Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

Slackware 11.0: 2006-307-03 Urgent Buffer Overflow Vulnerability Addressed

slackware
Calendar Grey November 4, 2006
Scroller Slackware
Latest screen updates for Slackware address critical vulnerabilities. User advised to upgrade for enhanced security and system reliability.
New screen packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and 11.0 to fix a security issue

Summary

Here are the details from the Slackware 11.0 ChangeLog: patches/packages/screen-4.0.3-i486-1_slack11.0.tgz: Upgraded to screen-4.0.3. This addresses an issue with the way screen handles UTF-8 character encoding that could allow screen to be crashed (or possibly code to be executed in the context of the screen user) if a specially crafted sequence of pseudo-UTF-8 characters are displayed withing a screen session. For more information, see: https://www.cve.org/CVERecord?id=CVE-2006-4573 (* Security fix *)

Topics%20covered

Topics Covered

security advisory security issue critical DoS slackware screen

Where Find New Packages

HINT: Getting slow download speeds from ftp.slackware.com? Give slackware.osuosl.org a try. This is another primary FTP site for Slackware that can be considerably faster than downloading from ftp.slackware.com.
Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating additional FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 8.1: ftp://ftp.slackware.com/pub/slackware/slackware-8.1/patches/packages/screen-4.0.3-i386-1_slack8.1.tgz
Updated package for Slackware 9.0: ftp://ftp.slackware.com/pub/slackware/slackware-9.0/patches/packages/screen-4.0.3-i386-1_slack9.0.tgz
Updated package for Slackware 9.1: ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/screen-4.0.3-i486-1_slack9.1.tgz
Updated package for Slackware 10.0: ftp://ftp.slackware.com/pub/slackware/slackware-10.0/patches/packages/screen-4.0....

Read the Full Advisory

MD5 Signatures

Slackware 8.1 package: 9c1a0083359cf0f4bf14f5841f8f3115 screen-4.0.3-i386-1_slack8.1.tgz
Slackware 9.0 package: 90db04d9868a3e75146fb4578e6261b7 screen-4.0.3-i386-1_slack9.0.tgz
Slackware 9.1 package: 1c65a579e4f3f315ef1d9912e6e54bab screen-4.0.3-i486-1_slack9.1.tgz
Slackware 10.0 package: 53709705609d082669d8bf05373f4a3d screen-4.0.3-i486-1_slack10.0.tgz
Slackware 10.1 package: 0d4c6091084d02a1664fb58a6963a697 screen-4.0.3-i486-1_slack10.1.tgz
Slackware 10.2 package: 90b3e193a96c7567237a37dfd6727e2b screen-4.0.3-i486-1_slack10.2.tgz
Slackware 11.0 package: e3c0654bc400f594bb98b2684cf6fa28 screen-4.0.3-i486-1_slack11.0.tgz

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory security issue critical DoS slackware screen

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the packages as root: # upgradepkg screen-4.0.3-i486-1_slack11.0.tgz