←back to thread

Multiple security issues in GNU Screen

(www.openwall.com)
414 points st_goliath | 1 comments | 13 May 25 11:28 UTC | HN request time: 0.264s | source
Show context
mmsc ◴[13 May 25 12:05 UTC] No.43971967[source]▶
It's surprising that upstream was involved in this. Around 5 years ago, I came to the (sad) conclusion that GNU screen development had completely halted. Is that still not the case?

Does screen have the functionality to add a new window to an existing screen without attaching to the screen yet?

replies(5): >>43972042 #>>43972071 #>>43972387 #>>43972604 #>>43972925 #
croemer ◴[13 May 25 12:18 UTC] No.43972071[source]▶
Involved only insofar as shipping it as setuid-root counts. Distros that configure it like this are vulnerable, others aren't. Very thin involvement I'd say. Distros patch if upstream is too slow.
replies(1): >>43972085 #
mmsc ◴[13 May 25 12:20 UTC] No.43972085[source]▶
TFA says upstream asked for the review.
replies(2): >>43973006 #>>43975307 #
Eduard ◴[13 May 25 17:16 UTC] No.43975307[source]▶
"TFA"?
replies(1): >>43975604 #
1. shawn_w ◴[13 May 25 17:42 UTC] No.43975604[source]▶
The Fine Article