Security update for xterm SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:3953-1 Final 1 1 2022-11-11T10:41:37Z current 2022-11-11T10:41:37Z 2022-11-11T10:41:37Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for xterm This update for xterm fixes the following issues: - CVE-2022-24130: Fixed buffer overflow in set_sixel when Sixel support is enabled (bsc#1195387). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SP2-SAP-Azure-LI-BYOS-Production-2022-3953,Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production-2022-3953,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2022-3953,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2022-3953,Image SLES15-SP4-SAP-2022-3953,Image SLES15-SP4-SAP-Azure-2022-3953,Image SLES15-SP4-SAP-Azure-LI-BYOS-2022-3953,Image SLES15-SP4-SAP-Azure-LI-BYOS-Production-2022-3953,Image SLES15-SP4-SAP-Azure-VLI-BYOS-2022-3953,Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production-2022-3953,Image SLES15-SP4-SAP-BYOS-2022-3953,Image SLES15-SP4-SAP-BYOS-Azure-2022-3953,Image SLES15-SP4-SAP-BYOS-EC2-2022-3953,Image SLES15-SP4-SAP-BYOS-GCE-2022-3953,Image SLES15-SP4-SAP-EC2-2022-3953,Image SLES15-SP4-SAP-GCE-2022-3953,Image SLES15-SP4-SAP-Hardened-2022-3953,Image SLES15-SP4-SAP-Hardened-Azure-2022-3953,Image SLES15-SP4-SAP-Hardened-BYOS-2022-3953,Image SLES15-SP4-SAP-Hardened-BYOS-Azure-2022-3953,Image SLES15-SP4-SAP-Hardened-BYOS-EC2-2022-3953,Image SLES15-SP4-SAP-Hardened-BYOS-GCE-2022-3953,Image SLES15-SP4-SAP-Hardened-EC2-2022-3953,Image SLES15-SP4-SAP-Hardened-GCE-2022-3953,Image SLES15-SP4-SAPCAL-2022-3953,Image SLES15-SP4-SAPCAL-Azure-2022-3953,Image SLES15-SP4-SAPCAL-EC2-2022-3953,Image SLES15-SP4-SAPCAL-GCE-2022-3953,Image SLES15-SP5-SAP-Azure-2022-3953,Image SLES15-SP5-SAP-Azure-LI-BYOS-2022-3953,Image SLES15-SP5-SAP-Azure-LI-BYOS-Production-2022-3953,Image SLES15-SP5-SAP-Azure-VLI-BYOS-2022-3953,Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production-2022-3953,Image SLES15-SP5-SAP-BYOS-Azure-2022-3953,Image SLES15-SP5-SAP-BYOS-EC2-2022-3953,Image SLES15-SP5-SAP-BYOS-GCE-2022-3953,Image SLES15-SP5-SAP-EC2-2022-3953,Image SLES15-SP5-SAP-GCE-2022-3953,Image SLES15-SP5-SAP-Hardened-Azure-2022-3953,Image SLES15-SP5-SAP-Hardened-BYOS-Azure-2022-3953,Image SLES15-SP5-SAP-Hardened-BYOS-EC2-2022-3953,Image SLES15-SP5-SAP-Hardened-BYOS-GCE-2022-3953,Image SLES15-SP5-SAP-Hardened-EC2-2022-3953,Image SLES15-SP5-SAP-Hardened-GCE-2022-3953,Image SLES15-SP5-SAPCAL-Azure-2022-3953,Image SLES15-SP5-SAPCAL-EC2-2022-3953,Image SLES15-SP5-SAPCAL-GCE-2022-3953,SUSE-2022-3953,SUSE-SLE-Module-Basesystem-15-SP3-2022-3953,SUSE-SLE-Module-Basesystem-15-SP4-2022-3953,openSUSE-SLE-15.3-2022-3953,openSUSE-SLE-15.4-2022-3953 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20223953-1/ Link for SUSE-SU-2022:3953-1 https://lists.suse.com/pipermail/sle-security-updates/2022-November/012901.html E-Mail link for SUSE-SU-2022:3953-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1195387 SUSE Bug 1195387 https://www.suse.com/security/cve/CVE-2022-24130/ SUSE CVE CVE-2022-24130 page Image SLES15-SP2-SAP-Azure-LI-BYOS-Production Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production Image SLES15-SP4-SAP Image SLES15-SP4-SAP-Azure Image SLES15-SP4-SAP-Azure-LI-BYOS Image SLES15-SP4-SAP-Azure-LI-BYOS-Production Image SLES15-SP4-SAP-Azure-VLI-BYOS Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production Image SLES15-SP4-SAP-BYOS Image SLES15-SP4-SAP-BYOS-Azure Image SLES15-SP4-SAP-BYOS-EC2 Image SLES15-SP4-SAP-BYOS-GCE Image SLES15-SP4-SAP-EC2 Image SLES15-SP4-SAP-GCE Image SLES15-SP4-SAP-Hardened Image SLES15-SP4-SAP-Hardened-Azure Image SLES15-SP4-SAP-Hardened-BYOS Image SLES15-SP4-SAP-Hardened-BYOS-Azure Image SLES15-SP4-SAP-Hardened-BYOS-EC2 Image SLES15-SP4-SAP-Hardened-BYOS-GCE Image SLES15-SP4-SAP-Hardened-EC2 Image SLES15-SP4-SAP-Hardened-GCE Image SLES15-SP4-SAPCAL Image SLES15-SP4-SAPCAL-Azure Image SLES15-SP4-SAPCAL-EC2 Image SLES15-SP4-SAPCAL-GCE Image SLES15-SP5-SAP-Azure Image SLES15-SP5-SAP-Azure-LI-BYOS Image SLES15-SP5-SAP-Azure-LI-BYOS-Production Image SLES15-SP5-SAP-Azure-VLI-BYOS Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production Image SLES15-SP5-SAP-BYOS-Azure Image SLES15-SP5-SAP-BYOS-EC2 Image SLES15-SP5-SAP-BYOS-GCE Image SLES15-SP5-SAP-EC2 Image SLES15-SP5-SAP-GCE Image SLES15-SP5-SAP-Hardened-Azure Image SLES15-SP5-SAP-Hardened-BYOS-Azure Image SLES15-SP5-SAP-Hardened-BYOS-EC2 Image SLES15-SP5-SAP-Hardened-BYOS-GCE Image SLES15-SP5-SAP-Hardened-EC2 Image SLES15-SP5-SAP-Hardened-GCE Image SLES15-SP5-SAPCAL-Azure Image SLES15-SP5-SAPCAL-EC2 Image SLES15-SP5-SAPCAL-GCE SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 openSUSE Leap 15.3 openSUSE Leap 15.4 xterm-bin-330-150200.11.6.1 xterm-330-150200.11.6.1 xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAP xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAP-Azure xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAP-Azure-LI-BYOS-Production xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAP-BYOS xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAP-BYOS-Azure xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAP-BYOS-EC2 xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAP-BYOS-GCE xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAP-EC2 xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAP-GCE xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAP-Hardened xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAP-Hardened-Azure xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-Azure xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-EC2 xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-GCE xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAP-Hardened-EC2 xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAP-Hardened-GCE xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAPCAL xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAPCAL-Azure xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAPCAL-EC2 xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP4-SAPCAL-GCE xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP5-SAP-Azure xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS-Production xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP5-SAP-BYOS-Azure xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP5-SAP-BYOS-EC2 xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP5-SAP-BYOS-GCE xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP5-SAP-EC2 xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP5-SAP-GCE xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP5-SAP-Hardened-Azure xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-Azure xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-EC2 xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-GCE xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP5-SAP-Hardened-EC2 xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP5-SAP-Hardened-GCE xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP5-SAPCAL-Azure xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP5-SAPCAL-EC2 xterm-bin-330-150200.11.6.1 as a component of Image SLES15-SP5-SAPCAL-GCE xterm-330-150200.11.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 xterm-bin-330-150200.11.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 xterm-330-150200.11.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 xterm-bin-330-150200.11.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 xterm-330-150200.11.6.1 as a component of openSUSE Leap 15.3 xterm-bin-330-150200.11.6.1 as a component of openSUSE Leap 15.3 xterm-330-150200.11.6.1 as a component of openSUSE Leap 15.4 xterm-bin-330-150200.11.6.1 as a component of openSUSE Leap 15.4 xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text. CVE-2022-24130 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:xterm-bin-330-150200.11.6.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:xterm-bin-330-150200.11.6.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:xterm-bin-330-150200.11.6.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAP-Azure-LI-BYOS:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAP-Azure-VLI-BYOS:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAP-Azure:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAP-BYOS-Azure:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAP-BYOS-EC2:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAP-BYOS-GCE:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAP-BYOS:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAP-EC2:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAP-GCE:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAP-Hardened-Azure:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAP-Hardened-BYOS-Azure:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAP-Hardened-BYOS-GCE:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAP-Hardened-BYOS:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAP-Hardened-EC2:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAP-Hardened-GCE:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAP-Hardened:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAP:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAPCAL-Azure:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAPCAL-EC2:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAPCAL-GCE:xterm-bin-330-150200.11.6.1 Image SLES15-SP4-SAPCAL:xterm-bin-330-150200.11.6.1 Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:xterm-bin-330-150200.11.6.1 Image SLES15-SP5-SAP-Azure-LI-BYOS:xterm-bin-330-150200.11.6.1 Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:xterm-bin-330-150200.11.6.1 Image SLES15-SP5-SAP-Azure-VLI-BYOS:xterm-bin-330-150200.11.6.1 Image SLES15-SP5-SAP-Azure:xterm-bin-330-150200.11.6.1 Image SLES15-SP5-SAP-BYOS-Azure:xterm-bin-330-150200.11.6.1 Image SLES15-SP5-SAP-BYOS-EC2:xterm-bin-330-150200.11.6.1 Image SLES15-SP5-SAP-BYOS-GCE:xterm-bin-330-150200.11.6.1 Image SLES15-SP5-SAP-EC2:xterm-bin-330-150200.11.6.1 Image SLES15-SP5-SAP-GCE:xterm-bin-330-150200.11.6.1 Image SLES15-SP5-SAP-Hardened-Azure:xterm-bin-330-150200.11.6.1 Image SLES15-SP5-SAP-Hardened-BYOS-Azure:xterm-bin-330-150200.11.6.1 Image SLES15-SP5-SAP-Hardened-BYOS-EC2:xterm-bin-330-150200.11.6.1 Image SLES15-SP5-SAP-Hardened-BYOS-GCE:xterm-bin-330-150200.11.6.1 Image SLES15-SP5-SAP-Hardened-EC2:xterm-bin-330-150200.11.6.1 Image SLES15-SP5-SAP-Hardened-GCE:xterm-bin-330-150200.11.6.1 Image SLES15-SP5-SAPCAL-Azure:xterm-bin-330-150200.11.6.1 Image SLES15-SP5-SAPCAL-EC2:xterm-bin-330-150200.11.6.1 Image SLES15-SP5-SAPCAL-GCE:xterm-bin-330-150200.11.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:xterm-330-150200.11.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP3:xterm-bin-330-150200.11.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:xterm-330-150200.11.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP4:xterm-bin-330-150200.11.6.1 openSUSE Leap 15.3:xterm-330-150200.11.6.1 openSUSE Leap 15.3:xterm-bin-330-150200.11.6.1 openSUSE Leap 15.4:xterm-330-150200.11.6.1 openSUSE Leap 15.4:xterm-bin-330-150200.11.6.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223953-1/ https://www.suse.com/security/cve/CVE-2022-24130.html CVE-2022-24130 https://bugzilla.suse.com/1195387 SUSE Bug 1195387