SUSE-SU-2023:0221-1

Опубликовано: 01 фев. 2023

Источник: suse-cvrf

Описание

Security update for xterm

This update for xterm fixes the following issues:

CVE-2022-45063: Fixed an arbitrary code execution issue under configurations using vi and zsh (bsc#1205305).

Список пакетов

Image SLES15-SP2-SAP-Azure

xterm-bin-330-150200.11.9.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

xterm-bin-330-150200.11.9.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

xterm-bin-330-150200.11.9.1

Image SLES15-SP2-SAP-BYOS-Azure

xterm-bin-330-150200.11.9.1

Image SLES15-SP2-SAP-BYOS-EC2-HVM

xterm-bin-330-150200.11.9.1

Image SLES15-SP2-SAP-BYOS-GCE

xterm-bin-330-150200.11.9.1

Image SLES15-SP2-SAP-EC2-HVM

xterm-bin-330-150200.11.9.1

Image SLES15-SP2-SAP-GCE

xterm-bin-330-150200.11.9.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

xterm-bin-330-150200.11.9.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

xterm-bin-330-150200.11.9.1

Image SLES15-SP3-SAP-BYOS-Azure

xterm-bin-330-150200.11.9.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

xterm-bin-330-150200.11.9.1

Image SLES15-SP3-SAP-BYOS-GCE

xterm-bin-330-150200.11.9.1

Image SLES15-SP3-SAPCAL-Azure

xterm-bin-330-150200.11.9.1

Image SLES15-SP3-SAPCAL-EC2-HVM

xterm-bin-330-150200.11.9.1

Image SLES15-SP3-SAPCAL-GCE

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAP

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAP-Azure

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAP-BYOS

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAP-BYOS-Azure

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAP-BYOS-EC2

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAP-BYOS-GCE

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAP-EC2

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAP-GCE

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAP-Hardened

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAP-Hardened-Azure

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAP-Hardened-BYOS

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAP-Hardened-EC2

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAP-Hardened-GCE

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAPCAL

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAPCAL-Azure

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAPCAL-EC2

xterm-bin-330-150200.11.9.1

Image SLES15-SP4-SAPCAL-GCE

xterm-bin-330-150200.11.9.1

Image SLES15-SP5-SAP-Azure

xterm-bin-330-150200.11.9.1

Image SLES15-SP5-SAP-Azure-3P

xterm-bin-330-150200.11.9.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

xterm-bin-330-150200.11.9.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

xterm-bin-330-150200.11.9.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

xterm-bin-330-150200.11.9.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

xterm-bin-330-150200.11.9.1

Image SLES15-SP5-SAP-BYOS-Azure

xterm-bin-330-150200.11.9.1

Image SLES15-SP5-SAP-BYOS-EC2

xterm-bin-330-150200.11.9.1

Image SLES15-SP5-SAP-BYOS-GCE

xterm-bin-330-150200.11.9.1

Image SLES15-SP5-SAP-EC2

xterm-bin-330-150200.11.9.1

Image SLES15-SP5-SAP-GCE

xterm-bin-330-150200.11.9.1

Image SLES15-SP5-SAP-Hardened-Azure

xterm-bin-330-150200.11.9.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

xterm-bin-330-150200.11.9.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

xterm-bin-330-150200.11.9.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

xterm-bin-330-150200.11.9.1

Image SLES15-SP5-SAP-Hardened-EC2

xterm-bin-330-150200.11.9.1

Image SLES15-SP5-SAP-Hardened-GCE

xterm-bin-330-150200.11.9.1

Image SLES15-SP5-SAPCAL-Azure

xterm-bin-330-150200.11.9.1

Image SLES15-SP5-SAPCAL-EC2

xterm-bin-330-150200.11.9.1

Image SLES15-SP5-SAPCAL-GCE

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAP

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAP-Azure

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAP-BYOS

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAP-BYOS-Azure

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAP-BYOS-EC2

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAP-BYOS-GCE

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAP-EC2

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAP-GCE

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAP-Hardened

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAP-Hardened-Azure

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAP-Hardened-BYOS

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAP-Hardened-EC2

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAP-Hardened-GCE

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAPCAL

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAPCAL-Azure

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAPCAL-EC2

xterm-bin-330-150200.11.9.1

Image SLES15-SP6-SAPCAL-GCE

xterm-bin-330-150200.11.9.1

SUSE Enterprise Storage 7

xterm-330-150200.11.9.1

xterm-bin-330-150200.11.9.1

SUSE Enterprise Storage 7.1

xterm-330-150200.11.9.1

xterm-bin-330-150200.11.9.1

SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

xterm-330-150200.11.9.1

xterm-bin-330-150200.11.9.1

SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS

xterm-330-150200.11.9.1

xterm-bin-330-150200.11.9.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

xterm-330-150200.11.9.1

xterm-bin-330-150200.11.9.1

SUSE Linux Enterprise Module for Basesystem 15 SP4

xterm-330-150200.11.9.1

xterm-bin-330-150200.11.9.1

SUSE Linux Enterprise Real Time 15 SP3

xterm-330-150200.11.9.1

xterm-bin-330-150200.11.9.1

SUSE Linux Enterprise Server 15 SP2-LTSS

xterm-330-150200.11.9.1

xterm-bin-330-150200.11.9.1

SUSE Linux Enterprise Server 15 SP3-LTSS

xterm-330-150200.11.9.1

xterm-bin-330-150200.11.9.1

SUSE Linux Enterprise Server for SAP Applications 15 SP2

xterm-330-150200.11.9.1

xterm-bin-330-150200.11.9.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

xterm-330-150200.11.9.1

xterm-bin-330-150200.11.9.1

SUSE Manager Proxy 4.2

xterm-330-150200.11.9.1

xterm-bin-330-150200.11.9.1

SUSE Manager Retail Branch Server 4.2

xterm-330-150200.11.9.1

xterm-bin-330-150200.11.9.1

SUSE Manager Server 4.2

xterm-330-150200.11.9.1

xterm-bin-330-150200.11.9.1

openSUSE Leap 15.4

xterm-330-150200.11.9.1

xterm-bin-330-150200.11.9.1

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20230221-1/
Link for SUSE-SU-2023:0221-1
https://lists.suse.com/pipermail/sle-security-updates/2023-February/013613.html
E-Mail link for SUSE-SU-2023:0221-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1205305
SUSE Bug 1205305
https://www.suse.com/security/cve/CVE-2022-45063/
SUSE CVE CVE-2022-45063 page

Описание

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions.

Затронутые продукты

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:xterm-bin-330-150200.11.9.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:xterm-bin-330-150200.11.9.1

Image SLES15-SP2-SAP-Azure:xterm-bin-330-150200.11.9.1

Image SLES15-SP2-SAP-BYOS-Azure:xterm-bin-330-150200.11.9.1

Ссылки

https://www.suse.com/security/cve/CVE-2022-45063.html
CVE-2022-45063
https://bugzilla.suse.com/1205305
SUSE Bug 1205305
https://bugzilla.suse.com/1211577
SUSE Bug 1211577