lock screen bypass with ctrl+alt+t

[azul]

I can still bypass the logscreen by rightclicking the indicators some times and then pressing CTRL+ALT+t.

I lock the screen with CTRL+ALT+L.

Then i rightclick on the indicators ( volume, calendar, shutdown) a few times. I have not yet figured out if one of them is the cause... But pressing CTRL+ALT+T shortly after some of those events will open a terminal that i can type into and that will execute commands.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Marc Deslauriers (mdeslaur)]

Yes, we've managed to reproduce this, and are working on a fix. Thanks.

[Marc Deslauriers (mdeslaur)]

Here's a quick status update:

We've been testing some updates to correct this issue, and they solve the problem. While testing, the original bug reporter discovered a regression in the shut down dialogue, which we will address before releasing an update.

Thank you for your patience.

[Launchpad Janitor (janitor)]

This bug was fixed in the package unity - 7.2.0+14.04.20140423-0ubuntu1.2

---------------
unity (7.2.0+14.04.20140423-0ubuntu1.2) trusty-security; urgency=medium

  * SECURITY UPDATE: more lock screen bypass issues, and regression with
    shutdown dialog (LP: #1314247)
    - debian/patches/lp1314247.patch: improve popup menu handling in
      lockscreen/LockScreenShield.cpp, lockscreen/LockScreenPanel.cpp,
      services/panel-service.c, plugins/unityshell/src/unityshell.cpp,
      lockscreen/LockScreenController.*, shutdown/SessionController.cpp,
      tests/test_session_controller.cpp.
 -- Marc Deslauriers <email address hidden> Wed, 30 Apr 2014 11:11:18 -0400