[OpenIndiana-discuss] screen: CVE-2021-26937

Andreas Wacknitz A.Wacknitz at gmx.de
Sat Feb 13 15:53:00 UTC 2021


Am 13.02.21 um 15:49 schrieb Bob Friesenhahn:
> On Sat, 13 Feb 2021, Aurélien Larcher wrote:
>
>> Hi,
>> make sure to update your screen package rather sooner than later.
>> The new package will land in the repository within an hour.
>
> Will there also be an 'xterm' update?  It is similarly impacted.
>
> Bob
I guess you mean
  * correct upper-limit for selection buffer, accounting for combining
characters (report/testcase by Tavis Ormandy).

from xterm-366 changelog. I have just merged a PR for the latest xterm
version. It should be available within an hour.

Andreas



More information about the openindiana-discuss mailing list