Since bug 139363 has been fixed, this security issue can now be
reproduced in intrepid.
** This bug has been flagged as a security issue
** Changed in: usplash (Ubuntu)
Importance: Medium => High
Status: New => Confirmed
** Description changed:
- Binary package hint: usplash
+ The new hires usplash causes some trouble with cryptsetup:
- The new hires usplash causes some trouble with cryptsetup:
- Cryptsetup turns of usplash. The screen turn black then (another bug). You
can get your output by switching consoles back and forth.
+ Cryptsetup now uses usplash to ask the passphrase. If you switch to
+ console 1, and then switch back to console 8, you'll see that your
+ password was echoed in the console, in plain text.
- BUT then the passphrases are echoed to the screen!
+ Steps to reproduce :
+ 1. Reboot your computer
+ 2. When asked by usplash, type your password, but don't press "enter" to
validate your password.
+ 3. Switch to tty 1 with CTRL + ALT + F1
+ 4. Switch back to the usplash tty with CTRL + ALT + F8
--
usplash prevents passwords from being not echoed on the console
https://bugs.launchpad.net/bugs/55159
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
