| Summary: | parcellite new security issue fixed upstream in 1.2.2 | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | David Walser <luigiwalser> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | Sec team <security> |
| Severity: | normal | ||
| Priority: | Normal | CC: | andrewsfarm, davidwhodgins, herman.viaene, nicolas.salguero, sysadmin-bugs |
| Version: | 8 | Keywords: | advisory, validated_update |
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | MGA8-64-OK | ||
| Source RPM: | parcellite-1.2.1-3.mga8.src.rpm | CVE: | |
| Status comment: | |||
|
Description
David Walser
2023-04-20 17:23:38 CEST
Cannot see this for M9, nor the M8 SRPM maintenance list; so no idea who normally maintains this, hence assigning it globally. Status comment:
(none) =>
fixed upstream in 1.2.2 For Mga9, parcellite was removed and replaced by clipit. Suggested advisory: ======================== The updated package fixes a security vulnerability: Parcellite clipboard manager might cause your copied secrets to be stored in the plain-text form in the system logs. References: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/TVPMZCHBXJ7JLXD22ZOU4FXBPHM6MRB7/ https://github.com/rickyrockrat/parcellite/issues/79 ======================== Updated package in core/updates_testing: ======================== parcellite-1.2.1-3.1.mga8 from SRPM: parcellite-1.2.1-3.1.mga8.src.rpm CC:
(none) =>
nicolas.salguero MGA8-64 MATE on Acer Aspire 5253 No installation issues. Found previous bug 16279, and some text on its sourceforge page. But I still haven't a clue what this really does. I did a "copy" operation of one file in caja, run parcellite and see in its Edit option, the name of the file. I caan edit that name to the name of anotheer file in the same folder, but then pasting still pasts the first file. Beats me ..... CC:
(none) =>
herman.viaene Hi, parcellite is a software that keeps an history of what you copy, like Klipper for Plasma, for instance. I use it everyday and, for me, its best usage is with text: with it, I am able to copy several texts once and, then, paste all of them, in the order I want. Best regards, Nico. I still don't get it. If I select some text with Ctr-C, copy a second text with Ctr-C and then go to the panel and click on the "P" I get the first and second selected text, but when I open "Edit clipboard" I see only the second selected text. And I can only paste the second. Is that expected behavior???? Yes it is: the text which you can paste is the one at the top of the history. So, to paste the first selected text, you need to left click on it to put it at the top of the history. OK, fine then as it is. Whiteboard:
(none) =>
MGA8-64-OK Validating. Advisory in comment 2. Keywords:
(none) =>
validated_update
Dave Hodgins
2023-05-06 18:22:42 CEST
CC:
(none) =>
davidwhodgins An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2023-0162.html Status:
ASSIGNED =>
RESOLVED |