Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2008-2383 (GCVE-0-2008-2383)
Vulnerability from cvelistv5
Published
2009-01-02 00:00
Modified
2024-08-07 08:58
Severity ?
EPSS score ?
Summary
CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.
References
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-07T08:58:02.539Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { name: "33419", tags: [ "third-party-advisory", "x_transferred", ], url: "http://secunia.com/advisories/33419", }, { name: "RHSA-2009:0018", tags: [ "vendor-advisory", "x_transferred", ], url: "http://www.redhat.com/support/errata/RHSA-2009-0018.html", }, { name: "254208", tags: [ "vendor-advisory", "x_transferred", ], url: "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254208-1", }, { name: "FEDORA-2009-0154", tags: [ "vendor-advisory", "x_transferred", ], url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00184.html", }, { name: "RHSA-2009:0019", tags: [ "vendor-advisory", "x_transferred", ], url: "http://www.redhat.com/support/errata/RHSA-2009-0019.html", }, { name: "33388", tags: [ "third-party-advisory", "x_transferred", ], url: "http://secunia.com/advisories/33388", }, { tags: [ "x_transferred", ], url: "http://support.apple.com/kb/HT3549", }, { name: "SUSE-SR:2009:003", tags: [ "vendor-advisory", "x_transferred", ], url: "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html", }, { name: "FEDORA-2009-0059", tags: [ "vendor-advisory", "x_transferred", ], url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00072.html", }, { name: "oval:org.mitre.oval:def:9317", tags: [ "vdb-entry", "signature", "x_transferred", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9317", }, { name: "35074", tags: [ "third-party-advisory", "x_transferred", ], url: "http://secunia.com/advisories/35074", }, { name: "33418", tags: [ "third-party-advisory", "x_transferred", ], url: "http://secunia.com/advisories/33418", }, { name: "DSA-1694", tags: [ "vendor-advisory", "x_transferred", ], url: "http://www.debian.org/security/2009/dsa-1694", }, { name: "APPLE-SA-2009-05-12", tags: [ "vendor-advisory", "x_transferred", ], url: "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html", }, { name: "SUSE-SR:2009:002", tags: [ "vendor-advisory", "x_transferred", ], url: "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html", }, { name: "33318", tags: [ "third-party-advisory", "x_transferred", ], url: "http://secunia.com/advisories/33318", }, { name: "33568", tags: [ "third-party-advisory", "x_transferred", ], url: "http://secunia.com/advisories/33568", }, { name: "xterm-decrqss-code-execution(47655)", tags: [ "vdb-entry", "x_transferred", ], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/47655", }, { name: "TA09-133A", tags: [ "third-party-advisory", "x_transferred", ], url: "http://www.us-cert.gov/cas/techalerts/TA09-133A.html", }, { name: "33397", tags: [ "third-party-advisory", "x_transferred", ], url: "http://secunia.com/advisories/33397", }, { name: "ADV-2009-1297", tags: [ "vdb-entry", "x_transferred", ], url: "http://www.vupen.com/english/advisories/2009/1297", }, { name: "33060", tags: [ "vdb-entry", "x_transferred", ], url: "http://www.securityfocus.com/bid/33060", }, { name: "USN-703-1", tags: [ "vendor-advisory", "x_transferred", ], url: "https://usn.ubuntu.com/703-1/", }, { tags: [ "x_transferred", ], url: "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030", }, { name: "33820", tags: [ "third-party-advisory", "x_transferred", ], url: "http://secunia.com/advisories/33820", }, { name: "1021522", tags: [ "vdb-entry", "x_transferred", ], url: "http://www.securitytracker.com/id?1021522", }, { name: "FEDORA-2023-a004ecb3f8", tags: [ "vendor-advisory", "x_transferred", ], url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOOVZTIABA4MIFUGTAVYWO6QXSUXSST4/", }, { name: "FEDORA-2023-3746647cc3", tags: [ "vendor-advisory", "x_transferred", ], url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3E2Q6NPKT7V4VKZMSFF4ARLRVYOG4AU/", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], datePublic: "2008-12-30T00:00:00", descriptions: [ { lang: "en", value: "CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \\n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2023-07-27T00:00:00", orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", shortName: "mitre", }, references: [ { name: "33419", tags: [ "third-party-advisory", ], url: "http://secunia.com/advisories/33419", }, { name: "RHSA-2009:0018", tags: [ "vendor-advisory", ], url: "http://www.redhat.com/support/errata/RHSA-2009-0018.html", }, { name: "254208", tags: [ "vendor-advisory", ], url: "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254208-1", }, { name: "FEDORA-2009-0154", tags: [ "vendor-advisory", ], url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00184.html", }, { name: "RHSA-2009:0019", tags: [ "vendor-advisory", ], url: "http://www.redhat.com/support/errata/RHSA-2009-0019.html", }, { name: "33388", tags: [ "third-party-advisory", ], url: "http://secunia.com/advisories/33388", }, { url: "http://support.apple.com/kb/HT3549", }, { name: "SUSE-SR:2009:003", tags: [ "vendor-advisory", ], url: "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html", }, { name: "FEDORA-2009-0059", tags: [ "vendor-advisory", ], url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00072.html", }, { name: "oval:org.mitre.oval:def:9317", tags: [ "vdb-entry", "signature", ], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9317", }, { name: "35074", tags: [ "third-party-advisory", ], url: "http://secunia.com/advisories/35074", }, { name: "33418", tags: [ "third-party-advisory", ], url: "http://secunia.com/advisories/33418", }, { name: "DSA-1694", tags: [ "vendor-advisory", ], url: "http://www.debian.org/security/2009/dsa-1694", }, { name: "APPLE-SA-2009-05-12", tags: [ "vendor-advisory", ], url: "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html", }, { name: "SUSE-SR:2009:002", tags: [ "vendor-advisory", ], url: "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html", }, { name: "33318", tags: [ "third-party-advisory", ], url: "http://secunia.com/advisories/33318", }, { name: "33568", tags: [ "third-party-advisory", ], url: "http://secunia.com/advisories/33568", }, { name: "xterm-decrqss-code-execution(47655)", tags: [ "vdb-entry", ], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/47655", }, { name: "TA09-133A", tags: [ "third-party-advisory", ], url: "http://www.us-cert.gov/cas/techalerts/TA09-133A.html", }, { name: "33397", tags: [ "third-party-advisory", ], url: "http://secunia.com/advisories/33397", }, { name: "ADV-2009-1297", tags: [ "vdb-entry", ], url: "http://www.vupen.com/english/advisories/2009/1297", }, { name: "33060", tags: [ "vdb-entry", ], url: "http://www.securityfocus.com/bid/33060", }, { name: "USN-703-1", tags: [ "vendor-advisory", ], url: "https://usn.ubuntu.com/703-1/", }, { url: "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030", }, { name: "33820", tags: [ "third-party-advisory", ], url: "http://secunia.com/advisories/33820", }, { name: "1021522", tags: [ "vdb-entry", ], url: "http://www.securitytracker.com/id?1021522", }, { name: "FEDORA-2023-a004ecb3f8", tags: [ "vendor-advisory", ], url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOOVZTIABA4MIFUGTAVYWO6QXSUXSST4/", }, { name: "FEDORA-2023-3746647cc3", tags: [ "vendor-advisory", ], url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3E2Q6NPKT7V4VKZMSFF4ARLRVYOG4AU/", }, ], }, }, cveMetadata: { assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca", assignerShortName: "mitre", cveId: "CVE-2008-2383", datePublished: "2009-01-02T00:00:00", dateReserved: "2008-05-21T00:00:00", dateUpdated: "2024-08-07T08:58:02.539Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", "vulnerability-lookup:meta": { fkie_nvd: { configurations: "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:invisible-island:xterm:_nil_:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BE291BE0-5A80-4D58-BF1F-1A7089D2471E\"}]}]}]", descriptions: "[{\"lang\": \"en\", \"value\": \"CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \\\\n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.\"}, {\"lang\": \"es\", \"value\": \"Vulnerabilidad de inyecci\\u00f3n CRLF en xterm, permite a atacantes asistidos por usuarios ejecutar comandos de su elecci\\u00f3n a trav\\u00e9s de caracteres LF (tambi\\u00e9n conocido como \\\\n) que rodean el nombre del comando dentro de una secuencia de escape evice Control Request Status String (DECRQSS) en un fichero de texto, es una cuesti\\u00f3n relacionada con CVE-2003-0063 y CVE-2003-0071.\"}]", id: "CVE-2008-2383", lastModified: "2024-11-21T00:46:45.807", metrics: "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:C/I:C/A:C\", \"baseScore\": 9.3, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 8.6, \"impactScore\": 10.0, \"acInsufInfo\": false, \"obtainAllPrivilege\": true, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}", published: "2009-01-02T18:11:09.483", references: "[{\"url\": \"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/33318\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/33388\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/33397\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/33418\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/33419\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/33568\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/33820\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://secunia.com/advisories/35074\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254208-1\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://support.apple.com/kb/HT3549\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.debian.org/security/2009/dsa-1694\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2009-0018.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2009-0019.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/bid/33060\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securitytracker.com/id?1021522\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.us-cert.gov/cas/techalerts/TA09-133A.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"US Government Resource\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2009/1297\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/47655\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3E2Q6NPKT7V4VKZMSFF4ARLRVYOG4AU/\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOOVZTIABA4MIFUGTAVYWO6QXSUXSST4/\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9317\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://usn.ubuntu.com/703-1/\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00072.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00184.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/33318\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://secunia.com/advisories/33388\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/33397\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/33418\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/33419\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/33568\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/33820\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/35074\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254208-1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://support.apple.com/kb/HT3549\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.debian.org/security/2009/dsa-1694\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2009-0018.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.redhat.com/support/errata/RHSA-2009-0019.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/33060\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securitytracker.com/id?1021522\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.us-cert.gov/cas/techalerts/TA09-133A.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"US Government Resource\"]}, {\"url\": \"http://www.vupen.com/english/advisories/2009/1297\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/47655\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3E2Q6NPKT7V4VKZMSFF4ARLRVYOG4AU/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOOVZTIABA4MIFUGTAVYWO6QXSUXSST4/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9317\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://usn.ubuntu.com/703-1/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00072.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00184.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]", sourceIdentifier: "cve@mitre.org", vulnStatus: "Modified", weaknesses: "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-94\"}]}]", }, nvd: "{\"cve\":{\"id\":\"CVE-2008-2383\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2009-01-02T18:11:09.483\",\"lastModified\":\"2025-04-09T00:30:58.490\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \\\\n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad de inyección CRLF en xterm, permite a atacantes asistidos por usuarios ejecutar comandos de su elección a través de caracteres LF (también conocido como \\\\n) que rodean el nombre del comando dentro de una secuencia de escape evice Control Request Status String (DECRQSS) en un fichero de texto, es una cuestión relacionada con CVE-2003-0063 y CVE-2003-0071.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:C/I:C/A:C\",\"baseScore\":9.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":8.6,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":true,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-94\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:invisible-island:xterm:_nil_:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BE291BE0-5A80-4D58-BF1F-1A7089D2471E\"}]}]}],\"references\":[{\"url\":\"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/33318\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/33388\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/33397\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/33418\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/33419\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/33568\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/33820\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://secunia.com/advisories/35074\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254208-1\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://support.apple.com/kb/HT3549\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.debian.org/security/2009/dsa-1694\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2009-0018.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2009-0019.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/33060\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securitytracker.com/id?1021522\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.us-cert.gov/cas/techalerts/TA09-133A.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"US Government Resource\"]},{\"url\":\"http://www.vupen.com/english/advisories/2009/1297\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/47655\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3E2Q6NPKT7V4VKZMSFF4ARLRVYOG4AU/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOOVZTIABA4MIFUGTAVYWO6QXSUXSST4/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9317\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://usn.ubuntu.com/703-1/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00072.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00184.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.apple.com/archives/security-announce/2009/May/msg00002.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/33318\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://secunia.com/advisories/33388\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/33397\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/33418\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/33419\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/33568\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/33820\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/35074\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://sunsolve.sun.com/search/document.do?assetkey=1-66-254208-1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://support.apple.com/kb/HT3549\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2009/dsa-1694\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2009-0018.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.redhat.com/support/errata/RHSA-2009-0019.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/33060\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id?1021522\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.us-cert.gov/cas/techalerts/TA09-133A.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"US Government Resource\"]},{\"url\":\"http://www.vupen.com/english/advisories/2009/1297\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/47655\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3E2Q6NPKT7V4VKZMSFF4ARLRVYOG4AU/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOOVZTIABA4MIFUGTAVYWO6QXSUXSST4/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9317\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://usn.ubuntu.com/703-1/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00072.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00184.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}", }, }
ghsa-94vw-2f3v-j88m
Vulnerability from github
Published
2022-05-01 23:49
Modified
2025-04-09 04:02
Details
CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.
{ affected: [], aliases: [ "CVE-2008-2383", ], database_specific: { cwe_ids: [ "CWE-94", ], github_reviewed: false, github_reviewed_at: null, nvd_published_at: "2009-01-02T18:11:00Z", severity: "HIGH", }, details: "CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \\n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.", id: "GHSA-94vw-2f3v-j88m", modified: "2025-04-09T04:02:34Z", published: "2022-05-01T23:49:35Z", references: [ { type: "ADVISORY", url: "https://nvd.nist.gov/vuln/detail/CVE-2008-2383", }, { type: "WEB", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/47655", }, { type: "WEB", url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3E2Q6NPKT7V4VKZMSFF4ARLRVYOG4AU", }, { type: "WEB", url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOOVZTIABA4MIFUGTAVYWO6QXSUXSST4", }, { type: "WEB", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3E2Q6NPKT7V4VKZMSFF4ARLRVYOG4AU", }, { type: "WEB", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOOVZTIABA4MIFUGTAVYWO6QXSUXSST4", }, { type: "WEB", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9317", }, { type: "WEB", url: "https://usn.ubuntu.com/703-1", }, { type: "WEB", url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00072.html", }, { type: "WEB", url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00184.html", }, { type: "WEB", url: "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030", }, { type: "WEB", url: "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html", }, { type: "WEB", url: "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html", }, { type: "WEB", url: "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html", }, { type: "WEB", url: "http://secunia.com/advisories/33318", }, { type: "WEB", url: "http://secunia.com/advisories/33388", }, { type: "WEB", url: "http://secunia.com/advisories/33397", }, { type: "WEB", url: "http://secunia.com/advisories/33418", }, { type: "WEB", url: "http://secunia.com/advisories/33419", }, { type: "WEB", url: "http://secunia.com/advisories/33568", }, { type: "WEB", url: "http://secunia.com/advisories/33820", }, { type: "WEB", url: "http://secunia.com/advisories/35074", }, { type: "WEB", url: "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254208-1", }, { type: "WEB", url: "http://support.apple.com/kb/HT3549", }, { type: "WEB", url: "http://www.debian.org/security/2009/dsa-1694", }, { type: "WEB", url: "http://www.redhat.com/support/errata/RHSA-2009-0018.html", }, { type: "WEB", url: "http://www.redhat.com/support/errata/RHSA-2009-0019.html", }, { type: "WEB", url: "http://www.securityfocus.com/bid/33060", }, { type: "WEB", url: "http://www.securitytracker.com/id?1021522", }, { type: "WEB", url: "http://www.us-cert.gov/cas/techalerts/TA09-133A.html", }, { type: "WEB", url: "http://www.vupen.com/english/advisories/2009/1297", }, ], schema_version: "1.4.0", severity: [], }
opensuse-su-2024:13043-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
kitty-0.29.0-1.1 on GA media
Notes
Title of the patch
kitty-0.29.0-1.1 on GA media
Description of the patch
These are all security issues fixed in the kitty-0.29.0-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-13043
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "kitty-0.29.0-1.1 on GA media", title: "Title of the patch", }, { category: "description", text: "These are all security issues fixed in the kitty-0.29.0-1.1 package on the GA media of openSUSE Tumbleweed.", title: "Description of the patch", }, { category: "details", text: "openSUSE-Tumbleweed-2024-13043", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_13043-1.json", }, { category: "self", summary: "SUSE CVE CVE-2008-2383 page", url: "https://www.suse.com/security/cve/CVE-2008-2383/", }, ], title: "kitty-0.29.0-1.1 on GA media", tracking: { current_release_date: "2024-06-15T00:00:00Z", generator: { date: "2024-06-15T00:00:00Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "openSUSE-SU-2024:13043-1", initial_release_date: "2024-06-15T00:00:00Z", revision_history: [ { date: "2024-06-15T00:00:00Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "kitty-0.29.0-1.1.aarch64", product: { name: "kitty-0.29.0-1.1.aarch64", product_id: "kitty-0.29.0-1.1.aarch64", }, }, { category: "product_version", name: "kitty-shell-integration-0.29.0-1.1.aarch64", product: { name: "kitty-shell-integration-0.29.0-1.1.aarch64", product_id: "kitty-shell-integration-0.29.0-1.1.aarch64", }, }, { category: "product_version", name: "kitty-terminfo-0.29.0-1.1.aarch64", product: { name: "kitty-terminfo-0.29.0-1.1.aarch64", product_id: "kitty-terminfo-0.29.0-1.1.aarch64", }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "kitty-0.29.0-1.1.ppc64le", product: { name: "kitty-0.29.0-1.1.ppc64le", product_id: "kitty-0.29.0-1.1.ppc64le", }, }, { category: "product_version", name: "kitty-shell-integration-0.29.0-1.1.ppc64le", product: { name: "kitty-shell-integration-0.29.0-1.1.ppc64le", product_id: "kitty-shell-integration-0.29.0-1.1.ppc64le", }, }, { category: "product_version", name: "kitty-terminfo-0.29.0-1.1.ppc64le", product: { name: "kitty-terminfo-0.29.0-1.1.ppc64le", product_id: "kitty-terminfo-0.29.0-1.1.ppc64le", }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "kitty-0.29.0-1.1.s390x", product: { name: "kitty-0.29.0-1.1.s390x", product_id: "kitty-0.29.0-1.1.s390x", }, }, { category: "product_version", name: "kitty-shell-integration-0.29.0-1.1.s390x", product: { name: "kitty-shell-integration-0.29.0-1.1.s390x", product_id: "kitty-shell-integration-0.29.0-1.1.s390x", }, }, { category: "product_version", name: "kitty-terminfo-0.29.0-1.1.s390x", product: { name: "kitty-terminfo-0.29.0-1.1.s390x", product_id: "kitty-terminfo-0.29.0-1.1.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "kitty-0.29.0-1.1.x86_64", product: { name: "kitty-0.29.0-1.1.x86_64", product_id: "kitty-0.29.0-1.1.x86_64", }, }, { category: "product_version", name: "kitty-shell-integration-0.29.0-1.1.x86_64", product: { name: "kitty-shell-integration-0.29.0-1.1.x86_64", product_id: "kitty-shell-integration-0.29.0-1.1.x86_64", }, }, { category: "product_version", name: "kitty-terminfo-0.29.0-1.1.x86_64", product: { name: "kitty-terminfo-0.29.0-1.1.x86_64", product_id: "kitty-terminfo-0.29.0-1.1.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "openSUSE Tumbleweed", product: { name: "openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed", product_identification_helper: { cpe: "cpe:/o:opensuse:tumbleweed", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "kitty-0.29.0-1.1.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:kitty-0.29.0-1.1.aarch64", }, product_reference: "kitty-0.29.0-1.1.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "kitty-0.29.0-1.1.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:kitty-0.29.0-1.1.ppc64le", }, product_reference: "kitty-0.29.0-1.1.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "kitty-0.29.0-1.1.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:kitty-0.29.0-1.1.s390x", }, product_reference: "kitty-0.29.0-1.1.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "kitty-0.29.0-1.1.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:kitty-0.29.0-1.1.x86_64", }, product_reference: "kitty-0.29.0-1.1.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "kitty-shell-integration-0.29.0-1.1.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:kitty-shell-integration-0.29.0-1.1.aarch64", }, product_reference: "kitty-shell-integration-0.29.0-1.1.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "kitty-shell-integration-0.29.0-1.1.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:kitty-shell-integration-0.29.0-1.1.ppc64le", }, product_reference: "kitty-shell-integration-0.29.0-1.1.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "kitty-shell-integration-0.29.0-1.1.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:kitty-shell-integration-0.29.0-1.1.s390x", }, product_reference: "kitty-shell-integration-0.29.0-1.1.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "kitty-shell-integration-0.29.0-1.1.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:kitty-shell-integration-0.29.0-1.1.x86_64", }, product_reference: "kitty-shell-integration-0.29.0-1.1.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "kitty-terminfo-0.29.0-1.1.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:kitty-terminfo-0.29.0-1.1.aarch64", }, product_reference: "kitty-terminfo-0.29.0-1.1.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "kitty-terminfo-0.29.0-1.1.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:kitty-terminfo-0.29.0-1.1.ppc64le", }, product_reference: "kitty-terminfo-0.29.0-1.1.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "kitty-terminfo-0.29.0-1.1.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:kitty-terminfo-0.29.0-1.1.s390x", }, product_reference: "kitty-terminfo-0.29.0-1.1.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "kitty-terminfo-0.29.0-1.1.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:kitty-terminfo-0.29.0-1.1.x86_64", }, product_reference: "kitty-terminfo-0.29.0-1.1.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, ], }, vulnerabilities: [ { cve: "CVE-2008-2383", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2008-2383", }, ], notes: [ { category: "general", text: "CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \\n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:kitty-0.29.0-1.1.aarch64", "openSUSE Tumbleweed:kitty-0.29.0-1.1.ppc64le", "openSUSE Tumbleweed:kitty-0.29.0-1.1.s390x", "openSUSE Tumbleweed:kitty-0.29.0-1.1.x86_64", "openSUSE Tumbleweed:kitty-shell-integration-0.29.0-1.1.aarch64", "openSUSE Tumbleweed:kitty-shell-integration-0.29.0-1.1.ppc64le", "openSUSE Tumbleweed:kitty-shell-integration-0.29.0-1.1.s390x", "openSUSE Tumbleweed:kitty-shell-integration-0.29.0-1.1.x86_64", "openSUSE Tumbleweed:kitty-terminfo-0.29.0-1.1.aarch64", "openSUSE Tumbleweed:kitty-terminfo-0.29.0-1.1.ppc64le", "openSUSE Tumbleweed:kitty-terminfo-0.29.0-1.1.s390x", "openSUSE Tumbleweed:kitty-terminfo-0.29.0-1.1.x86_64", ], }, references: [ { category: "external", summary: "CVE-2008-2383", url: "https://www.suse.com/security/cve/CVE-2008-2383", }, { category: "external", summary: "SUSE Bug 462917 for CVE-2008-2383", url: "https://bugzilla.suse.com/462917", }, { category: "external", summary: "SUSE Bug 464884 for CVE-2008-2383", url: "https://bugzilla.suse.com/464884", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:kitty-0.29.0-1.1.aarch64", "openSUSE Tumbleweed:kitty-0.29.0-1.1.ppc64le", "openSUSE Tumbleweed:kitty-0.29.0-1.1.s390x", "openSUSE Tumbleweed:kitty-0.29.0-1.1.x86_64", "openSUSE Tumbleweed:kitty-shell-integration-0.29.0-1.1.aarch64", "openSUSE Tumbleweed:kitty-shell-integration-0.29.0-1.1.ppc64le", "openSUSE Tumbleweed:kitty-shell-integration-0.29.0-1.1.s390x", "openSUSE Tumbleweed:kitty-shell-integration-0.29.0-1.1.x86_64", "openSUSE Tumbleweed:kitty-terminfo-0.29.0-1.1.aarch64", "openSUSE Tumbleweed:kitty-terminfo-0.29.0-1.1.ppc64le", "openSUSE Tumbleweed:kitty-terminfo-0.29.0-1.1.s390x", "openSUSE Tumbleweed:kitty-terminfo-0.29.0-1.1.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2008-2383", }, ], }
opensuse-su-2024:11527-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
xterm-368-2.2 on GA media
Notes
Title of the patch
xterm-368-2.2 on GA media
Description of the patch
These are all security issues fixed in the xterm-368-2.2 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-11527
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ document: { aggregate_severity: { namespace: "https://www.suse.com/support/security/rating/", text: "moderate", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright 2024 SUSE LLC. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "xterm-368-2.2 on GA media", title: "Title of the patch", }, { category: "description", text: "These are all security issues fixed in the xterm-368-2.2 package on the GA media of openSUSE Tumbleweed.", title: "Description of the patch", }, { category: "details", text: "openSUSE-Tumbleweed-2024-11527", title: "Patchnames", }, { category: "legal_disclaimer", text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", title: "Terms of use", }, ], publisher: { category: "vendor", contact_details: "https://www.suse.com/support/security/contact/", name: "SUSE Product Security Team", namespace: "https://www.suse.com/", }, references: [ { category: "external", summary: "SUSE ratings", url: "https://www.suse.com/support/security/rating/", }, { category: "self", summary: "URL of this CSAF notice", url: "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11527-1.json", }, { category: "self", summary: "SUSE CVE CVE-2008-2383 page", url: "https://www.suse.com/security/cve/CVE-2008-2383/", }, { category: "self", summary: "SUSE CVE CVE-2021-27135 page", url: "https://www.suse.com/security/cve/CVE-2021-27135/", }, ], title: "xterm-368-2.2 on GA media", tracking: { current_release_date: "2024-06-15T00:00:00Z", generator: { date: "2024-06-15T00:00:00Z", engine: { name: "cve-database.git:bin/generate-csaf.pl", version: "1", }, }, id: "openSUSE-SU-2024:11527-1", initial_release_date: "2024-06-15T00:00:00Z", revision_history: [ { date: "2024-06-15T00:00:00Z", number: "1", summary: "Current version", }, ], status: "final", version: "1", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_version", name: "xterm-368-2.2.aarch64", product: { name: "xterm-368-2.2.aarch64", product_id: "xterm-368-2.2.aarch64", }, }, { category: "product_version", name: "xterm-bin-368-2.2.aarch64", product: { name: "xterm-bin-368-2.2.aarch64", product_id: "xterm-bin-368-2.2.aarch64", }, }, ], category: "architecture", name: "aarch64", }, { branches: [ { category: "product_version", name: "xterm-368-2.2.ppc64le", product: { name: "xterm-368-2.2.ppc64le", product_id: "xterm-368-2.2.ppc64le", }, }, { category: "product_version", name: "xterm-bin-368-2.2.ppc64le", product: { name: "xterm-bin-368-2.2.ppc64le", product_id: "xterm-bin-368-2.2.ppc64le", }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "xterm-368-2.2.s390x", product: { name: "xterm-368-2.2.s390x", product_id: "xterm-368-2.2.s390x", }, }, { category: "product_version", name: "xterm-bin-368-2.2.s390x", product: { name: "xterm-bin-368-2.2.s390x", product_id: "xterm-bin-368-2.2.s390x", }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "xterm-368-2.2.x86_64", product: { name: "xterm-368-2.2.x86_64", product_id: "xterm-368-2.2.x86_64", }, }, { category: "product_version", name: "xterm-bin-368-2.2.x86_64", product: { name: "xterm-bin-368-2.2.x86_64", product_id: "xterm-bin-368-2.2.x86_64", }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_name", name: "openSUSE Tumbleweed", product: { name: "openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed", product_identification_helper: { cpe: "cpe:/o:opensuse:tumbleweed", }, }, }, ], category: "product_family", name: "SUSE Linux Enterprise", }, ], category: "vendor", name: "SUSE", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "xterm-368-2.2.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xterm-368-2.2.aarch64", }, product_reference: "xterm-368-2.2.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xterm-368-2.2.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xterm-368-2.2.ppc64le", }, product_reference: "xterm-368-2.2.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xterm-368-2.2.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xterm-368-2.2.s390x", }, product_reference: "xterm-368-2.2.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xterm-368-2.2.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xterm-368-2.2.x86_64", }, product_reference: "xterm-368-2.2.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xterm-bin-368-2.2.aarch64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xterm-bin-368-2.2.aarch64", }, product_reference: "xterm-bin-368-2.2.aarch64", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xterm-bin-368-2.2.ppc64le as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xterm-bin-368-2.2.ppc64le", }, product_reference: "xterm-bin-368-2.2.ppc64le", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xterm-bin-368-2.2.s390x as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xterm-bin-368-2.2.s390x", }, product_reference: "xterm-bin-368-2.2.s390x", relates_to_product_reference: "openSUSE Tumbleweed", }, { category: "default_component_of", full_product_name: { name: "xterm-bin-368-2.2.x86_64 as component of openSUSE Tumbleweed", product_id: "openSUSE Tumbleweed:xterm-bin-368-2.2.x86_64", }, product_reference: "xterm-bin-368-2.2.x86_64", relates_to_product_reference: "openSUSE Tumbleweed", }, ], }, vulnerabilities: [ { cve: "CVE-2008-2383", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2008-2383", }, ], notes: [ { category: "general", text: "CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \\n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xterm-368-2.2.aarch64", "openSUSE Tumbleweed:xterm-368-2.2.ppc64le", "openSUSE Tumbleweed:xterm-368-2.2.s390x", "openSUSE Tumbleweed:xterm-368-2.2.x86_64", "openSUSE Tumbleweed:xterm-bin-368-2.2.aarch64", "openSUSE Tumbleweed:xterm-bin-368-2.2.ppc64le", "openSUSE Tumbleweed:xterm-bin-368-2.2.s390x", "openSUSE Tumbleweed:xterm-bin-368-2.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2008-2383", url: "https://www.suse.com/security/cve/CVE-2008-2383", }, { category: "external", summary: "SUSE Bug 462917 for CVE-2008-2383", url: "https://bugzilla.suse.com/462917", }, { category: "external", summary: "SUSE Bug 464884 for CVE-2008-2383", url: "https://bugzilla.suse.com/464884", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xterm-368-2.2.aarch64", "openSUSE Tumbleweed:xterm-368-2.2.ppc64le", "openSUSE Tumbleweed:xterm-368-2.2.s390x", "openSUSE Tumbleweed:xterm-368-2.2.x86_64", "openSUSE Tumbleweed:xterm-bin-368-2.2.aarch64", "openSUSE Tumbleweed:xterm-bin-368-2.2.ppc64le", "openSUSE Tumbleweed:xterm-bin-368-2.2.s390x", "openSUSE Tumbleweed:xterm-bin-368-2.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "critical", }, ], title: "CVE-2008-2383", }, { cve: "CVE-2021-27135", ids: [ { system_name: "SUSE CVE Page", text: "https://www.suse.com/security/cve/CVE-2021-27135", }, ], notes: [ { category: "general", text: "xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UTF-8 combining character sequence.", title: "CVE description", }, ], product_status: { recommended: [ "openSUSE Tumbleweed:xterm-368-2.2.aarch64", "openSUSE Tumbleweed:xterm-368-2.2.ppc64le", "openSUSE Tumbleweed:xterm-368-2.2.s390x", "openSUSE Tumbleweed:xterm-368-2.2.x86_64", "openSUSE Tumbleweed:xterm-bin-368-2.2.aarch64", "openSUSE Tumbleweed:xterm-bin-368-2.2.ppc64le", "openSUSE Tumbleweed:xterm-bin-368-2.2.s390x", "openSUSE Tumbleweed:xterm-bin-368-2.2.x86_64", ], }, references: [ { category: "external", summary: "CVE-2021-27135", url: "https://www.suse.com/security/cve/CVE-2021-27135", }, { category: "external", summary: "SUSE Bug 1182091 for CVE-2021-27135", url: "https://bugzilla.suse.com/1182091", }, { category: "external", summary: "SUSE Bug 1189857 for CVE-2021-27135", url: "https://bugzilla.suse.com/1189857", }, { category: "external", summary: "SUSE Bug 1190262 for CVE-2021-27135", url: "https://bugzilla.suse.com/1190262", }, { category: "external", summary: "SUSE Bug 1225632 for CVE-2021-27135", url: "https://bugzilla.suse.com/1225632", }, ], remediations: [ { category: "vendor_fix", details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", product_ids: [ "openSUSE Tumbleweed:xterm-368-2.2.aarch64", "openSUSE Tumbleweed:xterm-368-2.2.ppc64le", "openSUSE Tumbleweed:xterm-368-2.2.s390x", "openSUSE Tumbleweed:xterm-368-2.2.x86_64", "openSUSE Tumbleweed:xterm-bin-368-2.2.aarch64", "openSUSE Tumbleweed:xterm-bin-368-2.2.ppc64le", "openSUSE Tumbleweed:xterm-bin-368-2.2.s390x", "openSUSE Tumbleweed:xterm-bin-368-2.2.x86_64", ], }, ], scores: [ { cvss_v3: { baseScore: 7.5, baseSeverity: "HIGH", vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", version: "3.1", }, products: [ "openSUSE Tumbleweed:xterm-368-2.2.aarch64", "openSUSE Tumbleweed:xterm-368-2.2.ppc64le", "openSUSE Tumbleweed:xterm-368-2.2.s390x", "openSUSE Tumbleweed:xterm-368-2.2.x86_64", "openSUSE Tumbleweed:xterm-bin-368-2.2.aarch64", "openSUSE Tumbleweed:xterm-bin-368-2.2.ppc64le", "openSUSE Tumbleweed:xterm-bin-368-2.2.s390x", "openSUSE Tumbleweed:xterm-bin-368-2.2.x86_64", ], }, ], threats: [ { category: "impact", date: "2024-06-15T00:00:00Z", details: "important", }, ], title: "CVE-2021-27135", }, ], }
rhsa-2009:0019
Vulnerability from csaf_redhat
Published
2009-01-07 13:42
Modified
2024-11-22 02:26
Summary
Red Hat Security Advisory: hanterm-xf security update
Notes
Topic
An updated hanterm-xf package to correct a security issue is now available
for Red Hat Enterprise Linux 2.1.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Details
Hanterm is a replacement for xterm, a X Window System terminal emulator,
that supports Hangul input and output.
A flaw was found in the Hanterm handling of Device Control Request Status
String (DECRQSS) escape sequences. An attacker could create a malicious
text file (or log entry, if unfiltered) that could run arbitrary commands
if read by a victim inside a Hanterm window. (CVE-2008-2383)
All hanterm-xf users are advised to upgrade to the updated package, which
contains a backported patch to resolve this issue. All running instances of
hanterm must be restarted for the update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An updated hanterm-xf package to correct a security issue is now available\nfor Red Hat Enterprise Linux 2.1.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.", title: "Topic", }, { category: "general", text: "Hanterm is a replacement for xterm, a X Window System terminal emulator,\nthat supports Hangul input and output.\n\nA flaw was found in the Hanterm handling of Device Control Request Status\nString (DECRQSS) escape sequences. An attacker could create a malicious\ntext file (or log entry, if unfiltered) that could run arbitrary commands\nif read by a victim inside a Hanterm window. (CVE-2008-2383)\n\nAll hanterm-xf users are advised to upgrade to the updated package, which\ncontains a backported patch to resolve this issue. All running instances of\nhanterm must be restarted for the update to take effect.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2009:0019", url: "https://access.redhat.com/errata/RHSA-2009:0019", }, { category: "external", summary: "http://www.redhat.com/security/updates/classification/#important", url: "http://www.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "478888", url: "https://bugzilla.redhat.com/show_bug.cgi?id=478888", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0019.json", }, ], title: "Red Hat Security Advisory: hanterm-xf security update", tracking: { current_release_date: "2024-11-22T02:26:45+00:00", generator: { date: "2024-11-22T02:26:45+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2009:0019", initial_release_date: "2009-01-07T13:42:00+00:00", revision_history: [ { date: "2009-01-07T13:42:00+00:00", number: "1", summary: "Initial version", }, { date: "2009-01-07T08:42:50+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T02:26:45+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ", product: { name: "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ", product_id: "2.1AS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:2.1::as", }, }, }, { category: "product_name", name: "Red Hat Linux Advanced Workstation 2.1", product: { name: "Red Hat Linux Advanced Workstation 2.1", product_id: "2.1AW", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:2.1::aw", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux ES version 2.1", product: { name: "Red Hat Enterprise Linux ES version 2.1", product_id: "2.1ES", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:2.1::es", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux WS version 2.1", product: { name: "Red Hat Enterprise Linux WS version 2.1", product_id: "2.1WS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:2.1::ws", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "hanterm-xf-1:2.0.5-5.AS21.2.ia64", product: { name: "hanterm-xf-1:2.0.5-5.AS21.2.ia64", product_id: "hanterm-xf-1:2.0.5-5.AS21.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/hanterm-xf@2.0.5-5.AS21.2?arch=ia64&epoch=1", }, }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "hanterm-xf-1:2.0.5-5.AS21.2.src", product: { name: "hanterm-xf-1:2.0.5-5.AS21.2.src", product_id: "hanterm-xf-1:2.0.5-5.AS21.2.src", product_identification_helper: { purl: "pkg:rpm/redhat/hanterm-xf@2.0.5-5.AS21.2?arch=src&epoch=1", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "hanterm-xf-1:2.0.5-5.AS21.2.i386", product: { name: "hanterm-xf-1:2.0.5-5.AS21.2.i386", product_id: "hanterm-xf-1:2.0.5-5.AS21.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/hanterm-xf@2.0.5-5.AS21.2?arch=i386&epoch=1", }, }, }, ], category: "architecture", name: "i386", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ", product_id: "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.i386", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.i386", relates_to_product_reference: "2.1AS", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ", product_id: "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.ia64", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.ia64", relates_to_product_reference: "2.1AS", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.src as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ", product_id: "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.src", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.src", relates_to_product_reference: "2.1AS", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.i386 as a component of Red Hat Linux Advanced Workstation 2.1", product_id: "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.i386", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.i386", relates_to_product_reference: "2.1AW", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.ia64 as a component of Red Hat Linux Advanced Workstation 2.1", product_id: "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.ia64", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.ia64", relates_to_product_reference: "2.1AW", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.src as a component of Red Hat Linux Advanced Workstation 2.1", product_id: "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.src", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.src", relates_to_product_reference: "2.1AW", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.i386 as a component of Red Hat Enterprise Linux ES version 2.1", product_id: "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.i386", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.i386", relates_to_product_reference: "2.1ES", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.ia64 as a component of Red Hat Enterprise Linux ES version 2.1", product_id: "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.ia64", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.ia64", relates_to_product_reference: "2.1ES", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.src as a component of Red Hat Enterprise Linux ES version 2.1", product_id: "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.src", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.src", relates_to_product_reference: "2.1ES", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.i386 as a component of Red Hat Enterprise Linux WS version 2.1", product_id: "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.i386", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.i386", relates_to_product_reference: "2.1WS", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.ia64 as a component of Red Hat Enterprise Linux WS version 2.1", product_id: "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.ia64", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.ia64", relates_to_product_reference: "2.1WS", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.src as a component of Red Hat Enterprise Linux WS version 2.1", product_id: "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.src", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.src", relates_to_product_reference: "2.1WS", }, ], }, vulnerabilities: [ { cve: "CVE-2008-2383", discovery_date: "2008-12-29T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "478888", }, ], notes: [ { category: "description", text: "CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \\n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.", title: "Vulnerability description", }, { category: "summary", text: "xterm: arbitrary command injection", title: "Vulnerability summary", }, ], product_status: { fixed: [ "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.src", "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.src", "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.src", "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2008-2383", }, { category: "external", summary: "RHBZ#478888", url: "https://bugzilla.redhat.com/show_bug.cgi?id=478888", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2008-2383", url: "https://www.cve.org/CVERecord?id=CVE-2008-2383", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2008-2383", url: "https://nvd.nist.gov/vuln/detail/CVE-2008-2383", }, ], release_date: "2008-12-29T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-01-07T13:42:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.src", "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.src", "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.src", "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:0019", }, ], threats: [ { category: "impact", details: "Important", }, ], title: "xterm: arbitrary command injection", }, ], }
rhsa-2009:0018
Vulnerability from csaf_redhat
Published
2009-01-07 11:09
Modified
2024-11-22 02:26
Summary
Red Hat Security Advisory: xterm security update
Notes
Topic
An updated xterm package to correct a security issue is now available for
Red Hat Enterprise Linux 3, 4, and 5.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Details
The xterm program is a terminal emulator for the X Window System.
A flaw was found in the xterm handling of Device Control Request Status
String (DECRQSS) escape sequences. An attacker could create a malicious
text file (or log entry, if unfiltered) that could run arbitrary commands
if read by a victim inside an xterm window. (CVE-2008-2383)
All xterm users are advised to upgrade to the updated package, which
contains a backported patch to resolve this issue. All running instances of
xterm must be restarted for the update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An updated xterm package to correct a security issue is now available for\nRed Hat Enterprise Linux 3, 4, and 5.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.", title: "Topic", }, { category: "general", text: "The xterm program is a terminal emulator for the X Window System.\n\nA flaw was found in the xterm handling of Device Control Request Status\nString (DECRQSS) escape sequences. An attacker could create a malicious\ntext file (or log entry, if unfiltered) that could run arbitrary commands\nif read by a victim inside an xterm window. (CVE-2008-2383)\n\nAll xterm users are advised to upgrade to the updated package, which\ncontains a backported patch to resolve this issue. All running instances of\nxterm must be restarted for the update to take effect.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2009:0018", url: "https://access.redhat.com/errata/RHSA-2009:0018", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "478888", url: "https://bugzilla.redhat.com/show_bug.cgi?id=478888", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0018.json", }, ], title: "Red Hat Security Advisory: xterm security update", tracking: { current_release_date: "2024-11-22T02:26:41+00:00", generator: { date: "2024-11-22T02:26:41+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2009:0018", initial_release_date: "2009-01-07T11:09:00+00:00", revision_history: [ { date: "2009-01-07T11:09:00+00:00", number: "1", summary: "Initial version", }, { date: "2009-01-07T06:09:39+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T02:26:41+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AS version 4", product: { name: "Red Hat Enterprise Linux AS version 4", product_id: "4AS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::as", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Desktop version 4", product: { name: "Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::desktop", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux ES version 4", product: { name: "Red Hat Enterprise Linux ES version 4", product_id: "4ES", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::es", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux WS version 4", product: { name: "Red Hat Enterprise Linux WS version 4", product_id: "4WS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::ws", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux AS version 3", product: { name: "Red Hat Enterprise Linux AS version 3", product_id: "3AS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:3::as", }, }, }, { category: "product_name", name: "Red Hat Desktop version 3", product: { name: "Red Hat Desktop version 3", product_id: "3Desktop", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:3::desktop", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux ES version 3", product: { name: "Red Hat Enterprise Linux ES version 3", product_id: "3ES", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:3::es", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux WS version 3", product: { name: "Red Hat Enterprise Linux WS version 3", product_id: "3WS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:3::ws", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product: { name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux (v. 5 server)", product: { name: "Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::server", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "xterm-0:192-8.el4_7.2.ia64", product: { name: "xterm-0:192-8.el4_7.2.ia64", product_id: "xterm-0:192-8.el4_7.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@192-8.el4_7.2?arch=ia64", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:192-8.el4_7.2.ia64", product: { name: "xterm-debuginfo-0:192-8.el4_7.2.ia64", product_id: "xterm-debuginfo-0:192-8.el4_7.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@192-8.el4_7.2?arch=ia64", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:179-11.EL3.ia64", product: { name: "xterm-debuginfo-0:179-11.EL3.ia64", product_id: "xterm-debuginfo-0:179-11.EL3.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@179-11.EL3?arch=ia64", }, }, }, { category: "product_version", name: "xterm-0:179-11.EL3.ia64", product: { name: "xterm-0:179-11.EL3.ia64", product_id: "xterm-0:179-11.EL3.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@179-11.EL3?arch=ia64", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:215-5.el5_2.2.ia64", product: { name: "xterm-debuginfo-0:215-5.el5_2.2.ia64", product_id: "xterm-debuginfo-0:215-5.el5_2.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@215-5.el5_2.2?arch=ia64", }, }, }, { category: "product_version", name: "xterm-0:215-5.el5_2.2.ia64", product: { name: "xterm-0:215-5.el5_2.2.ia64", product_id: "xterm-0:215-5.el5_2.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@215-5.el5_2.2?arch=ia64", }, }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "xterm-0:192-8.el4_7.2.src", product: { name: "xterm-0:192-8.el4_7.2.src", product_id: "xterm-0:192-8.el4_7.2.src", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@192-8.el4_7.2?arch=src", }, }, }, { category: "product_version", name: "xterm-0:179-11.EL3.src", product: { name: "xterm-0:179-11.EL3.src", product_id: "xterm-0:179-11.EL3.src", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@179-11.EL3?arch=src", }, }, }, { category: "product_version", name: "xterm-0:215-5.el5_2.2.src", product: { name: "xterm-0:215-5.el5_2.2.src", product_id: "xterm-0:215-5.el5_2.2.src", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@215-5.el5_2.2?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "xterm-0:192-8.el4_7.2.x86_64", product: { name: "xterm-0:192-8.el4_7.2.x86_64", product_id: "xterm-0:192-8.el4_7.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@192-8.el4_7.2?arch=x86_64", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:192-8.el4_7.2.x86_64", product: { name: "xterm-debuginfo-0:192-8.el4_7.2.x86_64", product_id: "xterm-debuginfo-0:192-8.el4_7.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@192-8.el4_7.2?arch=x86_64", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:179-11.EL3.x86_64", product: { name: "xterm-debuginfo-0:179-11.EL3.x86_64", product_id: "xterm-debuginfo-0:179-11.EL3.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@179-11.EL3?arch=x86_64", }, }, }, { category: "product_version", name: "xterm-0:179-11.EL3.x86_64", product: { name: "xterm-0:179-11.EL3.x86_64", product_id: "xterm-0:179-11.EL3.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@179-11.EL3?arch=x86_64", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:215-5.el5_2.2.x86_64", product: { name: "xterm-debuginfo-0:215-5.el5_2.2.x86_64", product_id: "xterm-debuginfo-0:215-5.el5_2.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@215-5.el5_2.2?arch=x86_64", }, }, }, { category: "product_version", name: "xterm-0:215-5.el5_2.2.x86_64", product: { name: "xterm-0:215-5.el5_2.2.x86_64", product_id: "xterm-0:215-5.el5_2.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@215-5.el5_2.2?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "xterm-0:192-8.el4_7.2.i386", product: { name: "xterm-0:192-8.el4_7.2.i386", product_id: "xterm-0:192-8.el4_7.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@192-8.el4_7.2?arch=i386", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:192-8.el4_7.2.i386", product: { name: "xterm-debuginfo-0:192-8.el4_7.2.i386", product_id: "xterm-debuginfo-0:192-8.el4_7.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@192-8.el4_7.2?arch=i386", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:179-11.EL3.i386", product: { name: "xterm-debuginfo-0:179-11.EL3.i386", product_id: "xterm-debuginfo-0:179-11.EL3.i386", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@179-11.EL3?arch=i386", }, }, }, { category: "product_version", name: "xterm-0:179-11.EL3.i386", product: { name: "xterm-0:179-11.EL3.i386", product_id: "xterm-0:179-11.EL3.i386", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@179-11.EL3?arch=i386", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:215-5.el5_2.2.i386", product: { name: "xterm-debuginfo-0:215-5.el5_2.2.i386", product_id: "xterm-debuginfo-0:215-5.el5_2.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@215-5.el5_2.2?arch=i386", }, }, }, { category: "product_version", name: "xterm-0:215-5.el5_2.2.i386", product: { name: "xterm-0:215-5.el5_2.2.i386", product_id: "xterm-0:215-5.el5_2.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@215-5.el5_2.2?arch=i386", }, }, }, ], category: "architecture", name: "i386", }, { branches: [ { category: "product_version", name: "xterm-0:192-8.el4_7.2.ppc", product: { name: "xterm-0:192-8.el4_7.2.ppc", product_id: "xterm-0:192-8.el4_7.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@192-8.el4_7.2?arch=ppc", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:192-8.el4_7.2.ppc", product: { name: "xterm-debuginfo-0:192-8.el4_7.2.ppc", product_id: "xterm-debuginfo-0:192-8.el4_7.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@192-8.el4_7.2?arch=ppc", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:179-11.EL3.ppc", product: { name: "xterm-debuginfo-0:179-11.EL3.ppc", product_id: "xterm-debuginfo-0:179-11.EL3.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@179-11.EL3?arch=ppc", }, }, }, { category: "product_version", name: "xterm-0:179-11.EL3.ppc", product: { name: "xterm-0:179-11.EL3.ppc", product_id: "xterm-0:179-11.EL3.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@179-11.EL3?arch=ppc", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:215-5.el5_2.2.ppc", product: { name: "xterm-debuginfo-0:215-5.el5_2.2.ppc", product_id: "xterm-debuginfo-0:215-5.el5_2.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@215-5.el5_2.2?arch=ppc", }, }, }, { category: "product_version", name: "xterm-0:215-5.el5_2.2.ppc", product: { name: "xterm-0:215-5.el5_2.2.ppc", product_id: "xterm-0:215-5.el5_2.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@215-5.el5_2.2?arch=ppc", }, }, }, ], category: "architecture", name: "ppc", }, { branches: [ { category: "product_version", name: "xterm-0:192-8.el4_7.2.s390x", product: { name: "xterm-0:192-8.el4_7.2.s390x", product_id: "xterm-0:192-8.el4_7.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@192-8.el4_7.2?arch=s390x", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:192-8.el4_7.2.s390x", product: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390x", product_id: "xterm-debuginfo-0:192-8.el4_7.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@192-8.el4_7.2?arch=s390x", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:179-11.EL3.s390x", product: { name: "xterm-debuginfo-0:179-11.EL3.s390x", product_id: "xterm-debuginfo-0:179-11.EL3.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@179-11.EL3?arch=s390x", }, }, }, { category: "product_version", name: "xterm-0:179-11.EL3.s390x", product: { name: "xterm-0:179-11.EL3.s390x", product_id: "xterm-0:179-11.EL3.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@179-11.EL3?arch=s390x", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:215-5.el5_2.2.s390x", product: { name: "xterm-debuginfo-0:215-5.el5_2.2.s390x", product_id: "xterm-debuginfo-0:215-5.el5_2.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@215-5.el5_2.2?arch=s390x", }, }, }, { category: "product_version", name: "xterm-0:215-5.el5_2.2.s390x", product: { name: "xterm-0:215-5.el5_2.2.s390x", product_id: "xterm-0:215-5.el5_2.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@215-5.el5_2.2?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "xterm-0:192-8.el4_7.2.s390", product: { name: "xterm-0:192-8.el4_7.2.s390", product_id: "xterm-0:192-8.el4_7.2.s390", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@192-8.el4_7.2?arch=s390", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:192-8.el4_7.2.s390", product: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390", product_id: "xterm-debuginfo-0:192-8.el4_7.2.s390", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@192-8.el4_7.2?arch=s390", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:179-11.EL3.s390", product: { name: "xterm-debuginfo-0:179-11.EL3.s390", product_id: "xterm-debuginfo-0:179-11.EL3.s390", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@179-11.EL3?arch=s390", }, }, }, { category: "product_version", name: "xterm-0:179-11.EL3.s390", product: { name: "xterm-0:179-11.EL3.s390", product_id: "xterm-0:179-11.EL3.s390", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@179-11.EL3?arch=s390", }, }, }, ], category: "architecture", name: "s390", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.i386 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-0:179-11.EL3.i386", }, product_reference: "xterm-0:179-11.EL3.i386", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ia64 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-0:179-11.EL3.ia64", }, product_reference: "xterm-0:179-11.EL3.ia64", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ppc as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-0:179-11.EL3.ppc", }, product_reference: "xterm-0:179-11.EL3.ppc", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-0:179-11.EL3.s390", }, product_reference: "xterm-0:179-11.EL3.s390", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390x as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-0:179-11.EL3.s390x", }, product_reference: "xterm-0:179-11.EL3.s390x", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.src as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-0:179-11.EL3.src", }, product_reference: "xterm-0:179-11.EL3.src", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.x86_64 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-0:179-11.EL3.x86_64", }, product_reference: "xterm-0:179-11.EL3.x86_64", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.i386 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-debuginfo-0:179-11.EL3.i386", }, product_reference: "xterm-debuginfo-0:179-11.EL3.i386", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ia64 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-debuginfo-0:179-11.EL3.ia64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ia64", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ppc as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-debuginfo-0:179-11.EL3.ppc", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ppc", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-debuginfo-0:179-11.EL3.s390", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390x as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-debuginfo-0:179-11.EL3.s390x", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390x", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.x86_64 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-debuginfo-0:179-11.EL3.x86_64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.x86_64", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.i386 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-0:179-11.EL3.i386", }, product_reference: "xterm-0:179-11.EL3.i386", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ia64 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-0:179-11.EL3.ia64", }, product_reference: "xterm-0:179-11.EL3.ia64", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ppc as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-0:179-11.EL3.ppc", }, product_reference: "xterm-0:179-11.EL3.ppc", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-0:179-11.EL3.s390", }, product_reference: "xterm-0:179-11.EL3.s390", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390x as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-0:179-11.EL3.s390x", }, product_reference: "xterm-0:179-11.EL3.s390x", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.src as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-0:179-11.EL3.src", }, product_reference: "xterm-0:179-11.EL3.src", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.x86_64 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-0:179-11.EL3.x86_64", }, product_reference: "xterm-0:179-11.EL3.x86_64", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.i386 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-debuginfo-0:179-11.EL3.i386", }, product_reference: "xterm-debuginfo-0:179-11.EL3.i386", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ia64 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-debuginfo-0:179-11.EL3.ia64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ia64", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ppc as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-debuginfo-0:179-11.EL3.ppc", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ppc", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-debuginfo-0:179-11.EL3.s390", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390x as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-debuginfo-0:179-11.EL3.s390x", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390x", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.x86_64 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-debuginfo-0:179-11.EL3.x86_64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.x86_64", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.i386 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-0:179-11.EL3.i386", }, product_reference: "xterm-0:179-11.EL3.i386", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ia64 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-0:179-11.EL3.ia64", }, product_reference: "xterm-0:179-11.EL3.ia64", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ppc as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-0:179-11.EL3.ppc", }, product_reference: "xterm-0:179-11.EL3.ppc", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-0:179-11.EL3.s390", }, product_reference: "xterm-0:179-11.EL3.s390", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390x as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-0:179-11.EL3.s390x", }, product_reference: "xterm-0:179-11.EL3.s390x", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.src as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-0:179-11.EL3.src", }, product_reference: "xterm-0:179-11.EL3.src", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.x86_64 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-0:179-11.EL3.x86_64", }, product_reference: "xterm-0:179-11.EL3.x86_64", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.i386 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-debuginfo-0:179-11.EL3.i386", }, product_reference: "xterm-debuginfo-0:179-11.EL3.i386", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ia64 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-debuginfo-0:179-11.EL3.ia64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ia64", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ppc as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-debuginfo-0:179-11.EL3.ppc", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ppc", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-debuginfo-0:179-11.EL3.s390", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390x as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-debuginfo-0:179-11.EL3.s390x", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390x", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.x86_64 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-debuginfo-0:179-11.EL3.x86_64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.x86_64", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.i386 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-0:179-11.EL3.i386", }, product_reference: "xterm-0:179-11.EL3.i386", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ia64 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-0:179-11.EL3.ia64", }, product_reference: "xterm-0:179-11.EL3.ia64", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ppc as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-0:179-11.EL3.ppc", }, product_reference: "xterm-0:179-11.EL3.ppc", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-0:179-11.EL3.s390", }, product_reference: "xterm-0:179-11.EL3.s390", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390x as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-0:179-11.EL3.s390x", }, product_reference: "xterm-0:179-11.EL3.s390x", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.src as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-0:179-11.EL3.src", }, product_reference: "xterm-0:179-11.EL3.src", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.x86_64 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-0:179-11.EL3.x86_64", }, product_reference: "xterm-0:179-11.EL3.x86_64", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.i386 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-debuginfo-0:179-11.EL3.i386", }, product_reference: "xterm-debuginfo-0:179-11.EL3.i386", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ia64 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-debuginfo-0:179-11.EL3.ia64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ia64", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ppc as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-debuginfo-0:179-11.EL3.ppc", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ppc", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-debuginfo-0:179-11.EL3.s390", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390x as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-debuginfo-0:179-11.EL3.s390x", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390x", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.x86_64 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-debuginfo-0:179-11.EL3.x86_64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.x86_64", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-0:192-8.el4_7.2.i386", }, product_reference: "xterm-0:192-8.el4_7.2.i386", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-0:192-8.el4_7.2.s390", }, product_reference: "xterm-0:192-8.el4_7.2.s390", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.src as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-0:192-8.el4_7.2.src", }, product_reference: "xterm-0:192-8.el4_7.2.src", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-debuginfo-0:192-8.el4_7.2.i386", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.i386", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-debuginfo-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-debuginfo-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-debuginfo-0:192-8.el4_7.2.s390", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-debuginfo-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-debuginfo-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-0:192-8.el4_7.2.i386", }, product_reference: "xterm-0:192-8.el4_7.2.i386", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-0:192-8.el4_7.2.s390", }, product_reference: "xterm-0:192-8.el4_7.2.s390", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.src as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-0:192-8.el4_7.2.src", }, product_reference: "xterm-0:192-8.el4_7.2.src", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.i386", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.i386", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.s390", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-0:192-8.el4_7.2.i386", }, product_reference: "xterm-0:192-8.el4_7.2.i386", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-0:192-8.el4_7.2.s390", }, product_reference: "xterm-0:192-8.el4_7.2.s390", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.src as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-0:192-8.el4_7.2.src", }, product_reference: "xterm-0:192-8.el4_7.2.src", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-debuginfo-0:192-8.el4_7.2.i386", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.i386", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-debuginfo-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-debuginfo-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-debuginfo-0:192-8.el4_7.2.s390", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-debuginfo-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-debuginfo-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-0:192-8.el4_7.2.i386", }, product_reference: "xterm-0:192-8.el4_7.2.i386", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-0:192-8.el4_7.2.s390", }, product_reference: "xterm-0:192-8.el4_7.2.s390", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.src as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-0:192-8.el4_7.2.src", }, product_reference: "xterm-0:192-8.el4_7.2.src", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-debuginfo-0:192-8.el4_7.2.i386", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.i386", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-debuginfo-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-debuginfo-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-debuginfo-0:192-8.el4_7.2.s390", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-debuginfo-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-debuginfo-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-0:215-5.el5_2.2.i386", }, product_reference: "xterm-0:215-5.el5_2.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-0:215-5.el5_2.2.ia64", }, product_reference: "xterm-0:215-5.el5_2.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-0:215-5.el5_2.2.ppc", }, product_reference: "xterm-0:215-5.el5_2.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-0:215-5.el5_2.2.s390x", }, product_reference: "xterm-0:215-5.el5_2.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-0:215-5.el5_2.2.src", }, product_reference: "xterm-0:215-5.el5_2.2.src", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-0:215-5.el5_2.2.x86_64", }, product_reference: "xterm-0:215-5.el5_2.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-debuginfo-0:215-5.el5_2.2.i386", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-debuginfo-0:215-5.el5_2.2.ia64", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-debuginfo-0:215-5.el5_2.2.ppc", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-debuginfo-0:215-5.el5_2.2.s390x", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-debuginfo-0:215-5.el5_2.2.x86_64", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-0:215-5.el5_2.2.i386", }, product_reference: "xterm-0:215-5.el5_2.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-0:215-5.el5_2.2.ia64", }, product_reference: "xterm-0:215-5.el5_2.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-0:215-5.el5_2.2.ppc", }, product_reference: "xterm-0:215-5.el5_2.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-0:215-5.el5_2.2.s390x", }, product_reference: "xterm-0:215-5.el5_2.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.src as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-0:215-5.el5_2.2.src", }, product_reference: "xterm-0:215-5.el5_2.2.src", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-0:215-5.el5_2.2.x86_64", }, product_reference: "xterm-0:215-5.el5_2.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-debuginfo-0:215-5.el5_2.2.i386", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-debuginfo-0:215-5.el5_2.2.ia64", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-debuginfo-0:215-5.el5_2.2.ppc", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-debuginfo-0:215-5.el5_2.2.s390x", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-debuginfo-0:215-5.el5_2.2.x86_64", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.x86_64", relates_to_product_reference: "5Server", }, ], }, vulnerabilities: [ { cve: "CVE-2008-2383", discovery_date: "2008-12-29T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "478888", }, ], notes: [ { category: "description", text: "CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \\n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.", title: "Vulnerability description", }, { category: "summary", text: "xterm: arbitrary command injection", title: "Vulnerability summary", }, ], product_status: { fixed: [ "3AS:xterm-0:179-11.EL3.i386", "3AS:xterm-0:179-11.EL3.ia64", "3AS:xterm-0:179-11.EL3.ppc", "3AS:xterm-0:179-11.EL3.s390", "3AS:xterm-0:179-11.EL3.s390x", "3AS:xterm-0:179-11.EL3.src", "3AS:xterm-0:179-11.EL3.x86_64", "3AS:xterm-debuginfo-0:179-11.EL3.i386", "3AS:xterm-debuginfo-0:179-11.EL3.ia64", "3AS:xterm-debuginfo-0:179-11.EL3.ppc", "3AS:xterm-debuginfo-0:179-11.EL3.s390", "3AS:xterm-debuginfo-0:179-11.EL3.s390x", "3AS:xterm-debuginfo-0:179-11.EL3.x86_64", "3Desktop:xterm-0:179-11.EL3.i386", "3Desktop:xterm-0:179-11.EL3.ia64", "3Desktop:xterm-0:179-11.EL3.ppc", "3Desktop:xterm-0:179-11.EL3.s390", "3Desktop:xterm-0:179-11.EL3.s390x", "3Desktop:xterm-0:179-11.EL3.src", "3Desktop:xterm-0:179-11.EL3.x86_64", "3Desktop:xterm-debuginfo-0:179-11.EL3.i386", "3Desktop:xterm-debuginfo-0:179-11.EL3.ia64", "3Desktop:xterm-debuginfo-0:179-11.EL3.ppc", "3Desktop:xterm-debuginfo-0:179-11.EL3.s390", "3Desktop:xterm-debuginfo-0:179-11.EL3.s390x", "3Desktop:xterm-debuginfo-0:179-11.EL3.x86_64", "3ES:xterm-0:179-11.EL3.i386", "3ES:xterm-0:179-11.EL3.ia64", "3ES:xterm-0:179-11.EL3.ppc", "3ES:xterm-0:179-11.EL3.s390", "3ES:xterm-0:179-11.EL3.s390x", "3ES:xterm-0:179-11.EL3.src", "3ES:xterm-0:179-11.EL3.x86_64", "3ES:xterm-debuginfo-0:179-11.EL3.i386", "3ES:xterm-debuginfo-0:179-11.EL3.ia64", "3ES:xterm-debuginfo-0:179-11.EL3.ppc", "3ES:xterm-debuginfo-0:179-11.EL3.s390", "3ES:xterm-debuginfo-0:179-11.EL3.s390x", "3ES:xterm-debuginfo-0:179-11.EL3.x86_64", "3WS:xterm-0:179-11.EL3.i386", "3WS:xterm-0:179-11.EL3.ia64", "3WS:xterm-0:179-11.EL3.ppc", "3WS:xterm-0:179-11.EL3.s390", "3WS:xterm-0:179-11.EL3.s390x", "3WS:xterm-0:179-11.EL3.src", "3WS:xterm-0:179-11.EL3.x86_64", "3WS:xterm-debuginfo-0:179-11.EL3.i386", "3WS:xterm-debuginfo-0:179-11.EL3.ia64", "3WS:xterm-debuginfo-0:179-11.EL3.ppc", "3WS:xterm-debuginfo-0:179-11.EL3.s390", "3WS:xterm-debuginfo-0:179-11.EL3.s390x", "3WS:xterm-debuginfo-0:179-11.EL3.x86_64", "4AS:xterm-0:192-8.el4_7.2.i386", "4AS:xterm-0:192-8.el4_7.2.ia64", "4AS:xterm-0:192-8.el4_7.2.ppc", "4AS:xterm-0:192-8.el4_7.2.s390", "4AS:xterm-0:192-8.el4_7.2.s390x", "4AS:xterm-0:192-8.el4_7.2.src", "4AS:xterm-0:192-8.el4_7.2.x86_64", "4AS:xterm-debuginfo-0:192-8.el4_7.2.i386", "4AS:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4AS:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4AS:xterm-debuginfo-0:192-8.el4_7.2.s390", "4AS:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4AS:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "4Desktop:xterm-0:192-8.el4_7.2.i386", "4Desktop:xterm-0:192-8.el4_7.2.ia64", "4Desktop:xterm-0:192-8.el4_7.2.ppc", "4Desktop:xterm-0:192-8.el4_7.2.s390", "4Desktop:xterm-0:192-8.el4_7.2.s390x", "4Desktop:xterm-0:192-8.el4_7.2.src", "4Desktop:xterm-0:192-8.el4_7.2.x86_64", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.i386", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.s390", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "4ES:xterm-0:192-8.el4_7.2.i386", "4ES:xterm-0:192-8.el4_7.2.ia64", "4ES:xterm-0:192-8.el4_7.2.ppc", "4ES:xterm-0:192-8.el4_7.2.s390", "4ES:xterm-0:192-8.el4_7.2.s390x", "4ES:xterm-0:192-8.el4_7.2.src", "4ES:xterm-0:192-8.el4_7.2.x86_64", "4ES:xterm-debuginfo-0:192-8.el4_7.2.i386", "4ES:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4ES:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4ES:xterm-debuginfo-0:192-8.el4_7.2.s390", "4ES:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4ES:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "4WS:xterm-0:192-8.el4_7.2.i386", "4WS:xterm-0:192-8.el4_7.2.ia64", "4WS:xterm-0:192-8.el4_7.2.ppc", "4WS:xterm-0:192-8.el4_7.2.s390", "4WS:xterm-0:192-8.el4_7.2.s390x", "4WS:xterm-0:192-8.el4_7.2.src", "4WS:xterm-0:192-8.el4_7.2.x86_64", "4WS:xterm-debuginfo-0:192-8.el4_7.2.i386", "4WS:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4WS:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4WS:xterm-debuginfo-0:192-8.el4_7.2.s390", "4WS:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4WS:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "5Client:xterm-0:215-5.el5_2.2.i386", "5Client:xterm-0:215-5.el5_2.2.ia64", "5Client:xterm-0:215-5.el5_2.2.ppc", "5Client:xterm-0:215-5.el5_2.2.s390x", "5Client:xterm-0:215-5.el5_2.2.src", "5Client:xterm-0:215-5.el5_2.2.x86_64", "5Client:xterm-debuginfo-0:215-5.el5_2.2.i386", "5Client:xterm-debuginfo-0:215-5.el5_2.2.ia64", "5Client:xterm-debuginfo-0:215-5.el5_2.2.ppc", "5Client:xterm-debuginfo-0:215-5.el5_2.2.s390x", "5Client:xterm-debuginfo-0:215-5.el5_2.2.x86_64", "5Server:xterm-0:215-5.el5_2.2.i386", "5Server:xterm-0:215-5.el5_2.2.ia64", "5Server:xterm-0:215-5.el5_2.2.ppc", "5Server:xterm-0:215-5.el5_2.2.s390x", "5Server:xterm-0:215-5.el5_2.2.src", "5Server:xterm-0:215-5.el5_2.2.x86_64", "5Server:xterm-debuginfo-0:215-5.el5_2.2.i386", "5Server:xterm-debuginfo-0:215-5.el5_2.2.ia64", "5Server:xterm-debuginfo-0:215-5.el5_2.2.ppc", "5Server:xterm-debuginfo-0:215-5.el5_2.2.s390x", "5Server:xterm-debuginfo-0:215-5.el5_2.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2008-2383", }, { category: "external", summary: "RHBZ#478888", url: "https://bugzilla.redhat.com/show_bug.cgi?id=478888", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2008-2383", url: "https://www.cve.org/CVERecord?id=CVE-2008-2383", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2008-2383", url: "https://nvd.nist.gov/vuln/detail/CVE-2008-2383", }, ], release_date: "2008-12-29T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-01-07T11:09:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "3AS:xterm-0:179-11.EL3.i386", "3AS:xterm-0:179-11.EL3.ia64", "3AS:xterm-0:179-11.EL3.ppc", "3AS:xterm-0:179-11.EL3.s390", "3AS:xterm-0:179-11.EL3.s390x", "3AS:xterm-0:179-11.EL3.src", "3AS:xterm-0:179-11.EL3.x86_64", "3AS:xterm-debuginfo-0:179-11.EL3.i386", "3AS:xterm-debuginfo-0:179-11.EL3.ia64", "3AS:xterm-debuginfo-0:179-11.EL3.ppc", "3AS:xterm-debuginfo-0:179-11.EL3.s390", "3AS:xterm-debuginfo-0:179-11.EL3.s390x", "3AS:xterm-debuginfo-0:179-11.EL3.x86_64", "3Desktop:xterm-0:179-11.EL3.i386", "3Desktop:xterm-0:179-11.EL3.ia64", "3Desktop:xterm-0:179-11.EL3.ppc", "3Desktop:xterm-0:179-11.EL3.s390", "3Desktop:xterm-0:179-11.EL3.s390x", "3Desktop:xterm-0:179-11.EL3.src", "3Desktop:xterm-0:179-11.EL3.x86_64", "3Desktop:xterm-debuginfo-0:179-11.EL3.i386", "3Desktop:xterm-debuginfo-0:179-11.EL3.ia64", "3Desktop:xterm-debuginfo-0:179-11.EL3.ppc", "3Desktop:xterm-debuginfo-0:179-11.EL3.s390", "3Desktop:xterm-debuginfo-0:179-11.EL3.s390x", "3Desktop:xterm-debuginfo-0:179-11.EL3.x86_64", "3ES:xterm-0:179-11.EL3.i386", "3ES:xterm-0:179-11.EL3.ia64", "3ES:xterm-0:179-11.EL3.ppc", "3ES:xterm-0:179-11.EL3.s390", "3ES:xterm-0:179-11.EL3.s390x", "3ES:xterm-0:179-11.EL3.src", "3ES:xterm-0:179-11.EL3.x86_64", "3ES:xterm-debuginfo-0:179-11.EL3.i386", "3ES:xterm-debuginfo-0:179-11.EL3.ia64", "3ES:xterm-debuginfo-0:179-11.EL3.ppc", "3ES:xterm-debuginfo-0:179-11.EL3.s390", "3ES:xterm-debuginfo-0:179-11.EL3.s390x", "3ES:xterm-debuginfo-0:179-11.EL3.x86_64", "3WS:xterm-0:179-11.EL3.i386", "3WS:xterm-0:179-11.EL3.ia64", "3WS:xterm-0:179-11.EL3.ppc", "3WS:xterm-0:179-11.EL3.s390", "3WS:xterm-0:179-11.EL3.s390x", "3WS:xterm-0:179-11.EL3.src", "3WS:xterm-0:179-11.EL3.x86_64", "3WS:xterm-debuginfo-0:179-11.EL3.i386", "3WS:xterm-debuginfo-0:179-11.EL3.ia64", "3WS:xterm-debuginfo-0:179-11.EL3.ppc", "3WS:xterm-debuginfo-0:179-11.EL3.s390", "3WS:xterm-debuginfo-0:179-11.EL3.s390x", "3WS:xterm-debuginfo-0:179-11.EL3.x86_64", "4AS:xterm-0:192-8.el4_7.2.i386", "4AS:xterm-0:192-8.el4_7.2.ia64", "4AS:xterm-0:192-8.el4_7.2.ppc", "4AS:xterm-0:192-8.el4_7.2.s390", "4AS:xterm-0:192-8.el4_7.2.s390x", "4AS:xterm-0:192-8.el4_7.2.src", "4AS:xterm-0:192-8.el4_7.2.x86_64", "4AS:xterm-debuginfo-0:192-8.el4_7.2.i386", "4AS:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4AS:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4AS:xterm-debuginfo-0:192-8.el4_7.2.s390", "4AS:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4AS:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "4Desktop:xterm-0:192-8.el4_7.2.i386", "4Desktop:xterm-0:192-8.el4_7.2.ia64", "4Desktop:xterm-0:192-8.el4_7.2.ppc", "4Desktop:xterm-0:192-8.el4_7.2.s390", "4Desktop:xterm-0:192-8.el4_7.2.s390x", "4Desktop:xterm-0:192-8.el4_7.2.src", "4Desktop:xterm-0:192-8.el4_7.2.x86_64", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.i386", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.s390", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "4ES:xterm-0:192-8.el4_7.2.i386", "4ES:xterm-0:192-8.el4_7.2.ia64", "4ES:xterm-0:192-8.el4_7.2.ppc", "4ES:xterm-0:192-8.el4_7.2.s390", "4ES:xterm-0:192-8.el4_7.2.s390x", "4ES:xterm-0:192-8.el4_7.2.src", "4ES:xterm-0:192-8.el4_7.2.x86_64", "4ES:xterm-debuginfo-0:192-8.el4_7.2.i386", "4ES:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4ES:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4ES:xterm-debuginfo-0:192-8.el4_7.2.s390", "4ES:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4ES:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "4WS:xterm-0:192-8.el4_7.2.i386", "4WS:xterm-0:192-8.el4_7.2.ia64", "4WS:xterm-0:192-8.el4_7.2.ppc", "4WS:xterm-0:192-8.el4_7.2.s390", "4WS:xterm-0:192-8.el4_7.2.s390x", "4WS:xterm-0:192-8.el4_7.2.src", "4WS:xterm-0:192-8.el4_7.2.x86_64", "4WS:xterm-debuginfo-0:192-8.el4_7.2.i386", "4WS:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4WS:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4WS:xterm-debuginfo-0:192-8.el4_7.2.s390", "4WS:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4WS:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "5Client:xterm-0:215-5.el5_2.2.i386", "5Client:xterm-0:215-5.el5_2.2.ia64", "5Client:xterm-0:215-5.el5_2.2.ppc", "5Client:xterm-0:215-5.el5_2.2.s390x", "5Client:xterm-0:215-5.el5_2.2.src", "5Client:xterm-0:215-5.el5_2.2.x86_64", "5Client:xterm-debuginfo-0:215-5.el5_2.2.i386", "5Client:xterm-debuginfo-0:215-5.el5_2.2.ia64", "5Client:xterm-debuginfo-0:215-5.el5_2.2.ppc", "5Client:xterm-debuginfo-0:215-5.el5_2.2.s390x", "5Client:xterm-debuginfo-0:215-5.el5_2.2.x86_64", "5Server:xterm-0:215-5.el5_2.2.i386", "5Server:xterm-0:215-5.el5_2.2.ia64", "5Server:xterm-0:215-5.el5_2.2.ppc", "5Server:xterm-0:215-5.el5_2.2.s390x", "5Server:xterm-0:215-5.el5_2.2.src", "5Server:xterm-0:215-5.el5_2.2.x86_64", "5Server:xterm-debuginfo-0:215-5.el5_2.2.i386", "5Server:xterm-debuginfo-0:215-5.el5_2.2.ia64", "5Server:xterm-debuginfo-0:215-5.el5_2.2.ppc", "5Server:xterm-debuginfo-0:215-5.el5_2.2.s390x", "5Server:xterm-debuginfo-0:215-5.el5_2.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:0018", }, ], threats: [ { category: "impact", details: "Important", }, ], title: "xterm: arbitrary command injection", }, ], }
rhsa-2009_0018
Vulnerability from csaf_redhat
Published
2009-01-07 11:09
Modified
2024-11-22 02:26
Summary
Red Hat Security Advisory: xterm security update
Notes
Topic
An updated xterm package to correct a security issue is now available for
Red Hat Enterprise Linux 3, 4, and 5.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Details
The xterm program is a terminal emulator for the X Window System.
A flaw was found in the xterm handling of Device Control Request Status
String (DECRQSS) escape sequences. An attacker could create a malicious
text file (or log entry, if unfiltered) that could run arbitrary commands
if read by a victim inside an xterm window. (CVE-2008-2383)
All xterm users are advised to upgrade to the updated package, which
contains a backported patch to resolve this issue. All running instances of
xterm must be restarted for the update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An updated xterm package to correct a security issue is now available for\nRed Hat Enterprise Linux 3, 4, and 5.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.", title: "Topic", }, { category: "general", text: "The xterm program is a terminal emulator for the X Window System.\n\nA flaw was found in the xterm handling of Device Control Request Status\nString (DECRQSS) escape sequences. An attacker could create a malicious\ntext file (or log entry, if unfiltered) that could run arbitrary commands\nif read by a victim inside an xterm window. (CVE-2008-2383)\n\nAll xterm users are advised to upgrade to the updated package, which\ncontains a backported patch to resolve this issue. All running instances of\nxterm must be restarted for the update to take effect.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2009:0018", url: "https://access.redhat.com/errata/RHSA-2009:0018", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "478888", url: "https://bugzilla.redhat.com/show_bug.cgi?id=478888", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0018.json", }, ], title: "Red Hat Security Advisory: xterm security update", tracking: { current_release_date: "2024-11-22T02:26:41+00:00", generator: { date: "2024-11-22T02:26:41+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2009:0018", initial_release_date: "2009-01-07T11:09:00+00:00", revision_history: [ { date: "2009-01-07T11:09:00+00:00", number: "1", summary: "Initial version", }, { date: "2009-01-07T06:09:39+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T02:26:41+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AS version 4", product: { name: "Red Hat Enterprise Linux AS version 4", product_id: "4AS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::as", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Desktop version 4", product: { name: "Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::desktop", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux ES version 4", product: { name: "Red Hat Enterprise Linux ES version 4", product_id: "4ES", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::es", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux WS version 4", product: { name: "Red Hat Enterprise Linux WS version 4", product_id: "4WS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::ws", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux AS version 3", product: { name: "Red Hat Enterprise Linux AS version 3", product_id: "3AS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:3::as", }, }, }, { category: "product_name", name: "Red Hat Desktop version 3", product: { name: "Red Hat Desktop version 3", product_id: "3Desktop", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:3::desktop", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux ES version 3", product: { name: "Red Hat Enterprise Linux ES version 3", product_id: "3ES", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:3::es", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux WS version 3", product: { name: "Red Hat Enterprise Linux WS version 3", product_id: "3WS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:3::ws", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product: { name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux (v. 5 server)", product: { name: "Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::server", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "xterm-0:192-8.el4_7.2.ia64", product: { name: "xterm-0:192-8.el4_7.2.ia64", product_id: "xterm-0:192-8.el4_7.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@192-8.el4_7.2?arch=ia64", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:192-8.el4_7.2.ia64", product: { name: "xterm-debuginfo-0:192-8.el4_7.2.ia64", product_id: "xterm-debuginfo-0:192-8.el4_7.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@192-8.el4_7.2?arch=ia64", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:179-11.EL3.ia64", product: { name: "xterm-debuginfo-0:179-11.EL3.ia64", product_id: "xterm-debuginfo-0:179-11.EL3.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@179-11.EL3?arch=ia64", }, }, }, { category: "product_version", name: "xterm-0:179-11.EL3.ia64", product: { name: "xterm-0:179-11.EL3.ia64", product_id: "xterm-0:179-11.EL3.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@179-11.EL3?arch=ia64", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:215-5.el5_2.2.ia64", product: { name: "xterm-debuginfo-0:215-5.el5_2.2.ia64", product_id: "xterm-debuginfo-0:215-5.el5_2.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@215-5.el5_2.2?arch=ia64", }, }, }, { category: "product_version", name: "xterm-0:215-5.el5_2.2.ia64", product: { name: "xterm-0:215-5.el5_2.2.ia64", product_id: "xterm-0:215-5.el5_2.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@215-5.el5_2.2?arch=ia64", }, }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "xterm-0:192-8.el4_7.2.src", product: { name: "xterm-0:192-8.el4_7.2.src", product_id: "xterm-0:192-8.el4_7.2.src", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@192-8.el4_7.2?arch=src", }, }, }, { category: "product_version", name: "xterm-0:179-11.EL3.src", product: { name: "xterm-0:179-11.EL3.src", product_id: "xterm-0:179-11.EL3.src", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@179-11.EL3?arch=src", }, }, }, { category: "product_version", name: "xterm-0:215-5.el5_2.2.src", product: { name: "xterm-0:215-5.el5_2.2.src", product_id: "xterm-0:215-5.el5_2.2.src", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@215-5.el5_2.2?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "xterm-0:192-8.el4_7.2.x86_64", product: { name: "xterm-0:192-8.el4_7.2.x86_64", product_id: "xterm-0:192-8.el4_7.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@192-8.el4_7.2?arch=x86_64", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:192-8.el4_7.2.x86_64", product: { name: "xterm-debuginfo-0:192-8.el4_7.2.x86_64", product_id: "xterm-debuginfo-0:192-8.el4_7.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@192-8.el4_7.2?arch=x86_64", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:179-11.EL3.x86_64", product: { name: "xterm-debuginfo-0:179-11.EL3.x86_64", product_id: "xterm-debuginfo-0:179-11.EL3.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@179-11.EL3?arch=x86_64", }, }, }, { category: "product_version", name: "xterm-0:179-11.EL3.x86_64", product: { name: "xterm-0:179-11.EL3.x86_64", product_id: "xterm-0:179-11.EL3.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@179-11.EL3?arch=x86_64", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:215-5.el5_2.2.x86_64", product: { name: "xterm-debuginfo-0:215-5.el5_2.2.x86_64", product_id: "xterm-debuginfo-0:215-5.el5_2.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@215-5.el5_2.2?arch=x86_64", }, }, }, { category: "product_version", name: "xterm-0:215-5.el5_2.2.x86_64", product: { name: "xterm-0:215-5.el5_2.2.x86_64", product_id: "xterm-0:215-5.el5_2.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@215-5.el5_2.2?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "xterm-0:192-8.el4_7.2.i386", product: { name: "xterm-0:192-8.el4_7.2.i386", product_id: "xterm-0:192-8.el4_7.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@192-8.el4_7.2?arch=i386", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:192-8.el4_7.2.i386", product: { name: "xterm-debuginfo-0:192-8.el4_7.2.i386", product_id: "xterm-debuginfo-0:192-8.el4_7.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@192-8.el4_7.2?arch=i386", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:179-11.EL3.i386", product: { name: "xterm-debuginfo-0:179-11.EL3.i386", product_id: "xterm-debuginfo-0:179-11.EL3.i386", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@179-11.EL3?arch=i386", }, }, }, { category: "product_version", name: "xterm-0:179-11.EL3.i386", product: { name: "xterm-0:179-11.EL3.i386", product_id: "xterm-0:179-11.EL3.i386", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@179-11.EL3?arch=i386", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:215-5.el5_2.2.i386", product: { name: "xterm-debuginfo-0:215-5.el5_2.2.i386", product_id: "xterm-debuginfo-0:215-5.el5_2.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@215-5.el5_2.2?arch=i386", }, }, }, { category: "product_version", name: "xterm-0:215-5.el5_2.2.i386", product: { name: "xterm-0:215-5.el5_2.2.i386", product_id: "xterm-0:215-5.el5_2.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@215-5.el5_2.2?arch=i386", }, }, }, ], category: "architecture", name: "i386", }, { branches: [ { category: "product_version", name: "xterm-0:192-8.el4_7.2.ppc", product: { name: "xterm-0:192-8.el4_7.2.ppc", product_id: "xterm-0:192-8.el4_7.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@192-8.el4_7.2?arch=ppc", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:192-8.el4_7.2.ppc", product: { name: "xterm-debuginfo-0:192-8.el4_7.2.ppc", product_id: "xterm-debuginfo-0:192-8.el4_7.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@192-8.el4_7.2?arch=ppc", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:179-11.EL3.ppc", product: { name: "xterm-debuginfo-0:179-11.EL3.ppc", product_id: "xterm-debuginfo-0:179-11.EL3.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@179-11.EL3?arch=ppc", }, }, }, { category: "product_version", name: "xterm-0:179-11.EL3.ppc", product: { name: "xterm-0:179-11.EL3.ppc", product_id: "xterm-0:179-11.EL3.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@179-11.EL3?arch=ppc", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:215-5.el5_2.2.ppc", product: { name: "xterm-debuginfo-0:215-5.el5_2.2.ppc", product_id: "xterm-debuginfo-0:215-5.el5_2.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@215-5.el5_2.2?arch=ppc", }, }, }, { category: "product_version", name: "xterm-0:215-5.el5_2.2.ppc", product: { name: "xterm-0:215-5.el5_2.2.ppc", product_id: "xterm-0:215-5.el5_2.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@215-5.el5_2.2?arch=ppc", }, }, }, ], category: "architecture", name: "ppc", }, { branches: [ { category: "product_version", name: "xterm-0:192-8.el4_7.2.s390x", product: { name: "xterm-0:192-8.el4_7.2.s390x", product_id: "xterm-0:192-8.el4_7.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@192-8.el4_7.2?arch=s390x", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:192-8.el4_7.2.s390x", product: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390x", product_id: "xterm-debuginfo-0:192-8.el4_7.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@192-8.el4_7.2?arch=s390x", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:179-11.EL3.s390x", product: { name: "xterm-debuginfo-0:179-11.EL3.s390x", product_id: "xterm-debuginfo-0:179-11.EL3.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@179-11.EL3?arch=s390x", }, }, }, { category: "product_version", name: "xterm-0:179-11.EL3.s390x", product: { name: "xterm-0:179-11.EL3.s390x", product_id: "xterm-0:179-11.EL3.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@179-11.EL3?arch=s390x", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:215-5.el5_2.2.s390x", product: { name: "xterm-debuginfo-0:215-5.el5_2.2.s390x", product_id: "xterm-debuginfo-0:215-5.el5_2.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@215-5.el5_2.2?arch=s390x", }, }, }, { category: "product_version", name: "xterm-0:215-5.el5_2.2.s390x", product: { name: "xterm-0:215-5.el5_2.2.s390x", product_id: "xterm-0:215-5.el5_2.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@215-5.el5_2.2?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "xterm-0:192-8.el4_7.2.s390", product: { name: "xterm-0:192-8.el4_7.2.s390", product_id: "xterm-0:192-8.el4_7.2.s390", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@192-8.el4_7.2?arch=s390", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:192-8.el4_7.2.s390", product: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390", product_id: "xterm-debuginfo-0:192-8.el4_7.2.s390", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@192-8.el4_7.2?arch=s390", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:179-11.EL3.s390", product: { name: "xterm-debuginfo-0:179-11.EL3.s390", product_id: "xterm-debuginfo-0:179-11.EL3.s390", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@179-11.EL3?arch=s390", }, }, }, { category: "product_version", name: "xterm-0:179-11.EL3.s390", product: { name: "xterm-0:179-11.EL3.s390", product_id: "xterm-0:179-11.EL3.s390", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@179-11.EL3?arch=s390", }, }, }, ], category: "architecture", name: "s390", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.i386 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-0:179-11.EL3.i386", }, product_reference: "xterm-0:179-11.EL3.i386", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ia64 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-0:179-11.EL3.ia64", }, product_reference: "xterm-0:179-11.EL3.ia64", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ppc as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-0:179-11.EL3.ppc", }, product_reference: "xterm-0:179-11.EL3.ppc", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-0:179-11.EL3.s390", }, product_reference: "xterm-0:179-11.EL3.s390", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390x as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-0:179-11.EL3.s390x", }, product_reference: "xterm-0:179-11.EL3.s390x", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.src as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-0:179-11.EL3.src", }, product_reference: "xterm-0:179-11.EL3.src", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.x86_64 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-0:179-11.EL3.x86_64", }, product_reference: "xterm-0:179-11.EL3.x86_64", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.i386 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-debuginfo-0:179-11.EL3.i386", }, product_reference: "xterm-debuginfo-0:179-11.EL3.i386", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ia64 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-debuginfo-0:179-11.EL3.ia64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ia64", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ppc as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-debuginfo-0:179-11.EL3.ppc", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ppc", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-debuginfo-0:179-11.EL3.s390", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390x as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-debuginfo-0:179-11.EL3.s390x", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390x", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.x86_64 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-debuginfo-0:179-11.EL3.x86_64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.x86_64", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.i386 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-0:179-11.EL3.i386", }, product_reference: "xterm-0:179-11.EL3.i386", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ia64 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-0:179-11.EL3.ia64", }, product_reference: "xterm-0:179-11.EL3.ia64", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ppc as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-0:179-11.EL3.ppc", }, product_reference: "xterm-0:179-11.EL3.ppc", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-0:179-11.EL3.s390", }, product_reference: "xterm-0:179-11.EL3.s390", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390x as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-0:179-11.EL3.s390x", }, product_reference: "xterm-0:179-11.EL3.s390x", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.src as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-0:179-11.EL3.src", }, product_reference: "xterm-0:179-11.EL3.src", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.x86_64 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-0:179-11.EL3.x86_64", }, product_reference: "xterm-0:179-11.EL3.x86_64", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.i386 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-debuginfo-0:179-11.EL3.i386", }, product_reference: "xterm-debuginfo-0:179-11.EL3.i386", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ia64 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-debuginfo-0:179-11.EL3.ia64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ia64", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ppc as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-debuginfo-0:179-11.EL3.ppc", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ppc", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-debuginfo-0:179-11.EL3.s390", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390x as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-debuginfo-0:179-11.EL3.s390x", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390x", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.x86_64 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-debuginfo-0:179-11.EL3.x86_64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.x86_64", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.i386 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-0:179-11.EL3.i386", }, product_reference: "xterm-0:179-11.EL3.i386", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ia64 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-0:179-11.EL3.ia64", }, product_reference: "xterm-0:179-11.EL3.ia64", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ppc as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-0:179-11.EL3.ppc", }, product_reference: "xterm-0:179-11.EL3.ppc", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-0:179-11.EL3.s390", }, product_reference: "xterm-0:179-11.EL3.s390", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390x as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-0:179-11.EL3.s390x", }, product_reference: "xterm-0:179-11.EL3.s390x", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.src as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-0:179-11.EL3.src", }, product_reference: "xterm-0:179-11.EL3.src", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.x86_64 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-0:179-11.EL3.x86_64", }, product_reference: "xterm-0:179-11.EL3.x86_64", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.i386 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-debuginfo-0:179-11.EL3.i386", }, product_reference: "xterm-debuginfo-0:179-11.EL3.i386", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ia64 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-debuginfo-0:179-11.EL3.ia64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ia64", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ppc as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-debuginfo-0:179-11.EL3.ppc", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ppc", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-debuginfo-0:179-11.EL3.s390", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390x as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-debuginfo-0:179-11.EL3.s390x", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390x", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.x86_64 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-debuginfo-0:179-11.EL3.x86_64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.x86_64", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.i386 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-0:179-11.EL3.i386", }, product_reference: "xterm-0:179-11.EL3.i386", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ia64 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-0:179-11.EL3.ia64", }, product_reference: "xterm-0:179-11.EL3.ia64", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ppc as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-0:179-11.EL3.ppc", }, product_reference: "xterm-0:179-11.EL3.ppc", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-0:179-11.EL3.s390", }, product_reference: "xterm-0:179-11.EL3.s390", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390x as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-0:179-11.EL3.s390x", }, product_reference: "xterm-0:179-11.EL3.s390x", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.src as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-0:179-11.EL3.src", }, product_reference: "xterm-0:179-11.EL3.src", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.x86_64 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-0:179-11.EL3.x86_64", }, product_reference: "xterm-0:179-11.EL3.x86_64", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.i386 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-debuginfo-0:179-11.EL3.i386", }, product_reference: "xterm-debuginfo-0:179-11.EL3.i386", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ia64 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-debuginfo-0:179-11.EL3.ia64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ia64", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ppc as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-debuginfo-0:179-11.EL3.ppc", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ppc", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-debuginfo-0:179-11.EL3.s390", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390x as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-debuginfo-0:179-11.EL3.s390x", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390x", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.x86_64 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-debuginfo-0:179-11.EL3.x86_64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.x86_64", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-0:192-8.el4_7.2.i386", }, product_reference: "xterm-0:192-8.el4_7.2.i386", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-0:192-8.el4_7.2.s390", }, product_reference: "xterm-0:192-8.el4_7.2.s390", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.src as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-0:192-8.el4_7.2.src", }, product_reference: "xterm-0:192-8.el4_7.2.src", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-debuginfo-0:192-8.el4_7.2.i386", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.i386", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-debuginfo-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-debuginfo-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-debuginfo-0:192-8.el4_7.2.s390", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-debuginfo-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-debuginfo-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-0:192-8.el4_7.2.i386", }, product_reference: "xterm-0:192-8.el4_7.2.i386", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-0:192-8.el4_7.2.s390", }, product_reference: "xterm-0:192-8.el4_7.2.s390", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.src as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-0:192-8.el4_7.2.src", }, product_reference: "xterm-0:192-8.el4_7.2.src", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.i386", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.i386", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.s390", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-0:192-8.el4_7.2.i386", }, product_reference: "xterm-0:192-8.el4_7.2.i386", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-0:192-8.el4_7.2.s390", }, product_reference: "xterm-0:192-8.el4_7.2.s390", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.src as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-0:192-8.el4_7.2.src", }, product_reference: "xterm-0:192-8.el4_7.2.src", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-debuginfo-0:192-8.el4_7.2.i386", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.i386", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-debuginfo-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-debuginfo-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-debuginfo-0:192-8.el4_7.2.s390", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-debuginfo-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-debuginfo-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-0:192-8.el4_7.2.i386", }, product_reference: "xterm-0:192-8.el4_7.2.i386", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-0:192-8.el4_7.2.s390", }, product_reference: "xterm-0:192-8.el4_7.2.s390", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.src as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-0:192-8.el4_7.2.src", }, product_reference: "xterm-0:192-8.el4_7.2.src", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-debuginfo-0:192-8.el4_7.2.i386", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.i386", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-debuginfo-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-debuginfo-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-debuginfo-0:192-8.el4_7.2.s390", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-debuginfo-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-debuginfo-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-0:215-5.el5_2.2.i386", }, product_reference: "xterm-0:215-5.el5_2.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-0:215-5.el5_2.2.ia64", }, product_reference: "xterm-0:215-5.el5_2.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-0:215-5.el5_2.2.ppc", }, product_reference: "xterm-0:215-5.el5_2.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-0:215-5.el5_2.2.s390x", }, product_reference: "xterm-0:215-5.el5_2.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-0:215-5.el5_2.2.src", }, product_reference: "xterm-0:215-5.el5_2.2.src", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-0:215-5.el5_2.2.x86_64", }, product_reference: "xterm-0:215-5.el5_2.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-debuginfo-0:215-5.el5_2.2.i386", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-debuginfo-0:215-5.el5_2.2.ia64", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-debuginfo-0:215-5.el5_2.2.ppc", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-debuginfo-0:215-5.el5_2.2.s390x", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-debuginfo-0:215-5.el5_2.2.x86_64", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-0:215-5.el5_2.2.i386", }, product_reference: "xterm-0:215-5.el5_2.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-0:215-5.el5_2.2.ia64", }, product_reference: "xterm-0:215-5.el5_2.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-0:215-5.el5_2.2.ppc", }, product_reference: "xterm-0:215-5.el5_2.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-0:215-5.el5_2.2.s390x", }, product_reference: "xterm-0:215-5.el5_2.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.src as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-0:215-5.el5_2.2.src", }, product_reference: "xterm-0:215-5.el5_2.2.src", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-0:215-5.el5_2.2.x86_64", }, product_reference: "xterm-0:215-5.el5_2.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-debuginfo-0:215-5.el5_2.2.i386", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-debuginfo-0:215-5.el5_2.2.ia64", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-debuginfo-0:215-5.el5_2.2.ppc", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-debuginfo-0:215-5.el5_2.2.s390x", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-debuginfo-0:215-5.el5_2.2.x86_64", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.x86_64", relates_to_product_reference: "5Server", }, ], }, vulnerabilities: [ { cve: "CVE-2008-2383", discovery_date: "2008-12-29T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "478888", }, ], notes: [ { category: "description", text: "CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \\n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.", title: "Vulnerability description", }, { category: "summary", text: "xterm: arbitrary command injection", title: "Vulnerability summary", }, ], product_status: { fixed: [ "3AS:xterm-0:179-11.EL3.i386", "3AS:xterm-0:179-11.EL3.ia64", "3AS:xterm-0:179-11.EL3.ppc", "3AS:xterm-0:179-11.EL3.s390", "3AS:xterm-0:179-11.EL3.s390x", "3AS:xterm-0:179-11.EL3.src", "3AS:xterm-0:179-11.EL3.x86_64", "3AS:xterm-debuginfo-0:179-11.EL3.i386", "3AS:xterm-debuginfo-0:179-11.EL3.ia64", "3AS:xterm-debuginfo-0:179-11.EL3.ppc", "3AS:xterm-debuginfo-0:179-11.EL3.s390", "3AS:xterm-debuginfo-0:179-11.EL3.s390x", "3AS:xterm-debuginfo-0:179-11.EL3.x86_64", "3Desktop:xterm-0:179-11.EL3.i386", "3Desktop:xterm-0:179-11.EL3.ia64", "3Desktop:xterm-0:179-11.EL3.ppc", "3Desktop:xterm-0:179-11.EL3.s390", "3Desktop:xterm-0:179-11.EL3.s390x", "3Desktop:xterm-0:179-11.EL3.src", "3Desktop:xterm-0:179-11.EL3.x86_64", "3Desktop:xterm-debuginfo-0:179-11.EL3.i386", "3Desktop:xterm-debuginfo-0:179-11.EL3.ia64", "3Desktop:xterm-debuginfo-0:179-11.EL3.ppc", "3Desktop:xterm-debuginfo-0:179-11.EL3.s390", "3Desktop:xterm-debuginfo-0:179-11.EL3.s390x", "3Desktop:xterm-debuginfo-0:179-11.EL3.x86_64", "3ES:xterm-0:179-11.EL3.i386", "3ES:xterm-0:179-11.EL3.ia64", "3ES:xterm-0:179-11.EL3.ppc", "3ES:xterm-0:179-11.EL3.s390", "3ES:xterm-0:179-11.EL3.s390x", "3ES:xterm-0:179-11.EL3.src", "3ES:xterm-0:179-11.EL3.x86_64", "3ES:xterm-debuginfo-0:179-11.EL3.i386", "3ES:xterm-debuginfo-0:179-11.EL3.ia64", "3ES:xterm-debuginfo-0:179-11.EL3.ppc", "3ES:xterm-debuginfo-0:179-11.EL3.s390", "3ES:xterm-debuginfo-0:179-11.EL3.s390x", "3ES:xterm-debuginfo-0:179-11.EL3.x86_64", "3WS:xterm-0:179-11.EL3.i386", "3WS:xterm-0:179-11.EL3.ia64", "3WS:xterm-0:179-11.EL3.ppc", "3WS:xterm-0:179-11.EL3.s390", "3WS:xterm-0:179-11.EL3.s390x", "3WS:xterm-0:179-11.EL3.src", "3WS:xterm-0:179-11.EL3.x86_64", "3WS:xterm-debuginfo-0:179-11.EL3.i386", "3WS:xterm-debuginfo-0:179-11.EL3.ia64", "3WS:xterm-debuginfo-0:179-11.EL3.ppc", "3WS:xterm-debuginfo-0:179-11.EL3.s390", "3WS:xterm-debuginfo-0:179-11.EL3.s390x", "3WS:xterm-debuginfo-0:179-11.EL3.x86_64", "4AS:xterm-0:192-8.el4_7.2.i386", "4AS:xterm-0:192-8.el4_7.2.ia64", "4AS:xterm-0:192-8.el4_7.2.ppc", "4AS:xterm-0:192-8.el4_7.2.s390", "4AS:xterm-0:192-8.el4_7.2.s390x", "4AS:xterm-0:192-8.el4_7.2.src", "4AS:xterm-0:192-8.el4_7.2.x86_64", "4AS:xterm-debuginfo-0:192-8.el4_7.2.i386", "4AS:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4AS:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4AS:xterm-debuginfo-0:192-8.el4_7.2.s390", "4AS:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4AS:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "4Desktop:xterm-0:192-8.el4_7.2.i386", "4Desktop:xterm-0:192-8.el4_7.2.ia64", "4Desktop:xterm-0:192-8.el4_7.2.ppc", "4Desktop:xterm-0:192-8.el4_7.2.s390", "4Desktop:xterm-0:192-8.el4_7.2.s390x", "4Desktop:xterm-0:192-8.el4_7.2.src", "4Desktop:xterm-0:192-8.el4_7.2.x86_64", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.i386", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.s390", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "4ES:xterm-0:192-8.el4_7.2.i386", "4ES:xterm-0:192-8.el4_7.2.ia64", "4ES:xterm-0:192-8.el4_7.2.ppc", "4ES:xterm-0:192-8.el4_7.2.s390", "4ES:xterm-0:192-8.el4_7.2.s390x", "4ES:xterm-0:192-8.el4_7.2.src", "4ES:xterm-0:192-8.el4_7.2.x86_64", "4ES:xterm-debuginfo-0:192-8.el4_7.2.i386", "4ES:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4ES:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4ES:xterm-debuginfo-0:192-8.el4_7.2.s390", "4ES:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4ES:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "4WS:xterm-0:192-8.el4_7.2.i386", "4WS:xterm-0:192-8.el4_7.2.ia64", "4WS:xterm-0:192-8.el4_7.2.ppc", "4WS:xterm-0:192-8.el4_7.2.s390", "4WS:xterm-0:192-8.el4_7.2.s390x", "4WS:xterm-0:192-8.el4_7.2.src", "4WS:xterm-0:192-8.el4_7.2.x86_64", "4WS:xterm-debuginfo-0:192-8.el4_7.2.i386", "4WS:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4WS:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4WS:xterm-debuginfo-0:192-8.el4_7.2.s390", "4WS:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4WS:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "5Client:xterm-0:215-5.el5_2.2.i386", "5Client:xterm-0:215-5.el5_2.2.ia64", "5Client:xterm-0:215-5.el5_2.2.ppc", "5Client:xterm-0:215-5.el5_2.2.s390x", "5Client:xterm-0:215-5.el5_2.2.src", "5Client:xterm-0:215-5.el5_2.2.x86_64", "5Client:xterm-debuginfo-0:215-5.el5_2.2.i386", "5Client:xterm-debuginfo-0:215-5.el5_2.2.ia64", "5Client:xterm-debuginfo-0:215-5.el5_2.2.ppc", "5Client:xterm-debuginfo-0:215-5.el5_2.2.s390x", "5Client:xterm-debuginfo-0:215-5.el5_2.2.x86_64", "5Server:xterm-0:215-5.el5_2.2.i386", "5Server:xterm-0:215-5.el5_2.2.ia64", "5Server:xterm-0:215-5.el5_2.2.ppc", "5Server:xterm-0:215-5.el5_2.2.s390x", "5Server:xterm-0:215-5.el5_2.2.src", "5Server:xterm-0:215-5.el5_2.2.x86_64", "5Server:xterm-debuginfo-0:215-5.el5_2.2.i386", "5Server:xterm-debuginfo-0:215-5.el5_2.2.ia64", "5Server:xterm-debuginfo-0:215-5.el5_2.2.ppc", "5Server:xterm-debuginfo-0:215-5.el5_2.2.s390x", "5Server:xterm-debuginfo-0:215-5.el5_2.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2008-2383", }, { category: "external", summary: "RHBZ#478888", url: "https://bugzilla.redhat.com/show_bug.cgi?id=478888", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2008-2383", url: "https://www.cve.org/CVERecord?id=CVE-2008-2383", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2008-2383", url: "https://nvd.nist.gov/vuln/detail/CVE-2008-2383", }, ], release_date: "2008-12-29T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-01-07T11:09:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "3AS:xterm-0:179-11.EL3.i386", "3AS:xterm-0:179-11.EL3.ia64", "3AS:xterm-0:179-11.EL3.ppc", "3AS:xterm-0:179-11.EL3.s390", "3AS:xterm-0:179-11.EL3.s390x", "3AS:xterm-0:179-11.EL3.src", "3AS:xterm-0:179-11.EL3.x86_64", "3AS:xterm-debuginfo-0:179-11.EL3.i386", "3AS:xterm-debuginfo-0:179-11.EL3.ia64", "3AS:xterm-debuginfo-0:179-11.EL3.ppc", "3AS:xterm-debuginfo-0:179-11.EL3.s390", "3AS:xterm-debuginfo-0:179-11.EL3.s390x", "3AS:xterm-debuginfo-0:179-11.EL3.x86_64", "3Desktop:xterm-0:179-11.EL3.i386", "3Desktop:xterm-0:179-11.EL3.ia64", "3Desktop:xterm-0:179-11.EL3.ppc", "3Desktop:xterm-0:179-11.EL3.s390", "3Desktop:xterm-0:179-11.EL3.s390x", "3Desktop:xterm-0:179-11.EL3.src", "3Desktop:xterm-0:179-11.EL3.x86_64", "3Desktop:xterm-debuginfo-0:179-11.EL3.i386", "3Desktop:xterm-debuginfo-0:179-11.EL3.ia64", "3Desktop:xterm-debuginfo-0:179-11.EL3.ppc", "3Desktop:xterm-debuginfo-0:179-11.EL3.s390", "3Desktop:xterm-debuginfo-0:179-11.EL3.s390x", "3Desktop:xterm-debuginfo-0:179-11.EL3.x86_64", "3ES:xterm-0:179-11.EL3.i386", "3ES:xterm-0:179-11.EL3.ia64", "3ES:xterm-0:179-11.EL3.ppc", "3ES:xterm-0:179-11.EL3.s390", "3ES:xterm-0:179-11.EL3.s390x", "3ES:xterm-0:179-11.EL3.src", "3ES:xterm-0:179-11.EL3.x86_64", "3ES:xterm-debuginfo-0:179-11.EL3.i386", "3ES:xterm-debuginfo-0:179-11.EL3.ia64", "3ES:xterm-debuginfo-0:179-11.EL3.ppc", "3ES:xterm-debuginfo-0:179-11.EL3.s390", "3ES:xterm-debuginfo-0:179-11.EL3.s390x", "3ES:xterm-debuginfo-0:179-11.EL3.x86_64", "3WS:xterm-0:179-11.EL3.i386", "3WS:xterm-0:179-11.EL3.ia64", "3WS:xterm-0:179-11.EL3.ppc", "3WS:xterm-0:179-11.EL3.s390", "3WS:xterm-0:179-11.EL3.s390x", "3WS:xterm-0:179-11.EL3.src", "3WS:xterm-0:179-11.EL3.x86_64", "3WS:xterm-debuginfo-0:179-11.EL3.i386", "3WS:xterm-debuginfo-0:179-11.EL3.ia64", "3WS:xterm-debuginfo-0:179-11.EL3.ppc", "3WS:xterm-debuginfo-0:179-11.EL3.s390", "3WS:xterm-debuginfo-0:179-11.EL3.s390x", "3WS:xterm-debuginfo-0:179-11.EL3.x86_64", "4AS:xterm-0:192-8.el4_7.2.i386", "4AS:xterm-0:192-8.el4_7.2.ia64", "4AS:xterm-0:192-8.el4_7.2.ppc", "4AS:xterm-0:192-8.el4_7.2.s390", "4AS:xterm-0:192-8.el4_7.2.s390x", "4AS:xterm-0:192-8.el4_7.2.src", "4AS:xterm-0:192-8.el4_7.2.x86_64", "4AS:xterm-debuginfo-0:192-8.el4_7.2.i386", "4AS:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4AS:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4AS:xterm-debuginfo-0:192-8.el4_7.2.s390", "4AS:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4AS:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "4Desktop:xterm-0:192-8.el4_7.2.i386", "4Desktop:xterm-0:192-8.el4_7.2.ia64", "4Desktop:xterm-0:192-8.el4_7.2.ppc", "4Desktop:xterm-0:192-8.el4_7.2.s390", "4Desktop:xterm-0:192-8.el4_7.2.s390x", "4Desktop:xterm-0:192-8.el4_7.2.src", "4Desktop:xterm-0:192-8.el4_7.2.x86_64", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.i386", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.s390", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "4ES:xterm-0:192-8.el4_7.2.i386", "4ES:xterm-0:192-8.el4_7.2.ia64", "4ES:xterm-0:192-8.el4_7.2.ppc", "4ES:xterm-0:192-8.el4_7.2.s390", "4ES:xterm-0:192-8.el4_7.2.s390x", "4ES:xterm-0:192-8.el4_7.2.src", "4ES:xterm-0:192-8.el4_7.2.x86_64", "4ES:xterm-debuginfo-0:192-8.el4_7.2.i386", "4ES:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4ES:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4ES:xterm-debuginfo-0:192-8.el4_7.2.s390", "4ES:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4ES:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "4WS:xterm-0:192-8.el4_7.2.i386", "4WS:xterm-0:192-8.el4_7.2.ia64", "4WS:xterm-0:192-8.el4_7.2.ppc", "4WS:xterm-0:192-8.el4_7.2.s390", "4WS:xterm-0:192-8.el4_7.2.s390x", "4WS:xterm-0:192-8.el4_7.2.src", "4WS:xterm-0:192-8.el4_7.2.x86_64", "4WS:xterm-debuginfo-0:192-8.el4_7.2.i386", "4WS:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4WS:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4WS:xterm-debuginfo-0:192-8.el4_7.2.s390", "4WS:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4WS:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "5Client:xterm-0:215-5.el5_2.2.i386", "5Client:xterm-0:215-5.el5_2.2.ia64", "5Client:xterm-0:215-5.el5_2.2.ppc", "5Client:xterm-0:215-5.el5_2.2.s390x", "5Client:xterm-0:215-5.el5_2.2.src", "5Client:xterm-0:215-5.el5_2.2.x86_64", "5Client:xterm-debuginfo-0:215-5.el5_2.2.i386", "5Client:xterm-debuginfo-0:215-5.el5_2.2.ia64", "5Client:xterm-debuginfo-0:215-5.el5_2.2.ppc", "5Client:xterm-debuginfo-0:215-5.el5_2.2.s390x", "5Client:xterm-debuginfo-0:215-5.el5_2.2.x86_64", "5Server:xterm-0:215-5.el5_2.2.i386", "5Server:xterm-0:215-5.el5_2.2.ia64", "5Server:xterm-0:215-5.el5_2.2.ppc", "5Server:xterm-0:215-5.el5_2.2.s390x", "5Server:xterm-0:215-5.el5_2.2.src", "5Server:xterm-0:215-5.el5_2.2.x86_64", "5Server:xterm-debuginfo-0:215-5.el5_2.2.i386", "5Server:xterm-debuginfo-0:215-5.el5_2.2.ia64", "5Server:xterm-debuginfo-0:215-5.el5_2.2.ppc", "5Server:xterm-debuginfo-0:215-5.el5_2.2.s390x", "5Server:xterm-debuginfo-0:215-5.el5_2.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:0018", }, ], threats: [ { category: "impact", details: "Important", }, ], title: "xterm: arbitrary command injection", }, ], }
RHSA-2009:0018
Vulnerability from csaf_redhat
Published
2009-01-07 11:09
Modified
2024-11-22 02:26
Summary
Red Hat Security Advisory: xterm security update
Notes
Topic
An updated xterm package to correct a security issue is now available for
Red Hat Enterprise Linux 3, 4, and 5.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Details
The xterm program is a terminal emulator for the X Window System.
A flaw was found in the xterm handling of Device Control Request Status
String (DECRQSS) escape sequences. An attacker could create a malicious
text file (or log entry, if unfiltered) that could run arbitrary commands
if read by a victim inside an xterm window. (CVE-2008-2383)
All xterm users are advised to upgrade to the updated package, which
contains a backported patch to resolve this issue. All running instances of
xterm must be restarted for the update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An updated xterm package to correct a security issue is now available for\nRed Hat Enterprise Linux 3, 4, and 5.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.", title: "Topic", }, { category: "general", text: "The xterm program is a terminal emulator for the X Window System.\n\nA flaw was found in the xterm handling of Device Control Request Status\nString (DECRQSS) escape sequences. An attacker could create a malicious\ntext file (or log entry, if unfiltered) that could run arbitrary commands\nif read by a victim inside an xterm window. (CVE-2008-2383)\n\nAll xterm users are advised to upgrade to the updated package, which\ncontains a backported patch to resolve this issue. All running instances of\nxterm must be restarted for the update to take effect.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2009:0018", url: "https://access.redhat.com/errata/RHSA-2009:0018", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "478888", url: "https://bugzilla.redhat.com/show_bug.cgi?id=478888", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0018.json", }, ], title: "Red Hat Security Advisory: xterm security update", tracking: { current_release_date: "2024-11-22T02:26:41+00:00", generator: { date: "2024-11-22T02:26:41+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2009:0018", initial_release_date: "2009-01-07T11:09:00+00:00", revision_history: [ { date: "2009-01-07T11:09:00+00:00", number: "1", summary: "Initial version", }, { date: "2009-01-07T06:09:39+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T02:26:41+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AS version 4", product: { name: "Red Hat Enterprise Linux AS version 4", product_id: "4AS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::as", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Desktop version 4", product: { name: "Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::desktop", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux ES version 4", product: { name: "Red Hat Enterprise Linux ES version 4", product_id: "4ES", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::es", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux WS version 4", product: { name: "Red Hat Enterprise Linux WS version 4", product_id: "4WS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:4::ws", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux AS version 3", product: { name: "Red Hat Enterprise Linux AS version 3", product_id: "3AS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:3::as", }, }, }, { category: "product_name", name: "Red Hat Desktop version 3", product: { name: "Red Hat Desktop version 3", product_id: "3Desktop", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:3::desktop", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux ES version 3", product: { name: "Red Hat Enterprise Linux ES version 3", product_id: "3ES", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:3::es", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux WS version 3", product: { name: "Red Hat Enterprise Linux WS version 3", product_id: "3WS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:3::ws", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product: { name: "Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux (v. 5 server)", product: { name: "Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:5::server", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "xterm-0:192-8.el4_7.2.ia64", product: { name: "xterm-0:192-8.el4_7.2.ia64", product_id: "xterm-0:192-8.el4_7.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@192-8.el4_7.2?arch=ia64", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:192-8.el4_7.2.ia64", product: { name: "xterm-debuginfo-0:192-8.el4_7.2.ia64", product_id: "xterm-debuginfo-0:192-8.el4_7.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@192-8.el4_7.2?arch=ia64", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:179-11.EL3.ia64", product: { name: "xterm-debuginfo-0:179-11.EL3.ia64", product_id: "xterm-debuginfo-0:179-11.EL3.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@179-11.EL3?arch=ia64", }, }, }, { category: "product_version", name: "xterm-0:179-11.EL3.ia64", product: { name: "xterm-0:179-11.EL3.ia64", product_id: "xterm-0:179-11.EL3.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@179-11.EL3?arch=ia64", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:215-5.el5_2.2.ia64", product: { name: "xterm-debuginfo-0:215-5.el5_2.2.ia64", product_id: "xterm-debuginfo-0:215-5.el5_2.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@215-5.el5_2.2?arch=ia64", }, }, }, { category: "product_version", name: "xterm-0:215-5.el5_2.2.ia64", product: { name: "xterm-0:215-5.el5_2.2.ia64", product_id: "xterm-0:215-5.el5_2.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@215-5.el5_2.2?arch=ia64", }, }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "xterm-0:192-8.el4_7.2.src", product: { name: "xterm-0:192-8.el4_7.2.src", product_id: "xterm-0:192-8.el4_7.2.src", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@192-8.el4_7.2?arch=src", }, }, }, { category: "product_version", name: "xterm-0:179-11.EL3.src", product: { name: "xterm-0:179-11.EL3.src", product_id: "xterm-0:179-11.EL3.src", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@179-11.EL3?arch=src", }, }, }, { category: "product_version", name: "xterm-0:215-5.el5_2.2.src", product: { name: "xterm-0:215-5.el5_2.2.src", product_id: "xterm-0:215-5.el5_2.2.src", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@215-5.el5_2.2?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "xterm-0:192-8.el4_7.2.x86_64", product: { name: "xterm-0:192-8.el4_7.2.x86_64", product_id: "xterm-0:192-8.el4_7.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@192-8.el4_7.2?arch=x86_64", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:192-8.el4_7.2.x86_64", product: { name: "xterm-debuginfo-0:192-8.el4_7.2.x86_64", product_id: "xterm-debuginfo-0:192-8.el4_7.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@192-8.el4_7.2?arch=x86_64", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:179-11.EL3.x86_64", product: { name: "xterm-debuginfo-0:179-11.EL3.x86_64", product_id: "xterm-debuginfo-0:179-11.EL3.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@179-11.EL3?arch=x86_64", }, }, }, { category: "product_version", name: "xterm-0:179-11.EL3.x86_64", product: { name: "xterm-0:179-11.EL3.x86_64", product_id: "xterm-0:179-11.EL3.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@179-11.EL3?arch=x86_64", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:215-5.el5_2.2.x86_64", product: { name: "xterm-debuginfo-0:215-5.el5_2.2.x86_64", product_id: "xterm-debuginfo-0:215-5.el5_2.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@215-5.el5_2.2?arch=x86_64", }, }, }, { category: "product_version", name: "xterm-0:215-5.el5_2.2.x86_64", product: { name: "xterm-0:215-5.el5_2.2.x86_64", product_id: "xterm-0:215-5.el5_2.2.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@215-5.el5_2.2?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "xterm-0:192-8.el4_7.2.i386", product: { name: "xterm-0:192-8.el4_7.2.i386", product_id: "xterm-0:192-8.el4_7.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@192-8.el4_7.2?arch=i386", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:192-8.el4_7.2.i386", product: { name: "xterm-debuginfo-0:192-8.el4_7.2.i386", product_id: "xterm-debuginfo-0:192-8.el4_7.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@192-8.el4_7.2?arch=i386", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:179-11.EL3.i386", product: { name: "xterm-debuginfo-0:179-11.EL3.i386", product_id: "xterm-debuginfo-0:179-11.EL3.i386", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@179-11.EL3?arch=i386", }, }, }, { category: "product_version", name: "xterm-0:179-11.EL3.i386", product: { name: "xterm-0:179-11.EL3.i386", product_id: "xterm-0:179-11.EL3.i386", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@179-11.EL3?arch=i386", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:215-5.el5_2.2.i386", product: { name: "xterm-debuginfo-0:215-5.el5_2.2.i386", product_id: "xterm-debuginfo-0:215-5.el5_2.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@215-5.el5_2.2?arch=i386", }, }, }, { category: "product_version", name: "xterm-0:215-5.el5_2.2.i386", product: { name: "xterm-0:215-5.el5_2.2.i386", product_id: "xterm-0:215-5.el5_2.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@215-5.el5_2.2?arch=i386", }, }, }, ], category: "architecture", name: "i386", }, { branches: [ { category: "product_version", name: "xterm-0:192-8.el4_7.2.ppc", product: { name: "xterm-0:192-8.el4_7.2.ppc", product_id: "xterm-0:192-8.el4_7.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@192-8.el4_7.2?arch=ppc", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:192-8.el4_7.2.ppc", product: { name: "xterm-debuginfo-0:192-8.el4_7.2.ppc", product_id: "xterm-debuginfo-0:192-8.el4_7.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@192-8.el4_7.2?arch=ppc", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:179-11.EL3.ppc", product: { name: "xterm-debuginfo-0:179-11.EL3.ppc", product_id: "xterm-debuginfo-0:179-11.EL3.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@179-11.EL3?arch=ppc", }, }, }, { category: "product_version", name: "xterm-0:179-11.EL3.ppc", product: { name: "xterm-0:179-11.EL3.ppc", product_id: "xterm-0:179-11.EL3.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@179-11.EL3?arch=ppc", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:215-5.el5_2.2.ppc", product: { name: "xterm-debuginfo-0:215-5.el5_2.2.ppc", product_id: "xterm-debuginfo-0:215-5.el5_2.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@215-5.el5_2.2?arch=ppc", }, }, }, { category: "product_version", name: "xterm-0:215-5.el5_2.2.ppc", product: { name: "xterm-0:215-5.el5_2.2.ppc", product_id: "xterm-0:215-5.el5_2.2.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@215-5.el5_2.2?arch=ppc", }, }, }, ], category: "architecture", name: "ppc", }, { branches: [ { category: "product_version", name: "xterm-0:192-8.el4_7.2.s390x", product: { name: "xterm-0:192-8.el4_7.2.s390x", product_id: "xterm-0:192-8.el4_7.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@192-8.el4_7.2?arch=s390x", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:192-8.el4_7.2.s390x", product: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390x", product_id: "xterm-debuginfo-0:192-8.el4_7.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@192-8.el4_7.2?arch=s390x", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:179-11.EL3.s390x", product: { name: "xterm-debuginfo-0:179-11.EL3.s390x", product_id: "xterm-debuginfo-0:179-11.EL3.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@179-11.EL3?arch=s390x", }, }, }, { category: "product_version", name: "xterm-0:179-11.EL3.s390x", product: { name: "xterm-0:179-11.EL3.s390x", product_id: "xterm-0:179-11.EL3.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@179-11.EL3?arch=s390x", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:215-5.el5_2.2.s390x", product: { name: "xterm-debuginfo-0:215-5.el5_2.2.s390x", product_id: "xterm-debuginfo-0:215-5.el5_2.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@215-5.el5_2.2?arch=s390x", }, }, }, { category: "product_version", name: "xterm-0:215-5.el5_2.2.s390x", product: { name: "xterm-0:215-5.el5_2.2.s390x", product_id: "xterm-0:215-5.el5_2.2.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@215-5.el5_2.2?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "xterm-0:192-8.el4_7.2.s390", product: { name: "xterm-0:192-8.el4_7.2.s390", product_id: "xterm-0:192-8.el4_7.2.s390", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@192-8.el4_7.2?arch=s390", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:192-8.el4_7.2.s390", product: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390", product_id: "xterm-debuginfo-0:192-8.el4_7.2.s390", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@192-8.el4_7.2?arch=s390", }, }, }, { category: "product_version", name: "xterm-debuginfo-0:179-11.EL3.s390", product: { name: "xterm-debuginfo-0:179-11.EL3.s390", product_id: "xterm-debuginfo-0:179-11.EL3.s390", product_identification_helper: { purl: "pkg:rpm/redhat/xterm-debuginfo@179-11.EL3?arch=s390", }, }, }, { category: "product_version", name: "xterm-0:179-11.EL3.s390", product: { name: "xterm-0:179-11.EL3.s390", product_id: "xterm-0:179-11.EL3.s390", product_identification_helper: { purl: "pkg:rpm/redhat/xterm@179-11.EL3?arch=s390", }, }, }, ], category: "architecture", name: "s390", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.i386 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-0:179-11.EL3.i386", }, product_reference: "xterm-0:179-11.EL3.i386", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ia64 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-0:179-11.EL3.ia64", }, product_reference: "xterm-0:179-11.EL3.ia64", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ppc as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-0:179-11.EL3.ppc", }, product_reference: "xterm-0:179-11.EL3.ppc", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-0:179-11.EL3.s390", }, product_reference: "xterm-0:179-11.EL3.s390", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390x as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-0:179-11.EL3.s390x", }, product_reference: "xterm-0:179-11.EL3.s390x", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.src as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-0:179-11.EL3.src", }, product_reference: "xterm-0:179-11.EL3.src", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.x86_64 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-0:179-11.EL3.x86_64", }, product_reference: "xterm-0:179-11.EL3.x86_64", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.i386 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-debuginfo-0:179-11.EL3.i386", }, product_reference: "xterm-debuginfo-0:179-11.EL3.i386", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ia64 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-debuginfo-0:179-11.EL3.ia64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ia64", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ppc as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-debuginfo-0:179-11.EL3.ppc", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ppc", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-debuginfo-0:179-11.EL3.s390", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390x as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-debuginfo-0:179-11.EL3.s390x", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390x", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.x86_64 as a component of Red Hat Enterprise Linux AS version 3", product_id: "3AS:xterm-debuginfo-0:179-11.EL3.x86_64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.x86_64", relates_to_product_reference: "3AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.i386 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-0:179-11.EL3.i386", }, product_reference: "xterm-0:179-11.EL3.i386", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ia64 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-0:179-11.EL3.ia64", }, product_reference: "xterm-0:179-11.EL3.ia64", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ppc as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-0:179-11.EL3.ppc", }, product_reference: "xterm-0:179-11.EL3.ppc", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-0:179-11.EL3.s390", }, product_reference: "xterm-0:179-11.EL3.s390", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390x as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-0:179-11.EL3.s390x", }, product_reference: "xterm-0:179-11.EL3.s390x", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.src as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-0:179-11.EL3.src", }, product_reference: "xterm-0:179-11.EL3.src", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.x86_64 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-0:179-11.EL3.x86_64", }, product_reference: "xterm-0:179-11.EL3.x86_64", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.i386 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-debuginfo-0:179-11.EL3.i386", }, product_reference: "xterm-debuginfo-0:179-11.EL3.i386", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ia64 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-debuginfo-0:179-11.EL3.ia64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ia64", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ppc as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-debuginfo-0:179-11.EL3.ppc", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ppc", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-debuginfo-0:179-11.EL3.s390", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390x as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-debuginfo-0:179-11.EL3.s390x", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390x", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.x86_64 as a component of Red Hat Desktop version 3", product_id: "3Desktop:xterm-debuginfo-0:179-11.EL3.x86_64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.x86_64", relates_to_product_reference: "3Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.i386 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-0:179-11.EL3.i386", }, product_reference: "xterm-0:179-11.EL3.i386", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ia64 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-0:179-11.EL3.ia64", }, product_reference: "xterm-0:179-11.EL3.ia64", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ppc as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-0:179-11.EL3.ppc", }, product_reference: "xterm-0:179-11.EL3.ppc", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-0:179-11.EL3.s390", }, product_reference: "xterm-0:179-11.EL3.s390", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390x as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-0:179-11.EL3.s390x", }, product_reference: "xterm-0:179-11.EL3.s390x", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.src as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-0:179-11.EL3.src", }, product_reference: "xterm-0:179-11.EL3.src", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.x86_64 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-0:179-11.EL3.x86_64", }, product_reference: "xterm-0:179-11.EL3.x86_64", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.i386 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-debuginfo-0:179-11.EL3.i386", }, product_reference: "xterm-debuginfo-0:179-11.EL3.i386", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ia64 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-debuginfo-0:179-11.EL3.ia64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ia64", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ppc as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-debuginfo-0:179-11.EL3.ppc", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ppc", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-debuginfo-0:179-11.EL3.s390", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390x as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-debuginfo-0:179-11.EL3.s390x", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390x", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.x86_64 as a component of Red Hat Enterprise Linux ES version 3", product_id: "3ES:xterm-debuginfo-0:179-11.EL3.x86_64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.x86_64", relates_to_product_reference: "3ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.i386 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-0:179-11.EL3.i386", }, product_reference: "xterm-0:179-11.EL3.i386", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ia64 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-0:179-11.EL3.ia64", }, product_reference: "xterm-0:179-11.EL3.ia64", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.ppc as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-0:179-11.EL3.ppc", }, product_reference: "xterm-0:179-11.EL3.ppc", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-0:179-11.EL3.s390", }, product_reference: "xterm-0:179-11.EL3.s390", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.s390x as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-0:179-11.EL3.s390x", }, product_reference: "xterm-0:179-11.EL3.s390x", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.src as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-0:179-11.EL3.src", }, product_reference: "xterm-0:179-11.EL3.src", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:179-11.EL3.x86_64 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-0:179-11.EL3.x86_64", }, product_reference: "xterm-0:179-11.EL3.x86_64", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.i386 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-debuginfo-0:179-11.EL3.i386", }, product_reference: "xterm-debuginfo-0:179-11.EL3.i386", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ia64 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-debuginfo-0:179-11.EL3.ia64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ia64", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.ppc as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-debuginfo-0:179-11.EL3.ppc", }, product_reference: "xterm-debuginfo-0:179-11.EL3.ppc", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-debuginfo-0:179-11.EL3.s390", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.s390x as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-debuginfo-0:179-11.EL3.s390x", }, product_reference: "xterm-debuginfo-0:179-11.EL3.s390x", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:179-11.EL3.x86_64 as a component of Red Hat Enterprise Linux WS version 3", product_id: "3WS:xterm-debuginfo-0:179-11.EL3.x86_64", }, product_reference: "xterm-debuginfo-0:179-11.EL3.x86_64", relates_to_product_reference: "3WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-0:192-8.el4_7.2.i386", }, product_reference: "xterm-0:192-8.el4_7.2.i386", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-0:192-8.el4_7.2.s390", }, product_reference: "xterm-0:192-8.el4_7.2.s390", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.src as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-0:192-8.el4_7.2.src", }, product_reference: "xterm-0:192-8.el4_7.2.src", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-debuginfo-0:192-8.el4_7.2.i386", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.i386", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-debuginfo-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-debuginfo-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-debuginfo-0:192-8.el4_7.2.s390", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-debuginfo-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux AS version 4", product_id: "4AS:xterm-debuginfo-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4AS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-0:192-8.el4_7.2.i386", }, product_reference: "xterm-0:192-8.el4_7.2.i386", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-0:192-8.el4_7.2.s390", }, product_reference: "xterm-0:192-8.el4_7.2.s390", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.src as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-0:192-8.el4_7.2.src", }, product_reference: "xterm-0:192-8.el4_7.2.src", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.i386", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.i386", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.s390", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4", product_id: "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4Desktop", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-0:192-8.el4_7.2.i386", }, product_reference: "xterm-0:192-8.el4_7.2.i386", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-0:192-8.el4_7.2.s390", }, product_reference: "xterm-0:192-8.el4_7.2.s390", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.src as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-0:192-8.el4_7.2.src", }, product_reference: "xterm-0:192-8.el4_7.2.src", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-debuginfo-0:192-8.el4_7.2.i386", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.i386", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-debuginfo-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-debuginfo-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-debuginfo-0:192-8.el4_7.2.s390", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-debuginfo-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux ES version 4", product_id: "4ES:xterm-debuginfo-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4ES", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-0:192-8.el4_7.2.i386", }, product_reference: "xterm-0:192-8.el4_7.2.i386", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-0:192-8.el4_7.2.s390", }, product_reference: "xterm-0:192-8.el4_7.2.s390", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.src as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-0:192-8.el4_7.2.src", }, product_reference: "xterm-0:192-8.el4_7.2.src", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.i386 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-debuginfo-0:192-8.el4_7.2.i386", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.i386", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ia64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-debuginfo-0:192-8.el4_7.2.ia64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ia64", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.ppc as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-debuginfo-0:192-8.el4_7.2.ppc", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.ppc", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-debuginfo-0:192-8.el4_7.2.s390", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.s390x as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-debuginfo-0:192-8.el4_7.2.s390x", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.s390x", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:192-8.el4_7.2.x86_64 as a component of Red Hat Enterprise Linux WS version 4", product_id: "4WS:xterm-debuginfo-0:192-8.el4_7.2.x86_64", }, product_reference: "xterm-debuginfo-0:192-8.el4_7.2.x86_64", relates_to_product_reference: "4WS", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-0:215-5.el5_2.2.i386", }, product_reference: "xterm-0:215-5.el5_2.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-0:215-5.el5_2.2.ia64", }, product_reference: "xterm-0:215-5.el5_2.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-0:215-5.el5_2.2.ppc", }, product_reference: "xterm-0:215-5.el5_2.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-0:215-5.el5_2.2.s390x", }, product_reference: "xterm-0:215-5.el5_2.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-0:215-5.el5_2.2.src", }, product_reference: "xterm-0:215-5.el5_2.2.src", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-0:215-5.el5_2.2.x86_64", }, product_reference: "xterm-0:215-5.el5_2.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-debuginfo-0:215-5.el5_2.2.i386", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.i386", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-debuginfo-0:215-5.el5_2.2.ia64", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.ia64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-debuginfo-0:215-5.el5_2.2.ppc", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.ppc", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-debuginfo-0:215-5.el5_2.2.s390x", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.s390x", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)", product_id: "5Client:xterm-debuginfo-0:215-5.el5_2.2.x86_64", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.x86_64", relates_to_product_reference: "5Client", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-0:215-5.el5_2.2.i386", }, product_reference: "xterm-0:215-5.el5_2.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-0:215-5.el5_2.2.ia64", }, product_reference: "xterm-0:215-5.el5_2.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-0:215-5.el5_2.2.ppc", }, product_reference: "xterm-0:215-5.el5_2.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-0:215-5.el5_2.2.s390x", }, product_reference: "xterm-0:215-5.el5_2.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.src as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-0:215-5.el5_2.2.src", }, product_reference: "xterm-0:215-5.el5_2.2.src", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-0:215-5.el5_2.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-0:215-5.el5_2.2.x86_64", }, product_reference: "xterm-0:215-5.el5_2.2.x86_64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.i386 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-debuginfo-0:215-5.el5_2.2.i386", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.i386", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-debuginfo-0:215-5.el5_2.2.ia64", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.ia64", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.ppc as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-debuginfo-0:215-5.el5_2.2.ppc", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.ppc", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.s390x as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-debuginfo-0:215-5.el5_2.2.s390x", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.s390x", relates_to_product_reference: "5Server", }, { category: "default_component_of", full_product_name: { name: "xterm-debuginfo-0:215-5.el5_2.2.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)", product_id: "5Server:xterm-debuginfo-0:215-5.el5_2.2.x86_64", }, product_reference: "xterm-debuginfo-0:215-5.el5_2.2.x86_64", relates_to_product_reference: "5Server", }, ], }, vulnerabilities: [ { cve: "CVE-2008-2383", discovery_date: "2008-12-29T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "478888", }, ], notes: [ { category: "description", text: "CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \\n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.", title: "Vulnerability description", }, { category: "summary", text: "xterm: arbitrary command injection", title: "Vulnerability summary", }, ], product_status: { fixed: [ "3AS:xterm-0:179-11.EL3.i386", "3AS:xterm-0:179-11.EL3.ia64", "3AS:xterm-0:179-11.EL3.ppc", "3AS:xterm-0:179-11.EL3.s390", "3AS:xterm-0:179-11.EL3.s390x", "3AS:xterm-0:179-11.EL3.src", "3AS:xterm-0:179-11.EL3.x86_64", "3AS:xterm-debuginfo-0:179-11.EL3.i386", "3AS:xterm-debuginfo-0:179-11.EL3.ia64", "3AS:xterm-debuginfo-0:179-11.EL3.ppc", "3AS:xterm-debuginfo-0:179-11.EL3.s390", "3AS:xterm-debuginfo-0:179-11.EL3.s390x", "3AS:xterm-debuginfo-0:179-11.EL3.x86_64", "3Desktop:xterm-0:179-11.EL3.i386", "3Desktop:xterm-0:179-11.EL3.ia64", "3Desktop:xterm-0:179-11.EL3.ppc", "3Desktop:xterm-0:179-11.EL3.s390", "3Desktop:xterm-0:179-11.EL3.s390x", "3Desktop:xterm-0:179-11.EL3.src", "3Desktop:xterm-0:179-11.EL3.x86_64", "3Desktop:xterm-debuginfo-0:179-11.EL3.i386", "3Desktop:xterm-debuginfo-0:179-11.EL3.ia64", "3Desktop:xterm-debuginfo-0:179-11.EL3.ppc", "3Desktop:xterm-debuginfo-0:179-11.EL3.s390", "3Desktop:xterm-debuginfo-0:179-11.EL3.s390x", "3Desktop:xterm-debuginfo-0:179-11.EL3.x86_64", "3ES:xterm-0:179-11.EL3.i386", "3ES:xterm-0:179-11.EL3.ia64", "3ES:xterm-0:179-11.EL3.ppc", "3ES:xterm-0:179-11.EL3.s390", "3ES:xterm-0:179-11.EL3.s390x", "3ES:xterm-0:179-11.EL3.src", "3ES:xterm-0:179-11.EL3.x86_64", "3ES:xterm-debuginfo-0:179-11.EL3.i386", "3ES:xterm-debuginfo-0:179-11.EL3.ia64", "3ES:xterm-debuginfo-0:179-11.EL3.ppc", "3ES:xterm-debuginfo-0:179-11.EL3.s390", "3ES:xterm-debuginfo-0:179-11.EL3.s390x", "3ES:xterm-debuginfo-0:179-11.EL3.x86_64", "3WS:xterm-0:179-11.EL3.i386", "3WS:xterm-0:179-11.EL3.ia64", "3WS:xterm-0:179-11.EL3.ppc", "3WS:xterm-0:179-11.EL3.s390", "3WS:xterm-0:179-11.EL3.s390x", "3WS:xterm-0:179-11.EL3.src", "3WS:xterm-0:179-11.EL3.x86_64", "3WS:xterm-debuginfo-0:179-11.EL3.i386", "3WS:xterm-debuginfo-0:179-11.EL3.ia64", "3WS:xterm-debuginfo-0:179-11.EL3.ppc", "3WS:xterm-debuginfo-0:179-11.EL3.s390", "3WS:xterm-debuginfo-0:179-11.EL3.s390x", "3WS:xterm-debuginfo-0:179-11.EL3.x86_64", "4AS:xterm-0:192-8.el4_7.2.i386", "4AS:xterm-0:192-8.el4_7.2.ia64", "4AS:xterm-0:192-8.el4_7.2.ppc", "4AS:xterm-0:192-8.el4_7.2.s390", "4AS:xterm-0:192-8.el4_7.2.s390x", "4AS:xterm-0:192-8.el4_7.2.src", "4AS:xterm-0:192-8.el4_7.2.x86_64", "4AS:xterm-debuginfo-0:192-8.el4_7.2.i386", "4AS:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4AS:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4AS:xterm-debuginfo-0:192-8.el4_7.2.s390", "4AS:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4AS:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "4Desktop:xterm-0:192-8.el4_7.2.i386", "4Desktop:xterm-0:192-8.el4_7.2.ia64", "4Desktop:xterm-0:192-8.el4_7.2.ppc", "4Desktop:xterm-0:192-8.el4_7.2.s390", "4Desktop:xterm-0:192-8.el4_7.2.s390x", "4Desktop:xterm-0:192-8.el4_7.2.src", "4Desktop:xterm-0:192-8.el4_7.2.x86_64", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.i386", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.s390", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "4ES:xterm-0:192-8.el4_7.2.i386", "4ES:xterm-0:192-8.el4_7.2.ia64", "4ES:xterm-0:192-8.el4_7.2.ppc", "4ES:xterm-0:192-8.el4_7.2.s390", "4ES:xterm-0:192-8.el4_7.2.s390x", "4ES:xterm-0:192-8.el4_7.2.src", "4ES:xterm-0:192-8.el4_7.2.x86_64", "4ES:xterm-debuginfo-0:192-8.el4_7.2.i386", "4ES:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4ES:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4ES:xterm-debuginfo-0:192-8.el4_7.2.s390", "4ES:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4ES:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "4WS:xterm-0:192-8.el4_7.2.i386", "4WS:xterm-0:192-8.el4_7.2.ia64", "4WS:xterm-0:192-8.el4_7.2.ppc", "4WS:xterm-0:192-8.el4_7.2.s390", "4WS:xterm-0:192-8.el4_7.2.s390x", "4WS:xterm-0:192-8.el4_7.2.src", "4WS:xterm-0:192-8.el4_7.2.x86_64", "4WS:xterm-debuginfo-0:192-8.el4_7.2.i386", "4WS:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4WS:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4WS:xterm-debuginfo-0:192-8.el4_7.2.s390", "4WS:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4WS:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "5Client:xterm-0:215-5.el5_2.2.i386", "5Client:xterm-0:215-5.el5_2.2.ia64", "5Client:xterm-0:215-5.el5_2.2.ppc", "5Client:xterm-0:215-5.el5_2.2.s390x", "5Client:xterm-0:215-5.el5_2.2.src", "5Client:xterm-0:215-5.el5_2.2.x86_64", "5Client:xterm-debuginfo-0:215-5.el5_2.2.i386", "5Client:xterm-debuginfo-0:215-5.el5_2.2.ia64", "5Client:xterm-debuginfo-0:215-5.el5_2.2.ppc", "5Client:xterm-debuginfo-0:215-5.el5_2.2.s390x", "5Client:xterm-debuginfo-0:215-5.el5_2.2.x86_64", "5Server:xterm-0:215-5.el5_2.2.i386", "5Server:xterm-0:215-5.el5_2.2.ia64", "5Server:xterm-0:215-5.el5_2.2.ppc", "5Server:xterm-0:215-5.el5_2.2.s390x", "5Server:xterm-0:215-5.el5_2.2.src", "5Server:xterm-0:215-5.el5_2.2.x86_64", "5Server:xterm-debuginfo-0:215-5.el5_2.2.i386", "5Server:xterm-debuginfo-0:215-5.el5_2.2.ia64", "5Server:xterm-debuginfo-0:215-5.el5_2.2.ppc", "5Server:xterm-debuginfo-0:215-5.el5_2.2.s390x", "5Server:xterm-debuginfo-0:215-5.el5_2.2.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2008-2383", }, { category: "external", summary: "RHBZ#478888", url: "https://bugzilla.redhat.com/show_bug.cgi?id=478888", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2008-2383", url: "https://www.cve.org/CVERecord?id=CVE-2008-2383", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2008-2383", url: "https://nvd.nist.gov/vuln/detail/CVE-2008-2383", }, ], release_date: "2008-12-29T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-01-07T11:09:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "3AS:xterm-0:179-11.EL3.i386", "3AS:xterm-0:179-11.EL3.ia64", "3AS:xterm-0:179-11.EL3.ppc", "3AS:xterm-0:179-11.EL3.s390", "3AS:xterm-0:179-11.EL3.s390x", "3AS:xterm-0:179-11.EL3.src", "3AS:xterm-0:179-11.EL3.x86_64", "3AS:xterm-debuginfo-0:179-11.EL3.i386", "3AS:xterm-debuginfo-0:179-11.EL3.ia64", "3AS:xterm-debuginfo-0:179-11.EL3.ppc", "3AS:xterm-debuginfo-0:179-11.EL3.s390", "3AS:xterm-debuginfo-0:179-11.EL3.s390x", "3AS:xterm-debuginfo-0:179-11.EL3.x86_64", "3Desktop:xterm-0:179-11.EL3.i386", "3Desktop:xterm-0:179-11.EL3.ia64", "3Desktop:xterm-0:179-11.EL3.ppc", "3Desktop:xterm-0:179-11.EL3.s390", "3Desktop:xterm-0:179-11.EL3.s390x", "3Desktop:xterm-0:179-11.EL3.src", "3Desktop:xterm-0:179-11.EL3.x86_64", "3Desktop:xterm-debuginfo-0:179-11.EL3.i386", "3Desktop:xterm-debuginfo-0:179-11.EL3.ia64", "3Desktop:xterm-debuginfo-0:179-11.EL3.ppc", "3Desktop:xterm-debuginfo-0:179-11.EL3.s390", "3Desktop:xterm-debuginfo-0:179-11.EL3.s390x", "3Desktop:xterm-debuginfo-0:179-11.EL3.x86_64", "3ES:xterm-0:179-11.EL3.i386", "3ES:xterm-0:179-11.EL3.ia64", "3ES:xterm-0:179-11.EL3.ppc", "3ES:xterm-0:179-11.EL3.s390", "3ES:xterm-0:179-11.EL3.s390x", "3ES:xterm-0:179-11.EL3.src", "3ES:xterm-0:179-11.EL3.x86_64", "3ES:xterm-debuginfo-0:179-11.EL3.i386", "3ES:xterm-debuginfo-0:179-11.EL3.ia64", "3ES:xterm-debuginfo-0:179-11.EL3.ppc", "3ES:xterm-debuginfo-0:179-11.EL3.s390", "3ES:xterm-debuginfo-0:179-11.EL3.s390x", "3ES:xterm-debuginfo-0:179-11.EL3.x86_64", "3WS:xterm-0:179-11.EL3.i386", "3WS:xterm-0:179-11.EL3.ia64", "3WS:xterm-0:179-11.EL3.ppc", "3WS:xterm-0:179-11.EL3.s390", "3WS:xterm-0:179-11.EL3.s390x", "3WS:xterm-0:179-11.EL3.src", "3WS:xterm-0:179-11.EL3.x86_64", "3WS:xterm-debuginfo-0:179-11.EL3.i386", "3WS:xterm-debuginfo-0:179-11.EL3.ia64", "3WS:xterm-debuginfo-0:179-11.EL3.ppc", "3WS:xterm-debuginfo-0:179-11.EL3.s390", "3WS:xterm-debuginfo-0:179-11.EL3.s390x", "3WS:xterm-debuginfo-0:179-11.EL3.x86_64", "4AS:xterm-0:192-8.el4_7.2.i386", "4AS:xterm-0:192-8.el4_7.2.ia64", "4AS:xterm-0:192-8.el4_7.2.ppc", "4AS:xterm-0:192-8.el4_7.2.s390", "4AS:xterm-0:192-8.el4_7.2.s390x", "4AS:xterm-0:192-8.el4_7.2.src", "4AS:xterm-0:192-8.el4_7.2.x86_64", "4AS:xterm-debuginfo-0:192-8.el4_7.2.i386", "4AS:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4AS:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4AS:xterm-debuginfo-0:192-8.el4_7.2.s390", "4AS:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4AS:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "4Desktop:xterm-0:192-8.el4_7.2.i386", "4Desktop:xterm-0:192-8.el4_7.2.ia64", "4Desktop:xterm-0:192-8.el4_7.2.ppc", "4Desktop:xterm-0:192-8.el4_7.2.s390", "4Desktop:xterm-0:192-8.el4_7.2.s390x", "4Desktop:xterm-0:192-8.el4_7.2.src", "4Desktop:xterm-0:192-8.el4_7.2.x86_64", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.i386", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.s390", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4Desktop:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "4ES:xterm-0:192-8.el4_7.2.i386", "4ES:xterm-0:192-8.el4_7.2.ia64", "4ES:xterm-0:192-8.el4_7.2.ppc", "4ES:xterm-0:192-8.el4_7.2.s390", "4ES:xterm-0:192-8.el4_7.2.s390x", "4ES:xterm-0:192-8.el4_7.2.src", "4ES:xterm-0:192-8.el4_7.2.x86_64", "4ES:xterm-debuginfo-0:192-8.el4_7.2.i386", "4ES:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4ES:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4ES:xterm-debuginfo-0:192-8.el4_7.2.s390", "4ES:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4ES:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "4WS:xterm-0:192-8.el4_7.2.i386", "4WS:xterm-0:192-8.el4_7.2.ia64", "4WS:xterm-0:192-8.el4_7.2.ppc", "4WS:xterm-0:192-8.el4_7.2.s390", "4WS:xterm-0:192-8.el4_7.2.s390x", "4WS:xterm-0:192-8.el4_7.2.src", "4WS:xterm-0:192-8.el4_7.2.x86_64", "4WS:xterm-debuginfo-0:192-8.el4_7.2.i386", "4WS:xterm-debuginfo-0:192-8.el4_7.2.ia64", "4WS:xterm-debuginfo-0:192-8.el4_7.2.ppc", "4WS:xterm-debuginfo-0:192-8.el4_7.2.s390", "4WS:xterm-debuginfo-0:192-8.el4_7.2.s390x", "4WS:xterm-debuginfo-0:192-8.el4_7.2.x86_64", "5Client:xterm-0:215-5.el5_2.2.i386", "5Client:xterm-0:215-5.el5_2.2.ia64", "5Client:xterm-0:215-5.el5_2.2.ppc", "5Client:xterm-0:215-5.el5_2.2.s390x", "5Client:xterm-0:215-5.el5_2.2.src", "5Client:xterm-0:215-5.el5_2.2.x86_64", "5Client:xterm-debuginfo-0:215-5.el5_2.2.i386", "5Client:xterm-debuginfo-0:215-5.el5_2.2.ia64", "5Client:xterm-debuginfo-0:215-5.el5_2.2.ppc", "5Client:xterm-debuginfo-0:215-5.el5_2.2.s390x", "5Client:xterm-debuginfo-0:215-5.el5_2.2.x86_64", "5Server:xterm-0:215-5.el5_2.2.i386", "5Server:xterm-0:215-5.el5_2.2.ia64", "5Server:xterm-0:215-5.el5_2.2.ppc", "5Server:xterm-0:215-5.el5_2.2.s390x", "5Server:xterm-0:215-5.el5_2.2.src", "5Server:xterm-0:215-5.el5_2.2.x86_64", "5Server:xterm-debuginfo-0:215-5.el5_2.2.i386", "5Server:xterm-debuginfo-0:215-5.el5_2.2.ia64", "5Server:xterm-debuginfo-0:215-5.el5_2.2.ppc", "5Server:xterm-debuginfo-0:215-5.el5_2.2.s390x", "5Server:xterm-debuginfo-0:215-5.el5_2.2.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:0018", }, ], threats: [ { category: "impact", details: "Important", }, ], title: "xterm: arbitrary command injection", }, ], }
RHSA-2009:0019
Vulnerability from csaf_redhat
Published
2009-01-07 13:42
Modified
2024-11-22 02:26
Summary
Red Hat Security Advisory: hanterm-xf security update
Notes
Topic
An updated hanterm-xf package to correct a security issue is now available
for Red Hat Enterprise Linux 2.1.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Details
Hanterm is a replacement for xterm, a X Window System terminal emulator,
that supports Hangul input and output.
A flaw was found in the Hanterm handling of Device Control Request Status
String (DECRQSS) escape sequences. An attacker could create a malicious
text file (or log entry, if unfiltered) that could run arbitrary commands
if read by a victim inside a Hanterm window. (CVE-2008-2383)
All hanterm-xf users are advised to upgrade to the updated package, which
contains a backported patch to resolve this issue. All running instances of
hanterm must be restarted for the update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An updated hanterm-xf package to correct a security issue is now available\nfor Red Hat Enterprise Linux 2.1.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.", title: "Topic", }, { category: "general", text: "Hanterm is a replacement for xterm, a X Window System terminal emulator,\nthat supports Hangul input and output.\n\nA flaw was found in the Hanterm handling of Device Control Request Status\nString (DECRQSS) escape sequences. An attacker could create a malicious\ntext file (or log entry, if unfiltered) that could run arbitrary commands\nif read by a victim inside a Hanterm window. (CVE-2008-2383)\n\nAll hanterm-xf users are advised to upgrade to the updated package, which\ncontains a backported patch to resolve this issue. All running instances of\nhanterm must be restarted for the update to take effect.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2009:0019", url: "https://access.redhat.com/errata/RHSA-2009:0019", }, { category: "external", summary: "http://www.redhat.com/security/updates/classification/#important", url: "http://www.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "478888", url: "https://bugzilla.redhat.com/show_bug.cgi?id=478888", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0019.json", }, ], title: "Red Hat Security Advisory: hanterm-xf security update", tracking: { current_release_date: "2024-11-22T02:26:45+00:00", generator: { date: "2024-11-22T02:26:45+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2009:0019", initial_release_date: "2009-01-07T13:42:00+00:00", revision_history: [ { date: "2009-01-07T13:42:00+00:00", number: "1", summary: "Initial version", }, { date: "2009-01-07T08:42:50+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T02:26:45+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ", product: { name: "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ", product_id: "2.1AS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:2.1::as", }, }, }, { category: "product_name", name: "Red Hat Linux Advanced Workstation 2.1", product: { name: "Red Hat Linux Advanced Workstation 2.1", product_id: "2.1AW", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:2.1::aw", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux ES version 2.1", product: { name: "Red Hat Enterprise Linux ES version 2.1", product_id: "2.1ES", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:2.1::es", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux WS version 2.1", product: { name: "Red Hat Enterprise Linux WS version 2.1", product_id: "2.1WS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:2.1::ws", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "hanterm-xf-1:2.0.5-5.AS21.2.ia64", product: { name: "hanterm-xf-1:2.0.5-5.AS21.2.ia64", product_id: "hanterm-xf-1:2.0.5-5.AS21.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/hanterm-xf@2.0.5-5.AS21.2?arch=ia64&epoch=1", }, }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "hanterm-xf-1:2.0.5-5.AS21.2.src", product: { name: "hanterm-xf-1:2.0.5-5.AS21.2.src", product_id: "hanterm-xf-1:2.0.5-5.AS21.2.src", product_identification_helper: { purl: "pkg:rpm/redhat/hanterm-xf@2.0.5-5.AS21.2?arch=src&epoch=1", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "hanterm-xf-1:2.0.5-5.AS21.2.i386", product: { name: "hanterm-xf-1:2.0.5-5.AS21.2.i386", product_id: "hanterm-xf-1:2.0.5-5.AS21.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/hanterm-xf@2.0.5-5.AS21.2?arch=i386&epoch=1", }, }, }, ], category: "architecture", name: "i386", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ", product_id: "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.i386", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.i386", relates_to_product_reference: "2.1AS", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ", product_id: "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.ia64", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.ia64", relates_to_product_reference: "2.1AS", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.src as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ", product_id: "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.src", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.src", relates_to_product_reference: "2.1AS", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.i386 as a component of Red Hat Linux Advanced Workstation 2.1", product_id: "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.i386", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.i386", relates_to_product_reference: "2.1AW", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.ia64 as a component of Red Hat Linux Advanced Workstation 2.1", product_id: "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.ia64", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.ia64", relates_to_product_reference: "2.1AW", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.src as a component of Red Hat Linux Advanced Workstation 2.1", product_id: "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.src", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.src", relates_to_product_reference: "2.1AW", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.i386 as a component of Red Hat Enterprise Linux ES version 2.1", product_id: "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.i386", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.i386", relates_to_product_reference: "2.1ES", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.ia64 as a component of Red Hat Enterprise Linux ES version 2.1", product_id: "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.ia64", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.ia64", relates_to_product_reference: "2.1ES", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.src as a component of Red Hat Enterprise Linux ES version 2.1", product_id: "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.src", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.src", relates_to_product_reference: "2.1ES", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.i386 as a component of Red Hat Enterprise Linux WS version 2.1", product_id: "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.i386", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.i386", relates_to_product_reference: "2.1WS", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.ia64 as a component of Red Hat Enterprise Linux WS version 2.1", product_id: "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.ia64", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.ia64", relates_to_product_reference: "2.1WS", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.src as a component of Red Hat Enterprise Linux WS version 2.1", product_id: "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.src", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.src", relates_to_product_reference: "2.1WS", }, ], }, vulnerabilities: [ { cve: "CVE-2008-2383", discovery_date: "2008-12-29T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "478888", }, ], notes: [ { category: "description", text: "CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \\n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.", title: "Vulnerability description", }, { category: "summary", text: "xterm: arbitrary command injection", title: "Vulnerability summary", }, ], product_status: { fixed: [ "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.src", "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.src", "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.src", "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2008-2383", }, { category: "external", summary: "RHBZ#478888", url: "https://bugzilla.redhat.com/show_bug.cgi?id=478888", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2008-2383", url: "https://www.cve.org/CVERecord?id=CVE-2008-2383", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2008-2383", url: "https://nvd.nist.gov/vuln/detail/CVE-2008-2383", }, ], release_date: "2008-12-29T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-01-07T13:42:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.src", "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.src", "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.src", "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:0019", }, ], threats: [ { category: "impact", details: "Important", }, ], title: "xterm: arbitrary command injection", }, ], }
rhsa-2009_0019
Vulnerability from csaf_redhat
Published
2009-01-07 13:42
Modified
2024-11-22 02:26
Summary
Red Hat Security Advisory: hanterm-xf security update
Notes
Topic
An updated hanterm-xf package to correct a security issue is now available
for Red Hat Enterprise Linux 2.1.
This update has been rated as having important security impact by the Red
Hat Security Response Team.
Details
Hanterm is a replacement for xterm, a X Window System terminal emulator,
that supports Hangul input and output.
A flaw was found in the Hanterm handling of Device Control Request Status
String (DECRQSS) escape sequences. An attacker could create a malicious
text file (or log entry, if unfiltered) that could run arbitrary commands
if read by a victim inside a Hanterm window. (CVE-2008-2383)
All hanterm-xf users are advised to upgrade to the updated package, which
contains a backported patch to resolve this issue. All running instances of
hanterm must be restarted for the update to take effect.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An updated hanterm-xf package to correct a security issue is now available\nfor Red Hat Enterprise Linux 2.1.\n\nThis update has been rated as having important security impact by the Red\nHat Security Response Team.", title: "Topic", }, { category: "general", text: "Hanterm is a replacement for xterm, a X Window System terminal emulator,\nthat supports Hangul input and output.\n\nA flaw was found in the Hanterm handling of Device Control Request Status\nString (DECRQSS) escape sequences. An attacker could create a malicious\ntext file (or log entry, if unfiltered) that could run arbitrary commands\nif read by a victim inside a Hanterm window. (CVE-2008-2383)\n\nAll hanterm-xf users are advised to upgrade to the updated package, which\ncontains a backported patch to resolve this issue. All running instances of\nhanterm must be restarted for the update to take effect.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2009:0019", url: "https://access.redhat.com/errata/RHSA-2009:0019", }, { category: "external", summary: "http://www.redhat.com/security/updates/classification/#important", url: "http://www.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "478888", url: "https://bugzilla.redhat.com/show_bug.cgi?id=478888", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0019.json", }, ], title: "Red Hat Security Advisory: hanterm-xf security update", tracking: { current_release_date: "2024-11-22T02:26:45+00:00", generator: { date: "2024-11-22T02:26:45+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.1", }, }, id: "RHSA-2009:0019", initial_release_date: "2009-01-07T13:42:00+00:00", revision_history: [ { date: "2009-01-07T13:42:00+00:00", number: "1", summary: "Initial version", }, { date: "2009-01-07T08:42:50+00:00", number: "2", summary: "Last updated version", }, { date: "2024-11-22T02:26:45+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ", product: { name: "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ", product_id: "2.1AS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:2.1::as", }, }, }, { category: "product_name", name: "Red Hat Linux Advanced Workstation 2.1", product: { name: "Red Hat Linux Advanced Workstation 2.1", product_id: "2.1AW", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:2.1::aw", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux ES version 2.1", product: { name: "Red Hat Enterprise Linux ES version 2.1", product_id: "2.1ES", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:2.1::es", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux WS version 2.1", product: { name: "Red Hat Enterprise Linux WS version 2.1", product_id: "2.1WS", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:2.1::ws", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "hanterm-xf-1:2.0.5-5.AS21.2.ia64", product: { name: "hanterm-xf-1:2.0.5-5.AS21.2.ia64", product_id: "hanterm-xf-1:2.0.5-5.AS21.2.ia64", product_identification_helper: { purl: "pkg:rpm/redhat/hanterm-xf@2.0.5-5.AS21.2?arch=ia64&epoch=1", }, }, }, ], category: "architecture", name: "ia64", }, { branches: [ { category: "product_version", name: "hanterm-xf-1:2.0.5-5.AS21.2.src", product: { name: "hanterm-xf-1:2.0.5-5.AS21.2.src", product_id: "hanterm-xf-1:2.0.5-5.AS21.2.src", product_identification_helper: { purl: "pkg:rpm/redhat/hanterm-xf@2.0.5-5.AS21.2?arch=src&epoch=1", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "hanterm-xf-1:2.0.5-5.AS21.2.i386", product: { name: "hanterm-xf-1:2.0.5-5.AS21.2.i386", product_id: "hanterm-xf-1:2.0.5-5.AS21.2.i386", product_identification_helper: { purl: "pkg:rpm/redhat/hanterm-xf@2.0.5-5.AS21.2?arch=i386&epoch=1", }, }, }, ], category: "architecture", name: "i386", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ", product_id: "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.i386", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.i386", relates_to_product_reference: "2.1AS", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ", product_id: "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.ia64", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.ia64", relates_to_product_reference: "2.1AS", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.src as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ", product_id: "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.src", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.src", relates_to_product_reference: "2.1AS", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.i386 as a component of Red Hat Linux Advanced Workstation 2.1", product_id: "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.i386", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.i386", relates_to_product_reference: "2.1AW", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.ia64 as a component of Red Hat Linux Advanced Workstation 2.1", product_id: "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.ia64", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.ia64", relates_to_product_reference: "2.1AW", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.src as a component of Red Hat Linux Advanced Workstation 2.1", product_id: "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.src", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.src", relates_to_product_reference: "2.1AW", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.i386 as a component of Red Hat Enterprise Linux ES version 2.1", product_id: "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.i386", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.i386", relates_to_product_reference: "2.1ES", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.ia64 as a component of Red Hat Enterprise Linux ES version 2.1", product_id: "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.ia64", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.ia64", relates_to_product_reference: "2.1ES", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.src as a component of Red Hat Enterprise Linux ES version 2.1", product_id: "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.src", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.src", relates_to_product_reference: "2.1ES", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.i386 as a component of Red Hat Enterprise Linux WS version 2.1", product_id: "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.i386", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.i386", relates_to_product_reference: "2.1WS", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.ia64 as a component of Red Hat Enterprise Linux WS version 2.1", product_id: "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.ia64", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.ia64", relates_to_product_reference: "2.1WS", }, { category: "default_component_of", full_product_name: { name: "hanterm-xf-1:2.0.5-5.AS21.2.src as a component of Red Hat Enterprise Linux WS version 2.1", product_id: "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.src", }, product_reference: "hanterm-xf-1:2.0.5-5.AS21.2.src", relates_to_product_reference: "2.1WS", }, ], }, vulnerabilities: [ { cve: "CVE-2008-2383", discovery_date: "2008-12-29T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "478888", }, ], notes: [ { category: "description", text: "CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \\n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.", title: "Vulnerability description", }, { category: "summary", text: "xterm: arbitrary command injection", title: "Vulnerability summary", }, ], product_status: { fixed: [ "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.src", "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.src", "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.src", "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.src", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2008-2383", }, { category: "external", summary: "RHBZ#478888", url: "https://bugzilla.redhat.com/show_bug.cgi?id=478888", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2008-2383", url: "https://www.cve.org/CVERecord?id=CVE-2008-2383", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2008-2383", url: "https://nvd.nist.gov/vuln/detail/CVE-2008-2383", }, ], release_date: "2008-12-29T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2009-01-07T13:42:00+00:00", details: "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259", product_ids: [ "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1AS:hanterm-xf-1:2.0.5-5.AS21.2.src", "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1AW:hanterm-xf-1:2.0.5-5.AS21.2.src", "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1ES:hanterm-xf-1:2.0.5-5.AS21.2.src", "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.i386", "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.ia64", "2.1WS:hanterm-xf-1:2.0.5-5.AS21.2.src", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2009:0019", }, ], threats: [ { category: "impact", details: "Important", }, ], title: "xterm: arbitrary command injection", }, ], }
fkie_cve-2008-2383
Vulnerability from fkie_nvd
Published
2009-01-02 18:11
Modified
2025-04-09 00:30
Severity ?
Summary
CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| invisible-island | xterm | _nil_ |
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:invisible-island:xterm:_nil_:*:*:*:*:*:*:*", matchCriteriaId: "BE291BE0-5A80-4D58-BF1F-1A7089D2471E", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \\n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.", }, { lang: "es", value: "Vulnerabilidad de inyección CRLF en xterm, permite a atacantes asistidos por usuarios ejecutar comandos de su elección a través de caracteres LF (también conocido como \\n) que rodean el nombre del comando dentro de una secuencia de escape evice Control Request Status String (DECRQSS) en un fichero de texto, es una cuestión relacionada con CVE-2003-0063 y CVE-2003-0071.", }, ], id: "CVE-2008-2383", lastModified: "2025-04-09T00:30:58.490", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "HIGH", cvssData: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "COMPLETE", baseScore: 9.3, confidentialityImpact: "COMPLETE", integrityImpact: "COMPLETE", vectorString: "AV:N/AC:M/Au:N/C:C/I:C/A:C", version: "2.0", }, exploitabilityScore: 8.6, impactScore: 10, obtainAllPrivilege: true, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: true, }, ], }, published: "2009-01-02T18:11:09.483", references: [ { source: "cve@mitre.org", url: "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030", }, { source: "cve@mitre.org", url: "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html", }, { source: "cve@mitre.org", url: "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html", }, { source: "cve@mitre.org", url: "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html", }, { source: "cve@mitre.org", tags: [ "Vendor Advisory", ], url: "http://secunia.com/advisories/33318", }, { source: "cve@mitre.org", url: "http://secunia.com/advisories/33388", }, { source: "cve@mitre.org", url: "http://secunia.com/advisories/33397", }, { source: "cve@mitre.org", url: "http://secunia.com/advisories/33418", }, { source: "cve@mitre.org", url: "http://secunia.com/advisories/33419", }, { source: "cve@mitre.org", url: "http://secunia.com/advisories/33568", }, { source: "cve@mitre.org", url: "http://secunia.com/advisories/33820", }, { source: "cve@mitre.org", url: "http://secunia.com/advisories/35074", }, { source: "cve@mitre.org", url: "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254208-1", }, { source: "cve@mitre.org", url: "http://support.apple.com/kb/HT3549", }, { source: "cve@mitre.org", url: "http://www.debian.org/security/2009/dsa-1694", }, { source: "cve@mitre.org", url: "http://www.redhat.com/support/errata/RHSA-2009-0018.html", }, { source: "cve@mitre.org", url: "http://www.redhat.com/support/errata/RHSA-2009-0019.html", }, { source: "cve@mitre.org", url: "http://www.securityfocus.com/bid/33060", }, { source: "cve@mitre.org", url: "http://www.securitytracker.com/id?1021522", }, { source: "cve@mitre.org", tags: [ "US Government Resource", ], url: "http://www.us-cert.gov/cas/techalerts/TA09-133A.html", }, { source: "cve@mitre.org", url: "http://www.vupen.com/english/advisories/2009/1297", }, { source: "cve@mitre.org", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/47655", }, { source: "cve@mitre.org", url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3E2Q6NPKT7V4VKZMSFF4ARLRVYOG4AU/", }, { source: "cve@mitre.org", url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOOVZTIABA4MIFUGTAVYWO6QXSUXSST4/", }, { source: "cve@mitre.org", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9317", }, { source: "cve@mitre.org", url: "https://usn.ubuntu.com/703-1/", }, { source: "cve@mitre.org", url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00072.html", }, { source: "cve@mitre.org", url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00184.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "http://secunia.com/advisories/33318", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://secunia.com/advisories/33388", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://secunia.com/advisories/33397", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://secunia.com/advisories/33418", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://secunia.com/advisories/33419", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://secunia.com/advisories/33568", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://secunia.com/advisories/33820", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://secunia.com/advisories/35074", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254208-1", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://support.apple.com/kb/HT3549", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.debian.org/security/2009/dsa-1694", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.redhat.com/support/errata/RHSA-2009-0018.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.redhat.com/support/errata/RHSA-2009-0019.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securityfocus.com/bid/33060", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securitytracker.com/id?1021522", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "US Government Resource", ], url: "http://www.us-cert.gov/cas/techalerts/TA09-133A.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.vupen.com/english/advisories/2009/1297", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/47655", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3E2Q6NPKT7V4VKZMSFF4ARLRVYOG4AU/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOOVZTIABA4MIFUGTAVYWO6QXSUXSST4/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9317", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://usn.ubuntu.com/703-1/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00072.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00184.html", }, ], sourceIdentifier: "cve@mitre.org", vulnStatus: "Deferred", weaknesses: [ { description: [ { lang: "en", value: "CWE-94", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }
gsd-2008-2383
Vulnerability from gsd
Modified
2023-12-13 01:23
Details
CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.
Aliases
Aliases
{ GSD: { alias: "CVE-2008-2383", description: "CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \\n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.", id: "GSD-2008-2383", references: [ "https://www.suse.com/security/cve/CVE-2008-2383.html", "https://www.debian.org/security/2009/dsa-1694", "https://access.redhat.com/errata/RHSA-2009:0019", "https://access.redhat.com/errata/RHSA-2009:0018", "https://linux.oracle.com/cve/CVE-2008-2383.html", ], }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { aliases: [ "CVE-2008-2383", ], details: "CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \\n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.", id: "GSD-2008-2383", modified: "2023-12-13T01:23:01.009451Z", schema_version: "1.4.0", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2008-2383", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \\n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "33419", refsource: "SECUNIA", url: "http://secunia.com/advisories/33419", }, { name: "RHSA-2009:0018", refsource: "REDHAT", url: "http://www.redhat.com/support/errata/RHSA-2009-0018.html", }, { name: "254208", refsource: "SUNALERT", url: "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254208-1", }, { name: "FEDORA-2009-0154", refsource: "FEDORA", url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00184.html", }, { name: "RHSA-2009:0019", refsource: "REDHAT", url: "http://www.redhat.com/support/errata/RHSA-2009-0019.html", }, { name: "33388", refsource: "SECUNIA", url: "http://secunia.com/advisories/33388", }, { name: "http://support.apple.com/kb/HT3549", refsource: "CONFIRM", url: "http://support.apple.com/kb/HT3549", }, { name: "SUSE-SR:2009:003", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html", }, { name: "FEDORA-2009-0059", refsource: "FEDORA", url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00072.html", }, { name: "oval:org.mitre.oval:def:9317", refsource: "OVAL", url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9317", }, { name: "35074", refsource: "SECUNIA", url: "http://secunia.com/advisories/35074", }, { name: "33418", refsource: "SECUNIA", url: "http://secunia.com/advisories/33418", }, { name: "DSA-1694", refsource: "DEBIAN", url: "http://www.debian.org/security/2009/dsa-1694", }, { name: "APPLE-SA-2009-05-12", refsource: "APPLE", url: "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html", }, { name: "SUSE-SR:2009:002", refsource: "SUSE", url: "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html", }, { name: "33318", refsource: "SECUNIA", url: "http://secunia.com/advisories/33318", }, { name: "33568", refsource: "SECUNIA", url: "http://secunia.com/advisories/33568", }, { name: "xterm-decrqss-code-execution(47655)", refsource: "XF", url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/47655", }, { name: "TA09-133A", refsource: "CERT", url: "http://www.us-cert.gov/cas/techalerts/TA09-133A.html", }, { name: "33397", refsource: "SECUNIA", url: "http://secunia.com/advisories/33397", }, { name: "ADV-2009-1297", refsource: "VUPEN", url: "http://www.vupen.com/english/advisories/2009/1297", }, { name: "33060", refsource: "BID", url: "http://www.securityfocus.com/bid/33060", }, { name: "USN-703-1", refsource: "UBUNTU", url: "https://usn.ubuntu.com/703-1/", }, { name: "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030", refsource: "CONFIRM", url: "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030", }, { name: "33820", refsource: "SECUNIA", url: "http://secunia.com/advisories/33820", }, { name: "1021522", refsource: "SECTRACK", url: "http://www.securitytracker.com/id?1021522", }, { name: "FEDORA-2023-a004ecb3f8", refsource: "FEDORA", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOOVZTIABA4MIFUGTAVYWO6QXSUXSST4/", }, { name: "FEDORA-2023-3746647cc3", refsource: "FEDORA", url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3E2Q6NPKT7V4VKZMSFF4ARLRVYOG4AU/", }, ], }, }, "nvd.nist.gov": { configurations: { CVE_data_version: "4.0", nodes: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:invisible-island:xterm:_nil_:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, ], }, cve: { CVE_data_meta: { ASSIGNER: "cve@mitre.org", ID: "CVE-2008-2383", }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "en", value: "CRLF injection vulnerability in xterm allows user-assisted attackers to execute arbitrary commands via LF (aka \\n) characters surrounding a command name within a Device Control Request Status String (DECRQSS) escape sequence in a text file, a related issue to CVE-2003-0063 and CVE-2003-0071.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "en", value: "CWE-94", }, ], }, ], }, references: { reference_data: [ { name: "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030", refsource: "CONFIRM", tags: [], url: "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030", }, { name: "33318", refsource: "SECUNIA", tags: [ "Vendor Advisory", ], url: "http://secunia.com/advisories/33318", }, { name: "FEDORA-2009-0154", refsource: "FEDORA", tags: [], url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00184.html", }, { name: "33419", refsource: "SECUNIA", tags: [], url: "http://secunia.com/advisories/33419", }, { name: "FEDORA-2009-0059", refsource: "FEDORA", tags: [], url: "https://www.redhat.com/archives/fedora-package-announce/2009-January/msg00072.html", }, { name: "33568", refsource: "SECUNIA", tags: [], url: "http://secunia.com/advisories/33568", }, { name: "SUSE-SR:2009:002", refsource: "SUSE", tags: [], url: "http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html", }, { name: "SUSE-SR:2009:003", refsource: "SUSE", tags: [], url: "http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html", }, { name: "RHSA-2009:0018", refsource: "REDHAT", tags: [], url: "http://www.redhat.com/support/errata/RHSA-2009-0018.html", }, { name: "33418", refsource: "SECUNIA", tags: [], url: "http://secunia.com/advisories/33418", }, { name: "33397", refsource: "SECUNIA", tags: [], url: "http://secunia.com/advisories/33397", }, { name: "33060", refsource: "BID", tags: [], url: "http://www.securityfocus.com/bid/33060", }, { name: "DSA-1694", refsource: "DEBIAN", tags: [], url: "http://www.debian.org/security/2009/dsa-1694", }, { name: "33820", refsource: "SECUNIA", tags: [], url: "http://secunia.com/advisories/33820", }, { name: "33388", refsource: "SECUNIA", tags: [], url: "http://secunia.com/advisories/33388", }, { name: "254208", refsource: "SUNALERT", tags: [], url: "http://sunsolve.sun.com/search/document.do?assetkey=1-66-254208-1", }, { name: "http://support.apple.com/kb/HT3549", refsource: "CONFIRM", tags: [], url: "http://support.apple.com/kb/HT3549", }, { name: "TA09-133A", refsource: "CERT", tags: [ "US Government Resource", ], url: "http://www.us-cert.gov/cas/techalerts/TA09-133A.html", }, { name: "APPLE-SA-2009-05-12", refsource: "APPLE", tags: [], url: "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html", }, { name: "ADV-2009-1297", refsource: "VUPEN", tags: [], url: "http://www.vupen.com/english/advisories/2009/1297", }, { name: "35074", refsource: "SECUNIA", tags: [], url: "http://secunia.com/advisories/35074", }, { name: "RHSA-2009:0019", refsource: "REDHAT", tags: [], url: "http://www.redhat.com/support/errata/RHSA-2009-0019.html", }, { name: "1021522", refsource: "SECTRACK", tags: [], url: "http://www.securitytracker.com/id?1021522", }, { name: "xterm-decrqss-code-execution(47655)", refsource: "XF", tags: [], url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/47655", }, { name: "oval:org.mitre.oval:def:9317", refsource: "OVAL", tags: [], url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9317", }, { name: "USN-703-1", refsource: "UBUNTU", tags: [], url: "https://usn.ubuntu.com/703-1/", }, { name: "FEDORA-2023-a004ecb3f8", refsource: "FEDORA", tags: [], url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOOVZTIABA4MIFUGTAVYWO6QXSUXSST4/", }, { name: "FEDORA-2023-3746647cc3", refsource: "FEDORA", tags: [], url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R3E2Q6NPKT7V4VKZMSFF4ARLRVYOG4AU/", }, ], }, }, impact: { baseMetricV2: { cvssV2: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "COMPLETE", baseScore: 9.3, confidentialityImpact: "COMPLETE", integrityImpact: "COMPLETE", vectorString: "AV:N/AC:M/Au:N/C:C/I:C/A:C", version: "2.0", }, exploitabilityScore: 8.6, impactScore: 10, obtainAllPrivilege: true, obtainOtherPrivilege: false, obtainUserPrivilege: false, severity: "HIGH", userInteractionRequired: true, }, }, lastModifiedDate: "2023-07-27T05:15Z", publishedDate: "2009-01-02T18:11Z", }, }, }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).
Loading…
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.