Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package screen for openSUSE:Factory checked in at 2026-10-30 18:03:01 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/screen (Old) and /work/SRC/openSUSE:Factory/.screen.new.1255 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "screen" Fri Oct 30 18:03:01 2026 rev:68 rq:1393484 version:5.0.2 Changes: -------- --- /work/SRC/openSUSE:Factory/screen/screen.changes 2025-05-26 18:32:49.052568756 +0200 +++ /work/SRC/openSUSE:Factory/.screen.new.1255/screen.changes 2026-10-30 18:03:09.814313984 +0100 @@ -1,0 +2,28 @@ +Sun Oct 18 11:01:37 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to 5.0.2 (major 5.x release): + * Rewritten authentication mechanism; new auth, status, + truecolor and multiinput commands; new %T, %O and %* + escapes. Removed time, debug, password, maxwin and + nethack commands. + * Behavior notes: single socket dir /run/screens (the old + screens/uscreens split is gone); bare -L only enables + logging, use -Logfile to set the logfile name; + screenrc files using + removed commands need updating; terminfo entries still + honored. + * CVE-2025-46805: no signals sent with root privileges. + * CVE-2025-46804: no file existence test information leaks. + * CVE-2025-46803: safe PTY default mode of 0620. + * CVE-2025-23395: reintroduce lf_secreopen for logfile. + * 5.0.2 also fixes a SendCmdMessage buffer overflow and a + detaching TOCTOU race with empty terminfo. +- Drop libtinfo.diff (upstream rewrote termcap detection), + sendfdcont.diff, multicont.diff, nottychmod.diff (all + superseded by the 5.0 authentication rewrite). +- Refresh screen.keyring from upstream (new upstream signing key). +- Run the upstream unit tests in %%check (the detach + integration test needs a live pty, unavailable in the + buildroot). + +------------------------------------------------------------------- Old: ---- libtinfo.diff multicont.diff nottychmod.diff screen-4.9.1.tar.gz screen-4.9.1.tar.gz.sig sendfdcont.diff New: ---- screen-5.0.2.tar.gz screen-5.0.2.tar.gz.sig ----------(Old B)---------- Old: detaching TOCTOU race with empty terminfo. - Drop libtinfo.diff (upstream rewrote termcap detection), sendfdcont.diff, multicont.diff, nottychmod.diff (all Old:- Drop libtinfo.diff (upstream rewrote termcap detection), sendfdcont.diff, multicont.diff, nottychmod.diff (all superseded by the 5.0 authentication rewrite). Old:- Drop libtinfo.diff (upstream rewrote termcap detection), sendfdcont.diff, multicont.diff, nottychmod.diff (all superseded by the 5.0 authentication rewrite). Old:- Drop libtinfo.diff (upstream rewrote termcap detection), sendfdcont.diff, multicont.diff, nottychmod.diff (all superseded by the 5.0 authentication rewrite). ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ screen.spec ++++++ --- /var/tmp/diff_new_pack.xwDMZ8/_old 2026-10-30 18:03:16.880609878 +0100 +++ /var/tmp/diff_new_pack.xwDMZ8/_new 2026-10-30 18:03:16.888610213 +0100 @@ -1,7 +1,7 @@ # # spec file for package screen # -# Copyright (c) 2025 SUSE LLC +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,17 +16,12 @@ # -%if 0%{?suse_version} > 1310 %define rundir /run -%else -%define rundir %{_localstatedir}/run -%endif Name: screen -Version: 4.9.1 +Version: 5.0.2 Release: 0 Summary: A program to allow multiple screens on a VT100/ANSI Terminal License: GPL-3.0-or-later -Group: System/Console URL: https://www.gnu.org/software/screen/ Source: https://ftp.gnu.org/gnu/screen/%{name}-%{version}.tar.gz Source1: screen.conf @@ -34,21 +29,18 @@ Source3: https://savannah.gnu.org/people/viewgpg.php?user_id=99366#/%{name}.keyring Source4: screen.pam Patch0: global_screenrc.patch -Patch6: libtinfo.diff -Patch7: sendfdcont.diff -Patch8: nottychmod.diff -Patch9: multicont.diff BuildRequires: autoconf BuildRequires: automake BuildRequires: makeinfo -BuildRequires: ncurses-devel -BuildRequires: pam-devel -%if 0%{?suse_version} < 1600 -BuildRequires: utempter-devel -%endif +BuildRequires: pkgconfig +BuildRequires: pkgconfig(ncurses) +BuildRequires: pkgconfig(pam) Requires: terminfo-base Requires(post): permissions %systemd_ordering +%if 0%{?suse_version} < 1600 +BuildRequires: utempter-devel +%endif %description With this program you can take advantage of the multitasking abilities @@ -61,25 +53,18 @@ %setup -q # global_screenrc.patch %patch -P 0 -# libtinfo.diff -%patch -P 6 -%patch -P 7 -%patch -P 8 -%patch -P 9 %build sh ./autogen.sh -CFLAGS="-DMAXWIN=1000 %{optflags} -std=gnu89" %configure --prefix=%{_prefix} --infodir=%{_infodir} \ +CFLAGS="%{optflags}" %configure --prefix=%{_prefix} --infodir=%{_infodir} \ --mandir=%{_mandir} \ - --with-socket-dir='(eff_uid ? "%{rundir}/uscreens" : "%{rundir}/screens")' \ - --with-sys-screenrc=%{_sysconfdir}/screenrc \ + --enable-socket-dir='%{rundir}/screens' \ + --with-system_screenrc=%{_sysconfdir}/screenrc \ --with-pty-group=5 \ --with-pty-mode=0620 \ - --enable-use-locale \ --enable-telnet \ --enable-pam \ - --enable-colors256 \ --verbose # update Makefile so that make -j becomes reliable @@ -106,7 +91,6 @@ mkdir -p %{buildroot}%{_tmpfilesdir} mkdir -p %{buildroot}%{rundir}/screens chmod 755 %{buildroot}%{rundir}/screens -mkdir -p %{buildroot}%{rundir}/uscreens install -m 644 screenrc %{buildroot}%{_sysconfdir}/screenrc install -m 644 %{SOURCE1} %{buildroot}%{_tmpfilesdir} %if 0%{?suse_version} > 1500 @@ -115,6 +99,13 @@ install -m 644 %{SOURCE4} %{buildroot}%{_sysconfdir}/pam.d/screen %endif +%check +# tests/test-detach-cli needs a live pty to start a session, which the +# buildroot does not provide, so run only the unit tests +make tests/test-winmsgbuf tests/test-winmsgcond +./tests/test-winmsgbuf +./tests/test-winmsgcond + %files %config %{_sysconfdir}/screenrc %if 0%{?suse_version} > 1500 ++++++ screen-4.9.1.tar.gz -> screen-5.0.2.tar.gz ++++++ ++++ 120614 lines of diff (skipped) ++++++ screen.conf ++++++ --- /var/tmp/diff_new_pack.xwDMZ8/_old 2026-10-30 18:03:18.372672356 +0100 +++ /var/tmp/diff_new_pack.xwDMZ8/_new 2026-10-30 18:03:18.387672984 +0100 @@ -1,5 +1,4 @@ # Screen needs some files in /run: d /run/screens 0755 root root - -d /run/uscreens 1777 root root - ++++++ screen.keyring ++++++ --- /var/tmp/diff_new_pack.xwDMZ8/_old 2026-10-30 18:03:18.508678052 +0100 +++ /var/tmp/diff_new_pack.xwDMZ8/_new 2026-10-30 18:03:18.526678805 +0100 @@ -1,16 +1,54 @@ -----BEGIN PGP PUBLIC KEY BLOCK----- -mDMEY7LR/BYJKwYBBAHaRw8BAQdA4m5kbiTCVBIvof8H5gLfnthrzQUThO1Jf6Cg -AXmKk8O0MEFsZXhhbmRlciBOYXVtb3YgPGFsZXhhbmRlcl9uYXVtb3ZAb3BlbnN1 -c2Uub3JnPoiaBBMWCgBCFiEEULhhs+kw7DN1DZDtkQgyl0qSoRwFAmOy0fwCGwMF -CRLMAwAFCwkIBwIDIgIBBhUKCQgLAgQWAgMBAh4HAheAAAoJEJEIMpdKkqEcmR8A -/iPUUq/NOZDK+OGyevpgOjM4ql27sNEUw2s5lpSrtSUWAPwPp/z6MPUaCotey8DV -/9NNY4l2WqZFSEsXOod7ymytD7g4BGOy0fwSCisGAQQBl1UBBQEBB0Cd30iQQ4mh -td+nUWAq/MuTLNStoJpuptQx43LE97teQgMBCAeIfgQYFgoAJhYhBFC4YbPpMOwz -dQ2Q7ZEIMpdKkqEcBQJjstH8AhsMBQkSzAMAAAoJEJEIMpdKkqEcKzQA/1YwYRl8 -arfkUA1IwJQajL9IgAyzYmHXKbLNxnTudUvgAP9uBpUML3BzCw097e49P3YcPncf -rmvea+Jn9PDEUQQlAg== -=hWrz +mQINBGgiC3gBEAC0SdlPzFBtE7XGdwVRcE/wIYStC7+mSPxrF0VlLglSK3m4z+A7 +jFTtHJEjX/V21uIk9ToYupg4ajRXHjiexIFB+VnDTTPc8Akyrj8DPU7uEwEq6I1J +AF0WzONyLpxPeA8+gaDTNzavG4Iy9vKfiXAfkYp3vrGECQIhP0ssBv0yXmyppCu7 +pDRATpdj1txchT4/ehGLW6Sctb7HPNCD/XSLpfV9RHu0cZ5NgrDBdK9ZM/zWQ496 +KMMv8PRdSriITbZmakvVD0HFQ5ucg1MU8JoK5C0CBNnhEQASU5Brq99fLL8rJ8lW +Dx4dTIQCx5OEuDmAxyFKrwo2/c1CzUVBicy0W10zfqo3VQAfWlk2UsZClmdw7Wo/ +IWvFCgN6wdaTwGsqCLybcUjYWCYDvcez8WQIOt4gz0szQK9abKX7dC703uDzkE3e +vWr1OD6B5dCJ1YCuKi/d8GdGqAM6af3BqGWF9EcbhtpYvVHBEe2QhGlirWYjja6M +QkCJA+4ffrOpv4TVJI8cjmoznyEa6RIq0Gom6teB9PJQJX3zKHl4Gl94N3JcUJe2 +JUbetNTS/u8/eaY0ea8OIE+TKl5WAl+HSuub5jYpJgmV31aeuLUiKyfQPzVuPm10 +G2KjMj9ZJ29G2PRdV/TqpUMwbDJqllM9exqm62alz5DoKJkabsSDDDsStQARAQAB +tDBBbGV4YW5kZXIgTmF1bW92IDxhbGV4YW5kZXJfbmF1bW92QG9wZW5zdXNlLm9y +Zz6JAlQEEwEKAD4WIQR4MpGJBcbTFt+1QxOJjXJsh8Wv4wUCaCILeAIbAwUJEswD +AAULCQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRCJjXJsh8Wv411ZD/9mWvR0rU0E +SjxzYjNacKIsdo+motZYEPTmpq6MC3hNRdT55fQBTeQV/h1sXPZxKL/wSmeAZU7W +gHRLRLnD04uq06umVcMeS7dEserakq3sP45Bnc/bZEtbc6Qx7MoNxoVpAR1G4Glc +LVDHw7OBJVWHQTQeB8945BJVkFoAUzIkKRE8+CPW1UW/8ufPBva5A1nZreE+XKEj +3KdBH+KCeILS1vkXnDX5n3nYygZcom3rrhmjBJdBm7I8r7TrRMEXKoi9IYi12lxX +a7zQmXI9LirGU6Lda85tusz2GPuG7Z/2lvStPBRpnRRstvO5FfGbh9+ctujPak9l +jXR8fe7eTWC0Wr7ksnTHYmx24iR4ecZYHEcowE2BU+PaEyrHwHPzGxQ4jbn8JHiZ ++LXO3X2UR9+eRSyWnsxroySNpGmc0qstjD/JCcV9p9Dr1RZgRbwZpHrxbWANk+Wm +L9/o40d4FCEqg8JcZZVNt8hGz/yDrj9j5o0u5kjDITKwbe57F3XT2w7rjWZY8Id8 +w1d4MCjAncDKiwP6HQoinb+o3B7uFDBPHey3IzmX7DH4J1YS4b2W/oj27D+jFfhs +BQ1952kMolrA9jxJdlQZ+khbbgS6y2+spXMmmuK3IDeX3EtkcTFTSC+qdKWPBmED +vvIITebrX5r9q3BdgyhI97jAGA3IshHK27kCDQRoIgt4ARAAuSr5he1uXCht2ZKV +JITTsgyDDkvfy2qDZW2fmkyT38QZTgJ0M3tx2uuKOJFD6Cz3EuQmFgB8Ehcs8vdT +ARIoTrm+kOxR79IvSqK/R3M7lUGLzrkzeB7ROnnlgYnrB0DusbUgvV5f2Hzmh5G6 +g8S/ocRStHlcFtM6xZglOiHws8ppcOUUtRenXPFZyMMUveFtY81trwfH+c6q8iP9 +eiAXeNKQaCJ2wPt2Nk0KBId/I19KBi9lXVQMrhz3XnReYyPpbUqD/7AFjgRZ+UJr +N1dUmcAjB/XL19PXhQiBRsIhtrdU7vo7jm13syamJDhwkQX1wg1bosCb7CwnEd+6 +u+L0JpjGZfcYBBdLcRbFAeS7eegRsSjPFVIyDQuoolqHVyyNeI2rWXlJtuNb1P2O +CI/3OMMlHEWGlthqZmlkSylt800f8/YPpi8UY5SjUBQJRBrk/cuh7jEyS7CA8TZM +xyIRhrXOF2Bc4mcnkUsbwGaBKN2GiV8Rc//W5q40k9k57aQaLUfCOET65Y38UmoP +YSt7Pjor0KLsAbfk1SKz/blUQ+QbkINsKSLCPlKMnWhd1s9oBFeJ100NjSUODr8r +p6ji/orMgo42/Jic9gLHTmsKyVkXt43KxDIFgUSBwmnM4lJtXqaAAl7ul72XV+2R +MC7XqXfl+0ilzn0BuJ1WvlNgjoEAEQEAAYkCPAQYAQoAJhYhBHgykYkFxtMW37VD +E4mNcmyHxa/jBQJoIgt4AhsMBQkSzAMAAAoJEImNcmyHxa/jmpIP/3SYOX3ZTFrb +xbH7PESRpcirMkLA4+ApAzLhzC6gQxt8YwXiwUoWsNAQ65eaimaapZd8JYRRwLWb +3lFd/YeN2OykdcKnOvSN/TQD3Wlp8awdHpj2jU56/VNDcDb5juuF5trPY/zEb15s +ay6oYKJIkbBC7mvkwafG1li0Q1nLPY7WJ/Qvj45Fm+QRQ05HrA0oC7Zw8qy94Nfa +OKRI72cua20lkidanfIToeEi1vAe2WDB84l/hqy75/XbheUs9oUB61jZflJmtOni +tm/B7LbPJQCQIknAvq7I1DW3Fc9oaue+bY7UkAfUncFLkWcC3VDfhYqHYh6wy+d1 +fTiUXGCUS8ybXamS9J9I6efnVpsAceCxTBhqEeVQJ8O08q9fMkZUJ1MgcSPXRQ1s +uIVEkKl/Y+n4hgITJ6Xl7bjKVPi/Zsd6czyU01BGAILzWzqdKFiZoyQ7K2gllyKD +9otLS1ReeaGwen33QOifpwi7jKJJIyCL9MC3e3wpZu/fXqM/Q66r28ymrME8/I31 +Bmy7lKtJDFBeRrozCn87CeCe8ccp3Yp/NNNuDqGvJINmntGpXkvzl0SzSEg7XNY1 +5IhoovpOAZJ9lwf7vEtF7bK9u84p5sM+RvrnZbG2fLMaT0its4B5CTigkBpCu5SP +Tlna7kgHSHVp11FfzhaqLfgJuUGfNMdz +=B0Zn -----END PGP PUBLIC KEY BLOCK----- (No newline at EOF)
