🟡 Medium ⏱ 10–30 min Last verified: 2 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2742 CVE-2012-2743 CVE-2012-3818 Upstream summary: Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy […]
Introduction Debian 13 Trixie is built around the ethos of stability and free software. Setting up configure dovecot imap server on Trixie leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Trixie freeze. Follow each step carefully and the resulting configuration […]
🟢 Low ⏱ 5–15 min Last verified: 2 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-31852 CVE-2024-7883 Upstream summary: LLVM before 18.1.3 generates code in which the LR register can be overwritten without data being saved to the stack, and thus there can […]
🟢 Low ⏱ 5–15 min Last verified: 2 September 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-7783 Upstream summary: Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js. This issue affects form-data: < […]
🟡 Medium ⏱ 10–30 min Last verified: 2 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-20541 CVE-2018-20542 CVE-2018-20543 CVE-2021-39535 CVE-2021-39536 Upstream summary: There is a heap-based buffer overflow in libxsmm_sparse_csc_reader at generator_spgemm_csc_reader.c in LIBXSMM 1.10, a different vulnerability than CVE-2018-20542 (which is in […]
🟢 Low ⏱ 5–15 min Last verified: 2 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-7488 Upstream summary: perl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0.27 allows remote attackers to cause an infinite loop via unexpected input. Table of contents Symptom & […]
🟠 High ⏱ 15–60 min Last verified: 2 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-2156 CVE-2016-4970 CVE-2019-16869 CVE-2019-20444 CVE-2019-20445 CVE-2020-11612 CVE-2020-7238 CVE-2021-21290 +12 more Upstream summary: Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework […]
🟡 Medium ⏱ 10–30 min Last verified: 2 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-9622 CVE-2015-1877 CVE-2017-18266 CVE-2020-27748 CVE-2022-4055 CVE-2025-52968 Upstream summary: Eval injection vulnerability in xdg-utils 1.1.0 RC1, when no supported desktop environment is identified, allows context-dependent attackers to execute arbitrary […]
🟢 Low ⏱ 5–15 min Last verified: 2 September 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-4472 Upstream summary: The mistral-dashboard plugin for openstack has a local file inclusion vulnerability through the 'Create Workbook' feature that may result in disclosure of arbitrary local files content. […]
🟢 Low ⏱ 5–15 min Last verified: 2 September 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-35861 Upstream summary: An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cryptographic […]
