mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-19 16:40:46 -09:00
Fixes the following security issues:
CVE-2025-46805: do NOT send signals with root privileges
CVE-2025-46804: avoid file existence test information leaks
CVE-2025-46803: apply safe PTY default mode of 0620
CVE-2025-46802: prevent temporary 0666 mode on PTYs in attacher
CVE-2025-23395: reintroduce lf_secreopen() for logfile
https://lists.gnu.org/archive/html/info-gnu/2025-05/msg00002.html
For more details, see:
https://security.opensuse.org/2025/05/12/screen-security-issues.html
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 9a1aaec3f3)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
6 lines
304 B
Plaintext
6 lines
304 B
Plaintext
# Locally calculated after checking pgp signature
|
|
# https://ftp.gnu.org/gnu/screen/screen-5.0.1.tar.gz.sig
|
|
sha256 2dae36f4db379ffcd14b691596ba6ec18ac3a9e22bc47ac239789ab58409869d screen-5.0.1.tar.gz
|
|
# Locally calculated
|
|
sha256 e79e9c8a0c85d735ff98185918ec94ed7d175efc377012787aebcf3b80f0d90b COPYING
|