MGASA-2021-0358 - Updated rvxt-unicode, mxrvt, eterm packages fix security vulnerability Publication date: 20 Jul 2021 URL: https://advisories.mageia.org/MGASA-2021-0358.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-33477 rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q). A response is terminated by a newline (CVE-2021-33477). References: - https://bugs.mageia.org/show_bug.cgi?id=28939 - https://www.openwall.com/lists/oss-security/2021/05/17/1 - https://www.openwall.com/lists/oss-security/2021/05/17/2 - https://lists.fedoraproject.org/archives/list/[email protected]/thread/6RFMU5YXXNYYVA7G2DAHRXXHO6JKVFUT/ - https://lists.fedoraproject.org/archives/list/[email protected]/thread/UXAKO6N6NKTR6Z6KVAPEXSZQMRU52SGA/ - https://www.debian.org/lts/security/2021/dla-2681 - https://www.debian.org/lts/security/2021/dla-2682 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33477 SRPMS: - 8/core/rxvt-unicode-9.26-1.mga8 - 8/core/mrxvt-0.5.4-15.1.mga8 - 8/core/eterm-0.9.7-3.1.mga8
Mageia 2021-0358: rvxt-unicode, mxrvt, eterm security update
rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q)
Summary
CVE: CVE-2021-33477
rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially
remote) code execution because of improper handling of certain escape sequences
(ESC G Q). A response is terminated by a newline (CVE-2021-33477).
Resolution
MGASA-2021-0358 - Updated rvxt-unicode, mxrvt, eterm packages fix security vulnerability
References
- https://bugs.mageia.org/show_bug.cgi?id=28939
- https://www.openwall.com/lists/oss-security/2021/05/17/1
- https://www.openwall.com/lists/oss-security/2021/05/17/2
- https://lists.fedoraproject.org/archives/list/[email protected]/thread/6RFMU5YXXNYYVA7G2DAHRXXHO6JKVFUT/
- https://lists.fedoraproject.org/archives/list/[email protected]/thread/UXAKO6N6NKTR6Z6KVAPEXSZQMRU52SGA/
- https://www.debian.org/lts/security/2021/dla-2681
- https://www.debian.org/lts/security/2021/dla-2682
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33477
Severity
Issued Date: 20 Jul 2021
URL: https://advisories.mageia.org/MGASA-2021-0358.html
Type: security
Affected Mageia releases: 8
News
HOWTOs
Features
Black Hat USA & DEFCON 2021 Coverage on LinuxSecurity: What You Need to Know
TLS Email Encryption Explained - How To Encrypt Email with TLS
Keeping Your System Secure is Easier than Ever with LinuxSecurity Customized Advisories!
The State of Vulnerability Management and Patching in The Enterprise Environment
Complete Guide to Installing Security Updates in Debian & Ubuntu
About Us
Powered By
