🟡 Medium ⏱ 10–30 min Last verified: 12 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-11143 CVE-2025-1948 CVE-2025-5115 CVE-2026-1605 CVE-2026-2332 CVE-2026-5795 Upstream summary: The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs. Differential parsing of […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: NetBSD 9.4 📖 ~4 min read • Source: pkgsrc audit-packages entry Related CVEs: CVE-2025-57812 CVE-2025-64503 Upstream summary: pkgsrc audit-packages flagged libcupsfilters<2.1.1 for vulnerability class 'out-of-bounds-write'. Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-57812 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-24359 Upstream summary: ASTEVAL is an evaluator of Python expressions and statements. Prior to version 1.0.6, if an attacker can control the input to the `asteval` library, they […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory Related CVEs: CVE-2021-29462 CVE-2026-41682 CVE-2016-6255 CVE-2016-8863 CVE-2021-28302 Upstream summary: The Portable SDK for UPnP Devices is an SDK for development of UPnP device and control point applications. The server part of […]
🟡 Medium ⏱ 10–30 min Last verified: 12 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0050 CVE-2015-1783 CVE-2021-28091 CVE-2025-46404 CVE-2025-46705 CVE-2025-46784 CVE-2025-47151 Upstream summary: Lasso 2.2.1 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-1425 Upstream summary: A security flaw has been discovered in pymumu SmartDNS up to 47.1. This vulnerability affects the function _dns_decode_rr_head/_dns_decode_SVCB_HTTPS of the file src/dns.c of the component […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-25016 Upstream summary: A safety violation was discovered in the rgb crate before 0.8.20 for Rust, leading to (for example) dereferencing of arbitrary pointers or disclosure of uninitialized memory. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2026-44028 CVE-2025-46415 CVE-2025-52991 CVE-2025-52992 CVE-2025-52993 Upstream summary: An issue was discovered in Nix before 2.34.7 and Lix before 2.95.2. Unbounded recursion in the NAR (Nix […]
🟢 Low ⏱ 5–15 min Last verified: 12 April 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-53603 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟡 Medium ⏱ 10–30 min Last verified: 12 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-8825 CVE-2020-15953 CVE-2022-4121 Upstream summary: A null dereference vulnerability has been found in the MIME handling component of LibEtPan before 1.8, as used in MailCore and MailCore 2. […]
