it's 2020 and this is still not fixed in 18.04 LTS. the fix has been
available at least since September 2018. ubuntu is a joke not an OS
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1768352
I can confirm the updated mate-screensaver fixes the issue (somehow).
There is still maybe half-second blink of visible desktop when I
disconnect an external monitor from HDMI port while the screen is
locked. After that, the screen is properly locked. Still, the quick
blink of desktop is a
Oh! Simon has already prepared an update, it just needs someone to test
it and report that it works:
https://launchpad.net/~ubuntu-security-
proposed/+archive/ubuntu/ppa/+packages
Can anyone here test and report back if this update addresses the issue
and doesn't introduce new problems?
Thanks
Hello Eugene, are you in a position to be able to prepare an update for
this issue?
You can find some more information on preparing a debdiff for
sponsorship at https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures
Thanks
--
You received this bug notification because you are a member of Ubuntu
So what's up with this security issue?
I've reported it to mate-desktop and they says that it is up to Ubuntu
maintainers to release fixed version.
https://github.com/mate-desktop/mate-screensaver/issues/180
It is a critical security issue and I had to switch to different window manager
on my
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-20681
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1768352
Title:
mate-screensaver screen lock can be bypassed by power cycling
Same issue with DisplayPort (Blank lockscreen, unplug the display cable,
wakeup lockscreen, plug cable to bypass).
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1768352
Title:
mate-screensaver
Topic linked on Mate forum:
https://ubuntu-mate.community/t/security-issue-lock-screen-not-retained-when-exit-screensaver-with-tv-hdmi/18655
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1768352
I had this problem today with a TV plugged into HDMI on 18.04.1 Mate
(mate-screensaver 1.20.0-1). How to track the progress of the patch in
SRU 18.04? How to check that a machine with 18.04 will be patched?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is
Test case for SRU should include reproducing the original problem that
you are trying to fix, and not refer elsewhere for a "more detailed test
case".
I think there should also be some exploratory testing here of related
behavior around multiple monitor handling and unlocking, given the size
of
** Changed in: mate-screensaver (Ubuntu Bionic)
Assignee: Martin Wimpress (flexiondotorg) => Simon Quigley (tsimonq2)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1768352
Title:
** Description changed:
+ [Impact]
+
+ Without this fix, power cycling a monitor bypasses the screen lock. This
+ upload also includes much improved translations.
+
+ [Test Case]
+
+ After installing this fix, run through the following procedure:
+ - Lock Screen
+ - Turn off monitor
+ -
The best solution is to backport the release currently in Cosmic and
Disco, because these are just bugfixes.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1768352
Title:
mate-screensaver screen
Any progress on fixing this in the LTS version?
AFAIC this is a pretty high-profile security issue, and may not very
prudent to leave open for months after it's fixed upstream. Imagine the
storm of bad press if Microsoft or Apple were to pull something like
this - or even if this bug report
** Changed in: mate-screensaver (Ubuntu)
Importance: Undecided => High
** Changed in: mate-screensaver (Ubuntu)
Assignee: (unassigned) => Martin Wimpress (flexiondotorg)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
This is fixed in Ubuntu MATE 18.10 via mate-screensaver 1.20.2-1 which
we will SRU to 18.04.
** Also affects: mate-screensaver (Ubuntu Bionic)
Importance: Undecided
Status: New
** Changed in: mate-screensaver (Ubuntu)
Status: Incomplete => Fix Released
** Changed in:
** Changed in: mate-desktop
Status: New => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1768352
Title:
mate-screensaver screen lock can be bypassed by power cycling monitor
To
Thanks Fizzfadlt, I forgot this script doesn't set the bug public. I've
done so now. (The trick is the "private security" link in the upper
right hand corner -- change that to "public security".)
Thanks
** Information type changed from Private Security to Public Security
--
You received this
18 matches
Mail list logo
