SUSE-SU-2023:4438-1

Опубликовано: 14 нояб. 2023

Источник: suse-cvrf

Описание

Security update for xterm

This update for xterm fixes the following issues:

CVE-2023-40359: Fixed reporting characterset names in ReGiS graphics mode. (bsc#1214282)

Список пакетов

Image SLES15-SP2-SAP-Azure

xterm-bin-330-150200.11.12.1

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production

xterm-bin-330-150200.11.12.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production

xterm-bin-330-150200.11.12.1

Image SLES15-SP2-SAP-BYOS-Azure

xterm-bin-330-150200.11.12.1

Image SLES15-SP2-SAP-BYOS-EC2-HVM

xterm-bin-330-150200.11.12.1

Image SLES15-SP2-SAP-BYOS-GCE

xterm-bin-330-150200.11.12.1

Image SLES15-SP2-SAP-EC2-HVM

xterm-bin-330-150200.11.12.1

Image SLES15-SP2-SAP-GCE

xterm-bin-330-150200.11.12.1

Image SLES15-SP3-SAP-Azure-LI-BYOS-Production

xterm-bin-330-150200.11.12.1

Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production

xterm-bin-330-150200.11.12.1

Image SLES15-SP3-SAP-BYOS-Azure

xterm-bin-330-150200.11.12.1

Image SLES15-SP3-SAP-BYOS-EC2-HVM

xterm-bin-330-150200.11.12.1

Image SLES15-SP3-SAP-BYOS-GCE

xterm-bin-330-150200.11.12.1

Image SLES15-SP3-SAPCAL-Azure

xterm-bin-330-150200.11.12.1

Image SLES15-SP3-SAPCAL-EC2-HVM

xterm-bin-330-150200.11.12.1

Image SLES15-SP3-SAPCAL-GCE

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAP

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAP-Azure

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAP-BYOS

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAP-BYOS-Azure

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAP-BYOS-EC2

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAP-BYOS-GCE

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAP-EC2

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAP-GCE

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAP-Hardened

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAP-Hardened-Azure

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAP-Hardened-BYOS

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAP-Hardened-GCE

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAPCAL

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAPCAL-Azure

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAPCAL-EC2

xterm-bin-330-150200.11.12.1

Image SLES15-SP4-SAPCAL-GCE

xterm-bin-330-150200.11.12.1

Image SLES15-SP5-SAP-Azure-3P

xterm-bin-330-150200.11.12.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

xterm-bin-330-150200.11.12.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

xterm-bin-330-150200.11.12.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

xterm-bin-330-150200.11.12.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

xterm-bin-330-150200.11.12.1

Image SLES15-SP5-SAP-BYOS-Azure

xterm-bin-330-150200.11.12.1

Image SLES15-SP5-SAP-BYOS-EC2

xterm-bin-330-150200.11.12.1

Image SLES15-SP5-SAP-BYOS-GCE

xterm-bin-330-150200.11.12.1

Image SLES15-SP5-SAP-Hardened-Azure

xterm-bin-330-150200.11.12.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

xterm-bin-330-150200.11.12.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

xterm-bin-330-150200.11.12.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

xterm-bin-330-150200.11.12.1

Image SLES15-SP5-SAP-Hardened-GCE

xterm-bin-330-150200.11.12.1

Image SLES15-SP5-SAPCAL-Azure

xterm-bin-330-150200.11.12.1

Image SLES15-SP5-SAPCAL-EC2

xterm-bin-330-150200.11.12.1

Image SLES15-SP5-SAPCAL-GCE

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAP

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAP-Azure

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAP-BYOS

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAP-BYOS-Azure

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAP-BYOS-EC2

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAP-BYOS-GCE

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAP-EC2

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAP-GCE

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAP-Hardened

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAP-Hardened-Azure

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAP-Hardened-BYOS

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAP-Hardened-EC2

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAP-Hardened-GCE

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAPCAL

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAPCAL-Azure

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAPCAL-EC2

xterm-bin-330-150200.11.12.1

Image SLES15-SP6-SAPCAL-GCE

xterm-bin-330-150200.11.12.1

SUSE Linux Enterprise Module for Basesystem 15 SP4

xterm-330-150200.11.12.1

xterm-bin-330-150200.11.12.1

SUSE Linux Enterprise Module for Basesystem 15 SP5

xterm-330-150200.11.12.1

xterm-bin-330-150200.11.12.1

SUSE Manager Proxy 4.2

xterm-330-150200.11.12.1

xterm-bin-330-150200.11.12.1

SUSE Manager Server 4.2

xterm-330-150200.11.12.1

xterm-bin-330-150200.11.12.1

openSUSE Leap 15.4

xterm-330-150200.11.12.1

xterm-bin-330-150200.11.12.1

openSUSE Leap 15.5

xterm-330-150200.11.12.1

xterm-bin-330-150200.11.12.1

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20234438-1/
Link for SUSE-SU-2023:4438-1
https://lists.suse.com/pipermail/sle-security-updates/2023-November/017031.html
E-Mail link for SUSE-SU-2023:4438-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1214282
SUSE Bug 1214282
https://www.suse.com/security/cve/CVE-2023-40359/
SUSE CVE CVE-2023-40359 page

Описание

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.

Затронутые продукты

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:xterm-bin-330-150200.11.12.1

Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:xterm-bin-330-150200.11.12.1

Image SLES15-SP2-SAP-Azure:xterm-bin-330-150200.11.12.1

Image SLES15-SP2-SAP-BYOS-Azure:xterm-bin-330-150200.11.12.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-40359.html
CVE-2023-40359
https://bugzilla.suse.com/1214282
SUSE Bug 1214282