News for hackers. Stuff that matters.
Re:CVE-2021-27135: xterm flaw may allow remote code executio... by cozzyd on Saturday March 20, 2021 @03:11PM (#26525326)
Not to downplay this bug, but how many people use xterm instead of gnome-terminal or Konsole? Or are those somehow affected too?
Re:CVE-2021-27135: xterm flaw may allow remote code executio... by taviso on Saturday March 20, 2021 @03:21PM (#26525405)
I dunno, I use xterm. It's fast, feature-rich, and every minute detail is configurable.

I think gnome-terminal is based on vte, which wasn't affected.

I have no clue about Konsole.

Re:CVE-2021-27135: xterm flaw may allow remote code executio... by cozzyd on Saturday March 20, 2021 @04:07PM (#26525746)
What are some features xterm has that I'm missing out by using gnome-terminal? Not doubting, just ignorant.
Re:CVE-2021-27135: xterm flaw may allow remote code executio... by taviso on Saturday March 20, 2021 @04:28PM (#26525865)
Off the top of my head, two features I don't think gnome-terminal can do:

sixels, this is a terminal graphics format. You could use them to have thumbnails in ls output, or view image attachments in mutt.

Tektronix mode, which is like a line-drawing mode - gnuplot supports it, so you can have really nice looking graphs and plots.

There are just little quality of life improvements, like being able to dump the screen in html format, preserving colors and attributes, or easy one-click access to the alternate screen buffer.

It's also easy to automate. You can use something like xtermcontrol to easily adjust anything from a script. Fonts, window size and position, etc. You can have custom key and mouse bindings too, and these are really powerful, but I'll concede the configuration format is arcane :-)

Re:CVE-2021-27135: xterm flaw may allow remote code executio... by cozzyd on Saturday March 20, 2021 @04:49PM (#26525977)
sixels does look really useful! Fortunately it looks like vte will have it available soon: https://gitlab.gnome.org/GNOME/vte/-/issues/253
Re:CVE-2021-27135: xterm flaw may allow remote code executio... by igetspam on Saturday March 20, 2021 @03:15PM (#26525357)
Lots. Xterm is everywhere. It's like using vim or emacs or bash. It's pretty much always there and always behaves the same.
Re:CVE-2021-27135: xterm flaw may allow remote code executio... by cozzyd on Saturday March 20, 2021 @04:04PM (#26525728)
Sure, and so is Xeyes and ed, but that doesn't mean many people use it. I might use xterm on a remote system I vnc into that has no desktop manager but other than that I'm generally running everything in my local terminal emulator (and then often also in tmux).

I'm sure I have xterm installed but I have never run it locally since like probably most people I just use the terminal emulator for my desktop environment.

Re:CVE-2021-27135: xterm flaw may allow remote code executio... by sneak on Saturday March 20, 2021 @03:17PM (#26525378)
Yes, but despite vim being there on tons of systems, nobody except vim users ever run it.

Same for xterm. It's terrible and almost nobody uses it.