It was reported [1] that IBUS 1.5.4 (and possibly 1.5.2) do not properly obscure password entry if a special "intent" is not provided.

A fix in ibus-anthy [2] illustrates what is necessary to provide the input purpose for the gnome-shell password dialog. A similar patch exists for ibus-mozc [3].

The SUSE bug report notes the following engines are affected:

ibus-mozc ibus-anthy (upstream 1.5.4 is fixed; in current Fedora) ibus-pinyin ibus-chewing

The vulnerability is in these engines due to the changes in IBUS, so it only affects these engines when IBUS >= 1.5.4 (or 1.5.2, it hasn't been determine precisely from what I can see) and GNOME 3.6+ are used together.

[1] https://bugzilla.novell.com/showbug.cgi?id=847718 [2] https://github.com/ibus/ibus-anthy/commit/6aae0a9f145f536515e268dd6b25aa740a5edfe7 [3] https://code.google.com/p/mozc/issues/attachmentText?id=199&aid=1990002000&name=ibus-mozcsupportibus-1.5.4rev2.diff&token=P62umpXGXx68XJT6zyvBA727wqE%3A1383693105690