Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 3 enterprise_linux:3::as | xterm | 0:179-11.EL3 |
| Red Hat · RHEL 3 enterprise_linux:3::as | xterm-debuginfo | 0:179-11.EL3 |
| Red Hat · RHEL 3 enterprise_linux:3::desktop | xterm | 0:179-11.EL3 |
| Red Hat · RHEL 3 enterprise_linux:3::desktop | xterm-debuginfo | 0:179-11.EL3 |
| Red Hat · RHEL 3 enterprise_linux:3::es | xterm | 0:179-11.EL3 |
| Red Hat · RHEL 3 enterprise_linux:3::es | xterm-debuginfo | 0:179-11.EL3 |
| Red Hat · RHEL 3 enterprise_linux:3::ws | xterm | 0:179-11.EL3 |
| Red Hat · RHEL 3 enterprise_linux:3::ws | xterm-debuginfo | 0:179-11.EL3 |
| Red Hat · RHEL 4 enterprise_linux:4::as | xterm | 0:192-8.el4_7.2 |
| Red Hat · RHEL 4 enterprise_linux:4::as | xterm-debuginfo | 0:192-8.el4_7.2 |
| Red Hat · RHEL 4 enterprise_linux:4::desktop | xterm | 0:192-8.el4_7.2 |
| Red Hat · RHEL 4 enterprise_linux:4::desktop | xterm-debuginfo | 0:192-8.el4_7.2 |
| Red Hat · RHEL 4 enterprise_linux:4::es | xterm | 0:192-8.el4_7.2 |
| Red Hat · RHEL 4 enterprise_linux:4::es | xterm-debuginfo | 0:192-8.el4_7.2 |
| Red Hat · RHEL 4 enterprise_linux:4::ws | xterm | 0:192-8.el4_7.2 |
| Red Hat · RHEL 4 enterprise_linux:4::ws | xterm-debuginfo | 0:192-8.el4_7.2 |
| Red Hat · RHEL 5 enterprise_linux:5::client | xterm | 0:215-5.el5_2.2 |
| Red Hat · RHEL 5 enterprise_linux:5::client | xterm-debuginfo | 0:215-5.el5_2.2 |
| Red Hat · RHEL 5 enterprise_linux:5::server | xterm | 0:215-5.el5_2.2 |
| Red Hat · RHEL 5 enterprise_linux:5::server | xterm-debuginfo | 0:215-5.el5_2.2 |
Vulnerabilities 1
-
Unscored —
CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) char…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=478888
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0018.json
-
report
https://access.redhat.com/security/cve/CVE-2008-2383
-
advisory
https://www.cve.org/CVERecord?id=CVE-2008-2383
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2008-2383