diff -Nru eterm-0.9.6/debian/changelog eterm-0.9.6/debian/changelog
--- eterm-0.9.6/debian/changelog	2018-10-22 20:42:27.000000000 +0530
+++ eterm-0.9.6/debian/changelog	2021-06-11 01:11:10.000000000 +0530
@@ -1,3 +1,11 @@
+eterm (0.9.6-6.1) unstable; urgency=high
+
+  * Non-maintainer upload.
+  * Add patch from rxvt-unicode to fix CVE-2021-33477.
+    (Closes: #989041)
+
+ -- Utkarsh Gupta <utkarsh@debian.org>  Fri, 11 Jun 2021 01:11:10 +0530
+
 eterm (0.9.6-6) unstable; urgency=low
 
   * New maintainer. Closes: #620507.
diff -Nru eterm-0.9.6/debian/patches/CVE-2021-33477.patch eterm-0.9.6/debian/patches/CVE-2021-33477.patch
--- eterm-0.9.6/debian/patches/CVE-2021-33477.patch	1970-01-01 05:30:00.000000000 +0530
+++ eterm-0.9.6/debian/patches/CVE-2021-33477.patch	2021-06-11 01:10:48.000000000 +0530
@@ -0,0 +1,25 @@
+Description:Add patch from rxvt-unicode to fix CVE-2021-33477.
+Author: Utkarsh Gupta <utkarsh@debian.org>
+
+--- a/src/term.c
++++ b/src/term.c
+@@ -1176,6 +1176,11 @@
+         case 'E':
+             scr_add_lines((unsigned char *) "\n\r", 1, 2);
+             break;
++/*
++ disabled because embedded newlines can make exploits easier
++ https://github.com/exg/rxvt-unicode/commit/2e7149935839bb7aa69b5bfe9558ba449e4db363
++ */
++#if 0
+         case 'G':
+             if ((ch = cmd_getc()) == 'Q') {     /* query graphics */
+                 tt_printf((unsigned char *) "\033G0\n");        /* no graphics */
+@@ -1185,6 +1190,7 @@
+                 } while (ch != ':');
+             }
+             break;
++#endif
+         case 'H':
+             scr_set_tab(1);
+             break;
diff -Nru eterm-0.9.6/debian/patches/series eterm-0.9.6/debian/patches/series
--- eterm-0.9.6/debian/patches/series	2017-01-29 22:30:00.000000000 +0530
+++ eterm-0.9.6/debian/patches/series	2021-06-11 01:09:13.000000000 +0530
@@ -4,3 +4,4 @@
 typos-in-eterm-reference-html.patch
 run-shell-correctly.patch
 fix-esetroot-on-pseudocolor.patch
+CVE-2021-33477.patch