DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:reply-to:from:to:subject:date:message-id
	:mime-version:content-type:content-transfer-encoding; q=dns; s=
	default; b=B5g847ng7sAJMqpq0F1URwrrkA0+oOuMn+5lSRtOukV2y3y+4hXcc
	x+cA7q8fhCvjIpE2HA1JWBB0VbrdzdiEleczbNPfuDR6BncktaKNTXbH3CdWzlFf
	1Z/8hUwrx4Em25vwob5BbL1SlOWKhE8YBldfdvYzWg9hqWo3lx+Plg=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Reply-To: cygwin@cygwin.com
From: Andrew Schulman <schulman.andrew@epa.gov>
To: cygwin@cygwin.com
Subject: [ANNOUNCEMENT] [SECURITY] don't use screen 4.5.0-1
Date: Wed, 25 Jan 2017 08:29:20 -0500
Message-Id: <announce.q0ah8ctqpr5ttm8h9otopbht671ir30qpp@4ax.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Note-from-DJ: This may be spam
Content-Transfer-Encoding: 8bit

I recently updated the screen package in Cygwin to version 4.5.0-1. This version
turns out to have at least one security problem [1], and maybe other serious
bugs too. So I've asked for it to be removed from the Cygwin archives.

If you've installed screen 4.5.0-1, you should downgrade to the previous
release, 4.4.0-1. A new release that fixes the problems in 4.5.0 is expected out
next month.

Andrew

[1] http://lists.gnu.org/archive/html/screen-devel/2017-01/msg00025.html

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple