PPA upload rejected with name of unrelated person

Bug #987053 reported by Ryan Finnie
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
New
Undecided
Unassigned

Bug Description

[Marked security because of information disclosure]

When I attempted to upload to one of my PPAs (ppa:fo0bar/colobox), I accidentally put in an invalid PPA user (ppa:rfinnie/colobox). The upload was rejected, however the email that came back mentioned a completely unrelated LP user, trevormosey. He appears to have no GPG keys, no PPA use, etc, so I'm not sure how his name got in there.

Attaching a copy of the email below.

Revision history for this message
Ryan Finnie (fo0bar) wrote :

Content-Type: multipart/mixed; boundary="===============6098525363734763167=="
MIME-Version: 1.0
from: Launchpad PPA <email address hidden>
subject: [PPA trevormosey] 2ping_2.0-1~rf.precise.1_source.changes rejected
to: Ryan Finnie <email address hidden>
X-Katie: Launchpad actually
X-Launchpad-PPA: trevormosey
Message-Id: <email address hidden>
Date: Mon, 23 Apr 2012 00:20:21 -0000
Reply-To: Launchpad PPA <email address hidden>
Sender: <email address hidden>
Errors-To: <email address hidden>
Precedence: bulk
X-Generated-By: Launchpad (canonical.com); Revision="15120";
 Instance="launchpad-lazr.conf"
X-Launchpad-Hash: ac051c629f099ca03a6d8ce4ad8f4b684afea3ef
X-Mailcontrol-Inbound: uq3drnD2P+ps5SfEb0fvr78+NoP1DHBZwGqKpaXB2eTgNv8D6KLIxb8+NoP1DHBZ8VSaBg0k0xw=
X-Spam-Score: 1.1
X-Scanned-By: MailControl 7.7.0 (www.mailcontrol.com) on 10.74.0.136

--===============6098525363734763167==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable

Rejected:
Launchpad failed to process the upload path '~rfinnie/colobox/ubuntu':

Could not find person or team named 'rfinnie'.

It is likely that you have a configuration problem with dput/dupload.
Please check the documentation at https://help.launchpad.net/Packaging/PPA#=
Uploading and update your configuration.

Further error processing not possible because of a critical previous error.

=3D=3D=3D

If you don't understand why your files were rejected please send an email
to <email address hidden> for help (requires membership).

--
https://launchpad.net/~trevormosey/+archive/ppa
You are receiving this email because you are the uploader of the above
PPA package.

--===============6098525363734763167==--

William Grant (wgrant)
security vulnerability: yes → no
visibility: private → public
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.