🟡 Medium ⏱ 5–30 min Last verified: 4 September 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
🟢 Low ⏱ 5–15 min Last verified: 4 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-2845 CVE-2021-27815 Upstream summary: Integer overflow in the jpeg_data_load_data function in jpeg-data.c in libjpeg in exif 0.6.20 allows remote attackers to cause a denial of service (buffer over-read […]
🟡 Medium ⏱ 10–30 min Last verified: 4 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-2063 CVE-2016-7951 CVE-2016-7952 Upstream summary: Integer overflow in X.org libXtst 1.2.1 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors […]
🟡 Medium ⏱ 10–30 min Last verified: 4 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-14465 CVE-2019-14523 CVE-2019-14524 CVE-2021-32419 Upstream summary: fmt_mtm_load_song in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow. Table of contents Symptom & Impact Environment & Reproduction Root […]
🟢 Low ⏱ 5–15 min Last verified: 3 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8697 Upstream summary: stalin 0.11-5 allows local users to write to arbitrary files. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]
🟡 Medium ⏱ 10–30 min Last verified: 3 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-6274 CVE-2017-12976 CVE-2018-10857 CVE-2018-10859 Upstream summary: git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or encryption=hybrid, […]
🟡 Medium ⏱ 10–30 min Last verified: 3 September 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-29932 CVE-2023-29933 CVE-2023-29934 CVE-2023-29935 CVE-2023-29939 CVE-2023-29941 CVE-2023-29942 Upstream summary: llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand. Table of contents Symptom & […]
🟢 Low ⏱ 5–15 min Last verified: 3 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-28339 Upstream summary: OpenDoas through 6.8.2, when TIOCSTI is available, allows privilege escalation because of sharing a terminal with the original session. NOTE: TIOCSTI is unavailable in OpenBSD […]
🟡 Medium ⏱ 10–30 min Last verified: 3 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2005-2966 CVE-2006-1550 CVE-2006-2453 CVE-2006-2480 CVE-2008-5984 CVE-2019-19451 Upstream summary: The Python SVG import plugin (diasvg_import.py) for DIA 0.94 and earlier allows user-assisted attackers to execute arbitrary commands via a […]
🟢 Low ⏱ 5–15 min Last verified: 3 September 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2022-24615 CVE-2023-22899 Upstream summary: zip4j up to v2.10.0 can throw various uncaught exceptions while parsing a specially crafted ZIP file, which could result in an application crash. This […]
