Package: aptitude
Version: 0.4.4-3
Severity: grave
Tags: security
Justification: user security hole

At startup, aptitude sends random characters to the terminal,
including escape sequences. Some of them have the effect to send
terminal data to the printer (this is not always reproducible),
which can then be seen by the other users of the printer.

-- System Information:
Debian Release: 4.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-4-686-bigmem
Locale: LANG=POSIX, LC_CTYPE=en_US.ISO8859-1 (charmap=ISO-8859-1)

Versions of packages aptitude depends on:
ii  apt [libapt-pkg-libc6.3-6-3 0.6.46.4-0.1 Advanced front-end for dpkg
ii  libc6                       2.3.6.ds1-13 GNU C Library: Shared libraries
ii  libgcc1                     1:4.1.1-21   GCC support library
ii  libncursesw5                5.5-5        Shared libraries for terminal hand
ii  libsigc++-2.0-0c2a          2.0.17-2     type-safe Signal Framework for C++
ii  libstdc++6                  4.1.1-21     The GNU Standard C++ Library v3

Versions of packages aptitude recommends:
ii  aptitude-doc-en [aptitude-doc 0.4.4-3    English manual for aptitude, a ter
ii  libparse-debianchangelog-perl 1.0-1      parse Debian changelogs and output

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to