Added mitigation for https://seclists.org/oss-sec/2021/q2/145 in urxvt

x11-terms/rxvt-unicode/Manifest

@@ -1,6 +1,7 @@
 AUX rxvt-unicode-9.06-case-insensitive-fs.patch 238 BLAKE2B 887eec8ec419900765ede1a8b75ea0acde945275af0e524e4382610a40d1e42b2f0be9879bf7c25cb00da6ae410e554567efdcc2f43ceff52e37c44060e6c4a7 SHA512 5257b1d33e25a6a390da2f23100fc3a2b8dcc4787205273933c2ba64ecf72e663cdc0cb86273a1ffa1a87b04bbeeff9edbc8c028c521ae612722f21cf6c40762
 AUX rxvt-unicode-9.21-xsubpp.patch 640 BLAKE2B 51b9f626436153239ca98df1094c5bbadaca463cf3624d39094cf5dce75a42c23568584292cd55b891439a45bc7d9e3fbf098ec80743b44267e6c3c1d0b339ca SHA512 70f4c5cb7b6a440f009f693c4dc2f8595051e198250d375cd18704c35059596d77938a3d062740bd26f947bfebdb67ea7d46f59f8cbf08fc73193a62267723ec
 AUX rxvt-unicode-9.22-add-space-to-extent_test_chars.patch 662 BLAKE2B a8b177701531b071152a51f56f942741ed8b95e9e367012b898c64625e9b226a8ee8396d552b4794a285f42f3981fb5a4c08bad1b3aef07e761cafbbedf4326e SHA512 e28da6449d273b855eeacb4605e19b34f245acc34a82fe2be6505c27f0f4fc1e56410160256871444e4b95f5f61da67ac705d1742df773a1f596440c71915bce
+AUX rxvt-unicode-9.22-disable-graphics-query.patch 1001 BLAKE2B 594376fa4b7d11558d54930e91cfd5aaf4afb05bbe326e5ba93ff7a6b2c9ae5da98206c9c3be506eec5bb9760a7abbe53ca3c45db03859c8e4bd44c59b5caf25 SHA512 71f3580965c809ceb0f90bc96cfe2b3e6790c3e3093a9bd09e5004cae96c5746295af0c1dbf42fbd2c4ead24751e0e442562cc78ac48acae3bc668621dfc0876
 AUX rxvt-unicode-9.22-enable-wide-glyphs.patch 9098 BLAKE2B 5741ca2d7d38639f521037aaf3a2bca6e13973d6e8f8793310ec592f861c62e2ab89b779855003cc29fd9579c70a081e140ceade3d724a36afd0ef099d43527a SHA512 8e3a64387cbc6dfad737cce7abc984147fdccd4b3437f4a4cf5e36108b2f32327aa2423984ec13c6d42fe511793de09c4f0de95d4b8f62846fd20c00521d1d6a
 AUX rxvt-unicode-9.22-font-width-fix.patch 993 BLAKE2B 40a35433bb78cdec5c6469f9a0d80b608dba39c6ecbb57bcc9bf9999e4ae071793bf843f3efaeef5d0947c8b5f0b8334db3a235d0b3d9db0cd6bf3fba0d408ec SHA512 dd468475ec2eefd36616b59563306cbb1779c9b9634c9bdc8a5119a82a6b6ceeecdb560cc20543cf9ab13feb6dbd621ea7d40b72c598245da630890b73a2e99f
 AUX rxvt-unicode-9.22-line-spacing-fix.patch 911 BLAKE2B fcd71e94b979987e56459f52f0ddcfac0b6b64df97bc60d22ad3e23195c8a0e6b61227c4157332029f6d9116c6f876f0565bf5ddface2a79cc88876e1be959c2 SHA512 87f7c8847111420846c6b5f925953cc69ae3b765cb2af6702ed86ac5a0e450d8a14fc02731c3210ccc7ab99ea4729c406c1dee15bfde356b3e139b4658792c2b
@@ -8,4 +9,6 @@ AUX rxvt-unicode-9.22-sgr-mouse-mode-flag.patch 5613 BLAKE2B 28cf8af70841027ba25
 AUX urxvtd.service 145 BLAKE2B 9199c81f02ff161caf6f72bac95808d4ba584bf09fb68cf7fef1bdf883873fe360816d8736835987a61c1cf0ac1be469aa47f2b74e96d8215a3ac17de896d6a5 SHA512 a77606d11e80c8d117917ab34a6d2ca430c667372ee713cf8519e49df4d972f289399d49bd808a9d31fa343d11c2fd2eb761b813be3f2892784d1dd9c281fc38
 DIST rxvt-unicode-9.22.tar.bz2 931198 BLAKE2B ea9a12e4a8396ed6be12b4d50ae260a0376902dbd47b0628bb14ce0509c5d89f5a80370b413fdb9df9b8b81728ec26e115cbf0d88ab6e9cb2a87b03b5d79c432 SHA512 b39f1b2cbe6dd3fbd2a0ad6a9d391a2b6f49d7c5e67bc65fe44a9c86937f8db379572c67564c6e21ff6e09b447cdfd4e540544e486179e94da0e0db679c04dd9
 DIST rxvt-unicode-9.22_24-bit-color_cpixl-20201108.patch.xz 8116 BLAKE2B 27940ad42ee3f26c357a50b7fae1e1539acec71f5ff43e7ed16167d0adb175c4de20ba84880f25eec0817703d937d097fda228541d16511811efe5816109e71b SHA512 2b8bbb90c6bb223f622c1e99d62a70a812604d1f8e57cea37a8faf0af578588d3888ea8009568d623710cc03e020a69269770e23476fd9ff9e46dbd9ea23f540
-EBUILD rxvt-unicode-9.22-r10.ebuild 3350 BLAKE2B 0dd8547248bb1226c10e8dd7dc0e56329bfcb421c28db59b09844568c9a8a5bbecf04c5533ca276ff35155f9830b42b25e2f099956297703787ed1ca15961308 SHA512 5ff56cf1ecafe108a8b8d120b7f7d8d1f986bd0f75c3d5e96d10835b4cb6be344b3f305f7cbdda1d7bddabd5854d49986a3b08353260db63ea02246fc9fb36d1
+DIST rxvt-unicode-9.26.tar.bz2 904950 BLAKE2B 1790d02eeadf630cc9bc718288af2f6bd19c3e320d3dbfa44c8cef516c8e790e0abfbfe4e557795749ddd3ec41b8358f6eac623c060240f091b3e84a549151ad SHA512 35560b57730e17c9542ea4a615fd86ce703c4e6421323e8fe1570007737a880fde90d17943e5af9e170be4111b9769f4aa7e57efca5428421fdc1c299112f8e0
+EBUILD rxvt-unicode-9.22-r10.ebuild 3405 BLAKE2B 6babcef442d1438f50f55acdd27e9750c3264f5dd46dbf794b2d62c75e58163fdb2d4a0eb0ec145615d395407777504790b56410cb6bc7907a385be32169cd91 SHA512 32b9435c7ff7df0f160eab21cea494de7c755045861f439133170a32e78216d4bc365a1825d09bfd5e56ceca314303e51bfe1e0547cd383143fadda7988c0389
+EBUILD rxvt-unicode-9.26.ebuild 2431 BLAKE2B 03c40cb09da82783a9fb8c378d9681ecda16a9e468e6b5c15cf98492331fc391324d09d9e158aee60c068ecbbc7f0c25f1034bac944c152d539d9f41e20c9362 SHA512 bb2c3ad2379bd96478769689a3816f413f74926f1946b2f428de8a61328b440ee098f45327ddd8f128c959a49aea3104dad41e745dfa280cf46d057d4ef4efd8

x11-terms/rxvt-unicode/files/rxvt-unicode-9.22-disable-graphics-query.patch

@@ -0,0 +1,23 @@
+diff -ur rxvt-unicode-9.22-orig/src/command.C rxvt-unicode-9.22/src/command.C
+--- rxvt-unicode-9.22-orig/src/command.C	2016-01-18 20:35:08.000000000 +0100
++++ rxvt-unicode-9.22/src/command.C	2021-05-17 21:22:29.068263084 +0200
+@@ -2722,12 +2722,13 @@
+         }
+         break;
+ 
+-        /* kidnapped escape sequence: Should be 8.3.48 */
+-      case C1_ESA:		/* ESC G */
+-        // used by original rxvt for rob nations own graphics mode
+-        if (cmd_getc () == 'Q')
+-          tt_printf ("\033G0\012");	/* query graphics - no graphics */
+-        break;
++// disabled because embedded newlines can make exploits easier
++//        /* kidnapped escape sequence: Should be 8.3.48 */
++//      case C1_ESA:		/* ESC G */
++//        // used by original rxvt for rob nations own graphics mode
++//        if (cmd_getc () == 'Q')
++//          tt_printf ("\033G0\012");	/* query graphics - no graphics */
++//        break;
+ 
+         /* 8.3.63: CHARACTER TABULATION SET */
+       case C1_HTS:		/* ESC H */

x11-terms/rxvt-unicode/rxvt-unicode-9.22-r10.ebuild

@@ -42,6 +42,7 @@ PATCHES=(
 	"${FILESDIR}"/${PN}-9.22-line-spacing-fix.patch
 	"${FILESDIR}"/${PN}-9.22-enable-wide-glyphs.patch
 	"${FILESDIR}"/${PN}-9.22-add-space-to-extent_test_chars.patch
+	"${FILESDIR}"/${PN}-9.22-disable-graphics-query.patch
 )
 DOCS=(
 	Changes