CVE-2022-42906

NameCVE-2022-42906
Descriptionpowerline-gitstatus (aka Powerline Gitstatus) before 1.3.2 allows arbi ...
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDLA-3277-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
powerline-gitstatus (PTS)bullseye1.3.2-0+deb11u1fixed
bookworm1.3.2-1fixed
forky, sid, trixie1.3.3-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
powerline-gitstatussourcebuster1.3.2-0+deb10u1DLA-3277-1
powerline-gitstatussourcebullseye1.3.2-0+deb11u1
powerline-gitstatussource(unstable)1.3.2-1

Notes

https://github.com/jaspernbrouwer/powerline-gitstatus/issues/45
https://github.com/jaspernbrouwer/powerline-gitstatus/pull/46
Search for package or bug name: Reporting problems