{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"important"},"category":"csaf_security_advisory","csaf_version":"2.0","distribution":{"text":"Copyright 2024 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"Security update for rxvt-unicode","title":"Title of the patch"},{"category":"description","text":"This update for rxvt-unicode fixes the following issues:\n\nUpdate to 9.26\n\n- ev_iouring.c was wrongly required during compilation, and wrongly\n  not packaged.\n\nUpdate to 9.25 (boo#1186174 CVE-2021-33477)\n\n- for the 17.5th anniversary, and because many distributions seem to\n  remove rxvt in favour of urxvt, this release resurrects rclock as\n  urclock.\n- add support for systemd socket-based activation - debian bug #917105,\n  freebsd bug #234276.\n- do not destruct perl on exit anymore: this might fail for a variety of\n  reasons, and takes unneccessary time.\n- remove any macros from urxvtperl manpage(s), should fix debian\n  bug 858385.\n- the old bg image resources are now provided by the background\n  extension, and perl is thus required for bg image support. No\n  configuration change is needed: urxvt autoloads the background\n  ext if any bg image resource/option is present (for OSC sequences to\n  work you need to enable it explicity). The old bg image\n  resources are also now deprecated; users are encouraged to\n  switch to the new bg image interface (see man urxvt-background).\n- confirm-paste now checks for any ctlchars, not just newlines.\n- searchable scrollback will now ignore bracketed paste mode sequences\n  (prompted by Daniel Gröber's patch).\n- drop ISO 2022 locale support. ISO 2022 encodings are not supported in\n  POSIX locales and clash with vt100 charset emulation (the luit\n  program can be used as a substitute).\n- perl didn't parse rgba colours specified as an array correctly,\n  only allowing 0 and 100% intensity for each component (this affected\n  fill and tint).\n- when iterating over resources, urxvt will now try to properly handle\n  multipart resources (such as '*background.expr'), for the benefit\n  of autoloading perl extensions.\n- ESC G (query rxvt graphics mode) has been disabled due to security\n  implications. The rxvt graphics mode was removed in rxvt-unicode 1.5,\n  and no programs relying on being able to query the mode are known.\n- work around API change breakage in perl 5.28, based on a patch by\n  Roman Bogorodskiy.\n- improved security: rob nation's (obsolete) graphics mode queries\n  no longer reply with linefeed in secure/default mode.\n- ISO 8613-3 direct colour SGR sequences (patch by Fengguang Wu).\n- xterm focus reporting mode (patch by Daniel Hahler).\n- xterm SGR mouse mode.\n- implement DECRQM. Patch by Přemysl Eric Janouch.\n- add missing color index parameter to OSC 4 response. Patch\n  by Přemysl Eric Janouch.\n- in some window managers, if smart resize was enabled, urxvt\n  erroneously moved the window on font change - awesome bug\n  #532, arch linux bug ##34807 (patch by Uli Schlachter).\n- fix urxvtd crash when using a background expression.\n- properly restore colors when using fading and reverse video\n  is enabled while urxvt is focused and then disabled while it\n  is not focused, or vice versa (patch by Daniel Hahler).\n- fix high memory usage when an extension repeatedly hides and\n  shows an overlay (reported by Marcel Lautenbach).\n- expose priv_modes member and constants to perl extensions\n  (patch by Rastislav Barlik).\n- fix a whole slew of const sillyness, unfortunately forced upon\n  us by ISO C++.\n- update to libecb 0x00010006.\n- disable all thread support in ecb.h as we presumably don't need it.\n- slightly improve Makefile source dependencies.\n- work around bugs in newer Pod::Xhtml versions (flags incorrect formatting codes\n  in xhtml/html sections but does not interpret correct ones).\n- New file: /usr/bin/urclock\n- restore the -256color binaries\n","title":"Description of the patch"},{"category":"details","text":"openSUSE-2022-10222","title":"Patchnames"},{"category":"legal_disclaimer","text":"CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).","title":"Terms of use"}],"publisher":{"category":"vendor","contact_details":"https://www.suse.com/support/security/contact/","name":"SUSE Product Security Team","namespace":"https://www.suse.com/"},"references":[{"category":"external","summary":"SUSE ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"self","summary":"URL of this CSAF notice","url":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2022_10222-1.json"},{"category":"self","summary":"URL for openSUSE-SU-2022:10222-1","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YIRRHCE53YNBLDGNULGNED3XGUMUZDMO/"},{"category":"self","summary":"E-Mail link for openSUSE-SU-2022:10222-1","url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YIRRHCE53YNBLDGNULGNED3XGUMUZDMO/"},{"category":"self","summary":"SUSE Bug 1186174","url":"https://bugzilla.suse.com/1186174"},{"category":"self","summary":"SUSE CVE CVE-2008-1142 page","url":"https://www.suse.com/security/cve/CVE-2008-1142/"},{"category":"self","summary":"SUSE CVE CVE-2021-33477 page","url":"https://www.suse.com/security/cve/CVE-2021-33477/"}],"title":"Security update for rxvt-unicode","tracking":{"current_release_date":"2022-11-30T08:19:21Z","generator":{"date":"2022-11-30T08:19:21Z","engine":{"name":"cve-database.git:bin/generate-csaf.pl","version":"1"}},"id":"openSUSE-SU-2022:10222-1","initial_release_date":"2022-11-30T08:19:21Z","revision_history":[{"date":"2022-11-30T08:19:21Z","number":"1","summary":"Current version"}],"status":"final","version":"1"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_version","name":"rxvt-unicode-9.26-bp154.2.3.1.aarch64","product":{"name":"rxvt-unicode-9.26-bp154.2.3.1.aarch64","product_id":"rxvt-unicode-9.26-bp154.2.3.1.aarch64"}}],"category":"architecture","name":"aarch64"},{"branches":[{"category":"product_version","name":"rxvt-unicode-9.26-bp154.2.3.1.i586","product":{"name":"rxvt-unicode-9.26-bp154.2.3.1.i586","product_id":"rxvt-unicode-9.26-bp154.2.3.1.i586"}}],"category":"architecture","name":"i586"},{"branches":[{"category":"product_version","name":"rxvt-unicode-9.26-bp154.2.3.1.ppc64le","product":{"name":"rxvt-unicode-9.26-bp154.2.3.1.ppc64le","product_id":"rxvt-unicode-9.26-bp154.2.3.1.ppc64le"}}],"category":"architecture","name":"ppc64le"},{"branches":[{"category":"product_version","name":"rxvt-unicode-9.26-bp154.2.3.1.s390x","product":{"name":"rxvt-unicode-9.26-bp154.2.3.1.s390x","product_id":"rxvt-unicode-9.26-bp154.2.3.1.s390x"}}],"category":"architecture","name":"s390x"},{"branches":[{"category":"product_version","name":"rxvt-unicode-9.26-bp154.2.3.1.x86_64","product":{"name":"rxvt-unicode-9.26-bp154.2.3.1.x86_64","product_id":"rxvt-unicode-9.26-bp154.2.3.1.x86_64"}}],"category":"architecture","name":"x86_64"},{"branches":[{"category":"product_name","name":"SUSE Package Hub 15 SP3","product":{"name":"SUSE Package Hub 15 SP3","product_id":"SUSE Package Hub 15 SP3"}},{"category":"product_name","name":"SUSE Package Hub 15 SP4","product":{"name":"SUSE Package Hub 15 SP4","product_id":"SUSE Package Hub 15 SP4"}},{"category":"product_name","name":"openSUSE Leap 15.3","product":{"name":"openSUSE Leap 15.3","product_id":"openSUSE Leap 15.3","product_identification_helper":{"cpe":"cpe:/o:opensuse:leap:15.3"}}},{"category":"product_name","name":"openSUSE Leap 15.4","product":{"name":"openSUSE Leap 15.4","product_id":"openSUSE Leap 15.4","product_identification_helper":{"cpe":"cpe:/o:opensuse:leap:15.4"}}}],"category":"product_family","name":"SUSE Linux Enterprise"}],"category":"vendor","name":"SUSE"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"rxvt-unicode-9.26-bp154.2.3.1.aarch64 as component of SUSE Package Hub 15 SP3","product_id":"SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.aarch64"},"product_reference":"rxvt-unicode-9.26-bp154.2.3.1.aarch64","relates_to_product_reference":"SUSE Package Hub 15 SP3"},{"category":"default_component_of","full_product_name":{"name":"rxvt-unicode-9.26-bp154.2.3.1.i586 as component of SUSE Package Hub 15 SP3","product_id":"SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.i586"},"product_reference":"rxvt-unicode-9.26-bp154.2.3.1.i586","relates_to_product_reference":"SUSE Package Hub 15 SP3"},{"category":"default_component_of","full_product_name":{"name":"rxvt-unicode-9.26-bp154.2.3.1.ppc64le as component of SUSE Package Hub 15 SP3","product_id":"SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.ppc64le"},"product_reference":"rxvt-unicode-9.26-bp154.2.3.1.ppc64le","relates_to_product_reference":"SUSE Package Hub 15 SP3"},{"category":"default_component_of","full_product_name":{"name":"rxvt-unicode-9.26-bp154.2.3.1.s390x as component of SUSE Package Hub 15 SP3","product_id":"SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.s390x"},"product_reference":"rxvt-unicode-9.26-bp154.2.3.1.s390x","relates_to_product_reference":"SUSE Package Hub 15 SP3"},{"category":"default_component_of","full_product_name":{"name":"rxvt-unicode-9.26-bp154.2.3.1.x86_64 as component of SUSE Package Hub 15 SP3","product_id":"SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.x86_64"},"product_reference":"rxvt-unicode-9.26-bp154.2.3.1.x86_64","relates_to_product_reference":"SUSE Package Hub 15 SP3"},{"category":"default_component_of","full_product_name":{"name":"rxvt-unicode-9.26-bp154.2.3.1.aarch64 as component of SUSE Package Hub 15 SP4","product_id":"SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.aarch64"},"product_reference":"rxvt-unicode-9.26-bp154.2.3.1.aarch64","relates_to_product_reference":"SUSE Package Hub 15 SP4"},{"category":"default_component_of","full_product_name":{"name":"rxvt-unicode-9.26-bp154.2.3.1.i586 as component of SUSE Package Hub 15 SP4","product_id":"SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.i586"},"product_reference":"rxvt-unicode-9.26-bp154.2.3.1.i586","relates_to_product_reference":"SUSE Package Hub 15 SP4"},{"category":"default_component_of","full_product_name":{"name":"rxvt-unicode-9.26-bp154.2.3.1.ppc64le as component of SUSE Package Hub 15 SP4","product_id":"SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.ppc64le"},"product_reference":"rxvt-unicode-9.26-bp154.2.3.1.ppc64le","relates_to_product_reference":"SUSE Package Hub 15 SP4"},{"category":"default_component_of","full_product_name":{"name":"rxvt-unicode-9.26-bp154.2.3.1.s390x as component of SUSE Package Hub 15 SP4","product_id":"SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.s390x"},"product_reference":"rxvt-unicode-9.26-bp154.2.3.1.s390x","relates_to_product_reference":"SUSE Package Hub 15 SP4"},{"category":"default_component_of","full_product_name":{"name":"rxvt-unicode-9.26-bp154.2.3.1.x86_64 as component of SUSE Package Hub 15 SP4","product_id":"SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.x86_64"},"product_reference":"rxvt-unicode-9.26-bp154.2.3.1.x86_64","relates_to_product_reference":"SUSE Package Hub 15 SP4"},{"category":"default_component_of","full_product_name":{"name":"rxvt-unicode-9.26-bp154.2.3.1.aarch64 as component of openSUSE Leap 15.3","product_id":"openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.aarch64"},"product_reference":"rxvt-unicode-9.26-bp154.2.3.1.aarch64","relates_to_product_reference":"openSUSE Leap 15.3"},{"category":"default_component_of","full_product_name":{"name":"rxvt-unicode-9.26-bp154.2.3.1.i586 as component of openSUSE Leap 15.3","product_id":"openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.i586"},"product_reference":"rxvt-unicode-9.26-bp154.2.3.1.i586","relates_to_product_reference":"openSUSE Leap 15.3"},{"category":"default_component_of","full_product_name":{"name":"rxvt-unicode-9.26-bp154.2.3.1.ppc64le as component of openSUSE Leap 15.3","product_id":"openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.ppc64le"},"product_reference":"rxvt-unicode-9.26-bp154.2.3.1.ppc64le","relates_to_product_reference":"openSUSE Leap 15.3"},{"category":"default_component_of","full_product_name":{"name":"rxvt-unicode-9.26-bp154.2.3.1.s390x as component of openSUSE Leap 15.3","product_id":"openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.s390x"},"product_reference":"rxvt-unicode-9.26-bp154.2.3.1.s390x","relates_to_product_reference":"openSUSE Leap 15.3"},{"category":"default_component_of","full_product_name":{"name":"rxvt-unicode-9.26-bp154.2.3.1.x86_64 as component of openSUSE Leap 15.3","product_id":"openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.x86_64"},"product_reference":"rxvt-unicode-9.26-bp154.2.3.1.x86_64","relates_to_product_reference":"openSUSE Leap 15.3"},{"category":"default_component_of","full_product_name":{"name":"rxvt-unicode-9.26-bp154.2.3.1.aarch64 as component of openSUSE Leap 15.4","product_id":"openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.aarch64"},"product_reference":"rxvt-unicode-9.26-bp154.2.3.1.aarch64","relates_to_product_reference":"openSUSE Leap 15.4"},{"category":"default_component_of","full_product_name":{"name":"rxvt-unicode-9.26-bp154.2.3.1.i586 as component of openSUSE Leap 15.4","product_id":"openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.i586"},"product_reference":"rxvt-unicode-9.26-bp154.2.3.1.i586","relates_to_product_reference":"openSUSE Leap 15.4"},{"category":"default_component_of","full_product_name":{"name":"rxvt-unicode-9.26-bp154.2.3.1.ppc64le as component of openSUSE Leap 15.4","product_id":"openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.ppc64le"},"product_reference":"rxvt-unicode-9.26-bp154.2.3.1.ppc64le","relates_to_product_reference":"openSUSE Leap 15.4"},{"category":"default_component_of","full_product_name":{"name":"rxvt-unicode-9.26-bp154.2.3.1.s390x as component of openSUSE Leap 15.4","product_id":"openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.s390x"},"product_reference":"rxvt-unicode-9.26-bp154.2.3.1.s390x","relates_to_product_reference":"openSUSE Leap 15.4"},{"category":"default_component_of","full_product_name":{"name":"rxvt-unicode-9.26-bp154.2.3.1.x86_64 as component of openSUSE Leap 15.4","product_id":"openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.x86_64"},"product_reference":"rxvt-unicode-9.26-bp154.2.3.1.x86_64","relates_to_product_reference":"openSUSE Leap 15.4"}]},"vulnerabilities":[{"cve":"CVE-2008-1142","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2008-1142"}],"notes":[{"category":"general","text":"rxvt 2.6.4 opens a terminal window on :0 if the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections.  NOTE: it was later reported that rxvt-unicode, mrxvt, aterm, multi-aterm, and wterm are also affected.  NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine.","title":"CVE description"}],"product_status":{"recommended":["SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.aarch64","SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.i586","SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.ppc64le","SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.s390x","SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.x86_64","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.aarch64","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.i586","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.ppc64le","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.s390x","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.x86_64","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.aarch64","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.i586","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.ppc64le","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.s390x","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.x86_64","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.aarch64","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.i586","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.ppc64le","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.s390x","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2008-1142","url":"https://www.suse.com/security/cve/CVE-2008-1142"},{"category":"external","summary":"SUSE Bug 415661 for CVE-2008-1142","url":"https://bugzilla.suse.com/415661"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.aarch64","SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.i586","SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.ppc64le","SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.s390x","SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.x86_64","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.aarch64","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.i586","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.ppc64le","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.s390x","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.x86_64","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.aarch64","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.i586","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.ppc64le","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.s390x","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.x86_64","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.aarch64","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.i586","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.ppc64le","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.s390x","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-11-30T08:19:21Z","details":"moderate"}],"title":"CVE-2008-1142"},{"cve":"CVE-2021-33477","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2021-33477"}],"notes":[{"category":"general","text":"rxvt-unicode 9.22, rxvt 2.7.10, mrxvt 0.5.4, and Eterm 0.9.7 allow (potentially remote) code execution because of improper handling of certain escape sequences (ESC G Q). A response is terminated by a newline.","title":"CVE description"}],"product_status":{"recommended":["SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.aarch64","SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.i586","SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.ppc64le","SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.s390x","SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.x86_64","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.aarch64","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.i586","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.ppc64le","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.s390x","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.x86_64","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.aarch64","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.i586","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.ppc64le","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.s390x","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.x86_64","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.aarch64","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.i586","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.ppc64le","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.s390x","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2021-33477","url":"https://www.suse.com/security/cve/CVE-2021-33477"},{"category":"external","summary":"SUSE Bug 1186174 for CVE-2021-33477","url":"https://bugzilla.suse.com/1186174"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.aarch64","SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.i586","SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.ppc64le","SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.s390x","SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.x86_64","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.aarch64","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.i586","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.ppc64le","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.s390x","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.x86_64","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.aarch64","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.i586","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.ppc64le","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.s390x","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.x86_64","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.aarch64","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.i586","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.ppc64le","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.s390x","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.aarch64","SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.i586","SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.ppc64le","SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.s390x","SUSE Package Hub 15 SP3:rxvt-unicode-9.26-bp154.2.3.1.x86_64","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.aarch64","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.i586","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.ppc64le","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.s390x","SUSE Package Hub 15 SP4:rxvt-unicode-9.26-bp154.2.3.1.x86_64","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.aarch64","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.i586","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.ppc64le","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.s390x","openSUSE Leap 15.3:rxvt-unicode-9.26-bp154.2.3.1.x86_64","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.aarch64","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.i586","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.ppc64le","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.s390x","openSUSE Leap 15.4:rxvt-unicode-9.26-bp154.2.3.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-11-30T08:19:21Z","details":"important"}],"title":"CVE-2021-33477"}]}