CVE-2020-17489

Priority
Description
An issue was discovered in certain configurations of GNOME gnome-shell
through 3.36.4. When logging out of an account, the password box from the
login dialog reappears with the password still visible. If the user had
decided to have the password shown in cleartext at login time, it is then
visible for a brief moment upon a logout. (If the password were never shown
in cleartext, only the password length is revealed.)
Assigned-to
mdeslaur
Notes
mdeslaurper upstream bug, appears to have been introduced in 3.34
Package
Upstream:released (3.36.5-1)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (3.18.5-0ubuntu0.3)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (3.28.4-0ubuntu18.04.3)
Ubuntu 20.04 LTS (Focal Fossa):released (3.36.4-1ubuntu1~20.04.2)
Ubuntu 20.10 (Groovy Gorilla):released (3.37.91-1ubuntu1)
Patches:
Upstream:https://gitlab.gnome.org/GNOME/gnome-shell/-/commit/13137aad9db52223e8b62cecbd3456f4a7f66f04
More Information

Updated: 2020-09-14 13:15:24 UTC (commit f6a33b1df5b4d79231f3a8f14c4980cc18b7a8eb)