*** This bug is a security vulnerability ***
You have been subscribed to a public security bug by Marc Deslauriers
(mdeslaur):
After upgrading from 14.04 -> 16.04 -> 18.04 I recognized that all the
gdm login keyboard input - that means user names and passwords - is
written to the login console tty1.
# procedure to reproduce:
* graphical gdm login by selecting user and input password
* <login procedure>
* switch to tty1 by Ctrl-Alt-F1
* password(s) are visible on text console like STDERR
* after a few seconds the graphical login manager starts again
Note: at the moment I cannot reproduce that phenomenon - because Ctrl-
Alt-F1 brings me only to the graphical gdm login manager anymore. The
text console I do not see like before for some seconds.
** Affects: gdm3 (Ubuntu)
Importance: Undecided
Status: New
--
gdm3 writes user passwords to tty1
https://bugs.launchpad.net/bugs/1782411
You received this bug notification because you are a member of Ubuntu Bugs,
which is subscribed to the bug report.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
