Advisory ROSA-SA-2024-2335

software: xterm 386
WASP: ROSA-CHROME

package_evr_string: xterm-386-1.src.rpm

CVE-ID: CVE-2023-40359
BDU-ID: 2023-07914
CVE-Crit: CRITICAL.
CVE-DESC.: A vulnerability in the ReGIS Vector Graphics Reporting (ReGIS Reporting) feature of the XTerm terminal emulator is related to an operation exceeding buffer boundaries in memory when processing name character sets. Exploitation of the vulnerability could allow an attacker acting remotely to affect the confidentiality, integrity and availability of protected information
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update xterm