[Bug 1459692] Re: [MIR] anope

2018-11-27 Thread Eduardo dos Santos Barretto
** Changed in: anope (Ubuntu) Assignee: Ubuntu Security Team (ubuntu-security) => Eduardo dos Santos Barretto (ebarretto) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1459692 Title: [

[Bug 1806307] Re: package python-requests 2.18.4-2 failed to install/upgrade: package is in a very bad inconsistent state; you should reinstall it before attempting configuration

2018-12-03 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1806285] Re: Dock is visible on lock screen

2018-12-03 Thread Eduardo dos Santos Barretto
*** This bug is a duplicate of bug 1769383 *** https://bugs.launchpad.net/bugs/1769383 Thank you for taking the time to report this bug and helping to make Ubuntu better. This particular bug has already been reported and is a duplicate of bug 1769383, so it is being marked as such and marked a

[Bug 1806142] Re: plantage Grub

2018-12-03 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1805614] Re: screensaver crashed on wake up

2018-12-03 Thread Eduardo dos Santos Barretto
*** This bug is a duplicate of bug 1769383 *** https://bugs.launchpad.net/bugs/1769383 Thank you for taking the time to report this bug and helping to make Ubuntu better. This particular bug has already been reported and is a duplicate of bug 1769383, so it is being marked as such. Please look

[Bug 1804949]

2018-12-03 Thread Eduardo dos Santos Barretto
*** This bug is a duplicate of bug 1769383 *** https://bugs.launchpad.net/bugs/1769383 Thank you for taking the time to report this bug and helping to make Ubuntu better. This particular bug has already been reported and is a duplicate of bug 1769383, so it is being marked as such. Please look

[Bug 1806526] Re: [HDA-Intel - HDA Intel PCH, playback] No sound at all

2018-12-04 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1802653] Re: [HDA-Intel - HDA ATI HDMI, playback] No sound at all

2018-12-04 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1770655]

2018-12-04 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is availabl

[Bug 1770655]

2018-12-04 Thread Eduardo dos Santos Barretto
Sorry, for the duplicate message as sarnold already mentioned. Please ignore it. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1770655 Title: nodejs is at 8.10 while 8.11 is a security release. To

[Bug 1806747]

2018-12-04 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is availabl

[Bug 1806687] Re: package ca-certificates 20180409 failed to install/upgrade: installed ca-certificates package post-installation script subprocess returned error exit status 23

2018-12-04 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1805715] Re: password exposed in calculator input box

2018-12-04 Thread Eduardo dos Santos Barretto
Hi Peter, are you still experiencing this issue? ** Changed in: gnome-screensaver (Ubuntu) Status: New => Invalid ** Changed in: gnome-screensaver (Ubuntu) Status: Invalid => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscr

[Bug 1205384] Re: Lock can be circumvented by switching to console

2018-12-05 Thread Eduardo dos Santos Barretto
Hi smurfendrek, Please check jarnos comment #89, you need to use light-locker, using dm-tool for lock is not recommended. You could also try with other screen lockers program. Also this is an old bug, if you are still experiencing the problem, please open a new bug. I am unsubscribing the securi

[Bug 1805715]

2018-12-06 Thread Eduardo dos Santos Barretto
Daniel, since you are dealing with many reports on screensavers/screenlockers, have you seen this before? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1805715 Title: password exposed in cal

[Bug 1786910] Re: Latest patch breaks command line 'restart all'

2018-10-11 Thread Eduardo dos Santos Barretto
Hi shaochieh.chiang, Thanks for getting back to me. I still need more information, how many services, processes and so on are you monitoring? Can you share your monitrc configuration? Your log also contain errors from nginx ... have you tried to solve them? I'm still not convinced that your

[Bug 1797858] Re: Bug in Ubuntu 18.10 Cosmic Cuttlefish development branch

2018-10-15 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1797898] Re: evebody

2018-10-15 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1797785] Re: heap buffer overflow in ft_font_face_hash of gxps-fonts.c CVE-2018-10733

2018-10-15 Thread Eduardo dos Santos Barretto
** Changed in: libgxps (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1797785 Title: heap buffer overflow in ft_font_face_hash of gxps-fonts.c CVE-2018-1073

[Bug 1797707] Re: system friert ständig ein, 18.04.1

2018-10-15 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1795039] Re: сбой ри обновлении

2018-10-16 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1795395] Re: plymouthd crashed with SIGSEGV in ply_keyboard_stop_watching_for_renderer_input()

2018-10-16 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1795006] Re: package libxslt1.1:amd64 1.1.28-2.1 failed to install/upgrade: package libxslt1.1:amd64 is not ready for configuration cannot configure (current status 'half-installed')

2018-10-16 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1794981] Re: package libtidy5 (not installed) failed to install/upgrade: trying to overwrite '/usr/lib/libtidy.so.5', which is also in package tidy 5.4.0

2018-10-16 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1794592] Re: Can't upgrade ubuntu 16.04 up to 18.04

2018-10-16 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1794566] Re: package gnome-accessibility-themes 3.18.0-2ubuntu2 failed to install/upgrade: unable to open '/usr/share/icons/HighContrast/16x16/status/dialog-warning.png.dpkg-new': Operation not p

2018-10-16 Thread Eduardo dos Santos Barretto
*** This bug is a duplicate of bug 1794565 *** https://bugs.launchpad.net/bugs/1794565 Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a

[Bug 1791397] Re: Bug

2018-10-16 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1790256] Re: 1 Crash Annotation GraphicsCriticalError

2018-10-16 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1790257] Re: sudo update issue

2018-10-16 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1798487] Re: ubuntu

2018-10-18 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1794999]

2018-10-18 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. I took a look at your patch and I don't think it is the best solution. As far as I can tell, the problem is actually caused because of toolchain (gcc) version in bionic. I've tried to build the same version of pam-py

[Bug 1794999] Re: wrong null pointer check

2018-10-19 Thread Eduardo dos Santos Barretto
So I took another look at the patch and the current code and maybe I was too hard in my response. The current code is wrong as it will still make the string comparison even if dot is null. So the patch fixes this problem and should be proposed to upstream. As I mentioned the package also has oth

[Bug 1798768] Re: package libvamp-hostsdk3v5:amd64 2.7.1~repack0-1 failed to install/upgrade: package is in a very bad inconsistent state; you should reinstall it before attempting configuration

2018-10-19 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1798723] Re: package libvdpau1 (not installed) failed to install/upgrade: 尝试覆盖共享的 '/etc/vdpau_wrapper.cfg', 它与软件包 libvdpau1:amd64 中的其他实例不同

2018-10-19 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1799990] Re: tomcat7 doesn't start after upgrade to 7.0.68-1ubuntu0.3

2018-10-30 Thread Eduardo dos Santos Barretto
Thank you all for reporting the issue and sorry that it affected you. I'm already working on the fix and will let you know here if you can also test it before we publish it in the repository. >From what I've looked this is a Xenial issue only, so I am marking Trusty as >Invalid. ** Changed in:

[Bug 1794999] Re: wrong null pointer check

2018-10-30 Thread Eduardo dos Santos Barretto
So I've talked to upstream and Russel mentioned that a new version is coming next year. For more information: https://sourceforge.net/p/pam-python/tickets/5/ ** Changed in: pam-python (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubun

[Bug 1799990] Re: tomcat7 doesn't start after upgrade to 7.0.68-1ubuntu0.3

2018-10-30 Thread Eduardo dos Santos Barretto
Can anyone test the tomcat7 built here: https://launchpad.net/~ubuntu-security-proposed/+archive/ubuntu/ppa/+packages My tests were successful but I would appreciate more feedback about it. Thanks! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscrib

[Bug 1799990] Re: tomcat7 doesn't start after upgrade to 7.0.68-1ubuntu0.3

2018-10-30 Thread Eduardo dos Santos Barretto
Thanks SWick! Tomcat7 with the fix published, should reach in the repositories in a few minutes. Thanks for all the feedback and in case of problems just let us know! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launc

[Bug 1786910] Re: Latest patch breaks command line 'restart all'

2018-10-01 Thread Eduardo dos Santos Barretto
Thanks for testing the package and giving feedback! I really appreciate it. So based on your feedback and on my tests, we just released monit 1:5.16-2ubuntu0.2 to the repository. It should be available for upgrade in a few minutes depending on the mirrors. If you encounter any problems, please

[Bug 1786910] Re: Latest patch breaks command line 'restart all'

2018-10-08 Thread Eduardo dos Santos Barretto
Hi shaochieh.chiang, I appreciate you taking the time to report it and helping make Ubuntu better. My tests didn't give the "cannot parse response", and from the feedback received above, it appears that no one faced this so far. So could you give more information? Which are the steps to reprodu

[Bug 1786910] Re: Latest patch breaks command line 'restart all'

2018-10-08 Thread Eduardo dos Santos Barretto
Hi shaochieh.chiang, Could you try to downgrade the package version as below: sudo apt-get install monit=1:5.16-2 And see if you can reproduce the error? I've also found this on monit bug tracker: https://bitbucket.org/tildeslash/monit/issues/327 It might be related to what you're facing. --

[Bug 1786910] Re: Latest patch breaks command line 'restart all'

2018-09-27 Thread Eduardo dos Santos Barretto
Thanks for reporting this bug and helping make Ubuntu better. I'm sorry this affected you all. I would like you to ask the reporter and all the involved people in the thread to always include the last person listed as Maintainer for the package (you can check this in the debian/changelog) in the

[Bug 1786910] Re: Latest patch breaks command line 'restart all'

2018-09-27 Thread Eduardo dos Santos Barretto
** Changed in: monit (Ubuntu) Assignee: (unassigned) => Eduardo dos Santos Barretto (ebarretto) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1786910 Title: Latest patch breaks command l

[Bug 1786910] Re: Latest patch breaks command line 'restart all'

2018-09-27 Thread Eduardo dos Santos Barretto
Has anyone seen the same problem in Trusty (Ubuntu 14.04)? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1786910 Title: Latest patch breaks command line 'restart all' To manage notifications about

[Bug 1786910] Re: Latest patch breaks command line 'restart all'

2018-09-28 Thread Eduardo dos Santos Barretto
Thanks to Carlos Peñas for proposing the fix. Can anyone test the new version? You can download it from here: https://launchpad.net/~ubuntu-security-proposed/+archive/ubuntu/ppa/+packages This new version if approved will be released on Monday, as we don't want to release today and not having any

[Bug 1824679] Re: package phpmyadmin 4:4.5.4.1-2ubuntu2.1 failed to install/upgrade: подпроцесс установлен сценарий post-removal возвратил код ошибки 10

2019-04-15 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1824678] Re: package libqt5svg5:amd64 5.11.1-2 failed to install/upgrade: package is in a very bad inconsistent state; you should reinstall it before attempting configuration

2019-04-15 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1824604] Re: how to install ubuntu on predator helios

2019-04-15 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1824817] Re: Security breach with CRTL+ALT+F7

2019-04-15 Thread Eduardo dos Santos Barretto
*** This bug is a duplicate of bug 1806961 *** https://bugs.launchpad.net/bugs/1806961 ** This bug has been marked a duplicate of bug 1806961 Lock can be circumvented by switching tty when using lightdm ** Information type changed from Private Security to Public Security -- You received

[Bug 1824530] Re: Heap Buffer Overflow in UzpPassword

2019-04-15 Thread Eduardo dos Santos Barretto
** Changed in: unzip (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1824530 Title: Heap Buffer Overflow in UzpPassword To manage notifications about

[Bug 1821957] Re: Turning off a monitor unlocks the computer

2019-04-15 Thread Eduardo dos Santos Barretto
** Information type changed from Private Security to Public Security ** Changed in: ubuntubudgie Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1821957 Title: Turnin

[Bug 1852367] Re: [MIR] mysql-router (mysql-8.0)

2020-02-26 Thread Eduardo dos Santos Barretto
I reviewed mysql-router 8.0.19-0ubuntu2 as checked into focal (when this review started). This shouldn't be considered a full audit but rather a quick gauge of maintainability. mysql-router is a binary package from mysql-8.0 that is responsible for routing connections from MySQL clients to MySQL s

[Bug 1864379] Re: plasma-discover crashed with SIGABRT in raise()

2020-02-26 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. Your bug report is more likely to get attention if it is made in English, since this is the language understood by the majority of Ubuntu developers. Additionally, please only mark a bug as "security" if it shows evid

[Bug 1862555]

2020-02-26 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is availabl

[Bug 1862488] Re: clementine crashed with SIGSEGV in gst_element_set_state()

2020-02-26 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1856698] Re: I can see the password as I type into the password field after I reboot my PC

2020-02-26 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1856922] Re: Ubuntu One Cannot Sign in. downloaded Installerfetch, Security

2020-02-26 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1856459]

2020-02-26 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is availabl

[Bug 1864979] Re: Ubuntu Re-installation Aborted

2020-02-27 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1819761] Re: [MIR] containerd

2020-02-28 Thread Eduardo dos Santos Barretto
I reviewed containerd 1.3.1-0ubuntu1 as checked into focal. This shouldn't be considered a full audit but rather a quick gauge of maintainability. containerd is a daemon that manages the complete container lifecycle of its host system. Containerd controls runc. - No CVE History: - Build-Depends

[Bug 1819912] Re: CVE-2019-9628 XML parser class fails to trap exceptions on malformed XML declaration

2019-03-26 Thread Eduardo dos Santos Barretto
Thanks Etienne, Updated version was released for trusty, xenial, bionic and cosmic. Thanks again for the testing and for providing the debdiffs. Any problems just let us know. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://

[Bug 1813837] Re: Multiple vulnerabilities affecting 4.5.0.7

2019-01-30 Thread Eduardo dos Santos Barretto
** Information type changed from Private Security to Public Security ** Changed in: coturn (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1813837 Title: Mult

[Bug 1848076] Re: libc programme was unable to get updated

2019-10-14 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1847960] Re: After returning from suspend the screen content (with all previously opened programs, like code editor) is shown for 1 second before displaying login form

2019-10-14 Thread Eduardo dos Santos Barretto
** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1847960 Title: After returning from suspend the screen content (with all previously

[Bug 1847520] Re: 33 Upstream CVEs patched

2019-10-14 Thread Eduardo dos Santos Barretto
** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1847520 Title: 33 Upstream CVEs patched To manage notifications about this bug go

[Bug 1847831] Re: pppp

2019-10-14 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1847701] Re: Buffer Overflow Write when libntlm generates NTLM request

2019-10-15 Thread Eduardo dos Santos Barretto
** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1847701 Title: Buffer Overflow Write when libntlm generates NTLM request To manage

[Bug 1862364] [NEW] mysql-8.0 FTBFS (focal) because of hardcoded date in test

2020-02-07 Thread Eduardo dos Santos Barretto
Public bug reported: Just similar to bug #1859100 there is another test that just started failing because of a date that expired. See the snippet of build log below: [ 51%] main.events_1w4 [ fail ] Test ended at 2020-02-07 10:46:06 CURRENT_TEST: main.events

[Bug 1859100] Re: mysql-server FTBFS (focal) because of build tests

2020-01-15 Thread Eduardo dos Santos Barretto
Thanks, I will try to test or at least let the build running on xnox's proposed mysql version. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1859100 Title: mysql-server FTBFS (focal) because of buil

[Bug 1817336] Re: [MIR] runc

2020-01-17 Thread Eduardo dos Santos Barretto
I reviewed runc 1.0.0~rc8+git20190923.3e425f80-0ubuntu1 as checked into focal. This shouldn't be considered a full audit but rather a quick gauge of maintainability. runc, a lightweight universal container runtime, is a CLI tool for spawning and running containers according to the Open Container I

[Bug 1855768] Re: Ubuntu-security CVE-2019-18224 web page shows incorrect info about libidn2-0 status

2019-12-09 Thread Eduardo dos Santos Barretto
Hi Srdjan, Thanks for taking the time to report this issue and help making Ubuntu better. The USN you mentioned, applied the fix to the source package libidn2 (https://packages.ubuntu.com/source/bionic/libidn2) You can see on the mentioned page that this source package generates multiple binary

[Bug 1855768] Re: Ubuntu-security CVE-2019-18224 web page shows incorrect info about libidn2-0 status

2019-12-09 Thread Eduardo dos Santos Barretto
Also, I am not aware of this Trivy tool, but could you give us more information on what you are seeing? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1855768 Title: Ubuntu-security CVE-2019-

[Bug 1855768] Re: Ubuntu-security CVE-2019-18224 web page shows incorrect info about libidn2-0 status

2019-12-10 Thread Eduardo dos Santos Barretto
Hi Srdjan, Awesome, thanks! I will give it a try. Yes, the analysis seems correct to me. So I encourage you to file a bug on Trivy Github and let them verify what's going on. If possible, keep us updated on the outcomes of your bug report. I appreciate it! Thanks, Eduardo -- You received this

[Bug 1856979] Re: GIT 2.x vulnerabilities

2019-12-19 Thread Eduardo dos Santos Barretto
Actually marking it as Fixed Released. ** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1856979 Title: GIT 2.x vulnerabilities To

[Bug 1857059] Re: encontre un error y me vanearon

2019-12-20 Thread Eduardo dos Santos Barretto
Thank you for using Ubuntu and taking the time to report a bug. Your report should contain, at a minimum, the following information so we can better find the source of the bug and work to resolve it. Submitting the bug about the proper source package is essential. For help see https://wiki.ubuntu.

[Bug 1856944] Re: package login 1:4.2-3.1ubuntu5.4 failed to install/upgrade: package architecture (amd64) does not match system (i386)

2019-12-20 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1856997] Re: Nvidia driver is not working / not supported

2019-12-20 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1856771] Re: package samba 2:4.3.11+dfsg-0ubuntu0.16.04.24 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1

2019-12-20 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1856597] Re: sepackage mysql-server-5.7 5.7.28-0ubuntu0.18.04.4 failed to install/upgrade: instalado mysql-server-5.7 paquete post-installation guión el subproceso devolvió un error con estado de

2019-12-20 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1856510] Re: Gtk-Message: 23:32:48.890: Failed to load module "canberra-gtk-module" (etherape:2564): libglade-WARNING **: 23:32:48.893: Could not load support for `gnome': libgnome.so: Ne peut o

2019-12-20 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1856456] Re: package systemd 242-7ubuntu3.2 failed to install/upgrade: package systemd is already installed and configured

2019-12-20 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1866113] Re: CVE-2019-16235, CVE-2019-16236, CVE-2019-16237

2020-03-05 Thread Eduardo dos Santos Barretto
You can find it built here: https://launchpad.net/~ubuntu-security-proposed/+archive/ubuntu/ppa/+packages ** Changed in: dino-im (Ubuntu Bionic) Status: New => In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https:/

[Bug 1841978] Re: package login 1:4.2-3.1ubuntu5 failed to install/upgrade: package login is already installed and configured

2019-09-02 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1815483] Re: [MIR] libhandy

2019-08-16 Thread Eduardo dos Santos Barretto
I reviewed libhandy 0.0.10-1 as checked into eoan. This shouldn't be considered a full audit but rather a quick gauge of maintainability. libhandy is a library full of GTK widgets for mobile phones. The aim of libhandy is to help with developing UI for mobile devices using GTK/GNOME. - No CVE His

[Bug 1820212] Re: [MIR] python-aiosmtpd as dependency of mailman3

2019-05-13 Thread Eduardo dos Santos Barretto
I reviewed python-aiosmtpd version 1.2-3 as checked into eoan as of this writing. This shouldn't be considered a full audit but rather a quick gauge of maintainability. python-aiosmtpd is an asyncio based SMTP server. - Last commit from March - No CVE history - Build-depends: - debhelper, - dh

[Bug 1825572] Re: April 2019 Oracle CPU might also affect MariaDB

2019-05-15 Thread Eduardo dos Santos Barretto
I will be handling it for the security team, thanks Otto. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1825572 Title: April 2019 Oracle CPU might also affect MariaDB To manage notifications about

[Bug 1825572] Re: April 2019 Oracle CPU might also affect MariaDB

2019-05-15 Thread Eduardo dos Santos Barretto
Hi Otto, You based your update on version 1:10.1.38-0ubuntu0.18.04.1. We currently have in the archive version 1:10.1.38-0ubuntu0.18.04.2. Could you please rebase your changes with what is in the archive? Thanks in advance! -- You received this bug notification because you are a member of Ubu

[Bug 1838879] Re: Nvidia MX130 Video

2019-08-05 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1838795] Re: package linux-image-extra-4.4.0-57-generic 4.4.0-57.78 failed to install/upgrade: run-parts: /etc/kernel/postinst.d/initramfs-tools exited with return code 1

2019-08-05 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1838067] Re: made Ubuntu very slow then crash

2019-08-05 Thread Eduardo dos Santos Barretto
** Changed in: clamtk (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1838067 Title: made Ubuntu very slow then crash To manage notifications about t

[Bug 1833479] Re: libjack-jackd2-0 double close on a failure to connect to jackd which causes crashes in multithreaded programs

2019-08-05 Thread Eduardo dos Santos Barretto
** Changed in: jackd2 (Ubuntu) Status: New => Confirmed ** Changed in: jackd2 (Debian) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1833479 Title: libjack-ja

[Bug 1814596] Re: DynamicUser can create setuid binaries when assisted by another process

2019-08-06 Thread Eduardo dos Santos Barretto
** Changed in: systemd (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1814596 Title: DynamicUser can create setuid binaries when assisted by another process

[Bug 1839071] Re: numad sched_setaffinity bug

2019-08-06 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1839531] Re: 14.04 LTS does not upgrade to 16.04 LTS

2019-08-08 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1820226] Re: [MIR] twitter-bootstrap3 as dependency of mailman3

2019-05-31 Thread Eduardo dos Santos Barretto
I reviewed twitter-bootstrap3 3.4.0+dfsg-4 as checked into eoan. This shouldn't be considered a full audit but rather a quick gauge of maintainability. twitter-bootstrap3 is an open source toolkit for developing with HTML, CSS, and JS. - There are different versions of twitter-bootstrap in the a

Re: [Bug 1820226] Re: [MIR] twitter-bootstrap3 as dependency of mailman3

2019-06-03 Thread Eduardo dos Santos Barretto
On Mon, 2019-06-03 at 05:54 +, Christian Ehrhardt  wrote: > > - There are different versions of twitter-bootstrap in the archive, > > after some > > search we have that > > [...] > > It is used in mailman-website where you can manage lists. It is > > unclear to > > me if the version

[Bug 1825572] Re: April 2019 Oracle CPU might also affect MariaDB

2019-06-05 Thread Eduardo dos Santos Barretto
Thanks Otto for providing the update for 18.04. We just released it and it should be available in the archive in some minutes. We appreciate all the work you've done. ** Changed in: mariadb-10.1 (Ubuntu) Status: In Progress => Fix Released -- You received this bug notification because you

[Bug 1853696] Re: linux corrompido

2019-11-25 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1851738] Re: cqrlog cant be remove , cant download other apps because of it

2019-11-25 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

[Bug 1853760] Re: php 7.2 has dependency problems and they are not letting to update apache2 and php7.2 * modules

2019-11-25 Thread Eduardo dos Santos Barretto
Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privile

  1   2   >