Hi all,
Just forwarding this along from the Xfce list as Geany (and many other programs) also use this same library for the Terminal feature. I'm not convinced it's a big deal, but none-the-less users should be aware of it. See the link in the forwarded message for more information.
Cheers, Matthew Brush
-------- Original Message -------- Subject: Security issue in Terminal Date: Wed, 07 Mar 2012 11:28:58 -0500 From: David Rosenstrauch <darose darose.net> Reply-To: Xfce general discussion list xfce@xfce.org To: xfce@xfce.org
Has there already been a bug report filed for this security issue in Terminal?
http://www.climagic.org/bugreports/libvte-scrollback-written-to-disk.html
Thanks,
DR _______________________________________________ Xfce mailing list Xfce@xfce.org https://mail.xfce.org/mailman/listinfo/xfce http://www.xfce.org
Which distros are still mounting /tmp on the hard drive rather than on a tmpfs file system ? Le 8 mars 2012 00:20, "Matthew Brush" mbrush@codebrainz.ca a écrit :
Hi all,
Just forwarding this along from the Xfce list as Geany (and many other programs) also use this same library for the Terminal feature. I'm not convinced it's a big deal, but none-the-less users should be aware of it. See the link in the forwarded message for more information.
Cheers, Matthew Brush
-------- Original Message -------- Subject: Security issue in Terminal Date: Wed, 07 Mar 2012 11:28:58 -0500 From: David Rosenstrauch <darose darose.net> Reply-To: Xfce general discussion list xfce@xfce.org To: xfce@xfce.org
Has there already been a bug report filed for this security issue in Terminal?
http://www.climagic.org/**bugreports/libvte-scrollback-** written-to-disk.htmlhttp://www.climagic.org/bugreports/libvte-scrollback-written-to-disk.html
Thanks,
DR ______________________________**_________________ Xfce mailing list Xfce@xfce.org https://mail.xfce.org/mailman/**listinfo/xfcehttps://mail.xfce.org/mailman/listinfo/xfce http://www.xfce.org ______________________________**_________________ Geany-devel mailing list Geany-devel@uvena.de https://lists.uvena.de/cgi-**bin/mailman/listinfo/geany-**develhttps://lists.uvena.de/cgi-bin/mailman/listinfo/geany-devel
Le 08/03/2012 17:31, Johann SAUNIER a écrit :
Which distros are still mounting /tmp on the hard drive rather than on a tmpfs file system ?
Not Debian Sid obviously:
$ /bin/df -h /tmp/ Filesystem Size Used Avail Use% Mounted on tmpfs 767M 67M 700M 9% /tmp
...but Debian Stable does:
$ /bin/df -h /tmp/ Filesystem Size Used Avail Use% Mounted on /dev/... 19G 3.8G 14G 22% /
Le 8 mars 2012 00:20, "Matthew Brush" <mbrush@codebrainz.ca mailto:mbrush@codebrainz.ca> a écrit :
Hi all, Just forwarding this along from the Xfce list as Geany (and many other programs) also use this same library for the Terminal feature. I'm not convinced it's a big deal, but none-the-less users should be aware of it. See the link in the forwarded message for more information.
I don't think it's really a big deal with Geany's terminal in which I doubt users could do much sensible enough stuff. However yes, it's probably worth a note, maybe in the manual. Though, as Johann pointed out, at least some distros are mounting tmpfs on /tmp by default so aren't affected by the issue.
Regards, Colomban
Cheers, Matthew Brush -------- Original Message -------- Subject: Security issue in Terminal Date: Wed, 07 Mar 2012 11:28:58 -0500 From: David Rosenstrauch <darose darose.net <http://darose.net>> Reply-To: Xfce general discussion list <xfce@xfce.org <mailto:xfce@xfce.org>> To: xfce@xfce.org <mailto:xfce@xfce.org> Has there already been a bug report filed for this security issue in Terminal? http://www.climagic.org/__bugreports/libvte-scrollback-__written-to-disk.html <http://www.climagic.org/bugreports/libvte-scrollback-written-to-disk.html> Thanks, DR _________________________________________________ Xfce mailing list Xfce@xfce.org <mailto:Xfce@xfce.org> https://mail.xfce.org/mailman/__listinfo/xfce <https://mail.xfce.org/mailman/listinfo/xfce> http://www.xfce.org _________________________________________________ Geany-devel mailing list Geany-devel@uvena.de <mailto:Geany-devel@uvena.de> https://lists.uvena.de/cgi-__bin/mailman/listinfo/geany-__devel <https://lists.uvena.de/cgi-bin/mailman/listinfo/geany-devel>
Geany-devel mailing list Geany-devel@uvena.de https://lists.uvena.de/cgi-bin/mailman/listinfo/geany-devel