🟡 Medium ⏱ 10–30 min Last verified: 16 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-1962 CVE-2009-4227 CVE-2009-4228 CVE-2010-4262 CVE-2021-40241 CVE-2023-45920 Upstream summary: Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the (1) xfig-eps[PID], […]
🟡 Medium ⏱ 10–30 min Last verified: 16 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-1167 CVE-2008-1168 CVE-2008-1922 CVE-2008-7249 CVE-2008-7250 CVE-2019-18932 Upstream summary: Stack-based buffer overflow in the useragent function in useragent.c in Squid Analysis Report Generator (Sarg) 2.2.3.1 allows remote attackers to […]
🟢 Low ⏱ 5–15 min Last verified: 16 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-26661 CVE-2022-26662 Upstream summary: An XXE issue was discovered in Tryton Application Platform (Server) 5.x through 5.0.45, 6.x through 6.0.15, and 6.1.x and 6.2.x through 6.2.5, and Tryton […]
🟠 High ⏱ 5–30 min Last verified: 16 November 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟠 High ⏱ 5–30 min Last verified: 15 November 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟠 High ⏱ 15–60 min Last verified: 15 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0802 CVE-2004-1026 CVE-2006-4806 CVE-2006-4807 CVE-2006-4808 CVE-2006-4809 CVE-2008-2426 CVE-2008-5187 +12 more Upstream summary: Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary […]
🟠 High ⏱ 15–60 min Last verified: 15 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1344 CVE-2002-1565 CVE-2004-1487 CVE-2004-1488 CVE-2004-2014 CVE-2005-3185 CVE-2006-6719 CVE-2009-3490 +12 more Upstream summary: Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite […]
🟠 High ⏱ 15–60 min Last verified: 15 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-10735 CVE-2021-28861 CVE-2022-42919 CVE-2022-45061 CVE-2023-24329 CVE-2023-27043 CVE-2023-40217 CVE-2023-41105 +12 more Upstream summary: A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when […]
🟢 Low ⏱ 5–15 min Last verified: 15 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-7677 Upstream summary: This affects the package thenify before 3.3.1. The name argument provided to the package can be controlled by users without any sanitization, and this is […]
🟡 Medium ⏱ 10–30 min Last verified: 15 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-3875 CVE-2015-6602 CVE-2015-6609 Upstream summary: libutils in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a […]
