aeolus (Posts about screen)

GNU Screen v.5.0.1 is released

GNU — Mon, 12 May 2025 19:38:34 GMT

Screen is a full-screen window manager that multiplexes a physical terminal between several processes, typically interactive shells.

5.0.1 is a security fix release. It includes only few code fixes, types and security issues. It doesn't include any new features.

CVE-2025-46805: do NOT send signals with root privileges
CVE-2025-46804: avoid file existence test information leaks
CVE-2025-46803: apply safe PTY default mode of 0620
CVE-2025-46802: prevent temporary 0666 mode on PTYs in attacher
CVE-2025-23395: reintroduce lf_secreopen() for logfile
buffer overflow due bad strncpy()
uninitialized variables warnings
typos
combining char handling that could lead to a segfault

Release (official tarball) will be available soon for download:
https://ftp.gnu.org/gnu/screen/

Please report any bugs or regressions.
Thanks to everyone who contributed to this release.

Cheers,
Alex

GNU Screen v.5.0.0 is released

GNU — Wed, 28 Aug 2024 21:41:30 GMT

Screen is a full-screen window manager that multiplexes a physical
terminal between several processes, typically interactive shells.

The 5.0.0 release includes the following changes to the previous
release 4.9.1:

Rewritten authentication mechanism
Add escape %T to show current tty for window
Add escape %O to show number of currently open windows
Use wcwdith() instead of UTF-8 hard-coded tables
New commands:

- auth [on|off]
    Provides password protection
- status [top|up|down|bottom] [left|right]
    The status window by default is in bottom-left corner.
    This command can move status messages to any corner of the screen.
- truecolor [on|off]
- multiinput
    Input to multiple windows at the same time

Removed commands:

- time
- debug
- password
- maxwin
- nethack

Fixes:

- Screen buffers ESC keypresses indefinitely
- Crashes after passing through a zmodem transfer
- Fix double -U issue

Release is available for download:
https://ftp.gnu.org/gnu/screen/

Please report any bugs or regressions.
Thanks to everyone who contributed to this release.

Cheers,
Alex

GNU Screen v.4.9.1

GNU — Thu, 17 Aug 2023 14:24:10 GMT

I'm announcing availability of GNU Screen v.4.9.1

Screen is a full-screen window manager that multiplexes a physical terminal between several processes, typically interactive shells.

This release:

Support stop/parity bits on serial port
Add needed system headers in checks and return values for implicit function declarations
Fixes:

- Avoid zombies after shell exit
- Missed signal sending permission check on failed query messages (CVE-2023-24626)
- manpage fixes
- source code fixes during cleanup
- UTF-8 encoding can emit invalid UTF-8 sequences for out of range unicode values

For full list of changes see
https://git.savannah.gnu.org/cgit/screen.git/log/?h=v.4.9.1

Release is available for download at:
https://ftp.gnu.org/gnu/screen/
or your closest mirror (may have some delay)
https://ftpmirror.gnu.org/screen/

Please report any bugs or regressions.
Thanks to everyone who contributed to this release.

Cheers,
Alex

GNU Screen v.4.9.0

GNU — Tue, 01 Feb 2022 16:21:34 GMT

I'm announcing availability of GNU Screen v.4.9.0

Screen is a full-screen window manager that multiplexes a
physical terminal between several processes, typically
interactive shells.

New in this release:
* Hardstatus option for used encoding (escape string '%e')
* OpenBSD uses native openpty() from its utils.h
* Fixes:
    - fix combining char handling that could lead to a segfault
    - CVE-2021-26937: possible denial of service via a crafted UTF-8 character sequence (bug #60030)
    - make screen exit code be 0 when checking --help
    - session names limit is 80 symbols (bug #61534)
    - option -X ignores specified user in multiuser env (bug #37437)
    - a lot of reformations/fixes/cleanups (man page and source code)

For full list of changes see
https://git.savannah.gnu.org/cgit/screen.git/log/?h=v.4.9.0

Release is available for download at:
https://ftp.gnu.org/gnu/screen/
or your closest mirror (may have some delay)
https://ftpmirror.gnu.org/screen/

Thanks to everybody who contributed patches and helped to test development git-version.
Keep sending bugreports or any regressions.

Have a lot of fun with GNU Screen 4.9.0 ;-)

Cheers,
Alex

GNU Screen v.4.8.0

GNU — Wed, 05 Feb 2020 20:48:18 GMT

I'm announcing availability of GNU Screen v.4.8.0

Screen is a full-screen window manager that multiplexes a physical
terminal between several processes, typically interactive shells.

This release
* Improves startup time by only polling for already open files to
    close
* Fixes:
       - Fix for segfault if termcap doesn't have Km entry
       - Make screen exit code be 0 when checking --version
       - Fix potential memory corruption when using OSC 49

As last fix, fixes potential memory overwrite of quite big size (~768
bytes), and even though I'm not sure about potential exploitability of
that issue, I highly recommend everyone to upgrade as soon as possible.
This issue is present at least since v.4.2.0 (haven't checked earlier).
Thanks to pippin who brought this to my attention.

For full list of changes see
https://git.savannah.gnu.org/cgit/screen.git/log/?h=v.4.8.0

Release is available for download at:
https://ftp.gnu.org/gnu/screen/
or your closest mirror (may have some delay)
https://ftpmirror.gnu.org/screen/

Please report any bugs or regressions.

GNU Screen v.4.7.0

GNU — Tue, 01 Oct 2019 22:47:49 GMT

I'm announcing availability of GNU Screen v.4.7.0

This release
* Adds support for SGR (1006) mouse mode
* Adds support for OSC 11
* Updates Unicode ambiguous and wide tables to 12.1.0
* Fixes:
- cross-compilation support (bug #43223)
- a lot of manpage fixes and cleanups

Release is available for download at:
https://ftp.gnu.org/gnu/screen/
or your closest mirror (may have some delay)
https://ftpmirror.gnu.org/screen/

Please report any bugs or regressions.

GNU Screen v.4.6.1

GNU — Mon, 10 Jul 2017 19:45:46 GMT

I'm announcing availability of GNU Screen v.4.6.1

This is a bugfix release:
* Fixes:
- problems with starting session in some cases
- parallel make install
- segfault when querying info on nonUTF locale

Release is available for download at:
http://ftp.gnu.org/gnu/screen/
or your closest mirror (may have some delay)
http://ftpmirror.gnu.org/screen/

Please report any bugs or regressions.

GNU Screen v.4.6.0

GNU — Wed, 28 Jun 2017 19:01:57 GMT

I'm announcing availability of GNU Screen v.4.6.0

Changes:
* Update Unicode wide tables to 9.0
* Support more serial speeds
* Improved namespaces support
* Migrate from fifos to sockets
* Start viewing scrollback at first line of output

Release is available for download at:
http://ftp.gnu.org/gnu/screen/
or your closest mirror (may have some delay)
http://ftpmirror.gnu.org/screen/

Please report any bugs or regressions.

GNU Screen v.4.5.1

GNU — Sun, 26 Feb 2017 21:17:48 GMT

I'm glad to announce that the new version of GNU Screen (4.5.1) has been released today!

4.5.1 is a bugfix/security release.
We fixed few crashes and, of course, problem with privilege escalation.
We also changed behavior of '-L' option: now you can set new logfile name using '-Logfile' option and '-L' just tells screen to turn on logging.

Thanks to all beta testers who help to test new stuff in git. Keep to report about bugs or any regressions!
Also thanks for collaboration to packagers who maintain GNU screen for UNIX-like systems like OpenIndiana and *BSD.

Release is available for download at:
http://ftp.gnu.org/gnu/screen/

GNU Screen v.4.5.0

GNU — Tue, 17 Jan 2017 20:46:37 GMT

GNU Screen v4.5.0 is now available.

The 4.5.0 release is mostly a bugfix release:
-> broken handling of "bind u digraph U+" (bug #48691)
-> crash with long $TERM (bug #48983)
-> crash when bumping blank window
-> build for AIX (bug #49149)
-> %x improperly separating arguments
-> install with custom DESTDIR (bug #48370)

Just one new feature: it is possible to specify logfile's name via command line parameter '-L'.

Release is available for download at:
http://ftp.gnu.org/gnu/screen/

Thanks to everybody who contributed patches and helps to test development git-version. Keep to report about bugs or any regressions.