Articles / Debian: New xterm packages …

Debian: New xterm packages fix remote code execution

Paul Szabo discovered that xterm, a terminal emulator for the X Window System, places arbitrary characters into the input buffer when displaying certain crafted escape sequences. Updated packages are available from
Hash: SHA1

- ------------------------------------------------------------------------
Debian Security Advisory DSA-1694-1                                   Florian Weimer
January 02, 2009            
- ------------------------------------------------------------------------

Package        : xterm
Vulnerability  : design flaw
Problem type   : local (remote)
Debian-specific: no
CVE Id(s)      : CVE-2008-2383
Debian Bug     : 510030

Paul Szabo discovered that xterm, a terminal emulator for the X Window
System, places arbitrary characters into the input buffer when
displaying certain crafted escape sequences (CVE-2008-2383).

As an additional precaution, this security update also disables font
changing, user-defined keys, and X property changes through escape

For the stable distribution (etch), this problem has been fixed in
version 222-1etch3.

For the unstable distribution (sid), this problem will be fixed soon.

We recommend that you upgrade your xterm package.

Upgrade instructions
- --------------------

wget url
       will fetch the file for you
dpkg -i file.deb
       will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
       will update the internal database
apt-get upgrade
       will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian GNU/Linux 4.0 alias etch
- -------------------------------

Source archives:
   Size/MD5 checksum:     1123 3bcc850fe7c9057e5d5d03617cc95195
   Size/MD5 checksum:    61664 f1e11e4f4c85db1e2ffa67c5d132d2e6
   Size/MD5 checksum:   802986 bb77882a33083632a9c6c9de004a54fb

alpha architecture (DEC Alpha)
   Size/MD5 checksum:   437394 2a16b16a6ed79a908987769b9b5a68d8

amd64 architecture (AMD x86_64 (AMD64))
   Size/MD5 checksum:   416434 46ba9b4430c313464afeaa856d02f09a

arm architecture (ARM)
   Size/MD5 checksum:   412020 9119d878ffedf54c843ec84a98022a3d

hppa architecture (HP PA RISC)
   Size/MD5 checksum:   421890 9b3326921fbbd0ba014b3717b20c53fb

i386 architecture (Intel ia32)
   Size/MD5 checksum:   403908 f54263828a01af2af86f25c1fedc7aa6

ia64 architecture (Intel ia64)
   Size/MD5 checksum:   509374 052861cf2a23d7a414c038d510fc7f01

mips architecture (MIPS (Big Endian))
   Size/MD5 checksum:   428858 63615939a4de2f4e3ba0cc61adbf0e47

mipsel architecture (MIPS (Little Endian))
   Size/MD5 checksum:   425604 9d18da53eea366eb2688dfe629d95e82

powerpc architecture (PowerPC)
   Size/MD5 checksum:   409986 824e743d4a6a1abeb5c1fdc0a9e7d006

s390 architecture (IBM S/390)
   Size/MD5 checksum:   422196 9b78491ef8fb34da8d5e183e91fc6c65

sparc architecture (Sun SPARC/UltraSPARC)
   Size/MD5 checksum:   409994 e284b9163d0da06f932f8e243ccaee2b

 These files will probably be moved into the stable distribution on
 its next update.

- ---------------------------------------------------------------------------------
For apt-get: deb stable/updates main
For dpkg-ftp: dists/stable/updates/main
Mailing list:
Package info: `apt-cache show ' and
Version: GnuPG v1.4.9 (GNU/Linux)


Project Spotlight

Kigo Video Converter Ultimate for Mac

A tool for converting and editing videos.


Project Spotlight


An efficient tagger for MP3, Ogg/Vorbis, and FLAC files.