This file contains ambiguous Unicode characters that may be confused with others in your current locale. If your use case is intentional and legitimate, you can safely ignore this warning. Use the Escape button to highlight these characters.
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE glsa SYSTEM "http://www.gentoo.org/dtd/glsa.dtd">
<glsaid="202011-10">
<title>tmux: Buffer overflow</title>
<synopsis>A buffer overflow in tmux might allow remote attacker(s) to execute
arbitrary code.
</synopsis>
<producttype="ebuild">tmux</product>
<announced>2020-11-11</announced>
<revisedcount="1">2020-11-11</revised>
<bug>753206</bug>
<access>remote</access>
<affected>
<packagename="app-misc/tmux"auto="yes"arch="*">
<unaffectedrange="ge">3.1c</unaffected>
<vulnerablerange="lt">3.1c</vulnerable>
</package>
</affected>
<background>
<p>tmux is a terminal multiplexer.</p>
</background>
<description>
<p>A flaw in tmux’s handling of escape characters was discovered which
may allow a buffer overflow.
</p>
</description>
<impacttype="normal">
<p>A remote attacker could possibly execute arbitrary code with the
privileges of the process, or cause a Denial of Service condition.
</p>
</impact>
<workaround>
<p>There is no known workaround at this time.</p>
</workaround>
<resolution>
<p>All tmux users should upgrade to the latest version:</p>