desktop-packages team mailing list archive

[Marc Deslauriers <marc.deslauriers@xxxxxxxxxxxxx>]

Thanks for updating the bug, I'm closing it as per your last comment.

** Visibility changed to: Public

** Visibility changed to: Public

** Changed in: gdm (Ubuntu)
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to gdm in Ubuntu.
https://bugs.launchpad.net/bugs/858725

Title:
  Login screen can display password

Status in “gdm” package in Ubuntu:
  Invalid

Bug description:
  Hi

  I have noticed that under certain conditions the login screen can display part of the user's password. I have marked this as a security issue because this bug could result in a third party being able to read this, especially if the user doesn't look at the screen as (s)he is typing (as a lot of people do) as they risk only noticing when it is too late. Here is how I can reproduce this bug:
  1) Type in some numbers in the numeric keyboard with the num lock off. The cursor doesn't move
  2) Now type letters or symbols. These are displayed in the password box

  ProblemType: Bug
  DistroRelease: Ubuntu 11.10
  Package: gdm (not installed)
  ProcVersionSignature: Ubuntu 3.0.0-11.18-generic 3.0.4
  Uname: Linux 3.0.0-11-generic x86_64
  NonfreeKernelModules: fglrx
  ApportVersion: 1.23-0ubuntu1
  Architecture: amd64
  Date: Sun Sep 25 10:05:34 2011
  ProcEnviron:
   PATH=(custom, no user)
   LANG=en_US.UTF-8
   SHELL=/bin/bash
  SourcePackage: gdm
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gdm/+bug/858725/+subscriptions