Debian Bug report logs - #189381
rdesktop: xscreensaver password is put in rdesktop-session document

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Arie Kraai <arie@nedstat.com>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: rdesktop: xscreensaver password is put in rdesktop-session document

Date: Thu, 17 Apr 2003 10:16:24 +0200

Package: rdesktop
Version: 1.2.0-2
Severity: normal
Tags: security

A password, typed to unlock xscreensaver, is passed to rdesktop and
appears in open documents in the windows-session.
I'm not sure if this is an xscreensaver-bug, but the problem does
not occur with open "normal" (local) applications.


-- System Information:
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux gouda 2.4.20 #1 Thu Mar 13 14:34:52 CET 2003 i686
Locale: LANG=C, LC_CTYPE=C

Versions of packages rdesktop depends on:
ii  libc6                         2.3.1-16   GNU C Library: Shared libraries an
ii  libssl0.9.7                   0.9.7a-1   SSL shared libraries
ii  xlibs                         4.2.1-6    X Window System client libraries

-- no debconf information

Message #8 received at 189381-forwarded@bugs.debian.org (full text, mbox, reply):

From: Sam Johnston <samj@aos.net.au>

To: rdesktop-devel@lists.sourceforge.net

Cc: arie@nedstat.com, 189381-forwarded@bugs.debian.org

Subject: Keyboard Grabbing *SECURITY* issues

Date: Thu, 17 Apr 2003 18:54:37 +1000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

tags 189381 +security +upstream
severity 189381 important
thanks

Arie,

Thankyou for your feedback. Keyboard grabbing has been an issue in the
past, but I had believed that it had been resolved in the 1.2.0 release.

The old bug report, including a bunch of spam, is available at:

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=125771&archive=yes

Does anyone have a difinitive answer about this issue?

Happy Easter,

Sam

- --
Sam Johnston, Director
Australian Online Solutions
1300 132 809

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE+nmvMj4XJViLpTR0RAkmxAJ933LMNDIuukTZ9gCbXOesF2YjEvwCeLnj/
CVB+ZPCiHcTjVieISQJOM8w=
=rq8E
-----END PGP SIGNATURE-----

Message #15 received at 189381@bugs.debian.org (full text, mbox, reply):

From: Sam Johnston <samj@aos.net.au>

To: 219497@bugs.debian.org, 227989@bugs.debian.org, 189381@bugs.debian.org, 197597@bugs.debian.org

Subject: Unreproducable bugs resolved in 1.3.1-1 upload?

Date: Thu, 05 Feb 2004 03:36:44 +1100

Are these bugs still present in the 1.3.1-1 package which will hit the 
mirrors shortly?

Sam

-- 
Sam Johnston, Director
Australian Online Solutions
http://www.aos.net.au/

Message #20 received at 189381-done@bugs.debian.org (full text, mbox, reply):

From: Martin Pitt <martin@piware.de>

To: 189381-done@bugs.debian.org

Subject: rdesktop 1.3.1-1 works correctly

Date: Mon, 13 Sep 2004 16:29:11 +0200

[Message part 1 (text/plain, inline)]

Hi Sam!

Daniel Silverstone just tried that out with the current rdesktop
1.3.1-1. The screensaver password does not appear in a notepad window
after a manual nor a timeout screensaver lock.

So I assume this report can be closed.

Have a nice day!

Martin

-- 
Martin Pitt                 Debian GNU/Linux Developer
martin@piware.de                      mpitt@debian.org
http://www.piware.de             http://www.debian.org

[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.