HCE2-SA-2024-0309 Critical HCE 2.0 Security Fix(es): xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions. (CVE-2022-45063) HCE 2.0 xterm-363-4.r2.hce2.aarch64.rpm xterm-help-363-4.r2.hce2.aarch64.rpm xterm-363-4.r2.hce2.x86_64.rpm xterm-help-363-4.r2.hce2.x86_64.rpm