[ GLSA 202208-22 ] xterm: Multiple Vulnerabilities

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory                           GLSA 202208-22
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
                                           https://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

 Severity: Low
    Title: xterm: Multiple Vulnerabilities
     Date: August 14, 2022
     Bugs: #769839, #832409
       ID: 202208-22

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
========

Multiple vulnerabilities have been discovered in xterm, the worst of
which could result in denial of service.

Background
==========

xterm is a terminal emulator for the X Window system.

Affected packages
=================

    -------------------------------------------------------------------
     Package              /     Vulnerable     /            Unaffected
    -------------------------------------------------------------------
  1  x11-terms/xterm            < 371                          >= 371

Description
===========

Multiple vulnerabilities have been discovered in xterm. Please review
the CVE identifiers referenced below for details.

Impact
======

Please review the referenced CVE identifiers for details.

Workaround
==========

There is no known workaround at this time.

Resolution
==========

All xterm users should upgrade to the latest version:

  # emerge --sync
  # emerge --ask --oneshot --verbose ">=x11-terms/xterm-371"

References
==========

[ 1 ] CVE-2021-27135
      https://nvd.nist.gov/vuln/detail/CVE-2021-27135
[ 2 ] CVE-2022-24130
      https://nvd.nist.gov/vuln/detail/CVE-2022-24130

Availability
============

This GLSA and any updates to it are available for viewing at
the Gentoo Security Website:

 https://security.gentoo.org/glsa/202208-22

Concerns?
=========

Security is a primary focus of Gentoo Linux and ensuring the
confidentiality and security of our users' machines is of utmost
importance to us. Any security concerns should be addressed to
[email protected] or alternatively, you may file a bug at
https://bugs.gentoo.org.

License
=======

Copyright 2022 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).

The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.

https://creativecommons.org/licenses/by-sa/2.5

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEpqTA6ABLMxh/aChGFMQkOaVy+9kFAmL4PWIACgkQFMQkOaVy
+9lythAArktSeiGOdVRbufK5ATcAMDDBm5vQfI4SNuFfCDecXNly8fG0O7F2KkGj
knW/1iiZbQWMKnsc6ajyaKJz+c8dptXahRLCliOp/DGfG8eJ3Q2iTBP2n+yRlpp3
HgVcGFXDdz+4J4mfrQ6/1FWyAE3yIpsPJR66i7dGULWsq4kwvMewnY1SPa+Uc6mz
F8J+ezwBRalTBTZai7DL78xFh/8cuwB0whqIAqJnhKJ9RuY9dLpcVGbrPFHYk1Hn
UT4F9ht115pjJkc38dfSojoyazxvao1DI7zJ2gJE/rTT5mOrKNmj1FCCCshd4uqx
lN6s5I1Xs5E8zS6a26syF54N0S1v/lyoBjrH43L3W6XsV9wlw0vXi5JndfeR7seg
8hrz8Zup4afLB3gWmBwTNmv+alyNB2lRHzRIBGaso+YLUkzFZnV8voIolQLB2KTV
U8RFSmlowoXTpsNvSzAqBUWozDGi4wxfmXa4gjSt5+ST6dE3XP2xFe05OqXOt+y+
qZv3zqJze62idO03YiLrmMPAFSeCU1lIHeO95XzPq0qdMD0r3s/ZsrguqaPCai1X
SLhx6JphyfB6knAcY00qtRLbYXPzcLcvn2Hf6nOkNZsb+++tfCK8Zh0O8ISTKEeZ
migTh1jS38lLTz/tjO+2bWtk0Rk+zBQq4bXYohyoRmhcUt968aM=
=xF1i
-----END PGP SIGNATURE-----