Bug#689689: xvkbd: Move quickly from letter "r" to "e" activate "CONTROL+R" (which kills xdm at default)

[Paul Gevers]

Control: tags -1 wontfix moreinfo

Hi Rene,

Sorry for taking so long to provide a response. The accessibility team
recently took over this package.

On Fri, 5 Oct 2012 08:31:50 +0200 Rene_Kirchner at drewag.de wrote:
> if you click to the letter "r" and then quickly to the letter "e",
> xvkbd activates CONTROL+R (reverse-i-search in xterm).
> The situation appears also when you clock to "r", hold the click and move
> the mouse to the left (e.g. to "e").
> 
> If you use xvkbd in xdm, this kill xdm, because "CONTROL+R" is
> the default setting for killing xdm.

I just found the following in the man page:
"""
IMPORTANT  NOTE:  When invoking xvkbd from display managers such as XDM,
GDM, etc., always use xvkbd with -secure option or you will have serious
security risk.
"""

Can you verify if running with -secure fixes the issue for you?

I assume this text means that upstream is aware of the issue and that it
isn't going to get fixed there. I don't want to have Debian specific
patch if we need to carry it forever.

Paul

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-a11y-devel/attachments/20180220/8b572d79/attachment.sig>