I'm marking this invalid for systemd (the patch there was reverted) and
fix released for plymouth, with the assumption this was fixed with the
patch for bug 1817738.
If anyone is able to reproduce the problem please add a comment.
--
You received this bug notification because you are a member
Unfortunately I can't reproduce this bug, even with the
0.9.3-1ubuntu7.18.04.1 version of plymouth installed, so I can't say for
sure that it's fixed with plymouth 0.9.3-1ubuntu7.18.04.2.
Also note that the [test case] in the description is wrong, that would
be correct with the systemd change
Interesting. Though Plymouth probably shouldn't be running at all by the
time you type a password into the login screen. If it's not running then
that's probably not the cause.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
As suggested in the freedesktop bug, this probably was fixed with the patch
added for bug 1817738 which is this commit:
https://gitlab.freedesktop.org/plymouth/plymouth/-/commit/85d843af843589ce8538a59e5cb665b8253e380d
I haven't been able to reproduce this myself yet (when using the
plymouth
** Tags removed: ddstreet
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1803993
Title:
Password appears on the VT1 screen
To manage notifications about this bug go to:
** Changed in: systemd (Ubuntu)
Assignee: Balint Reczey (rbalint) => (unassigned)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1803993
Title:
Password appears on the VT1 screen
To
** Tags added: ddstreet
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1803993
Title:
Password appears on the VT1 screen
To manage notifications about this bug go to:
added info from previous comment to the upstream freedesktop bug.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1803993
Title:
Password appears on the VT1 screen
To manage notifications
It would be good adding this information to the upstream bug tracker.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1803993
Title:
Password appears on the VT1 screen
To manage
> Looking at the discussion at
https://gitlab.freedesktop.org/xorg/xserver/issues/857#note_201402 this
might be a bug in plymouth which is supposedly fixed in plymouth 0.9.4.
I noticed that, however that points to:
@rbalint if you can reliably reproduce the issue, it would probably be a
good idea if you follow up on that upstream bug tracker
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1803993
Title:
Looking at the discussion at
https://gitlab.freedesktop.org/xorg/xserver/issues/857#note_201402 this
might be a bug in plymouth which is supposedly fixed in plymouth 0.9.4.
Could users who can reliably reproduce the issue post if they have
plymouth installed and if so, which version?
** Bug
This is still not fixed.
** Changed in: systemd (Ubuntu)
Status: Fix Released => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1803993
Title:
Password appears on the VT1
This bug was fixed in the package systemd - 240-6ubuntu9
---
systemd (240-6ubuntu9) eoan; urgency=medium
* Fix typpo in storage test.
File: debian/tests/storage
> can you get it pushed out to eoan-updates (or revert it)?
sorry i meant eoan-release
also, see discussion in #ubuntu-devel, I'll revert this patch in my
upload to eoan, so that the regression can be figured out.
--
You received this bug notification because you are a member of Ubuntu
Bugs,
@rbalint, this is still in eoan-proposed, can you get it pushed out to
eoan-updates (or revert it)?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1803993
Title:
Password appears on the VT1
This may have caused a regression upstream, see
https://github.com/systemd/systemd/pull/12378#issuecomment-493776598
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1803993
Title:
Password
Use CVE-2018-20839.
Thanks
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-20839
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1803993
Title:
Password appears on the VT1
** Description changed:
+ [Impact]
+
+ * The keyboard on the graphical login screen started on VT1 may stop
+ working and or keypresses including passwords are leaked to the terminal
+ console running 'behind' the graphical login screen or environment.
+
+ [Test Case]
+
+ * Reboot after
** Changed in: gdm3 (Ubuntu)
Status: Confirmed => Invalid
** Changed in: plymouth (Ubuntu)
Status: Confirmed => Invalid
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1803993
Forwarded proposed fix to systemd upstream:
https://github.com/systemd/systemd/pull/12378
** Changed in: systemd (Ubuntu)
Status: New => Confirmed
** Changed in: systemd (Ubuntu)
Status: Confirmed => In Progress
--
You received this bug notification because you are a member of
** Changed in: systemd (Ubuntu)
Importance: Undecided => High
** Changed in: systemd (Ubuntu)
Assignee: (unassigned) => Balint Reczey (rbalint)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
It looks like systemd is changing the mode (see argument=3) on VT1 on
logouts.
#define K_RAW 0x00
#define K_XLATE 0x01
#define K_MEDIUMRAW 0x02
#define K_UNICODE 0x04
#define K_OFF 0x04
#define KDGKBMODE 0x4B44
@Robert Anderson - could you please report a new bug using ubuntu-bug
plymouth? This will gather information from the system in question that
will help us investigate the matter. Thanks in advance!
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed
** Changed in: gdm3 (Ubuntu)
Importance: Undecided => High
** Changed in: plymouth (Ubuntu)
Importance: Undecided => High
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1803993
Title:
I'm pretty sure I just encountered this bug, although all I did was
issue a shutdown, and very briefly I was able to see several plaintext
passwords that had been used to log in across several user accounts. I
am on Ubuntu 18.04.2 LTS.
This was a shock for reasons which should be obvious.
--
Confirmed by https://askubuntu.com/q/1127408/66509
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1803993
Title:
Password appears on the VT1 screen
To manage notifications about this bug go
** Description changed:
+ (continued from bug 1767918)
+
This was found when an administrative error made /home directory
inaccessible. Any users that tried to login after that, were not able
to (which is expected) but their password appears on the VT1 screen.
Under normal
** Tags added: id-5c51b3a3cb40343530f1abbd
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1803993
Title:
Password appears on the VT1 screen
To manage notifications about this bug go to:
It seems I can reproduce the issue in qemu and look at vt1 by stopping
gdm3, since the switch to vt2 does not show vt1 even for a moment.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1803993
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: plymouth (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1803993
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: gdm3 (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1803993
Thanks Thomas
** Changed in: gdm3 (Ubuntu)
Status: Incomplete => New
** Changed in: plymouth (Ubuntu)
Status: Incomplete => New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
HI Seth,
Sorry. It is plymouth 0.9.3ubuntu7.18.04.1 amd64
On Tue, Nov 20, 2018 at 5:35 PM Seth Arnold <1803...@bugs.launchpad.net>
wrote:
> Hello Thomas, sadly you only got half of the version number. Can you
> please paste in the full version number?
>
> Thanks
>
> --
> You received this bug
Hello Thomas, sadly you only got half of the version number. Can you
please paste in the full version number?
Thanks
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1803993
Title:
Password
^^^
That is probably just to verify this really isn't a duplicate of bug 1767918,
and that you have the fix for bug 1767918 already.
** Summary changed:
- GDM is Exploitable as a Password Collector
+ Password appears on the VT1 screen
** Changed in: gdm3 (Ubuntu)
Status: New =>
36 matches
Mail list logo
