Debian Patches

Status for kitty/0.41.1-2+deb13u2

Patch Description Author Forwarded Bugs Origin Last update
0001-use-usr-bin-env-in-shebang.patch use /usr/bin/env in shebang
This is to fix lintian's error regarding the shebang.		 Maytham Alsudany <maytha8thedev@gmail.com> no 2023-11-06
0002-replace-changelog-commit-hashes-with-urls.patch replace changelog commit hashes with urls
When trying to build the docs, it can't find the commits referenced in the changelog (since this isn't the original kitty repo).
All references to commits are replaced with links to the commits in GitHub.		 Maytham Alsudany <maytha8thedev@gmail.com> not-needed 2023-11-08
0003-do-not-run-go-tests-from-python-testcode.patch Do not run tests inside go testing directory
Use dh-golang's buildsystem to test instead of kitty's upstream system		 Nilesh Patra <nilesh@debian.org> no 2023-11-08
0004-skip-TestHintMarking.patch Skip unreliable go tests.
TestHintMarking is failing consistently.
TestCreateAnonymousTempfile fails inside chroot environments.		 Nilesh Patra <nilesh@debian.org> no 2023-11-08
0005-link-alternate-icons-in-the-faq.patch Link alternate icons in the FAQ
This eliminates a privacy breach by linking to the alternate icons rather than showing them to the user directly.		 Maytham Alsudany <maytha8thedev@gmail.com> not-needed 2023-11-10
0007-link-intro-vid-instead-of-embedding.patch Link intro video instead of embedding
Removes a privacy breach.		 Maytham Alsudany <maytha8thedev@gmail.com> not-needed 2023-11-10
0008-link-graphics-protocol-image.patch Link graphics-protocol image
This eliminates a privacy breach.		 Maytham Alsudany <maytha8thedev@gmail.com> not-needed 2023-11-10
0009-skip-two-tests-on-ppc64.patch Disable two tests that are failing on ppc64el Nilesh Patra <nilesh@debian.org> yes 2023-11-17
0010-disable-kitten-update-self-command.patch Remove kitten update-self command
Command does not work as the build is not standalone and is unneeded since this
is a package.		 Maytham Alsudany <maytha8thedev@gmail.com> not-needed 2023-11-13
0011-ignore-vendor-dir.patch Ignore deps in vendor dir/ This patch can be removed once we devendor image/integration Nilesh Patra <nilesh@debian.org> not-needed 2024-05-01
0012-do-not-hardcode-gopsutil-v3.patch Do not hardcode gopsutil v3
We can use v4 when no version suffix is used. Remove it so that we can
upgrade the gopsutil modules from v3 to v4 in Debian.		 Guillem Jover <gjover@sipwise.com> no 2024-10-01
0013-avoid-failing-font-tests-on-ci.patch no
0014-use-disintegration-imaging.patch Use disintegration/imaging The security vulnerability in Debian's package has been fixed. Maytham Alsudany <maytham@debian.org> not-needed
0015-backport-s390x-ftbfs-fix.patch Fix endianness bug reported in issue #8548 Pranav P <pranavsdreams@gmail.com> no 2025-05-21
0016-CVE-2026-33633.patch Graphics protocol: Fix crash when handling invalid PNG image with direct transmission Kovid Goyal <kovid@kovidgoyal.net> no 2026-03-21
0017-CVE-2026-33642.patch Graphics protocol: Fix crash when handling invalid offset values in graphics compose commands Kovid Goyal <kovid@kovidgoyal.net> no 2026-03-22
0018-CVE-2026-42850.patch Sanitize ssh kitten shm open error message when sending over tty

This prevents sending attacker controlled data over the tty where it
might end up getting evaled by the shell if the user is doing something
like cat of unsanitized data into the terminal (something that should
never be done).		 Kovid Goyal <kovid@kovidgoyal.net> no 2026-04-24
0019-CVE-2026-42851.patch edit-in-kitty: Ignore environment variables as some editors execute code present in env vars Kovid Goyal <kovid@kovidgoyal.net> no 2026-04-04
0020-CVE-2026-54055.patch File transfer protocol: use O_NOFOLLOW when opening regular files Kovid Goyal <kovid@kovidgoyal.net> no 2026-06-03
0021-CVE-2026-54057.patch Sanitise color control responses for shells that still dont use the kitty keyboard protocol Kovid Goyal <kovid@kovidgoyal.net> no 2026-06-09

All known versions for source package 'kitty'

Links