A vulnerability has been discovered in rxvt-unicode where data written to the terminal can lead to code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| x11-terms/rxvt-unicode | * | < 9.30 | >= 9.30 |
rxvt-unicode is a clone of the well known terminal emulator rxvt.
A vulnerability has been discovered in rxvt-unicode. Please review the CVE identifiers referenced below for details.
in the Perl background extension, when an attacker can control the data written to the user's terminal and certain options are set. The "background" extension is automatically loaded if certain X resources are set such as 'transparent' (see the full list at the top of src/perl/background[1]). So it is possible to be using this extension without realising it.
There is no known workaround at this time.
All rxvt-unicode users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=x11-terms/rxvt-unicode-9.30"
A vulnerability in rxvt-unicode may allow a remote attacker to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| x11-terms/rxvt-unicode | * | < 9.22-r9 | >= 9.22-r9 |
rxvt-unicode (urxvt) is a clone of the rxvt terminal emulator.
It was discovered that rxvt-unicode did not properly handle certain escape sequences.
A remote attacker could entice a user to run a program where attacker controls the output inside a rxvt terminal window, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
All rxvt-unicode users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=x11-terms/rxvt-unicode-9.22-r9"
A vulnerability in rxvt-unicode may allow a remote attacker to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| x11-terms/rxvt-unicode | * | < 9.20 | >= 9.20 |
rxvt-unicode (urxvt) is a clone of the rxvt terminal emulator.
rxvt-unicode does not properly handle OSC escape sequences, including those used to read and write X window properties.
A remote attacker could entice a user to run a specially crafted file using rxvt-unicode, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.
There is no known workaround at this time.
All rxvt-unicode users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=x11-terms/rxvt-unicode-9.20"
A vulnerability was found in aterm, Eterm, Mrxvt, multi-aterm, RXVT, rxvt-unicode, and wterm, allowing for local privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| x11-terms/aterm | * | < 1.0.1-r1 | >= 1.0.1-r1 |
| x11-terms/eterm | * | < 0.9.4-r1 | >= 0.9.4-r1 |
| x11-terms/mrxvt | * | < 0.5.3-r2 | >= 0.5.3-r2 |
| x11-terms/multi-aterm | * | < 0.2.1-r1 | >= 0.2.1-r1 |
| x11-terms/rxvt | * | < 2.7.10-r4 | >= 2.7.10-r4 |
| x11-terms/rxvt-unicode | * | < 9.02-r1 | >= 9.02-r1 |
| x11-terms/wterm | * | < 6.2.9-r3 | >= 6.2.9-r3 |
Aterm, Eterm, Mrxvt, multi-aterm, RXVT, rxvt-unicode, and wterm are X11 terminal emulators.
Bernhard R. Link discovered that RXVT opens a terminal on :0 if the "-display" option is not specified and the DISPLAY environment variable is not set. Further research by the Gentoo Security Team has shown that aterm, Eterm, Mrxvt, multi-aterm, rxvt-unicode, and wterm are also affected.
A local attacker could exploit this vulnerability to hijack X11 terminals of other users.
There is no known workaround at this time.
All aterm users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=x11-terms/aterm-1.0.1-r1"
All Eterm users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=x11-terms/eterm-0.9.4-r1"
All Mrxvt users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=x11-terms/mrxvt-0.5.3-r2"
All multi-aterm users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=x11-terms/multi-aterm-0.2.1-r1"
All RXVT users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=x11-terms/rxvt-2.7.10-r4"
All rxvt-unicode users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=x11-terms/rxvt-unicode-9.02-r1"
All wterm users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=x11-terms/wterm-6.2.9-r3"
rxvt-unicode is vulnerable to a buffer overflow that could lead to the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| x11-terms/rxvt-unicode | * | < 5.3 | >= 5.3, < 4.8 |
rxvt-unicode is a clone of the well known terminal emulator rxvt.
Rob Holland of the Gentoo Linux Security Audit Team discovered that rxvt-unicode fails to properly check input length.
Successful exploitation would allow an attacker to execute arbitrary code with the permissions of the user running rxvt-unicode.
There is no known workaround at this time.
All rxvt-unicode users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=x11-terms/rxvt-unicode-5.3"