[Desktop-packages] [Bug 1677924] Re: Local privilege escalation via guest user login

@ogra it isn't obvious how the fix for this bug could have caused bug 1733557. Can you elaborate? -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1677924 Title: Local privilege

[Desktop-packages] [Bug 1677924] Re: Local privilege escalation via guest user login

Noam, ogra's comment on bug 1733557 is for: https://bugs.launchpad.net/ubuntu/+source/unity/+bug/1733557 It automatically gets hyperlinked when viewing https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1677924 directly. Thanks -- You received this bug notification because you are a member

Re: [Desktop-packages] [Bug 1677924] Re: Local privilege escalation via guest user login

Sorry for being ignorant about this, but I don't know where to look I looked at Bugzilla for Kernel.org and it doesn't show there Where should I look? On Sun, Apr 22, 2018 at 2:24 PM, Oliver Grawert wrote: > This security fix seems to have caused some fallout ... see bug

[Desktop-packages] [Bug 1677924] Re: Local privilege escalation via guest user login

This security fix seems to have caused some fallout ... see bug 1733557 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1677924 Title: Local privilege escalation via guest user login

Re: [Desktop-packages] [Bug 1677924] Re: Local privilege escalation via guest user login

Hi Thanks for the update --- Thanks, Noam Rathaus On Apr 21, 2017 04:15, "Tyler Hicks" wrote: > As a note to any backporters, the original fix for this bug should > include the following change as well: > > https://code.launchpad.net/~tyhicks/lightdm/guest-dir- >

[Desktop-packages] [Bug 1677924] Re: Local privilege escalation via guest user login

As a note to any backporters, the original fix for this bug should include the following change as well: https://code.launchpad.net/~tyhicks/lightdm/guest-dir- perms/+merge/322906 It is technically optional but definitely recommended. -- You received this bug notification because you are a

[Desktop-packages] [Bug 1677924] Re: Local privilege escalation via guest user login

This bug was fixed in the package lightdm - 1.22.0-0ubuntu2 --- lightdm (1.22.0-0ubuntu2) zesty; urgency=medium * SECURITY UPDATE: Directory traversal allowing arbitrary directory ownership and privilege escalation (LP: #1677924) - debian/guest-account.sh: Detect existing

[Desktop-packages] [Bug 1677924] Re: Local privilege escalation via guest user login

** Tags added: patch -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1677924 Title: Local privilege escalation via guest user login Status in Light Display Manager: Fix Released

[Desktop-packages] [Bug 1677924] Re: Local privilege escalation via guest user login

** Branch linked: lp:lightdm/1.22 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1677924 Title: Local privilege escalation via guest user login Status in Light Display Manager:

[Desktop-packages] [Bug 1677924] Re: Local privilege escalation via guest user login

** Branch linked: lp:lightdm/1.18 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1677924 Title: Local privilege escalation via guest user login Status in Light Display Manager:

[Desktop-packages] [Bug 1677924] Re: Local privilege escalation via guest user login

** Branch linked: lp:lightdm/1.20 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1677924 Title: Local privilege escalation via guest user login Status in Light Display Manager:

[Desktop-packages] [Bug 1677924] Re: Local privilege escalation via guest user login

** Changed in: lightdm/1.18 Status: Triaged => Fix Released -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1677924 Title: Local privilege escalation via guest user login

[Desktop-packages] [Bug 1677924] Re: Local privilege escalation via guest user login

** Changed in: lightdm/1.20 Status: Triaged => Fix Released -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1677924 Title: Local privilege escalation via guest user login

[Desktop-packages] [Bug 1677924] Re: Local privilege escalation via guest user login

** Changed in: lightdm/1.22 Status: Triaged => Fix Released -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1677924 Title: Local privilege escalation via guest user login

[Desktop-packages] [Bug 1677924] Re: Local privilege escalation via guest user login

** Changed in: lightdm Status: Triaged => Fix Committed ** Changed in: lightdm Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu.

[Desktop-packages] [Bug 1677924] Re: Local privilege escalation via guest user login

** Branch linked: lp:lightdm -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to lightdm in Ubuntu. https://bugs.launchpad.net/bugs/1677924 Title: Local privilege escalation via guest user login Status in Light Display Manager: Fix

[Desktop-packages] [Bug 1677924] Re: Local privilege escalation via guest user login

** Information type changed from Private Security to Public Security ** Changed in: lightdm (Ubuntu Xenial) Assignee: (unassigned) => Tyler Hicks (tyhicks) ** Changed in: lightdm (Ubuntu Yakkety) Assignee: (unassigned) => Tyler Hicks (tyhicks) ** Changed in: lightdm (Ubuntu Zesty)