package/screen: add security fix for CVE-2021-26937
authorPeter Korsgaard <peter@korsgaard.com>
Fri, 26 Feb 2021 23:22:55 +0000 (00:22 +0100)
committerYann E. MORIN <yann.morin.1998@free.fr>
Sat, 27 Feb 2021 08:05:56 +0000 (09:05 +0100)
commit6ca1a7c2773cc13f71e284d0b3b4b3b35101d1db
treefdb50426138d44e7a0effc50daaf0a3230e295be
parent42c80b515a9c3d2e9674cb8947c172a893df5896
package/screen: add security fix for CVE-2021-26937

encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a
denial of service (invalid write access and application crash) or possibly
have unspecified other impact via a crafted UTF-8 character sequence.

For more details, see the oss-security discussion:
https://www.openwall.com/lists/oss-security/2021/02/09/3

So far no fix has been added to upstream git, and a number of early proposed
fixes caused regressions, so pull the security fix from the screen 4.8.0-5
Debian package.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
package/screen/0008_CVE-2021-26937.patch [new file with mode: 0644]
package/screen/screen.mk