Re: Missing patches: shelltitle & security issue
Felix Rosencrantz <[email protected]>
| Newsgroups | gmane.comp.gnu.screen |
|---|---|
| Message-ID | <[email protected]> |
--- In [email protected], Adam Lazur <adam@l...> wrote: > I don't know about this one... I'd suspect that changing the > shelltitle on the fly is a very very small minority case. > That may be why it hasn't been applied? I'm not sure I would agree that it is a "very very small minority case". Tony ran into the problem, and so did I. Also, might even have been why Tony felt compelled to provide a patch. My use case is that I ssh to multiple hosts from the same window, and I want to use the shell title functionality to set the window title to include the hostname that I'm currently connected, using the shelltitle functionality to show me the current command. For me that would be everyday usage to me. With screen, you can dynamically set the title of the window, unless you use shelltitle. Then only the current command status is dynamic, once the window is created. > > > Also Timo Sirainen posted a patch for potential security hole > > around Oct 24, 2003, which he claims is still not fixed. This > > hole is one of the big items > > that shows up when you query Google for "gnu screen". > > > > It would be great if these changes or equivalent changes were > > added to the next release of screen. > > Which version of screen are you examining? > > Version 4.0.2, which includes the security fix, has been out since > Dec 5th. It isn't clearly marked as a security thing in > patchlevel.h though, so maybe that's where the confusion is > coming from? I wasn't aware that there was a 4.0.2 screen... I typically just check the yahoo group archive for screen, and there was no announcement. Is there a better way to keep current with the version of screen? -FR. __________________________________ Do you Yahoo!? Find out what made the Top Yahoo! Searches of 2003 http://search.yahoo.com/top2003 Yahoo! Groups Links To visit your group on the web, go to: http://groups.yahoo.com/group/gnu-screen/ To unsubscribe from this group, send an email to: [email protected] Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/