[Bug 1448911] Re: Execute initDbSession() on DB reconnects

2015-05-05 Thread Steve Beattie
quassel 0.12.2-0ubuntu0.1 was copied into wily, closing that task. ** Changed in: quassel (Ubuntu Wily) Status: New => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1448911 Title:

[Bug 1448911] Re: Execute initDbSession() on DB reconnects

2015-05-04 Thread Launchpad Bug Tracker
This bug was fixed in the package quassel - 0.10.1-0ubuntu1.2 --- quassel (0.10.1-0ubuntu1.2) utopic-security; urgency=medium * SECURITY UPDATE: stack consumption vulnerability in message splitting code - debian/patches/CVE-2015-2778.patch: original patch from Michael Marley,

[Bug 1448911] Re: Execute initDbSession() on DB reconnects

2015-05-04 Thread Launchpad Bug Tracker
This bug was fixed in the package quassel - 0.10.0-0ubuntu2.2 --- quassel (0.10.0-0ubuntu2.2) trusty-security; urgency=medium * SECURITY UPDATE: stack consumption vulnerability in message splitting code - debian/patches/CVE-2015-2778.patch: original patch from Michael Marley,

[Bug 1448911] Re: Execute initDbSession() on DB reconnects

2015-05-04 Thread Steve Beattie
** Changed in: quassel (Ubuntu Trusty) Status: New => In Progress ** Changed in: quassel (Ubuntu Utopic) Status: New => In Progress ** Changed in: quassel (Ubuntu Trusty) Assignee: (unassigned) => Steve Beattie (sbeattie) ** Changed in: quassel (Ubuntu Utopic) Assignee: (

[Bug 1448911] Re: Execute initDbSession() on DB reconnects

2015-05-04 Thread Launchpad Bug Tracker
This bug was fixed in the package quassel - 0.12.2-0ubuntu0.1 --- quassel (0.12.2-0ubuntu0.1) vivid; urgency=medium * New upstream release - LP: #1448911 Execute initDbSession() on DB reconnects -- Jonathan Riddell Mon, 27 Apr 2015 10:11:13 +0200 ** Changed in: quassel (Ubunt

[Bug 1448911] Re: Execute initDbSession() on DB reconnects

2015-05-04 Thread Jonathan Riddell
As upstream advised I installed the new version from vivid-proposed, set it up to use postgresql, connected and chatted. I restarted postgresql then chatted some more. I then restarted the client and checked the timestamps which were all correctly set. ** Tags removed: verification-needed ** Tag

[Bug 1448911] Re: Execute initDbSession() on DB reconnects

2015-05-04 Thread Jonathan Riddell
I'll leave the security team to deal with Felix's updates for trusty and utopic -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1448911 Title: Execute initDbSession() on DB reconnects To manage notif

[Bug 1448911] Re: Execute initDbSession() on DB reconnects

2015-05-04 Thread Jonathan Riddell
** Description changed: Bug fixed in 0.12.2 is an old CVE that re-occurred: Previously, the initDbSession() function would only be run on the initial connect. Since the initDbSession() code in PostgreSQL is used to fix the CVE-2013-4422 SQL Injection bug, this means that Quassel was

[Bug 1448911] Re: Execute initDbSession() on DB reconnects

2015-05-01 Thread Felix Geyer
** Patch added: "quassel_0.10.1-0ubuntu1.2.debdiff" https://bugs.launchpad.net/ubuntu/+source/quassel/+bug/1448911/+attachment/4389172/+files/quassel_0.10.1-0ubuntu1.2.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https:/

[Bug 1448911] Re: Execute initDbSession() on DB reconnects

2015-05-01 Thread Felix Geyer
Attached are debdiffs that fix this vulnerability and CVE-2015-2778/CVE-2015-2779 in trusty and utopic. ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2015-2778 ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2015-2779 ** Patch added: "quassel_0.10.0-0ubuntu2.2

[Bug 1448911] Re: Execute initDbSession() on DB reconnects

2015-05-01 Thread Felix Geyer
** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2015-3427 ** Also affects: quassel (Ubuntu Utopic) Importance: Undecided Status: New ** Also affects: quassel (Ubuntu Trusty) Importance: Undecided Status: New -- You received this bug notification because you

Re: [Bug 1448911] Re: Execute initDbSession() on DB reconnects

2015-04-29 Thread Tyler Hicks
On 2015-04-29 01:07:19, Scott Kitterman wrote: > On Tuesday, April 28, 2015 05:06:57 PM you wrote: > > On 2015-04-28 00:16:15, Scott Kitterman wrote: > > > On Monday, April 27, 2015 10:14:47 PM you wrote: > > > > Hi Jonathan (and Scott) - This update fixes a security issue so it > > > > should go t

Re: [Bug 1448911] Re: Execute initDbSession() on DB reconnects

2015-04-28 Thread Scott Kitterman
On Tuesday, April 28, 2015 05:06:57 PM you wrote: > On 2015-04-28 00:16:15, Scott Kitterman wrote: > > On Monday, April 27, 2015 10:14:47 PM you wrote: > > > Hi Jonathan (and Scott) - This update fixes a security issue so it > > > should go through the -security sponsoring process rather than the S

Re: [Bug 1448911] Re: Execute initDbSession() on DB reconnects

2015-04-28 Thread Tyler Hicks
On 2015-04-28 00:16:15, Scott Kitterman wrote: > On Monday, April 27, 2015 10:14:47 PM you wrote: > > Hi Jonathan (and Scott) - This update fixes a security issue so it > > should go through the -security sponsoring process rather than the SRU > > process. The Security Team will get it sponsored to

Re: [Bug 1448911] Re: Execute initDbSession() on DB reconnects

2015-04-27 Thread Scott Kitterman
On Monday, April 27, 2015 10:14:47 PM you wrote: > Hi Jonathan (and Scott) - This update fixes a security issue so it > should go through the -security sponsoring process rather than the SRU > process. The Security Team will get it sponsored to the security pocket > once these steps are followed:

[Bug 1448911] Re: Execute initDbSession() on DB reconnects

2015-04-27 Thread Tyler Hicks
Hi Jonathan (and Scott) - This update fixes a security issue so it should go through the -security sponsoring process rather than the SRU process. The Security Team will get it sponsored to the security pocket once these steps are followed: https://wiki.ubuntu.com/SecurityTeam/SponsorsQueue#Notes_

[Bug 1448911] Re: Execute initDbSession() on DB reconnects

2015-04-27 Thread Scott Kitterman
Hello Jonathan, or anyone else affected, Accepted into vivid-proposed. The package will build now and be available in a few hours in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -p

[Bug 1448911] Re: Execute initDbSession() on DB reconnects

2015-04-27 Thread Jonathan Riddell
Uploaded quassel_0.12.2-0ubuntu0.1 to vivid, awaiting approval from ubuntu-sru ** Also affects: quassel (Ubuntu Vivid) Importance: Undecided Status: New ** Also affects: quassel (Ubuntu W-series) Importance: Undecided Status: New -- You received this bug notification becaus

[Bug 1448911] Re: Execute initDbSession() on DB reconnects

2015-04-27 Thread Jonathan Riddell
It also Remove warning on startup due to a change in Kdelibs4ConfigMigrator by moving the code to the right place -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1448911 Title: Execute initDbSession()