Share story
Security

Ghostty 1.4.0 fixes terminal-output and command-execution vulnerabilities

Ghostty 1.4.0 fixes terminal-output and command-execution vulnerabilities Image: Primary
Ghostty released version 1.4.0 on October 27, fixing vulnerabilities that could let malicious terminal output read or delete files outside permitted temporary directories in limited cases. Its release notes also describe fixes for crashes and hangs triggered by malicious output. On macOS, crafted hyperlinks could lead to arbitrary command execution when users clicked them. Ghostty now blocks unsafe targets and asks users to confirm custom URL schemes. Other fixes address paste protection and crafted file names that could run a different command from the one displayed for confirmation. The release also compresses hidden scrollback, which maintainers say reduces physical memory use by 70% to 90% for typical text-heavy history. Compression is available on macOS and 64-bit Linux.
Sources
ghostty.org
In this story
Apple
Published by Tech & Business, a media brand covering technology and business. This story was sourced from ghostty.org and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Capital Infrastructure
Capital Infrastructure

General Compute raises $100 million for inference cloud infrastructure

General Compute raised $100 million in Series A funding led by Blackbird Ventures and Abstract Ventures, valuing the company at $800 million post-money, TechCrunch reported. A customer deal worth $100 million in annual recurring r...

TechCrunch
Capital AI
Capital AI

Avante raises $30M Series A for employee benefits platform

Avante raised a $30M Series A for its AI platform that helps companies manage employee healthcare and other benefits, GeekWire reported. The financing follows a $10M seed round in 2024 and adds capital to the employee benefits sof...

Techmeme
Robotics Capital
Robotics Capital

London robotics startup Machenta raises $40M seed round

London-based Machenta has raised a $40M seed round, Business Insider reports. The robotics startup is developing an AI model intended to teach robots new physical tasks after seeing them performed once, pursuing an approach that s...

Techmeme
Security
Security

Warp discloses vendor breach affecting agent logs and telemetry

Warp disclosed that an attack on a third-party infrastructure vendor exposed AI agent decision logs and user telemetry, BleepingComputer reported. CEO Zach Lloyd estimates that roughly 1% of users may have been affected. Lloyd sa...

BleepingComputer