[CLSA-2026:1793015974] xterm: Fix of CVE-2022-45063
Type:
security
Severity:
Critical
Release date:
2026-10-26 17:41:12 UTC
Description:
- CVE-2022-45063: restore the last valid font when an OSC 50 font change fails, so that a query cannot echo back an attacker-supplied font name
CVEs fixed:
Updated packages:
  • xterm-295-3.el7_9.1.tuxcare.els1.aarch64.rpm
    sha:4a3f3dc133787f970cc47a6449223e4f62f0653439379d6f87aed8b6dd78a851
  • xterm-295-3.el7_9.1.tuxcare.els1.i686.rpm
    sha:25713fe081e49dc9b694e2ebc11569ebb8c5521e6f61d3e4b43f9205d43b20e5
  • xterm-295-3.el7_9.1.tuxcare.els1.x86_64.rpm
    sha:e45f7dc6e497dcea7d7f7abeb579c5319b494467cec7a7198b7d6107334b283a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.