[ANNOUNCEMENT] [SECURITY] Updated: mintty-0.9.8-1

Andy Koppe andy.koppe@gmail.com
Sat May 21 05:16:00 GMT 2011

mintty 0.9.8-1 is on its way to the Cygwin mirrors.

- Fixed a security issue with the OSC 701 sequence for setting and
querying the terminal's locale, which allowed an arbitrary string (not
including line endings) to be set as the locale and then echoed back
as if typed by the user. Querying the locale now will only return
valid locale strings.
- Dropped the mintty-specific OSC 7776 sequence, which did the same as
OSC 701 (as introduced by rxvt-unicode).
- Implemented rxvt-unicode's private mode 1015 for encoding mouse
events, which unlike standard xterm mouse reporting uses properly
formed CSI sequences and which allows for unlimited mouse coordinates.
- Implemented missing xterm control sequences for window operations:
set pixel size, get screen size in characters, refresh window, full
- Implemented selective erase, where the DECSCA sequence can be used
to set a protection attribute on characters, which are then left alone
by the DECSED (selective erase in display) and DECSEL (selective erase
in line) operations.
- Implemented DECRQSS sequences for requesting various parameters
including current text attributes and scroll margins.
- Tightened up parsing of control sequences and brought it more into
line with xterm. Control characters within ESC and CSI sequences now
get processed. Missing CSI parameters are treated as zero, whereas
extraneous parameters are ignored. APC and PM string sequences now get
parsed and ignored.
- If an AltGr key combination yields a character that can't be encoded
in the current charset, the AltGr is treated as Alt instead.
- 'true' and 'false' are now recognised as values for Boolean
configuration settings, in addition to 'yes' and 'no'.

Mintty is a terminal emulator for Cygwin with a native Windows user
interface and minimalist design. Among its features are Unicode
support and a graphical options dialog. Its terminal emulation is
largely compatible with xterm, but it does not require an X server.

The mintty manual is installed as a manpage ('man mintty'). It's also
available at http://mintty.googlecode.com/svn/tags/0.9.8/docs/mintty.1.html.

Questions and comments can be sent to the mintty discussion group at
http://groups.google.com/group/mintty-discuss or the Cygwin mailing
list. Please use the issue tracker at
http://code.google.com/p/mintty/issues/list to report bugs or suggest


To update your installation, click on the "Install Cygwin now" link
on the http://cygwin.com web page.  This downloads setup.exe to
your system.  Then, run setup and answer all of the questions.


If you want to unsubscribe from the cygwin-announce mailing list, look
at the "List-Unsubscribe: " tag in the email header of this message.
Send email to the address specified there. It will be in the format:


If you need more information on unsubscribing, start reading here:


Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

More information about the Cygwin mailing list