Bug#1036811: bullseye-pu: package ncurses/6.2+20201114-2+deb11u2
- To: Sven Joachim <svenjoac@gmx.de>, 1036811@bugs.debian.org
- Subject: Bug#1036811: bullseye-pu: package ncurses/6.2+20201114-2+deb11u2
- From: Jonathan Wiltshire <jmw@debian.org>
- Date: Sun, 23 Jul 2023 14:12:41 +0100
- Message-id: <ZL0nSTImta/gFQIR@powdarrmonkey.net>
- Reply-to: Jonathan Wiltshire <jmw@debian.org>, 1036811@bugs.debian.org
- In-reply-to: <87r0r3rkms.fsf@turtle.gmx.de>
- References: <87r0r3rkms.fsf@turtle.gmx.de> <87r0r3rkms.fsf@turtle.gmx.de>
Control: tag -1 moreinfo
On Fri, May 26, 2023 at 08:51:55PM +0200, Sven Joachim wrote:
> [ Risks ]
> Users who are relying on their own terminfo files under
> ${HOME}/.terminfo can no longer use them in setuid/setgid programs and
> will have to work around that, e.g. by changing their TERM environment
> variable, using a different terminal emulator or asking their sysadmin
> for help.
>
> On my systems I did not find any setuid binaries linked to the tinfo
> library, but some setgid games in the bsdgames package.
Would a news entry highlighting this be appropriate?
Thanks,
--
Jonathan Wiltshire jmw@debian.org
Debian Developer http://people.debian.org/~jmw
4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1
Reply to: