🟢 Low ⏱ 5–15 min Last verified: 13 November 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-18367 Upstream summary: libseccomp-golang 0.9.0 and earlier incorrectly generates BPFs that OR multiple arguments rather than ANDing them. A process running under a restrictive seccomp filter that specified multiple […]
🟢 Low ⏱ 5–15 min Last verified: 13 November 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-27407 Upstream summary: graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malicious […]
🟢 Low ⏱ 5–15 min Last verified: 13 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-16491 CVE-2018-16492 Upstream summary: A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype. Table of contents Symptom […]
🟡 Medium ⏱ 10–30 min Last verified: 13 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-23467 CVE-2022-29021 CVE-2022-29022 CVE-2022-29023 CVE-2025-32776 Upstream summary: OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linux. Using a […]
🟢 Low ⏱ 5–15 min Last verified: 13 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-4012 Upstream summary: Multiple integer overflows in LibThai before 0.1.13 might allow context-dependent attackers to execute arbitrary code via long strings that trigger heap-based buffer overflows, related to […]
🟡 Medium ⏱ 10–30 min Last verified: 13 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-40983 CVE-2022-43591 CVE-2025-12385 Upstream summary: An integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javascript code can trigger an […]
🟡 Medium ⏱ 10–30 min Last verified: 13 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-11230 CVE-2023-46362 CVE-2023-46363 Upstream summary: jbig2_add_page in jbig2enc.cc in libjbig2enc.a in jbig2enc 0.29 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other […]
🟢 Low ⏱ 5–15 min Last verified: 13 November 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-11988 Upstream summary: Apache XmlGraphics Commons 2.4 and earlier is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a specially-crafted argument, an […]
🟠 High ⏱ 15–60 min Last verified: 12 November 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4619 CVE-2007-6277 CVE-2007-6278 CVE-2007-6279 CVE-2014-8962 CVE-2014-9028 CVE-2017-6888 CVE-2020-0499 +2 more Upstream summary: Multiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in Winamp […]
🔴 Critical ⏱ 5–30 min Last verified: 12 November 2025 Affected versions: Debian 13 (Trixie) 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
