An issue was discovered in Croc through 9.6.5. A sender may place ANSI or CSI escape sequences in a filename to attack the terminal device of a receiver. https://www.openwall.com/lists/oss-security/2023/09/08/2 https://github.com/schollz/croc/issues/595
Created golang-github-schollz-croc tracking bugs for this issue: Affects: fedora-all [bug 2240123]
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.