Debian

🟠 High   ⏱ 15–60 min  Last verified: 1 July 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-1932 CVE-2014-1933 CVE-2014-3007 CVE-2014-3589 CVE-2014-3598 CVE-2014-9601 CVE-2016-0740 CVE-2016-0775  +12 more Upstream summary: The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 June 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-5899 Upstream summary: Directory traversal vulnerability in the setuid root helper binary in S-nail (later S-mailx) before 14.8.16 allows local users to write to arbitrary files and consequently gain […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 June 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2026-2739 Upstream summary: This affects versions of the package bn.js before 5.2.3. Calling maskn(0) on any BN instance corrupts the internal state, causing toString(), divmod(), and other methods […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 June 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-2314 Upstream summary: If kernel headers need to be extracted, bcc will attempt to load them from a temporary directory. An unprivileged attacker could use this to force bcc […]

🟠 High   ⏱ 15–60 min  Last verified: 30 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2024-12254 CVE-2024-12718 CVE-2024-6232 CVE-2024-6923 CVE-2024-7592 CVE-2024-8088 CVE-2024-9287 CVE-2025-0938  +12 more Upstream summary: Starting in Python 3.12.0, the asyncio._SelectorSocketTransport.writelines() method would not "pause" writing and signal to the Protocol […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-5017 CVE-2017-5637 CVE-2018-8012 CVE-2019-0201 CVE-2023-44981 CVE-2024-23944 CVE-2026-24281 CVE-2026-24308 Upstream summary: Buffer overflow in the C cli shell in Apache Zookeeper before 3.4.9 and 3.5.x before 3.5.3, when using […]

🟠 High   ⏱ 15–60 min  Last verified: 30 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-53159 CVE-2025-24898 CVE-2025-3416 CVE-2026-41676 CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898  +2 more Upstream summary: The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 June 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2026-41525 Upstream summary: KDE Dolphin before 25.12.3 allows applications in a Flatpak (or with AppArmor confinement) to open folders outside of the application sandbox without additional scrutiny. Dolphin's […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2001-1562 CVE-2015-2305 Upstream summary: Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format string specifiers in a filename. Table of contents Symptom […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 June 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-4303 CVE-2023-38403 CVE-2023-7250 CVE-2024-26306 CVE-2024-53580 CVE-2025-54349 CVE-2025-54350 Upstream summary: The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a […]