ubuntustudio-bugs team mailing list archive

[Launchpad Bug Tracker <2016436@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package calamares-settings-ubuntu -
1:22.04.4.3

---------------
calamares-settings-ubuntu (1:22.04.4.3) jammy-security; urgency=medium

  * Don't allow the first user to be created with a blank password in either
    Lubuntu or Ubuntu Studio. (LP: #2016436)

 -- Erich Eickmeyer <eeickmeyer@xxxxxxxxxx>  Mon, 17 Apr 2023 13:56:57
-0700

** Changed in: calamares-settings-ubuntu (Ubuntu Jammy)
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Studio Bugs, which is subscribed to calamares-settings-ubuntu in Ubuntu.
https://bugs.launchpad.net/bugs/2016436

Title:
  Calamares will let you set up a user account with no password

Status in calamares-settings-ubuntu package in Ubuntu:
  Fix Released
Status in calamares-settings-ubuntu source package in Jammy:
  Fix Released
Status in calamares-settings-ubuntu source package in Lunar:
  Fix Released

Bug description:
  Steps to reproduce:

  1. Boot the Lubuntu Lunar Final ISO.
  2. Install Lubuntu, but when you are asked to provide initial user account details, leave the password blank.
  3. Finish the installation.

  Expected result: You should be unable to proceed past the user account
  creation screen until you provide a password.

  Actual result: You can proceed through the installation process
  without providing a password. The resulting user account's password
  will be entirely blank, allowing you to log in by simply pressing
  "Enter" at the SDDM screen. sudo will also work if you simply press
  "Enter" when asked for your password.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/calamares-settings-ubuntu/+bug/2016436/+subscriptions