Package: screen
Version: 4.0.3-3
Severity: low
Tags: security
User: ubuntu-de...@lists.ubuntu.com
Usertags: origin-ubuntu jaunty

Hi,

Based on the bug report[1] in Ubuntu, /tmp/screen-exchange is still being
created unsafely (lacks O_CREAT|O_EXCL, has a race, etc).  Upstream has a
report open[2] as well.

-Kees

[1] https://bugs.launchpad.net/bugs/315993
[2] http://savannah.gnu.org/bugs/?25296

-- 
Kees Cook                                            @debian.org



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to