patch for screen
Timo Sirainen reported a vulnerability in screen in which an attacker can gain the privledges of the user/group in which screen runs as. I have used his submitted patch to create a .deb for Debian users, since Debian security is bogged down @ the moment. http://hnsg.net/~cpace/screen_3.9.11-5_i386.deb is the patched .deb archive (for i386 only obviously), and http://hnsg.net/~cpace/patch.txt is the patch (obviously). This has so far been tested on 5 i586&i486-based systems, and works flawlessly. If I can be of any more assistance to Debian let me know. -- Christopher J. Pace System Administrator/Webmaster/Founder HNSG http://hnsg.net ssh://[EMAIL PROTECTED]
Re: patch for screen
Christopher J. Pace ([EMAIL PROTECTED]) said: > Timo Sirainen reported a vulnerability in screen in which an attacker can > gain the privledges of the user/group in which screen runs as. I have > used his submitted patch to create a .deb for Debian users, since Debian > security is bogged down @ the moment. Quoting http://bugs.debian.org/222385 (screen: buffer overflow): > woody packages are at > http://pkg-screen.alioth.debian.org/woody-security/ and the security > team was made aware of them. > > sid packages have been uploaded... maybe someday they'll be built and > moved into sarge. > > This bug will be closed when they both make it into their appropriate > dists. -- Adam Lazur, Cluster Monkey