REDHAT-BUG-1181599: Low severity gnu Emacs vulnerability

Published Jan 13, 2015
·
Updated

It was reported that a left-click in Emacs sometimes modifies the PRIMARY selection. Due to this bug, a paste with a middle click in a web browser can end up in pasting private data.

This flaw affects Emacs version 24.4 only.

Original report (also contains a reproducer):

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774090

CVE request and assignment:

http://www.openwall.com/lists/oss-security/2015/01/03/15

Affected Software

1 affected component
gnu Emacs

Event History

Jan 13, 2015
Data Sourced
12:52 PM
DescriptionSeverityAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of REDHAT-BUG-1181599?

The severity of REDHAT-BUG-1181599 is categorized as a significant security vulnerability due to potential data leakage.

2

How do I fix REDHAT-BUG-1181599?

To fix REDHAT-BUG-1181599, update GNU Emacs to a version above 24.4 where this issue is resolved.

3

What versions of Emacs are affected by REDHAT-BUG-1181599?

REDHAT-BUG-1181599 specifically affects Emacs version 24.4.

4

How does REDHAT-BUG-1181599 impact clipboard behavior?

REDHAT-BUG-1181599 can lead to unintended modification of the PRIMARY selection during a left-click, causing private data to be pasted unexpectedly.

5

Is there a workaround for REDHAT-BUG-1181599?

A temporary workaround for REDHAT-BUG-1181599 is to avoid using left-click actions in Emacs that could modify the PRIMARY selection until the issue is patched.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203