[Bug 1121201] [NEW] automatic update ran WITHOUT root-password

Launchpad Bug Tracker 1121201 at bugs.launchpad.net
Wed Feb 20 12:58:10 UTC 2013


*** This bug is a security vulnerability ***

You have been subscribed to a public security bug:

   BACKGROUND, PROCEDURE:

Newly installed 12.04.
   Ubuntu 12.04.2 LTS

Made some CONFIGURATION modifications of GNOME and GNOME-3 type (on instructions from web, which I don't recall)
Now have COMPIZ ? drop down on top-line for settings (similar to 10.04 but on right)

BY RED "bomb-like"  SYMBOL ON TOP LINE was notified of available
updates,  clicked it.

On resulting menu, clicked something like INSTALL.

   THE BUG:

I expected (as 10.04) to be asked for a password. 
  BUG: I wasn't asked for root password.
Sounds like a SECURITY BUG.

** Affects: update-notifier (Ubuntu)
     Importance: Undecided
         Status: Invalid

-- 
automatic update ran WITHOUT root-password
https://bugs.launchpad.net/bugs/1121201
You received this bug notification because you are a member of Ubuntu Foundations Bugs, which is subscribed to update-notifier in Ubuntu.




More information about the foundations-bugs mailing list