🟡 Medium ⏱ 10–30 min Last verified: 20 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-6639 CVE-2019-0816 CVE-2020-8631 CVE-2020-8632 CVE-2021-3429 CVE-2022-2084 CVE-2023-1786 CVE-2024-11584 +1 more Upstream summary: An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are […]
🟢 Low ⏱ 5–15 min Last verified: 18 February 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-53391 Upstream summary: The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt_6.2.0-1 package has insecure PolicyKit allow_any/allow_inactive/allow_active settings that allow a local user to escalate their privileges to […]
🟠 High ⏱ 15–60 min Last verified: 17 February 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2027 CVE-2016-4000 CVE-2017-17522 CVE-2019-16935 CVE-2025-12084 CVE-2025-15366 CVE-2025-15367 CVE-2025-6069 +3 more Upstream summary: Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which […]
🟡 Medium ⏱ 10–30 min Last verified: 17 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-26945 CVE-2022-30321 CVE-2022-30322 CVE-2022-30323 CVE-2023-0475 CVE-2024-3817 CVE-2024-6257 CVE-2025-8959 +1 more Upstream summary: go-getter up to 1.5.11 and 2.0.2 allowed protocol switching, endless redirect, and configuration bypass via abuse […]
🟢 Low ⏱ 5–15 min Last verified: 16 February 2025 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-22376 Upstream summary: In Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in rand() function, which is […]
🟡 Medium ⏱ 10–30 min Last verified: 15 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-10243 CVE-2019-17420 CVE-2024-23837 CVE-2024-45797 Upstream summary: htp_parse_authorization_digest in htp_parsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header. Table of […]
🟡 Medium ⏱ 10–30 min Last verified: 15 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-6393 CVE-2024-10491 CVE-2024-29041 CVE-2024-43796 Upstream summary: The Express web framework before 3.11 and 4.x before 4.5 for Node.js does not provide a charset field in HTTP Content-Type headers […]
🟠 High ⏱ 15–60 min Last verified: 15 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-6156 CVE-2025-54286 CVE-2025-54287 CVE-2025-54288 CVE-2025-54289 CVE-2025-54290 CVE-2025-54291 CVE-2025-54293 +12 more Upstream summary: Mark Laing discovered that LXD's PKI mode, until version 5.21.2, could be bypassed if the client's […]
🟡 Medium ⏱ 10–30 min Last verified: 14 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-9036 CVE-2016-9037 CVE-2025-6536 Upstream summary: An exploitable incorrect return value vulnerability exists in the mp_check function of Tarantool's Msgpuck library 1.0.3. A specially crafted packet can cause the […]
🟡 Medium ⏱ 10–30 min Last verified: 13 February 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-3446 CVE-2021-3505 CVE-2021-3569 CVE-2021-3623 CVE-2021-3746 CVE-2023-1017 CVE-2023-1018 CVE-2025-49133 Upstream summary: A flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms with OpenSSL […]
