[SECURITY] please withdraw screen 4.5.0 from the Cygwin archives

Andrew Schulman schulman.andrew@epa.gov
Wed Jan 25 13:22:00 GMT 2017


Can someone please remove screen 4.5.0-1 from the archive?

screen 4.5.0 has at least one serious security problem [1], and maybe some other
bugs too. I doubt Cygwin is affected, since screen doesn't rely on root
privileges there. But 4.5.0 is only a minor update and a fix isn't going to be
available until next month, so I think I want to withdraw this release.

Thanks,
Andrew

[1] http://lists.gnu.org/archive/html/screen-devel/2017-01/msg00025.html



More information about the Cygwin-apps mailing list