MGASA-2021-0358

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2021-0358.html
Import Source
https://advisories.mageia.org/MGASA-2021-0358.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2021-0358
Related
Published
2021-07-20T10:46:47Z
Modified
2021-07-20T10:19:25Z
Summary
Updated rvxt-unicode, mxrvt, eterm packages fix security vulnerability
Details

rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q). A response is terminated by a newline (CVE-2021-33477).

References
Credits

Affected packages

Mageia:8 / rxvt-unicode

Package

Name
rxvt-unicode
Purl
pkg:rpm/mageia/rxvt-unicode?arch=source&distro=mageia-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
9.26-1.mga8

Ecosystem specific 

{
    "section": "core"
}

Mageia:8 / mrxvt

Package

Name
mrxvt
Purl
pkg:rpm/mageia/mrxvt?arch=source&distro=mageia-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.5.4-15.1.mga8

Ecosystem specific 

{
    "section": "core"
}

Mageia:8 / eterm

Package

Name
eterm
Purl
pkg:rpm/mageia/eterm?arch=source&distro=mageia-8

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.9.7-3.1.mga8

Ecosystem specific 

{
    "section": "core"
}