Why?

The makers of iTerm2, a popular open-source terminal emulator app for macOS, have released a patch to address a critical flaw recently discovered.

Impact

In some circumstances the flaw could allow an attacker to execute commands on your machine when you view a file or otherwise receive input they have crafted in iTerm2, according to iTerm2 developers.

Action Needed

Update to version 3.3.6 of iTerm 2, which was released on October 9 and includes the fix for the flaw.