Fedora 43 : aerc (2025-edd8754757)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-edd8754757 advisory. Automatic update for aerc-0.20.1-3.fc43. Changelog Thu Jun 5 2025 Robin Jarry - 0.20.1-3 - Fix CVE-2025-49466 fedora2370376 Wed Apr 16 2025 Michael J Gruber ...

CVE-2025-49466

aerc before 93bec0d allows directory traversal in commands/msgview/open.go because of direct path concatenation of the name of an attachment part,...

CVE-2025-49466

CVE-2025-49466 affects the aerc terminal email client. Connected advisories show that the vulnerability arises in aerc before a specific commit (the description cites directory traversal in commands/msgview/open.go caused by direct path concatenation of an attachment name). This leads to potentia...