🟢 Low ⏱ 5–15 min Last verified: 16 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-19308 Upstream summary: In text_to_glyphs in sushi-font-widget.c in gnome-font-viewer 3.34.0, there is a NULL pointer dereference while parsing a TTF font file that lacks a name section (due to […]
🟡 Medium ⏱ 10–30 min Last verified: 16 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-10075 CVE-2025-40931 CVE-2026-5081 Upstream summary: Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DB_File will create a session that does not exist. […]
🟡 Medium ⏱ 10–30 min Last verified: 16 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0398 CVE-2009-3560 CVE-2009-3720 Upstream summary: Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, […]
🟢 Low ⏱ 5–15 min Last verified: 16 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-26132 CVE-2026-27837 Upstream summary: Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the set() function and the current variable […]
🟢 Low ⏱ 5–15 min Last verified: 16 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-7105 CVE-2021-32765 Upstream summary: async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 16 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-43642 Upstream summary: snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google. The SnappyInputStream was found to be vulnerable to Denial of Service […]
🟢 Low ⏱ 5–15 min Last verified: 16 April 2026 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-36489 Upstream summary: Buffer Overflow vulnerability in Allegro through 5.2.6 allows attackers to cause a denial of service via crafted PCX/TGA/BMP files to allegro_image addon. Table of contents Symptom […]
🟢 Low ⏱ 5–15 min Last verified: 16 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3736 Upstream summary: ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to […]
🟡 Medium ⏱ 10–30 min Last verified: 16 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-1561 CVE-2004-2027 CVE-2005-0837 CVE-2005-0838 CVE-2011-4612 CVE-2014-9018 CVE-2014-9091 CVE-2015-3026 +1 more Upstream summary: Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an […]
🟠 High ⏱ 15–60 min Last verified: 16 April 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-37568 CVE-2025-59420 CVE-2025-61920 CVE-2025-62706 CVE-2025-68158 CVE-2026-27962 CVE-2026-28490 CVE-2026-28498 +2 more Upstream summary: lepture Authlib before 1.3.1 has algorithm confusion with asymmetric public keys. Unless an algorithm is specified […]
