[Bug 875818] Re: [mir] libnetfilter-conntrack

2011-10-26 Thread Steve Langasek
2011-10-26 18:20:56 INFOCreating lockfile: /var/lock/launchpad-change-override.lock 2011-10-26 18:21:06 INFOOverride Component to: 'main' 2011-10-26 18:21:06 INFO'libnetfilter-conntrack - 0.9.1-1ubuntu1/universe/libs' source overridden 2011-10-26 18:21:06 INFO

[Bug 829221] Re: lightdm crashed with SIGSEGV in initialize_password_db()

2011-10-25 Thread Steve Langasek
Thanks, marking this fix as verified. Will push upstream ASAP. ** Tags removed: verification-needed ** Tags added: verification-done -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to samba in Ubuntu.

[Bug 862129] Re: samba postrm depends on packages not guaranteed to be configured

2011-10-25 Thread Steve Langasek
Analysis of the upgrade logs and further discussion on IRC shows that it's infeasible to fix this in samba. The problem arises when perl- modules is unpacked without libperl5.12/perl-base, and then samba is unpacked. Moving the update-inetd code from the postrm to the prerm may help in some

[Bug 211631] Re: Network is brought down before network filesystems are unmounted (CIFS timeout at shutdown)

2011-10-24 Thread Steve Sutton
Off topic, but the multiple mount can be caused if you miss trailing slashes off the mountpoint in fstab /media/myfsbad /media/myfs/ good -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to samba in Ubuntu.

[Bug 540747] Re: Apache Web DAV incorrect permissions

2011-10-24 Thread Steve Magoun
** Changed in: oem-priority Status: New = Triaged ** Changed in: oem-priority/lucid Status: New = Triaged -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in Ubuntu. https://bugs.launchpad.net/bugs/540747 Title:

[Bug 877740] Re: CVE-2011-3368 Apache2 mod_proxy reverse proxy exposure

2011-10-24 Thread Steve Beattie
Thanks, Michael, I expect packages to go out in the next couple of days. FYI, the lucid debdiff you posted did not include an edit to debian/patches/00list, so I don't believe it's getting applied in your ppa build. -- You received this bug notification because you are a member of Ubuntu Server

[Bug 829221] Re: lightdm crashed with SIGSEGV in initialize_password_db()

2011-10-21 Thread Steve Langasek
-proposed. Please report any results here, so we know whether to push this fix out to the rest of our users and forward it to upstream. ** Changed in: samba (Ubuntu Oneiric) Status: Confirmed = In Progress ** Changed in: samba (Ubuntu Oneiric) Assignee: (unassigned) = Steve Langasek

[Bug 874130] Re: Canonicalize fallback only works for different realm (MITKRB RT #6917)

2011-10-20 Thread Steve Langasek
copied to precise. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/874130 Title: Canonicalize fallback only works for different realm (MITKRB RT #6917) To manage notifications about

[Bug 874130] Re: Canonicalize fallback only works for different realm (MITKRB RT #6917)

2011-10-19 Thread Steve Langasek
** Tags removed: verification-needed ** Tags added: verification-done -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/874130 Title: Canonicalize fallback only works for different realm

[Bug 874518] Re: ssh with kerberos fails after upgrade to 11.10

2011-10-19 Thread Steve Langasek
*** This bug is a duplicate of bug 874130 *** https://bugs.launchpad.net/bugs/874130 This looks like a duplicate of bug #874130. Please test the krb5 packages from oneiric-proposed and let us know if they resolve your issue. ** This bug has been marked a duplicate of bug 874130

[Bug 877607] Re: package libapache2-mod-php5 5.3.5-1ubuntu7.3 failed to install/upgrade: vereistenproblemen - blijft ongeconfigureerd

2011-10-19 Thread Steve Beattie
This appears to be the issue: ERROR: Module reqtimeout does not exist! mod_reqtimeout should be provided by the apache2.2-bin package. Is it installed and in a consistent state? ** Changed in: php5 (Ubuntu) Status: New = Incomplete -- You received this bug notification because you

[Bug 829221] Re: lightdm crashed with SIGSEGV in initialize_password_db()

2011-10-19 Thread Steve Langasek
Ok. It appears that this bug is still a problem for other people, however; bug #876843 is duped to this one and mentions that it still happens with lightdm 1.0.1-0ubuntu6, and the patch I've attached to this bug seems to fix a real issue. Is someone else who's seeing this issue willing to try a

[Bug 874130] Re: Canonicalize fallback only works for different realm (MITKRB RT #6917)

2011-10-18 Thread Steve Langasek
** Tags removed: verification-needed ** Tags added: verification-done -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/874130 Title: Canonicalize fallback only works for different realm

[Bug 852865] Re: strrchr() functions information leak

2011-10-18 Thread Steve Beattie
** CVE removed: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2011-2202 ** CVE removed: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2011-3182 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu.

[Bug 877740] Re: CVE-2011-3368 Apache2 mod_proxy reverse proxy exposure

2011-10-18 Thread Steve Beattie
: (unassigned) = Steve Beattie (sbeattie) ** Changed in: apache2 (Ubuntu Lucid) Assignee: (unassigned) = Steve Beattie (sbeattie) ** Changed in: apache2 (Ubuntu Maverick) Assignee: (unassigned) = Steve Beattie (sbeattie) ** Changed in: apache2 (Ubuntu Natty) Assignee: (unassigned) = Steve

[Bug 829221] Re: lightdm crashed with SIGSEGV in initialize_password_db()

2011-10-18 Thread Steve Langasek
Tamer, please attach the /etc/samba/smb.conf file from the affected system. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to samba in Ubuntu. https://bugs.launchpad.net/bugs/829221 Title: lightdm crashed with SIGSEGV in

[Bug 829221] Re: lightdm crashed with SIGSEGV in initialize_password_db()

2011-10-18 Thread Steve Langasek
This code is also unchanged since upstream version 3.4.0pre1 (May 2009). Very strange indeed. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to samba in Ubuntu. https://bugs.launchpad.net/bugs/829221 Title: lightdm crashed with

[Bug 829221] Re: lightdm crashed with SIGSEGV in initialize_password_db()

2011-10-18 Thread Steve Langasek
In source3/passdb/pdb_interface.c, pdb_get_methods_reload() assumes that pdb-free_private_data will always be set and callable. This is not the case for the tdbsam backend, which has: /* no private data */ (*pdb_method)-private_data = NULL;

[Bug 874130] Re: Canonicalize fallback only works for different realm (MITKRB RT #6917)

2011-10-18 Thread Steve Beattie
Unfortunately, the version in oneiric-proposed was superceded by a security update to krb5 (though the versioning of the proposed version doesn't correctly reflect that) in USN 1233-1 http://www.ubuntu.com/usn/usn-1233-1/. Attached is a debdiff against the version of krb5 in oneiric-security,

[Bug 874130] Re: Canonicalize fallback only works for different realm (MITKRB RT #6917)

2011-10-18 Thread Steve Beattie
** Patch added: krb5_1.9.1+dfsg-1ubuntu2.1.debdiff https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/874130/+attachment/2559171/+files/krb5_1.9.1%2Bdfsg-1ubuntu2.1.debdiff -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in

[Bug 829221] Re: lightdm crashed with SIGSEGV in initialize_password_db()

2011-10-18 Thread Steve Langasek
Here's a prospective fix for this issue. ** Patch added: samba-829221.patch https://bugs.launchpad.net/ubuntu/+source/samba/+bug/829221/+attachment/2559172/+files/samba-829221.patch -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to

[Bug 874130] Re: Canonicalize fallback only works for different realm (MITKRB RT #6917)

2011-10-18 Thread Steve Langasek
krb5 1ubuntu2.1 reuploaded. ** Changed in: krb5 (Ubuntu Oneiric) Status: Fix Committed = In Progress -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/874130 Title: Canonicalize

[Bug 852871] Re: PHP ZEND_SL Opcode Interruption Address Information Leak Vulnerability

2011-10-17 Thread Steve Beattie
Thanks for reporting this issue. It has been addressed in Ubuntu 10.10 (maverick) and newer. For Ubuntu 10.04 LTS (lucid), I'll be applying the upstream fix for it. For Ubuntu 8.04 LTS (hardy), upstream never fixed this issue in the php 5.2 branch, and backporting the fix is non-trivial and thus

[Bug 852865] Re: strrchr() functions information leak

2011-10-17 Thread Steve Beattie
Thanks for reporting this issue. This issue only affects Ubuntu 8.04 LTS, despite what the securityfocus link above says. It will be addressed in a forthcoming php update. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu.

[Bug 852871] Re: PHP ZEND_SL Opcode Interruption Address Information Leak Vulnerability

2011-10-17 Thread Steve Beattie
(Ubuntu Lucid) Importance: Undecided = Low ** Changed in: php5 (Ubuntu Lucid) Assignee: (unassigned) = Steve Beattie (sbeattie) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/852871

[Bug 852865] Re: strrchr() functions information leak

2011-10-17 Thread Steve Beattie
** Changed in: php5 (Ubuntu) Status: Confirmed = Fix Released ** Changed in: php5 (Ubuntu Hardy) Status: New = In Progress ** Changed in: php5 (Ubuntu Hardy) Assignee: (unassigned) = Steve Beattie (sbeattie) ** Changed in: php5 (Ubuntu Hardy) Importance: Undecided = Low

[Bug 862129] Re: samba postrm depends on packages not guaranteed to be configured

2011-10-14 Thread Steve Langasek
Historically, we wait for postrm before calling update-inetd --remove because the enabled/disabled status of an inetd service is admin configuration data, so we only want to remove it on purge. -- You received this bug notification because you are a member of Ubuntu Server Team, which is

[Bug 862129] Re: samba postrm depends on packages not guaranteed to be configured

2011-10-14 Thread Steve Langasek
but doesn't it seem silly to have an enabled service in inetd that references binaries that no longer exist on disk? Well, it's possible to use a different marker for package-level disabling vs. admin-level disabling of a service... note that the postrm *always* disables it when we're not

[Bug 874130] Re: Canonicalize fallback only works for different realm (MITKRB RT #6917)

2011-10-14 Thread Steve Langasek
For precise, this should be fixed in short order by merging the latest Debian version. ** Changed in: krb5 (Ubuntu) Status: Confirmed = Triaged ** Changed in: krb5 (Ubuntu) Importance: Undecided = High ** Also affects: krb5 (Ubuntu Oneiric) Importance: Undecided Status: New

[Bug 874130] Re: Canonicalize fallback only works for different realm (MITKRB RT #6917)

2011-10-14 Thread Steve Langasek
** Changed in: krb5 (Ubuntu Oneiric) Status: Triaged = In Progress ** Changed in: krb5 (Ubuntu Oneiric) Assignee: (unassigned) = Steve Langasek (vorlon) ** Description changed: + SRU justification: + krb5 1.9.1 breaks interoperability with older KDCs. If you have a Kerberos realm

[Bug 873423] Re: request to include 32-bit net-snmp libs in ia32-libs

2011-10-13 Thread Steve Langasek
figured that I'd at least submit a request for 32-bit versions of the net-snmp libraries (libsnmp15 in natty) to be included with ia32-libs This won't happen. ia32-libs is deprecated; the correct action here is for net-snmp to be converted to multiarch. Reassigning. ** Package changed:

[Bug 871673] Re: APR apr_fnmatch() Denial of Service Vulnerability

2011-10-13 Thread Steve Beattie
Thanks for reporting this issue, which is CVE-2011-0419. It's a vulnerability in apache's apr library, which in Ubuntu is shipped in the separate 'apr' source package, and the apache packages links against it. It was addressed in USN-1134-1 http://www.ubuntu.com/usn/usn-1134-1. ** CVE added:

Re: [Bug 375569] Re: gnome-screensaver failure - can't access samba password database - not running as root

2011-10-13 Thread Steve Langasek
pam_smbpass.so migrate Er, no. If you don't want to use this, then *don't enable the smbpasswd-migrate profile*. You should not be editing this file. -- Steve Langasek Give me a lever long enough and a Free OS Debian Developer to set it on, and I

[Bug 852865] Re: strrchr() functions information leak

2011-10-13 Thread Steve Beattie
** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-2484 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to php5 in Ubuntu. https://bugs.launchpad.net/bugs/852865 Title: strrchr() functions information leak To manage

[Bug 862129] Re: samba postrm depends on packages not guaranteed to be configured

2011-10-12 Thread Steve Langasek
** Changed in: samba (Ubuntu) Milestone: ubuntu-11.10 = oneiric-updates -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to samba in Ubuntu. https://bugs.launchpad.net/bugs/862129 Title: samba postrm depends on packages not

[Bug 873042] [NEW] unable to build against apr -- undefined reference to `apr_initialize'

2011-10-12 Thread Steve Halasz
Public bug reported: I'm trying to compile the following program in oneiric: #include apr.h #include apr_general.h #include apr_pools.h #include apr_file_info.h #include apr_file_io.h #include stdlib.h int main(int argc, char *argv[]) { apr_pool_t *pool; apr_file_t *out;

[Bug 873042] Re: unable to build against apr -- undefined reference to `apr_initialize'

2011-10-12 Thread Steve Halasz
This works fine in natty I meant to say. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to apache2 in Ubuntu. https://bugs.launchpad.net/bugs/873042 Title: unable to build against apr -- undefined reference to `apr_initialize' To

[Bug 823878] Re: bind interfaces only requires a manual change to /etc/init/smbd.conf

2011-10-09 Thread Steve Langasek
What exactly did you set the start line to? It currently is set to 'start on (local-filesystems and net-device-up IFACE!=lo)'. If you drop the 'local-filesystems' part, of course there will be problems with the job starting before the filesystem is mounted. as described here:

[Bug 836849] Re: Samba starts before static IPs set in network manager

2011-10-09 Thread Steve Langasek
** This bug is no longer a duplicate of bug 823878 bind interfaces only requires a manual change to /etc/init/smbd.conf ** This bug has been marked a duplicate of bug 82387 LiveCD fails to launch on HP NX9420 if connected to network ** This bug is no longer a duplicate of bug 82387

[Bug 823878] Re: bind interfaces only requires a manual change to /etc/init/smbd.conf

2011-10-09 Thread Steve Langasek
What version of the samba package do you have installed? Your bug report says you're running lucid, but the lucid version of the nmbd, upstart job already includes code to handle creation of the /var/run/samba directory. -- You received this bug notification because you are a member of Ubuntu

[Bug 836849] Re: Samba starts before static IPs set in network manager, even when only using 'interfaces' and not 'bind interfaces only'

2011-10-09 Thread Steve Langasek
** Summary changed: - Samba starts before static IPs set in network manager + Samba starts before static IPs set in network manager, even when only using 'interfaces' and not 'bind interfaces only' -- You received this bug notification because you are a member of Ubuntu Server Team, which is

[Bug 823878] Re: bind interfaces only requires a manual change to /etc/init/smbd.conf

2011-10-09 Thread Steve Langasek
And do you have the samba-common-bin package installed? If not, you're seeing bug #572410 which was fixed in maverick. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to samba in Ubuntu. https://bugs.launchpad.net/bugs/823878 Title:

[Bug 529714] Re: rhythmbox crashed with SIGSEGV in _nss_wins_gethostbyname_r()

2011-10-07 Thread Steve Langasek
** Changed in: samba (Ubuntu Precise) Status: New = Invalid -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to samba in Ubuntu. https://bugs.launchpad.net/bugs/529714 Title: rhythmbox crashed with SIGSEGV in

[Bug 540747] Re: Apache Web DAV incorrect permissions

2011-10-04 Thread Steve Magoun
** Also affects: oem-priority Importance: Undecided Status: New ** Also affects: oem-priority/lucid Importance: Undecided Status: New ** Changed in: oem-priority/lucid Importance: Undecided = Medium ** Changed in: oem-priority Importance: Undecided = Medium -- You

[Bug 529714] Re: rhythmbox crashed with SIGSEGV in _nss_wins_gethostbyname_r()

2011-09-30 Thread Steve Langasek
Daviey, did you read the comments AFTER comment #64, which explain why I reopened this bug? ** Changed in: samba (Ubuntu Oneiric) Status: Fix Released = Triaged ** Changed in: samba (Ubuntu Oneiric) Assignee: (unassigned) = Chuck Short (zulcss) -- You received this bug notification

[Bug 804211] Re: package foo2zjs 20110210dfsg-1ubuntu2.1 failed to install/upgrade: problemas de dependencias - se deja sin configurar

2011-09-29 Thread Steve Langasek
Insufficient information here to diagnose. The attached log only shows the attempt to configure the samba and cups packages, it doesn't show their earlier configuration. davidrsm, do you have older dpkg logs, from before this failure? Do you recall having manually started samba and cups during

[Bug 804211] Re: package foo2zjs 20110210dfsg-1ubuntu2.1 failed to install/upgrade: problemas de dependencias - se deja sin configurar

2011-09-29 Thread Steve Langasek
Note that /lib/init/upstart-job in natty and above correctly implements the policy requirement to return *success* if the job is already running. What version of upstart is installed here? What do 'status cups' and 'status smbd' return? ** Changed in: foo2zjs (Ubuntu) Status: New =

[Bug 811610] Re: package mysql-server-5.1 5.1.57-3.1ubuntu1 failed to install/upgrade: status: Unable to connect to Upstart: Failed to connect to socket /com/ubuntu/upstart: Connection refused

2011-09-29 Thread Steve Langasek
*** This bug is a duplicate of bug 771834 *** https://bugs.launchpad.net/bugs/771834 ** This bug is no longer a duplicate of bug 811609 package cups 1.4.7-1ubuntu1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1 ** This bug has been

[Bug 529714] Re: rhythmbox crashed with SIGSEGV in _nss_wins_gethostbyname_r()

2011-09-29 Thread Steve Langasek
** Changed in: eglibc (Ubuntu Oneiric) Status: Confirmed = Won't Fix ** Changed in: eglibc (Ubuntu Natty) Status: Confirmed = Won't Fix -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to samba in Ubuntu.

[Bug 529714] Re: rhythmbox crashed with SIGSEGV in _nss_wins_gethostbyname_r()

2011-09-28 Thread Steve Langasek
** Also affects: banshee (Ubuntu Oneiric) Importance: Undecided Status: New ** Also affects: eglibc (Ubuntu Oneiric) Importance: Undecided Assignee: Canonical Foundations Team (canonical-foundations) Status: Confirmed ** Also affects: samba (Ubuntu Oneiric)

[Bug 529714] Re: rhythmbox crashed with SIGSEGV in _nss_wins_gethostbyname_r()

2011-09-28 Thread Steve Langasek
** Changed in: samba (Ubuntu Oneiric) Milestone: None = oneiric-updates -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to samba in Ubuntu. https://bugs.launchpad.net/bugs/529714 Title: rhythmbox crashed with SIGSEGV in

[Bug 529714] Re: rhythmbox crashed with SIGSEGV in _nss_wins_gethostbyname_r()

2011-09-26 Thread Steve Langasek
Confirmed, the debug_level symbol is back in winbind 2:3.5.9~dfsg- 1ubuntu1 and later. The rationale for dropping it was: - debian/patches/fix-debuglevel-name-conflict.patch: Fixed upstream. Chuck, how did you determine that this has been fixed upstream? The contents of the patch are

[Bug 852868] Re: php5 var_export() information leak

2011-09-26 Thread Steve Beattie
Thanks for reporting this issue; however, it was already addressed in USN 989-1: http://www.ubuntu.com/usn/usn-989-1/. ** Changed in: php5 (Ubuntu) Status: Confirmed = Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed

[Bug 852910] Re: PHP Magic Quotes Fails to Protect mysqli_fetch_assoc

2011-09-26 Thread Steve Beattie
Thanks for teporting this issue. PHP in Ubuntu uses libmysqlclient, not mysqlnd, and thus was not affected by this vulnerability. ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2010-4700 ** Changed in: php5 (Ubuntu) Status: Confirmed = Invalid -- You received this bug

[Bug 852885] Re: PHP rfc1867_post_handler File Path Injection Vulnerability

2011-09-26 Thread Steve Beattie
*** This bug is a duplicate of bug 813115 *** https://bugs.launchpad.net/bugs/813115 Thanks for reporting this issue. It had already been reported as bug 813115, which is in progress and which I'm marking this a duplicate of. Please address all further comments around this vulnerability

[Bug 813115] Re: CVE-2011-2202

2011-09-19 Thread Steve Beattie
Angel, Thanks, these debdiffs look good, I'll incorporate them as there are other open CVEs for php5 that need to be addressed (see http://people.canonical.com/~ubuntu-security/cve/pkg/php5.html ). Assigning to myself. ** Changed in: php5 (Ubuntu Hardy) Assignee: (unassigned) = Steve

[Bug 853255] Re: FFe: Please provide dnsmasq-utils from dnsmasq package

2011-09-19 Thread Steve Langasek
Makes sense to me. FFe acked. ** Changed in: dnsmasq (Ubuntu Oneiric) Status: New = Confirmed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dnsmasq in Ubuntu. https://bugs.launchpad.net/bugs/853255 Title: FFe: Please

[Bug 853255] Re: FFe: Merge dnsmasq 2.58-3 (main) from Debian unstable (main)

2011-09-18 Thread Steve Langasek
Given that there's going to be a delta for this package anyway, does it still make sense to update instead of cherry-picking the one fix you need? Mostly bugfixes isn't entirely bugfixes, and it doesn't seem there's been much analysis of the risk from the non-bugfix bits. -- You received this

[Bug 839569] Re: Apache2 is still Range header DoS vulnerable if gzip compression is enabled

2011-09-08 Thread Steve Beattie
Paweł and Upen, thanks for following up. Based on your comments, I'm going to close this bug report; please re-open it if you find any evidence that suggests the fix for CVE-2011-3192 is incomplete. Stefan, thanks for chiming in. ** CVE added: http://www.cve.mitre.org/cgi-

[Bug 839569] Re: Apache2 is still Range header DoS vulnerable if gzip compression is enabled

2011-09-07 Thread Steve Beattie
Paweł, Can you confirm that sending a request with an overlapping byte range e.g.: HEAD / HTTP/1.1 Host: localhost Range:bytes=1-15,10-35,8-9,14-22,0-5,23- Accept-Encoding: gzip Connection: close returns 200 OK? Perhaps you could report what modules you have loaded? apache2ctl -t -D

[Bug 837991] Re: Update apache2 to 2.2.19-2 to fix CVE-2011-3192

2011-09-06 Thread Steve Beattie
Attached is a debdiff for the merge of apache 2.2.20-1 (I was unable to do this via bzr due to bug 842144). I've verified that the package builds on i386 and amd64 and ran the lp:qa-regression-testing tests against that package, and confirmed that no regressions occur. ** Description changed:

[Bug 837991] Re: Please merge apache2 2.2.20-1 to fix CVE-2011-3192+regressions

2011-09-06 Thread Steve Beattie
And here is the debdiff of 2.2.20-1ubuntu1 against 2.2.20-1, to show just the ubuntu changes to the package. ** Patch added: apache2-2.2.20-1_2.2.20-1ubuntu1.diff https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/837991/+attachment/2362703/+files/apache2-2.2.20-1_2.2.20-1ubuntu1.diff **

[Bug 462169] Re: nmbd dies on startup when network interfaces are not up yet

2011-09-02 Thread Steve Langasek
. * Remove /etc/network/if-up.d/samba on upgrade, superseded by the above. -- Steve Langasek steve.langa...@ubuntu.com Thu, 18 Feb 2010 12:51:45 + I already tried to remove this ifupdown hook once before. It should be entirely irrelevant given the current nmbd start condition, and if it's

[Bug 836849] Re: Samba starts before static IPs set in network manager

2011-09-02 Thread Steve Langasek
** This bug is no longer a duplicate of bug 462169 nmbd dies on startup when network interfaces are not up yet -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to samba in Ubuntu. https://bugs.launchpad.net/bugs/836849 Title: Samba

[Bug 838968] Re: static-network-up event does not wait for interfaces to have an address

2011-09-02 Thread Steve Langasek
-dhcp (Ubuntu) Assignee: (unassigned) = Steve Langasek (vorlon) ** Changed in: isc-dhcp (Ubuntu) Milestone: None = ubuntu-11.10-beta-2 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to cloud-init in Ubuntu. https

[Bug 836849] Re: Samba starts before static IPs set in network manager

2011-09-02 Thread Steve Langasek
Bug #462169 is about nmbd startup, not smbd startup. Please attach the /etc/smb.conf and /var/log/samba/log.smbd from this system, so we can see exactly what's happening on your system. By default, smbd should start up without error before the interfaces are available, and attach to them when

[Bug 835625] Re: package libsasl2-2 2.1.24~rc1.dfsg1+cvs2011-05-23-4ubuntu2 failed to install/upgrade: libsasl2-2:i386 2.1.24~rc1.dfsg1+cvs2011-05-23-4ubuntu2 (Multi-Arch

2011-09-01 Thread Steve Langasek
This is an apt ordering bug. The amd64 version of libsasl2-2 and libsasl2-modules must be unpacked first before trying to unpack the i386 version. From the attachments to your bug report, it looks like this issue was encountered because you have flashplugin-installer on your system, which gets

[Bug 830129] Re: package samba 2:3.5.8~dfsg-1ubuntu2.3 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

2011-08-23 Thread Steve Langasek
This failure usually points to a broken smb.conf. Please post the output of the following command: testparm -s --parameter-name='disable netbios' ** Changed in: samba (Ubuntu) Status: New = Incomplete -- You received this bug notification because you are a member of Ubuntu Server Team,

[Bug 825139] Re: package samba 2:3.5.8~dfsg-1ubuntu2.3 failed to install/upgrade: η υποδιεργασία installed post-installation script επέστρεψε κατάσταση λάθους 1

2011-08-23 Thread Steve Langasek
Please post the output of the following command: testparm -s --parameter-name='disable netbios' ** Changed in: samba (Ubuntu) Status: New = Incomplete -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to samba in Ubuntu.

[Bug 828237] Re: slapd forks and exits before it is listening, creating a race between listening and any dependent services

2011-08-17 Thread Steve Langasek
In fact, an earlier broken version of the patch was first introduced in Debian in 2.4.23-3; so this is fixed in natty and above. ** Changed in: openldap (Ubuntu) Status: Confirmed = Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which

[Bug 828237] Re: slapd forks and exits before it is listening, creating a race between listening and any dependent services

2011-08-17 Thread Steve Langasek
Clint, Which version of openldap are you looking at? In 2.4.25-1 and above, there is a service-operational-before-detach patch which should guarantee that the daemon is listening before detaching. ** Bug watch added: Debian Bug tracker #589915

[Bug 826601] [NEW] FFe: multiarch dependencies of libcurl, needed for proper functioning of flashplugin-installer

2011-08-15 Thread Steve Langasek
Public bug reported: Only upon removing ia32-libs from my system have I discovered that flashplugin-nonfree does not work unless a 32-libt libcurl is available that it can dlopen (bug #780573). libcurl itself is multiarch-ready, but three of its dependencies are not: librtmp0, libldap-2.4-2, and

[Bug 826601] Re: FFe: multiarch dependencies of libcurl, needed for proper functioning of flashplugin-installer

2011-08-15 Thread Steve Langasek
I've uploaded a multiarch-converted openldap to Debian unstable this evening. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to openldap in Ubuntu. https://bugs.launchpad.net/bugs/826601 Title: FFe: multiarch dependencies of libcurl,

[Bug 826601] Re: FFe: multiarch dependencies of libcurl, needed for proper functioning of flashplugin-installer

2011-08-15 Thread Steve Langasek
** Also affects: cyrus-sasl2 (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to cyrus-sasl2 in Ubuntu. https://bugs.launchpad.net/bugs/826601 Title: FFe: multiarch dependencies of

[Bug 826601] Re: FFe: multiarch dependencies of libcurl, needed for proper functioning of flashplugin-installer

2011-08-15 Thread Steve Langasek
I'm very sorry to say that there is one more library needed for libcurl multiarch installability, which apt hid from me until the other libraries had all been fixed. libldap-2.4-2 depends on libsasl2-2, so cyrus-sasl2 would also require a multiarch conversion to get the benefit here. cyrus-sasl2

[Bug 826601] Re: FFe: multiarch dependencies of libcurl, needed for proper functioning of flashplugin-installer

2011-08-15 Thread Steve Langasek
No build regressions found as a result of cyrus-sasl2 conversion except for the expected php5 (and php-sasl). Three packages failed to build because of the qt multiarch conversion (expected, in progress); two (qemu-kvm, qemu-linaro) ftbfs because of the pulseaudio multiarch conversion;

[Bug 826601] Re: FFe: multiarch dependencies of libcurl, needed for proper functioning of flashplugin-installer

2011-08-15 Thread Steve Langasek
** Changed in: php5 (Ubuntu) Status: New = Triaged ** Changed in: php5 (Ubuntu) Importance: Undecided = High -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to cyrus-sasl2 in Ubuntu. https://bugs.launchpad.net/bugs/826601

[Bug 826601] Re: FFe: multiarch dependencies of libcurl, needed for proper functioning of flashplugin-installer

2011-08-15 Thread Steve Langasek
** Changed in: php5 (Ubuntu) Assignee: (unassigned) = Steve Langasek (vorlon) ** Also affects: php-sasl (Ubuntu) Importance: Undecided Status: New ** Changed in: php-sasl (Ubuntu) Status: New = Triaged ** Changed in: php-sasl (Ubuntu) Importance: Undecided = High

[Bug 211631] Re: Network is brought down before network filesystems are unmounted (CIFS timeout at shutdown)

2011-08-10 Thread Steve Sutton
@jonbonjovi, @c0l2e did say :) Put it in /etc/init/dbus.conf. You'll probably find an existing pre- start/end script section in it (I did in mine). Just paste all the lines (including the pre-stop and end script lines) into that file, after the existing end script, or before the line that

[Bug 820023] Re: package samba 2:3.5.8~dfsg-1ubuntu2.2 subprocess installed post-installation script returned error exit status 1

2011-08-09 Thread Steve Langasek
Thanks. This output indicates that you have a broken smb.conf: ERROR: both 'wins support = true' and 'wins server = server list' cannot be set in the smb.conf file. nmbd will abort with this setting. So, you need to remove one or the other of those settings (according to what way you intend

[Bug 604283] Re: network servers do not listen on 127.0.1.1

2011-08-09 Thread Steve Langasek
I don't believe there's any bug in ifupdown here. As mentioned in the upstream Debian bug, you do not need an explicit 127.0.1.1 network interface to receive requests on that address, *as long as* you are listening on the any address. This is indeed what openssh is doing by default; being able

[Bug 820023] Re: package samba 2:3.5.8~dfsg-1ubuntu2.2 subprocess installed post-installation script returned error exit status 1

2011-08-08 Thread Steve Langasek
Hi Claudio, ccl@ccl-HP-Pavilion-dv6-Notebook-PC:~$ testparm -s --parameter-name='disable netbios' 2/dev/null No ccl@ccl-HP-Pavilion-dv6-Notebook-PC:~$ echo $? 1 Please run the testparm command *without* the 2/dev/null redirection. I.e., run: $ testparm -s --parameter-name='disable netbios'

[Bug 820054] Re: package samba 2:3.5.8~dfsg-1ubuntu2.3 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

2011-08-08 Thread Steve Langasek
Instead of directing error output to /dev/null, please run the testparm command like so: $ testparm -s --parameter-name='disable netbios' so that we actually see any errors from running the command :) -- You received this bug notification because you are a member of Ubuntu Server Team, which

[Bug 820540] Re: package samba-common 2:3.4.7~dfsg-1ubuntu3.7 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

2011-08-08 Thread Steve Langasek
** Bug watch added: Debian Bug tracker #616075 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=616075 ** Also affects: samba (Debian) via http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=616075 Importance: Unknown Status: Unknown -- You received this bug notification because

[Bug 727026] Re: apt-get upgrade fails on samba-common if smb.conf is missing

2011-08-08 Thread Steve Langasek
known upstream bug. no further information needed. ** Changed in: samba (Ubuntu) Importance: Undecided = Low ** Changed in: samba (Ubuntu) Status: Incomplete = Triaged -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to samba

[Bug 820540] Re: nmbd fails to start if smb.conf is missing due to testparm failure

2011-08-08 Thread Steve Langasek
** Summary changed: - package samba-common 2:3.4.7~dfsg-1ubuntu3.7 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1 + nmbd fails to start if smb.conf is missing due to testparm failure ** Changed in: samba (Ubuntu) Status: Incomplete =

[Bug 769354] Re: elinks accepts self-signed ssl certificates without warning

2011-08-04 Thread Steve Beattie
** This bug has been flagged as a security vulnerability -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to elinks in Ubuntu. https://bugs.launchpad.net/bugs/769354 Title: elinks accepts self-signed ssl certificates without warning To

[Bug 212370] Re: Have to modprobe coretemp manually in order to get CPU temperatures on MacBook Pro

2011-07-11 Thread Steve Langasek
If we think this should happen by default, lm-sensors is the wrong place to fix this; lm-sensors is not installed by default (it's in universe), whereas the coretemp module appears to be part of the main kernel. If there's no way to express the hardware as a kernel module alias, then perhaps it

[Bug 781985] Re: Format string bugs in mysqlhotcopy

2011-07-08 Thread Steve Beattie
Note that it's not a security issue in this context as perl blocks format string issues; Modification of a read-only value attempted at /usr/bin/mysqlhotcopy line 459 is perl blocking the issue. ** Changed in: mysql-5.1 (Ubuntu) Status: Incomplete = Confirmed -- You received this bug

[Bug 781982] Re: Format string bug in mysqldumpslow

2011-07-08 Thread Steve Beattie
** Changed in: mysql-5.1 (Ubuntu) Status: Incomplete = Confirmed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to mysql-5.1 in Ubuntu. https://bugs.launchpad.net/bugs/781982 Title: Format string bug in mysqldumpslow To manage

[Bug 798855] Re: package samba 2:3.5.8~dfsg-1ubuntu2.2 failed to install/upgrade: problemas de dependencias - se deja sin configurar

2011-06-17 Thread Steve Beattie
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Bug 797161] Re: package amavisd-new-postfix (not installed) failed to install/upgrade: underproces installerede post-installation-script returnerede afslutningsstatus 1

2011-06-15 Thread Steve Beattie
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a regular (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross

[Bug 694059] Re: qemu fatal cp15 message report and image creation block

2011-06-14 Thread Steve Langasek
I still get this when running 0.13.91 on lucid from the Nova Core PPA https://launchpad.net/~nova-core/+archive/trunk?field.series_filter=lucid Well, please report the issue to the maintainers of that ppa. This is a bug report about the Ubuntu package, where the issue has been fixed by the

[Blueprint server-o-ensemble-conference-talks] Ensemble Conference Talks

2011-06-10 Thread Steve Langasek
Blueprint changed by Steve Langasek: Whiteboard changed: Work Items: [bcsaller] Cloud Camp - May 26, 2011 in San Francisco, CA, USA {1}: DONE DevOps Day Australia (Taking talk submissions now) - July 22-23rd in Melbourne, Australia{2}: POSTPONED HotCloud (Poster submissions are due

[Bug 604593] Re: pam_unix account returns success on a user with an invalid shadow password.

2011-06-08 Thread Steve Langasek
Thank you for reporting this issue and helping to improve Ubuntu. This is not a bug in pam_unix, which is deliberately configured such that a successful authorization return from either pam_unix *or* another stacked module is sufficient to permit a login. If pam_ldap access checks should always

[Bug 251795] Re: /etc/environment PATH should not have quotes

2011-06-06 Thread Steve Langasek
This behavior has persisted in /etc/environment now for at least 3 years, with only one report of misbehavior as a result. I don't believe it's worth the effort to try to correct this now and risk getting inconsistent behavior on upgraded vs. newly-installed systems, especially as pam_env, which

[Bug 792557] [NEW] dovecot fails to start on oneiric

2011-06-03 Thread Steve Beattie
Public bug reported: Attempting to start dovecot with the default configuration on oneiric fails: $ sudo start dovecot dovecot stop/waiting $ ps auwwx | grep dovecot ubuntu8793 0.0 0.1 4188 876 pts/0S+ 13:17 0:00 grep --color=auto dovecot This is because the

[Bug 792557] Re: dovecot fails to start on oneiric

2011-06-03 Thread Steve Beattie
-- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to dovecot in Ubuntu. https://bugs.launchpad.net/bugs/792557 Title: dovecot fails to start on oneiric -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify

[Bug 773891] Re: package libaio-dev (not installed) failed to install/upgrade: trying to overwrite '/usr/include/libaio.h', which is also in package libaio:i386 0.3.104-1

2011-06-01 Thread Steve Langasek
This isn't actually a multiarch problem. Following the directions from the referenced site results in installation of an i386 'libaio' package which doesn't even match the official {libaio1,libaio-dev} packages in the Ubuntu archive, let alone supporting multiarch. So this is an ordinary package

[Bug 780820] Re: kadmin: IPv6 support binds IPv4 socket leading to EAFNOSUPPORT.

2011-05-31 Thread Steve Langasek
1.9 has been merged into oneiric. ** Changed in: krb5 (Ubuntu) Status: Confirmed = Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/780820 Title: kadmin: IPv6

<    3   4   5   6   7   8   9   10   11   12   >