On Feb 12, Marco d'Itri <m...@linux.it> wrote: > Package: less > Version: 590-1.1 > Severity: normal > > When using less -R it does not correctly reset the hyperlink escape > sequences (i.e. "ESC]8;;"), causing the hyperlink to be extended to the > following terminal output.
While this looks quite similar to the issue described in #1030825, of which I was not aware when I filed this bug, it is not fixed in less 590-1.2. Does this issue too have security implications? > This can be partially reproduced with something like: > > printf > "\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\e]8;;file://localhost/usr/share/initramfs-tools/scripts/init-top/udev\a/usr/share/initramfs-tools/scripts/init-top/udev > we need a longer line... > /usr/share/initramfs-tools/scripts/init-top/udev\e]8;;\a\n\n\n\n\n\n\n\n" | > less -RS > > in gnome-terminal. > > In this case the link will affect only the less interface, but when > using bootctl I can reliably make the link stay open even after quitting > less. > > Using -S is not a requirement to reproduce this, it just makes it > easier: the bug is also triggered by quitting less when the first line > of a multiline link is the bottom line in the screen. > > -- System Information: > Debian Release: bookworm/sid > APT prefers unstable > APT policy: (500, 'unstable'), (1, 'experimental') > Architecture: amd64 (x86_64) > Foreign Architectures: i386 > > Kernel: Linux 6.1.0-3-amd64 (SMP w/16 CPU threads; PREEMPT) > Locale: LANG=it_IT.utf8, LC_CTYPE=it_IT.utf8 (charmap=UTF-8), LANGUAGE not set > Shell: /bin/sh linked to /usr/bin/dash > Init: systemd (via /run/systemd/system) > LSM: AppArmor: enabled > > Versions of packages less depends on: > ii libc6 2.36-8 > ii libtinfo6 6.4-2 > > less recommends no packages. > > less suggests no packages. > > -- no debconf information > > -- > ciao, > Marco -- ciao, Marco
signature.asc
Description: PGP signature
