-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4861-1                   security@debian.org
https://www.debian.org/security/                     Salvatore Bonaccorso
February 21, 2021                     https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : screen
CVE ID         : CVE-2021-26937
Debian Bug     : 982435

Felix Weinmann reported a flaw in the handling of combining characters
in screen, a terminal multiplexer with VT100/ANSI terminal emulation,
which can result in denial of service, or potentially the execution of
arbitrary code via a specially crafted UTF-8 character sequence.

For the stable distribution (buster), this problem has been fixed in
version 4.6.2-3+deb10u1.

We recommend that you upgrade your screen packages.

For the detailed security status of screen please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/screen

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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=6/ko
-----END PGP SIGNATURE-----