Skip to content
OpenAdvisories
Unscored RHSA-2009:0018 1 CVE

Red Hat Security Advisory: xterm security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 3 enterprise_linux:3::as xterm 0:179-11.EL3
Red Hat · RHEL 3 enterprise_linux:3::as xterm-debuginfo 0:179-11.EL3
Red Hat · RHEL 3 enterprise_linux:3::desktop xterm 0:179-11.EL3
Red Hat · RHEL 3 enterprise_linux:3::desktop xterm-debuginfo 0:179-11.EL3
Red Hat · RHEL 3 enterprise_linux:3::es xterm 0:179-11.EL3
Red Hat · RHEL 3 enterprise_linux:3::es xterm-debuginfo 0:179-11.EL3
Red Hat · RHEL 3 enterprise_linux:3::ws xterm 0:179-11.EL3
Red Hat · RHEL 3 enterprise_linux:3::ws xterm-debuginfo 0:179-11.EL3
Red Hat · RHEL 4 enterprise_linux:4::as xterm 0:192-8.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::as xterm-debuginfo 0:192-8.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::desktop xterm 0:192-8.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::desktop xterm-debuginfo 0:192-8.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::es xterm 0:192-8.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::es xterm-debuginfo 0:192-8.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::ws xterm 0:192-8.el4_7.2
Red Hat · RHEL 4 enterprise_linux:4::ws xterm-debuginfo 0:192-8.el4_7.2
Red Hat · RHEL 5 enterprise_linux:5::client xterm 0:215-5.el5_2.2
Red Hat · RHEL 5 enterprise_linux:5::client xterm-debuginfo 0:215-5.el5_2.2
Red Hat · RHEL 5 enterprise_linux:5::server xterm 0:215-5.el5_2.2
Red Hat · RHEL 5 enterprise_linux:5::server xterm-debuginfo 0:215-5.el5_2.2

Vulnerabilities 1

  • Unscored —

    CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) char…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=478888
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0018.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-2383
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2383
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2383