[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[SECURITY] New versions of ncurses fixes security problem

We have received a report that using ncurses in setuid programs will
give the user a way to open arbitrary files.

We recommend you upgrade your ncurses3.4-dev package immediately.

dpkg -i file.deb
        will install the referenced file.

Debian GNU/Linux 2.0 alias hamm

  This version of Debian were released only for the Intel and the
  Motorola 68xxx architecture.

  Intel architecture:
      MD5 checksum: 9dcb2a4d455197b1102ccefd99bf60fa

  Motorola 68xxx architecture:
      MD5 checksum: 917a954e24960a63e0ec8eaf56274bb7

  These files will be moved into
  ftp://ftp.debian.org/debian/dists/hamm/main/binary-$arch/ soon.

For other architectures please refer to the appropriate directory
ftp://ftp.debian.org/debian/dists/sid/binary-$arch/ .

Debian GNU/Linux    .    Security Managers    .    security@debian.org
Christian Hudon <chrish@debian.org> . Martin Schulze <joey@debian.org>

Attachment: pgpU53VftBOIh.pgp
Description: PGP signature

Reply to: