After reading the comments of this bug, I noticed that the password is
in a world-readable file and am planning updates for that. Fixing those
permissions will remove the security vulnerability. Upstream commented
they may move to gnome-keyring in the future, but we won't diverge from
upstream on this in Ubuntu, so once the security vulnerability in this
bug is fixed, the Ubuntu task will be closed.
** Changed in: tsclient (Ubuntu)
Importance: Wishlist => Medium
** Changed in: tsclient (Ubuntu)
Status: Triaged => In Progress
** Changed in: tsclient (Ubuntu)
Assignee: (unassigned) => Jamie Strandboge (jdstrand)
** Also affects: tsclient (Ubuntu Hardy)
Importance: Undecided
Status: New
** Also affects: tsclient (Ubuntu Lucid)
Importance: Undecided
Status: New
** Also affects: tsclient (Ubuntu Natty)
Importance: Undecided
Status: New
** Also affects: tsclient (Ubuntu Maverick)
Importance: Undecided
Status: New
** Also affects: tsclient (Ubuntu Oneiric)
Importance: Medium
Assignee: Jamie Strandboge (jdstrand)
Status: In Progress
** Changed in: tsclient (Ubuntu Lucid)
Status: New => In Progress
** Changed in: tsclient (Ubuntu Lucid)
Importance: Undecided => Medium
** Changed in: tsclient (Ubuntu Lucid)
Assignee: (unassigned) => Jamie Strandboge (jdstrand)
** Changed in: tsclient (Ubuntu Maverick)
Status: New => In Progress
** Changed in: tsclient (Ubuntu Maverick)
Importance: Undecided => Medium
** Changed in: tsclient (Ubuntu Maverick)
Assignee: (unassigned) => Jamie Strandboge (jdstrand)
** Changed in: tsclient (Ubuntu Natty)
Status: New => In Progress
** Changed in: tsclient (Ubuntu Natty)
Importance: Undecided => Medium
** Changed in: tsclient (Ubuntu Natty)
Assignee: (unassigned) => Jamie Strandboge (jdstrand)
** Changed in: tsclient (Ubuntu Hardy)
Status: New => In Progress
** Changed in: tsclient (Ubuntu Hardy)
Importance: Undecided => Medium
** Changed in: tsclient (Ubuntu Hardy)
Assignee: (unassigned) => Jamie Strandboge (jdstrand)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.
https://bugs.launchpad.net/bugs/296682
Title:
tsclient stores user/password as clear text
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
