Comment 0 for bug 1972889

Revision history for this message
Ivan Roganov (newarked) wrote :

# lsb_release -rd
Description: Ubuntu 22.04 LTS
Release: 22.04

# apt-cache policy gnome-shell
gnome-shell:
  Installed: 42.0-2ubuntu1
  Candidate: 42.0-2ubuntu1
  Version table:
 *** 42.0-2ubuntu1 500
        500 http://us.archive.ubuntu.com/ubuntu jammy/main amd64 Packages
        100 /var/lib/dpkg/status

Ubuntu is installed on a laptop. Within five minutes of inactivity, the screen lock activates and locks the system. Computer is secured. 10 minutes later, my cat (her name is Loaf) comes up to the laptop and sits down on the keyboard. This activates a screen reader. (Shortcut is Alt + Super + S)

What I've expected:
Screen reader would start reading the contents of a lock screen

What happened:
Screen reader app started reading contents of a Brave Browser window that was opened on my desktop. It read all tabs and proceeded reading the opened web page.

I've reported this bug at <email address hidden> and got the following answer:

> Nice find - I am able to reproduce this locally in Ubuntu 22.04 LTS too
> - I suspect this is a vulnerability in gnome-shell as it is
> responsible for handling the lock screen in standard Ubuntu.

As per further directions, I'm posting this bug here and in gnome repo.

P.S. I expect Loaf being credited for this find. She really likes treats.