Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: e842e94f by Salvatore Bonaccorso at 2026-10-13T13:30:52+02:00 Add two new fzf issues - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,9 @@ +CVE-2026-XXXX [GHSA-w6x2-f5m4-xw82: Arbitrary command execution via bash arithmetic expansion on unvalidated layout size in fzf-tmux (-l/-u attached value)] + - fzf <unfixed> + NOTE: https://github.com/junegunn/fzf/security/advisories/GHSA-w6x2-f5m4-xw82 +CVE-2026-XXXX [GHSA-7rj6-7pqx-v7rm: Predictable FIFO path in zsh completion allows local symlink attack / arbitrary file overwrite as the victim user (_fzf_feed_fifo)] + - fzf <unfixed> + NOTE: https://github.com/junegunn/fzf/security/advisories/GHSA-7rj6-7pqx-v7rm CVE-2026-9268 (GitLab has remediated an issue in GitLab EE affecting all versions fro ...) NOT-FOR-US: GitLab (used to be packaged in the Debian archive as src:gitlab, but never in a stable release) CVE-2026-97691 (Convex is an open-source reactive database for application developers. ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e842e94fa551aedbec5245cee79e6953ede85bee -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e842e94fa551aedbec5245cee79e6953ede85bee You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
