Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

openSUSE: 2023:4438-1 Low: xterm Reporting Fix CVE-2023-40359

opensuse
Calendar Grey November 14, 2023
Scroller Opensuse
A patch for xterm addresses CVE-2023-40359, which affects character naming within graphics operation mode. openSUSE users must take action.
This update for xterm fixes the following issues: CVE-2023-40359: Fixed reporting characterset names in ReGiS graphics mode

Description

This update for xterm fixes the following issues:

* CVE-2023-40359: Fixed reporting characterset names in ReGiS graphics mode.

(bsc#1214282)

Topics%20covered

Topics Covered

security advisory low severity openSUSE xterm patch graphics mode issue

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.4

zypper in -t patch openSUSE-SLE-15.4-2023-4438=1

* openSUSE Leap 15.5

zypper in -t patch openSUSE-SLE-15.5-2023-4438=1

* Basesystem Module 15-SP4

zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP4-2023-4438=1

* Basesystem Module 15-SP5

zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP5-2023-4438=1

* SUSE Manager Proxy 4.2

zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4438=1

* SUSE Manager Retail Branch Server 4.2

zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-

Server-4.2-2023-4438=1

* SUSE Manager Server 4.2

zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4438=1

Package List

* openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64)

* xterm-bin-330-150200.11.12.1

* xterm-debugsource-330-150200.11.12.1

* xterm-bin-debuginfo-330-150200.11.12.1

* xterm-330-150200.11.12.1

* openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64)

* xterm-bin-330-150200.11.12.1

* xterm-debugsource-330-150200.11.12.1

* xterm-bin-debuginfo-330-150200.11.12.1

* xterm-330-150200.11.12.1

* Basesystem Module 15-SP4 (aarch64 ppc64le s390x x86_64)

* xterm-bin-330-150200.11.12.1

* xterm-debugsource-330-150200.11.12.1

* xterm-bin-debuginfo-330-150200.11.12.1

* xterm-330-150200.11.12.1

* Basesystem Module 15-SP5 (aarch64 ppc64le s390x x86_64)

* xterm-bin-330-150200.11.12.1

* xterm-debugsource-330-150200.11.12.1

* xterm-bin-debuginfo-330-150200.11.12.1

* xterm-330-150200.11.12.1

* SUSE Manager Proxy 4.2 (x86_64)

* xterm-bin-330-150200.11.12.1

* xterm-debugsource-330-150200.11.12.1

* xterm-bin-debuginfo-330-150200.11.12.1

* xterm-330-150200.11.12.1

* SUSE Manager Retail Branch Server 4.2 (x86_64)

* xterm-bin-330-150200.11.12.1

*...

Read the Full Advisory

References

* bsc#1214282

## References:

* https://www.suse.com/security/cve/CVE-2023-40359.html

* https://bugzilla.suse.com/show_bug.cgi?id=1214282

Severity
low
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2023:4438-1
Rating: low

Topics%20covered

Topics Covered

security advisory low severity openSUSE xterm patch graphics mode issue

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.