| 2012-10-25 00:07:41 |
Benjamin Kerensa |
bug |
|
|
added bug |
| 2013-01-09 20:48:34 |
Samuele Pedroni |
bug |
|
|
added subscriber Samuele Pedroni |
| 2013-01-22 12:25:32 |
Michal Hruby |
branch linked |
|
lp:~bkerensa/unity-scope-video-remote/fix-for-1071079 |
|
| 2013-01-22 12:25:52 |
Michal Hruby |
branch linked |
|
lp:~mhr3/unity-lens-video/remote-scope-use-https |
|
| 2013-02-25 12:04:30 |
Timo Jyrinki |
bug task added |
|
unity-scope-video-remote (Ubuntu) |
|
| 2013-02-25 12:05:44 |
Timo Jyrinki |
nominated for series |
|
Ubuntu Precise |
|
| 2013-02-25 12:05:44 |
Timo Jyrinki |
nominated for series |
|
Ubuntu Quantal |
|
| 2013-02-25 12:37:10 |
Timo Jyrinki |
description |
What happened: SERVER = "http://videosearch.ubuntu.com/v0" string in unity-scope-video-remote does not use SSL.
What was expected: SERVER = "https://videosearch.ubuntu.com/v0" was the actual string and SSL was configured on the videosearch.ubuntu.com server.
Without SSL this scope would allow users queries to be intercepted and have malicious results returned if MitM took place. |
[Impact]
The video scope uses http instead of https, allowing user queries to be potentially intercepted.
[Test Case]
Use the video lens after the fix, check network traffic so that https is used instead of http.
[Regression Potential]
Low, the servers answers identically to https/SSL requests.
--
What happened: SERVER = "http://videosearch.ubuntu.com/v0" string in unity-scope-video-remote does not use SSL.
What was expected: SERVER = "https://videosearch.ubuntu.com/v0" was the actual string and SSL was configured on the videosearch.ubuntu.com server.
Without SSL this scope would allow users queries to be intercepted and have malicious results returned if MitM took place. |
|
| 2013-02-26 07:09:10 |
Launchpad Janitor |
branch linked |
|
lp:~unity-team/unity-lens-video/unity-scope-video-remote-precise |
|
| 2013-03-12 07:49:45 |
Timo Jyrinki |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2013-04-15 08:52:57 |
Launchpad Janitor |
branch linked |
|
lp:~timo-jyrinki/ubuntu/quantal/unity-scope-video-remote/ubuntu.038 |
|
| 2013-04-15 13:03:56 |
Sebastien Bacher |
bug task added |
|
unity-scope-video-remote (Ubuntu Precise) |
|
| 2013-04-15 13:04:20 |
Sebastien Bacher |
bug task added |
|
unity-scope-video-remote (Ubuntu Quantal) |
|
| 2013-04-15 13:04:27 |
Sebastien Bacher |
unity-scope-video-remote: status |
New |
Fix Released |
|
| 2013-04-15 13:04:29 |
Sebastien Bacher |
unity-scope-video-remote: importance |
Undecided |
Low |
|
| 2013-04-15 13:04:32 |
Sebastien Bacher |
unity-scope-video-remote (Ubuntu): status |
New |
Fix Released |
|
| 2013-04-15 13:04:34 |
Sebastien Bacher |
unity-scope-video-remote (Ubuntu): importance |
Undecided |
Low |
|
| 2013-04-15 13:07:37 |
Sebastien Bacher |
unity-scope-video-remote (Ubuntu Precise): importance |
Undecided |
Low |
|
| 2013-04-15 13:07:39 |
Sebastien Bacher |
unity-scope-video-remote (Ubuntu Quantal): importance |
Undecided |
Low |
|
| 2013-04-15 13:07:41 |
Sebastien Bacher |
unity-scope-video-remote (Ubuntu Precise): status |
New |
In Progress |
|
| 2013-04-15 13:07:44 |
Sebastien Bacher |
unity-scope-video-remote (Ubuntu Quantal): status |
New |
In Progress |
|
| 2013-04-18 23:30:33 |
Brian Murray |
unity-scope-video-remote (Ubuntu Precise): status |
In Progress |
Fix Committed |
|
| 2013-04-18 23:30:37 |
Brian Murray |
bug |
|
|
added subscriber SRU Verification |
| 2013-04-18 23:30:39 |
Brian Murray |
tags |
bitesize |
bitesize verification-needed |
|
| 2013-04-23 05:50:59 |
Timo Jyrinki |
unity-scope-video-remote (Ubuntu Quantal): assignee |
|
Timo Jyrinki (timo-jyrinki) |
|
| 2013-04-23 05:51:02 |
Timo Jyrinki |
unity-scope-video-remote (Ubuntu Precise): assignee |
|
Timo Jyrinki (timo-jyrinki) |
|
| 2013-04-23 06:10:09 |
Timo Jyrinki |
tags |
bitesize verification-needed |
bitesize verification-done |
|
| 2013-04-26 02:52:04 |
Scott Kitterman |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
| 2013-04-26 02:52:15 |
Launchpad Janitor |
unity-scope-video-remote (Ubuntu Precise): status |
Fix Committed |
Fix Released |
|
| 2013-05-21 20:43:23 |
Brian Murray |
unity-scope-video-remote (Ubuntu Quantal): status |
In Progress |
Fix Committed |
|
| 2013-05-21 20:43:26 |
Brian Murray |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2013-05-21 20:43:31 |
Brian Murray |
tags |
bitesize verification-done |
bitesize |
|
| 2013-05-21 20:43:32 |
Brian Murray |
tags |
bitesize |
bitesize verification-needed |
|
| 2013-06-05 08:34:08 |
Timo Jyrinki |
tags |
bitesize verification-needed |
bitesize verification-done |
|
| 2013-06-06 16:33:15 |
Launchpad Janitor |
unity-scope-video-remote (Ubuntu Quantal): status |
Fix Committed |
Fix Released |
|
