🟢 Low ⏱ 5–15 min Last verified: 5 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-4615 Upstream summary: The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before […]
🟢 Low ⏱ 5–15 min Last verified: 5 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-1626 Upstream summary: XML External Entity (XXE) vulnerability in MARC::File::XML module before 1.0.2 for Perl, as used in Evergreen, Koha, perl4lib, and possibly other products, allows context-dependent attackers […]
🟡 Medium ⏱ 10–30 min Last verified: 5 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-9906 CVE-2015-8949 CVE-2016-1246 CVE-2016-1249 CVE-2016-1251 CVE-2017-10788 CVE-2017-10789 Upstream summary: Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service (program crash) or possibly execute […]
🟢 Low ⏱ 5–15 min Last verified: 5 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-9525 Upstream summary: In the cron package through 3.0pl1-128 on Debian, and through 3.0pl1-128ubuntu2 on Ubuntu, the postinst maintainer script allows for group-crontab-to-root privilege escalation via symlink attacks […]
🟠 High ⏱ 15–60 min Last verified: 5 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-16933 CVE-2018-6532 CVE-2018-6533 CVE-2018-6534 CVE-2018-6535 CVE-2018-6536 CVE-2020-14004 CVE-2020-29663 +8 more Upstream summary: etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable […]
🟢 Low ⏱ 5–15 min Last verified: 4 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-4356 CVE-2021-23727 Upstream summary: Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing […]
🟡 Medium ⏱ 10–30 min Last verified: 4 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-2459 CVE-2004-2460 CVE-2004-2461 Upstream summary: Unknown vulnerability in gnubiff 1.2.0 and earlier allows local users to obtain passwords, related to the password table. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 3 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2024-40647 Upstream summary: sentry-sdk is the official Python SDK for Sentry.io. A bug in Sentry's Python SDK < 2.8.0 allows the environment variables to be passed to subprocesses […]
🟢 Low ⏱ 5–15 min Last verified: 3 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-27799 Upstream summary: ean_leading_zeroes in backend/upcean.c in Zint Barcode Generator 2.9.1 has a stack-based buffer overflow that is reachable from the C API through an application that includes […]
🟠 High ⏱ 15–60 min Last verified: 3 November 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-25067 CVE-2020-14370 CVE-2020-1726 CVE-2021-20188 CVE-2021-20199 CVE-2021-4024 CVE-2022-1227 CVE-2022-27649 +4 more Upstream summary: A vulnerability, which was classified as critical, was found in Podman and Varlink 1.5.1. This affects […]
