[Bug 1469653] Re: CVE-2014-0224 not fixed for python-openssl based servers

2015-07-07 Thread Rob Meijer
It seems this bug report is invalid after all. While the main system was fully updated, it appears the actual server was running in a 'debootstrap' generated chroot that, while updated regularly, was missing security related entries from the sources.list inside the chroot environment. Please

[Bug 1469653] Re: CVE-2014-0224 not fixed for python-openssl based servers

2015-07-06 Thread Rob Meijer
Also please note that the server code Tyler referenced to, as far as I can determine, imports 'ssl' from the libpython2.7-minimal package. This bug however seems to relate to the python-openssl package. -- You received this bug notification because you are a member of Ubuntu Bugs, which is

[Bug 1469653] Re: CVE-2014-0224 not fixed for python-openssl based servers

2015-07-06 Thread Rob Meijer
A stripped down version of the server code used. Using this code on a fully patched Ubuntu 14.04 server, ssllabs will report: This server is vulnerable to the OpenSSL CCS vulnerability (CVE-2014-0224) and exploitable. Grade set to F. ** Attachment added: Demo server code

[Bug 1469653] [NEW] CVE-2014-0224 not fixed for python-openssl based servers

2015-06-29 Thread Rob Meijer
Public bug reported: When creating a minimal https based server in python using 'from OpenSSL import SSL' on a fully patched Ubuntu 14.04 system, the OpenSSL bug as reported in CVE-2014-0224 seems to persist for that server. A C++ implementation with the same functionality on the same system

[Bug 826613] Re: [needs-packaging] JsonMe++

2012-02-22 Thread Rob Meijer
The source tree already contains packaging files for Ubuntu 64 bits (jsonme++/DEBIAN/* ) and a package can be build after make by invoking the script named makedepstuff.sh. So basically the bug 'needs packaging' should be almost fixed. I could use some help in getting this issue moved to the next

[Bug 826613] Re: [needs-packaging] JsonMe++

2012-02-22 Thread Rob Meijer
The source tree already contains packaging files for Ubuntu 64 bits ( ) and a package can be buikd after make by invoking the script named makedepstuff.sh. So basically the bug 'needs packaging' should be almost fixed. I could use some help in getting this issue moved to the next stage of

[Bug 826620] Re: [needs-packaging] dynr-pbrouting

2012-02-22 Thread Rob Meijer
As stated in the bug description, the source tree of this project contains the script build.sh that makes an architecture independant package using the files in dynr-pbrouting/DEBIAN. I could use some help getting this bug from this package to the next stage. ** Changed in: ubuntu Status:

[Bug 938533] [NEW] [needs-packaging] dynr-pbdns

2012-02-22 Thread Rob Meijer
Public bug reported: The DynrLite-II project ( http://robklpd.github.com/dynrlite-ii/ ) allows placing a so called dynamic router between a lan that contains workstations and a lan that contains internet gateways. The dynamic router has a simple web interface that lets the users on the

[Bug 938536] [NEW] [needs-packaging] dynr-web

2012-02-22 Thread Rob Meijer
Public bug reported: The DynrLite-II project ( http://robklpd.github.com/dynrlite-ii/ ) allows placing a so called dynamic router between a lan that contains workstations and a lan that contains internet gateways. The dynamic router has a simple web interface that lets the users on the

[Bug 826613] [NEW] [needs-packaging] JsonMe++

2011-08-15 Thread Rob Meijer
Public bug reported: JsonMe++ is a convenience C++ wrapper library for JSON-Glib providing friendly syntactic sugar for parsing JSON URL: https://github.com/pibara/jsonme-- License: LGPL Note: The source tree already contains a script 'makedepstuff.sh' for building a simple package from this.

[Bug 826620] Re: [needs-packaging] dynr-pbrouting

2011-08-15 Thread Rob Meijer
Note: depends on 826613 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/826620 Title: [needs-packaging] dynr-pbrouting To manage notifications about this bug go to:

[Bug 826620] [NEW] [needs-packaging] dynr-pbrouting

2011-08-15 Thread Rob Meijer
Public bug reported: The DynrLite-II project allows placing a so called dynamic router between a lan that contains workstations and a lan that contains internet gateways. The dynamic router has a simple web interface that lets the users on the workstations pick or switch what gateway they want

[Bug 826620] Re: [needs-packaging] dynr-pbrouting

2011-08-15 Thread Rob Meijer
** Tags added: needs-packaging -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/826620 Title: [needs-packaging] dynr-pbrouting To manage notifications about this bug go to:

[Bug 826613] Re: [needs-packaging] JsonMe++

2011-08-15 Thread Rob Meijer
** Tags added: needs-packaging -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/826613 Title: [needs-packaging] JsonMe++ To manage notifications about this bug go to: