News for hackers. Stuff that matters.

A comment on CVE-2021-27135: xterm flaw may allow remote code execution, CVSS 9.6.

Re:CVE-2021-27135: xterm flaw may allow remote code executio... by gautamcgoel on Saturday March 20, 2021 @02:33PM (#26525024)
Has this been patched yet?
[ Parent | on HN ]
Re:CVE-2021-27135: xterm flaw may allow remote code executio... by readflaggedcomm on Saturday March 20, 2021 @02:51PM (#26525158)
I believe it's the issue fixed in patch #366 reported by Ormandy, who is in the article's mailing list links: https://invisible-island.net/xterm/xterm.log.html

So that should be easy to tell whether your system has it fixed or not, beside the Fedora and Debian links in the article.

[ Parent | on HN ]
Re:CVE-2021-27135: xterm flaw may allow remote code executio... by acidburnNSA on Saturday March 20, 2021 @02:49PM (#26525137)
Patch for Ubuntu was released on Feb 24.

https://www.ubuntuupdates.org/package/core/groovy/universe/u...

[ Parent | on HN ]
Re:CVE-2021-27135: xterm flaw may allow remote code executio... by teddyh on Saturday March 20, 2021 @03:06PM (#26525291)
Yes: https://security-tracker.debian.org/tracker/CVE-2021-27135
[ Parent | on HN ]
Re:CVE-2021-27135: xterm flaw may allow remote code executio... by rincebrain on Saturday March 20, 2021 @02:49PM (#26525150)
There's a patch available, yes. Debian and Fedora at least are shipping it.
[ Parent | on HN ]