From ${URL} : https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774090 From: Vincent Lefevre <vincent@...c17.net> To: 774090@...s.debian.org Subject: Re: emacs24: a left-click in Emacs sometimes modifies the PRIMARY selection Date: Mon, 29 Dec 2014 18:58:55 +0100 Control: tags -1 security On 2014-12-28 16:29:12 +0100, Vincent Lefevre wrote: > Note: This bug occurs very often and is very annoying, as one needs > to reselect what was selected (sometimes hardly possible). Moreover > the wrongly pasted text is similar to the correct text[*], meaning > that if one doesn't pay attention, one gets a file with permanently > incorrect data! Grrr... That's also a security problem. Due to this bug, a paste with a middle click in a web browser can end up in pasting private data! And Javascript can provide the pasted text to the web site immediately (Facebook does that), before the user can notice the problem. @maintainer(s): after the bump, in case we need to stabilize the package, please let us know if it is ready for the stabilization or not.
With the recipe from https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774090#5 I can reproduce it in app-editors/emacs-24.4-r1. Earlier versions (I've tested with 21.4-r25, 22.3-r12, 23.4-r11, and 24.3-r6; 18.59-r10 doesn't support X) seem to be unaffected.
This is a bug and nothing more. There may be the potential for someone to inadvertently paste data they did not intend to, but nothing nefarious is happening here. @Ulrich, thank you for the testing and cleaning the tree.
