[SECURITY] [DLA 2570-1] screen security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
- -----------------------------------------------------------------------
Debian LTS Advisory DLA-2570-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Utkarsh Gupta
February 20, 2021 https://wiki.debian.org/LTS
- -----------------------------------------------------------------------
Package : screen
Version : 4.5.0-6+deb9u1
CVE ID : CVE-2021-26937
Debian Bug : 982435
encoding.c in GNU Screen through 4.8.0 allows remote attackers
to cause a denial of service (invalid write access and application
crash) or possibly have unspecified other impact via a crafted
UTF-8 character sequence.
For Debian 9 stretch, this problem has been fixed in version
4.5.0-6+deb9u1.
We recommend that you upgrade your screen packages.
For the detailed security status of screen please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/screen
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----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=eoG4
-----END PGP SIGNATURE-----
Reply to: