Skip to content
OpenAdvisories
High SUSE-RU-2024:0184-1 1 CVE

Recommended update for tmux

Published Jan 23, 2024 · Updated May 2, 2025

Summary

This update for tmux fixes the following issues:

- tmux: Null pointer dereference in window.c (bsc#1207393) (CVE-2022-47016)
- add patch for compactibility with new ncurses fixes bsc#1210552
- disable utf8proc (following upstreams not use it by default on non-macOS)
- switch to screen-256color as default terminal to fix incompatibility
with yast2-ruby-testsuite
- update to 3.3a:
- build with utf8proc enabled
- refresh tmux-socket-path patch:
restore ability to overwrite socket path using $TMUX_TMPDIR (bsc#1185572)
- Drop pkgconfig(systemd) BuildRequires: there is no reason to pull
in systemd into the build.
- Use %tmpfiles_create instead of calling systemd-tmpfiles
directly.
- Replace systemd_requires with systemd_ordering: tmux is very well
capable to run without systemd (and by using tmpfiles_create, the
post script can also cope with the absence of if).

Fixed packages 2

ReleasePackageFixed in
openSUSE · Leap 15.5 tmux 3.3a-150300.3.6.1
SUSE · SLES 15 SP5 Linux Enterprise Module for Package Hub 15 SP5 tmux 3.3a-150300.3.6.1

Vulnerabilities 1

  • High 7.8
    CVE-2022-47016 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…

References

  • report
    https://bugzilla.suse.com/1185572
  • report
    https://bugzilla.suse.com/1207393
  • report
    https://bugzilla.suse.com/1210552
  • web
    https://www.suse.com/security/cve/CVE-2022-47016