[Edubuntu-bugs] [Bug 885027] Re: calibre bug 885027

2011-11-02 Thread Kovid Goyal
Easily remedied by calling realpath on dev at the start of main() -- You received this bug notification because you are a member of Edubuntu Bugsquad, which is subscribed to calibre in Ubuntu. https://bugs.launchpad.net/bugs/885027 Title: SUID Mount Helper has 5 Major Vulnerabilities To manag

[Edubuntu-bugs] [Bug 885027] Re: SUID Mount Helper has 5 Major Vulnerabilities

2011-11-02 Thread Jason A. Donenfeld
There's still a symlink race condition. If at first the symlink points to /dev/something-legit or /media/something-legit, the symlink can be swapped easily by hooking into inotify's IN_ACCESS and changing what it points to just in time for mount to be called with the s ymlink pointing someplace nau

[Edubuntu-bugs] [Bug 885027] Re: calibre bug 885027

2011-11-02 Thread Kovid Goyal
Ah, realpath() status fixreleased ** Changed in: calibre Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Edubuntu Bugsquad, which is subscribed to calibre in Ubuntu. https://bugs.launchpad.net/bugs/885027 Title: SUID Mount Helper ha

[Edubuntu-bugs] [Bug 885027] Re: SUID Mount Helper has 5 Major Vulnerabilities

2011-11-02 Thread Jason A. Donenfeld
Updated the exploit. ** Attachment added: "exploit PoC 2.1" https://bugs.launchpad.net/calibre/+bug/885027/+attachment/2583746/+files/60calibrerassaultmount.sh ** Changed in: calibre Status: Fix Released => Confirmed -- You received this bug notification because you are a member of E

[Edubuntu-bugs] [Bug 885324] Re: Completely replace lcms1 by lcms2 in Ubuntu

2011-11-02 Thread Till Kamppeter
Adam, on my system there is shotwell installed but no libraw and I really cannot find such a library. Are you sure that there is a libraw? Where is it, or what is its correct name? -- You received this bug notification because you are a member of Edubuntu Bugsquad, which is subscribed to gimp in

[Edubuntu-bugs] [Bug 885027] Re: calibre bug 885027

2011-11-02 Thread Kovid Goyal
Problems with pmount: 1) It does not work out of the box on all distros (it needs configuration) 2) It may not even be installed on some distros, for example, it isn't installed by default on gentoo. 3) It has been deprecated in favor of udisks (which incidentally calibre tries to use before falli

[Edubuntu-bugs] [Bug 885027] Re: SUID Mount Helper has 5 Major Vulnerabilities

2011-11-02 Thread Jason A. Donenfeld
** Attachment added: "exploit PoC 2" https://bugs.launchpad.net/calibre/+bug/885027/+attachment/2583680/+files/60calibrerassaultmount.sh -- You received this bug notification because you are a member of Edubuntu Bugsquad, which is subscribed to calibre in Ubuntu. https://bugs.launchpad.net/bu

[Edubuntu-bugs] [Bug 885324] Re: Completely replace lcms1 by lcms2 in Ubuntu

2011-11-02 Thread Adam Dingle
Shotwell itself does not use lcms; it uses libraw, which depends on lcms1 in Ubuntu. Note that libraw 0.13.8 (present in Oneiric) can build using either lcms1 or lcms2. So to solve this particular dependency I suspect that you only need to update your libraw packaging to build using lcms2. You m

[Edubuntu-bugs] [Bug 885027] Re: SUID Mount Helper has 5 Major Vulnerabilities

2011-11-02 Thread Launchpad Bug Tracker
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: calibre (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Edubuntu Bugsquad, which is subscribed to calibre in Ubuntu. https://bugs.launchpad.net/bugs/885

[Edubuntu-bugs] [Bug 885027] Re: SUID Mount Helper has 5 Major Vulnerabilities

2011-11-02 Thread Luke Faraone
** Also affects: calibre (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Edubuntu Bugsquad, which is subscribed to calibre in Ubuntu. https://bugs.launchpad.net/bugs/885027 Title: SUID Mount Helper has 5 Major Vulnerabiliti

[Edubuntu-bugs] [Bug 874805] Re: For Trains logic game, the answer is incorrect.

2011-11-02 Thread Jordi Mas
Thanks for reporting the issue Karl There is a problem with the wording of the sentence. We are following the problem here: https://bugzilla.gnome.org/show_bug.cgi?id=663259 Thanks, Jordi, ** Bug watch added: GNOME Bug Tracker #663259 https://bugzilla.gnome.org/show_bug.cgi?id=663259 ** C

[Edubuntu-bugs] [Bug 671984] Re: What time is it?

2011-11-02 Thread Redmar
This bug has been fixed in ubuntu for all versions up to oneiric, and the fix has also been submitted to upstream ** Changed in: gbrainy (Ubuntu) Status: New => Fix Committed -- You received this bug notification because you are a member of Edubuntu Bugsquad, which is subscribed to gbrain

[Edubuntu-bugs] [Bug 885324] Re: Completely replace lcms1 by lcms2 in Ubuntu

2011-11-02 Thread Till Kamppeter
cups itself does not use lcms, but the add-on filter pdftoraster does. The upstream author of the filter is informed. ** Changed in: cups (Ubuntu) Importance: Undecided => High ** Changed in: cups (Ubuntu) Status: New => In Progress ** Changed in: cups (Ubuntu) Milestone: None => p

[Edubuntu-bugs] [Bug 885324] Re: Completely replace lcms1 by lcms2 in Ubuntu

2011-11-02 Thread Alex Valavanis
** Changed in: inkscape (Ubuntu) Assignee: (unassigned) => Alex Valavanis (valavanisalex) ** Changed in: inkscape (Ubuntu) Importance: Undecided => Medium ** Changed in: inkscape (Ubuntu) Status: New => In Progress -- You received this bug notification because you are a member of

[Edubuntu-bugs] [Bug 885324] Re: Completely replace lcms1 by lcms2 in Ubuntu

2011-11-02 Thread Till Kamppeter
Packages concerned are both in Main and Universe, nost important are naturally the ones in Main. With them being migrated we can at least demote lcms to Universe. -- You received this bug notification because you are a member of Edubuntu Bugsquad, which is subscribed to gimp in Ubuntu. https://bu

[Edubuntu-bugs] [Bug 885324] Re: Completely replace lcms1 by lcms2 in Ubuntu

2011-11-02 Thread Till Kamppeter
** Also affects: ufraw (Ubuntu) Importance: Undecided Status: New ** Also affects: openjdk-6 (Ubuntu) Importance: Undecided Status: New ** Also affects: digikam (Ubuntu) Importance: Undecided Status: New ** Also affects: dcraw (Ubuntu) Importance: Undecided

[Edubuntu-bugs] [Bug 885324] Re: Completely replace lcms1 by lcms2 in Ubuntu

2011-11-02 Thread Till Kamppeter
** Also affects: poppler (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Edubuntu Bugsquad, which is subscribed to gimp in Ubuntu. https://bugs.launchpad.net/bugs/885324 Title: Completely replace lcms1 by lcms2 in Ubuntu T

[Edubuntu-bugs] [Bug 885324] [NEW] Completely replace lcms1 by lcms2 in Ubuntu

2011-11-02 Thread Till Kamppeter
Public bug reported: Many packages in Ubuntu use the liblcms1 library (source package lcms). This library is discontinued upstream and replaced by liblcms2. Due to this bugs in liblcms1 are not fixed any more upstream and important improvements in color reproduction and safety against crashes are

[Edubuntu-bugs] [Bug 872473] Re: Ldm error message "No response from server, restarting..." doesn't appear completly when the language is french

2011-11-02 Thread Marc GariƩpy
I pushed the patch in the upstream branch $ bzr diff -r 1404..1405 === modified file 'src/ldmgreetercomm.c' --- src/ldmgreetercomm.c2010-11-03 00:02:19 + +++ src/ldmgreetercomm.c2011-11-02 15:18:14 + @@ -99,7 +99,7 @@ if (!greeterpid) return 1; -cmd = g_

[Edubuntu-bugs] [Bug 884895] Re: Update gbrainy 2.03 in Ubuntu 11.10 to 2.05

2011-11-02 Thread Jordi Mas
Comment on the impact: #881156 -> A logic game does not accept valid answers in 33% of the cases #662041 -> A logic game does not accept the valid answer in 12.5% of the cases #661307 -> In PuzzleBuildTriangle, the valid answer is not accepted (20% of the cases) #663188 -> In English language, in

[Edubuntu-bugs] [Bug 671984] Re: What time is it?

2011-11-02 Thread Jordi Mas
Thanks a lot for your bug report I did notified the Dutch translators of your error in the time formatting Thanks a lot, Jordi, -- You received this bug notification because you are a member of Edubuntu Bugsquad, which is subscribed to gbrainy in Ubuntu. https://bugs.launchpad.net/bugs/671984

[Edubuntu-bugs] [Bug 710948] Re: Variable not replaced by a value in "tennis game"

2011-11-02 Thread Jordi Mas
** Changed in: gbrainy (Ubuntu) Status: New => Fix Released -- You received this bug notification because you are a member of Edubuntu Bugsquad, which is subscribed to gbrainy in Ubuntu. https://bugs.launchpad.net/bugs/710948 Title: Variable not replaced by a value in "tennis game" To

[Edubuntu-bugs] [Bug 739355] Re: Polish translation is crap quality

2011-11-02 Thread Jordi Mas
** Changed in: gbrainy (Ubuntu) Status: New => Opinion -- You received this bug notification because you are a member of Edubuntu Bugsquad, which is subscribed to gbrainy in Ubuntu. https://bugs.launchpad.net/bugs/739355 Title: Polish translation is crap quality To manage notifications

[Edubuntu-bugs] [Bug 743714] Re: Logical flaws in the 'words' game

2011-11-02 Thread Jordi Mas
** Changed in: gbrainy (Ubuntu) Status: New => Opinion -- You received this bug notification because you are a member of Edubuntu Bugsquad, which is subscribed to gbrainy in Ubuntu. https://bugs.launchpad.net/bugs/743714 Title: Logical flaws in the 'words' game To manage notifications

[Edubuntu-bugs] [Bug 780481] Re: Question with 2 equally possible right answers

2011-11-02 Thread Jordi Mas
** Changed in: gbrainy (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Edubuntu Bugsquad, which is subscribed to gbrainy in Ubuntu. https://bugs.launchpad.net/bugs/780481 Title: Question with 2 equally possible right answe

[Edubuntu-bugs] [Bug 797165] Re: gbrainy wrong solution

2011-11-02 Thread Jordi Mas
** Changed in: gbrainy (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Edubuntu Bugsquad, which is subscribed to gbrainy in Ubuntu. https://bugs.launchpad.net/bugs/797165 Title: gbrainy wrong solution To manage notifications about this

[Edubuntu-bugs] [Bug 794980] Re: logical train gives misleading question

2011-11-02 Thread Jordi Mas
** Changed in: gbrainy (Ubuntu) Status: New => Invalid -- You received this bug notification because you are a member of Edubuntu Bugsquad, which is subscribed to gbrainy in Ubuntu. https://bugs.launchpad.net/bugs/794980 Title: logical train gives misleading question To manage notifica

[Edubuntu-bugs] [Bug 817811] Re: Not translatable string

2011-11-02 Thread Jordi Mas
** Changed in: gbrainy (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Edubuntu Bugsquad, which is subscribed to gbrainy in Ubuntu. https://bugs.launchpad.net/bugs/817811 Title: Not translatable string To manage notificat

[Edubuntu-bugs] [Bug 570146] Re: localization not complete?

2011-11-02 Thread Jordi Mas
Hi, The perfect solution will be that somebody completes the Polish translation. Since gbrainy 2.0 when a translation is less than 80% you give a warning message and you can now switch to English in the preferences. Regards, Jordi, ** Changed in: gbrainy (Ubuntu) Status: New => Opinion

[Edubuntu-bugs] [Bug 675540] Re: gbrainy problems

2011-11-02 Thread Jordi Mas
** Changed in: gbrainy (Ubuntu) Status: New => Opinion -- You received this bug notification because you are a member of Edubuntu Bugsquad, which is subscribed to gbrainy in Ubuntu. https://bugs.launchpad.net/bugs/675540 Title: gbrainy problems To manage notifications about this bug go

[Edubuntu-bugs] [Bug 705526] Re: No bug with the software. My language is more colourful, than you thought. The gbrainy's hungarian is kinda good, as my english... so... i have to re-learn my own lang

2011-11-02 Thread Jordi Mas
** Changed in: gbrainy (Ubuntu) Status: New => Opinion -- You received this bug notification because you are a member of Edubuntu Bugsquad, which is subscribed to gbrainy in Ubuntu. https://bugs.launchpad.net/bugs/705526 Title: No bug with the software. My language is more colourful, th

[Edubuntu-bugs] [Bug 881156] Re: Figure test gives wrong answer

2011-11-02 Thread Jordi Mas
** Changed in: gbrainy (Ubuntu) Status: Fix Committed => Fix Released ** Changed in: gbrainy (Ubuntu) Assignee: (unassigned) => Jordi Mas (jmas-softcatala) -- You received this bug notification because you are a member of Edubuntu Bugsquad, which is subscribed to gbrainy in Ubuntu. h