Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.misc > #1357

libVTE scrollback buffer written to disk, affecting gnome-terminal, xfce4-terminal, terminator and more.

From Paul Sture <nospam@sture.ch>
Newsgroups comp.misc
Subject libVTE scrollback buffer written to disk, affecting gnome-terminal, xfce4-terminal, terminator and more.
Date 2014-03-08 01:21 +0100
Organization PostgreSQL and SQLite
Message-ID <cd4qua-i52.ln1@news.chingola.ch> (permalink)

Show all headers | View raw


Apologies if this was already reported on slashdot, but it's still an issue.

<http://www.climagic.org/bugreports/libvte-scrollback-written-to-disk.html>

Title: Gnome terminal, xfce4-terminal, terminator and other libVTE based
       terminals write scrollback buffer data to /tmp filesystem

Summary:
-----------------------------------------------------------------------
  Due to the way the terminal's scrollback history buffer (not shell command
  history) is saved in terminal emulators using libVTE after version 0.21.6,
  data from inside your terminal window can end up on your local filesystem.
  This is most likely unexpected behavior in a terminal emulator and represents
  a very significant security issue.

Affected software:
-----------------------------------------------------------------------
  gnome-terminal
  terminator
  xfce4-terminal
  guake
  evilvte
  lilyterm
  sakura
  termit
  Anything else that uses libVTE for a terminal widget.


-- 
Paul Sture
Not the one on Facebook

Back to comp.misc | Previous | Next — Next in thread | Find similar | Unroll thread


Thread

libVTE scrollback buffer written to disk, affecting gnome-terminal, xfce4-terminal, terminator and more. Paul Sture <nospam@sture.ch> - 2014-03-08 01:21 +0100
  Re: libVTE scrollback buffer written to disk, affecting gnome-terminal, xfce4-terminal, terminator and more. RS Wood <rsw@therandymon.com> - 2014-03-08 10:14 +0000

csiph-web