[Secure-testing-team] Bug#746802: xscreensaver: Popup messages visible in spite of locked screen

[Rafał Grzeszczuk]

Package: xscreensaver
Version: 5.26-1
Severity: important
Tags: security



-- System Information:
Debian Release: jessie/sid
  APT prefers testing-updates
  APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.13-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages xscreensaver depends on:
ii  libatk1.0-0          2.12.0-1
ii  libc6                2.18-4
ii  libcairo2            1.12.16-2
ii  libfontconfig1       2.11.0-5
ii  libfreetype6         2.5.2-1
ii  libgdk-pixbuf2.0-0   2.30.7-1
ii  libglade2-0          1:2.6.4-2
ii  libglib2.0-0         2.40.0-2
ii  libgtk2.0-0          2.24.23-1
ii  libice6              2:1.0.8-2
ii  libpam0g             1.1.8-3
ii  libpango-1.0-0       1.36.3-1
ii  libpangocairo-1.0-0  1.36.3-1
ii  libpangoft2-1.0-0    1.36.3-1
ii  libsm6               2:1.2.1-2
ii  libx11-6             2:1.6.2-1
ii  libxext6             2:1.3.2-1
ii  libxi6               2:1.7.2-1
ii  libxinerama1         2:1.1.3-1
ii  libxml2              2.9.1+dfsg1-3
ii  libxmu6              2:1.1.1-1
ii  libxpm4              1:3.5.10-1
ii  libxrandr2           2:1.4.2-1
ii  libxrender1          1:0.9.8-1
ii  libxt6               1:1.1.4-1
ii  libxxf86vm1          1:1.1.3-1
ii  xscreensaver-data    5.26-1

Versions of packages xscreensaver recommends:
ii  libjpeg-progs         8d-2
ii  perl [perl5]          5.18.2-2+b1
ii  wamerican [wordlist]  7.1-1

Versions of packages xscreensaver suggests:
pn  fortune                             <none>
pn  gdm3 | kdm-gdmcompat                <none>
ii  google-chrome-stable [www-browser]  34.0.1847.132-1
ii  iceweasel [www-browser]             24.4.0esr-1
pn  qcam | streamer                     <none>
ii  w3m [www-browser]                   0.5.3-15
pn  xdaliclock                          <none>
pn  xfishtank                           <none>
pn  xscreensaver-gl                     <none>

-- no debconf information