oss-security - CVE Request: IBUS showing passwords during password input

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20131104123817.GG19172@suse.de>
Date: Mon, 4 Nov 2013 13:38:17 +0100
From: Marcus Meissner <meissner@...e.de>
To: OSS Security List <oss-security@...ts.openwall.com>
Cc: ftake@...ko.jp
Subject: CVE Request: IBUS showing passwords during password input

Hi,

One of our Japanese users found that some IBUS input methods
show passwords while typing them, if a special "intent" is not
provided.

https://bugzilla.novell.com/show_bug.cgi?id=847718
https://groups.google.com/forum/#!topic/ibus-user/mvCHDO1BJUw

The behaviour started (I think) with with IBUS 1.5.4

Fuminobu Takeyama, is this correct?

Ciao, Marcus

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.