Most recent entries from all

ALSA-2021:0611 — Important: xterm security update

Affected: AlmaLinux:8: xterm, AlmaLinux:8: xterm-resize

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals for programs that can't use the window system directly.

Security Fix(es):

* xterm: crash when processing combining characters (CVE-2021-27135)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

cnvd-2021-14756

EUVD-2026-25340

fkie_cve-2021-27135

xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UTF-8 combining character sequence.

GHSA-3w4p-5chr-2r8f

xterm through Patch #365 allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted UTF-8 character sequence.

gsd-2021-27135

msrc_CVE-2021-27135 — xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fa…

msrc_CVE-2021-27135

OESA-2021-1091 — xterm security update

Affected: openEuler:20.03-LTS: xterm, openEuler:20.03-LTS-SP1: xterm

The xterm program is a terminal emulator for the X Window System. It provides DEC VT102 and Tektronix 4014 compatible terminals. Security Fix(es): xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UTF-8 combining character sequence.(CVE-2021-27135)

openSUSE-SU-2021:0900-1 — Security update for xterm

Security update for xterm

RHSA-2021:0650 — Red Hat Security Advisory: xterm security update

xterm: crash when processing combining characters

SUSE-SU-2021:14747-1 — Security update for xterm

Security update for xterm

UBUNTU-CVE-2021-27135

Affected: Ubuntu:16.04:LTS: xterm, Ubuntu:18.04:LTS: xterm, Ubuntu:20.04:LTS: xterm

xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UTF-8 combining character sequence.