FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

rxvt-unicode -- restore permissions on tty devices

Affected packages
rxvt-unicode < 6.3

Details

VuXML ID c2fdb3bc-7d72-11da-b96e-000fb586ba73
Discovery 2005-12-31
Entry 2006-01-04

A rxvt-unicode changelog reports:

SECURITY FIX: on systems using openpty, permissions were not correctly updated on the tty device and were left as world-readable and world-writable (likely in original rxvt, too), and were not restored properly. Affected are only systems where non-unix ptys were used (such as most BSDs). Found, patched and debugged by Ryan Beasley.

References

URL http://dist.schmorp.de/rxvt-unicode/Changes