Online Installation Guide contains link to page with pornography

[Connor Imes]

Binary package hint: ubuntu-docs

Per https://lists.ubuntu.com/archives/ubuntu-doc/2009-August/013541.html

The page https://help.ubuntu.com/9.04/installation-guide/i386/what-is-linux.html has a link to kerneltraffic.org which possibly has been hacked as there is pornography displayed on the page. All Ubuntu versions listings are affected on the h.u.c website (i.e. 8.04/, 8.10/, 9.04/).

Links to: http://www.kerneltraffic.org/kernel-traffic/index.html

I could find no reference to this link in the system docs, only in the html files in the "lp:~ubuntu-core-doc/ubuntu-docs/help.ubuntu.com" branch. I'm sorry that I don't know how to provide patches for this since I can't find the reference in the system docs.

I am marking this bug as a security vulnerability as the website in question may contain malicious code; bug should be private. Please be cautious of viewing without adequate protection (disable cookies, block javascripts, etc). However, material does not show if javascript is disabled.

[Dougie Richardson (dougierichardson)]

This file isn't part of our branch, it's in installation-guide.

[Connor Imes (ckimes)]

Thanks Dougie, that explains why I couldn't find it. A bit confusing since we have an installation-guide section in our serverguide. Sorry for the confusion.

[Matthew East (mdke)]

I think the correct url to use might be http://kerneltraffic.osmirror.nl/ - but that page indicates that the project is not being updated so it is probably safer to remove the link entirely.

[Matthew East (mdke)]

Here is a patch on the bzr branch at ~ubuntu-core-dev/installation-guide/ubuntu/.

I haven't updated the translations and probably it's a patch that is best applied upstream if the bug exists there.

[Matthew East (mdke)]

I've pushed an update to help.ubuntu.com to remove the link using the patch in comment 4. That takes care of the website.

The fix should also be implemented in the installation-guide package.

[Brian Murray (brian-murray)]

Attached is a debdiff that will resolve the issue in the karmic version of installation-guide.

[Launchpad Janitor (janitor)]

This bug was fixed in the package installation-guide - 20081208ubuntu5

---------------
installation-guide (20081208ubuntu5) karmic; urgency=low

  * Remove link to kerneltraffic.org since it no longer contains any
    linux kernel information (LP: #415108)

 -- Brian Murray <email address hidden> Fri, 28 Aug 2009 10:42:59 -0700

[Matthew East (mdke)]

Ouch, I wasn't aware Ubuntu was open targets on all distributions for both ubuntu-docs and installation-guide. I meant just to open targets on installation-guide.

[Matthew East (mdke)]

I spoke to Colin Watson on irc and he considers that this bug doesn't warrant an SRU to fix the package in other versions. So I'm rejecting those bug tasks and the bug can be regarded as fixed.