[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2023-07-25 Thread Marc Deslauriers
Kinetic has now reached end-of-life. There is nothing else to sponsor in
this bug for now.

I am unsubscribing ubuntu-security-sponsors. If a new debdiff is
attached for sponsoring, please re-subscribe the team. Thanks!

** Changed in: nemo (Ubuntu Kinetic)
   Status: In Progress => Won't Fix

** Changed in: caja (Ubuntu Kinetic)
   Status: New => Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Cinnamon Developers, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions


-- 
universe-bugs mailing list
universe-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/universe-bugs


[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2023-06-27 Thread Łukasz Zemczak
As I don't see anything actionable right now, and there's been no
movement since my last ping, I'll remove the ubuntu-sponsors
subscription. Please re-add that in case any additional sponsoring is
needed.

-- 
You received this bug notification because you are a member of Ubuntu
Cinnamon Developers, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions


-- 
universe-bugs mailing list
universe-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/universe-bugs


[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2023-06-06 Thread Łukasz Zemczak
Is there anything that still needs to be done here? Are we waiting for
backports to earlier series?

-- 
You received this bug notification because you are a member of Ubuntu
Cinnamon Developers, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions


-- 
universe-bugs mailing list
universe-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/universe-bugs


[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2023-05-31 Thread Marc Deslauriers
Oh, that would be great, I could release them all at once. Thanks!

-- 
You received this bug notification because you are a member of Ubuntu
Cinnamon Developers, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions


-- 
universe-bugs mailing list
universe-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/universe-bugs


[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2023-02-17 Thread Joshua Peisach
Yep! (Hostname says "2210Test". I meant to say Kinetic but it doesn't
happen on Lunar. Want me to try backporting to other releases?

-- 
You received this bug notification because you are a member of Ubuntu
Cinnamon Developers, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions


-- 
universe-bugs mailing list
universe-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/universe-bugs


[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2023-02-17 Thread Marc Deslauriers
The update is for kinetic, did you test it on kinetic?

-- 
You received this bug notification because you are a member of Ubuntu
Cinnamon Developers, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions


-- 
universe-bugs mailing list
universe-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/universe-bugs


[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2023-02-11 Thread Joshua Peisach
No reproduction on Lunar for Nemo. Syslog does not show any errors

** Attachment added: "Screenshot from 2023-02-11 18-09-13.png"
   
https://bugs.launchpad.net/ubuntu/+source/nemo/+bug/1998060/+attachment/5646439/+files/Screenshot%20from%202023-02-11%2018-09-13.png

-- 
You received this bug notification because you are a member of Ubuntu
Cinnamon Developers, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions


-- 
universe-bugs mailing list
universe-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/universe-bugs


[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2023-02-09 Thread Marc Deslauriers
ACK on the debdiff in comment #8. I have slightly adjusted it to add the
bug number to the changelog and to fix the urls in the patch. I have
uploaded it to the security team PPA here:

https://launchpad.net/~ubuntu-security-proposed/+archive/ubuntu/ppa

Please test it to make sure it works properly, and comment back in this
bug, at which point I will release it as a security update. Thanks!

-- 
You received this bug notification because you are a member of Ubuntu
Cinnamon Developers, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions


-- 
universe-bugs mailing list
universe-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/universe-bugs


[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2023-01-06 Thread Ubuntu Foundations Team Bug Bot
The attachment "nemo_5.4.3-2ubuntu0.1.debdiff" seems to be a debdiff.
The ubuntu-sponsors team has been subscribed to the bug report so that
they can review and hopefully sponsor the debdiff.  If the attachment
isn't a patch, please remove the "patch" flag from the attachment,
remove the "patch" tag, and if you are member of the ~ubuntu-sponsors,
unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by
~brian-murray, for any issue please contact him.]

** Tags added: patch

-- 
You received this bug notification because you are a member of Ubuntu
Cinnamon Developers, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions


-- 
universe-bugs mailing list
universe-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/universe-bugs


[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2023-01-06 Thread Joshua Peisach
Applied the patches, not getting any nasty messages in /var/log/syslog

** Patch added: "nemo_5.4.3-2ubuntu0.1.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/nautilus/+bug/1998060/+attachment/5639800/+files/nemo_5.4.3-2ubuntu0.1.debdiff

** Changed in: nemo (Ubuntu Kinetic)
   Status: New => In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Cinnamon Developers, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions


-- 
universe-bugs mailing list
universe-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/universe-bugs


[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2023-01-05 Thread Joshua Peisach
Fix released for nautilus 1:43.0-1ubuntu2.1

nautilus (1:43.0-1ubuntu2.1) kinetic-security; urgency=medium

  * SECURITY UPDATE: crash via invalid zip file
- debian/patches/CVE-2022-37290.patch: fix crash when copying an
  invalid file in src/nautilus-dbus-manager.c,
  src/nautilus-file-operations.c.
- CVE-2022-37290

 -- Marc Deslauriers   Tue, 03 Jan 2023
12:27:45 -0500

** Changed in: nautilus (Ubuntu Kinetic)
   Status: New => Fix Released

** Changed in: nautilus (Ubuntu Lunar)
   Status: New => Fix Released

** Changed in: nautilus (Ubuntu Jammy)
   Status: New => Fix Released

** Changed in: nautilus (Ubuntu Focal)
   Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Cinnamon Developers, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions


-- 
universe-bugs mailing list
universe-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/universe-bugs


[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2023-01-05 Thread Joshua Peisach
Fix in version 5.6.1, sitting in proposed

** Changed in: nemo (Ubuntu Lunar)
   Status: New => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Cinnamon Developers, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions


-- 
universe-bugs mailing list
universe-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/universe-bugs


[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2022-11-30 Thread Joshua Peisach
taking responsibility for SRU

** Changed in: nemo (Ubuntu Kinetic)
 Assignee: (unassigned) => Joshua Peisach (itzswirlz)

-- 
You received this bug notification because you are a member of Ubuntu
Cinnamon Developers, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions


-- 
universe-bugs mailing list
universe-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/universe-bugs


[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2022-11-30 Thread Joshua Peisach
taking responsibility for SRU

** Changed in: nemo (Ubuntu Jammy)
 Assignee: (unassigned) => Joshua Peisach (itzswirlz)

-- 
You received this bug notification because you are a member of Ubuntu
Cinnamon Developers, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions


-- 
universe-bugs mailing list
universe-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/universe-bugs


[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2022-11-30 Thread Joshua Peisach
taking responsibility for SRU

** Changed in: nemo (Ubuntu Focal)
 Assignee: (unassigned) => Joshua Peisach (itzswirlz)

-- 
You received this bug notification because you are a member of Ubuntu
Cinnamon Developers, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions


-- 
universe-bugs mailing list
universe-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/universe-bugs


[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2022-11-30 Thread Joshua Peisach
Part of Debian Cinnamon Team - assign latest release with fix to me

** Changed in: nemo (Ubuntu Lunar)
 Assignee: (unassigned) => Joshua Peisach (itzswirlz)

-- 
You received this bug notification because you are a member of Ubuntu
Cinnamon Developers, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions


-- 
universe-bugs mailing list
universe-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/universe-bugs


[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2022-11-30 Thread Steve Beattie
** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Cinnamon Developers, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions


-- 
universe-bugs mailing list
universe-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/universe-bugs


[Bug 1998060] Re: CVE-2022-37290: Pasted zip archive/invalid file causes NPD

2022-11-28 Thread fossfreedom
** Also affects: nautilus (Ubuntu Focal)
   Importance: Undecided
   Status: New

** Also affects: nemo (Ubuntu Focal)
   Importance: Undecided
   Status: New

** Also affects: caja (Ubuntu Focal)
   Importance: Undecided
   Status: New

** Also affects: nautilus (Ubuntu Jammy)
   Importance: Undecided
   Status: New

** Also affects: nemo (Ubuntu Jammy)
   Importance: Undecided
   Status: New

** Also affects: caja (Ubuntu Jammy)
   Importance: Undecided
   Status: New

** Also affects: nautilus (Ubuntu Kinetic)
   Importance: Undecided
   Status: New

** Also affects: nemo (Ubuntu Kinetic)
   Importance: Undecided
   Status: New

** Also affects: caja (Ubuntu Kinetic)
   Importance: Undecided
   Status: New

** Also affects: nautilus (Ubuntu Lunar)
   Importance: Undecided
   Status: New

** Also affects: nemo (Ubuntu Lunar)
   Importance: Undecided
   Status: New

** Also affects: caja (Ubuntu Lunar)
   Importance: Undecided
   Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Cinnamon Developers, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1998060

Title:
  CVE-2022-37290: Pasted zip archive/invalid file causes NPD

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/caja/+bug/1998060/+subscriptions


-- 
universe-bugs mailing list
universe-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/universe-bugs