version 1.272, 2000/10/06 20:22:44 |
version 1.273, 2000/10/06 20:26:06 |
|
|
<a name=curses></a> |
<a name=curses></a> |
<li><font color=#009000><strong>027: SECURITY FIX: Oct 6, 2000</strong></font><br> |
<li><font color=#009000><strong>027: SECURITY FIX: Oct 6, 2000</strong></font><br> |
libcurses honored terminal descriptions in the $HOME/.terminfo directory |
libcurses honored terminal descriptions in the $HOME/.terminfo directory |
as well as in the TERMCAP environment variable. |
as well as in the TERMCAP environment variable for setuid and setgid |
|
applications. |
<br> |
<br> |
<a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/027_curses.patch> |
<a href=ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.7/common/027_curses.patch> |
A source code patch exists which remedies this problem.</a> |
A source code patch exists which remedies this problem.</a> |