Debian 11

🟡 Medium   ⏱ 10–30 min  Last verified: 31 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-0317 CVE-2007-2318 CVE-2013-4206 CVE-2013-4207 CVE-2013-4208 CVE-2013-4852 CVE-2019-5429 CVE-2023-48795  +1 more Upstream summary: Format string vulnerability in the LogMessage function in FileZilla before 3.0.0-beta5 allows remote attackers to cause […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-58266 Upstream summary: The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may facilitate command injection. Table of […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-47480 Upstream summary: An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges via the set*id () function. Table of contents […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-32637 Upstream summary: GBrowse accepts files with any formats uploaded and places them in the area accessible through unauthenticated web requests. Therefore, anyone who can upload files through […]

🟢 Low   ⏱ 5–15 min  Last verified: 27 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-4076 CVE-2023-1672 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-7225 CVE-2021-43177 CVE-2024-8796 Upstream summary: Tinfoil Devise-two-factor before 2.0.0 does not strictly follow section 5.2 of RFC 6238 and does not "burn" a successfully validated one-time password (aka […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-36148 CVE-2022-37781 CVE-2023-34823 CVE-2023-34824 Upstream summary: fdkaac commit 53fe239 was discovered to contain a floating point exception (FPE) via wav_open at /src/wav_reader.c. Table of contents Symptom & Impact […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-1095 CVE-2015-0778 CVE-2017-9274 CVE-2019-3681 CVE-2024-22034 Upstream summary: osc before 0.134 might allow remote OBS repository servers or package maintainers to execute arbitrary commands via a crafted (1) build […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-28054 Upstream summary: Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user agents) […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 March 2024 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-5349 Upstream summary: A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial of service (DOS) by […]