[Desktop-packages] [Bug 1767918] Re: Login password from GDM is shown in plain text on the VT1 console
Since this bug was marked as Fix Released some time ago, please continue discussion in the new bug 1803993 only. ** No longer affects: gdm3 (Ubuntu) ** No longer affects: gdm3 (Ubuntu Bionic) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gdm3 in Ubuntu. https://bugs.launchpad.net/bugs/1767918 Title: Login password from GDM is shown in plain text on the VT1 console Status in plymouth package in Ubuntu: Fix Released Status in plymouth source package in Bionic: Fix Released Bug description: [Impact] Sessions in specific circumstances when switching to TTY while plymouth is being activated or deactivated. [Test cases] Steps to reproduce: 1) Log-in using X11 login via GDM. 2) Use the desktop for a while. (For some reason I cannot reproduce if I login and then restart after a short while). 3) In Gnome click System menu -> Power Button -> Restart 4) Quickly press CTRL-ALT-F1 Validate whether your login password is visible on the TTY. [Regression Potential] Possible regressions may include difficulty showing text-mode splash or boot messages given that this changes the state of tty based on plymouth's own activation state. --- https://gitlab.gnome.org/GNOME/gdm/issues/408 I don't which package this applies to, but I believe the best bet is GDM. Steps to reproduce: 1) Log-in using X11 login via GDM. 2) Use the desktop for a while. (For some reason I cannot reproduce if I login and then restart after a short while). 3) In Gnome click System menu -> Power Button -> Restart 4) Quickly press CTRL-ALT-F1 5) I see my login password in plain text in the console. Once I saw the login password repeated twice. See attached photo with the login password blanked out. Below the password is the console cursor. ## lsb_release -rd Description: Ubuntu 18.04 LTS Release: 18.04 ## apt-cache policy gdm3 gdm3: Installed: 3.28.0-0ubuntu1 Candidate: 3.28.0-0ubuntu1 Version table: *** 3.28.0-0ubuntu1 500 500 http://nz.archive.ubuntu.com/ubuntu bionic/main amd64 Packages 100 /var/lib/dpkg/status ProblemType: Bug DistroRelease: Ubuntu 18.04 Package: gdm3 3.28.0-0ubuntu1 ProcVersionSignature: Ubuntu 4.15.0-18.19-generic 4.15.17 Uname: Linux 4.15.0-18-generic x86_64 ApportVersion: 2.20.9-0ubuntu7 Architecture: amd64 CurrentDesktop: ubuntu:GNOME Date: Mon Apr 30 14:54:07 2018 InstallationDate: Installed on 2018-04-13 (17 days ago) InstallationMedia: Ubuntu 18.04 LTS "Bionic Beaver" - Beta amd64 (20180404) SourcePackage: gdm3 UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/plymouth/+bug/1767918/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1767918] Re: Login password from GDM is shown in plain text on the VT1 console
Confirmed by https://askubuntu.com/q/1127408/66509 . ** Changed in: gdm3 (Ubuntu) Status: Invalid => Confirmed ** Changed in: gdm3 (Ubuntu Bionic) Status: Invalid => Confirmed -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gdm3 in Ubuntu. https://bugs.launchpad.net/bugs/1767918 Title: Login password from GDM is shown in plain text on the VT1 console Status in gdm3 package in Ubuntu: Confirmed Status in plymouth package in Ubuntu: Fix Released Status in gdm3 source package in Bionic: Confirmed Status in plymouth source package in Bionic: Fix Released Bug description: [Impact] Sessions in specific circumstances when switching to TTY while plymouth is being activated or deactivated. [Test cases] Steps to reproduce: 1) Log-in using X11 login via GDM. 2) Use the desktop for a while. (For some reason I cannot reproduce if I login and then restart after a short while). 3) In Gnome click System menu -> Power Button -> Restart 4) Quickly press CTRL-ALT-F1 Validate whether your login password is visible on the TTY. [Regression Potential] Possible regressions may include difficulty showing text-mode splash or boot messages given that this changes the state of tty based on plymouth's own activation state. --- https://gitlab.gnome.org/GNOME/gdm/issues/408 I don't which package this applies to, but I believe the best bet is GDM. Steps to reproduce: 1) Log-in using X11 login via GDM. 2) Use the desktop for a while. (For some reason I cannot reproduce if I login and then restart after a short while). 3) In Gnome click System menu -> Power Button -> Restart 4) Quickly press CTRL-ALT-F1 5) I see my login password in plain text in the console. Once I saw the login password repeated twice. See attached photo with the login password blanked out. Below the password is the console cursor. ## lsb_release -rd Description: Ubuntu 18.04 LTS Release: 18.04 ## apt-cache policy gdm3 gdm3: Installed: 3.28.0-0ubuntu1 Candidate: 3.28.0-0ubuntu1 Version table: *** 3.28.0-0ubuntu1 500 500 http://nz.archive.ubuntu.com/ubuntu bionic/main amd64 Packages 100 /var/lib/dpkg/status ProblemType: Bug DistroRelease: Ubuntu 18.04 Package: gdm3 3.28.0-0ubuntu1 ProcVersionSignature: Ubuntu 4.15.0-18.19-generic 4.15.17 Uname: Linux 4.15.0-18-generic x86_64 ApportVersion: 2.20.9-0ubuntu7 Architecture: amd64 CurrentDesktop: ubuntu:GNOME Date: Mon Apr 30 14:54:07 2018 InstallationDate: Installed on 2018-04-13 (17 days ago) InstallationMedia: Ubuntu 18.04 LTS "Bionic Beaver" - Beta amd64 (20180404) SourcePackage: gdm3 UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1767918/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1767918] Re: Login password from GDM is shown in plain text on the VT1 console
This bug was fixed in the package plymouth - 0.9.3-1ubuntu7.18.04.1 --- plymouth (0.9.3-1ubuntu7.18.04.1) bionic; urgency=medium * debian/patches/git_ensure_tty_closed_0a662723.patch: ensure tty is closed on deactivate. (LP: #1767918) -- Mathieu Trudel-Lapierre Tue, 11 Sep 2018 19:03:58 -0400 ** Changed in: plymouth (Ubuntu Bionic) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gdm3 in Ubuntu. https://bugs.launchpad.net/bugs/1767918 Title: Login password from GDM is shown in plain text on the VT1 console Status in gdm3 package in Ubuntu: Invalid Status in plymouth package in Ubuntu: Fix Released Status in gdm3 source package in Bionic: Invalid Status in plymouth source package in Bionic: Fix Released Bug description: [Impact] Sessions in specific circumstances when switching to TTY while plymouth is being activated or deactivated. [Test cases] Steps to reproduce: 1) Log-in using X11 login via GDM. 2) Use the desktop for a while. (For some reason I cannot reproduce if I login and then restart after a short while). 3) In Gnome click System menu -> Power Button -> Restart 4) Quickly press CTRL-ALT-F1 Validate whether your login password is visible on the TTY. [Regression Potential] Possible regressions may include difficulty showing text-mode splash or boot messages given that this changes the state of tty based on plymouth's own activation state. --- https://gitlab.gnome.org/GNOME/gdm/issues/408 I don't which package this applies to, but I believe the best bet is GDM. Steps to reproduce: 1) Log-in using X11 login via GDM. 2) Use the desktop for a while. (For some reason I cannot reproduce if I login and then restart after a short while). 3) In Gnome click System menu -> Power Button -> Restart 4) Quickly press CTRL-ALT-F1 5) I see my login password in plain text in the console. Once I saw the login password repeated twice. See attached photo with the login password blanked out. Below the password is the console cursor. ## lsb_release -rd Description: Ubuntu 18.04 LTS Release: 18.04 ## apt-cache policy gdm3 gdm3: Installed: 3.28.0-0ubuntu1 Candidate: 3.28.0-0ubuntu1 Version table: *** 3.28.0-0ubuntu1 500 500 http://nz.archive.ubuntu.com/ubuntu bionic/main amd64 Packages 100 /var/lib/dpkg/status ProblemType: Bug DistroRelease: Ubuntu 18.04 Package: gdm3 3.28.0-0ubuntu1 ProcVersionSignature: Ubuntu 4.15.0-18.19-generic 4.15.17 Uname: Linux 4.15.0-18-generic x86_64 ApportVersion: 2.20.9-0ubuntu7 Architecture: amd64 CurrentDesktop: ubuntu:GNOME Date: Mon Apr 30 14:54:07 2018 InstallationDate: Installed on 2018-04-13 (17 days ago) InstallationMedia: Ubuntu 18.04 LTS "Bionic Beaver" - Beta amd64 (20180404) SourcePackage: gdm3 UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1767918/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1767918] Re: Login password from GDM is shown in plain text on the VT1 console
** Changed in: gdm3 (Ubuntu Bionic) Status: Confirmed => Invalid -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gdm3 in Ubuntu. https://bugs.launchpad.net/bugs/1767918 Title: Login password from GDM is shown in plain text on the VT1 console Status in gdm3 package in Ubuntu: Invalid Status in plymouth package in Ubuntu: Fix Released Status in gdm3 source package in Bionic: Invalid Status in plymouth source package in Bionic: Fix Committed Bug description: [Impact] Sessions in specific circumstances when switching to TTY while plymouth is being activated or deactivated. [Test cases] Steps to reproduce: 1) Log-in using X11 login via GDM. 2) Use the desktop for a while. (For some reason I cannot reproduce if I login and then restart after a short while). 3) In Gnome click System menu -> Power Button -> Restart 4) Quickly press CTRL-ALT-F1 Validate whether your login password is visible on the TTY. [Regression Potential] Possible regressions may include difficulty showing text-mode splash or boot messages given that this changes the state of tty based on plymouth's own activation state. --- https://gitlab.gnome.org/GNOME/gdm/issues/408 I don't which package this applies to, but I believe the best bet is GDM. Steps to reproduce: 1) Log-in using X11 login via GDM. 2) Use the desktop for a while. (For some reason I cannot reproduce if I login and then restart after a short while). 3) In Gnome click System menu -> Power Button -> Restart 4) Quickly press CTRL-ALT-F1 5) I see my login password in plain text in the console. Once I saw the login password repeated twice. See attached photo with the login password blanked out. Below the password is the console cursor. ## lsb_release -rd Description: Ubuntu 18.04 LTS Release: 18.04 ## apt-cache policy gdm3 gdm3: Installed: 3.28.0-0ubuntu1 Candidate: 3.28.0-0ubuntu1 Version table: *** 3.28.0-0ubuntu1 500 500 http://nz.archive.ubuntu.com/ubuntu bionic/main amd64 Packages 100 /var/lib/dpkg/status ProblemType: Bug DistroRelease: Ubuntu 18.04 Package: gdm3 3.28.0-0ubuntu1 ProcVersionSignature: Ubuntu 4.15.0-18.19-generic 4.15.17 Uname: Linux 4.15.0-18-generic x86_64 ApportVersion: 2.20.9-0ubuntu7 Architecture: amd64 CurrentDesktop: ubuntu:GNOME Date: Mon Apr 30 14:54:07 2018 InstallationDate: Installed on 2018-04-13 (17 days ago) InstallationMedia: Ubuntu 18.04 LTS "Bionic Beaver" - Beta amd64 (20180404) SourcePackage: gdm3 UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1767918/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1767918] Re: Login password from GDM is shown in plain text on the VT1 console
This bug was fixed in the package plymouth - 0.9.3-1ubuntu8 --- plymouth (0.9.3-1ubuntu8) cosmic; urgency=medium * debian/patches/git_ensure_tty_closed_0a662723.patch: ensure tty is closed on deactivate. (LP: #1767918) -- Mathieu Trudel-Lapierre Tue, 11 Sep 2018 18:56:37 -0400 ** Changed in: plymouth (Ubuntu) Status: Triaged => Fix Released -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gdm3 in Ubuntu. https://bugs.launchpad.net/bugs/1767918 Title: Login password from GDM is shown in plain text on the VT1 console Status in gdm3 package in Ubuntu: Invalid Status in plymouth package in Ubuntu: Fix Released Status in gdm3 source package in Bionic: New Status in plymouth source package in Bionic: Triaged Bug description: [Impact] Sessions in specific circumstances when switching to TTY while plymouth is being activated or deactivated. [Test cases] Steps to reproduce: 1) Log-in using X11 login via GDM. 2) Use the desktop for a while. (For some reason I cannot reproduce if I login and then restart after a short while). 3) In Gnome click System menu -> Power Button -> Restart 4) Quickly press CTRL-ALT-F1 Validate whether your login password is visible on the TTY. [Regression Potential] Possible regressions may include difficulty showing text-mode splash or boot messages given that this changes the state of tty based on plymouth's own activation state. --- https://gitlab.gnome.org/GNOME/gdm/issues/408 I don't which package this applies to, but I believe the best bet is GDM. Steps to reproduce: 1) Log-in using X11 login via GDM. 2) Use the desktop for a while. (For some reason I cannot reproduce if I login and then restart after a short while). 3) In Gnome click System menu -> Power Button -> Restart 4) Quickly press CTRL-ALT-F1 5) I see my login password in plain text in the console. Once I saw the login password repeated twice. See attached photo with the login password blanked out. Below the password is the console cursor. ## lsb_release -rd Description: Ubuntu 18.04 LTS Release: 18.04 ## apt-cache policy gdm3 gdm3: Installed: 3.28.0-0ubuntu1 Candidate: 3.28.0-0ubuntu1 Version table: *** 3.28.0-0ubuntu1 500 500 http://nz.archive.ubuntu.com/ubuntu bionic/main amd64 Packages 100 /var/lib/dpkg/status ProblemType: Bug DistroRelease: Ubuntu 18.04 Package: gdm3 3.28.0-0ubuntu1 ProcVersionSignature: Ubuntu 4.15.0-18.19-generic 4.15.17 Uname: Linux 4.15.0-18-generic x86_64 ApportVersion: 2.20.9-0ubuntu7 Architecture: amd64 CurrentDesktop: ubuntu:GNOME Date: Mon Apr 30 14:54:07 2018 InstallationDate: Installed on 2018-04-13 (17 days ago) InstallationMedia: Ubuntu 18.04 LTS "Bionic Beaver" - Beta amd64 (20180404) SourcePackage: gdm3 UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1767918/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1767918] Re: Login password from GDM is shown in plain text on the VT1 console
** Also affects: plymouth (Ubuntu Bionic) Importance: Undecided Status: New ** Also affects: gdm3 (Ubuntu Bionic) Importance: Undecided Status: New ** Changed in: plymouth (Ubuntu Bionic) Status: New => Triaged ** Changed in: plymouth (Ubuntu Bionic) Importance: Undecided => High -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gdm3 in Ubuntu. https://bugs.launchpad.net/bugs/1767918 Title: Login password from GDM is shown in plain text on the VT1 console Status in gdm3 package in Ubuntu: Invalid Status in plymouth package in Ubuntu: Triaged Status in gdm3 source package in Bionic: New Status in plymouth source package in Bionic: Triaged Bug description: https://gitlab.gnome.org/GNOME/gdm/issues/408 --- I don't which package this applies to, but I believe the best bet is GDM. Steps to reproduce: 1) Log-in using X11 login via GDM. 2) Use the desktop for a while. (For some reason I cannot reproduce if I login and then restart after a short while). 3) In Gnome click System menu -> Power Button -> Restart 4) Quickly press CTRL-ALT-F1 5) I see my login password in plain text in the console. Once I saw the login password repeated twice. See attached photo with the login password blanked out. Below the password is the console cursor. ## lsb_release -rd Description: Ubuntu 18.04 LTS Release: 18.04 ## apt-cache policy gdm3 gdm3: Installed: 3.28.0-0ubuntu1 Candidate: 3.28.0-0ubuntu1 Version table: *** 3.28.0-0ubuntu1 500 500 http://nz.archive.ubuntu.com/ubuntu bionic/main amd64 Packages 100 /var/lib/dpkg/status ProblemType: Bug DistroRelease: Ubuntu 18.04 Package: gdm3 3.28.0-0ubuntu1 ProcVersionSignature: Ubuntu 4.15.0-18.19-generic 4.15.17 Uname: Linux 4.15.0-18-generic x86_64 ApportVersion: 2.20.9-0ubuntu7 Architecture: amd64 CurrentDesktop: ubuntu:GNOME Date: Mon Apr 30 14:54:07 2018 InstallationDate: Installed on 2018-04-13 (17 days ago) InstallationMedia: Ubuntu 18.04 LTS "Bionic Beaver" - Beta amd64 (20180404) SourcePackage: gdm3 UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1767918/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1767918] Re: Login password from GDM is shown in plain text on the VT1 console
the issue is plytmouth ** Changed in: gdm3 (Ubuntu) Status: Confirmed => Invalid -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gdm3 in Ubuntu. https://bugs.launchpad.net/bugs/1767918 Title: Login password from GDM is shown in plain text on the VT1 console Status in gdm3 package in Ubuntu: Invalid Status in plymouth package in Ubuntu: Triaged Bug description: https://gitlab.gnome.org/GNOME/gdm/issues/408 --- I don't which package this applies to, but I believe the best bet is GDM. Steps to reproduce: 1) Log-in using X11 login via GDM. 2) Use the desktop for a while. (For some reason I cannot reproduce if I login and then restart after a short while). 3) In Gnome click System menu -> Power Button -> Restart 4) Quickly press CTRL-ALT-F1 5) I see my login password in plain text in the console. Once I saw the login password repeated twice. See attached photo with the login password blanked out. Below the password is the console cursor. ## lsb_release -rd Description: Ubuntu 18.04 LTS Release: 18.04 ## apt-cache policy gdm3 gdm3: Installed: 3.28.0-0ubuntu1 Candidate: 3.28.0-0ubuntu1 Version table: *** 3.28.0-0ubuntu1 500 500 http://nz.archive.ubuntu.com/ubuntu bionic/main amd64 Packages 100 /var/lib/dpkg/status ProblemType: Bug DistroRelease: Ubuntu 18.04 Package: gdm3 3.28.0-0ubuntu1 ProcVersionSignature: Ubuntu 4.15.0-18.19-generic 4.15.17 Uname: Linux 4.15.0-18-generic x86_64 ApportVersion: 2.20.9-0ubuntu7 Architecture: amd64 CurrentDesktop: ubuntu:GNOME Date: Mon Apr 30 14:54:07 2018 InstallationDate: Installed on 2018-04-13 (17 days ago) InstallationMedia: Ubuntu 18.04 LTS "Bionic Beaver" - Beta amd64 (20180404) SourcePackage: gdm3 UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1767918/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1767918] Re: Login password from GDM is shown in plain text on the VT1 console
Looks like a fix has landed upstream. It was a bug in plymouth: https://gitlab.freedesktop.org/plymouth/plymouth/merge_requests/2 ** Package changed: mutter (Ubuntu) => plymouth (Ubuntu) ** Changed in: plymouth (Ubuntu) Status: Confirmed => Triaged ** No longer affects: gnome-shell (Ubuntu) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-shell in Ubuntu. https://bugs.launchpad.net/bugs/1767918 Title: Login password from GDM is shown in plain text on the VT1 console Status in gdm3 package in Ubuntu: Confirmed Status in plymouth package in Ubuntu: Triaged Bug description: https://gitlab.gnome.org/GNOME/gdm/issues/408 --- I don't which package this applies to, but I believe the best bet is GDM. Steps to reproduce: 1) Log-in using X11 login via GDM. 2) Use the desktop for a while. (For some reason I cannot reproduce if I login and then restart after a short while). 3) In Gnome click System menu -> Power Button -> Restart 4) Quickly press CTRL-ALT-F1 5) I see my login password in plain text in the console. Once I saw the login password repeated twice. See attached photo with the login password blanked out. Below the password is the console cursor. ## lsb_release -rd Description: Ubuntu 18.04 LTS Release: 18.04 ## apt-cache policy gdm3 gdm3: Installed: 3.28.0-0ubuntu1 Candidate: 3.28.0-0ubuntu1 Version table: *** 3.28.0-0ubuntu1 500 500 http://nz.archive.ubuntu.com/ubuntu bionic/main amd64 Packages 100 /var/lib/dpkg/status ProblemType: Bug DistroRelease: Ubuntu 18.04 Package: gdm3 3.28.0-0ubuntu1 ProcVersionSignature: Ubuntu 4.15.0-18.19-generic 4.15.17 Uname: Linux 4.15.0-18-generic x86_64 ApportVersion: 2.20.9-0ubuntu7 Architecture: amd64 CurrentDesktop: ubuntu:GNOME Date: Mon Apr 30 14:54:07 2018 InstallationDate: Installed on 2018-04-13 (17 days ago) InstallationMedia: Ubuntu 18.04 LTS "Bionic Beaver" - Beta amd64 (20180404) SourcePackage: gdm3 UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1767918/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1767918] Re: Login password from GDM is shown in plain text on the VT1 console
@vanvugt, new GDM bug has been created here: https://gitlab.gnome.org/GNOME/gdm/issues/408 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to mutter in Ubuntu. https://bugs.launchpad.net/bugs/1767918 Title: Login password from GDM is shown in plain text on the VT1 console Status in gdm3 package in Ubuntu: Confirmed Status in gnome-shell package in Ubuntu: Confirmed Status in mutter package in Ubuntu: Confirmed Bug description: https://gitlab.gnome.org/GNOME/gdm/issues/408 --- I don't which package this applies to, but I believe the best bet is GDM. Steps to reproduce: 1) Log-in using X11 login via GDM. 2) Use the desktop for a while. (For some reason I cannot reproduce if I login and then restart after a short while). 3) In Gnome click System menu -> Power Button -> Restart 4) Quickly press CTRL-ALT-F1 5) I see my login password in plain text in the console. Once I saw the login password repeated twice. See attached photo with the login password blanked out. Below the password is the console cursor. ## lsb_release -rd Description: Ubuntu 18.04 LTS Release: 18.04 ## apt-cache policy gdm3 gdm3: Installed: 3.28.0-0ubuntu1 Candidate: 3.28.0-0ubuntu1 Version table: *** 3.28.0-0ubuntu1 500 500 http://nz.archive.ubuntu.com/ubuntu bionic/main amd64 Packages 100 /var/lib/dpkg/status ProblemType: Bug DistroRelease: Ubuntu 18.04 Package: gdm3 3.28.0-0ubuntu1 ProcVersionSignature: Ubuntu 4.15.0-18.19-generic 4.15.17 Uname: Linux 4.15.0-18-generic x86_64 ApportVersion: 2.20.9-0ubuntu7 Architecture: amd64 CurrentDesktop: ubuntu:GNOME Date: Mon Apr 30 14:54:07 2018 InstallationDate: Installed on 2018-04-13 (17 days ago) InstallationMedia: Ubuntu 18.04 LTS "Bionic Beaver" - Beta amd64 (20180404) SourcePackage: gdm3 UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1767918/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1767918] Re: Login password from GDM is shown in plain text on the VT1 console
** Description changed: + https://gitlab.gnome.org/GNOME/gdm/issues/408 + + --- + I don't which package this applies to, but I believe the best bet is GDM. Steps to reproduce: 1) Log-in using X11 login via GDM. 2) Use the desktop for a while. (For some reason I cannot reproduce if I login and then restart after a short while). 3) In Gnome click System menu -> Power Button -> Restart 4) Quickly press CTRL-ALT-F1 5) I see my login password in plain text in the console. Once I saw the login password repeated twice. See attached photo with the login password blanked out. Below the password is the console cursor. ## lsb_release -rd Description: Ubuntu 18.04 LTS Release: 18.04 ## apt-cache policy gdm3 gdm3: - Installed: 3.28.0-0ubuntu1 - Candidate: 3.28.0-0ubuntu1 - Version table: - *** 3.28.0-0ubuntu1 500 - 500 http://nz.archive.ubuntu.com/ubuntu bionic/main amd64 Packages - 100 /var/lib/dpkg/status + Installed: 3.28.0-0ubuntu1 + Candidate: 3.28.0-0ubuntu1 + Version table: + *** 3.28.0-0ubuntu1 500 + 500 http://nz.archive.ubuntu.com/ubuntu bionic/main amd64 Packages + 100 /var/lib/dpkg/status ProblemType: Bug DistroRelease: Ubuntu 18.04 Package: gdm3 3.28.0-0ubuntu1 ProcVersionSignature: Ubuntu 4.15.0-18.19-generic 4.15.17 Uname: Linux 4.15.0-18-generic x86_64 ApportVersion: 2.20.9-0ubuntu7 Architecture: amd64 CurrentDesktop: ubuntu:GNOME Date: Mon Apr 30 14:54:07 2018 InstallationDate: Installed on 2018-04-13 (17 days ago) InstallationMedia: Ubuntu 18.04 LTS "Bionic Beaver" - Beta amd64 (20180404) SourcePackage: gdm3 UpgradeStatus: No upgrade log present (probably fresh install) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to mutter in Ubuntu. https://bugs.launchpad.net/bugs/1767918 Title: Login password from GDM is shown in plain text on the VT1 console Status in gdm3 package in Ubuntu: Confirmed Status in gnome-shell package in Ubuntu: Confirmed Status in mutter package in Ubuntu: Confirmed Bug description: https://gitlab.gnome.org/GNOME/gdm/issues/408 --- I don't which package this applies to, but I believe the best bet is GDM. Steps to reproduce: 1) Log-in using X11 login via GDM. 2) Use the desktop for a while. (For some reason I cannot reproduce if I login and then restart after a short while). 3) In Gnome click System menu -> Power Button -> Restart 4) Quickly press CTRL-ALT-F1 5) I see my login password in plain text in the console. Once I saw the login password repeated twice. See attached photo with the login password blanked out. Below the password is the console cursor. ## lsb_release -rd Description: Ubuntu 18.04 LTS Release: 18.04 ## apt-cache policy gdm3 gdm3: Installed: 3.28.0-0ubuntu1 Candidate: 3.28.0-0ubuntu1 Version table: *** 3.28.0-0ubuntu1 500 500 http://nz.archive.ubuntu.com/ubuntu bionic/main amd64 Packages 100 /var/lib/dpkg/status ProblemType: Bug DistroRelease: Ubuntu 18.04 Package: gdm3 3.28.0-0ubuntu1 ProcVersionSignature: Ubuntu 4.15.0-18.19-generic 4.15.17 Uname: Linux 4.15.0-18-generic x86_64 ApportVersion: 2.20.9-0ubuntu7 Architecture: amd64 CurrentDesktop: ubuntu:GNOME Date: Mon Apr 30 14:54:07 2018 InstallationDate: Installed on 2018-04-13 (17 days ago) InstallationMedia: Ubuntu 18.04 LTS "Bionic Beaver" - Beta amd64 (20180404) SourcePackage: gdm3 UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1767918/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1767918] Re: Login password from GDM is shown in plain text on the VT1 console
Could someone experiencing the bug please report it to the Gnome developers here: https://gitlab.gnome.org/GNOME/gdm/issues (I'm not sure if it's going to be in "gdm", "mutter" or "gnome-shell" yet) -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to mutter in Ubuntu. https://bugs.launchpad.net/bugs/1767918 Title: Login password from GDM is shown in plain text on the VT1 console Status in gdm3 package in Ubuntu: Confirmed Status in gnome-shell package in Ubuntu: Confirmed Status in mutter package in Ubuntu: Confirmed Bug description: I don't which package this applies to, but I believe the best bet is GDM. Steps to reproduce: 1) Log-in using X11 login via GDM. 2) Use the desktop for a while. (For some reason I cannot reproduce if I login and then restart after a short while). 3) In Gnome click System menu -> Power Button -> Restart 4) Quickly press CTRL-ALT-F1 5) I see my login password in plain text in the console. Once I saw the login password repeated twice. See attached photo with the login password blanked out. Below the password is the console cursor. ## lsb_release -rd Description: Ubuntu 18.04 LTS Release: 18.04 ## apt-cache policy gdm3 gdm3: Installed: 3.28.0-0ubuntu1 Candidate: 3.28.0-0ubuntu1 Version table: *** 3.28.0-0ubuntu1 500 500 http://nz.archive.ubuntu.com/ubuntu bionic/main amd64 Packages 100 /var/lib/dpkg/status ProblemType: Bug DistroRelease: Ubuntu 18.04 Package: gdm3 3.28.0-0ubuntu1 ProcVersionSignature: Ubuntu 4.15.0-18.19-generic 4.15.17 Uname: Linux 4.15.0-18-generic x86_64 ApportVersion: 2.20.9-0ubuntu7 Architecture: amd64 CurrentDesktop: ubuntu:GNOME Date: Mon Apr 30 14:54:07 2018 InstallationDate: Installed on 2018-04-13 (17 days ago) InstallationMedia: Ubuntu 18.04 LTS "Bionic Beaver" - Beta amd64 (20180404) SourcePackage: gdm3 UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1767918/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1767918] Re: Login password from GDM is shown in plain text on the VT1 console
No, because multiple people experience this bug and they wouldn't be able to share the same bug if it was private. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to mutter in Ubuntu. https://bugs.launchpad.net/bugs/1767918 Title: Login password from GDM is shown in plain text on the VT1 console Status in gdm3 package in Ubuntu: Confirmed Status in gnome-shell package in Ubuntu: Confirmed Status in mutter package in Ubuntu: Confirmed Bug description: I don't which package this applies to, but I believe the best bet is GDM. Steps to reproduce: 1) Log-in using X11 login via GDM. 2) Use the desktop for a while. (For some reason I cannot reproduce if I login and then restart after a short while). 3) In Gnome click System menu -> Power Button -> Restart 4) Quickly press CTRL-ALT-F1 5) I see my login password in plain text in the console. Once I saw the login password repeated twice. See attached photo with the login password blanked out. Below the password is the console cursor. ## lsb_release -rd Description: Ubuntu 18.04 LTS Release: 18.04 ## apt-cache policy gdm3 gdm3: Installed: 3.28.0-0ubuntu1 Candidate: 3.28.0-0ubuntu1 Version table: *** 3.28.0-0ubuntu1 500 500 http://nz.archive.ubuntu.com/ubuntu bionic/main amd64 Packages 100 /var/lib/dpkg/status ProblemType: Bug DistroRelease: Ubuntu 18.04 Package: gdm3 3.28.0-0ubuntu1 ProcVersionSignature: Ubuntu 4.15.0-18.19-generic 4.15.17 Uname: Linux 4.15.0-18-generic x86_64 ApportVersion: 2.20.9-0ubuntu7 Architecture: amd64 CurrentDesktop: ubuntu:GNOME Date: Mon Apr 30 14:54:07 2018 InstallationDate: Installed on 2018-04-13 (17 days ago) InstallationMedia: Ubuntu 18.04 LTS "Bionic Beaver" - Beta amd64 (20180404) SourcePackage: gdm3 UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1767918/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 1767918] Re: Login password from GDM is shown in plain text on the VT1 console
Yikes, shouldn't this bug be marked private? -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to mutter in Ubuntu. https://bugs.launchpad.net/bugs/1767918 Title: Login password from GDM is shown in plain text on the VT1 console Status in gdm3 package in Ubuntu: Confirmed Status in gnome-shell package in Ubuntu: Confirmed Status in mutter package in Ubuntu: Confirmed Bug description: I don't which package this applies to, but I believe the best bet is GDM. Steps to reproduce: 1) Log-in using X11 login via GDM. 2) Use the desktop for a while. (For some reason I cannot reproduce if I login and then restart after a short while). 3) In Gnome click System menu -> Power Button -> Restart 4) Quickly press CTRL-ALT-F1 5) I see my login password in plain text in the console. Once I saw the login password repeated twice. See attached photo with the login password blanked out. Below the password is the console cursor. ## lsb_release -rd Description: Ubuntu 18.04 LTS Release: 18.04 ## apt-cache policy gdm3 gdm3: Installed: 3.28.0-0ubuntu1 Candidate: 3.28.0-0ubuntu1 Version table: *** 3.28.0-0ubuntu1 500 500 http://nz.archive.ubuntu.com/ubuntu bionic/main amd64 Packages 100 /var/lib/dpkg/status ProblemType: Bug DistroRelease: Ubuntu 18.04 Package: gdm3 3.28.0-0ubuntu1 ProcVersionSignature: Ubuntu 4.15.0-18.19-generic 4.15.17 Uname: Linux 4.15.0-18-generic x86_64 ApportVersion: 2.20.9-0ubuntu7 Architecture: amd64 CurrentDesktop: ubuntu:GNOME Date: Mon Apr 30 14:54:07 2018 InstallationDate: Installed on 2018-04-13 (17 days ago) InstallationMedia: Ubuntu 18.04 LTS "Bionic Beaver" - Beta amd64 (20180404) SourcePackage: gdm3 UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1767918/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
