Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02016-1

Опубликовано: 19 июн. 2025
Источник: suse-cvrf

Описание

Security update for screen

This update for screen fixes the following issues:

Security issues fixed:

  • CVE-2025-46802: temporary chmod of a user's TTY to mode 0666 when attempting to attach to a multi-user session allows for TTY hijacking (bsc#1242269).

Other issues fixed:

  • Use TTY file descriptor passing after a suspend (MSG_CONT).
  • Fix resume after suspend in multi-user mode.

Список пакетов

Container bci/kiwi:latest
screen-4.6.2-150000.5.8.1
Image SLES15-SP7-BYOS-EC2
screen-4.6.2-150000.5.8.1
Image SLES15-SP7-BYOS-GCE
screen-4.6.2-150000.5.8.1
Image SLES15-SP7-EC2
screen-4.6.2-150000.5.8.1
Image SLES15-SP7-GCE
screen-4.6.2-150000.5.8.1
Image SLES15-SP7-HPC-BYOS-EC2
screen-4.6.2-150000.5.8.1
Image SLES15-SP7-Hardened-BYOS-EC2
screen-4.6.2-150000.5.8.1
Image SLES15-SP7-Hardened-BYOS-GCE
screen-4.6.2-150000.5.8.1
Image SLES15-SP7-SAP-BYOS-EC2
screen-4.6.2-150000.5.8.1
Image SLES15-SP7-SAP-BYOS-GCE
screen-4.6.2-150000.5.8.1
Image SLES15-SP7-SAP-EC2
screen-4.6.2-150000.5.8.1
Image SLES15-SP7-SAP-GCE
screen-4.6.2-150000.5.8.1
Image SLES15-SP7-SAP-Hardened-BYOS-EC2
screen-4.6.2-150000.5.8.1
Image SLES15-SP7-SAP-Hardened-BYOS-GCE
screen-4.6.2-150000.5.8.1
Image SLES15-SP7-SAP-Hardened-GCE
screen-4.6.2-150000.5.8.1
Image SLES15-SP7-SAPCAL-EC2
screen-4.6.2-150000.5.8.1
Image SLES15-SP7-SAPCAL-GCE
screen-4.6.2-150000.5.8.1
SUSE Linux Enterprise Micro 5.3
screen-4.6.2-150000.5.8.1
SUSE Linux Enterprise Micro 5.4
screen-4.6.2-150000.5.8.1
SUSE Linux Enterprise Micro 5.5
screen-4.6.2-150000.5.8.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
screen-4.6.2-150000.5.8.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
screen-4.6.2-150000.5.8.1
openSUSE Leap 15.6
screen-4.6.2-150000.5.8.1

Ссылки

Описание

For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.

Затронутые продукты
Container bci/kiwi:latest:screen-4.6.2-150000.5.8.1
Image SLES15-SP7-BYOS-EC2:screen-4.6.2-150000.5.8.1
Image SLES15-SP7-BYOS-GCE:screen-4.6.2-150000.5.8.1
Image SLES15-SP7-EC2:screen-4.6.2-150000.5.8.1
Ссылки