Bug#982435: screen: CVE-2021-26937

2021-02-10 Thread Tavis Ormandy
On Wed, Feb 10, 2021 at 05:51:50PM +0100, Axel Beckert wrote: > > It though doesn't crash an unpatched screen. > Hey Axel, I tried to reply to your screen-devel post, but it's taking a while to subscribe! Here is the message I sent: On 2021-02-10, Axel Beckert wrote: > + else if (i < sizeof c

Bug#813456: fixed in urlscan 0.9.5-1

2020-08-18 Thread Tavis Ormandy
>* Moving Canberra-gtk3 to recommends (Closes: #813456) Is this the real fix though, it seems like an entirely unrelated package? I think it's likely this was a copy-and-paste error, and should be removed entirely. Urlscan is written in python, so any gtk+ related imports would be immediately