Wednesday, March 7, 2012

[BLUG] gnome-terminal, xfce4-terminal, terminator and others are unsafe

I'm trying to release this many places so that people see it and
take care of it for themselves. Terminal emulators that use the
libvte library, which include gnome-terminal, xfce4-terminal,
terminator and guake write their scrollback buffer history to disk in
the /tmp directory:

http://www.climagic.org/bugreports/libvte-scrollback-written-to-disk.html

A video showing how this works and why you should be concerned is here:

http://www.youtube.com/watch?v=LgNLHskYvVE

--
Mark Krenz
Bloomington Linux Users Group
http://www.bloomingtonlinux.org/

Sent from Mutt using Linux
_______________________________________________
BLUG mailing list
BLUG@linuxfan.com
http://mailman.cs.indiana.edu/mailman/listinfo/blug