Lucene search

K
mageiaGentoo FoundationMGASA-2024-0057
HistoryMar 14, 2024 - 2:14 a.m.

Updated screen packages fix security vulnerability

2024-03-1402:14:37
Gentoo Foundation
advisories.mageia.org
7
update
package
security
vulnerability
sighup
pid
denial of service
disruption
unix

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.2%

The updated package fixes a security vulnerability: socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process. (CVE-2023-24626)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchscreen< 4.9.0-4.1screen-4.9.0-4.1.mga9