Ubuntu 20.10 and 20.04: USN-4618-1 Moderate: tmux Code Execution Risk

ubuntu

November 5, 2020

tmux could be made to crash or execute arbitrary code if it received a specially crafted input.

Summary

tmux could be made to crash or execute arbitrary code if it received

a specially crafted input.

Software Description:

- tmux: terminal multiplexer

Details:

Sergey Nizovtsev discovered that tmux incorrectly handled some inputs.

An attacker could possibly use this issue to cause a crash or execute arbitrary code.

Topics Covered

security advisory code execution Ubuntu input handling crash tmux

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.10:
  tmux                            3.1b-1ubuntu0.1

Ubuntu 20.04 LTS:
  tmux                            3.0a-2ubuntu0.2

After a standard system update you need to restart tmux session to make
all the necessary changes.