Re: [screen-devel] [bug #50142] root exploit 4.5.0

[Donald Buczek]

On 24.01.2017 22:43, Axel Beckert wrote:
> Hi Donald,
>
> On Tue, Jan 24, 2017 at 07:05:10PM +0000, anonymous wrote:
> >   <http://savannah.gnu.org/bugs/?50142>
> [...]
> > Commit f86a374 ("screen.c: adding permissions check for the logfile name",
> > 2015-11-04)
>
> There is no such commit id, neither in the master branch nor in the
> screen-v4 branch.


Right. I was referring to 5460f5d. Didn't spot c575c40. copy-and-paste 
failure probably, sorry.

Regards
  Donald


> I assume you meant one of these two commits instead:
>
> master: 
> http://git.savannah.gnu.org/cgit/screen.git/commit/?id=c575c40c9bd7653470639da32e06faed0a9b2ec4
> screen-v4: 
> http://git.savannah.gnu.org/cgit/screen.git/commit/?h=screen-v4&id=5460f5d28c01a9a58e021eb1dffef2965e629d58
>
> The latter is the one included in Screen 4.5.0.
>
>                 Kind regards, Axel

--
Donald Buczek
address@hidden
Tel: +49 30 8413 1433