[Bug 783405] Re: Mumble stores passwords in plain text in a globally readable sqlite DB
Launchpad Bug Tracker
783405 at bugs.launchpad.net
Mon Feb 20 01:05:05 UTC 2012
This bug was fixed in the package mumble - 1.2.3-1ubuntu6.1
---------------
mumble (1.2.3-1ubuntu6.1) natty-security; urgency=low
* SECURITY UPDATE: credential disclosure via incorrect permissions
(LP: #783405)
- debian/patches/0004-set-file-permissions.patch: Set restrictive
permissions on data files.
- CVE-2012-0863
* debian/control: reorder Build-Depends so it builds in a schroot.
-- Marc Deslauriers <marc.deslauriers at ubuntu.com> Fri, 17 Feb 2012 08:36:11 -0500
** Changed in: mumble (Ubuntu Maverick)
Status: Confirmed => Fix Released
--
You received this bug notification because you are a member of Debian
VoIP Team, which is subscribed to mumble in Ubuntu.
https://bugs.launchpad.net/bugs/783405
Title:
Mumble stores passwords in plain text in a globally readable sqlite DB
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mumble/+bug/783405/+subscriptions
More information about the Pkg-voip-maintainers
mailing list