linux/poky.git/meta/recipes-extended/screen, branch scarthgap

screen: fix CVE-2025-46804

2025-06-11T15:17:34+00:00

A minor information leak when running Screen with setuid-root privileges allosw unprivileged users to deduce information about a path that would otherwise not be available. Affected are older Screen versions, as well as version 5.0.0. Reference: https://security-tracker.debian.org/tracker/CVE-2025-46804 Upstream-patch: https://cgit.git.savannah.gnu.org/cgit/screen.git/commit/?id=e0eef5aac453fa98a2664416a56c50ad1d00cb30 (From OE-Core rev: a313af8ca347797214669406ee86f5239997f7e3) Signed-off-by: Divya Chellam Signed-off-by: Steve Sakoman

screen: fix CVE-2025-46802

2025-06-11T15:17:34+00:00

For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session. Reference: https://security-tracker.debian.org/tracker/CVE-2025-46802 Upstream-patch: https://cgit.git.savannah.gnu.org/cgit/screen.git/commit/?id=049b26b22e197ba3be9c46e5c193032e01a4724a (From OE-Core rev: b17e091eb4681b69c5a050d3fa0f9289f524e205) Signed-off-by: Divya Chellam Signed-off-by: Steve Sakoman

screen: patch CVE-2025-46805

2025-06-05T15:41:15+00:00

Upstream-Status: Backport [import from ubuntu https://git.launchpad.net/ubuntu/+source/screen/patch/?id=aa9f51f996a22470b8461d2b6a32e62c7ec30ed5 Upstream commit https://git.savannah.gnu.org/cgit/screen.git/commit/?id=161f85b98b7e1d5e4893aeed20f4cdb5e3dfaaa4] (From OE-Core rev: 69dd9b16fbd18a1a960887ee9479a2e731b5a184) Signed-off-by: Ashish Sharma Signed-off-by: Steve Sakoman

screen: update 4.9.0 -> 4.9.1

2023-09-18T07:53:10+00:00

Remove patches; they are merged upstream or backported. (From OE-Core rev: 2566f8e51d56848d8b28f37462160e90253b79fc) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

screen: backport fix for CVE-2023-24626

2023-04-22T10:05:14+00:00

(From OE-Core rev: 26242b20d407d5e498083d7e6fa082153be75092) Signed-off-by: Ross Burton Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie

screen: Add missing include files in configure checks

2022-08-17T18:57:32+00:00

Fixes builds with -Werror (From OE-Core rev: 1f3e413e5520f18b8b2e25533e7d17790d31aaf4) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20T16:45:25+00:00

An automated conversion using scripts/contrib/convert-spdx-licenses.py to convert to use the standard SPDX license identifiers. Two recipes in meta-selftest were not converted as they're that way specifically for testing. A change in linux-firmware was also skipped and may need a more manual tweak. (From OE-Core rev: ceda3238cdbf1beb216ae9ddb242470d5dfc25e0) Signed-off-by: Richard Purdie

screen: upgrade 4.8.0 -> 4.9.0

2022-02-10T10:32:08+00:00

CVE-2021-26937.patch removed since it is included in 4.9.0 Changelog: ========= * Hardstatus option for used encoding (escape string '%e') * OpenBSD uses native openpty() from its utils.h * Fixes: - fix combining char handling that could lead to a segfault - CVE-2021-26937: possible denial of service via a crafted UTF-8 character sequence (bug #60030) - make screen exit code be 0 when checking --help - session names limit is 80 symbols (bug #61534) - option -X ignores specified user in multiuser env (bug #37437) - a lot of reformations/fixes/cleanups (man page and source code) (From OE-Core rev: 8247097d2313ceb73bab1621d61b8aa3fb59095e) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

Convert to new override syntax

2021-08-02T14:44:10+00:00

This is the result of automated script conversion: scripts/contrib/convert-overrides.py converting the metadata to use ":" as the override character instead of "_". (From OE-Core rev: 42344347be29f0997cc2f7636d9603b1fe1875ae) Signed-off-by: Richard Purdie

screen: fix CVE-2021-26937

2021-02-23T22:35:01+00:00

Apply patch from Debian to fix CVE-2021-26937. (From OE-Core rev: 6d688cc8672b1830ba10966492ab3f8a12d32e17) Signed-off-by: Scott Murray Signed-off-by: Richard Purdie