Screen

Screen is a full-screen window manager that multiplexes a physical terminal between several processes, typically interactive shells.

5.0.1 is a security fix release. It includes only few code fixes, types and security issues. It doesn't include any new features.

• CVE-2025-46805: do NOT send signals with root privileges
• CVE-2025-46804: avoid file existence test information leaks
• CVE-2025-46803: apply safe PTY default mode of 0620
• CVE-2025-46802: prevent temporary 0666 mode on PTYs in attacher
• CVE-2025-23395: reintroduce lf_secreopen() for logfile
• buffer overflow due bad strncpy()
• uninitialized variables warnings
• typos
• combining char handling that could lead to a segfault

Release (official tarball) will be available soon for download:
https://ftp.gnu.org/gnu/screen/

Please report any bugs or regressions.
Thanks to everyone who contributed to this release.

Cheers,
Alex

Screen is a full-screen window manager that multiplexes a physical
terminal between several processes, typically interactive shells.

The 5.0.0 release includes the following changes to the previous
release 4.9.1:

• Rewritten authentication mechanism
• Add escape %T to show current tty for window
• Add escape %O to show number of currently open windows
• Use wcwdith() instead of UTF-8 hard-coded tables
• New commands:

  - auth [on|off]
    Provides password protection
  - status [top|up|down|bottom] [left|right]
    The status window by default is in bottom-left corner.
    This command can move status messages to any corner of the screen.
  - truecolor [on|off]
  - multiinput
    Input to multiple windows at the same time

I'm announcing availability of GNU Screen v.4.9.1

Screen is a full-screen window manager that multiplexes a physical terminal between several processes, typically interactive shells.

This release:

• Support stop/parity bits on serial port
• Add needed system headers in checks and return values for implicit function declarations
• Fixes:

- Avoid zombies after shell exit
- Missed signal sending permission check on failed query messages (CVE-2023-24626)
- manpage fixes
- source code fixes during cleanup
- UTF-8 encoding can emit invalid UTF-8 sequences for out of range unicode values


For full list of changes see
https://git.savannah.gnu.org/cgit/screen.git/log/?h=v.4.9.1

Release is available for download at:
https://ftp.gnu.org/gnu/screen/
or your closest mirror (may have some delay)
https://ftpmirror.gnu.org/screen/

Please report any bugs or regressions.
Thanks to everyone who contributed to this release.

Cheers,
Alex

I'm announcing availability of GNU Screen v.4.9.0

Screen is a full-screen window manager that multiplexes a
physical terminal between several processes, typically
interactive shells.

New in this release:
  * Hardstatus option for used encoding (escape string '%e')
  * OpenBSD uses native openpty() from its utils.h
  * Fixes:
    - fix combining char handling that could lead to a segfault
    - CVE-2021-26937: possible denial of service via a crafted UTF-8 character sequence (bug #60030)
    - make screen exit code be 0 when checking --help
    - session names limit is 80 symbols (bug #61534)
    - option -X ignores specified user in multiuser env (bug #37437)
    - a lot of reformations/fixes/cleanups (man page and source code)

For full list of changes see
https://git.savannah.gnu.org/cgit/screen.git/log/?h=v.4.9.0

Release is available for download at:
https://ftp.gnu.org/gnu/screen/
or your closest mirror (may have some delay)
https://ftpmirror.gnu.org/screen/

Thanks to everybody who contributed patches and helped to test development git-version.
Keep sending bugreports or any regressions.

Have a lot of fun with GNU Screen 4.9.0 ;-)

Cheers,
Alex

I'm announcing availability of GNU Screen v.4.8.0

Screen is a full-screen window manager that multiplexes a physical
terminal between several processes, typically interactive shells.

This release
  * Improves startup time by only polling for already open files to
    close
  * Fixes:
       - Fix for segfault if termcap doesn't have Km entry
       - Make screen exit code be 0 when checking --version
       - Fix potential memory corruption when using OSC 49

As last fix, fixes potential memory overwrite of quite big size (~768
bytes), and even though I'm not sure about potential exploitability of
that issue, I highly recommend everyone to upgrade as soon as possible.
This issue is present at least since v.4.2.0 (haven't checked earlier).
Thanks to pippin who brought this to my attention.

For full list of changes see
https://git.savannah.gnu.org/cgit/screen.git/log/?h=v.4.8.0

Release is available for download at:
https://ftp.gnu.org/gnu/screen/
or your closest mirror (may have some delay)
https://ftpmirror.gnu.org/screen/

Please report any bugs or regressions.

I'm announcing availability of GNU Screen v.4.7.0

This release
  * Adds support for SGR (1006) mouse mode
  * Adds support for OSC 11
  * Updates Unicode ambiguous and wide tables to 12.1.0
  * Fixes:
  - cross-compilation support (bug #43223)
  - a lot of manpage fixes and cleanups

Release is available for download at:
https://ftp.gnu.org/gnu/screen/
or your closest mirror (may have some delay)
https://ftpmirror.gnu.org/screen/

Please report any bugs or regressions.

I'm announcing availability of GNU Screen v.4.6.1

This is a bugfix release:
  * Fixes:
- problems with starting session in some cases
        - parallel make install
        - segfault when querying info on nonUTF locale

Release is available for download at:
http://ftp.gnu.org/gnu/screen/
or your closest mirror (may have some delay)
http://ftpmirror.gnu.org/screen/

Please report any bugs or regressions.

I'm announcing availability of GNU Screen v.4.6.0

Changes:
  * Update Unicode wide tables to 9.0
  * Support more serial speeds
  * Improved namespaces support
  * Migrate from fifos to sockets
  * Start viewing scrollback at first line of output

Release is available for download at:
http://ftp.gnu.org/gnu/screen/
or your closest mirror (may have some delay)
http://ftpmirror.gnu.org/screen/

Please report any bugs or regressions.

I'm glad to announce that the new version of GNU Screen (4.5.1) has been released today!

4.5.1 is a bugfix/security release.
We fixed few crashes and, of course, problem with privilege escalation.
We also changed behavior of '-L' option: now you can set new logfile name using '-Logfile' option and '-L' just tells screen to  turn on logging.


Thanks to all beta testers who help to test new stuff in git. Keep to report about bugs or any regressions!
Also thanks for collaboration to packagers who maintain GNU screen for UNIX-like systems like OpenIndiana and *BSD.

Release is available for download at:
http://ftp.gnu.org/gnu/screen/

GNU Screen v4.5.0 is now available.

The 4.5.0 release is mostly a bugfix release:
  -> broken handling of "bind u digraph U+" (bug #48691)
  -> crash with long $TERM (bug #48983)
  -> crash when bumping blank window
  -> build for AIX (bug #49149)
  -> %x improperly separating arguments
  -> install with custom DESTDIR (bug #48370)

Just one new feature: it is possible to specify logfile's name via command line parameter '-L'.

Release is available for download at:
http://ftp.gnu.org/gnu/screen/

Thanks to everybody who contributed patches and helps to test development git-version. Keep to report about bugs or any regressions.