X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:reply-to:from:to:subject:date:message-id
	:mime-version:content-type:content-transfer-encoding; q=dns; s=
	default; b=B5g847ng7sAJMqpq0F1URwrrkA0+oOuMn+5lSRtOukV2y3y+4hXcc
	x+cA7q8fhCvjIpE2HA1JWBB0VbrdzdiEleczbNPfuDR6BncktaKNTXbH3CdWzlFf
	1Z/8hUwrx4Em25vwob5BbL1SlOWKhE8YBldfdvYzWg9hqWo3lx+Plg=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:reply-to:from:to:subject:date:message-id
	:mime-version:content-type:content-transfer-encoding; s=default;
	 bh=tkifXIAuoGgZt6ADpSZvt9U8VtU=; b=rKFvBijILBxtNAgnxf6CpPi1s8gn
	RzQIr7HCIetcL36EblOpDphda1xLTGvMIeu138pjW8w6eXVpH1GwP+2Px1M7d/oX
	h2k4bMeh0WCre+4WR/h9kQjPQyXTybSMGPf8UvXXBVL8AT6DD85Q7zz9MhoysPNd
	mCmSTSNaz7BCXtM=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
X-Spam-SWARE-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED,BAYES_20 autolearn=ham version=3.3.2 spammy=SECURITY, Hx-languages-length:530, 4.5.0, UD:msg00025.html
X-HELO: localhost.localdomain
Reply-To: cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Virus-Found: No
From: Andrew Schulman <schulman DOT andrew AT epa DOT gov>
To: cygwin AT cygwin DOT com
Subject: [ANNOUNCEMENT] [SECURITY] don't use screen 4.5.0-1
Date: Wed, 25 Jan 2017 08:29:20 -0500
Message-Id: <announce.q0ah8ctqpr5ttm8h9otopbht671ir30qpp@4ax.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Archive: encrypt
X-CMAE-Envelope: MS4wfOvBo+wYyVXtXUDEwGLgdS5BTh0PbKe8w0klMlGwOuxsFFybcdEIKXDFbJQuX0mO0uzuIfJQkWB6IEfqQ9tbkFC1FOtoKjryQMdTv77217cjY7vAWgBG 6dpIcV3CMggTOJTg7toOS4RyvssGKcUgJbrurZabN374TJT9X0It7MEkBvvZHQhMnsuSz9iJevd0ww==
Note-from-DJ: This may be spam
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by delorie.com id v0PE8VXK011923

I recently updated the screen package in Cygwin to version 4.5.0-1. This version
turns out to have at least one security problem [1], and maybe other serious
bugs too. So I've asked for it to be removed from the Cygwin archives.

If you've installed screen 4.5.0-1, you should downgrade to the previous
release, 4.4.0-1. A new release that fixes the problems in 4.5.0 is expected out
next month.

Andrew

[1] http://lists.gnu.org/archive/html/screen-devel/2017-01/msg00025.html

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple