! Please note that this is a snapshot of our old Bugzilla server, which is read only since May 29, 2020. Please go to gitlab.xfce.org for our new server !
Notification Subsystem Error: xfce4-notifyd[3466]: Failed to set text '<messa...
Status:
RESOLVED: WONTFIX
Product:
Xfce4-notifyd
Component:
general

Comments

Description PaulD 2018-11-03 01:46:40 CET
notifyd generates error on many messages, not all, from Signal Desktop, leaking message contents to the system log.  I think it happens when message contains emojis.

I noticed in system logs *full text* messages from Signal inside error messages from xfce4-notifyd.  I've reported this to Signal, but I wonder if notifyd could sanitize the error text?  This is sort of a security issue, since signal is counting on notifyd passing it to the user, but it's unexpectedly ending up in the system logs.
Comment 1 Simon Steinbeiss editbugs 2018-12-06 22:46:34 CET
Currently there is no easy fix for this. Please check the FAQ for the workaround.
https://docs.xfce.org/apps/notifyd/faq

Bug #14826

Reported by:
PaulD
Reported on: 2018-11-03
Last modified on: 2018-12-06

People

Assignee:
Simon Steinbeiss
CC List:
0 users

Version

Attachments

Additional information