[bug#78430,0/2] Fix vulnerabilities in GNU Screen

Message ID	cover.1747250195.git.liliana.prikler@gmail.com
Headers	Subject: [bug#78430] [PATCH 0/2] Fix vulnerabilities in GNU Screen Resent-From: Liliana Marie Prikler <liliana.prikler@gmail.com> Original-Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org> Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 14 May 2025 19:20:02 +0000 Resent-Message-ID: <handler.78430.B.174725038310737@debbugs.gnu.org> Resent-Sender: help-debbugs@gnu.org To: 78430@debbugs.gnu.org Message-ID: <cover.1747250195.git.liliana.prikler@gmail.com> From: Liliana Marie Prikler <liliana.prikler@gmail.com> Date: Wed, 14 May 2025 21:16:35 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=2a00:1450:4864:20::442; envelope-from=liliana.prikler@gmail.com; helo=mail-wr1-x442.google.com X-Spam_score_int: 0 X-Spam_score: 0.0 X-Spam_bar: / X-Spam_report: (0.0 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, MALFORMED_FREEMAIL=2.117, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_MXG_LOWER_HDR_SPAM=0.01 autolearn=no autolearn_force=no X-Spam_action: no action Precedence: list Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org X-getmail-retrieved-from-mailbox: Patches
Series	Fix vulnerabilities in GNU Screen \| [bug#78430,0/2] Fix vulnerabilities in GNU Screen [bug#78430,1/2] gnu: screen: Use new package style. [bug#78430,2/2] gnu: screen: Fix multiple CVEs.

Message ID

cover.1747250195.git.liliana.prikler@gmail.com

Headers

Subject: [bug#78430] [PATCH 0/2] Fix vulnerabilities in GNU Screen
Resent-From: Liliana Marie Prikler <liliana.prikler@gmail.com>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
Resent-CC: guix-patches@gnu.org
Resent-Date: Wed, 14 May 2025 19:20:02 +0000
Resent-Message-ID: <handler.78430.B.174725038310737@debbugs.gnu.org>
Resent-Sender: help-debbugs@gnu.org
To: 78430@debbugs.gnu.org
Message-ID: <cover.1747250195.git.liliana.prikler@gmail.com>
From: Liliana Marie Prikler <liliana.prikler@gmail.com>
Date: Wed, 14 May 2025 21:16:35 +0200
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Received-SPF: pass client-ip=2a00:1450:4864:20::442;
 envelope-from=liliana.prikler@gmail.com; helo=mail-wr1-x442.google.com
X-Spam_score_int: 0
X-Spam_score: 0.0
X-Spam_bar: /
X-Spam_report: (0.0 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1,
 DKIM_VALID=-0.1,
 DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001,
 MALFORMED_FREEMAIL=2.117, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001,
 SPF_PASS=-0.001, T_MXG_LOWER_HDR_SPAM=0.01 autolearn=no autolearn_force=no
X-Spam_action: no action
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
X-BeenThere: guix-patches@gnu.org
List-Id: <guix-patches.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/guix-patches>,
 <mailto:guix-patches-request@gnu.org?subject=unsubscribe>
List-Archive: <https://lists.gnu.org/archive/html/guix-patches>
List-Post: <mailto:guix-patches@gnu.org>
List-Help: <mailto:guix-patches-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/guix-patches>,
 <mailto:guix-patches-request@gnu.org?subject=subscribe>
Errors-To: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org
Sender: guix-patches-bounces+patchwork=mira.cbaines.net@gnu.org
X-getmail-retrieved-from-mailbox: Patches

Series

Fix vulnerabilities in GNU Screen |

Message

Liliana Marie Prikler May 14, 2025, 7:16 p.m. UTC

  Hi Guix,

as outlined in [1], the current version of GNU Screen packaged in Guix
suffers from multiple vulnerabilities.  This series first cleans up the
package style and then applies the patches that fix them.

Cheers

[1] https://www.openwall.com/lists/oss-security/2025/05/12/1

Liliana Marie Prikler (2):
  gnu: screen: Use new package style.
  gnu: screen: Fix multiple CVEs.

 gnu/local.mk                                  |   5 +
 .../patches/screen-fix-CVE-2025-233.patch     | 137 ++++++++++++++++++
 .../patches/screen-fix-CVE-2025-46802.patch   | 113 +++++++++++++++
 .../patches/screen-fix-CVE-2025-46804.patch   | 130 +++++++++++++++++
 .../patches/screen-fix-CVE-2025-46805.patch   | 115 +++++++++++++++
 .../patches/screen-fix-bad-strncpy.patch      |  60 ++++++++
 gnu/packages/screen.scm                       |  27 +++-
 7 files changed, 579 insertions(+), 8 deletions(-)
 create mode 100644 gnu/packages/patches/screen-fix-CVE-2025-233.patch
 create mode 100644 gnu/packages/patches/screen-fix-CVE-2025-46802.patch
 create mode 100644 gnu/packages/patches/screen-fix-CVE-2025-46804.patch
 create mode 100644 gnu/packages/patches/screen-fix-CVE-2025-46805.patch
 create mode 100644 gnu/packages/patches/screen-fix-bad-strncpy.patch


base-commit: 5f5d84beccc180f1b51474c0e47eb6e0d0c9175f