Package: ssh-askpass-fullscreen Version: 0.3-2 Severity: normal This bug is already reported against the package in ubuntu, see: https://bugs.launchpad.net/ubuntu/+source/ssh-askpass-fullscreen/+bug/327588
Whenever ssh-askpass-fullscreen has a question to ask me (whether it's for a passphrase or to allow ssh-agent to use my key) it's display a dialog saying: "Could not grab keyboard. A malicious client may be eavesdropping on your session." If I use gtk-led-askpass or gnome-ssh-askpass (and the changelog says the keyboard grabbing code is taken from that) I don't get that warning. The fix pointed to in the ubuntu bug works, for the debian package the right file to modify is debian/patches/01_grab_fix.patch though. Although this isn't a security problem, it's almost as bad to give false warnings like this, it might make people think they should ignore that kind of warning. -- System Information: Debian Release: 5.0 APT prefers stable APT policy: (700, 'stable'), (600, 'testing'), (500, 'oldstable'), (20, 'unstable'), (10, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 2.6.26-1-vserver-amd64 (SMP w/2 CPU cores) Locale: LANG=da_DK.utf8, LC_CTYPE=da_DK.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages ssh-askpass-fullscreen depends on: ii libatk1.0-0 1.22.0-1 The ATK accessibility toolkit ii libc6 2.7-18 GNU C Library: Shared libraries ii libcairo2 1.6.4-7 The Cairo 2D vector graphics libra ii libfontconfig1 2.6.0-3 generic font configuration library ii libglib2.0-0 2.16.6-1 The GLib library of C routines ii libgtk2.0-0 2.12.11-4 The GTK+ graphical user interface ii libpango1.0-0 1.20.5-3 Layout and rendering of internatio ii libx11-6 2:1.1.5-2 X11 client-side library ii libxcursor1 1:1.1.9-1 X cursor management library ii libxext6 2:1.0.4-1 X11 miscellaneous extension librar ii libxi6 2:1.1.4-1 X11 Input extension library ii libxinerama1 2:1.0.3-2 X11 Xinerama extension library ii libxrandr2 2:1.2.3-1 X11 RandR extension library ii libxrender1 1:0.9.4-2 X Rendering Extension client libra ssh-askpass-fullscreen recommends no packages. ssh-askpass-fullscreen suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
