[Bug 1825890] Re: Login password disclosure after 3rd logout

[Seth Arnold]

Possibly related to
https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1803993

Thanks

** Also affects: plymouth (Ubuntu)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to plymouth in Ubuntu.
https://bugs.launchpad.net/bugs/1825890

Title:
  Login password disclosure after 3rd logout

Status in gdm3 package in Ubuntu:
  New
Status in plymouth package in Ubuntu:
  New

Bug description:
  In minimal clean installation of Ubuntu Desktop 18.04.2 LTS, login
  password is shown in plaintext in console output after 3rd logout from
  Gnome. Just start the machine, login and logout from Gnome session for
  more than tree times and login password (and incorrect login attempts)
  starts to be shown on console that is briefly visible after logout.
  See https://www.youtube.com/watch?v=lwzX_4qe8nA&t=89s for
  demonstration.

  ProblemType: Bug
  DistroRelease: Ubuntu 18.04
  Package: gdm3 3.28.3-0ubuntu18.04.3
  ProcVersionSignature: Ubuntu 4.18.0-15.16~18.04.1-generic 4.18.20
  Uname: Linux 4.18.0-15-generic x86_64
  ApportVersion: 2.20.9-0ubuntu7.5
  Architecture: amd64
  CurrentDesktop: ubuntu:GNOME
  Date: Mon Apr 22 22:14:23 2019
  InstallationDate: Installed on 2019-04-22 (0 days ago)
  InstallationMedia: Ubuntu 18.04.2 LTS "Bionic Beaver" - Release amd64 (20190210)
  SourcePackage: gdm3
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gdm3/+bug/1825890/+subscriptions