🟠 High ⏱ 15–60 min Last verified: 24 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0358 CVE-2003-0359 CVE-2019-19905 CVE-2020-5209 CVE-2020-5210 CVE-2020-5211 CVE-2020-5212 CVE-2020-5213 +4 more Upstream summary: Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is […]
🟢 Low ⏱ 5–15 min Last verified: 24 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-18609 CVE-2023-35789 Upstream summary: An issue was discovered in amqp_handle_input in amqp_connection.c in rabbitmq-c 0.9.0. There is an integer overflow that leads to heap memory corruption in the […]
🟠 High ⏱ 15–60 min Last verified: 24 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-0116 CVE-2005-0362 CVE-2005-0363 CVE-2005-0435 CVE-2005-0436 CVE-2005-0437 CVE-2005-0438 CVE-2005-1527 +12 more Upstream summary: AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell […]
Introduction Deploying set up an sftp-only jail on a Debian 13 Trixie machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites You will need a […]
🟢 Low ⏱ 5–15 min Last verified: 24 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-2729 Upstream summary: native/unix/native/jsvc-unix.c in jsvc in the Daemon component 1.0.3 through 1.0.6 in Apache Commons, as used in Apache Tomcat 5.5.32 through 5.5.33, 6.0.30 through 6.0.32, and […]
🟡 Medium ⏱ 10–30 min Last verified: 24 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-8484 CVE-2014-8485 CVE-2014-8501 CVE-2014-8502 CVE-2014-8503 CVE-2014-8504 CVE-2014-8737 CVE-2014-8738 Upstream summary: The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 24 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-27304 CVE-2025-55763 CVE-2025-9648 Upstream summary: The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows, when using the built-in HTTP form-based […]
🟢 Low ⏱ 5–15 min Last verified: 24 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0157 Upstream summary: x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute arbitrary […]
🟡 Medium ⏱ 10–30 min Last verified: 24 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-1832 CVE-2018-1313 CVE-2022-46337 Upstream summary: XML external entity (XXE) vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, […]
Introduction Debian 13 Trixie is built around the ethos of stability and free software. Setting up set up two-factor ssh authentication on Trixie leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Trixie freeze. Follow each step carefully and the resulting […]
