Untitled attachment

Notices where this attachment appears

1. Embed this notice
   abadidea (0xabad1dea@infosec.exchange)'s status on Friday, 03-Jan-2025 23:22:00 JST abadidea

   ⚠️ If you use iTerm with the SSH integration functionality: some debug code accidentally shipped to production and it may be logging the entire session to /tmp... on the REMOTE server. If you SSH to shared hosts with iTerm, you'll probably want to look into deleting that as quickly as possible https://iterm2.com/downloads/stable/iTerm2-3_5_11.changelog

2. Embed this notice
   zunda (zundan@mastodon.zunda.ninja)'s status on Friday, 03-Jan-2025 10:23:16 JST zunda

   iTerm2を3.5.11に更新するのが吉なのかしら

   > Who is affected?
   > ----------------
   > You may be affected if you used the SSH integration feature in any of the following versions:
   > * 3.5.6
   > * 3.5.7
   > * 3.5.8
   > * 3.5.9
   > * 3.5.10
   > * Any beta versions of 3.5.6 and later.
   >
   > What is the issue?
   > ------------------
   > A bug in the SSH integration feature caused input and output to be logged to a file on the remote host. This file, /tmp/framer.txt, may be readable by other users on the remote host.
   https://iterm2.com/downloads/stable/iTerm2-3_5_11.changelog

3. Embed this notice
   Hacker News 50 (hn50@social.lansky.name)'s status on Friday, 03-Jan-2025 08:02:27 JST Hacker News 50

   iTerm2 Critical Security Release

   Link: https://iterm2.com/downloads/stable/iTerm2-3_5_11.changelog
   Discussion: https://news.ycombinator.com/item?id=42579472