MGASA-2022-0364
- Source
- https://advisories.mageia.org/MGASA-2022-0364.html
- Import Source
- https://advisories.mageia.org/MGASA-2022-0364.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2022-0364
- Related
- Published
- 2022-10-08T20:22:22Z
- Modified
- 2022-10-08T19:29:45Z
- Summary
- Updated kitty packages fix security vulnerability
- Details
-
In Kitty before 0.26.2, insufficient validation in the desktop notification escape sequence can lead to arbitrary code execution. The user must display attacker-controlled content in the terminal, then click on a notification popup. (CVE-2022-41322)
- References
-
- https://advisories.mageia.org/MGASA-2022-0364.html
- https://bugs.mageia.org/show_bug.cgi?id=30930
- https://nvd.nist.gov/vuln/detail/CVE-2022-41322
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/47RK7MBSVY5BWDUTYMJUFPBAYFSWMTOI/
- https://sw.kovidgoyal.net/kitty/changelog/#id2
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:8 / kitty
Package
- Name
- kitty
- Purl
- pkg:rpm/mageia/kitty?distro=mageia-8