Ubuntu
software-center package

Password revealed when pasted with Ctrl-V

  1. Trusty (14.04)
  2. Bug #1308354
Bug #1308354 reported by Reinis Zumbergs
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Ubuntu Software Center
Fix Released
Undecided
Unassigned
software-center (Ubuntu)
Fix Released
High
Unassigned
Trusty
Fix Released
High
Unassigned

Bug Description

Xubuntu 14.04 amd64 upgraded from 13.10

software-center 13.10-0ubuntu4

1) Open Software Center
2) Click down-arrow beside "All Software" button
3) Click "For Purchase"
4) Choose an item fx "Fragment"
5) Click "Buy..." button
6) Ubuntu single signon login screen appears
7) Copy password from password manager
8) Focus password field
9) Press Ctrl-V
10) Instead of filling the password field, new screen appears (see attached screenshot)
11) Password is revealed on screen and also run through some fuzzy search service (probably local, but who knows)

Related branches

lp:~dobey/software-center/mvo-lp1308354
dobey: Approve
Diff: 13 lines (+3/-0)
1 file modified
softwarecenter/ui/gtk3/app.py (+3/-0)
Revision history for this message
Reinis Zumbergs (reinis-zumbergs) wrote :
Matthew Paul Thomas (mpt)
Changed in software-center (Ubuntu):
importance: Undecided → High
Revision history for this message
Michael Vogt (mvo) wrote :

I can reproduce the problem and will upload a fish shortly.

Changed in software-center (Ubuntu):
status: New → In Progress
Changed in software-center:
status: New → In Progress
Revision history for this message
Michael Vogt (mvo) wrote :

Gar - it should read "upload a fix" :)

Anyway, I uploaded:
software-center (13.10-0ubuntu4.1) trusty-proposed; urgency=low

  * debian/patches/06_lp1308354.patch:
    - disable paste when the search entry is not visible (LP: 1308354)

Date: Thu, 17 Apr 2014 15:43:28 +0200
Changed-By: Michael Vogt <email address hidden>
Maintainer: Ubuntu Developers <email address hidden>
https://launchpad.net/ubuntu/trusty/+source/software-center/13.10-0ubuntu4.1

==

 OK: software-center_13.10.orig.tar.gz
 OK: software-center_13.10-0ubuntu4.1.debian.tar.gz
 OK: software-center_13.10-0ubuntu4.1.dsc
     -> Component: main Section: gnome
This upload awaits approval by a distro manager

Revision history for this message
Brian Murray (brian-murray) wrote :

I installed software-center version 13.10-0ubuntu4.1 from trusty-proposed and confirm that Ctrl-V no longer does anything and that my password does not appear anywhere.

tags: added: trusty verification-done
Changed in software-center (Ubuntu Trusty):
status: In Progress → Fix Committed
Adam Conrad (adconrad)
Changed in software-center (Ubuntu Trusty):
status: Fix Committed → Fix Released
Revision history for this message
Ubuntu QA Website (ubuntuqa) wrote :

This bug has been reported on the Ubuntu ISO testing tracker.

A list of all reports related to this bug can be found here:
http://iso.qa.ubuntu.com/qatracker/reports/bugs/1308354

tags: added: iso-testing
Adolfo Jayme Barrientos (fitojb)
Changed in software-center:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.