[tmux-git@googlegroups.com: [tmux/tmux] a868ba: Do not write after the end of the array and overwr...]

[Nicholas Marriott]

Hi all

This is a potential security issue so packagers may want to include this
as a patch. Here is the OpenBSD errata:

https://ftp.openbsd.org/pub/OpenBSD/patches/6.8/common/003_tmux.patch.sig

And the corresponding GitHub commit is:

https://github.com/tmux/tmux/commit/a868bacb46e3c900530bed47a1c6f85b0fbe701c



----- Forwarded message from 'Thomas Adam' via tmux-git <tmux...@googlegroups.com> -----

From: 'Thomas Adam' via tmux-git <tmux...@googlegroups.com>
To: tmux...@googlegroups.com
Date: Thu, 29 Oct 2020 11:03:08 -0700
Subject: [tmux/tmux] a868ba: Do not write after the end of the array and
overwr...

Branch: refs/heads/master
Home: https://github.com/tmux/tmux
Commit: a868bacb46e3c900530bed47a1c6f85b0fbe701c
https://github.com/tmux/tmux/commit/a868bacb46e3c900530bed47a1c6f85b0fbe701c
Author: nicm <nicm>
Date: 2020-10-29 (Thu, 29 Oct 2020)

Changed paths:
M input.c

Log Message:
-----------
Do not write after the end of the array and overwrite the stack when
colon-separated SGR sequences contain empty arguments. Reported by Sergey
Nizovtsev.

[Scott Rochford]

RHEL/CentOS packages updated yesterday.

https://anni.galaxy4.net/?page_id=39

--
You received this message because you are subscribed to the Google Groups "tmux-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tmux-users+...@googlegroups.com.
To view this discussion on the web, visit https://groups.google.com/d/msgid/tmux-users/20201030081643.vvje3w652im4a7o6%40yelena.