tocsin

Debian/xterm: critical 9.8

xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are

Action: Upgrade xterm to 375-1 or later.

Affected

introducedfixedlast affected
0375-1-

Fixed versions

375-1

Sources

published · modified · JSON