This is the mail archive of the
cygwin-apps
mailing list for the Cygwin project.
[SECURITY] please withdraw screen 4.5.0 from the Cygwin archives
- From: Andrew Schulman <schulman dot andrew at epa dot gov>
- To: cygwin-apps at cygwin dot com
- Date: Wed, 25 Jan 2017 08:21:25 -0500
- Subject: [SECURITY] please withdraw screen 4.5.0 from the Cygwin archives
- Authentication-results: sourceware.org; auth=none
Can someone please remove screen 4.5.0-1 from the archive?
screen 4.5.0 has at least one serious security problem [1], and maybe some other
bugs too. I doubt Cygwin is affected, since screen doesn't rely on root
privileges there. But 4.5.0 is only a minor update and a fix isn't going to be
available until next month, so I think I want to withdraw this release.
Thanks,
Andrew
[1] http://lists.gnu.org/archive/html/screen-devel/2017-01/msg00025.html