[Bug 1395720] Re: authentication in livesession accepts any value as password
** Package changed: catfish (Ubuntu) => sudo (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1395720 Title: authentication in livesession accepts any value as password To manage notifications about this bug go to: https://bugs.launchpad.net/catfish-search/+bug/1395720/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1395720] Re: authentication in livesession accepts any value as password
This bug was fixed in the package catfish - 1.3.1-0ubuntu1 --- catfish (1.3.1-0ubuntu1) wily; urgency=medium * New upstream bugfix release - Fix: authentication in livesession accepts any value as password (LP: #1395720) - Fix: Catfish will lock up if 'locate' is not installed (LP: #1482919) - Fix: Catfish does not find files whose size exceeds 2GB (LP: #1442559) -- Sean Davis Tue, 08 Sep 2015 20:54:13 -0400 ** Changed in: catfish (Ubuntu) Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1395720 Title: authentication in livesession accepts any value as password To manage notifications about this bug go to: https://bugs.launchpad.net/catfish-search/+bug/1395720/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1395720] Re: authentication in livesession accepts any value as password
** Changed in: catfish-search Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1395720 Title: authentication in livesession accepts any value as password To manage notifications about this bug go to: https://bugs.launchpad.net/catfish-search/+bug/1395720/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1395720] Re: authentication in livesession accepts any value as password
** Changed in: catfish-search Milestone: None => 1.3.1 ** Changed in: catfish-search Assignee: (unassigned) => Sean Davis (bluesabre) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1395720 Title: authentication in livesession accepts any value as password To manage notifications about this bug go to: https://bugs.launchpad.net/catfish-search/+bug/1395720/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1395720] Re: authentication in livesession accepts any value as password
Fixed at revision https://bazaar.launchpad.net/~catfish-search/catfish- search/trunk/revision/380 ** Also affects: catfish-search Importance: Undecided Status: New ** Changed in: catfish-search Status: New => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1395720 Title: authentication in livesession accepts any value as password To manage notifications about this bug go to: https://bugs.launchpad.net/catfish-search/+bug/1395720/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1395720] Re: authentication in livesession accepts any value as password
Accepting any password in a password-less environment (live session) is not a security issue. ** Information type changed from Public Security to Public -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1395720 Title: authentication in livesession accepts any value as password To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/catfish/+bug/1395720/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1395720] Re: authentication in livesession accepts any value as password
given that if someone is able to only reproduce this in a livesession - and thus has physical access - not really a security issue - or if it is such - something that we're not able to deal with using software -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1395720 Title: authentication in livesession accepts any value as password To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/catfish/+bug/1395720/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1395720] Re: authentication in livesession accepts any value as password
** Changed in: catfish (Ubuntu) Importance: Undecided => High ** Information type changed from Public to Public Security -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1395720 Title: authentication in livesession accepts any value as password To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/catfish/+bug/1395720/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1395720] Re: authentication in livesession accepts any value as password
I was able to reproduce this in Lubuntu after installing catfish. I tried WeLoveAlladinSane as a password and it authentaticated. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1395720 Title: authentication in livesession accepts any value as password To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/catfish/+bug/1395720/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1395720] Re: authentication in livesession accepts any value as password
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: catfish (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1395720 Title: authentication in livesession accepts any value as password To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/catfish/+bug/1395720/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1395720] Re: authentication in livesession accepts any value as password
This bug has been reported on the Ubuntu Package testing tracker. A list of all reports related to this bug can be found here: http://packages.qa.ubuntu.com/qatracker/reports/bugs/1395720 ** Tags added: package-qa-testing -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1395720 Title: authentication in livesession accepts any value as password To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/catfish/+bug/1395720/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1395720] Re: authentication in livesession accepts any value as password
This bug has been reported on the Ubuntu ISO testing tracker. A list of all reports related to this bug can be found here: http://iso.qa.ubuntu.com/qatracker/reports/bugs/1395720 ** Tags added: iso-testing -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1395720 Title: authentication in livesession accepts any value as password To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/catfish/+bug/1395720/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
