** Changed in: signon (Ubuntu RTM)
Status: In Progress = Fix Released
** Changed in: signon (Ubuntu Utopic)
Importance: Critical = Undecided
** Changed in: signon (Ubuntu Utopic)
Status: Confirmed = Won't Fix
--
You received this bug notification because you are a member of
** Changed in: canonical-devices-system-image
Status: In Progress = Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to signon in Ubuntu.
https://bugs.launchpad.net/bugs/1392380
Title:
OA gives out all
This bug was fixed in the package ubuntu-touch-meta - 1.202
---
ubuntu-touch-meta (1.202) 14.09; urgency=medium
* Refreshed dependencies (LP: #1392380)
* Added signon-apparmor-extension
-- Ricardo Salveti de Araujo ricardo.salv...@canonical.com Tue, 17 Feb
2015 19:04:51 -0200
FYI, after talking with David Barth, it looks like all the pieces landed
in ubuntu-rtm, but signon-apparmor-extension is not installed yet on the
images so the bug isn't quite fixed yet.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is
** Changed in: canonical-devices-system-image
Milestone: ww07-2015 = ww09-2015
** Changed in: canonical-devices-system-image
Assignee: (unassigned) = David Barth (dbarth)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed
** Changed in: canonical-devices-system-image
Status: Confirmed = In Progress
** Changed in: canonical-devices-system-image
Milestone: ww05-2015 = ww07-2015
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to signon
** Branch unlinked: lp:~online-accounts/signon/packaging
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to signon in Ubuntu.
https://bugs.launchpad.net/bugs/1392380
Title:
OA gives out all tokens to any app
Status in the
** Changed in: ubuntu-touch-meta (Ubuntu RTM)
Status: Fix Released = New
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to signon in Ubuntu.
https://bugs.launchpad.net/bugs/1392380
Title:
OA gives out all tokens to
This bug was fixed in the package ubuntu-touch-meta - 1.200
---
ubuntu-touch-meta (1.200) 14.09; urgency=medium
* Refreshed dependencies (LP: #1413622), (LP: #1392380)
* Added signon-apparmor-extension
* Added ubuntu-keyboard-azerbaijani
* Added ubuntu-keyboard-bosnian
*
** Also affects: ubuntu-touch-meta (Ubuntu RTM)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to signon in Ubuntu.
https://bugs.launchpad.net/bugs/1392380
Title:
OA gives out all
** Branch linked: lp:~dbarth/ubuntu-seeds/ubuntu-touch.utopic-signon-
apparmor-extension
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to signon in Ubuntu.
https://bugs.launchpad.net/bugs/1392380
Title:
OA gives out all
** Changed in: canonical-devices-system-image
Milestone: ww51-2014 = ww05-2015
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to signon in Ubuntu.
https://bugs.launchpad.net/bugs/1392380
Title:
OA gives out all tokens to
To finish the landing of the fix, I think we need :
- a backport of signon-apparmor-extension to rtm-14.09
- the addition of the package to the corresponding touch seed
Thanks
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to
Confirming as this security issue was agreed to be fixed in first update
** Changed in: canonical-devices-system-image
Importance: Undecided = High
** Changed in: canonical-devices-system-image
Status: New = Confirmed
** Changed in: canonical-devices-system-image
Milestone: None =
** Branch linked: lp:~mardy/signon/rtm-fixes
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to signon in Ubuntu.
https://bugs.launchpad.net/bugs/1392380
Title:
OA gives out all tokens to any app
Status in signon package in
** Changed in: signon (Ubuntu Vivid)
Status: Confirmed = Fix Released
** Changed in: signon (Ubuntu RTM)
Assignee: (unassigned) = Alberto Mardegan (mardy)
** Changed in: signon (Ubuntu RTM)
Status: New = In Progress
--
You received this bug notification because you are a
** Also affects: canonical-devices-system-image
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to signon in Ubuntu.
https://bugs.launchpad.net/bugs/1392380
Title:
OA gives out all
** Tags added: application-confinement
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to signon in Ubuntu.
https://bugs.launchpad.net/bugs/1392380
Title:
OA gives out all tokens to any app
Status in “signon” package in
** Information type changed from Private Security to Public Security
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to signon in Ubuntu.
https://bugs.launchpad.net/bugs/1392380
Title:
OA gives out all tokens to any app
Just to add some more information in order to have a more clear idea of
the seriousness of this bug: accounts which are created when the signon-
apparmor-extension is installed will work fine: apps won't be able to
abuse them.
This bug only affects the accounts which were created when the
Adding rtm14 ota-1 touch-2014-11-27. This needs to be fixed for RTM
branch when bug #1376445 is fixed, but bug #1376445 is targeted for
ota-1.
** Also affects: signon (Ubuntu Utopic)
Importance: Undecided
Status: New
** Also affects: signon (Ubuntu Vivid)
Importance: Critical
21 matches
Mail list logo
