Thanks for taking the time to report this bug and helping to make Ubuntu
better. We appreciate the difficulties you are facing, but this appears
to be a "regular" (non-security) bug.  I have unmarked it as a security
issue since this bug does not show evidence of allowing attackers to
cross privilege boundaries nor directly cause loss of data/privacy.
Please feel free to report any other bugs you may find.

** Visibility changed to: Public

** This bug is no longer flagged as a security vulnerability

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to empathy in Ubuntu.
https://bugs.launchpad.net/bugs/1047732

Title:
  Gtalk oauth opening http://www.mardy.it/oauth2callback

Status in “empathy” package in Ubuntu:
  New

Bug description:
  When enabling my Google Talk account in Empathy, I get authorization
  errors. Pages open in my browser every time the account tries to log
  in, to http://www.mardy.it/oauth2callback?code=... The address has a
  different code value each time.

  mardy.it appears to be a blogger.com blog, and the oauth2callback
  appears to have a favicon from a drupal installation.

  I could just be paranoid, but I'd rather this be investigated as a
  potential security issue. I have disabled my Google account in
  Empathy, just in case someone has hijacked something.

  ProblemType: Bug
  DistroRelease: Ubuntu 12.10
  Package: empathy 3.5.91-0ubuntu2
  ProcVersionSignature: Ubuntu 3.5.0-14.15-generic 3.5.3
  Uname: Linux 3.5.0-14-generic x86_64
  ApportVersion: 2.5.1-0ubuntu7
  Architecture: amd64
  Date: Sat Sep  8 00:46:11 2012
  InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Alpha amd64 (20120815)
  ProcEnviron:
   TERM=xterm
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: empathy
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/empathy/+bug/1047732/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : desktop-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to