/srv/irclogs.ubuntu.com/2022/06/27/#ubuntu-security.txt

tewardso https://bugs.launchpad.net/ubuntu/+source/nginx/+bug/1979917 is tagge12:27
ubottuLaunchpad bug 1979917 in nginx (Ubuntu) "libnginx-mod-http-fancyindex is using outdated version with missing html escaping" [Medium, New]12:27
tewardmarked as security bug.  should we do a security upload patch or just SRU?12:27
tewardalso i hate typing on phones >.<12:27
amurrayteward: hmm in general we prefer to suggest in these cases to get CVEs assigned then we can just follow the usual process (which I see you have already done) - but an SRU would also be okay (although it wouldn't end up in the security pocket without special attention)12:29
tewardamurray: i havent gone the cve issuance route nor checked if one was issued12:30
tewardi have enough to do without breaking my back with MITRE rules :P12:30
amurrayteward: oh I thought I had seen you ask them if a CVE had been assigned... perhaps I was thinking of some other bug (I wasn't suggesting that you go through that process, more that we suggest to the reported to go and do that)12:31
tewardgiven fancy_index is not included in the main nginx-core and only default-ships in universe nginx-extras i'm not tooooooo concerned.  yet :P12:31
amurrayahh ok - I always get confused about packages which have different binaries split across main vs universe12:33
tewardyep12:36
tewardamurray: re: nginx thats a question you can always poke me on :P12:36
ahasenacksbeattie: hi, I'm doing an nfs-utils merge for kinetic, and while going over bugs I could perhaps close with the update I found https://bugs.launchpad.net/ubuntu/+source/nfs-utils/+bug/191831220:29
ubottuLaunchpad bug 1918312 in nfs-utils (Ubuntu) "group changes don't show up in kerberizedd mounts" [Undecided, Confirmed]20:29
ahasenackI think that is something that should be fixed upstream20:29
ahasenackif you agree, maybe could you add a comment asking the reporter to try to revive the upstream thread?20:30

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!