[Bug 783405] Re: Mumble stores passwords in plain text in a globally readable sqlite DB

Launchpad Bug Tracker 783405 at bugs.launchpad.net
Mon Feb 20 01:05:05 UTC 2012


This bug was fixed in the package mumble - 1.2.3-1ubuntu6.1

---------------
mumble (1.2.3-1ubuntu6.1) natty-security; urgency=low

  * SECURITY UPDATE: credential disclosure via incorrect permissions
    (LP: #783405)
    - debian/patches/0004-set-file-permissions.patch: Set restrictive
      permissions on data files.
    - CVE-2012-0863
  * debian/control: reorder Build-Depends so it builds in a schroot.
 -- Marc Deslauriers <marc.deslauriers at ubuntu.com>   Fri, 17 Feb 2012 08:36:11 -0500

** Changed in: mumble (Ubuntu Maverick)
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Debian
VoIP Team, which is subscribed to mumble in Ubuntu.
https://bugs.launchpad.net/bugs/783405

Title:
  Mumble stores passwords in plain text in a globally readable sqlite DB

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mumble/+bug/783405/+subscriptions



More information about the Pkg-voip-maintainers mailing list