This is the mail archive of the
cygwin-announce
mailing list for the Cygwin project.
[SECURITY] don't use screen 4.5.0-1
- From: Andrew Schulman <schulman dot andrew at epa dot gov>
- To: cygwin-announce at cygwin dot com
- Date: Wed, 25 Jan 2017 08:29:20 -0500
- Subject: [SECURITY] don't use screen 4.5.0-1
- Authentication-results: sourceware.org; auth=none
- Reply-to: The Cygwin Mailing List <cygwin at cygwin dot com>
I recently updated the screen package in Cygwin to version 4.5.0-1. This version
turns out to have at least one security problem [1], and maybe other serious
bugs too. So I've asked for it to be removed from the Cygwin archives.
If you've installed screen 4.5.0-1, you should downgrade to the previous
release, 4.4.0-1. A new release that fixes the problems in 4.5.0 is expected out
next month.
Andrew
[1] http://lists.gnu.org/archive/html/screen-devel/2017-01/msg00025.html