[Git][security-tracker-team/security-tracker][master] Triage kitty issues

Aron Xu (@aron) aron at debian.org
Sun Aug 9 06:30:25 BST 2026



Aron Xu pushed to branch master at Debian Security Tracker / security-tracker


Commits:
22a0cea4 by Aron Xu at 2026-08-09T13:30:11+08:00
Triage kitty issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -46221,7 +46221,11 @@ CVE-2026-54057 (Kitty is a cross-platform GPU based terminal. In versions prior
 	NOTE: https://github.com/kovidgoyal/kitty/security/advisories/GHSA-5gmr-9gwg-hhq6
 CVE-2026-54056 (Kitty is a cross-platform GPU based terminal. In versions 0.47.0 and 0 ...)
 	- kitty 0.47.3-1 (bug #1139898)
+	[trixie] - kitty <not-affected> (Vulnerable code introduced later)
+	[bookworm] - kitty <not-affected> (Vulnerable code introduced later)
+	[bullseye] - kitty <not-affected> (Vulnerable code introduced later)
 	NOTE: https://github.com/kovidgoyal/kitty/security/advisories/GHSA-r892-cv7q-fw8x
+	NOTE: Only the dnd kitten is affected, introduced with: https://github.com/kovidgoyal/kitty/commit/bcae760ea7e48e50e5c2f7e13d47881128172c31 (v0.47.0)
 CVE-2026-54055 (Kitty is a cross-platform GPU based terminal. In versions prior to 0.4 ...)
 	- kitty 0.47.3-1 (bug #1139898)
 	NOTE: https://github.com/kovidgoyal/kitty/security/advisories/GHSA-q446-x7q6-vcxh



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/22a0cea44c42d0d8b9eb6e5b700e4cc3b8a0a87b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/22a0cea44c42d0d8b9eb6e5b700e4cc3b8a0a87b
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260809/d006fb2a/attachment.htm>


More information about the debian-security-tracker-commits mailing list