Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.misc > #1357 > unrolled thread

libVTE scrollback buffer written to disk, affecting gnome-terminal, xfce4-terminal, terminator and more.

Back to article view | Back to comp.misc

Contents

  libVTE scrollback buffer written to disk, affecting gnome-terminal, xfce4-terminal, terminator and more. Paul Sture <nospam@sture.ch> - 2014-03-08 01:21 +0100
    Re: libVTE scrollback buffer written to disk, affecting gnome-terminal, xfce4-terminal, terminator and more. RS Wood <rsw@therandymon.com> - 2014-03-08 10:14 +0000

#1357 — libVTE scrollback buffer written to disk, affecting gnome-terminal, xfce4-terminal, terminator and more.

Apologies if this was already reported on slashdot, but it's still an issue.

<http://www.climagic.org/bugreports/libvte-scrollback-written-to-disk.html>

Title: Gnome terminal, xfce4-terminal, terminator and other libVTE based
       terminals write scrollback buffer data to /tmp filesystem

Summary:
-----------------------------------------------------------------------
  Due to the way the terminal's scrollback history buffer (not shell command
  history) is saved in terminal emulators using libVTE after version 0.21.6,
  data from inside your terminal window can end up on your local filesystem.
  This is most likely unexpected behavior in a terminal emulator and represents
  a very significant security issue.

Affected software:
-----------------------------------------------------------------------
  gnome-terminal
  terminator
  xfce4-terminal
  guake
  evilvte
  lilyterm
  sakura
  termit
  Anything else that uses libVTE for a terminal widget.


-- 
Paul Sture
Not the one on Facebook

[toc] | [next] | [standalone]

#1366

On 2014-03-08, Paul Sture <nospam@sture.ch> wrote:
> Apologies if this was already reported on slashdot, but it's still an
> issue.  Title: Gnome terminal, xfce4-terminal, terminator and other
> libVTE based terminals write scrollback buffer data to /tmp filesystem

Yikes, first noticed in 2011, first reported in March 2012.  Two years
later, it hasn't been fixed.  That's slightly scary.

I use Terminology - it's a gorgeous terminal emulator.  I was surprised
to see it uses some of the same libraries as gnome-terminal.

[toc] | [prev] | [standalone]

Back to top | Article view | comp.misc

csiph-web