From owner-freebsd-security Wed Jan 24 17:32:52 1996 Return-Path: owner-security Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id RAA09477 for security-outgoing; Wed, 24 Jan 1996 17:32:52 -0800 (PST) Received: from sasami.jurai.net (root@sasami.jurai.net [205.218.122.51]) by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id RAA09459 for ; Wed, 24 Jan 1996 17:32:46 -0800 (PST) Received: (from winter@localhost) by sasami.jurai.net (8.6.11/8.6.9) id TAA17588; Wed, 24 Jan 1996 19:32:39 -0600 Date: Wed, 24 Jan 1996 19:32:38 -0600 (CST) From: "Matthew N. Dodd" X-Sender: winter@sasami To: Paul Traina cc: dk+@UA.net, freebsd-security@FreeBSD.ORG Subject: Re: rxvt security hole - proposed fix + more In-Reply-To: <199601232118.NAA02408@precipice.shockwave.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-security@FreeBSD.ORG Precedence: bulk On Tue, 23 Jan 1996, Paul Traina wrote: > And yes I know rxvt have to be fixed to drop its privileges when using > -print-pipe anyway. > Correction, rxvt has been fixed to drop its privileges when they're not > required (which is when editing utmp). I've got a few other pateches to rxvt-2.10 that fix some annoying color problems. (Ever notice you can't see dark grey?) 2.10 fixes the ^[[0m bug as well. | Matthew N. Dodd | winter@jurai.net | http://www.jurai.net/~winter | | Technical Manager | mdodd@intersurf.net | http://www.intersurf.net | | InterSurf Online | "Welcome to the net Sir, would you like a handbasket?"|