Re: [Bug 65125] Re: highlighted menu name flickers when clicked

2007-08-06 Thread Amnon Aaronsohn
On 8/6/07, Sebastien Bacher <[EMAIL PROTECTED]> wrote:
> Do you still get the bug?

Yes, but only with the Glider theme. Note that this is a different
machine than the one the original bug report is about and I didn't
modify any theme.

-- 
highlighted menu name flickers when clicked
https://bugs.launchpad.net/bugs/65125
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


Re: [Bug 65125] Re: highlighted menu name flickers when clicked

2007-08-26 Thread Amnon Aaronsohn
I was able to reproduce the problem using the latest testing live CD.
The only actions I did after the desktop appeared were:

(1) change the resolution (shouldn't be relevant)
(2) changed the theme to "glider"
(3) moved the mouse pointer over a desktop menu item (System). The
item gets highlighted
(4) clicked the item. The item gets un-highlighted for a second and
then re-highlighted.

(This doesn't happen when the System menu is already open.)

-- 
highlighted menu name flickers when clicked
https://bugs.launchpad.net/bugs/65125
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 106245] [feisty] web vulnerability

2007-04-13 Thread Amnon Aaronsohn
Public bug reported:

Binary package hint: cupsys

I just found out cups is set up to listen to http requests on port 631.
Some commands require authentication but others don't, which I guess can
be exploited. Take for example this html code:



Testing.
http://localhost:631/printers/DeskJet-XXX?op=print-test-page";>



If you have a printer with the given model, browsing to this page will
make cups print a test page.

Of course, this code can be extended to include a list of multiple
models, other operations, etc. Even operations which need authentication
can be exploited if the username and password are cached.

** Affects: cupsys (Ubuntu)
 Importance: Undecided
 Status: Unconfirmed

-- 
[feisty] web vulnerability 
https://bugs.launchpad.net/bugs/106245
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
[EMAIL PROTECTED]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


Re: [Bug 106245] Re: [feisty] web vulnerability

2007-04-13 Thread Amnon Aaronsohn
On 4/13/07, Brian Murray <[EMAIL PROTECTED]> wrote:
> With which version of cupsys and Ubuntu did you notice this?

ubuntu feisty (as the subject line says...), cupsys version
1.2.8-0ubuntu8.

Amnon

-- 
[feisty] web vulnerability 
https://bugs.launchpad.net/bugs/106245
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
[EMAIL PROTECTED]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


Re: [Bug 106245] Re: [feisty] web vulnerability

2007-04-16 Thread Amnon Aaronsohn
On 4/16/07, Martin Pitt <[EMAIL PROTECTED]> wrote:
> Please elaborate about this. By default, cupsd only listens on
> localhost. Local users can do printing operations much easier.

cupsd listens on localhost but remote web pages can make the browser
access it, , as in the example above. Note that the remote web server
doesn't contact cupsd, the locally running web browser does, without
user intervention.

Even if you enable cupsd to listen on all ports, you probably don't
want remote web pages to execute commands which require
authentication, but AFAIK this attack can also work for this commands
since the browser will send the credentials if they're cached.

This can be considered a simple case of CSRF
(http://en.wikipedia.org/wiki/Csrf).

BTW, I'm not sure if the URL always contains the printer's model (as
in my configuration) or some other simple name. To reproduce the bug
you may have to browse first to localhost:631 and copy the URL for a
command into the html code. (The remote attacker doesn't have to do
this if he can guess the URL).

-- 
[feisty] web vulnerability 
https://bugs.launchpad.net/bugs/106245
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 85529] apport could look harder for the package

2007-02-16 Thread Amnon Aaronsohn
Public bug reported:

Binary package hint: apport

For a long time now, every time I booted my computer apport's bomb icon
appeared in the notification area. When I clicked it it displayed an error 
message saying something like: "This problem report does not apply to a 
packaged program."

The first problem with this is that the message doesn't tell to which program 
it does
apply, so it's hard to find what caused it. It took me some time before I found 
out that there was a log in /var/crash.

The second problem is that the message was incorrect -- the report did
apply to a packaged program. It was caused by a python script in
/etc/init.d that belongs to a package. Apparently apport didn't realize
it because the script was run through a symlink in /etc/rcS.d that
points to the script in /etc/init.d. The symlink itself isn't registered
as belonging to the package. So this can be fixed by checking if the
ExecutablePath in the problem report is a symlink and if so, checking
the link's target instead (or in addition).

** Affects: apport (Ubuntu)
 Importance: Undecided
 Status: Unconfirmed

-- 
apport could look harder for the package
https://launchpad.net/bugs/85529

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


Re: [Bug 55325] Re: email not displayed until attachments are downloaded

2007-02-18 Thread Amnon Aaronsohn
On 2/18/07, John Vivirito <[EMAIL PROTECTED]> wrote:
> Is this still an issue for you?  We are trying to trying sort out the
> older Mozilla issues and would like to know if this still happens.

I don't use IMAP anymore so this is not an issue for me.

-- 
email not displayed until attachments are downloaded
https://launchpad.net/bugs/55325

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 65574] Re: [edgy] middle clicking doesn't close menu

2006-12-02 Thread Amnon Aaronsohn
No response, so I'll report this bug upstream.

-- 
[edgy] middle clicking doesn't close menu
https://launchpad.net/bugs/65574

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 76217] Re: can't alt-tab out of new modal dialogs

2007-01-03 Thread Amnon Aaronsohn
In the dialog when I press alt-tab, as long as alt is pressed, the
border of the current application (firefox in the example above)  is
marked. When I release the alt key the focus returns to the dialog. The
result is that pressing alt-tab does nothing.

-- 
can't alt-tab out of new modal dialogs
https://launchpad.net/bugs/76217

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 65125] Re: highlighted menu name flickers when clicked

2007-01-03 Thread Amnon Aaronsohn
Edgy. I'm using an unmodified version.

-- 
highlighted menu name flickers when clicked
https://launchpad.net/bugs/65125

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 77990] [feisty] cdrom double entries

2007-01-04 Thread Amnon Aaronsohn
Public bug reported:

Binary package hint: gnome-mount

I have a CD-ROM and a CD-RW drive in my computer. Ever since I upgraded
to feisty, the "Computer" place in Nautilus shows 4 entries: "CD-ROM 1",
"CD-ROM 2", "CD-ROM Drive", and "CD-RW Drive". Clearly, at most 2 should
be displayed (and even these are usually superfluous, since they're
displayed even when there's no disc in the drive).

When I double-click one of the "CD-ROM n" drives, the following error
message is displayed: "Unable to mount the selected volume. mount:
special device /dev/hdd does not exist", which seem to suggest that this
is a gnome-mount problem.

** Affects: gnome-mount (Ubuntu)
 Importance: Undecided
 Status: Unconfirmed

-- 
[feisty] cdrom double entries
https://launchpad.net/bugs/77990

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 25781] Re: Choppy mouse under high load

2007-01-04 Thread Amnon Aaronsohn
In Feisty this is even choppier.

-- 
Choppy mouse under high load
https://launchpad.net/bugs/25781

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 67409] Re: progress bar flickers

2007-01-05 Thread Amnon Aaronsohn
The attached patch stops the flickering when the progress bar is
updated, by drawing only the visible part of the background.


** Attachment added: "progress bar patch"
   http://librarian.launchpad.net/5601008/usplash-theme-ubuntu.patch

-- 
progress bar flickers
https://launchpad.net/bugs/67409

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


Re: [Bug 77990] Re: [feisty] cdrom double entries

2007-01-08 Thread Amnon Aaronsohn
Here's my /etc/fstab. The cdrom and floppy entries were generated
automatically during the installation of a previous version of ubuntu
-- should they be removed?

# /etc/fstab: static file system information.
#
#
proc/proc   procdefaults0   0
# /dev/hda2 -- converted during upgrade to edgy
UUID=3bb6593e-bf9b-4a60-bd1f-6ab786e2fb6a / reiserfs notail 0 1
# /dev/hda1 -- converted during upgrade to edgy
UUID=02600E29600E244F /media/hda1 ntfs defaults,ro,nls=utf8,umask=0222 0 0
# /dev/hda3 -- converted during upgrade to edgy
UUID=d490d707-c1d4-44db-b8b0-903a90e16dd2 none swap sw 0 0
/dev/hdc/media/cdrom0   udf,iso9660 user,noauto 0   0
/dev/hdd/media/cdrom1   udf,iso9660 user,noauto 0   0
/dev/fd0/media/floppy0  autorw,user,noauto  0   0

-- 
[feisty] cdrom double entries
https://launchpad.net/bugs/77990

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 77990] Re: [feisty] cdrom double entries

2007-01-11 Thread Amnon Aaronsohn
lshal output is attached.

In any case the problem was solved after I removed the cdrom and floppy
entries from /etc/fstab. However this might be a problem for people who
need devices to appear in /etc/fstab.


** Attachment added: "lshal output"
   http://librarian.launchpad.net/5692041/lshal

-- 
[feisty] cdrom double entries
https://launchpad.net/bugs/77990

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 65638] Re: double quotes don't match left/right quotes in find

2007-01-18 Thread Amnon Aaronsohn
I just tried it on Firefox 2.0.0.1 in Feisty, and doing exactly the same
thing doesn't find the word (it does find it in this page, since it uses
regular quotes, but not in the link above).

-- 
double quotes don't match left/right quotes in find
https://launchpad.net/bugs/65638

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 65638] Re: double quotes don't match left/right quotes in find

2007-01-18 Thread Amnon Aaronsohn
Here's an “example”.

-- 
double quotes don't match left/right quotes in find
https://launchpad.net/bugs/65638

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Re: [Bug 65574] Re: [edgy] middle clicking doesn't close menu

2007-01-30 Thread Amnon Aaronsohn
I reported it upstream and it was fixed:

http://bugzilla.gnome.org/show_bug.cgi?id=381549

(I should have mentioned this before...)

-- 
[edgy] middle clicking doesn't close menu
https://launchpad.net/bugs/65574

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 83538] file is refreshed automatically when changed on disk

2007-02-06 Thread Amnon Aaronsohn
Public bug reported:

Binary package hint: kdevelop

When a file which is open in kdevelop is changed on disk, kdevelop re-loads it 
automatically
without asking the user. This operation is not undo-able and thus can result in 
data loss.

To recreate the bug:
(1) open a file in kdevelop
(2) save it
(3) change it outside of kdevelop (e.g. "echo test > file")
(4) the buffer in kdevelop is updated automatically

Step (2) is important - - if the buffer in kdevelop isn't save then kdevelop 
doesn't reload the file.
(but it doesn't warn you when saving the file that it changed on the disk, 
which is another bug...)

kdevelop version 3.3.4 using kde 3.5.5

** Affects: kdevelop (Ubuntu)
 Importance: Undecided
 Status: Unconfirmed

-- 
file is refreshed automatically when changed on disk
https://launchpad.net/bugs/83538

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 76217] can't alt-tab out of new modal dialogs

2006-12-17 Thread Amnon Aaronsohn
Public bug reported:

Binary package hint: metacity

I'm using metacity version 2.16.3-0ubuntu2. When an application opens a
modal dialog (e.g. "Open File" in firefox), the dialog is shown and
receives the focus as expected. However, when you press alt-tab once to
switch to another open application, nothing happens -- the focus stays
at the dialog. After you "break out" of the window (by pressing alt-tab-
tab or by using the mouse) the application works as usual.

Steps to reproduce:

(1) open firefox and another application (say gnome-terminal).
(2) notice that you can move between the applications by pressing alt-tab
(3) press ctrl-o to open the "open file" dialog in firefox
(4) press alt-tab and notice that the focus stays at the "open file" dialog 
instead of moving to the terminal.
(5) hold alt and press tab twice to switch to the terminal
(6) return to the still-open dialog and notice that now you can switch to the
terminal by pressing alt-tab.

** Affects: metacity (Ubuntu)
 Importance: Undecided
 Status: Unconfirmed

-- 
can't alt-tab out of new modal dialogs
https://launchpad.net/bugs/76217

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 76217] Re: can't alt-tab out of new modal dialogs

2006-12-21 Thread Amnon Aaronsohn
I don't understand your question. However, note that firefox was only an
example. Same thing happens in other places, such as "save as" dialog in
gedit. And the problem is only with modal dialogs (non-modal dialogs
have another problem with alt-tab...)

-- 
can't alt-tab out of new modal dialogs
https://launchpad.net/bugs/76217

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs