*** This bug is a security vulnerability ***

Public security bug reported:

Binary package hint: xkeyboard-config

After using to a TTY and returning to X, some or all of the input
performed in the TTY gets sent to X.

Case 1:
1. Put your  cursor over a non-maximized window.
2. Press Ctrl+Alt+F1 to go to TTY1.
3. Log-in.
4. Press Alt+F7 to return.

What happens:
1. At least in Compiz, the window is in "Move" mode, so mouse movement moves 
the window. You must click to get out of this mode.
2. The help will be invoked of whatever application handled it, presumably 
because you pressed F1 to use TTY1.

What should happen:
You should be return to X in the state you left it, and no input involved in 
going to/from, or using the TTY, should later make it to X

Case 2:
1. Open a text editor.
2. Press Ctrl+Alt+F2 to go to TTY2
3. Type your username and press enter.
4. Press Alt+F7 to return.

What happens:
After clicking or otherwise exiting from "move" mode, the username is echoed in 
the text editor.

What should happen:
See first case.

** Affects: xkeyboard-config (Ubuntu)
     Importance: Undecided
         Status: New

** Visibility changed to: Public

-- 
Input to TTYs goes to X after returning
https://bugs.launchpad.net/bugs/276887
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to