[ 23:44 Cy Schubert (cy)  ]

• 9bdc788616889d0a2b3f9c8b8996610cdfe82be7 sysutils/screen/Makefile
• 9bdc788616889d0a2b3f9c8b8996610cdfe82be7 sysutils/screen/distinfo
• 9bdc788616889d0a2b3f9c8b8996610cdfe82be7 sysutils/screen/files/patch-Makefile.in
• 9bdc788616889d0a2b3f9c8b8996610cdfe82be7 sysutils/screen/files/patch-ansi.c
• 9bdc788616889d0a2b3f9c8b8996610cdfe82be7 sysutils/screen/files/patch-configure
• 9bdc788616889d0a2b3f9c8b8996610cdfe82be7 sysutils/screen/files/patch-configure.ac
• 9bdc788616889d0a2b3f9c8b8996610cdfe82be7 sysutils/screen/files/patch-encoding.c
• 9bdc788616889d0a2b3f9c8b8996610cdfe82be7 sysutils/screen/files/patch-osdef.h.in
• 9bdc788616889d0a2b3f9c8b8996610cdfe82be7 sysutils/screen/pkg-plist

sysutils/screen: Update to 4.9.0

Update screen to 4.9.0. From the release announcement:

New in this release:
  * Hardstatus option for used encoding (escape string '%e')
  * Fixes:
    - fix combining char handling that could lead to a segfault
    - CVE-2021-26937: possible denial of service via a crafted UTF-8
      character sequence (bug #60030)
    - make screen exit code be 0 when checking --help
    - session names limit is 80 symbols (bug #61534)
    - option -X ignores specified user in multiuser env (bug #37437)
    - a lot of reformations/fixes/cleanups (man page and source code)

For full list of changes see
https://git.savannah.gnu.org/cgit/screen.git/log/?h=v.4.9.0

Note that CVE-2021-26937 was fixed in the FreeBSD port in 2021.

[ 00:45 cy  ]

• 565376 sysutils/screen/Makefile
• 565376 sysutils/screen/files/patch-ansi.c
• 565376 sysutils/screen/files/patch-encoding.c

Fix CVE-2021-26937 for real: segfaults by displaying some UTF-8 characters

This is a recommit of r565281 fixing a typo in r565281, causing
a regression.

CVE-2021-26937 segfaults when displayingsome UTF-8 characters
described in
https://lists.gnu.org/archive/html/screen-devel/2021-02/msg00000.html.

PR:		253515
Reported by:	daniel.engberg.lists at pyret.net
Obtained from:	https://build.opensuse.org/request/show/871482
MFH:		2020Q1
Security:	CVE-2021-26937

[ 19:17 cy  ]

• 565328 sysutils/screen/Makefile
• 565328 sysutils/screen/files/patch-ansi.c
• 565328 sysutils/screen/files/patch-encoding.c

Revert r565281. It breaks UTF-8.

Reported by:	Trond.Endrestol at ximalas.info
		Christos Chatzaras <chris at cretaforce.gr>
PR:		253515

[ 01:35 cy  ]

• 565281 sysutils/screen/Makefile
• 565281 sysutils/screen/files/patch-ansi.c
• 565281 sysutils/screen/files/patch-encoding.c

Fix CVE-2021-26937: segfaults by displaying some UTF-8 characters

CVE-2021-26937 segfaults when displayingsome UTF-8 characters
described in
https://lists.gnu.org/archive/html/screen-devel/2021-02/msg00000.html.

PR:		253515
Reported by:	daniel.engberg.lists at pyret.net
Obtained from:	https://build.opensuse.org/request/show/871482
MFH:		2020Q1
Security:	CVE-2021-26937

[ 19:34 cy  ]

• 1.84 sysutils/screen/Makefile
• 1.2 sysutils/screen/files/patch-ansi.h
• 1.2 sysutils/screen/files/patch-doc_screen.1
• 1.2 sysutils/screen/files/patch-doc_screen.texinfo
• 1.2 sysutils/screen/files/patch-encoding.c
• 1.2 sysutils/screen/files/uue-utf8encodings_a3
• 1.31 sysutils/screen/pkg-plist

Back out previous commit. It broke UTF8 functioning.

Submitted by:   Dmitry Marakasov <amdmi3@amdmi3.ru>

[ 04:28 cy  ]

• 1.83 sysutils/screen/Makefile
• 1.1 sysutils/screen/files/patch-ansi.h
• 1.1 sysutils/screen/files/patch-doc_screen.1
• 1.1 sysutils/screen/files/patch-doc_screen.texinfo
• 1.1 sysutils/screen/files/patch-encoding.c
• 1.1 sysutils/screen/files/uue-utf8encodings_a3
• 1.30 sysutils/screen/pkg-plist

Add support for KOI8-U.

PR:             ports/156031
Submitted by:   Valentin Nechayev <netch@netch.kiev.ua>