[Bug 783405] Re: Mumble stores passwords in plain text in a globally readable sqlite DB

Mon Feb 20 01:05:05 UTC 2012

This bug was fixed in the package mumble - 1.2.3-2ubuntu2.1

---------------
mumble (1.2.3-2ubuntu2.1) oneiric-security; urgency=low

  * SECURITY UPDATE: credential disclosure via incorrect permissions
    (LP: #783405)
    - debian/patches/0004-set-file-permissions.patch: Set restrictive
      permissions on data files.
    - CVE-2012-0863
 -- Marc Deslauriers <marc.deslauriers at ubuntu.com>   Fri, 17 Feb 2012 08:33:17 -0500

** Changed in: mumble (Ubuntu Oneiric)
       Status: Confirmed => Fix Released

** Changed in: mumble (Ubuntu Natty)
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Debian
VoIP Team, which is subscribed to mumble in Ubuntu.
https://bugs.launchpad.net/bugs/783405

Title:
  Mumble stores passwords in plain text in a globally readable sqlite DB

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mumble/+bug/783405/+subscriptions