Source: libinput
Version: 1.16.4-3
Severity: important
X-Debbugs-Cc: j...@joshtriplett.org

I have the external wireless "ThinkPad TrackPoint Keyboard II"
(https://www.lenovo.com/us/en/p/accessories-and-software/keyboards-and-mice/keyboards/4y40x49493).

With this keyboard, middle-mouse scrolling *also* sends a middle-click,
which often has the net effect of triggering a paste in addition to
scrolling. This has the potential for unwanted information disclosure
(e.g. passwords), hence the severity.

In the past, with a different keyboard (a wired external ThinkPad
keyboard), middle-mouse scrolling avoids sending a middle-click, and
thus avoids triggering things like middle-mouse paste or opening a new
tab.

I don't know if this is an issue with the handling of this model, or an
issue that changed in libinput.

- Josh Triplett

-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (500, 'testing'), (1, 
'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: arm64

Kernel: Linux 5.16.0-1-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Reply via email to