xterm-253-1.0.1.AXS4

エラータID: AXSA:2021-1537:02

Release date: 
Tuesday, March 2, 2021 - 04:22
Subject: 
xterm-253-1.0.1.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

The xterm program is a terminal emulator for the X Window System. It provides
DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use
the window system directly.

Security Fix(es):

* xterm: crash when processing combining characters (CVE-2021-27135)

CVE(s):
CVE-2021-27135

Solution: 

Update packages.

CVEs: 
CVE-2021-27135
xterm through Patch #365 allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted UTF-8 character sequence.
Additional Info: 

N/A

Download: 

SRPMS
  1. xterm-253-1.0.1.AXS4.src.rpm
    MD5: b7cb1f2df1a81a0374a2ba4144860351
    SHA-256: a8e4b2a4b81433682c75194c888613b1bacdfb74c5e958791cb9d3e3d5d88c55
    Size: 902.02 kB

Asianux Server 4 for x86
  1. xterm-253-1.0.1.AXS4.i686.rpm
    MD5: d494cb913ffd5c6d0078423e06cc485e
    SHA-256: 00e1e8b203b8cc05f7cbc0ab9500cfc09f8c480afbf720f729caf03864a5562f
    Size: 351.58 kB

Asianux Server 4 for x86_64
  1. xterm-253-1.0.1.AXS4.x86_64.rpm
    MD5: 1129f62954168d8a1b3932b043fc31d0
    SHA-256: dbe64a4274c3b7fd164b2dbf2ae1fbcf294cc2dc165a0398a4e5b6e911fcabe5
    Size: 355.57 kB