Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Debian 11: DLA-4203-1 urgent: kitty code execution vulnerability fix

debian lts
Calendar Grey June 1, 2025
Dist Debian Esm H88
A significant security notice for Debian LTS highlights the risk of arbitrary code execution in kitty, necessitating an urgent update of the package.
A vulnerability has been found in kitty, a fast, featureful, GPU based terminal emulator, which possible allows arbitrary code execution
Topics%20covered

Topics Covered

security advisory update code execution debian vulnerability kitty

Summary

CVE-2022-41322

In Kitty before 0.26.2, insufficient validation in the desktop
notification escape sequence can lead to arbitrary code execution. The
user must display attacker-controlled content in the terminal, then
click on a notification popup.

For Debian 11 bullseye, this problem has been fixed in version
0.19.3-1+deb11u1.

We recommend that you upgrade your kitty packages.

For the detailed security status of kitty please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/kitty

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: kitty
Version: 0.19.3-1+deb11u1
CVE ID: CVE-2022-41322
Debian Bug: 1020582

Topics%20covered

Topics Covered

security advisory update code execution debian vulnerability kitty

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here