Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
| From | Paul Sture <nospam@sture.ch> |
|---|---|
| Newsgroups | comp.misc |
| Subject | libVTE scrollback buffer written to disk, affecting gnome-terminal, xfce4-terminal, terminator and more. |
| Date | 2014-03-08 01:21 +0100 |
| Organization | PostgreSQL and SQLite |
| Message-ID | <cd4qua-i52.ln1@news.chingola.ch> (permalink) |
Apologies if this was already reported on slashdot, but it's still an issue.
<http://www.climagic.org/bugreports/libvte-scrollback-written-to-disk.html>
Title: Gnome terminal, xfce4-terminal, terminator and other libVTE based
terminals write scrollback buffer data to /tmp filesystem
Summary:
-----------------------------------------------------------------------
Due to the way the terminal's scrollback history buffer (not shell command
history) is saved in terminal emulators using libVTE after version 0.21.6,
data from inside your terminal window can end up on your local filesystem.
This is most likely unexpected behavior in a terminal emulator and represents
a very significant security issue.
Affected software:
-----------------------------------------------------------------------
gnome-terminal
terminator
xfce4-terminal
guake
evilvte
lilyterm
sakura
termit
Anything else that uses libVTE for a terminal widget.
--
Paul Sture
Not the one on Facebook
Back to comp.misc | Previous | Next — Next in thread | Find similar | Unroll thread
libVTE scrollback buffer written to disk, affecting gnome-terminal, xfce4-terminal, terminator and more. Paul Sture <nospam@sture.ch> - 2014-03-08 01:21 +0100 Re: libVTE scrollback buffer written to disk, affecting gnome-terminal, xfce4-terminal, terminator and more. RS Wood <rsw@therandymon.com> - 2014-03-08 10:14 +0000
csiph-web