dx-packages team mailing list archive

[Launchpad Bug Tracker <1314247@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package unity -
7.2.0+14.04.20140423-0ubuntu1.2

---------------
unity (7.2.0+14.04.20140423-0ubuntu1.2) trusty-security; urgency=medium

  * SECURITY UPDATE: more lock screen bypass issues, and regression with
    shutdown dialog (LP: #1314247)
    - debian/patches/lp1314247.patch: improve popup menu handling in
      lockscreen/LockScreenShield.cpp, lockscreen/LockScreenPanel.cpp,
      services/panel-service.c, plugins/unityshell/src/unityshell.cpp,
      lockscreen/LockScreenController.*, shutdown/SessionController.cpp,
      tests/test_session_controller.cpp.
 -- Marc Deslauriers <marc.deslauriers@xxxxxxxxxx>   Wed, 30 Apr 2014 11:11:18 -0400

** Changed in: unity (Ubuntu Trusty)
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of DX
Packages, which is subscribed to unity in Ubuntu.
Matching subscriptions: dx-packages
https://bugs.launchpad.net/bugs/1314247

Title:
  lock screen bypass with ctrl+alt+t

Status in Unity:
  In Progress
Status in “unity” package in Ubuntu:
  Confirmed
Status in “unity” source package in Trusty:
  Fix Released
Status in “unity” source package in Utopic:
  Confirmed

Bug description:
  I can still bypass the logscreen by rightclicking the indicators some
  times and then pressing CTRL+ALT+t.

  I lock the screen with CTRL+ALT+L.

  Then i rightclick on the indicators ( volume, calendar, shutdown) a
  few times. I have not yet figured out if one of them is the cause...
  But pressing CTRL+ALT+T shortly after some of those events will open a
  terminal that i can type into and that will execute commands.

To manage notifications about this bug go to:
https://bugs.launchpad.net/unity/+bug/1314247/+subscriptions