oss-sec mailing list archives
Re: CVE Request: IBUS showing passwords during password input
From: Fuminobu TAKEYAMA <ftake () geeko jp>
Date: Mon, 4 Nov 2013 22:37:11 +0900
Hello,
The behaviour started (I think) with with IBUS 1.5.4
Yes. It happens on IBus-enabled GNOME 3.6+ with IBus 1.5.4 if IBus's engines (plug-ins) do not support new API introduced by 1.5.4. Actually, this problem is not found by me, though. The upstream has already announced in [1]. An IBus developer (Mr. Fuijiwara) says in [1]: "1.5.2 or lower do not handle the input purpose so the typed chars are shown as the bug." So I think the same problem may happen also on GNOME 3.6 + IBus 1.5.2. [1] https://groups.google.com/forum/#!topic/ibus-user/mvCHDO1BJUw Best regards, Fuminobu TAKEYAMA 2013/11/4 Marcus Meissner <meissner () suse de>:
Hi, One of our Japanese users found that some IBUS input methods show passwords while typing them, if a special "intent" is not provided. https://bugzilla.novell.com/show_bug.cgi?id=847718 https://groups.google.com/forum/#!topic/ibus-user/mvCHDO1BJUw The behaviour started (I think) with with IBUS 1.5.4 Fuminobu Takeyama, is this correct? Ciao, Marcus
Current thread:
- CVE Request: IBUS showing passwords during password input Marcus Meissner (Nov 04)
- Re: CVE Request: IBUS showing passwords during password input Fuminobu TAKEYAMA (Nov 04)
- Re: Re: CVE Request: IBUS showing passwords during password input Kurt Seifried (Nov 04)
- Re: CVE Request: IBUS showing passwords during password input Fuminobu TAKEYAMA (Nov 04)