Alexander Naumov

GNU Screen v.5.0.1 is released

Screen is a full-screen window manager that multiplexes a physical terminal between several processes, typically interactive shells.

5.0.1 is a security fix release. It includes only few code fixes, types and security issues. It doesn't include any new features.

  • CVE-2025-46805: do NOT send signals with root privileges
  • CVE-2025-46804: avoid file existence test information leaks
  • CVE-2025-46803: apply safe PTY default mode of 0620
  • CVE-2025-46802: prevent temporary 0666 mode on PTYs in attacher
  • CVE-2025-23395: reintroduce lf_secreopen() for logfile
  • buffer overflow due bad strncpy()
  • uninitialized variables warnings
  • typos
  • combining char handling that could lead to a segfault


Release (official tarball) will be available soon for download:
https://ftp.gnu.org/gnu/screen/

Please report any bugs or regressions.
Thanks to everyone who contributed to this release.

Cheers,
Alex

GNU Screen v.5.0.0 is released

Screen is a full-screen window manager that multiplexes a physical
terminal between several processes, typically interactive shells.

The 5.0.0 release includes the following changes to the previous
release 4.9.1:

  • Rewritten authentication mechanism
  • Add escape %T to show current tty for window
  • Add escape %O to show number of currently open windows
  • Use wcwdith() instead of UTF-8 hard-coded tables
  • New commands:

  - auth [on|off]
    Provides password protection
  - status [top|up|down|bottom] [left|right]
    The status window by default is in bottom-left corner.
    This command can move status messages to any corner of the screen.
  - truecolor [on|off]
  - multiinput
    Input to multiple windows at the same time

GNU Screen v.4.9.1

I'm announcing availability of GNU Screen v.4.9.1

Screen is a full-screen window manager that multiplexes a physical terminal between several processes, typically interactive shells.

This release:

  • Support stop/parity bits on serial port
  • Add needed system headers in checks and return values for implicit function declarations
  • Fixes:

- Avoid zombies after shell exit
- Missed signal sending permission check on failed query messages (CVE-2023-24626)
- manpage fixes
- source code fixes during cleanup
- UTF-8 encoding can emit invalid UTF-8 sequences for out of range unicode values


For full list of changes see
https://git.savannah.gnu.org/cgit/screen.git/log/?h=v.4.9.1

Release is available for download at:
https://ftp.gnu.org/gnu/screen/
or your closest mirror (may have some delay)
https://ftpmirror.gnu.org/screen/

Please report any bugs or regressions.
Thanks to everyone who contributed to this release.

Cheers,
Alex

GNU Screen v.4.9.0

I'm announcing availability of GNU Screen v.4.9.0

Screen is a full-screen window manager that multiplexes a
physical terminal between several processes, typically
interactive shells.

New in this release:
  * Hardstatus option for used encoding (escape string '%e')
  * OpenBSD uses native openpty() from its utils.h
  * Fixes:
    - fix combining char handling that could lead to a segfault
    - CVE-2021-26937: possible denial of service via a crafted UTF-8 character sequence (bug #60030)
    - make screen exit code be 0 when checking --help
    - session names limit is 80 symbols (bug #61534)
    - option -X ignores specified user in multiuser env (bug #37437)
    - a lot of reformations/fixes/cleanups (man page and source code)

For full list of changes see
https://git.savannah.gnu.org/cgit/screen.git/log/?h=v.4.9.0

Release is available for download at:
https://ftp.gnu.org/gnu/screen/
or your closest mirror (may have some delay)
https://ftpmirror.gnu.org/screen/

Thanks to everybody who contributed patches and helped to test development git-version.
Keep sending bugreports or any regressions.

Have a lot of fun with GNU Screen 4.9.0 ;-)

Cheers,
Alex

GNU Screen v.4.5.1

I'm glad to announce that the new version of GNU Screen (4.5.1) has been released today!

4.5.1 is a bugfix/security release.
We fixed few crashes and, of course, problem with privilege escalation.
We also changed behavior of '-L' option: now you can set new logfile name using '-Logfile' option and '-L' just tells screen to  turn on logging.


Thanks to all beta testers who help to test new stuff in git. Keep to report about bugs or any regressions!
Also thanks for collaboration to packagers who maintain GNU screen for UNIX-like systems like OpenIndiana and *BSD.

Release is available for download at:
http://ftp.gnu.org/gnu/screen/

GNU Screen v.4.5.0

GNU Screen v4.5.0 is now available.

The 4.5.0 release is mostly a bugfix release:
  -> broken handling of "bind u digraph U+" (bug #48691)
  -> crash with long $TERM (bug #48983)
  -> crash when bumping blank window
  -> build for AIX (bug #49149)
  -> %x improperly separating arguments
  -> install with custom DESTDIR (bug #48370)

Just one new feature: it is possible to specify logfile's name via command line parameter '-L'.

Release is available for download at:
http://ftp.gnu.org/gnu/screen/

Thanks to everybody who contributed patches and helps to test development git-version. Keep to report about bugs or any regressions.