[Secure-testing-team] Bug#816320: coreutils: CVE-2016-2781: nonpriv session can escape to the parent session by using the TIOCSTI ioctl

[Salvatore Bonaccorso]

Source: coreutils
Version: 8.13-1
Severity: important
Tags: security upstream

Hi,

the following vulnerability was published for coreutils.

CVE-2016-2781[0]:
|nonpriv session can escape to the parent session by using the TIOCSTI
| ioctl

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-2781
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1312863
[2] http://seclists.org/oss-sec/2016/q1/452

Regards,
Salvatore