Ubuntu
software-center package

Keyboard paste (C-v) always goes to search

Bug #1205812 reported by Thom Wiggers
26
This bug affects 6 people
Affects Status Importance Assigned to Milestone
software-center (Ubuntu)
Confirmed
Low
Unassigned

Bug Description

Pasting text in the login fields results in that being appended to the search string and a new search getting executed, moving away from the login page. This can potentially leak passwords to Ubuntu.

See original description
Tags: u1-notrack
Revision history for this message
Dave Morley (davmor2) wrote :

Hi could you please put in exact steps to reproduce this issue.

If you could please install recordmydesktop and screencapture it many thanks.

Changed in software-center:
status: New → Incomplete
assignee: nobody → Dave Morley (davmor2)
tags: added: u1-notrack
Revision history for this message
Thom Wiggers (twiggers) wrote :

I used GNOME3's feature to record a screencast.

Revision history for this message
Thom Wiggers (twiggers) wrote :

I'm by the way using ubuntu-GNOME, 13.04 - I thought I had mentioned this in the original report....

Revision history for this message
Dave Morley (davmor2) wrote :

Thanks for that.

Changed in software-center:
status: Incomplete → Confirmed
importance: Undecided → Low
assignee: Dave Morley (davmor2) → Ubuntu One Client Engineering team (ubuntuone-client-engineering)
dobey (dobey)
summary: - Can't paste in login page
+ Keyboard paste (C-v) always goes to search
Revision history for this message
scruss (scruss) wrote :

Major bug still present in 13.10. Pasting from a password manager (like KeePass) results in my Ubuntu One password being sent in plain to the Software Centre search app. As this information is stored by Canonical (see: https://wiki.ubuntu.com/SoftwareCenter/Recommendations), I now have to go off and change my password.

Please fix this. It's not low priority, it's a password leak. It is not expected (and definitely not accessible) that paste fails in this form.

Matthew Paul Thomas (mpt)
Changed in software-center:
assignee: Ubuntu One Client Engineering team (ubuntuone-client-engineering) → nobody
Revision history for this message
András Ács (zodcode) wrote :

Confirmed in 14.04.

Agree that this should be higher priority. Two releases since, one an LTS...

I rarely use Software Center. The one time I did recently, I was presented with a Buy button for a free app, only to be greeted with this bug after clicking on it. I am sorry to rant in the bug tracker, but this does not inspire much confidence in Ubuntu as a whole.

Thom Wiggers (twiggers)
description: updated
Revision history for this message
Matthew Paul Thomas (mpt) wrote :

(András, "Buy" for free apps is bug 968974.)

dobey (dobey)
affects: software-center → software-center (Ubuntu)
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Bug attachments

Remote bug watches

Bug watches keep track of this bug in other bug trackers.