On 2023-07-23 14:12 +0100, Jonathan Wiltshire wrote:
> Control: tag -1 moreinfo
>
> On Fri, May 26, 2023 at 08:51:55PM +0200, Sven Joachim wrote:
>> [ Risks ]
>> Users who are relying on their own terminfo files under
>> ${HOME}/.terminfo can no longer use them in setuid/setgid programs and
>> will have to work around that, e.g. by changing their TERM environment
>> variable, using a different terminal emulator or asking their sysadmin
>> for help.
>>
>> On my systems I did not find any setuid binaries linked to the tinfo
>> library, but some setgid games in the bsdgames package.
>
> Would a news entry highlighting this be appropriate?
Probably not, since the vast majority of users (at least 99%, more
likely 99.9%) will not be affected. The Bookworm version of ncurses
does not contain such a news entry either, and I have not heard of any
bug reports (just checked the bsdgames package) or support questions.
Cheers,
Sven
