[Bug 1641259] Re: xfce4-terminal shows password visibly in clear between attempts and accepts (updated Nov. 17th)

[Marc Deslauriers]

** Information type changed from Private Security to Public Security

** Package changed: xfce4-terminal (Ubuntu) => sudo (Ubuntu)

** Changed in: sudo (Ubuntu)
       Status: New => Confirmed

** Changed in: sudo (Ubuntu)
     Assignee: Andrew Donald (senoir-cielo) => (unassigned)

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to sudo in Ubuntu.
https://bugs.launchpad.net/bugs/1641259

Title:
  xfce4-terminal shows password visibly in clear between attempts and
  accepts (updated Nov. 17th)

Status in sudo package in Ubuntu:
  Confirmed

Bug description:
  Corrected copy and pasted info Nov. 17th.

  If written quickly after a failed attempt xfce4-terminal shows
  password visibly in actual characters and accepts the password.

  Example (the word "pass" is the password):

  
  brett at BrettPC:~$ sudo su
  [sudo] password for brett:
  pass
  Sorry, try again.
  [sudo] password for brett:
  root at BrettPC:/home/brett#

  To clarify I did not enter a password the second time it sad "[sudo]
  password for brett:" it simply accepted the one shown visibly.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/1641259/+subscriptions