3 ms·
In the EPEL versions of screen, I am seeing the setgid bit set only. I am guessing that later versions setuid to root? $ ll /usr/bin/screen -rwxr-sr-x. 1 r
by chasil 1y ago
In the EPEL versions of screen, I am seeing the setgid bit set only. I am guessing that later versions setuid to root?
$ ll /usr/bin/screen
-rwxr-sr-x. 1 root screen 495816 Feb 3 2022 /usr/bin/screen
$ rpm -q screen
screen-4.8.0-6.el9.x86_64
Edit: Yes, Screen 5.0.0.
CVE-2025-46802 can impact earlier releases, but all the other vulnerabilities are for the latest.
- gertrunde 1y agoThe original writeup by the OpenSUSE security team laid this out better: https://security.opensuse.org/2025/05/12/screen-security-issues.html#7-affectedness-matrix https://security.opensuse.org/2025/05/12/screen-security-iss... Different distros built it in different ways, affecting level of vulnerability to the different issues.