Debian

🟢 Low   ⏱ 5–15 min  Last verified: 17 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-1263 CVE-2014-3564 Upstream summary: GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions of OpenPGP […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-1308 CVE-2006-5969 Upstream summary: CRLF injection vulnerability in fvwm-menu-directory for fvwm 2.5.x before 2.5.10 and 2.4.x before 2.4.18 allows local users to execute arbitrary commands via carriage returns […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-2013 CVE-2013-2104 CVE-2013-2166 CVE-2013-2167 CVE-2014-0105 CVE-2014-7144 CVE-2015-1852 Upstream summary: The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the –password argument, which allows local users […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 September 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-9288 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-11358 CVE-2020-11022 CVE-2020-11023 Upstream summary: jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}…) because of Object.prototype pollution. If an unsanitized source […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-34145 CVE-2021-34146 CVE-2021-34147 CVE-2021-34148 Upstream summary: The Bluetooth Classic implementation in the Cypress WICED BT stack through 2.9.0 for CYW20735B1 devices does not properly handle the reception of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-1896 CVE-2006-4089 CVE-2007-5301 Upstream summary: Buffer overflow in Alsaplayer 0.99.71, when installed setuid root, allows local users to execute arbitrary code via a long (1) -f or (2) […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 September 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-50681 Upstream summary: igmpproxy 0.4 before commit 2b30c36 allows remote attackers to cause a denial of service (application crash) via a crafted IGMPv3 membership report packet with a […]