security advisorybuffer overflowdebian
xterm, an X terminal emulator, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text. . - ----------------------------------------------------------------------- Debian LTS Advisory DLA-2913-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/lts/security/ Utkarsh Gupta February 07, 2022 https://wiki.debian.org/LTS - ----------------------------------------------------------------------- Package : xterm Version : 327-2+deb9u2 CVE ID : CVE-2022-24130 Debian Bug : 1004689 xterm, an X terminal emulator, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text. For Debian 9 stretch, this problem has been fixed in version 327-2+deb9u2. We recommend that you upgrade your xterm packages. For the detailed security status of xterm please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/xterm Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Ubuntu Security Notice USN-5078-1 reveals a vulnerability in the OpenSSL library related to certificate key validation. Immediate action suggested for safeguarding.. xterm Security, Debian LTS, Buffer Overflow, Sixel Support, Linux Security. . LinuxSecurity.com Team
Feb 07, 2022
Debian LTS