The flaw interferes with the clipboard and text files (even Qubes clipboard)
How to reproduce!
- Install thunar-gtkhash in Whonix (it probably affects all Linux)
sudo apt install thunar-gtkhash - Download the checksums for a nightly release of Pentoo.ch and write on a piece of paper.
Of course this is no accident because they used some uncommon hashes. - Download Pentoo (scurl-download https://…) and use thunar-gtkhash. Open with Mousepad the hash file.
Copy and paste the hash from thunar-gtkhash under the hash provided in the text file.
They shoud be different of what you have on the piece of paper but the same in the text file.