evolution gpg passphrase input does not receive focus

That's not a security vulnerability

Thank you for your bug. The dialog gets the focus correctly on my gutsy. Do you use compiz? Does it happen without it? Could you describe steps to trigger the issue?

I think it is a security vulnerability if the password is typed into the body of the message inadvertently and not caught and deleted.

I am running evolution with Kubuntu Gutsy under KDE. Evolution is the only Gnome app that I run. I need it to connect to my company's MS Exchange server.

looks like a KDE bug, the dialog get the focus correctly on GNOME

Most likely, you are right, it is an interaction between evolution and KDE.

That said, I get the feeling that I am not the only one who prefers KDE to gnome, but needs to use Evolution because my work email is on an MS Exchange server. For [K]Ubuntu to succeed on the workplace desktop, either kmail/kontact needs to do Exchange mail, or Evolution needs to run bug-free in KDE and xfce[1].

Is there somewhere else we should be reporting this?

[1] My MIS department supports about 500 desktops. It is a windows shop with the exception of two machines in the IT dept. We have been informed by our computer vendor that, as of Jan 08, all computers will ship with Windows Vista. My department does not want to support Vista, and our plan is to convert new workstations to Kubuntu. The Evolution version that comes with Feisty is not ready to replace the Outlook functionality, but the one in Gutsy is almost there. (Global address autofill still causes evolution lockups, but lookups work fine and the public folders now seem to work well.)

This seems to have been fixed. Evolution now uses pinentry for the gpg passphrase enty, and the focus is correct.