Debian

Debian 13 — mujs — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — mujs — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-22885 CVE-2020-22886 CVE-2021-33796 CVE-2021-33797 CVE-2021-45005 CVE-2022-30974 CVE-2022-30975 CVE-2022-44789 Upstream summary: Buffer overflow vulnerability in mujs before 1.0.8 due to recursion in the GC scanning phase, allows remote attackers […]

Read more
Debian 13 — manila — vulnerability — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — manila — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 December 2025 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-9543 Upstream summary: OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a […]

Read more
Debian 13 — skktools — vulnerability — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — skktools — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-3916 Upstream summary: The main function in skkdic-expr.c in SKK Tools 1.2 allows local users to overwrite or delete arbitrary files via a symlink attack on a skkdic$PID […]

Read more
Debian 13 — monit — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — monit — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-1083 CVE-2003-1084 CVE-2004-1897 CVE-2004-1898 CVE-2004-1899 CVE-2016-7067 CVE-2019-11454 CVE-2019-11455  +1 more Upstream summary: Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via […]

Read more
Debian 11 — node-yarnpkg — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — node-yarnpkg — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 December 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-10773 CVE-2019-15608 CVE-2019-5448 CVE-2020-8131 CVE-2021-4435 CVE-2025-8262 CVE-2025-9308 Upstream summary: In Yarn before 1.21.1, the package install functionality can be abused to generate arbitrary symlinks on the host filesystem […]

Read more
Debian 13 — storebackup — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — storebackup — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-3146 CVE-2005-3147 CVE-2005-3148 CVE-2020-7040 Upstream summary: StoreBackup before 1.19 allows local users to perform unauthorized operations on arbitrary files via a symlink attack on temporary files. Table of […]

Read more
Debian 11 — node-lodash — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — node-lodash — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 December 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-16487 CVE-2018-3721 CVE-2019-1010266 CVE-2019-10744 CVE-2020-28500 CVE-2020-8203 CVE-2021-23337 CVE-2025-13465  +2 more Upstream summary: A prototype pollution vulnerability was found in lodash <4.17.11 where the functions merge, mergeWith, and defaultsDeep […]

Read more
Debian 13 — nut — vulnerability — patch and remediation guide — diagnosis and fix on Debian 13

Debian 13 — nut — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 December 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-2944 Upstream summary: Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute arbitrary code or […]

Read more
Debian 11 — golang-golang-x-oauth2 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — golang-golang-x-oauth2 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 December 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-22868 Upstream summary: An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing. Table of contents Symptom & Impact Environment & […]

Read more
Debian 11 — apt-cacher-ng — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — apt-cacher-ng — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 December 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-4510 CVE-2017-7443 CVE-2020-5202 CVE-2025-11146 CVE-2025-11147 Upstream summary: Cross-site scripting (XSS) vulnerability in job.cc in apt-cacher-ng 0.7.26 allows remote attackers to inject arbitrary web script or HTML via a […]

Read more
CHAT