Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Mageia 8: MGASA-2022-0051 Moderate: xterm Buffer Overflow

mageia
Calendar Grey February 5, 2022
Dist Mageia Esm H88
Updated xterm packages for Mageia address buffer overflow vulnerability with CVE-2022-24130.
xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text

Summary

xterm through Patch 370, when Sixel support is enabled, allows attackersto trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text. (CVE-2022-24130)

References

- https://bugs.mageia.org/show_bug.cgi?id=29975

- https://www.openwall.com/lists/oss-security/2022/01/31/1

- https://www.cve.org/CVERecord?id=CVE-2022-24130

Topics%20covered

Topics Covered

security advisory security issue buffer overflow software update xterm Mageia

Resolution

SRPMS

- 8/core/xterm-363-1.2.mga8

Publication date: 05 Feb 2022
URL: https://advisories.mageia.org/MGASA-2022-0051.html
Type: security
CVE: CVE-2022-24130

Topics%20covered

Topics Covered

security advisory security issue buffer overflow software update xterm Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here