*** This bug is a security vulnerability ***

You have been subscribed to a public security bug by Marc Deslauriers 
(mdeslaur):

Description:    Ubuntu 12.04 LTS
Release:        12.04

mythtv-frontend:
  Installed: 2:0.25.0+fixes.20120410.1f5962a-0ubuntu1
  Candidate: 2:0.25.0+fixes.20120410.1f5962a-0ubuntu1
  Version table:
 *** 2:0.25.0+fixes.20120410.1f5962a-0ubuntu1 0
        500 http://archive.ubuntu.com/ubuntu/ precise/multiverse amd64 Packages
        100 /var/lib/dpkg/status

Steps to reproduce:
1) Have multiple items in your video library tagged as parental control level 4
2) Setup -> Media Settings -> Video Settings -> General Settings
3) On Screen 3, observe that Starting Parental Level is set to "1 - Lowest"
4) Media Library -> Watch Videos
5) Observe that videos which were tagged as level 4 are already visible.
6) Pressing "1" to switch to level 1 has no effect.
7) Pressing "4" to switch to level 4 prompts for a pin as designed, no visible 
changes (level 4 was already visible)
8) Pressing "1" again at this point causes the level 4 titles to be removed 
from the display.

Justification for marking as security:
- Security restrictions bypass, allows minors without the parental control pin 
to potentially view explicit content.

** Affects: mythtv (Ubuntu)
     Importance: Undecided
         Status: New

-- 
Starting parental control level not honored in video gallery
https://bugs.launchpad.net/bugs/986655
You received this bug notification because you are a member of Ubuntu Bugs, 
which is subscribed to the bug report.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to