Debian

🟢 Low   ⏱ 5–15 min  Last verified: 20 March 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-25901 Upstream summary: Versions of the package cookiejar before 2.1.4 are vulnerable to Regular Expression Denial of Service (ReDoS) via the Cookie.parse function, which uses an insecure regular expression. […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 March 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2026-6659 Upstream summary: Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts. The built-in rand function is predictable, and unsuitable for cryptography. Table of contents […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 March 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2011-4617 CVE-2013-1629 CVE-2024-53899 CVE-2026-22702 Upstream summary: virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/. […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0606 CVE-2004-0451 Upstream summary: sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files. Table of contents Symptom & Impact […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-1494 CVE-2020-13757 CVE-2020-25658 Upstream summary: The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via […]

🟠 High   ⏱ 15–60 min  Last verified: 20 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-5935 CVE-2007-5936 CVE-2007-5937 CVE-2007-5940 CVE-2009-1284 CVE-2010-0739 CVE-2010-0827 CVE-2010-1440  +12 more Upstream summary: Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 March 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2026-32952 Upstream summary: go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP. Prior to version 0.1.1, a malicious NTLM challenge message can causes an slice out of […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 March 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-59088 CVE-2025-59089 Upstream summary: If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 March 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-2310 CVE-2015-2311 CVE-2015-2312 CVE-2015-2313 CVE-2017-7892 CVE-2022-46149 CVE-2026-32239 CVE-2026-32240 Upstream summary: Integer overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to […]