Kids find a security flaw in Linux Mint by mashing keys

submitted by [deleted] from github.com

all 3 comments
sorted by:
top
newinsightfulfun

[–]StrategicTactic 5 insightful - 2 fun5 insightful - 1 fun6 insightful - 2 fun -  (0 children)

We have two different issues:

In all versions of Cinnamon, the on-screen keyboard (launched from the menu) runs within the Cinnamon process and uses libcaribou. Pressing ē crashes Cinnamon.

In versions of Cinnamon 4.2 and higher, there's a libcaribou OSK in the screensaver. Pressing ē there crashes the screensaver. ...

Fixed in Mint 19.x, Mint 20.x and LMDE 4.

[–][deleted] 2 insightful - 2 fun2 insightful - 1 fun3 insightful - 2 fun -  (0 children)

I guess Linux Lite is the way to go then?

[–][deleted] 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (0 children)

Oddly enough: since yesterday, we haven't been able to reproduce the crash here. Pressing ē on the on-screen keyboard, or changing the keyboard input language and pressing anything, both just result in characters being added to the password input. The only package change since my comment earlier in the issue was to upgrade NVIDIA drivers from 450.80.02 to 450.102.04. That did include an upgrade of xserver-xorg-video-nvidia-450 which sounds like it could be related, but I am skeptical. Pretty strange.

This Linux thing doesn't seem very reliable.