From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 91198 invoked by alias); 25 Jan 2017 14:07:51 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 91062 invoked by uid 89); 25 Jan 2017 14:07:49 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED,BAYES_20 autolearn=ham version=3.3.2 spammy=SECURITY, Hx-languages-length:530, 4.5.0, UD:msg00025.html X-HELO: localhost.localdomain Received: from localhost (HELO localhost.localdomain) (127.0.0.1) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Wed, 25 Jan 2017 14:07:39 +0000 Reply-To: cygwin@cygwin.com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No From: Andrew Schulman To: cygwin@cygwin.com Subject: [ANNOUNCEMENT] [SECURITY] don't use screen 4.5.0-1 Date: Wed, 25 Jan 2017 14:07:00 -0000 Message-Id: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable X-Archive: encrypt X-CMAE-Envelope: MS4wfOvBo+wYyVXtXUDEwGLgdS5BTh0PbKe8w0klMlGwOuxsFFybcdEIKXDFbJQuX0mO0uzuIfJQkWB6IEfqQ9tbkFC1FOtoKjryQMdTv77217cjY7vAWgBG 6dpIcV3CMggTOJTg7toOS4RyvssGKcUgJbrurZabN374TJT9X0It7MEkBvvZHQhMnsuSz9iJevd0ww== X-SW-Source: 2017-01/txt/msg00309.txt.bz2 I recently updated the screen package in Cygwin to version 4.5.0-1. This ve= rsion turns out to have at least one security problem [1], and maybe other serious bugs too. So I've asked for it to be removed from the Cygwin archives. If you've installed screen 4.5.0-1, you should downgrade to the previous release, 4.4.0-1. A new release that fixes the problems in 4.5.0 is expecte= d out next month. Andrew [1] http://lists.gnu.org/archive/html/screen-devel/2017-01/msg00025.html -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple