[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: patch for screen



Christopher J. Pace (cpace@hnsg.net) said:
> Timo Sirainen reported a vulnerability in screen in which an attacker can
> gain the privledges of the user/group in which screen runs as.  I have
> used his submitted patch to create a .deb for Debian users, since Debian
> security is bogged down @ the moment.

Quoting http://bugs.debian.org/222385 (screen: buffer overflow):

> woody packages are at
> http://pkg-screen.alioth.debian.org/woody-security/ and the security
> team was made aware of them.
> 
> sid packages have been uploaded... maybe someday they'll be built and
> moved into sarge.
> 
> This bug will be closed when they both make it into their appropriate
> dists.

-- 
Adam Lazur, Cluster Monkey



Reply to: