Telegram Desktop steals input on Lock screen (Xorg session)

Bug #1976478 reported by Gijs Peskens
258
This bug affects 1 person
Affects Status Importance Assigned to Milestone
gnome-shell (Ubuntu)
New
Undecided
Unassigned

Bug Description

Sometimes when Telegram Desktop is running input from the password field gets stolen & send to contacts when trying to login.

Steps to reproduce (I think):
-have "draw attention to the window" enabled in TG Desktop settings
-have telegram desktop running in foreground, with conversation open.
-lock screen.
-on mobile device send message & receive replies in same conversation
-try to log back in on desktop, notice that no star characters appear in password field, and when enter is pressed inserted data gets send in open conversation.

Tags: jammy
information type: Private Security → Public Security
Revision history for this message
Gijs Peskens (gijspeskens) wrote :

Found out today that having "draw attention to the window" enabled is not needed to trigger the bug :/

Revision history for this message
Steve Beattie (sbeattie) wrote :

Thanks for the bug report. What release of Ubuntu are you running, and are you sure you are running unity? In Ubuntu 18.04 LTS and newer, unity is deprecated as the default ubuntu desktop, and so this may affect a different window manager than unity.

Revision history for this message
Gijs Peskens (gijspeskens) wrote :

Not sure if it's Unity, likely not it was the suggested package when searching for lock screen issues ;)

I'm on 22.04

My user profile is configured to use Xorg instead of Wayland, due to the amount of bugs that are still on wayland unfortunately :/

Revision history for this message
Gijs Peskens (gijspeskens) wrote :

$XDG_CURRENT_DESKTOP repots ubuntu::GNOME, can the bug be pointed to the correct package, or should I file a new one?

affects: unity (Ubuntu) → gnome-shell (Ubuntu)
tags: added: jammy
summary: - Telegram Desktop steals input on Lock screen
+ Telegram Desktop steals input on Lock screen (Xorg session)
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.