[Bug 1797012] Re: Fingerprint login can be changed without authentication

[Marc Deslauriers]

*** This bug is a duplicate of bug 1532264 ***
    https://bugs.launchpad.net/bugs/1532264

I am going to mark this as a dupe of bug 1532264 since it looks to be
the same root cause. Thanks!

** Information type changed from Private Security to Public Security

** This bug has been marked a duplicate of bug 1532264
   fprintd allows unauthorized root access

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to sudo in Ubuntu.
https://bugs.launchpad.net/bugs/1797012

Title:
  Fingerprint login can be changed without authentication

Status in fprintd package in Ubuntu:
  New
Status in libfprint package in Ubuntu:
  New
Status in pam-fprint package in Ubuntu:
  New
Status in sudo package in Ubuntu:
  New

Bug description:
  In Ubuntu 18.04, a new fingerprint can be registered without
  authentication, allowing the bypass of any authentication mechanism
  that is configured to use the fingerprint reader, for example, sudo.
  The version number of libfprint on my system is 1:0.7.0-1

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/fprintd/+bug/1797012/+subscriptions