6 ms·
iTerm2 author here. This could be used as a link in an exploit chain but by itself the claim in the title is massively overblown. I’m on a family vacation but I
by gnachman 5mo ago
iTerm2 author here. This could be used as a link in an exploit chain but by itself the claim in the title is massively overblown. I’m on a family vacation but I’ll release a fix when I get back.
- srj 5mo agoI love iTerm2, thank you!
- cryptbe 5mo agoDisclosure: I didn't discover the vulnerability. I wrote the blog post. Thanks for releasing a fix! It was surprising that there wasn't an official release, even though the bug impacts otherwise routine, harmless workflows. The patch itself [1] framed the issue as "hypothetical," so the goal of the blog post was to demonstrate that it is not. I'm glad that you've agreed to release a fix. [1] https://github.com/gnachman/iTerm2/commit/a9e745993c2e2cbb30b884a16617cd5495899f86 https://github.com/gnachman/iTerm2/commit/a9e745993c2e2cbb30...
- hmokiguess 5mo agoThank you for iTerm2, I appreciate your response here, enjoy your vacation!