group.of.nepali.translators team mailing list archive

[Michael Vogt <michael.vogt@xxxxxxxxxxxxx>]

** Also affects: snappy
   Importance: Undecided
       Status: New

** Changed in: snappy
       Status: New => Fix Released

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1571491

Title:
  possible auth bypass

Status in Snappy:
  Fix Released
Status in snapd package in Ubuntu:
  Fix Released
Status in snapd source package in Xenial:
  Fix Released

Bug description:
  The snapd authentication can by bypassed by sending invalid auth:
  headers and logout is not revmoing the local authentication data.

  Regression potential: worst case is that snap authentication no longer
  works which is preferable to an auth bypass.

To manage notifications about this bug go to:
https://bugs.launchpad.net/snappy/+bug/1571491/+subscriptions