Bug#439552: critical etch security bug, unknown package

[Aidan Reilly]

Package: gdm
Version: 2.16.4

Hi, I'm not sure what package this bug applies to -
possibly gdm, or maybe nautilus, or maybe something
else.

Description:
I set the computer to the log in screen by selecting
'switch user'; I saw it return to the log in screen,
as expected.  When I returned to the computer approx.
1/2 an hour later, my session had resumed, i.e. my
desktop was visible instead of the log in screen (I
have no auto log in set or anything like that). 
(Expected situation would be to see the log in
screen).
This might be related to the last action I did before
logging out: I tried to connect to an ssh server with
nautilus.  This was taking a very long time, so I left
the Nautilus window open and logged out.  When I came
back, the Nautilus window was visible but had crashed
(it was displaying a 'this application is not
responding' prompt).  After clicking 'force quit' my
desktop was visible and usable, without having entered
by password at all.

Configuration info:
I'm running Debian Etch, i386 version.  I've got the
standard 'Desktop' setup and very little else - there
was nothing running at the time of the crash apart
from the Nautilus window, standard Gnome apps (panel
etc.) and an Apache server (running as a separate
user).

Please let me know if you need any other information.

Regards,

Aidan


      ___________________________________________________________ 
Want ideas for reducing your carbon footprint? Visit Yahoo! For Good  http://uk.promotions.yahoo.com/forgood/environment.html