[Pkg-xfce-devel] Bug#734472: lightdm-gtk-greeter: crash with NULL username

[corsac at debian.org (Yves-Alexis Perez)]

Package: lightdm-gtk-greeter
Version: 1.1.6-2
Severity: important

Entering an empty username can make lightdm-gtk-greeter crash. No CVE
assigned yet.

More info:

https://bugs.launchpad.net/lightdm-gtk-greeter/+bug/1266449
http://thread.gmane.org/gmane.comp.security.oss.general/11812


-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable'), (450, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.12-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.utf8, LC_CTYPE=fr_FR.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages lightdm-gtk-greeter depends on:
ii  libc6                   2.17-97
ii  libcairo2               1.12.16-2
ii  libgdk-pixbuf2.0-0      2.28.2-1+b1
ii  libglib2.0-0            2.38.2-1
ii  libgtk-3-0              3.8.6-1
ii  liblightdm-gobject-1-0  1.9.5-1
ii  libx11-6                2:1.6.2-1

Versions of packages lightdm-gtk-greeter recommends:
ii  desktop-base               7.0.3
ii  gnome-icon-theme-symbolic  3.10.1-1
ii  gnome-themes-standard      3.8.4-1
ii  policykit-1                0.105-4

lightdm-gtk-greeter suggests no packages.

-- Configuration Files:
/etc/lightdm/lightdm-gtk-greeter.conf changed [not included]

-- debconf information:
* shared/lightdm-greeter: lightdm-gtk-greeter
  lightdm-gtk-greeter/lightdm-greeter: lightdm-gtk-greeter