<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: cygwin</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2021-29468: Cygwin Git is a patch set for the git command line tool for the cygwin environment</title><link>https://patchthecve.com/cve/CVE-2021-29468.html</link><guid>https://patchthecve.com/cve/CVE-2021-29468.html</guid><pubDate>Wed, 17 Jun 2026 03:47:42 +0000</pubDate><description>HIGH 8.8: Cygwin Git is a patch set for the git command line tool for the cygwin environment. A specially crafted repository that contains symbolic links as well as files with backslash characters in the file name may cause just-checked out code to be executed while checking out a repository using Git on Cygw</description></item><item><title>CVE-2017-7523: Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcs</title><link>https://patchthecve.com/cve/CVE-2017-7523.html</link><guid>https://patchthecve.com/cve/CVE-2017-7523.html</guid><pubDate>Wed, 17 Jun 2026 01:24:31 +0000</pubDate><description>HIGH 7.5: Cygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability in wcsxfrm/wcsxfrm_l functions resulting into denial-of-service by crashing the process or potential hijack of the process running with administrative privileges triggered by specially crafted input strin</description></item><item><title>CVE-2016-3067: Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers </title><link>https://patchthecve.com/cve/CVE-2016-3067.html</link><guid>https://patchthecve.com/cve/CVE-2016-3067.html</guid><pubDate>Wed, 17 Jun 2026 00:44:54 +0000</pubDate><description>CRITICAL 9.8: Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges.</description></item></channel></rss>