[Git][security-tracker-team/security-tracker][master] texworks not affected by libsynctex

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3f795233 by Bastien Roucariès at 2026-08-05T23:00:04+02:00
texworks not affected by libsynctex

- - - - -


2 changed files:

- data/CVE/list
- data/embedded-code-copies


Changes:

=====================================
data/CVE/list
=====================================
@@ -14849,7 +14849,7 @@ CVE-2026-63730 (HyperDX before 2.31.0 contains a server-side request forgery vul
 	NOT-FOR-US: HyperDX
 CVE-2026-63729 (The SyncTeX parser (synctex_parser.c) shipped with TeX Live and embedd ...)
 	- texlive-bin 2026.20260303.78225+ds-2
-	- texwork 0.6.11+ds-2
+	- texworks <not-affected> (vulnerable code not compiled use libsynctex2)
 	- texstudio 4.9.6+ds-1
 	- emacs-pdf-tools <not-affected> (vulnerable code not compiled use libsynctex2)
 	- okular <unfixed>


=====================================
data/embedded-code-copies
=====================================
@@ -3978,7 +3978,7 @@ node-systeminformation
 
 libsynctex2 (embed in texlive-bin)
 	- texlive-bin <unfixable> (embed)
-	- texwork <unfixed> (embed)
+	- texworks 0.5~svn1363-5 (embed but not compiled)
 	- texstudio <unfixed> (embed)
 	- emacs-pdf-tools 0.90-1 (embed)
 	- okular <unfixed> (embed)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3f795233495116c6115d3209266b5679cbc5a709

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3f795233495116c6115d3209266b5679cbc5a709
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260805/690b297d/attachment.htm>