From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6)
Description of problem:
When using face browsing, gdm does not behave correctly, causing your
password to be exposed in a readable format during login.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Enable face browsing in GDM
2. Double click on a user's icon
Once you double click on a user's icon focus is transferred to the
text input box.
The text input box prompts you for a username.
Those familiar with GDM may then accidentally input their password (as
this is the usual behaviour for GDM) causing it to be visible to
anyone who sees the screen.
After double clicking on the user's icon, you should be prompted for a
password in a password field, so that it is not readable when you type
This bug also causes GDM to incorectly let you log in by letting you
use your password as your username, and no password (ie password field
is left blank).
This is already fixed upstream. See:
*** Bug 114858 has been marked as a duplicate of this bug. ***