🟠 High ⏱ 15–60 min Last verified: 17 August 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-1720 CVE-2009-1721 CVE-2009-1722 CVE-2017-12596 CVE-2017-14988 CVE-2017-9110 CVE-2017-9111 CVE-2017-9112 +12 more Upstream summary: Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of […]
🟡 Medium ⏱ 10–30 min Last verified: 16 August 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4974 CVE-2010-3349 CVE-2020-22617 Upstream summary: Heap-based buffer overflow in the flac_buffer_copy function in libsndfile 1.0.17 and earlier might allow remote attackers to execute arbitrary code via a FLAC […]
🟠 High ⏱ 15–60 min Last verified: 16 August 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-4803 CVE-2008-4555 CVE-2009-3736 CVE-2014-0978 CVE-2014-1235 CVE-2014-1236 CVE-2014-9157 CVE-2018-10196 +3 more Upstream summary: graphviz before 2.2.1 allows local users to overwrite arbitrary files via a symlink attack on temporary […]
🟡 Medium ⏱ 10–30 min Last verified: 16 August 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-28483 CVE-2020-36567 CVE-2023-26125 CVE-2023-29401 Upstream summary: This affects all versions of package github.com/gin-gonic/gin. When gin is exposed directly to the internet, a client's IP can be spoofed by […]
🟡 Medium ⏱ 10–30 min Last verified: 16 August 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-2779 CVE-2008-2109 CVE-2017-11550 CVE-2017-11551 Upstream summary: id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless […]
🟡 Medium ⏱ 10–30 min Last verified: 16 August 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-0871 CVE-2003-0211 CVE-2012-0862 CVE-2013-4342 Upstream summary: xinetd 2.3.4 leaks file descriptors for the signal pipe to services that are launched by xinetd, which could allow those services to […]
🟢 Low ⏱ 5–15 min Last verified: 16 August 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-1164 CVE-2024-43800 Upstream summary: Open redirect vulnerability in the serve-static plugin before 1.7.2 for Node.js, when mounted at the root, allows remote attackers to redirect users to arbitrary […]
🟡 Medium ⏱ 5–30 min Last verified: 16 August 2025 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]
🟢 Low ⏱ 5–15 min Last verified: 16 August 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-3560 CVE-2009-3720 Upstream summary: The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a […]
🟢 Low ⏱ 5–15 min Last verified: 16 August 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2096 CVE-2010-3394 Upstream summary: zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code […]
