Virtualbox steals password from lock screen

Bug #1644124 reported by Philipp
256
This bug affects 1 person
Affects Status Importance Assigned to Milestone
gnome-screensaver (Ubuntu)
Expired
Undecided
Unassigned

Bug Description

I just experienced some really troubling behavior from the Ubuntu lock screen:
I had been working in a VirtualBox virtual machine (running Windows 10, if that matters) and after being away from the computer for a while, Ubuntu locked the screen. When I entered my password and confirmed it with return, the lock screen went away and I was surprised to see my password in a terminal I had had open in the virtual machine.
When I tried to close the VirtualBox window, Ubuntu went back to the lock screen. I was not using full-screen mode in VirtualBox.

Here are the installed versions of the relevant packages:
virtualbox-5.0: 5.0.20-106931~Ubuntu~xenial
gnome-screensaver: 3.6.1-7ubuntu5
lightdm: 1.19.5-0ubuntu1

This happened on Ubuntu 16.10 with an x86_64 4.8.0-27-generic kernel.

Revision history for this message
Marc Deslauriers (mdeslaur) wrote :

What desktop environment are you running?

information type: Private Security → Public Security
Changed in gnome-screensaver (Ubuntu):
status: New → Incomplete
Revision history for this message
Philipp (c-ubuntu-f) wrote :

This happened with the default Unity desktop.

Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for gnome-screensaver (Ubuntu) because there has been no activity for 60 days.]

Changed in gnome-screensaver (Ubuntu):
status: Incomplete → Expired
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.