Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:0173-1

Опубликовано: 26 янв. 2023
Источник: suse-cvrf

Описание

Security update for xterm

This update for xterm fixes the following issues:

  • CVE-2022-45063: Fixed an arbitrary code execution issue under configurations using vi and zsh (bsc#1205305).

Список пакетов

Image SLES15-SP1-SAP-Azure-LI-BYOS-Production
xterm-bin-330-150000.4.6.1
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production
xterm-bin-330-150000.4.6.1
SUSE Enterprise Storage 6
xterm-330-150000.4.6.1
xterm-bin-330-150000.4.6.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS
xterm-330-150000.4.6.1
xterm-bin-330-150000.4.6.1
SUSE Linux Enterprise Server 15 SP1-LTSS
xterm-330-150000.4.6.1
xterm-bin-330-150000.4.6.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
xterm-330-150000.4.6.1
xterm-bin-330-150000.4.6.1

Ссылки

Описание

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.

Затронутые продукты
Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:xterm-bin-330-150000.4.6.1
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:xterm-bin-330-150000.4.6.1
SUSE Enterprise Storage 6:xterm-330-150000.4.6.1
SUSE Enterprise Storage 6:xterm-bin-330-150000.4.6.1
Ссылки
Уязвимость SUSE-SU-2023:0173-1