OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: screen 3.9.5 root vulnerability
From: absPURPLEI.COM
Date: Tue Sep 05 2000 - 06:03:02 CDT


        Fix applied to NetBSD pkgsrc on 1st september. NetBSD pkgsrc
        users should confirm they have screen-3.9.5nb1 or later.

        For reference, patch applied:

$NetBSD: patch-ah,v 1.2 2000/09/01 15:23:51 kim Exp $

--- screen.c.orig Wed Sep 1 17:57:25 1999
+++ screen.c Fri Sep 1 11:22:45 2000
-2311,7 +2311,7
               else if (visual && !D_VB && (!D_status || !D_status_bell))
                 {
                   D_status_delayed = -1;
- Msg(0, VisualBellString);
+ Msg(0, "%s", VisualBellString);
                   if (D_status)
                     {
                       D_status_bell = 1;

                David/absolute
                                       -- www.netbsd.org: No hype required --