Ivo vakawana kusagadzikana mu xterm kunotungamira mukuitwa kwekodhi

Kuzvidzivirira

Kana dzikashandiswa, zvikanganiso izvi zvinogona kubvumira vanorwisa kuti vawane mukana usina mvumo kune ruzivo rwakadzama kana kuti kazhinji kukonzera matambudziko.

Munguva pfupi yapfuura nhau dzakabvarura izvo kusagadzikana kwakawanikwa mune xterm terminal emulator (yakatonyorwa pasi peCVE-2022-45063), dambudziko inobvumira kuita mirairo ye shell kana kumwe kutevedzana kwekupukunyuka kuchigadziriswa muterminal.

Nezve dambudziko rinotaurwa kuti imhaka yekukanganisa mukugadziriswa kwekodhi kodhi 50 iyo inoshandiswa kuseta kana kuwana mafonti sarudzo. Kana iyo yakakumbirwa font isipo, oparesheni inodzosera zita reiyo font yakataurwa muchikumbiro.

Dambudziko riri muOSC 50 kutevedzana, iyo ndeyekugadzirisa uye kubvunza tsime. Kana iyo yakapihwa sosi isipo, haina kuiswa, asi mubvunzo ichadzosa zita rakanyorwa. Kudzora mavara haagone kuve inosanganisirwa, asi tambo yekupindura inogona kugumiswa ne^G. Mabvazuva zvinototipa zvechinyakare kudzosa zvinyorwa kune terminal uye kupera na^G.

Mavara ekudzora haagone kuiswa zvakananga muzita, asi tambo yakadzoserwa inogona kumiswa nekutevedzana "^G", iyo mu zsh, kana vi-style mutsara editing mode ichishanda, inokonzera rondedzero-kuwedzera kushanda kuti iitwe, iyo inogona kushandiswa kuita mirairo pasina kunyatsodzvanya kiyi yekupinda.

Nekuda kwekurwiswa kuri nyore, zvakakwana kuratidza zvinyorwa zvefaira rakagadzirirwa pachiratidziro, semuenzaniso, kushandisa katsi utility, kana kunamira mutsara kubva pa clipboard.

Debian, Red Hat uye vamwe vanodzima font mashandiro nekukasira , asi vashandisi vanogona kuzvigonesa zvakare kuburikidza nesarudzo kana kugadzirisa menyu. Zvakare, kumusoro kwexterm kunoita haidzimise nekusingaperi, saka kumwe kugovera kunosanganisira a Inotapukira default gadziriso.

Kuti ubudirire kushandisa kusagadzikana, mushandisi anofanira kushandisa Zsh shell ine command line edhita (vi-cmd-mode) yakachinjirwa ku "vi" modhi., iyo isingawanzo shandiswa nekusarudzika mukugovera.

Chaizvoizvo, tinoda:
zsh
active line edit mode mu vi style
kopira zvinyorwa zvetrojan kune clipboard
namatidza mu zsh

Izvi zvinogona kuitwa otomatiki, mawebhusaiti mazhinji anogadzirisa zvinyorwa kana zvakopwa kuclipboard. Saka ini ndinongoshandisa sarudzo yekusarudza, iyo isingawanikwe nemabhurawuza. Chete mu gtk3 uye in ff kunyanya vanogara vachityora nekuda kwechimwe chikonzero, zvinonetesa.

Dambudziko zvakare hariratidzike kana xterm yaiswa allowWindowOps=nhema kana allowFontOps=nhema. Semuenzaniso, iyo configuration allowFontOps=nhema yakaiswa paOpenBSD, Debian, uye RHEL, asi haimanikidzwe nekukasira paArch Linux.

Zvinoenderana neshanduko yerogi uye chirevo chemuongorori akaziva nyaya, kusagadzikana yakatarwa mu xterm 375 vhezheni, asi maererano nemamwe masosi, kusagadzikana kunoramba kuchizviratidza muArch Linux's xterm 375.

Izvi zvinoreva kuti kushandisa kusagadzikana uku, mushandisi anofanira kunge ari
uchishandisa Zsh mu vi line editing mode (kazhinji kuburikidza ne $ EDITOR iyo ine "vi" mukati
ndizvo). Kunyange zvisinganzwisisike, izvi hazvisi zvisinganzwike zvachose.
kugadzirisa

Mune iyo setup, chimwe chinhu chakadai:
printf "\e]50;i\$(kubata /tmp/hack-like-its-1999)\a\e]50;?\a" > cve-2022-45063
katsi cve-2022-45063 # kana imwe nzira yekuendesa iyi kune akabatwa

Chekupedzisira, senguva dzose, vashandisi veakakanganisika masisitimu vanokurudzirwa kuti vachengetedze masisitimu avo kusvika parizvino, nekuti sezvaunozoziva kana kusadzivirirwa kunozivikanwa, vanogadzira vanofanirwa kugadzirisa tsikidzi idzi, nekuti yakawanda sei mabhigi aya anogona kushandiswa anoburitswa.

Zvakakodzera kutaura izvozvo mashandisirwo efonti haatenderwi mumasetin'i ekutanga e xterm ye kumwe kugoverwa kweLinux, saka hazvisi zvese kugovera zvinowanzoitika kune iyi bug. Kune avo vanofarira kutevera kuburitswa kweruramiso nekugovera, vanogona kuzviita pamapeji aya: DebianRHELFedorasuseUbuntuArch LinuxOpenBSDFreeBSDNetBSD.

Kana uri kufarira kuziva zvakawanda nezvazvo, unogona kutarisa ruzivo Mune inotevera chinongedzo.


Siya yako yekutaura

Your kero e havazobvumirwi ichibudiswa. Raida minda anozivikanwa ne *

*

*

  1. Inotarisira iyo data: Miguel Ángel Gatón
  2. Chinangwa cheiyo data: Kudzora SPAM, manejimendi manejimendi.
  3. Legitimation: Kubvuma kwako
  4. Kutaurirana kwedata
  5. Dhata yekuchengetedza: Dhatabhesi inobatwa neOccentus Networks (EU)
  6. Kodzero: Panguva ipi neipi iwe unogona kudzora, kupora uye kudzima ruzivo rwako