From nobody Wed Jun 10 12:42:50 2026 X-Original-To: dev-commits-ports-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4gb5635g3xz6g4yX for ; Wed, 10 Jun 2026 12:42:51 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4gb56314Yxz3FfS for ; Wed, 10 Jun 2026 12:42:50 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1781095371; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=a1yyNCY5u4xSsGXamO+vtYGMhRA5MeFm7Fe+XRYIXGs=; b=N+98wmxG3XbeYQhFD3qaOGbOGFDtkjX5NdZGeKoff1AbL4bvTxmw95DUhgOcJaVfFMSzEo ZSfS4TpkiIDp7o0+3PCqWUaa7oF+ZQh+ch87uWA/UwTJRFAF4v4t2SZkbTB5TWK7/XSnKw FWHEJhjQOMxICi5ZeAbdyqgK3Snr6vlNn0HZXgCICKqqOBcjDWkwBthVPIzEW6dZ/5xgYd eQkUUONiqp9B7bkLpJE1vrjAJLhA16+7KY5sVKR3/pTNSbSTl6CRbav8jcXLzpCL+gZ5lt O8A9zzDSp4PkipV/K4EuPByDMHruI7uK/PTHkDi9tcyGVLowMSWvcrC8JDn0mA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1781095371; a=rsa-sha256; cv=none; b=jfszq4nXfnFobmNWZoTfFWw4lNg/Hml72ScT0Yodx34WP3L9JuD64M95wb35E5v3gCQYGc rufZBuue6xRzBtFpopj21zXHT256Wirmbzb7nz6KEkApRtLwBQv20bzbvD3IX5YCVIlI1U JfZBx4rSxd+1qgiqD62RZtmoZ2R8mMX17YMKmtaAGNqrz65j6Oh9zL2Ez/fjW0GyX+Xw7M +k5AH+X+x53dSmjtYGMIXfZiBOp69mIkqVd9dTWlOAaNUk5yXHFDyU5UAkvegGyb6QERNg TmjVTw6gYlttz/WF0vSQQeHZy9c+MaQbTfMtnLTsMtl7PyIbKmk0OHJaCKVJ7w== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1781095371; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=a1yyNCY5u4xSsGXamO+vtYGMhRA5MeFm7Fe+XRYIXGs=; b=VSsFCns4qog5eM8wNpFLGfd3cfFmdByuqEfhYoI/ogsxPDYVV7QZHDqt+TdMF27LezNJe5 BntEuD/A0k3mLugHCUD9WP85LpQRkuVBK/mJun0fACxNM5PHSDd/AC2DNSyBVw6EEd1n+s fP2eqL4k7dCt8oUh69+IzxfZFuAaLQuNMa0+haFJUqD/a0ZqItAQDQe2V4dNqiuMaA5hP7 hwRDklDd0a6tiGNyWSH4JpTMGZK6woE8TmuFH2rI2LLB/FDvPis2IBza05KYWT0O3VjnqD AB6Qcqexb+pCWKlUvgxCGt2s2IumaUd96MIGSb+wvkjlbh12uuqtlJ6c/vHItA== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4gb56263yqz1Kfw for ; Wed, 10 Jun 2026 12:42:50 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 3eb52 by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Wed, 10 Jun 2026 12:42:50 +0000 To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Rodrigo Osorio Subject: git: 91986e7a009a - main - security/vuxml: Document p5-ack vulnerabilities List-Id: Commits to the main branch of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-ports-main@freebsd.org Sender: owner-dev-commits-ports-main@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: rodrigo X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 91986e7a009aa64876926647b93595aa5e480dd3 Auto-Submitted: auto-generated Date: Wed, 10 Jun 2026 12:42:50 +0000 Message-Id: <6a295bca.3eb52.653838c2@gitrepo.freebsd.org> The branch main has been updated by rodrigo: URL: https://cgit.FreeBSD.org/ports/commit/?id=91986e7a009aa64876926647b93595aa5e480dd3 commit 91986e7a009aa64876926647b93595aa5e480dd3 Author: Rodrigo Osorio AuthorDate: 2026-06-10 12:40:52 +0000 Commit: Rodrigo Osorio CommitDate: 2026-06-10 12:41:40 +0000 security/vuxml: Document p5-ack vulnerabilities --- security/vuxml/vuln/2026.xml | 32 ++++++++++++++++++++++++++++++++ 1 file changed, 32 insertions(+) diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml index d7b938bf5bae..c80fcc6a9aed 100644 --- a/security/vuxml/vuln/2026.xml +++ b/security/vuxml/vuln/2026.xml @@ -1,3 +1,35 @@ + + p5-ack -- Multiple issues + + +p5-ack +3.10.0 + + + + +

Ack project reports:

+
+

CVE-2026-49147: filename ANSI escape sequences

+

CVE-2026-49146: project .ackrc -A -B -C memory exhaustion

+

CVE-2026-49145: project .ackrc --follow / --files-from file exfiltration

+
+ + + + CVE-2026-49147 + https://www.suse.com/security/cve/CVE-2026-49147.html + CVE-2026-49146 + https://www.suse.com/security/cve/CVE-2026-49146.html + CVE-2026-49145 + https://www.suse.com/security/cve/CVE-2026-49145.html + + + 2026-06-07 + 2026-06-10 + + + tree-sitter-cli -- Always-Incorrect Control Flow Implementation in wasmtime crate