Package: emacs24 Version: 24.5+1-1 Severity: important Gnus displays remote HTML content, such as (tracking) images, by default. I noticed this when reading [1] on debian-user@l.d.o.
Most other mail clients (Evolution, Icedove) disallow remote content by default and require explicit confirmation. I think gnus should follow this example. Ansgar [1] https://lists.debian.org/55f42a0a712cf_70bf3fc4828aabc09192...@prod-rs-r13.mail -- System Information: Debian Release: 8.2 APT prefers stable APT policy: (500, 'stable'), (100, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores) Locale: LANG=C, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages emacs24 depends on: ii emacs24-bin-common 24.5+1-1 ii gconf-service 3.2.6-3 ii libacl1 2.2.52-2 ii libasound2 1.0.28-1 ii libatk1.0-0 2.14.0-1 ii libc6 2.19-18+deb8u1 ii libcairo-gobject2 1.14.0-2.1 ii libcairo2 1.14.0-2.1 ii libdbus-1-3 1.8.20-0+deb8u1 ii libfontconfig1 2.11.0-6.3 ii libfreetype6 2.5.2-3 ii libgconf-2-4 3.2.6-3 ii libgdk-pixbuf2.0-0 2.31.1-2+deb8u2 ii libgif4 4.1.6-11 ii libglib2.0-0 2.42.1-1 ii libgnutls-deb0-28 3.3.8-6+deb8u3 ii libgomp1 5.1.1-14 ii libgpm2 1.20.4-6.1+b2 ii libgtk-3-0 3.14.5-1+deb8u1 ii libice6 2:1.0.9-1+b1 ii libjpeg62-turbo 1:1.3.1-12 ii libm17n-0 1.6.4-3 ii libmagickcore-6.q16-2 8:6.8.9.9-5 ii libmagickwand-6.q16-2 8:6.8.9.9-5 ii libotf0 0.9.13-2 ii libpango-1.0-0 1.36.8-3 ii libpangocairo-1.0-0 1.36.8-3 ii libpng12-0 1.2.50-2+b2 ii librsvg2-2 2.40.5-1 ii libselinux1 2.3-2 ii libsm6 2:1.2.2-1+b1 ii libtiff5 4.0.3-12.3 ii libtinfo5 5.9+20140913-1+b1 ii libx11-6 2:1.6.2-3 ii libxft2 2.3.2-1 ii libxinerama1 2:1.1.3-1+b1 ii libxml2 2.9.1+dfsg1-5 ii libxpm4 1:3.5.11-1+b1 ii libxrandr2 2:1.4.2-1+b1 ii libxrender1 1:0.9.8-1+b1 ii zlib1g 1:1.2.8.dfsg-2+b1 emacs24 recommends no packages. Versions of packages emacs24 suggests: ii emacs24-common-non-dfsg 24.4+1-2 -- no debconf information