1. Forum
  2. Usenet
  3. LINUX.DEBIAN.ANNOUNCE.SEC

  • [SECURITY] [DSA 4861-1] screen security update

    From Salvatore Bonaccorso@21:1/5 to All on Sun Feb 21 09:40:02 2021
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    - ------------------------------------------------------------------------- Debian Security Advisory DSA-4861-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso February 21, 2021 https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package : screen
    CVE ID : CVE-2021-26937
    Debian Bug : 982435

    Felix Weinmann reported a flaw in the handling of combining characters
    in screen, a terminal multiplexer with VT100/ANSI terminal emulation,
    which can result in denial of service, or potentially the execution of arbitrary code via a specially crafted UTF-8 character sequence.

    For the stable distribution (buster), this problem has been fixed in
    version 4.6.2-3+deb10u1.

    We recommend that you upgrade your screen packages.

    For the detailed security status of screen please refer to its security
    tracker page at:
    https://security-tracker.debian.org/tracker/screen

    Further information about Debian Security Advisories, how to apply
    these updates to your system and frequently asked questions can be
    found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org
    -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmAyGg5fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0Q3wA//SGsG25NQXdDvHYwzHmmxFvqYv/FhJAx/2+d14I8rmTU/RffILErbUQWZ 4XTWsi7fMicz5Xbs1mViWhXdhjuHbSXc463zoy6ZH5KGkxdnw/oAAwN3DW+GaD1I rUStdDcmVtjOYTwK1OZp1t5eBi19CvNoGolKTRdQyePOMi+Q/zjzMOwEq3XnD1r0 84Ju+xPs7cYWV4va7A+jTPrLoYo4ihG1Do2xDy7n+yYbNhsGszVGsNKVXkHT+8C0 zk2NnAuTv/+De3kbLLiZgaYX5/jhT/qw3f7y3o4OOspBFEebmQxFuug/jdsnQsW3 PPY9+G7gIB5b1jh3zVLgOAgeh3K7G70TMqjrw1bOyNPmckop/FukpCbjvQcRdkEx bMLiJCX6Q8Zrd2wAfCcgzRRY1LOJ9kTlV59y4wNsjfx8KLTuzIO/7hPvEUodMqev xsGVomNXN0Lst1uWLue4qIZeLLLXtNYNfIP5hZ4jm3d5BEyaVns2PHZlDkXUZbUZ PJEMNa+QhQajIJ4WqtHraq2UPi9ud3NYk0eJHbBl1dATFML/yWeVXA9+qr4bhK4a doxQPttCqOWESYWB/RZWGSurfl1WnTA5gP0ezZIcjUpdcOuUQ3fd7Kkyw0Q/i6sm dWFD9EUBb8QF0Z6+BHamKOW7myjRYpTnVADD0RMD18+Vc22TTNI=
    =6/ko
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)