| 2011-10-17 15:50:12 |
Holger Hans Peter Freyther |
bug |
|
|
added bug |
| 2011-10-21 17:04:08 |
Walter Garcia-Fontes |
affects |
ubuntu |
cryptsetup (Ubuntu) |
|
| 2011-10-21 17:04:44 |
Walter Garcia-Fontes |
cryptsetup (Ubuntu): status |
New |
Incomplete |
|
| 2011-10-21 17:04:49 |
Walter Garcia-Fontes |
bug |
|
|
added subscriber Walter Garcia-Fontes |
| 2011-10-21 17:20:02 |
Holger Hans Peter Freyther |
tags |
|
apport-collected oneiric |
|
| 2011-10-21 17:20:04 |
Holger Hans Peter Freyther |
description |
Boot
1.) Enter crypto phrase for /
2.) ... init things...
3.) Enter crypto phrase for /home
On 3rd the password is echoed as such, only after pressing enter it prints the passwords again with stars.
Enter passphrase: ABCDEF ENTER
Enter passphrase: ******* |
Boot
1.) Enter crypto phrase for /
2.) ... init things...
3.) Enter crypto phrase for /home
On 3rd the password is echoed as such, only after pressing enter it prints the passwords again with stars.
Enter passphrase: ABCDEF ENTER
Enter passphrase: *******
---
ApportVersion: 1.23-0ubuntu3
Architecture: i386
DistroRelease: Ubuntu 11.10
Package: cryptsetup 2:1.1.3-4ubuntu2
PackageArchitecture: i386
ProcEnviron:
SHELL=/bin/bash
PATH=(custom, no user)
LANG=en_US.UTF-8
LANGUAGE=en_US:en
ProcVersionSignature: Ubuntu 3.0.0-12.20-generic 3.0.4
Tags: oneiric
Uname: Linux 3.0.0-12-generic i686
UpgradeStatus: Upgraded to oneiric on 2011-10-15 (5 days ago)
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare usrp
crypttab:
vg_xiaoyu-root_crypt UUID=8ef6fb8f-ada6-464c-8ba3-d3ceed02ccdd none luks
vg_xiaoyu-home_crypt UUID=e0aa6c3d-21b1-4ae9-a0db-17b81f13a2cf none luks
vg_xiaoyu-swap_crypt /dev/mapper/vg_xiaoyu-swap /dev/urandom cipher=aes-cbc-essiv:sha256,size=256,swap |
|
| 2011-10-21 17:20:05 |
Holger Hans Peter Freyther |
attachment added |
|
Dependencies.txt https://bugs.launchpad.net/bugs/876626/+attachment/2564789/+files/Dependencies.txt |
|
| 2011-10-21 17:20:06 |
Holger Hans Peter Freyther |
attachment added |
|
fstab.txt https://bugs.launchpad.net/bugs/876626/+attachment/2564790/+files/fstab.txt |
|
| 2011-10-21 17:27:42 |
Walter Garcia-Fontes |
cryptsetup (Ubuntu): status |
Incomplete |
New |
|
| 2011-10-28 05:19:42 |
Launchpad Janitor |
cryptsetup (Ubuntu): status |
New |
Confirmed |
|
| 2011-11-02 20:45:12 |
Gema Gomez |
security vulnerability |
no |
yes |
|
| 2011-11-03 21:40:27 |
Gema Gomez |
bug |
|
|
added subscriber Gema Gomez |
| 2011-11-05 17:53:19 |
ilf |
bug |
|
|
added subscriber ilf |
| 2011-11-07 07:30:42 |
Gema Gomez |
affects |
cryptsetup (Ubuntu) |
plymouth (Ubuntu) |
|
| 2011-11-08 16:16:49 |
Toon |
bug |
|
|
added subscriber Toon |
| 2011-11-20 14:32:12 |
Cybjit |
attachment added |
|
Graphical boot messed up, password echoes https://bugs.launchpad.net/ubuntu/+source/plymouth/+bug/876626/+attachment/2602738/+files/plymouth-debug-graphical-echoed.log |
|
| 2011-11-20 14:32:50 |
Cybjit |
attachment added |
|
Console boot selected, password echoes https://bugs.launchpad.net/ubuntu/+source/plymouth/+bug/876626/+attachment/2602739/+files/plymouth-debug-console-echoed.log |
|
| 2011-11-20 14:33:29 |
Cybjit |
attachment added |
|
Graphical boot OK, password hidden with dots https://bugs.launchpad.net/ubuntu/+source/plymouth/+bug/876626/+attachment/2602740/+files/plymouth-debug-graphical-hidden.log |
|
| 2011-11-20 14:43:45 |
Cybjit |
bug |
|
|
added subscriber Cybjit |
| 2011-11-21 05:04:08 |
C |
bug |
|
|
added subscriber C |
| 2011-11-22 11:37:08 |
Hokema |
bug |
|
|
added subscriber Hokema |
| 2011-11-25 22:48:05 |
Steve Langasek |
bug task added |
|
upstart (Ubuntu) |
|
| 2011-11-25 22:56:19 |
Steve Langasek |
upstart (Ubuntu): importance |
Undecided |
High |
|
| 2011-11-25 22:56:19 |
Steve Langasek |
upstart (Ubuntu): status |
New |
Confirmed |
|
| 2011-11-25 22:56:19 |
Steve Langasek |
upstart (Ubuntu): assignee |
|
James Hunt (jamesodhunt) |
|
| 2011-12-12 22:42:42 |
Steve Langasek |
nominated for series |
|
Ubuntu Oneiric |
|
| 2011-12-12 22:42:42 |
Steve Langasek |
bug task added |
|
plymouth (Ubuntu Oneiric) |
|
| 2011-12-12 22:42:42 |
Steve Langasek |
bug task added |
|
upstart (Ubuntu Oneiric) |
|
| 2011-12-12 22:42:42 |
Steve Langasek |
nominated for series |
|
Ubuntu Precise |
|
| 2011-12-12 22:42:42 |
Steve Langasek |
bug task added |
|
plymouth (Ubuntu Precise) |
|
| 2011-12-12 22:42:42 |
Steve Langasek |
bug task added |
|
upstart (Ubuntu Precise) |
|
| 2011-12-13 17:35:04 |
Jamie Strandboge |
plymouth (Ubuntu Oneiric): status |
New |
Confirmed |
|
| 2011-12-13 17:35:06 |
Jamie Strandboge |
upstart (Ubuntu Oneiric): status |
New |
Confirmed |
|
| 2012-01-08 11:07:31 |
outa |
bug |
|
|
added subscriber outa |
| 2012-01-12 08:12:34 |
Rick Spencer |
plymouth (Ubuntu Precise): assignee |
|
Canonical Security Team (canonical-security) |
|
| 2012-01-12 08:13:11 |
Rick Spencer |
plymouth (Ubuntu Precise): assignee |
Canonical Security Team (canonical-security) |
|
|
| 2012-02-11 20:46:09 |
twoborg |
bug |
|
|
added subscriber twoborg |
| 2012-02-15 19:19:20 |
Steve Langasek |
upstart (Ubuntu Precise): assignee |
James Hunt (jamesodhunt) |
Stéphane Graber (stgraber) |
|
| 2012-02-16 22:48:25 |
Brian Murray |
upstart (Ubuntu Oneiric): importance |
Undecided |
Medium |
|
| 2012-02-16 22:48:30 |
Brian Murray |
upstart (Ubuntu Oneiric): importance |
Medium |
High |
|
| 2012-03-05 16:28:19 |
Steve Langasek |
upstart (Ubuntu Precise): assignee |
Stéphane Graber (stgraber) |
Adam Conrad (adconrad) |
|
| 2012-03-05 17:19:35 |
twoborg |
removed subscriber twoborg |
|
|
|
| 2012-03-14 13:28:28 |
tekstr1der |
bug |
|
|
added subscriber tekstr1der |
| 2012-03-20 20:05:51 |
komputes |
tags |
apport-collected oneiric |
apport-collected css-sponsored-p oneiric |
|
| 2012-03-20 20:40:57 |
komputes |
tags |
apport-collected css-sponsored-p oneiric |
apport-collected css-sponsored-p oneiric rls-mgr-p-tracking |
|
| 2012-04-02 13:27:18 |
Philippe Rigault |
bug |
|
|
added subscriber Philippe Rigault |
| 2012-04-19 03:41:56 |
Steve Langasek |
upstart (Ubuntu Precise): milestone |
|
ubuntu-12.04.1 |
|
| 2012-04-19 03:42:03 |
Steve Langasek |
tags |
apport-collected css-sponsored-p oneiric rls-mgr-p-tracking |
apport-collected css-sponsored-p oneiric rls-mgr-p-tracking rls-p-tracking |
|
| 2012-04-19 15:56:29 |
James Hunt |
upstart (Ubuntu Precise): assignee |
Adam Conrad (adconrad) |
James Hunt (jamesodhunt) |
|
| 2012-04-19 20:17:49 |
Steve Langasek |
description |
Boot
1.) Enter crypto phrase for /
2.) ... init things...
3.) Enter crypto phrase for /home
On 3rd the password is echoed as such, only after pressing enter it prints the passwords again with stars.
Enter passphrase: ABCDEF ENTER
Enter passphrase: *******
---
ApportVersion: 1.23-0ubuntu3
Architecture: i386
DistroRelease: Ubuntu 11.10
Package: cryptsetup 2:1.1.3-4ubuntu2
PackageArchitecture: i386
ProcEnviron:
SHELL=/bin/bash
PATH=(custom, no user)
LANG=en_US.UTF-8
LANGUAGE=en_US:en
ProcVersionSignature: Ubuntu 3.0.0-12.20-generic 3.0.4
Tags: oneiric
Uname: Linux 3.0.0-12-generic i686
UpgradeStatus: Upgraded to oneiric on 2011-10-15 (5 days ago)
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare usrp
crypttab:
vg_xiaoyu-root_crypt UUID=8ef6fb8f-ada6-464c-8ba3-d3ceed02ccdd none luks
vg_xiaoyu-home_crypt UUID=e0aa6c3d-21b1-4ae9-a0db-17b81f13a2cf none luks
vg_xiaoyu-swap_crypt /dev/mapper/vg_xiaoyu-swap /dev/urandom cipher=aes-cbc-essiv:sha256,size=256,swap |
Boot
1.) Enter crypto phrase for /
2.) ... init things...
3.) Enter crypto phrase for /home
On 3rd the password is echoed as such, only after pressing enter it prints the passwords again with stars.
Enter passphrase: ABCDEF ENTER
Enter passphrase: *******
Workaround: install the plymouth-theme-ubuntu-logo package if not already installed, and boot with the 'splash' option
---
ApportVersion: 1.23-0ubuntu3
Architecture: i386
DistroRelease: Ubuntu 11.10
Package: cryptsetup 2:1.1.3-4ubuntu2
PackageArchitecture: i386
ProcEnviron:
SHELL=/bin/bash
PATH=(custom, no user)
LANG=en_US.UTF-8
LANGUAGE=en_US:en
ProcVersionSignature: Ubuntu 3.0.0-12.20-generic 3.0.4
Tags: oneiric
Uname: Linux 3.0.0-12-generic i686
UpgradeStatus: Upgraded to oneiric on 2011-10-15 (5 days ago)
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare usrp
crypttab:
vg_xiaoyu-root_crypt UUID=8ef6fb8f-ada6-464c-8ba3-d3ceed02ccdd none luks
vg_xiaoyu-home_crypt UUID=e0aa6c3d-21b1-4ae9-a0db-17b81f13a2cf none luks
vg_xiaoyu-swap_crypt /dev/mapper/vg_xiaoyu-swap /dev/urandom cipher=aes-cbc-essiv:sha256,size=256,swap |
|
| 2012-04-23 19:42:26 |
James Hunt |
upstart (Ubuntu Precise): status |
Confirmed |
In Progress |
|
| 2012-04-24 20:32:33 |
Launchpad Janitor |
branch linked |
|
lp:~vorlon/ubuntu/precise/upstart/lp.876626 |
|
| 2012-04-25 06:17:32 |
Martin Pitt |
upstart (Ubuntu Oneiric): status |
Confirmed |
Fix Committed |
|
| 2012-04-25 06:17:35 |
Martin Pitt |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2012-04-25 06:17:38 |
Martin Pitt |
bug |
|
|
added subscriber SRU Verification |
| 2012-04-25 06:17:40 |
Martin Pitt |
tags |
apport-collected css-sponsored-p oneiric rls-mgr-p-tracking rls-p-tracking |
apport-collected css-sponsored-p oneiric rls-mgr-p-tracking rls-p-tracking verification-needed |
|
| 2012-04-25 23:50:16 |
Steve Langasek |
description |
Boot
1.) Enter crypto phrase for /
2.) ... init things...
3.) Enter crypto phrase for /home
On 3rd the password is echoed as such, only after pressing enter it prints the passwords again with stars.
Enter passphrase: ABCDEF ENTER
Enter passphrase: *******
Workaround: install the plymouth-theme-ubuntu-logo package if not already installed, and boot with the 'splash' option
---
ApportVersion: 1.23-0ubuntu3
Architecture: i386
DistroRelease: Ubuntu 11.10
Package: cryptsetup 2:1.1.3-4ubuntu2
PackageArchitecture: i386
ProcEnviron:
SHELL=/bin/bash
PATH=(custom, no user)
LANG=en_US.UTF-8
LANGUAGE=en_US:en
ProcVersionSignature: Ubuntu 3.0.0-12.20-generic 3.0.4
Tags: oneiric
Uname: Linux 3.0.0-12-generic i686
UpgradeStatus: Upgraded to oneiric on 2011-10-15 (5 days ago)
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare usrp
crypttab:
vg_xiaoyu-root_crypt UUID=8ef6fb8f-ada6-464c-8ba3-d3ceed02ccdd none luks
vg_xiaoyu-home_crypt UUID=e0aa6c3d-21b1-4ae9-a0db-17b81f13a2cf none luks
vg_xiaoyu-swap_crypt /dev/mapper/vg_xiaoyu-swap /dev/urandom cipher=aes-cbc-essiv:sha256,size=256,swap |
[Impact]
This bug makes cryptsetup unusable in select configurations because passwords are exposed on the console.
[Development Fix]
Package will be copied to quantal when the archive opens.
[Test Case]
1. cat > /etc/init/plymouth-testing.conf
start on starting rc RUNLEVEL=[2345]
task
exec plymouth ask-for-password --prompt="Password prompt test: "
^D
2. echo FRAMEBUFFER=y > /etc/initramfs-tools/conf.d/plymouth-testing
3. update-initramfs -u
4. boot without 'splash' on the kernel commandline
5. type at the password prompt and confirm that the keypresses are shown.
6. hit enter to resume boot
7. install upstart from -proposed
8. reboot, again without 'splash' on the kernel commandline
9. type at the password prompt again, to confirm that the keypresses are not shown.
10. rm /etc/init/plymouth-testing.conf /etc/initramfs-tools/conf.d/plymouth-testing
[Regression Potential]
In the event that an upstart job needs access to the console before plymouth has initialized the settings, the console will not be guaranteed to be in a correct state.
Boot
1.) Enter crypto phrase for /
2.) ... init things...
3.) Enter crypto phrase for /home
On 3rd the password is echoed as such, only after pressing enter it prints the passwords again with stars.
Enter passphrase: ABCDEF ENTER
Enter passphrase: *******
Workaround: install the plymouth-theme-ubuntu-logo package if not already installed, and boot with the 'splash' option
---
ApportVersion: 1.23-0ubuntu3
Architecture: i386
DistroRelease: Ubuntu 11.10
Package: cryptsetup 2:1.1.3-4ubuntu2
PackageArchitecture: i386
ProcEnviron:
SHELL=/bin/bash
PATH=(custom, no user)
LANG=en_US.UTF-8
LANGUAGE=en_US:en
ProcVersionSignature: Ubuntu 3.0.0-12.20-generic 3.0.4
Tags: oneiric
Uname: Linux 3.0.0-12-generic i686
UpgradeStatus: Upgraded to oneiric on 2011-10-15 (5 days ago)
UserGroups: adm admin cdrom dialout lpadmin plugdev sambashare usrp
crypttab:
vg_xiaoyu-root_crypt UUID=8ef6fb8f-ada6-464c-8ba3-d3ceed02ccdd none luks
vg_xiaoyu-home_crypt UUID=e0aa6c3d-21b1-4ae9-a0db-17b81f13a2cf none luks
vg_xiaoyu-swap_crypt /dev/mapper/vg_xiaoyu-swap /dev/urandom cipher=aes-cbc-essiv:sha256,size=256,swap |
|
| 2012-04-26 10:36:55 |
Martin Pitt |
nominated for series |
|
Ubuntu Quantal |
|
| 2012-04-26 10:36:55 |
Martin Pitt |
bug task added |
|
plymouth (Ubuntu Quantal) |
|
| 2012-04-26 10:36:55 |
Martin Pitt |
bug task added |
|
upstart (Ubuntu Quantal) |
|
| 2012-04-26 10:37:14 |
Martin Pitt |
upstart (Ubuntu Precise): status |
In Progress |
Fix Committed |
|
| 2012-04-26 21:53:56 |
Steve Langasek |
plymouth (Ubuntu Oneiric): status |
Confirmed |
Invalid |
|
| 2012-04-26 21:53:58 |
Steve Langasek |
plymouth (Ubuntu Precise): status |
Confirmed |
Invalid |
|
| 2012-04-26 21:54:02 |
Steve Langasek |
plymouth (Ubuntu Quantal): status |
New |
Triaged |
|
| 2012-05-02 06:36:05 |
Launchpad Janitor |
upstart (Ubuntu Quantal): status |
New |
Confirmed |
|
| 2012-05-04 23:36:21 |
Launchpad Janitor |
upstart (Ubuntu Quantal): status |
Confirmed |
Fix Released |
|
| 2012-05-05 01:17:37 |
Steve Langasek |
tags |
apport-collected css-sponsored-p oneiric rls-mgr-p-tracking rls-p-tracking verification-needed |
apport-collected css-sponsored-p oneiric rls-mgr-p-tracking rls-p-tracking verification-done |
|
| 2012-05-05 01:18:51 |
Launchpad Janitor |
upstart (Ubuntu Precise): status |
Fix Committed |
Fix Released |
|
| 2012-05-05 01:19:58 |
Launchpad Janitor |
upstart (Ubuntu Oneiric): status |
Fix Committed |
Fix Released |
|
| 2012-06-20 20:10:03 |
Steve Langasek |
plymouth (Ubuntu Quantal): status |
Triaged |
Fix Released |
|
| 2012-10-19 15:06:31 |
Simon Déziel |
bug |
|
|
added subscriber Simon Déziel |
