Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2021.0646
screen security update
22 February 2021
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: screen
Publisher: Debian
Operating System: Debian GNU/Linux
Impact/Access: Execute Arbitrary Code/Commands -- Remote/Unauthenticated
Denial of Service -- Remote/Unauthenticated
Resolution: Patch/Upgrade
CVE Names: CVE-2021-26937
Reference: ESB-2021.0593
Original Bulletin:
https://www.debian.org/lts/security/2021/dla-2570
- --------------------------BEGIN INCLUDED TEXT--------------------
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
- - -----------------------------------------------------------------------
Debian LTS Advisory DLA-2570-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Utkarsh Gupta
February 20, 2021 https://wiki.debian.org/LTS
- - -----------------------------------------------------------------------
Package : screen
Version : 4.5.0-6+deb9u1
CVE ID : CVE-2021-26937
Debian Bug : 982435
encoding.c in GNU Screen through 4.8.0 allows remote attackers
to cause a denial of service (invalid write access and application
crash) or possibly have unspecified other impact via a crafted
UTF-8 character sequence.
For Debian 9 stretch, this problem has been fixed in version
4.5.0-6+deb9u1.
We recommend that you upgrade your screen packages.
For the detailed security status of screen please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/screen
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
- -----BEGIN PGP SIGNATURE-----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=eoG4
- -----END PGP SIGNATURE-----
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
https://www.auscert.org.au/bulletins/
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967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=OM6I
-----END PGP SIGNATURE-----