CVE-2024-2961

[lisenet]

https://nvd.nist.gov/vuln/detail/CVE-2024-2961

Check if the system has the compromised set, running iconv -l | grep -E 'CN-?EXT'.

If there is no output, the system is safe to this vulnerability. If the output is similar to the one below, the system is vulnerable. Read below for the steps to fix it.

$ iconv -l | grep -E 'CN-?EXT'
ISO-2022-CN-EXT//
ISO2022CNEXT//

Browse to /usr/lib64/gconv/gconv-modules.d.

Edit gconv-modules-extra.conf.

Go to line 1254 and comment out the following:

 alias ISO2022CNEXT//          ISO-2022-CN-EXT//
 module        ISO-2022-CN-EXT//       INTERNAL                ISO-2022-CN-EXT 1
 module        INTERNAL                ISO-2022-CN-EXT//       ISO-2022-CN-EXT 1

Do sudo iconvconfig to regenerate the cache.

Now, running iconv -l | grep -E 'CN-?EXT' should return no output.