** Tags removed: verification-needed
--
vino won't accept my password
https://launchpad.net/bugs/65795
--
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Upload verified and accepted for edgy-updates.
** Changed in: vino (Ubuntu Edgy)
Status: Fix Committed = Fix Released
--
vino won't accept my password
https://launchpad.net/bugs/65795
--
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
I have uploaded 2.16.0-0ubuntu2.2 for -updates since (more than) a week
has now passed without any negative issues.
As I understand, this completes step 5 of the SRU.
--
vino won't accept my password
https://launchpad.net/bugs/65795
--
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
This has been tested to fix the bug and I cannot find any regressions in
vino's functionality.
Good to go into -updates.
** Tags added: verification-done
--
vino won't accept my password
https://launchpad.net/bugs/65795
--
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
How can I install this package in edgy?. I don't find in repos:
Format: 1.7
Date: Tue, 24 Oct 2006 16:02:41 -0700
Source: vino
Binary: vino
Architecture: source
Version: 2.16.0-0ubuntu2.1
Distribution: edgy-proposed
Urgency: low
Maintainer: Jordi Mallach [EMAIL PROTECTED]
Changed-By: Kees Cook
Hello,
I agree with a security bug. It would be fixed quickly.
Best regards.
--
vino won't accept my password
https://launchpad.net/bugs/65795
--
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
This *is* a security bug - if vino authenticated the user using free password
area instead of a real password, an attacker might predict what will be the
content of the freed memory area, use it as the authentication password, and
gain unauthorized access to the VNC server, without having to
That upload fixes the issue:
vino (2.17.2-0ubuntu1) feisty; urgency=low
.
* New upstream version:
Features:
- Add local_only GConf key for use with SSH tunnels (Ubuntu: #54312)
- Add alternative_port GConf key
- Add ability to use gnome-keyring to store VNC password
** Changed in: vino (Ubuntu Edgy)
Status: Confirmed = Fix Committed
--
vino won't accept my password
https://launchpad.net/bugs/65795
--
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Yep, I patched the source with the debdiff posted above. After rebooting
the problem has been corrected.
In case anyone else is stuck like me untill the update is released, here
are the commands Kees kindly gave me to patch the source (slightly
modified):
cd /tmp
apt-get source vino
wget
As a word of caution, you may need some other packages installed before
that will work. I wrote up a quick wiki page about it:
https://wiki.ubuntu.com/UbuntuPackagingGuide/BuildFromDebdiff
--
vino won't accept my password
https://launchpad.net/bugs/65795
--
desktop-bugs mailing list
Thanks for the fix Kees! It worked perfectly for me.
Now if I could just get a similar fix for bug# 67189 and I would be all set
with Edgy.
--
vino won't accept my password
https://launchpad.net/bugs/65795
--
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
OK for -proposed
--
vino won't accept my password
https://launchpad.net/bugs/65795
--
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Okay, let's see if I can get through my first SRU. :)
Impact: Anyone who has configured vino (Remote Desktop) to use a
password must re-set the password at the start of every desktop session.
(The password is lost by vino after being loaded from gconf.) This
greatly reduces the utility of
I have tried a known working (on dapper) %gconf.xml file.
I have also tried one known to be working on Edgy, apparently.
I still get authentication error.
I have also build from source and modified vino_config.c and commented
line 309 [ g_free (vino_vnc_password); ], and replaced stock vino
kevb, just to confirm our chat on #ubuntu, you said you were able to
build a new vino package with the proposed debdiff, and after that,
things worked okay, correct?
--
vino won't accept my password
https://launchpad.net/bugs/65795
--
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
Format: 1.7
Date: Tue, 24 Oct 2006 16:02:41 -0700
Source: vino
Binary: vino
Architecture: source
Version: 2.16.0-0ubuntu2.1
Distribution: edgy-proposed
Urgency: low
Maintainer: Jordi Mallach [EMAIL PROTECTED]
Changed-By: Kees Cook [EMAIL PROTECTED]
Description:
vino - VNC server for GNOME
** Tags added: verification-needed
--
vino won't accept my password
https://launchpad.net/bugs/65795
--
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
Doesn't sound like a vulnerability to me, but of course it's a grave bug
in vino which should be fixed in -updates.
--
vino won't accept my password
https://launchpad.net/bugs/65795
--
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
several people have the issue, marking as confirmed
** Changed in: vino (Ubuntu)
Importance: Undecided = High
Assignee: (unassigned) = Ubuntu Desktop Bugs
Status: Needs Info = Confirmed
--
vino won't accept my password
https://launchpad.net/bugs/65795
--
desktop-bugs mailing
I think the problem is on line 309 of vino-prefs.c. The password
strings is g_free'd (and I don't think it should be). This would
explain it not working when the server starts, but working when the
password changes (where the prefs dialog updates the server directly
instead of using the loaded
Too late for official edgy release, but this should be in the security
updates for edgy after it goes out.
** Attachment added: debdiff to fix lost vnc password
http://librarian.launchpad.net/4934237/vino_2.16.0-0ubuntu2.1.dsc.debdiff
** Changed in: vino (Ubuntu)
Status: Confirmed =
Thank you for looking at that Kees. That's what upstream did too:
http://cvs.gnome.org/viewcvs/vino/server/vino-prefs.c?r1=1.2r2=1.3
I'm not sure if that's a security issue or should go to edgy-proposed
,edgy-updates rather
--
vino won't accept my password
https://launchpad.net/bugs/65795
--
I've sent email to pitti to see what he thinks. :)
--
vino won't accept my password
https://launchpad.net/bugs/65795
--
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
24 matches
Mail list logo
