A format string bug was recently discovered in screen which can be used to gain elevated privilages if screen is setuid.
Comment
Multiple security problems and a gpmctl vulnerability exists.
A number of possible buffer overruns were found in libraries includedin the affected packages. A denial-of-service vulnerability was also foundin the ksu program.
gpm-root (part of the gpm packge) fails to drop gid 0 priviledges when executing user commands.
A security bug has been discovered and fixed in the userhelper program.