@Marc I understand that the fact that it's a point for SQL injection isn't too much of an issue since we're already root at this point, but the fact that it fails to set one's password is less than desirable. Sure, I can go set my password in the console after the setup is complete, but why should the installer even prompt me to setup a password if I can't use a decent password?
I've been witnessing this bug for years and I'm surprised there aren't more people discussing it. As such, I'm willing to take it on. This should just be a matter of character escaping. Here's to hoping I have a patch in a little while. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/260361 Title: SQL injection when selecting password for the first time. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/mysql-dfsg/+bug/260361/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
