#incomplete-fix

0 stories this week · 3 this month · 9 in 6 months · mostly security

Stories per day · 30 days

9 stories, newest first · one card per story

Path checks added after CVE-2026-40047 do not reject absolute paths supplied as custom CLI arguments.

Salvatore Bonaccorso flags CVE-2026-108976 as an incomplete fix for Emacs CVE-2026-79992.

Maintainers say the Emacs fix for CVE-2026-79992 is incomplete and request another CVE.

Researchers found Emacs CVE-2026-79992's fix incomplete because TRAMP still accepts dangerous username characters.

oss-securitySep 23, 2026high

CVE-2026-96442 was assigned for an incomplete Emacs fix of arbitrary code execution CVE-2024-53920.

Bas Alberts asks Red Hat to assign a CVE for an incomplete Emacs fix of CVE-2024-53920.

Tomas Hoger asks oss-security whether GitHub or Red Hat will assign a CVE for Emacs's incomplete fix of arbitrary code execution bug CVE-2024-53920.

oss-securitySep 21, 2026high

Apache MINA left the CVE-2026-47065 proxy filter-bypass fix off the 2.0 and 2.1 branches.

oss-securitySep 14, 2026high

Incomplete fix for Emacs CVE-2024-53920 allows arbitrary code execution when viewing or editing untrusted files in non-Lisp modes like Perl flymake.

Stories tagged #incomplete-fix