tocsin

Debian/xterm: medium 5.5

xterm through Patch 370, when Sixel support is enabled, allows attackers to trigger a buffer overflow in set_sixel in graphics_sixel.c via crafted text.

Action: Upgrade xterm to 370-2 or later.

Affected

introducedfixedlast affected
0370-2-

Fixed versions

370-2

Sources

published · modified · JSON