(RHSA-2009:0018) Important: xterm security update

2009-01-0700:00:00

access.redhat.com

0.012 Low

EPSS

Percentile

85.1%

JSON

The xterm program is a terminal emulator for the X Window System.

A flaw was found in the xterm handling of Device Control Request Status
String (DECRQSS) escape sequences. An attacker could create a malicious
text file (or log entry, if unfiltered) that could run arbitrary commands
if read by a victim inside an xterm window. (CVE-2008-2383)

All xterm users are advised to upgrade to the updated package, which
contains a backported patch to resolve this issue. All running instances of
xterm must be restarted for the update to take effect.

OSVersionArchitecturePackageVersionFilename
RedHat5srcxterm< 215-5.el5_2.2xterm-215-5.el5_2.2.src.rpm
RedHat4i386xterm< 192-8.el4_7.2xterm-192-8.el4_7.2.i386.rpm
RedHat5ia64xterm< 215-5.el5_2.2xterm-215-5.el5_2.2.ia64.rpm
RedHat4x86_64xterm< 192-8.el4_7.2xterm-192-8.el4_7.2.x86_64.rpm
RedHat4s390xxterm< 192-8.el4_7.2xterm-192-8.el4_7.2.s390x.rpm
RedHat4ia64xterm< 192-8.el4_7.2xterm-192-8.el4_7.2.ia64.rpm
RedHat4ppcxterm< 192-8.el4_7.2xterm-192-8.el4_7.2.ppc.rpm
RedHat5s390xxterm< 215-5.el5_2.2xterm-215-5.el5_2.2.s390x.rpm
RedHat5ppcxterm< 215-5.el5_2.2xterm-215-5.el5_2.2.ppc.rpm
RedHat4s390xterm< 192-8.el4_7.2xterm-192-8.el4_7.2.s390.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	5	src	xterm	< 215-5.el5_2.2	xterm-215-5.el5_2.2.src.rpm
RedHat	4	i386	xterm	< 192-8.el4_7.2	xterm-192-8.el4_7.2.i386.rpm
RedHat	5	ia64	xterm	< 215-5.el5_2.2	xterm-215-5.el5_2.2.ia64.rpm
RedHat	4	x86_64	xterm	< 192-8.el4_7.2	xterm-192-8.el4_7.2.x86_64.rpm
RedHat	4	s390x	xterm	< 192-8.el4_7.2	xterm-192-8.el4_7.2.s390x.rpm
RedHat	4	ia64	xterm	< 192-8.el4_7.2	xterm-192-8.el4_7.2.ia64.rpm
RedHat	4	ppc	xterm	< 192-8.el4_7.2	xterm-192-8.el4_7.2.ppc.rpm
RedHat	5	s390x	xterm	< 215-5.el5_2.2	xterm-215-5.el5_2.2.s390x.rpm
RedHat	5	ppc	xterm	< 215-5.el5_2.2	xterm-215-5.el5_2.2.ppc.rpm
RedHat	4	s390	xterm	< 192-8.el4_7.2	xterm-192-8.el4_7.2.s390.rpm