Comment 8 for bug 1629587

I haven't heard anything from upstream beyond what I've already posted in this bug report.

The bug still reproduces on Ubuntu Zesty. It does, however, seem to have been fixed upstream (I just downloaded the latest upstream tarball from http://invisible-island.net/xterm/#download and can't reproduce the bug on it, and the bug is also marked as fixed in the changelog). xterm doesn't seem to have a repository, so cherry-picking the fix for the specific security issue might not be easily possible.