[ 23:44 Cy Schubert (cy)  ]

• 9bdc788616889d0a2b3f9c8b8996610cdfe82be7 sysutils/screen/Makefile
• 9bdc788616889d0a2b3f9c8b8996610cdfe82be7 sysutils/screen/distinfo
• 9bdc788616889d0a2b3f9c8b8996610cdfe82be7 sysutils/screen/files/patch-Makefile.in
• 9bdc788616889d0a2b3f9c8b8996610cdfe82be7 sysutils/screen/files/patch-ansi.c
• 9bdc788616889d0a2b3f9c8b8996610cdfe82be7 sysutils/screen/files/patch-configure
• 9bdc788616889d0a2b3f9c8b8996610cdfe82be7 sysutils/screen/files/patch-configure.ac
• 9bdc788616889d0a2b3f9c8b8996610cdfe82be7 sysutils/screen/files/patch-encoding.c
• 9bdc788616889d0a2b3f9c8b8996610cdfe82be7 sysutils/screen/files/patch-osdef.h.in
• 9bdc788616889d0a2b3f9c8b8996610cdfe82be7 sysutils/screen/pkg-plist

sysutils/screen: Update to 4.9.0

Update screen to 4.9.0. From the release announcement:

New in this release:
  * Hardstatus option for used encoding (escape string '%e')
  * Fixes:
    - fix combining char handling that could lead to a segfault
    - CVE-2021-26937: possible denial of service via a crafted UTF-8
      character sequence (bug #60030)
    - make screen exit code be 0 when checking --help
    - session names limit is 80 symbols (bug #61534)
    - option -X ignores specified user in multiuser env (bug #37437)
    - a lot of reformations/fixes/cleanups (man page and source code)

For full list of changes see
https://git.savannah.gnu.org/cgit/screen.git/log/?h=v.4.9.0

Note that CVE-2021-26937 was fixed in the FreeBSD port in 2021.

[ 00:45 cy  ]

• 565376 sysutils/screen/Makefile
• 565376 sysutils/screen/files/patch-ansi.c
• 565376 sysutils/screen/files/patch-encoding.c

Fix CVE-2021-26937 for real: segfaults by displaying some UTF-8 characters

This is a recommit of r565281 fixing a typo in r565281, causing
a regression.

CVE-2021-26937 segfaults when displayingsome UTF-8 characters
described in
https://lists.gnu.org/archive/html/screen-devel/2021-02/msg00000.html.

PR:		253515
Reported by:	daniel.engberg.lists at pyret.net
Obtained from:	https://build.opensuse.org/request/show/871482
MFH:		2020Q1
Security:	CVE-2021-26937

[ 19:17 cy  ]

• 565328 sysutils/screen/Makefile
• 565328 sysutils/screen/files/patch-ansi.c
• 565328 sysutils/screen/files/patch-encoding.c

Revert r565281. It breaks UTF-8.

Reported by:	Trond.Endrestol at ximalas.info
		Christos Chatzaras <chris at cretaforce.gr>
PR:		253515

[ 01:35 cy  ]

• 565281 sysutils/screen/Makefile
• 565281 sysutils/screen/files/patch-ansi.c
• 565281 sysutils/screen/files/patch-encoding.c

Fix CVE-2021-26937: segfaults by displaying some UTF-8 characters

CVE-2021-26937 segfaults when displayingsome UTF-8 characters
described in
https://lists.gnu.org/archive/html/screen-devel/2021-02/msg00000.html.

PR:		253515
Reported by:	daniel.engberg.lists at pyret.net
Obtained from:	https://build.opensuse.org/request/show/871482
MFH:		2020Q1
Security:	CVE-2021-26937

[ 01:51 cy  ]

• 391023 sysutils/screen/Makefile
• 391023 sysutils/screen/distinfo
• 391023 sysutils/screen/files/patch-ansi.c
• 391023 sysutils/screen/files/patch-os.h
• 391023 sysutils/screen/files/patch-screen.c

Update 4.2.1 --> 4.3.1

[ 04:22 cy  ]

• 352669 sysutils/Makefile
• 352669 sysutils/screen-legacy/Makefile
• 352669 sysutils/screen/Makefile
• 352669 sysutils/screen/distinfo
• 352669 sysutils/screen/files/patch-Makefile.in
• 352669 sysutils/screen/files/patch-aa
• 352669 sysutils/screen/files/patch-ab
• 352669 sysutils/screen/files/patch-ad
• 352669 sysutils/screen/files/patch-ansi.c
• 352669 sysutils/screen/files/patch-display.h

Update screen 4.0.3 --> 4.2.1.

Put final touches onto screen-legacy.