[Cucumber-linux-security] screen (security update is available)

[Z5T1 <z5...@z5...>]

  Update Information

A security update is available for screen for the following versions of
Cucumber Linux:

  * 1.0.beta

Here are the details from the Cucumber 1.0.beta changelog:

+----------------+
Fri Jun 2 15:17:32 EDT 2017
apps-base/screen upgraded from 4.4.0 to 4.5.1 to fix a security vulnerability
	which allows users to modify arbitrary files via an improper checking
	of log file permissions. This could allow a local, unprivileged user to
	gain root access. For more information see:
		https://nvd.nist.gov/vuln/detail/CVE-2017-5618
* SECURITY FIX *
+----------------+

------------------------------------------------------------------------


  Installing the Update

The updated package can be installed via Pickle by running the following
commands (as root):

# pickle --update
# pickle

Make sure screen is selected on the update list, and then select Ok.
Pickle will then install the updated package.

If you prefer to download the updated package manually, it can be found
at the following location:

Cucumber 1.0.beta i686:
http://mirror.cucumberlinux.com/cucumber/cucumber-1.0.beta/cucumber-i686/apps-base/screen-4.5.1-i686-1.txz

Cucumber 1.0.beta x86_64:
http://mirror.cucumberlinux.com/cucumber/cucumber-1.0.beta/cucumber-x86_64/apps-base/screen-4.5.1-x86_64-1.txz

To upgrade the package manually, download the new package and run the
following command (as root):

# upgradepkg screen-4.5.1-i686-1.txz


------------------------------------------------------------------------
The Cucumber Linux Security Team
cuc...@li...
http://www.cucumberlinux.com/security.php