1366809] Re: nvidia driver error 340.24

2014-09-08 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1366888] Re: package libgcrypt11 1.5.0-3ubuntu0.3 failed to install/upgrade: libgcrypt11:amd64 1.5.0-3ubuntu0.3 cannot be configured because libgcrypt11

2014-09-08 Thread Seth Arnold
The bit that got cut off: dpkg: error processing libgcrypt11 (--configure): libgcrypt11:amd64 1.5.0-3ubuntu0.3 cannot be configured because libgcrypt11:i386 is in a different version (1.5.0-3ubuntu0.2) I suspect if you wait for your mirror of choice to refresh and the run apt-get update

[Touch-packages] [Bug 1367214] Re: Newly installed openssh-server and upstart: status: Unknown job: ssh

2014-09-09 Thread Seth Arnold
I believe this is an upstart issue, the tools appear to be selecting user tasks rather than system tasks. Try adding --system to your various commands: sarnold@hunt:~$ initctl --system status ssh ssh start/running, process 1352 sarnold@hunt:~$ initctl status ssh initctl: Unknown job: ssh **

[Touch-packages] [Bug 1370218] Re: QAudioRecorder does not work properly under 'microphone' security policy

2014-09-16 Thread Seth Arnold
This may be due to a Dbus AppArmor denial; can you also check /var/log/syslog for Dbus-generated DENIED messages? Thanks -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu.

[Touch-packages] [Bug 1370175] Re: Libav security fixes Sept 2014

2014-09-17 Thread Seth Arnold
Massimiliano, this bug is to track a libav update. If you wish to report a problem please start a new bug with ubuntu-bug xorg. Thanks -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to libav in Ubuntu.

[Touch-packages] [Bug 1370218] Re: QAudioRecorder does not work properly under 'microphone' security policy

2014-09-18 Thread Seth Arnold
Do you get an AppArmor DENIED line for the shm_open() failure? It might still be worth addressing this: - needless error logs are annoying and mask tracking down real problems and they waste flash write cycles - whatever is used as fallback may or may not be as efficient as shared memory, which

[Touch-packages] [Bug 1371766] Re: Latest CVE-2014-5270 patch breaks ElGamal keys of 16k

2014-09-19 Thread Seth Arnold
Ciaby, perhaps try raising your max locked memory resource limit. See setrlimit(2) and limits.conf(5) manpages for details. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to gnupg in Ubuntu.

[Touch-packages] [Bug 1349953] Re: Screen locking issue

2014-07-29 Thread Seth Arnold
** Information type changed from Private Security to Public ** Package changed: gnome-screensaver (Ubuntu) = unity (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to unity in Ubuntu.

[Touch-packages] [Bug 1349961] Re: lock screen don't get focus by closing the lid

2014-07-29 Thread Seth Arnold
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to unity in Ubuntu. https://bugs.launchpad.net/bugs/1349961 Title: lock screen don't get focus by closing the lid

[Touch-packages] [Bug 1350086] Re: Focus is on the app behind the lock screen after resume from suspend

2014-07-29 Thread Seth Arnold
*** This bug is a duplicate of bug 1349961 *** https://bugs.launchpad.net/bugs/1349961 ** This bug has been marked a duplicate of bug 1349961 lock screen don't get focus by closing the lid ** Information type changed from Private Security to Public -- You received this bug notification

[Touch-packages] [Bug 1350356] Re: vlc 2.1.5 is released, software upgrade is needed

2014-07-30 Thread Seth Arnold
The referenced CVEs were in libpng and in gnutls; http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-0333.html http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-3466.html gnutls already had an update: http://www.ubuntu.com/usn/usn-2229-1/ and the version of libpng we

[Touch-packages] [Bug 1350643] Re: 6.2p1+ fails key-exchange with embedded SSH devices

2014-07-30 Thread Seth Arnold
It might be worth changing your ciphers to something like: Ciphers

[Touch-packages] [Bug 1350750] Re: package python3-gi 3.12.0-1 failed to install/upgrade: cannot copy extracted data for './usr/lib/python3/dist-packages/gi/_gi.cpython-34m-x86_64-linux-gnu.so' to '/u

2014-07-31 Thread Seth Arnold
Thank you for taking the time to report this bug and helping to make Ubuntu better. Reviewing your dmesg attachment to this bug report it seems that there may be a problem with your hardware. I'd recommend performing a back up and then investigating the situation. Measures you might take

[Touch-packages] [Bug 1350673] Re: System policy cache may become stale after a system image update

2014-07-31 Thread Seth Arnold
Clearing the cache is expensive; if this chain of events will only affect 'developers', that's not ideal but tolerable. But if it'll affect average users we should really try to avoid clearing the cache. I haven't thought this through very far, but I wonder if we can do a better job solving this

[Touch-packages] [Bug 1351113] Re: password input box after suspend/resume was not focused but looked like it was; keyboard input was being intercepted by another window

2014-07-31 Thread Seth Arnold
Did you restart your computer or your login session after installing http://www.ubuntu.com/usn/usn-2303-1/ ? Thanks ** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is

[Touch-packages] [Bug 1351616] Re: Ubuntu 14.04: multi-touch screen can cause desktop to unlock

2014-08-04 Thread Seth Arnold
I'm surprised an X crash leaves enough of X running for you to interact with it; that seems highly surprising. ** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed

[Touch-packages] [Bug 1351616] Re: Ubuntu 14.04: multi-touch screen can cause desktop to unlock

2014-08-04 Thread Seth Arnold
That's a superb video. Thanks! -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to unity in Ubuntu. https://bugs.launchpad.net/bugs/1351616 Title: Ubuntu 14.04: multi-touch screen can cause desktop to unlock Status in “unity”

[Touch-packages] [Bug 1351616] Re: Ubuntu 14.04: multi-touch screen can cause desktop to unlock

2014-08-04 Thread Seth Arnold
** Changed in: unity (Ubuntu) Status: New = Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to unity in Ubuntu. https://bugs.launchpad.net/bugs/1351616 Title: Ubuntu 14.04: multi-touch screen can cause

[Touch-packages] [Bug 1353760] Re: Fix security issues from OpenSSL 1.0.1i

2014-08-06 Thread Seth Arnold
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssl in Ubuntu. https://bugs.launchpad.net/bugs/1353760 Title: Fix security issues from OpenSSL 1.0.1i Status

[Touch-packages] [Bug 1353760] Re: Fix security issues from OpenSSL 1.0.1i

2014-08-07 Thread Seth Arnold
https://lists.ubuntu.com/archives/ubuntu-security-announce/2014-August/002616.html http://www.ubuntu.com/usn/usn-2308-1/ ** Changed in: openssl (Ubuntu) Status: Confirmed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which

[Touch-packages] [Bug 1354227] Re: Lock screen password input directed to background window

2014-08-07 Thread Seth Arnold
Have you restarted your session since installing this security update? http://www.ubuntu.com/usn/usn-2303-1/ Thanks ** Information type changed from Private Security to Public Security ** Changed in: unity (Ubuntu) Status: New = Incomplete -- You received this bug notification because

[Touch-packages] [Bug 1354260] Re: error

2014-08-08 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1354260] Re: error

2014-08-08 Thread Seth Arnold
Note the following line in your dmesg, it might be worth trying: [ 17.928192] [Firmware Bug]: Duplicate ACPI video bus devices for the same VGA controller, please try module parameter video.allow_duplicates=1if the current driver doesn't work. -- You received this bug notification because you

[Touch-packages] [Bug 1354858] Re: [TIANYI F41A, Realtek ALC262, Black SPDIF Out, Rear] Pulseaudio fails to detect cardc

2014-08-11 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1354869] Re: bootmrepair

2014-08-11 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1354810] Re: always crash when start up

2014-08-11 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1354721] Re: impossible reproduce files correctly [USB-Audio - io|2, playback] Underruns, dropouts or crackling sound

2014-08-11 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1355867] Re: package base-files 6.5ubuntu6.7 failed to install/upgrade: ErrorMessage: package base-files is already installed and configured

2014-08-12 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1355862] Re: package sysv-rc 2.88dsf-13.10ubuntu11.1 failed to install/upgrade: ErrorMessage: package sysv-rc is already installed and configured

2014-08-12 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1356860] Re: [Vostro 3700, IDT 92HD81B1X5, Black Mic, Front] No sound at all

2014-08-14 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1379672] Re: Touch Pad setting missing, for scroll

2014-10-10 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1293439] Re: Apparmor prevents icedtea-7-plugin from creating necessary files

2014-10-16 Thread Seth Arnold
Frédéric, note that the 'owner' keyword means that the user running the program must also own the file; with most files in /usr/ being owned by root, this addition would only work if you're running Firefox as root. -- You received this bug notification because you are a member of Ubuntu Touch

[Touch-packages] [Bug 1380457] Re: lock screen not working

2014-10-16 Thread Seth Arnold
** Changed in: unity (Ubuntu) Status: Invalid = New ** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to unity in Ubuntu.

[Touch-packages] [Bug 1376443] Re: Default ACL not inherited as Access ACL on copy and move

2014-10-16 Thread Seth Arnold
Stay away from the patches provided in the linked email; I suspect the person who put it together does not regularly receive files named foo ; rm -rf ~ from his friends. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to

[Touch-packages] [Bug 1381863] Re: File name beginning with a dash used as program argument

2014-10-16 Thread Seth Arnold
This is working as expected. Some people even stick files named e.g. --interactive into their directories to use this as some kind of defense against accidental deletion. Most programs provide a -- command line option that says further arguments should be interpreted as files. But this kind of

[Touch-packages] [Bug 1382115] Re: package dictionaries-common 1.12.1ubuntu2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 255

2014-10-17 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1376443] Re: Default ACL not inherited as Access ACL on copy and move

2014-10-20 Thread Seth Arnold
Bib, I'm not saying that this bug is incorrect. I'm saying that these patches are insecure and should not be used: http://michael.orlitzky.com/code/releases/tar-1.27.1-gpcc.patch http://michael.orlitzky.com/code/releases/coreutils-8.22-gpcc.patch Do not use those patches. They are unsafe.

[Touch-packages] [Bug 1382915] Re: problems

2014-10-20 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1384368] Re: slow pc

2014-10-22 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1384419] Re: com.canonical.UnityGreeter.HideGreeter defeats password requirement

2014-10-22 Thread Seth Arnold
** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to unity8 in Ubuntu. https://bugs.launchpad.net/bugs/1384419 Title: com.canonical.UnityGreeter.HideGreeter

[Touch-packages] [Bug 1384860] Re: reconfiguring Ubuntu

2014-10-23 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1384419] Re: com.canonical.UnityGreeter.HideGreeter defeats password requirement

2014-10-23 Thread Seth Arnold
*** This bug is a duplicate of bug 1382559 *** https://bugs.launchpad.net/bugs/1382559 Thanks Michael and Christian; the intention is that connecting via adb will require the screen to be unlocked. Thanks ** This bug has been marked a duplicate of bug 1382559 adbd does not check the

[Touch-packages] [Bug 1294797] Re: aa-genprof traceback with apparmor 2.8.95

2014-10-24 Thread Seth Arnold
** Changed in: apparmor (Ubuntu Trusty) Status: Fix Released = Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1294797 Title: aa-genprof traceback with

[Touch-packages] [Bug 1373339] Re: bug on gma

2014-09-24 Thread Seth Arnold
Thank you for using Ubuntu and taking the time to report a bug. Your report should contain, at a minimum, the following information so we can better find the source of the bug and work to resolve it. Submitting the bug about the proper source package is essential. For help see

[Touch-packages] [Bug 1369400] Re: Fails to find the installed drivers

2014-09-24 Thread Seth Arnold
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to software-properties in Ubuntu. https://bugs.launchpad.net/bugs/1369400 Title: Fails to find the installed drivers

[Touch-packages] [Bug 1169881] Re: Please add gnome-gmail to ubuntu-email

2014-09-24 Thread Seth Arnold
** Also affects: apparmor Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1169881 Title: Please add gnome-gmail to

[Touch-packages] [Bug 1373688] Re: Bash Code Injection Vulnerability via Specially Crafted Environment Variables

2014-09-24 Thread Seth Arnold
** Information type changed from Private Security to Public Security ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2014-6271 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to bash in Ubuntu.

[Touch-packages] [Bug 1373879] Re: unable to play mkv, avi, mpeg videos

2014-09-25 Thread Seth Arnold
Thank you for taking the time to report this bug and helping to make Ubuntu better. You appear to be running a release of Ubuntu that is no longer supported. Please see https://wiki.ubuntu.com/Releases for information on our currently supported releases; consider using one of the LTS releases,

[Touch-packages] [Bug 1374207] Re: CVE-2014-7169 fix not effective on trusty

2014-09-26 Thread Seth Arnold
Thomas, I'm not sure about your test -- there is a /bin/echo in the filesystem (from the coreutils package) so checking for a file named 'echo' in that directory is not indicative of any attack. I suspect you also have a /root/echo file, perhaps left over from earlier testing. If you do, please

[Touch-packages] [Bug 1374506] Re: xorg

2014-09-26 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1374490] Re: package gstreamer1.0-plugins-bad 1.2.4-1~ubuntu1 failed to install/upgrade: a tentar sobre-escrever '/usr/lib/x86_64-linux-gnu/gstreamer-1.0/libgstvideoparsersbad.so

2014-09-26 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1374561] Re: package libnss3 2:3.16.3-1ubuntu1 failed to install/upgrade: trying to overwrite shared '/usr/share/doc/libnss3/changelog.Debian.gz', which is different from other i

2014-09-26 Thread Seth Arnold
Looks vaguely like you've got both i386 and amd64 versions of libnss3 installed and only tried to upgrade the amd64 version for a security update... -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to nss in Ubuntu.

[Touch-packages] [Bug 1374222] Re: path for policy files changed

2014-09-27 Thread Seth Arnold
Looks like we may need to adjust apparmor policy lines too. I wonder what motivated the path change. ** Information type changed from Private Security to Public Security ** Also affects: apparmor (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because

[Touch-packages] [Bug 1374222] Re: path for policy files changed

2014-09-27 Thread Seth Arnold
Browsers are special. We certainly don't have the resources to fix only security issues found in the browsers as we do with most other packages. We package what upstream produces and this is far from the first thing they've moved: the name of the sandbox executable has changed three or four times

[Touch-packages] [Bug 1375601] Re: Wifi gets disconnected on random

2014-09-30 Thread Seth Arnold
Are you confident your ufw firewall rules aren't blocking your attempts to use dhcp? Thanks ** Information type changed from Public Security to Public -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to network-manager in

[Touch-packages] [Bug 1376342] Re: [HP Compaq dc7900 Ultra-Slim Desktop, Analog Devices AD1884A, Black Headphone Out, Front] No sound at all

2014-10-01 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1376968] [NEW] file identifies a perl script as an awk script

2014-10-02 Thread Seth Arnold
Public bug reported: ubuntu@server-a41d04fd-0554-47fb-be87-04c9e54db176:~$ dpkg -l file | cat Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad) ||/ Name

[Touch-packages] [Bug 1377128] Re: repair

2014-10-03 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1374742] Re: opening privileged shell after entering wrong password for LUKS three times

2014-10-03 Thread Seth Arnold
There are any number of ways to get a privileged shell from a system when physically present at booting. The important part is that your data is still encrypted without the keys. Thanks ** Changed in: initramfs-tools (Ubuntu) Status: New = Invalid -- You received this bug notification

[Touch-packages] [Bug 1377239] Re: cups-pdf 2.6.1-9 not able to lookup domain user because apparmor profile

2014-10-03 Thread Seth Arnold
Since you put this into complain mode, there may be more entries needed that might have been logged with ALLOWED -- can you grep for those, too, please? -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to cups in Ubuntu.

[Touch-packages] [Bug 1377434] Re: Ubuntu Mate 14.10 Beta 2 upower error on system startup

2014-10-06 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1377520] Re: package sudo 1.8.9p5-1ubuntu2 failed to install/upgrade: sub-processo script pre-removal instalado retornou estado de saída de erro 1

2014-10-06 Thread Seth Arnold
Thank you for using Ubuntu and taking the time to report a bug. Your report should contain, at a minimum, the following information so we can better find the source of the bug and work to resolve it. Submitting the bug about the proper source package is essential. For help see

[Touch-packages] [Bug 1378071] Re: bash crashed with SIGSEGV in strlen()

2014-10-06 Thread Seth Arnold
With the prefix+suffix patches, this can no longer be exploited across privilege boundaries; we'll likely include these fixes at some point in the future but don't consider them a pressing issue any longer. For more details please see our CVE tracker: http://people.canonical.com/~ubuntu-

[Touch-packages] [Bug 1378071] Re: bash crashed with SIGSEGV in strlen()

2014-10-06 Thread Seth Arnold
Also, please, no one ever run any command along the line of curl foo | bash -- a malicious web server could easily give some friendly-looking content to a web browser but malware payload to curl. Download the script, read the script, validate published signatures, and only then execute the script

[Touch-packages] [Bug 1378177] [NEW] Turn screen off when invactive timeout doesn't work

2014-10-06 Thread Seth Arnold
Public bug reported: I left my laptop open and running tonight when away. When I returned 1.5 hours later, my screen was still on, all black except for a white mouse pointer. I locked the screen with the windows+L combo and walked away when the lock screen displayed properly. The Brightness

[Touch-packages] [Bug 1378177] Re: Turn screen off when invactive timeout doesn't work

2014-10-08 Thread Seth Arnold
Unmarking as a duplicate, see https://bugs.launchpad.net/ubuntu/+source /gnome-desktop3/+bug/1377847/comments/7 for details. In the other bug I had mentioned that 'xset 500 ' worked fine to turn off my screen as I want. Thanks ** This bug is no longer a duplicate of bug 1377847

[Touch-packages] [Bug 1378977] Re: /proc/sys/kernel/cap_last_cap denial for dnsmasq

2014-10-08 Thread Seth Arnold
It'd be nice to track down which library call wants this so we can better figure an abstraction to add this to.. (it might just belong in abstractions/base if it is common enough.) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed

[Touch-packages] [Bug 1378802] Re: update-manager Couldn't connect to accessibility bus

2014-10-08 Thread Seth Arnold
Can you please add an attachment: grep DEN /var/log/syslog This should capture AppArmor denied messages, it's my hunch there are some missing rules. Thanks ** Tags added: apparmor -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is

[Touch-packages] [Bug 1386711] Re: CVE-2014-4877 symlink arbitrary filesystem access

2014-11-03 Thread Seth Arnold
http://www.ubuntu.com/usn/usn-2393-1 ** Changed in: wget (Ubuntu) Status: Confirmed = Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to wget in Ubuntu. https://bugs.launchpad.net/bugs/1386711 Title:

[Touch-packages] [Bug 1388336] Re: Browser is disabled easily

2014-11-03 Thread Seth Arnold
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to xorg in Ubuntu. https://bugs.launchpad.net/bugs/1388336 Title: Browser is disabled easily Status in “xorg”

[Touch-packages] [Bug 1388962] Re: Black screen

2014-11-03 Thread Seth Arnold
** Information type changed from Private Security to Public -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to xorg in Ubuntu. https://bugs.launchpad.net/bugs/1388962 Title: Black screen Status in “xorg” package in Ubuntu:

[Touch-packages] [Bug 1319829] Re: aa-genprof will crash when select scan on Ubuntu 14.04 server

2014-11-04 Thread Seth Arnold
** Changed in: apparmor (Ubuntu Trusty) Status: Fix Released = Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1319829 Title: aa-genprof will crash when

[Touch-packages] [Bug 1390060] Re: system running on low graphic mode

2014-11-06 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1390060] Re: system running on low graphic mode

2014-11-06 Thread Seth Arnold
Note from your bootlog that you have some apparmor policy errors: https://launchpadlibrarian.net/189391868/BootLog.txt Your /etc/apparmor.d/tunables/home file should be owned by root with group root and permissions 0644. You may need to customize the contents some, here's mine: #

[Touch-packages] [Bug 1392065] Re: grub

2014-11-12 Thread Seth Arnold
Thank you for using Ubuntu and taking the time to report a bug. Your report should contain, at a minimum, the following information so we can better find the source of the bug and work to resolve it. Submitting the bug about the proper source package is essential. For help see

[Touch-packages] [Bug 1392118] Re: two graphics adapter for the notebook

2014-11-12 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1393612] Re: Protect against BadUSB device

2014-11-17 Thread Seth Arnold
** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to systemd in Ubuntu. https://bugs.launchpad.net/bugs/1393612 Title: Protect against BadUSB device Status

[Touch-packages] [Bug 1393612] Re: Protect against BadUSB device

2014-11-17 Thread Seth Arnold
Sadly, the solution is not easy nor obvious. Ubuntu is used in a wide variety of different ways and many of them do not lend themselves well to just popping up a dialog box. Furthermore, the problem is not at all restricted to just devices that can be reprogrammed to act like keyboards. A fairly

[Touch-packages] [Bug 1399845] [NEW] tunables/global doesn't include all defined variables

2014-12-05 Thread Seth Arnold
Public bug reported: The comment at the top of tunables/global says: # All the tunables definitions that should be available to every profile # should be included here But not all defined variables are included: $ grep include global # should be included here #include tunables/home #include

[Touch-packages] [Bug 1399881] Re: problum

2014-12-08 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1400386] Re: computer turn on only when i make it so hot in blankets

2014-12-08 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 991481] Re: Constant dns traffic for daisy.ubuntu.com

2014-12-08 Thread Seth Arnold
If you're going to bodge this with a wrapper script, a better choice would address the constant network monitoring performed in whoopsie by using the assume-online command line option. I don't know the whoopsie codebase but based on a quick reading it looks like the only real downside to this

[Touch-packages] [Bug 1401733] Re: package libjasper1 1.900.1-14ubuntu3.1 [modified: usr/share/doc/libjasper1/changelog.Debian.gz] failed to install/upgrade: trying to overwrite shared '/usr/share/doc

2014-12-12 Thread Seth Arnold
This looks roughly like you've got both amd64 and i386 versions of this library installed; they should be updated in lockstep should you wish to keep them both. Thanks ** Information type changed from Private Security to Public Security ** Changed in: jasper (Ubuntu) Status: New =

[Touch-packages] [Bug 1401763] Re: if log into guest and then loginto user i get a series error after logging in

2014-12-12 Thread Seth Arnold
It would be helpful to have the error messages. Thanks ** Information type changed from Private Security to Public ** Changed in: shadow (Ubuntu) Status: New = Incomplete -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed

[Touch-packages] [Bug 1402282] Re: And another problem

2014-12-15 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1402972] Re: Eclipse Crashes when i try to import project

2014-12-16 Thread Seth Arnold
** Information type changed from Private Security to Public ** Package changed: apport (Ubuntu) = eclipse (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apport in Ubuntu. https://bugs.launchpad.net/bugs/1402972

[Touch-packages] [Bug 1108348] Re: Unity does nothing with URGENT window flag

2014-12-17 Thread Seth Arnold
** Changed in: unity Status: Incomplete = New ** Changed in: unity (Ubuntu) Status: Incomplete = New -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to unity in Ubuntu. https://bugs.launchpad.net/bugs/1108348

[Touch-packages] [Bug 1108348] Re: Unity does nothing with URGENT window flag

2014-12-17 Thread Seth Arnold
Andrea, the URGENT flag still doesn't work in Ubuntu 14.04 LTS Unity. I haven't upgraded to 14.10 yet ** Tags removed: quantal ** Tags added: trusty -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to unity in Ubuntu.

[Touch-packages] [Bug 1108348] Re: Unity does nothing with URGENT window flag

2014-12-17 Thread Seth Arnold
^G is the ascii BEL character; most terminals will pass that along to X11 as an URGENT flag. $ ascii bel ASCII 0/7 is decimal 007, hex 07, octal 007, bits 0111: called ^G, BEL Official name: Bell C escape: '\a' Other names: Alert From urxvt(1): urgentOnBell: boolean

[Touch-packages] [Bug 1357720] Re: when unlocking (with password) I have a black screen

2014-08-18 Thread Seth Arnold
Thank you for taking the time to report this bug and helping to make Ubuntu better. Please execute the following command, as it will automatically gather debugging information, in a terminal: apport-collect 1357720 This will help us to find and resolve the problem. Bear in mind that you may need

[Touch-packages] [Bug 1358421] Re: Using Ethernet with Printer through usb connection in router (Buffalo wzr1166

2014-08-18 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1358422] Re: Using Ethernet with Printer through usb connection in router (Buffalo wzr1166

2014-08-18 Thread Seth Arnold
*** This bug is a duplicate of bug 1358421 *** https://bugs.launchpad.net/bugs/1358421 Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a

[Touch-packages] [Bug 505278] Re: ssh-add -D deleting all identities does not work. Also, why are all identities auto-added?

2014-08-18 Thread Seth Arnold
Derek, what is 14.04.4? 12.04.4 or 14.04.1? Thanks -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to openssh in Ubuntu. https://bugs.launchpad.net/bugs/505278 Title: ssh-add -D deleting all identities does not work. Also,

[Touch-packages] [Bug 1358637] Re: package python3-apparmor 2.8.95~2430-0ubuntu5 failed to install/upgrade: trying to overwrite '/usr/lib/python3/dist-packages/apparmor/__init__.py', which is also in

2014-08-19 Thread Seth Arnold
*** This bug is a duplicate of bug 1347100 *** https://bugs.launchpad.net/bugs/1347100 ** This bug has been marked a duplicate of bug 1347100 package python3-apparmor 2.8.95~2430-0ubuntu5 failed to install/upgrade: trying to overwrite '/usr/lib/python3/dist-packages/apparmor/__init__.py',

[Touch-packages] [Bug 1360579] Re: I dont know

2014-08-25 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1360748] Re: и не только в этом пакете - повсюду ошибки

2014-08-25 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1360791] Re: Shows errors at the start up of Linux

2014-08-25 Thread Seth Arnold
This error message looks worth investigating further: [ 34.728378] init: Failed to spawn hybrid-gfx main process: unable to execute: No such file or directory -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to xorg in Ubuntu.

[Touch-packages] [Bug 1360791] Re: Shows errors at the start up of Linux

2014-08-25 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Touch-packages] [Bug 1334819] Re: unity (Ubuntu 14.10)

2014-08-26 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

  1   2   3   4   5   6   7   8   9   10   >