X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:reply-to:from:to:subject:date:message-id
	:mime-version:content-type:content-transfer-encoding; q=dns; s=
	default; b=B5g847ng7sAJMqpq0F1URwrrkA0+oOuMn+5lSRtOukV2y3y+4hXcc
	x+cA7q8fhCvjIpE2HA1JWBB0VbrdzdiEleczbNPfuDR6BncktaKNTXbH3CdWzlFf
	1Z/8hUwrx4Em25vwob5BbL1SlOWKhE8YBldfdvYzWg9hqWo3lx+Plg=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:reply-to:from:to:subject:date:message-id
	:mime-version:content-type:content-transfer-encoding; s=default;
	bh=tkifXIAuoGgZt6ADpSZvt9U8VtU=; b=rKFvBijILBxtNAgnxf6CpPi1s8gn
	RzQIr7HCIetcL36EblOpDphda1xLTGvMIeu138pjW8w6eXVpH1GwP+2Px1M7d/oX
	h2k4bMeh0WCre+4WR/h9kQjPQyXTybSMGPf8UvXXBVL8AT6DD85Q7zz9MhoysPNd
	mCmSTSNaz7BCXtM=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-1.0 required=5.0 tests=ALL_TRUSTED,BAYES_20 autolearn=ham version=3.3.2 spammy=SECURITY, Hx-languages-length:530, 4.5.0, UD:msg00025.html
X-HELO:	localhost.localdomain
Reply-To:	cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
From:	Andrew Schulman <schulman DOT andrew AT epa DOT gov>
To:	cygwin AT cygwin DOT com
Subject:	[ANNOUNCEMENT] [SECURITY] don't use screen 4.5.0-1
Date:	Wed, 25 Jan 2017 08:29:20 -0500
Message-Id:	<announce.q0ah8ctqpr5ttm8h9otopbht671ir30qpp@4ax.com>
MIME-Version:	1.0
X-Archive:	encrypt
X-CMAE-Envelope:	MS4wfOvBo+wYyVXtXUDEwGLgdS5BTh0PbKe8w0klMlGwOuxsFFybcdEIKXDFbJQuX0mO0uzuIfJQkWB6IEfqQ9tbkFC1FOtoKjryQMdTv77217cjY7vAWgBG 6dpIcV3CMggTOJTg7toOS4RyvssGKcUgJbrurZabN374TJT9X0It7MEkBvvZHQhMnsuSz9iJevd0ww==
Note-from-DJ:	This may be spam
X-MIME-Autoconverted:	from quoted-printable to 8bit by delorie.com id v0PE8VXK011923

I recently updated the screen package in Cygwin to version 4.5.0-1. This version
turns out to have at least one security problem [1], and maybe other serious
bugs too. So I've asked for it to be removed from the Cygwin archives.

If you've installed screen 4.5.0-1, you should downgrade to the previous
release, 4.4.0-1. A new release that fixes the problems in 4.5.0 is expected out
next month.

Andrew

[1] http://lists.gnu.org/archive/html/screen-devel/2017-01/msg00025.html

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -