← Back to team overview

aims team mailing list archive

[Bug 1308572] Re: Ubuntu 14.04: security problem in the lock screen

 

Just another sidenote: I'm unaffected by this bug, because I always use xscreensaver instead of those newer unsecure rewrites.
People concerned about security might want to read the
http://www.jwz.org/blog/2014/04/the-awful-thing-about-getting-it-right-the-first-time-is-that-nobody-realizes-how-hard-it-was/
blog post of Jamie Zawinski who has written xscreensaver.

-- 
You received this bug notification because you are a member of AIMS,
which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1308572

Title:
  Ubuntu 14.04: security problem in the lock screen

Status in Unity:
  Fix Released
Status in “unity” package in Ubuntu:
  Fix Released

Bug description:
  affects ubuntu

  Hello,
  I am running Ubuntu 14.04 with all the packages updated.
  When the screen is locked with password, if I hold ENTER after some
  seconds the screen freezes and the lock screen crashes. After that I
  have the computer fully unlocked.

  --
  Marco Agnese

  This bug is about the lockscreen being bypassed when unity
  crashes/restarts, which is a critcal security issue. The crash will be
  handled from bug 1308750

To manage notifications about this bug go to:
https://bugs.launchpad.net/unity/+bug/1308572/+subscriptions