Subcategories

  • 1 Topics
    1 Posts
    peat_psuwitP
    Vulnerability During the periodic scanning of the local media, gst-hybris gets loaded by Gstreamer, a media framework, to perform HW-accelerated video decoding. gst-hybris expected the rendering element ("sink") to be HW-accelerated as well, but media scanning does not use HW-accelerated rendering. This results in memory corruption, which could potentially be exploited by a specifically-crafted media. Info The pipeline constructing process of Gstreamer is dynamic; it can automatically pick the demuxer, decoder(s), and sink(s) based on the file type, file content, and component's capability. In this case, Gstreamer picks gst-hybris' HW-accelerated decoder as the decoder, but "fakesink" as the sink (as the scanner only wants to know certain metadata). Now, to perform HW-accelerated video rendering, gst-hybris has a dedicated sink which co-operate with the decoder in order to pass decoded video frame without copying the memory. When Gstreamer connects the decoder with the sink, the decoder can access the sink to perform necessary co-ordination. However, the decoder forgot to check if the sink it accesses is the one it can co-operate, which results in the code writing into the memory it's not supposed to access. In order for this to be exploited, the video has to be on the device, which subsequently leads to it being scanned. Video playback in other cases is not affected, as they always use HW-accelerated video rendering. CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') Severity: Medium Affected versions Affected versions: All Ubuntu Touch versions up to and including 20.04 OTA-10, 24.04-1.0. Fixed in versions: Ubuntu Touch 20.04 OTA-11 and 24.04-1.1. Solution Starting in Ubuntu Touch 20.04 OTA-11 and 24.04-1.1, gst-hybris checks the type of the sink before casting to the expected type. Fixed in: https://gitlab.com/ubports/development/core/hybris-support/gst-hybris/-/commit/58bb0e1ba2169bd85ac0930bf074ab865553356f Recommendations Update your device to Ubuntu Touch 20.04 OTA-11, 24.04-1.1 or newer. Do not download videos from untrusted sources. Timeline The issue was discovered on 30 September 2025, during a debugging of another issue. The issue was discovered before the release of Ubuntu Touch 24.04-1.0, but we did not manage to work it through and fix it in time for that release. Ubuntu Touch 20.04 OTA-11 and 24.04-1.1 was released on 1 December 2025, coordinated with the publication of this advisory. Credit Reported-by: Ratchanan Srirattanamet Patched-by: Ratchanan Sirrattanamet
  • This forum is all about the ongoing efforts to upgrade UT to the 20.04 codebase of Ubuntu.

    132 Topics
    954 Posts
    A
    @Moem @Luksus This is good news as this was a good phone with UBPorts
  • OS Version Number UT for pinephone

    2
    0 Votes
    2 Posts
    435 Views
    K
    I'll try to answer base on what I know. Note I might be wrong though Just check the update page and make sure to install all app updates. If it shows no update then you're most likely in the latest version. If you're on stable channel, I believe push notification is enabled so you'll get one if there's a new update. If you mean the link below, then no they're unrelated. That's just a job that builds the same image (or stable) over and over again and it was daily before so the number got really big. Just ignore these builds. You'll only need it if you want to reflash. https://ci.ubports.com/job/rootfs/job/rootfs-pinephone-systemimage/ No I'm not in stable channel on my pinephone right now so I can't see it myself and refer but in the OS build details page, you'll see different values such as UBports Image part and Device image part. OS Build number shows your current build number. Not sure if the pinephone shows "OTA" label or just build number for now. UBports image part is the build number/date for the rootfs or the actual OS. Device image part is the build number/date of the device specific software such as kernel. I'm not completely sure on this but this is what I know
  • Simple backup once more...

    7
    5 Votes
    7 Posts
    2k Views
    R
    @Flohack I get symlink errors with pull user-data, but I found this solution and it works: Consider this my "log" how I've transferred data from phone to phone (worked between two nexus 5 devices) without SD card I hope it will be helpful for somebody - but I've basically used combination of two methods described before plus some man pages NOTE: both devices have ubports image installed and are prepared for adb access () SOURCE DEVICE After connecting source device on PC commands in terminal as follows: Reboot phone into recovery: adb reboot recovery Acquire root: adb root Activate shell: adb shell (command prompt will change to # sign) Backup system-data (this will also create log files, that can be examined for possible errors) : tar -czpv -f /system-data.tgz /data/system-data/ >/system-data.out 2>/system-data.err NOTE: I've just put these files into root directory and it went just fine and pulled just one file into connected computer since adb has much better chance to transfer one big file without errors than many small ones logout from shell to your terminal (Ctrl+D) NOTE: I am assuming computer is linux with root access etc. this sub-step can be done before step 3 5.1 go to directory where backup data are to be stored in PC (using cd and mkdir commands) transfer data from phone to PC adb pull /system-data.tgz 6.1 it is good idea to have logs copied too adb pull /system-data.out and adb pull /system-data.err but it is not necessary steps 3. to 6. repeat but with user-data instead of system-data excluding .cache folder (so commands will look like tar -czpv -f /user-data.tgz /data/user-data/ --exclude='data/user-data/phablet/.cache' >/user-data.out 2>/user-data.err, adb pull /user-data.tgzetc.) NOTE: data which can be transferred by MTP should be moved that way since process of packing can take quite long for user data and may even stop/fail (e.g. not stopping process, just waiting and overheating battery, because all outputs are transferred to log files) if there is not enough space for package DESTINATION DEVICE Reboot phone into recovery: adb reboot recovery Acquire root: adb root Push archived data from PC to phone (root folder) adb push ./system-data.tgz / and adb push ./user-data.tgz / NOTE: in case of failure pushing both files and then unpacking both in adb shell it is possible to work the process "per partes" so following steps 4. and 5. will be done after each push and removing archive from phone (rm ./system-data.tgz in adb shell and then returning by Ctrl+D to PC shell) Activate shell: adb shell (command prompt will change to # sign) Extract archives tar -xzv -f /system-data.tgz and tar -xzv -f /user-data.tgz Restart phone, unplug, recharge (battery will be probably rather low ) check data and switch SIM card PS: After finishing and documenting the process, I'we found out that WiFi settings has not been transferred to destination device those must be somewhere in .cache folder then (I don't really mind, messages, apps, contacts and other settings are quite enough for me). It's form this thread: https://forums.ubports.com/topic/1683/migrate-data-from-device-to-device/21?_=1595872454998
  • UT is calling "Home"

    privacy
    30
    0 Votes
    30 Posts
    8k Views
    dobeyD
    If you think there is an issue, and aren't a developer, then simply open an issue in the issue tracker, and let the developers deal with it. Constantly repeating and making nonsense analogies in some attempt to try to force others isn't helping anyone. There is no "Home" in this respect, and having NTP and a connectivity check hosted at an Ubuntu sub-domain are not threats to your privacy. If you think they are, then block the connections yourself on your own system and be done with it. Make merge proposals to make it more configurable. Do something other than just sitting here repeating the same tired analogy trying to force us into your point of view.
  • DRM driver - Fedora(pinephone)

    3
    0 Votes
    3 Posts
    715 Views
    E
    Thank you, but I'm not so sure... The Ubports version is changed compared to standard version... Particularly when it come to this function's return value... So I'm hoping the ubports change is what I need. So I'm now trying to compile ubports version of mir... And the try it (but it's a lot to compile and there are include files missing)... So it takes a while.... So I try that first, before venturing into the kernel.
  • Help with the Notes application

    4
    0 Votes
    4 Posts
    542 Views
    mihaelM
    @CiberSheep Yes, thank you!
  • Call for testing: Updated Pulseaudio & better Bluetooth headset support

    30
    8 Votes
    30 Posts
    9k Views
    mihaelM
    @Flohack @peat_psuwit I believe I got this new version in the rc update from this morning. Thanks to everyone for the amazing job pursuing this... I'm still patiently waiting for my Pro5 to work without noise for bluetooth calls... Again, great job!
  • Base Ubuntu Version

    4
    1 Votes
    4 Posts
    2k Views
    libremaxL
    @db579 Some informations are here : https://github.com/orgs/ubports/projects
  • work on media-hub

    9
    7 Votes
    9 Posts
    1k Views
    T
    @wdehoog Podbird on OnePlus One I guess it could be app specific - will double check with other apps to see if it's the same behavior
  • Compass in Device Checklist

    12
    1 Votes
    12 Posts
    2k Views
    jezekJ
    @dobey said in Compass in Device Checklist: @jezek said in Compass in Device Checklist: Abstraction on what level are you talking about? In qtubuntu-sensors. Thank you for reminding me. I forgot, there is already an issue opened on this.
  • SNAPD for snaps...how to? also...flatpak or appimage?

    2
    1 Votes
    2 Posts
    939 Views
    dobeyD
    There are many issues around being able to support snaps or flatpaks. For appimage, it could perhaps work via libertine depending on the app, at least on a very basic level. You likely would need to manually create a .desktop file inside libertine container, to get proper icon and launch the app from the app drawer, though.
  • UT and maps program/GPS in the USA.

    17
    0 Votes
    17 Posts
    2k Views
    AppLeeA
    @potet said in UT and maps program/GPS in the USA.: GPS providers Not here to correct anything, just to share The GPS providers are providing the GPS chips in our phones. For cartography, you there are several providers for: maps (vector data representing features: roads, buildings, etc.) tiles (the visual components of maps). geocodes (names for features like addresses or road names which allows to search something in a map) The first one is served by OSM, the second one is usually a third party service provider and the last one can be nominatim which is a services provided by OSM but can also be part of the third party provider. Navigation is another service that third party can offer and is able to resolve how to join two different locations. Hope it can help someone to figure things out or better understand this complex world.
  • Generic USB Display driver

    3
    2 Votes
    3 Posts
    2k Views
    poVoqP
    https://www.phoronix.com/scan.php?page=news_item&px=Generic-USB-Display-Driver-V3 Looks like this is actually happening and coming to Linux Kernel 5.9 / 5.10 Sadly unlikely that it could be backported to ancient 3.x kernels though.
  • 3 Votes
    19 Posts
    4k Views
    PhoenixLandPiratP
    @ell1e said in Any plans to have encryption as an option in future Ubuntu Touch installers?: All I'm hearing is excuses, to be honest. "It's not perfect, so that makes it fair to not provide it." No, I don't think it does. Sounds like you might want to get some hearing aids then Home folder encryption would already help a lot as you say, but is that in the installer? It should be then You're more than welcome to work on it
  • Text selection in different apps

    apps keyboard
    8
    0 Votes
    8 Posts
    2k Views
    budrzB
    @kugiigi yeah that's what I'm referring to. I couldn't think of the phrase.
  • A possible Dash replacement

    51
    8 Votes
    51 Posts
    24k Views
    KenedaK
    Maybe it would be a good thing LM and Sprint dudes to work together.
  • OTA-12 call for testing

    Moved
    57
    3 Votes
    57 Posts
    20k Views
    FlaF
    @TobsEnd I also have this problem since a few months in devel.
  • ofono update for OTA-13 ?

    4
    0 Votes
    4 Posts
    640 Views
    flohackF
    @lduboeuf I dont think anything is in upstream for that, because they never supported RIL properly there. That was the reason for the fork but the ril driver was never upstreamed then. So I think we need to hack into this on our own...
  • deb, rc: issue switching screen off

    5
    2 Votes
    5 Posts
    724 Views
    P
    Short feedback: Power button works as expected with 2020-W16 snapshot. Thank you!
  • Bluetooth file transfer testing

    Locked
    6
    2 Votes
    6 Posts
    3k Views
    AppLeeA
    This is an old thread now locked. If you have a question related, please start a new one you can always refer back to this if needed.
  • howto install linux-headers

    9
    0 Votes
    9 Posts
    3k Views
    hankschwieH
    @dobey Ok, thanks. Then I'll have to wait 'til someone fixes this.