version 1.271, 2000/10/06 19:59:42 |
version 1.272, 2000/10/06 20:22:44 |
|
|
<ul> |
<ul> |
<a name=curses></a> |
<a name=curses></a> |
<li><font color=#009000><strong>027: SECURITY FIX: Oct 6, 2000</strong></font><br> |
<li><font color=#009000><strong>027: SECURITY FIX: Oct 6, 2000</strong></font><br> |
libcurses permitted reading of $HOME/.termlib database files if used by |
libcurses honored terminal descriptions in the $HOME/.terminfo directory |
a setuid or setgid application. |
as well as in the TERMCAP environment variable. |
<br> |
<br> |
<a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/026_talkd.patch> |
<a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/027_curses.patch> |
A source code patch exists which remedies this problem.</a> |
A source code patch exists which remedies this problem.</a> |
<p> |
<p> |
<a name=talkd></a> |
<a name=talkd></a> |