Package: gnome-osd
Version: 0.11.0-4
Severity: normal
Tags: security
Justification: information leakage

I have xchat with the dbus plugin and gnome-osd with the "Include
message text" from the IRC section on. I also set my screensaver to
auto-lock the screen every so often. I was coming back to the computer
after a late breakfast and saw a message from IRC printed above the
black, locked screen. Someone had sent me a private message that was
leaked while I was away from the keyboard and gnome-osd had relayed it.
Please fix gnome-osd so it detects an active screensaver and doesn't
deliver events while it is on.

-- System Information:
Debian Release: unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17-1-k7
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)

Versions of packages gnome-osd depends on:
ii  gconf2                        2.14.0-1   GNOME configuration database syste
ii  python-gnome2 [python2.4-gnom 2.12.4-1   Python bindings for the GNOME desk
ii  python-gtk2 [python2.4-gtk2]  2.8.6-2    Python bindings for the GTK+ widge
ii  python2.4                     2.4.3-7    An interactive high-level object-o
ii  python2.4-dbus                0.62-3     simple interprocess messaging syst
ii  python2.4-pyorbit-omg         2.0.1-3    PyORBit - python 2.4 CORBA OMG sta

-- 
bye,
pabs

http://wiki.debian.org/PaulWise

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to