🟡 Medium ⏱ 10–30 min Last verified: 9 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-25099 CVE-2025-40912 CVE-2025-40914 CVE-2026-41564 Upstream summary: In the CryptX module before 0.062 for Perl, gcm_decrypt_verify() and chacha20poly1305_decrypt_verify() do not verify the tag. Table of contents Symptom & Impact […]
🟡 Medium ⏱ 10–30 min Last verified: 8 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-27297 CVE-2024-36050 CVE-2024-38531 CVE-2024-47174 CVE-2026-39860 Upstream summary: Nix is a package manager for Linux and other Unix systems. A fixed-output derivations on Linux can send file descriptors to […]
🟡 Medium ⏱ 10–30 min Last verified: 7 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-12905 CVE-2025-48387 CVE-2025-59343 Upstream summary: An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal"). This vulnerability […]
🟢 Low ⏱ 5–15 min Last verified: 7 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-56005 Upstream summary: An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function. […]
🟢 Low ⏱ 5–15 min Last verified: 6 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-32862 CVE-2026-39378 Upstream summary: The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of […]
🟠 High ⏱ 15–60 min Last verified: 4 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-17545 CVE-2019-17546 CVE-2019-25050 CVE-2021-45943 CVE-2025-29480 CVE-2026-4738 CVE-2026-8084 CVE-2026-8086 +2 more Upstream summary: GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold […]
🟡 Medium ⏱ 10–30 min Last verified: 3 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-36407 CVE-2025-48174 CVE-2025-48175 Upstream summary: libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]
🟢 Low ⏱ 5–15 min Last verified: 3 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-32286 Upstream summary: The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, […]
🟢 Low ⏱ 5–15 min Last verified: 3 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2026-35469 Upstream summary: spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts […]
🟡 Medium ⏱ 10–30 min Last verified: 2 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-19869 CVE-2021-28025 CVE-2021-3481 CVE-2021-45930 CVE-2023-32573 CVE-2025-10729 CVE-2026-6210 Upstream summary: An issue was discovered in Qt before 5.11.3. A malformed SVG image causes a segmentation fault in qsvghandler.cpp. Table […]
