From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 0976AC4332F for ; Thu, 29 Dec 2022 13:11:42 +0000 (UTC) Subject: Re: [[kirkstone][meta-oe][PATCH] xterm : Fix CVE-2022-45063 code execution via OSC 50 input sequences] CVE-2022-45063 To: openembedded-devel@lists.openembedded.org From: "mv" X-Originating-Location: Ahmedabad, Gujarat, IN (49.34.204.49) X-Originating-Platform: Linux Chrome 108 User-Agent: GROUPS.IO Web Poster MIME-Version: 1.0 Date: Thu, 29 Dec 2022 05:11:36 -0800 References: <20221229125920.567710-1-sdoshi@mvista.com> In-Reply-To: <20221229125920.567710-1-sdoshi@mvista.com> Message-ID: <10920.1672319496310011965@lists.openembedded.org> Content-Type: multipart/alternative; boundary="z6Mabfpi4VHgiFSpGUZj" List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Thu, 29 Dec 2022 13:11:42 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-devel/message/100298 --z6Mabfpi4VHgiFSpGUZj Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hi Team, Even though the patch subject is -> *Subject: [PATCH] snapshot of project "= xterm", label xterm-374c,* It fixes=C2=A0CVE-2022-45063 as per -> https://g= ithub.com/ThomasDickey/xterm-snapshots/commit/787636674918873a091e7a4ef5977= 263ba982322#diff-9f51c083fda4d1b957dde3784a2aa3e18afbcb178ed8ecf960380e64ce= 541089 [file name :xterm.log.html] which states that * * {{{
  • improve error-recovery when setting a bitmap font for the VT100 window, e.g., in case OSC 50 failed, restoring the most recent valid font so that a subsequent OSC 50 reports this correctly (report by David Leadbeater).
    • }}} Regards, Siddharth --z6Mabfpi4VHgiFSpGUZj Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

    Hi Team,

    Even though the patch subject is -> = Subject: [PATCH] snapshot of project "xterm", label xterm-374c,  It fixes CVE-2022-45063 as per -> https://github.com/ThomasDickey/xter= m-snapshots/commit/787636674918873a091e7a4ef5977263ba982322#diff-9f51c083fd= a4d1b957dde3784a2aa3e18afbcb178ed8ecf960380e64ce541089 [file name = :xterm.log.html] which states that

    {{{

        <li>improve error-recovery when setting a bitmap fon= t for the

        VT100 window, e.g., in case <em>OSC&nbsp;50</= em> failed,

        restoring the most recent valid font so that a subsequent<= /p>

        <em>OSC&nbsp;50</em> reports this correctl= y (report by David

     

        Leadbeater).</li>
    }}}

    Regards,
    = Siddharth

     

    --z6Mabfpi4VHgiFSpGUZj--