[Bug 2068944] Re: ubuntu-advantage-desktop-daemon (pro client in general) may expose the pro token to other users

2024-07-01 Thread Sebastien Bacher
** Changed in: ubuntu-advantage-tools (Ubuntu)
 Assignee: Sebastien Bacher (seb128) => (unassigned)

** Changed in: ubuntu-advantage-tools (Ubuntu)
   Status: Fix Committed => Invalid

** Changed in: ubuntu-advantage-tools (Ubuntu)
   Status: Invalid => Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2068944

Title:
  ubuntu-advantage-desktop-daemon (pro client in general) may expose the
  pro token to other users

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-desktop-daemon/+bug/2068944/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2068944] Re: ubuntu-advantage-desktop-daemon (pro client in general) may expose the pro token to other users

2024-06-28 Thread Launchpad Bug Tracker
This bug was fixed in the package ubuntu-advantage-desktop-daemon - 1.12

---
ubuntu-advantage-desktop-daemon (1.12) oracular; urgency=medium

  * Pass the token via a private temporary attach config file (lp:
#2068944)

 -- Sebastien Bacher   Thu, 27 Jun 2024 14:31:53
+0200

** Changed in: ubuntu-advantage-desktop-daemon (Ubuntu)
   Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2068944

Title:
  ubuntu-advantage-desktop-daemon (pro client in general) may expose the
  pro token to other users

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-desktop-daemon/+bug/2068944/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2068944] Re: ubuntu-advantage-desktop-daemon (pro client in general) may expose the pro token to other users

2024-06-27 Thread Mark Esler
Please refer to this issue as CVE-2024-6388.

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-6388

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2068944

Title:
  ubuntu-advantage-desktop-daemon (pro client in general) may expose the
  pro token to other users

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-desktop-daemon/+bug/2068944/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 2068944] Re: ubuntu-advantage-desktop-daemon (pro client in general) may expose the pro token to other users

2024-06-27 Thread Sebastien Bacher
** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2068944

Title:
  ubuntu-advantage-desktop-daemon (pro client in general) may expose the
  pro token to other users

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-advantage-desktop-daemon/+bug/2068944/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs