[Bug 1031465] Re: ~/crypted_pass.cfg created with insecure permissions

[Salvatore Bonaccorso]

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5577

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-5578

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to python-keyring in Ubuntu.
https://bugs.launchpad.net/bugs/1031465

Title:
  ~/crypted_pass.cfg created with insecure permissions

Status in “python-keyring” package in Ubuntu:
  Fix Released
Status in “python-keyring” source package in Oneiric:
  Fix Released
Status in “python-keyring” source package in Precise:
  Fix Released
Status in “python-keyring” source package in Quantal:
  Fix Released
Status in “python-keyring” source package in Raring:
  Fix Released

Bug description:
  When an application uses python-keyring, the ~/crypted_pass.cfg file
  is created if it doesn't already exist. This file is created with 664
  permissions and should be created with 600 permissions.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/python-keyring/+bug/1031465/+subscriptions