A new upstream version 4.06c is available, you should consider packaging it.
debian/patches: 1 patch with invalid metadata, 2 patches to forward upstream
high
Among the 5 debian patches
available in version 4.04c-4 of the package,
we noticed the following issues:
1 patch with
invalid metadata that ought to be fixed.
2 patches
where the metadata indicates that the patch has not yet been forwarded
upstream. You should either forward the patch upstream or update the
metadata to document its real status.
1 issue left for the package maintainer to handle:
CVE-2023-26266:
(needs triaging)
In AFL++ 4.05c, the CmpLog component uses the current working directory to resolve and execute unprefixed fuzzing targets, allowing code execution.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/a/aflplusplus.png){kind=link}