CVE-2018-14345

SDDM vulnerability CVE-2018-14345 affects versions up to 0.17.0 where, when ReuseSession=true, the password is not checked for users with an existing session. Any user with access to the system D-Bus could unlock a graphical session. Root cause identified in daemon/Display.cpp and helper/backend/...