Re: Bug#982435: screen: CVE-2021-26937

To: Debian LTS <debian-lts@lists.debian.org>, Debian Security Team <team@security.debian.org>
Cc: Axel Beckert <abe@debian.org>, 982435@bugs.debian.org
Subject: Re: Bug#982435: screen: CVE-2021-26937
From: Utkarsh Gupta <utkarsh@debian.org>
Date: Wed, 10 Feb 2021 21:31:42 +0530
Message-id: <[🔎] CAPP0f94ceZCi+x+m9S+=dQJ40e=yNvrvA4vjrNw-8t8N6AkyZA@mail.gmail.com>
In-reply-to: <[🔎] CAPP0f94nnecsxsgP23YJ+Q0eX1HZZR1dxebyA+-hR4udF_Jp-g@mail.gmail.com>
References: <161295101829.114405.943369103431646707.reportbug@eldamar.lan> <[🔎] 20210210114648.245gpysmhkve2kuy@sym.noone.org> <[🔎] CAPP0f94nnecsxsgP23YJ+Q0eX1HZZR1dxebyA+-hR4udF_Jp-g@mail.gmail.com>

Hello,

On Wed, Feb 10, 2021 at 6:56 PM Utkarsh Gupta <utkarsh@debian.org> wrote:
> I'll take care of fixing stretch and jessie and I am aware of all this
> since I was the one who got this CVE assigned! :D

Somewhat related, I also got CVE-2021-27135 assigned for xterm.
I'll take care of the updates when the patch is available.

But interestingly, while reproducing the issue in screen, you can also
easily reproduce this issue in xterm. See[1].

[1]: https://www.openwall.com/lists/oss-security/2021/02/09/7

- u

Reply to:

Follow-Ups:
- Re: Bug#982435: screen: CVE-2021-26937
  - From: Axel Beckert <abe@debian.org>

References:
- Re: Bug#982435: screen: CVE-2021-26937
  - From: Axel Beckert <abe@debian.org>
- Re: Bug#982435: screen: CVE-2021-26937
  - From: Utkarsh Gupta <utkarsh@debian.org>

Prev by Date: Re: Bug#982435: screen: CVE-2021-26937
Next by Date: Re: Bug#982435: screen: CVE-2021-26937
Previous by thread: Re: Bug#982435: screen: CVE-2021-26937
Next by thread: Re: Bug#982435: screen: CVE-2021-26937
Index(es):
- Date
- Thread