2023-10-28
ALT-BU-2023-6672-1
Branch c10f1 update bulletin.
Closed vulnerabilities
Published: 2023-08-14
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2023-40359
xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor underscore), aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature.
Severity: CRITICAL (9.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
Closed bugs
[FR] Put /usr/bin/resize into a separate subpackage