Ironically Linux has had so many long standing versions of this exact vulnerability (screensaver issues leading to various forms of terrible disclosure) that it's not even really interesting to talk about them.

I'd send you to the relevant jwz rants but I'd rather spare everyone the goatse-ing...