{"version": "https://jsonfeed.org/version/1", "title": "/dev/posts/ - Tag index - terminal", "home_page_url": "https://www.gabriel.urdhr.fr", "feed_url": "/tags/terminal/feed.json", "items": [{"id": "http://www.gabriel.urdhr.fr/2023/09/23/code-execution-through-kitty-open/", "title": "Arbitrary code execution through kitty-open.desktop file association", "url": "https://www.gabriel.urdhr.fr/2023/09/23/code-execution-through-kitty-open/", "date_published": "2023-09-23T00:00:00+02:00", "date_modified": "2023-09-23T00:00:00+02:00", "tags": ["computer", "security", "terminal", "kitty"], "content_html": "

In Debian kitty package, the\nkitty-open.desktop file would associate kitty +open with several MIME types.\nThis could be used to arbitrary trigger code execution by serving a\nfile with such a MIME type.

\n

This has been introduced in kitty in 73a197fcd (2022-02-06)\nreleased as part of v0.24.3.\nThis has been fixed in v0.26.5-5 of the Debian kitty package.\nFixed upstream in\n537cabca7\nreleased in v0.29.0.\nOther distributions\nsuch as Ubuntu Lunar\nare still impacted.

\n"}, {"id": "http://www.gabriel.urdhr.fr/2023/08/29/simple-iterm2-image/", "title": "Simple terminal image display using the iTerm2 image protocol", "url": "https://www.gabriel.urdhr.fr/2023/08/29/simple-iterm2-image/", "date_published": "2023-08-29T00:00:00+02:00", "date_modified": "2023-08-29T00:00:00+02:00", "tags": ["computer", "terminal", "image", "python", "matplotlib"], "content_html": "

A simple way to display image in a terminal using the iTerm2 image protocol.\nThis is supported by iTerm2,\nWezTerm,\nrecent versions of Konsole.

\n"}]}