Adding a task for thunderbird since it provides the apport hook that is
including this information.
The policy with apport is if user-private data is included, the bug
needs to be filed as Private. If that isn't happening, then
thunderbird's apport hook should either not include the file, or filter
the private fields out of the attachments.
I'm not certain but it looks like the intention of the bug reporter was
to flag this as a security issue. I'm not sure whether or not it is a
security problem, but will fix the flag so it can be reviewed; better to
err on the overly cautious side...
** Also affects: thunderbird (Ubuntu)
Importance: Undecided
Status: New
** Information type changed from Public to Public Security
** Summary changed:
- ubuntu-bug is not allowing to select information I want to attach to a
bugreport
+ ubuntu-bug thunderbird is attaching private network details I don't want in
my public bug report
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to thunderbird in Ubuntu.
https://bugs.launchpad.net/bugs/1096152
Title:
ubuntu-bug thunderbird is attaching private network details I don't
want in my public bug report
Status in “apport” package in Ubuntu:
New
Status in “thunderbird” package in Ubuntu:
New
Bug description:
E.g. when sending a bug reporting using ubuntu-bug for thunderbird
it's copieing my complete network configuration into a public
resources, even my bug was only related to some UI thing. Users should
have the opportunity to select/deselect information which is
transferred to lauchpad. If not, the user is maybe transffering
private data e.g. about his network environment which is IMHO a
security issue.
ProblemType: Bug
DistroRelease: Ubuntu 12.10
Package: apport 2.6.1-0ubuntu9
ProcVersionSignature: Ubuntu 3.5.0-22.33-generic 3.5.7.2
Uname: Linux 3.5.0-22-generic x86_64
ApportVersion: 2.6.1-0ubuntu9
Architecture: amd64
CrashReports:
640:1000:110:1261589:2013-01-04 15:19:35.735918000 +0100:2013-01-04
15:20:18.611922558 +0100:/var/crash/_usr_bin_xfce4-appfinder.1000.crash
664:1000:110:0:2013-01-04 15:20:17.587918601 +0100:2013-01-04
15:20:17.587918601 +0100:/var/crash/_usr_bin_xfce4-appfinder.1000.upload
600:104:110:0:2013-01-04 18:25:35.376977374 +0100:2012-12-15
10:34:43.593351096 +0100:/var/crash/_usr_bin_xfce4-appfinder.1000.uploaded
Date: Fri Jan 4 18:42:14 2013
InstallationDate: Installed on 2012-11-08 (57 days ago)
InstallationMedia: Xubuntu 12.10 "Quantal Quetzal" - Release amd64
(20121017.1)
MarkForUpload: True
PackageArchitecture: all
SourcePackage: apport
UpgradeStatus: No upgrade log present (probably fresh install)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1096152/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
