Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 10 Oct 2000 21:09:33 -0500 (CDT)
From:      Mike Silbersack <silby@silby.com>
To:        Trevor Johnson <trevor@jpj.net>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: ncurses buffer overflows (fwd)
Message-ID:  <Pine.BSF.4.21.0010102108020.4661-100000@achilles.silby.com>
In-Reply-To: <Pine.BSI.4.21.0010102142590.8787-100000@blues.jpj.net>

next in thread | previous in thread | raw e-mail | index | archive | help

On Tue, 10 Oct 2000, Trevor Johnson wrote:

> The fixes were applied in ncurses-20001007.  We have ncurses-20000701.
> 
> I'm attempting to prepare ncurses-20001009 for importing:  
> http://people.freebsd.org/~trevor/ncurses/ .  I've mentioned it to Peter
> Wemm.  It needs more testing though (I haven't even done a "make world").

Is the patch just to not read .terminfo from the current directory when
executing setuid+setgid apps?  (Just checking if it's the same as the
patch that openbsd has applied.)

Mike "Silby" Silbersack



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0010102108020.4661-100000>