This bug was fixed in the package gdm3 - 3.24.1-0ubuntu0.2 --------------- gdm3 (3.24.1-0ubuntu0.2) zesty-security; urgency=medium
* SECURITY UPDATE: lock screen bypass when autologin enabled - debian/patches/CVE-2017-12164.patch: daemon/gdm-manager.c: only allow autologin from initial display (LP: #1729354) - CVE-2017-12164 -- Jeremy Bicha <jbi...@ubuntu.com> Wed, 01 Nov 2017 11:16:26 -0400 ** Changed in: gdm3 (Ubuntu) Status: Triaged => Fix Released -- You received this bug notification because you are a member of Ubuntu Desktop Bugs, which is subscribed to gdm3 in Ubuntu. https://bugs.launchpad.net/bugs/1729354 Title: 17.04: GDM lock screen can be circumvented when autologin is set To manage notifications about this bug go to: https://bugs.launchpad.net/gdm/+bug/1729354/+subscriptions -- desktop-bugs mailing list desktop-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/desktop-bugs