Bug 383768 - Screen locker password input text field allows access to the copy/paste clipboard buffer
Summary: Screen locker password input text field allows access to the copy/paste clipb...
Status: RESOLVED DUPLICATE of bug 376526
Alias: None
Product: kscreenlocker
Classification: Unmaintained
Component: greeter (other bugs)
Version First Reported In: 5.8.7
Platform: Debian unstable Linux
: NOR major
Target Milestone: ---
Assignee: Plasma Bugs List
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-08-20 22:33 UTC by Armin Jenewein
Modified: 2017-08-21 20:38 UTC (History)
3 users (show)

See Also:
Latest Commit:
Version Fixed/Implemented In:
Sentry Crash Report:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Armin Jenewein 2017-08-20 22:33:57 UTC
After locking the screen, it is possible to use the Shift-Insert keyboard combination to paste the current clipboard content into (at least) the password input field, which get shown as asterisks, hence revealing the exact length of the current clipboard contents string at least, eventually worse.
Comment 1 Luigi Toscano 2017-08-20 22:55:53 UTC
This is most likely already fixed in newer releases.
Comment 2 Martin Flöser 2017-08-21 05:54:56 UTC
Fixed in newer release.
Comment 3 Christoph Feck 2017-08-21 17:19:42 UTC

*** This bug has been marked as a duplicate of bug 376526 ***