https://seclists.org/oss-sec/2025/q2/153: scen: Multiple Security Issues in Scen (mostly affecting lease 5.0.0 and setuid-root installations)
Published May 16, 2025
·Updated
Affected Software
1 affected component
GNU Screen
Frequently Asked Questions
1
What should package maintainers verify when sourcing the upstream tarball?
The discussion reports that different GNU.org mirrors were serving two different tar.gz files. The earlier archive included object and other generated files and differed in some source and header content around WINESC_WIN_CARET.
2
Can the suggested 5.0.2 version be treated as an available fixed release?
No. The message says that making a 5.0.2 release would be helpful, which is a suggestion rather than confirmation that such a release exists.