🟢 Low ⏱ 5–15 min Last verified: 3 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-0296 CVE-2015-1191 Upstream summary: Race condition in pigz before 2.2.5 uses permissions derived from the umask when compressing a file before setting that file's permissions to match those […]
🟢 Low ⏱ 5–15 min Last verified: 3 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-24065 Upstream summary: The package cookiecutter before 2.1.1 are vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout […]
🟡 Medium ⏱ 10–30 min Last verified: 3 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-0720 CVE-2016-0721 CVE-2017-2661 CVE-2018-1079 CVE-2018-1086 CVE-2022-1049 CVE-2022-2735 Upstream summary: Cross-site request forgery (CSRF) vulnerability in pcsd web UI in pcs before 0.9.149. Table of contents Symptom & Impact […]
🟢 Low ⏱ 5–15 min Last verified: 3 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2006-6614 Upstream summary: The save_log_local function in Fully Automatic Installation (FAI) 2.10.1, and possibly 3.1.2, when verbose mode is enabled, stores the root password hash in /var/log/fai/current/fai.log, whose […]
🟢 Low ⏱ 5–15 min Last verified: 3 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-2088 CVE-2024-1141 Upstream summary: A flaw was found in OpenStack due to an inconsistency between Cinder and Nova. This issue can be triggered intentionally or by accident. A […]
🟠 High ⏱ 15–60 min Last verified: 2 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-5715 CVE-2019-9836 CVE-2023-20569 CVE-2023-20584 CVE-2023-20592 CVE-2023-20593 CVE-2023-31315 CVE-2023-31356 +12 more Upstream summary: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information […]
🟢 Low ⏱ 5–15 min Last verified: 2 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2010-3444 CVE-2012-1176 Upstream summary: Buffer overflow in the log2vis_utf8 function in pyfribidi.c in GNU FriBidi 0.19.1, 0.19.2, and possibly other versions, as used in PyFriBidi 0.10.1, allows remote […]
🟢 Low ⏱ 5–15 min Last verified: 2 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-25739 Upstream summary: An issue was discovered in the gon gem before gon-6.4.0 for Ruby. MultiJson does not honor the escape_mode parameter to escape fields as an XSS […]
🟡 Medium ⏱ 10–30 min Last verified: 2 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-8825 CVE-2020-15953 CVE-2022-4121 Upstream summary: A null dereference vulnerability has been found in the MIME handling component of LibEtPan before 1.8, as used in MailCore and MailCore 2. […]
🟠 High ⏱ 15–60 min Last verified: 2 June 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-4406 CVE-2013-2161 CVE-2013-4155 CVE-2014-0006 CVE-2014-3497 CVE-2014-7960 CVE-2015-1856 CVE-2015-5223 +4 more Upstream summary: OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely […]
