[SECURITY] Fedora 18 Update: dtach-0.8-8.fc18
updates at fedoraproject.org
updates at fedoraproject.org
Mon Mar 4 22:24:05 UTC 2013
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2013-2923
2013-02-24 07:38:27
--------------------------------------------------------------------------------
Name : dtach
Product : Fedora 18
Version : 0.8
Release : 8.fc18
URL : http://dtach.sourceforge.net
Summary : A simple program that emulates the detach feature of screen
Description :
dtach is a program that emulates the detach feature of screen, with
less overhead. It is designed to be transparent and un-intrusive; it
avoids interpreting the input and output between attached terminals
and the program under its control. Consequently, it works best with
full-screen applications such as emacs.
--------------------------------------------------------------------------------
Update Information:
Properly handle close requests.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Feb 22 2013 Lon Hohberger <lhh at redhat.com> - 0.8-8
- Properly handle closes. Patch from Luk Claes <luk at debian dot org>
- Resolves: rhbz#835853
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #835849 - CVE-2012-3368 dtach: Memory portion (random stack data) disclosure to the client by unclean client disconnect
https://bugzilla.redhat.com/show_bug.cgi?id=835849
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update dtach' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
More information about the package-announce
mailing list