[LightDM] LightDM locking security bug

Lutz Christoph lchristoph at extern.creativedata.de
Mon Feb 6 15:53:51 UTC 2017


On 02/06/17 16:27, Yves-Alexis Perez wrote:
> On Sun, 2017-02-05 at 06:00 +0000, Alexis Hunt wrote:
>> I'm not sure if this is actually a bug or a misconfiguration on my system,
>> but I have discovered a major security vulnerability in screen locking
>> (dm-tool lock), and I would like some advice on how to proceed with it. I
>> didn't see a bug tracker or anything on the website and do not want to send
>> out what could be major security bug to a public mailing list.
>>
>> My system is Debian testing and I use Xmonad as my WM.
> You can either report privately to the Debian security team (team at security.deb
> ian.org) or open a launchpad bug and tag it security (so it will be private).
>
I would take it to debian-security at lists.debian.org first.

HTH,
Lupe Christoph
-- 

Mit freundlichen Grüßen / Kind regards

*Lupe Christoph*
im Auftrag von / on behalf of
*Creative Data AG*
- Standort Süddeutschland -
Herrenberger Straße 130
D-71034 Böblingen

Mobil:    +49 (0) 172 630 1004
E-Mail: lchristoph at extern.creativedata.de 
<mailto:lchristoph at extern.creativedata.de>
Web:www.creative-data.de <http://www.creative-data.de/>

Firmensitz: Robert-Bosch Str. 10 D-50769 Köln, Deutschland

Sitz der Gesellschaft: Köln, Registergericht Köln, HRB: 45125 Köln
Vorstand: Heinz Friebel, Aufsichtsratvorsitzender: Gerhard Böhm

-------------- next part --------------
A non-text attachment was scrubbed...
Name: lchristoph.vcf
Type: text/x-vcard
Size: 339 bytes
Desc: not available
URL: <https://lists.freedesktop.org/archives/lightdm/attachments/20170206/7c8dabed/attachment.vcf>


More information about the LightDM mailing list