*** This bug is a security vulnerability ***

You have been subscribed to a public security bug by Jamie Strandboge 
(jdstrand):

Binary package hint: gdm

log in one user, use compiz, not metacity.  Do a switch user, log in as
someone else.. Use metacity.. and gnome..  Log-off.  It logs directly
back into the compiz account that you left logged in before without
asking for password.  It to sometime log in again when you do switch
user, let the screen saver come on.. I don't think its the screen saver
but more power management turning the screen black.  You wake the
computer and you are logged in.. that's a security problem for
us..Screensaver, no longer works and either does lock.

We are using 8.04 with the latest as of 6/12.
Description:    Ubuntu 8.04
Release:        8.04
gdm:
  Installed: 2.20.6-0ubuntu2
  Candidate: 2.20.6-0ubuntu2
  Version table:
 *** 2.20.6-0ubuntu2 0
        500 http://archive.ubuntu.com hardy-updates/main Packages
        100 /var/lib/dpkg/status
     2.20.5-0ubuntu3 0
        500 http://archive.ubuntu.com hardy/main Packages
compiz:
  Installed: 1:0.7.4-0ubuntu6
  Candidate: 1:0.7.4-0ubuntu6
  Version table:
 *** 1:0.7.4-0ubuntu6 0
        500 http://archive.ubuntu.com hardy/main Packages
        100 /var/lib/dpkg/status

gnome:
  Installed: (none)
  Candidate: 1:2.20.2.2
  Version table:
     1:2.20.2.2 0
        500 http://archive.ubuntu.com hardy/universe Packages

** Affects: gdm (Ubuntu)
     Importance: Undecided
         Status: New

-- 
when logging out of one user session, it automatically opens another user 
session with no password check!
https://bugs.launchpad.net/bugs/239583
You received this bug notification because you are a member of Ubuntu Bugs, 
which is a direct subscriber.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to