Other related discussions and possible CVEs [LWN.net]

Other related discussions and possible CVEs

Posted Apr 9, 2018 21:27 UTC (Mon) by anarcat (subscriber, #66354)
In reply to: A look at terminal emulators, part 1 by jwilk
Parent article: A look at terminal emulators, part 1

As it turns out, this specific issue was discussed elsewhere before. A friend pointed me towards this discussion. As it turns out, the conclusion was basically "meh, we know":

This is posted here every few months. Frankly, there's a lackluster care in fixing this in these terminals. For terminals, here's a decent avenue (gnome-terminal as example): https://turbochaos.blogspot.com/2014/08/journalctl-terminal-escape-injection.html

That latter thread is even more disturbing, in a way...