[Bug 1395720] Re: authentication in livesession accepts any value as password

[Michael]

** Package changed: catfish (Ubuntu) => sudo (Ubuntu)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1395720

Title:
  authentication in livesession accepts any value as password

To manage notifications about this bug go to:
https://bugs.launchpad.net/catfish-search/+bug/1395720/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1395720] Re: authentication in livesession accepts any value as password

[Launchpad Bug Tracker]

This bug was fixed in the package catfish - 1.3.1-0ubuntu1

---
catfish (1.3.1-0ubuntu1) wily; urgency=medium

  * New upstream bugfix release
- Fix: authentication in livesession accepts any
  value as password (LP: #1395720)
- Fix: Catfish will lock up if 'locate' is not
  installed (LP: #1482919)
- Fix: Catfish does not find files whose size
  exceeds 2GB (LP: #1442559)

 -- Sean Davis   Tue, 08 Sep 2015 20:54:13
-0400

** Changed in: catfish (Ubuntu)
   Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1395720

Title:
  authentication in livesession accepts any value as password

To manage notifications about this bug go to:
https://bugs.launchpad.net/catfish-search/+bug/1395720/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1395720] Re: authentication in livesession accepts any value as password

[Sean Davis]

** Changed in: catfish-search
   Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1395720

Title:
  authentication in livesession accepts any value as password

To manage notifications about this bug go to:
https://bugs.launchpad.net/catfish-search/+bug/1395720/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1395720] Re: authentication in livesession accepts any value as password

[Sean Davis]

Fixed at revision https://bazaar.launchpad.net/~catfish-search/catfish-
search/trunk/revision/380

** Also affects: catfish-search
   Importance: Undecided
   Status: New

** Changed in: catfish-search
   Status: New => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1395720

Title:
  authentication in livesession accepts any value as password

To manage notifications about this bug go to:
https://bugs.launchpad.net/catfish-search/+bug/1395720/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1395720] Re: authentication in livesession accepts any value as password

[Sean Davis]

** Changed in: catfish-search
Milestone: None => 1.3.1

** Changed in: catfish-search
 Assignee: (unassigned) => Sean Davis (bluesabre)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1395720

Title:
  authentication in livesession accepts any value as password

To manage notifications about this bug go to:
https://bugs.launchpad.net/catfish-search/+bug/1395720/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1395720] Re: authentication in livesession accepts any value as password

[Thaddaeus Tintenfisch]

Accepting any password in a password-less environment (live session) is
not a security issue.

** Information type changed from Public Security to Public

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1395720

Title:
  authentication in livesession accepts any value as password

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/catfish/+bug/1395720/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1395720] Re: authentication in livesession accepts any value as password

[Elfy]

given that if someone is able to only reproduce this in a livesession -
and thus has physical access - not really a security issue - or if it is
such - something that we're not able to deal with using software

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1395720

Title:
  authentication in livesession accepts any value as password

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/catfish/+bug/1395720/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1395720] Re: authentication in livesession accepts any value as password

[Launchpad Bug Tracker]

Status changed to 'Confirmed' because the bug affects multiple users.

** Changed in: catfish (Ubuntu)
   Status: New = Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1395720

Title:
  authentication in livesession accepts any value as password

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/catfish/+bug/1395720/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1395720] Re: authentication in livesession accepts any value as password

[Brendan Perrine]

I was able to reproduce this in Lubuntu after installing catfish. I
tried WeLoveAlladinSane as a password and it authentaticated.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1395720

Title:
  authentication in livesession accepts any value as password

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/catfish/+bug/1395720/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1395720] Re: authentication in livesession accepts any value as password

[Alberto Salvia Novella]

** Changed in: catfish (Ubuntu)
   Importance: Undecided = High

** Information type changed from Public to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1395720

Title:
  authentication in livesession accepts any value as password

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/catfish/+bug/1395720/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1395720] Re: authentication in livesession accepts any value as password

[Ubuntu QA Website]

This bug has been reported on the Ubuntu Package testing tracker.

A list of all reports related to this bug can be found here:
http://packages.qa.ubuntu.com/qatracker/reports/bugs/1395720

** Tags added: package-qa-testing

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1395720

Title:
  authentication in livesession accepts any value as password

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/catfish/+bug/1395720/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1395720] Re: authentication in livesession accepts any value as password

[Ubuntu QA Website]

This bug has been reported on the Ubuntu ISO testing tracker.

A list of all reports related to this bug can be found here:
http://iso.qa.ubuntu.com/qatracker/reports/bugs/1395720

** Tags added: iso-testing

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1395720

Title:
  authentication in livesession accepts any value as password

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/catfish/+bug/1395720/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs