Debian alert DLA-2558-1 (xterm)

From:
             
 
Utkarsh Gupta <utkarsh@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 2558-1] xterm security update
Date:
             
 
Sun, 14 Feb 2021 00:04:43 +0530
Message-ID:
             
 
 <CAPP0f970oXc_GEDO42m-iMuhOK8iPGhXgzYvo6rSQBinVxSF0w@mail.gmail.com>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

- -----------------------------------------------------------------------
Debian LTS Advisory DLA-2558-1              debian-lts@lists.debian.org
https://www.debian.org/lts/security/                      Utkarsh Gupta
February 14, 2021                           https://wiki.debian.org/LTS
- -----------------------------------------------------------------------

Package        : xterm
Version        : 327-2+deb9u1
CVE ID         : CVE-2021-27135
Debian Bug     : 982439

xterm through Patch #365 allows remote attackers to cause a
denial of service (segmentation fault) or possibly have
unspecified other impact via a crafted UTF-8 character sequence.

For Debian 9 stretch, this problem has been fixed in version
327-2+deb9u1.

We recommend that you upgrade your xterm packages.

For the detailed security status of xterm please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/xterm

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=iI1E
-----END PGP SIGNATURE-----