🟢 Low ⏱ 5–15 min Last verified: 18 January 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-5072 CVE-2024-47855 Upstream summary: Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size […]
🟠 High ⏱ 15–60 min Last verified: 15 January 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-46304 CVE-2025-65493 CVE-2025-65494 CVE-2025-65495 CVE-2025-65496 CVE-2025-65497 CVE-2025-65498 CVE-2025-65499 +2 more Upstream summary: A NULL pointer dereference in libcoap v4.3.5-rc2 and below allows a remote attacker to cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 12 January 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-28617 CVE-2024-30203 CVE-2024-30204 CVE-2024-30205 CVE-2024-39331 Upstream summary: org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name […]
🟢 Low ⏱ 5–15 min Last verified: 11 January 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-21797 CVE-2024-34997 Upstream summary: The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the […]
🟢 Low ⏱ 5–15 min Last verified: 10 January 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-23301 Upstream summary: Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. This allows local attackers to gain access to system secrets otherwise only readable […]
🟢 Low ⏱ 5–15 min Last verified: 7 January 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-34490 Upstream summary: In Maxima through 5.47.0 before 51704c, the plotting facilities make use of predictable names under /tmp. Thus, the contents may be controlled by a local […]
🟠 High ⏱ 15–60 min Last verified: 6 January 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-45939 CVE-2022-48337 CVE-2022-48338 CVE-2022-48339 CVE-2023-28617 CVE-2024-30203 CVE-2024-30204 CVE-2024-30205 +4 more Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – […]
🟢 Low ⏱ 5–15 min Last verified: 2 January 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-8315 CVE-2024-21633 Upstream summary: Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit […]
🟢 Low ⏱ 5–15 min Last verified: 30 December 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-40305 CVE-2024-0911 Upstream summary: GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file. Table of contents Symptom & Impact Environment & […]
🟢 Low ⏱ 5–15 min Last verified: 30 December 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-25189 Upstream summary: libjwt 1.15.3 uses strcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel. Table […]
