Debian

🟢 Low   ⏱ 5–15 min  Last verified: 21 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-40889 CVE-2023-40890 Upstream summary: A heap-based buffer overflow exists in the qr_reader_match_centers function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-1231 CVE-2023-3431 CVE-2023-3432 CVE-2026-0858 Upstream summary: XSS via Embedded SVG in SVG Diagram Format in GitHub repository plantuml/plantuml prior to 1.2022.4. Stored XSS in the context of the […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 May 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-10375 Upstream summary: Yodl before 3.07.01 has a Buffer Over-read in the queue_push function in queue/queuepush.c. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 May 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-1828 Upstream summary: The Ruby http gem before 0.7.3 does not verify hostnames in SSL connections, which might allow remote attackers to obtain sensitive information via a man-in-the-middle-attack. Table […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2026-32877 CVE-2026-32883 CVE-2026-32884 CVE-2026-34582 CVE-2026-44378 Upstream summary: Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 May 2026 Affected versions: Debian 13 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-7101 Upstream summary: Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 May 2026 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2025-71176 Upstream summary: pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-{user} name pattern, which allows local users to cause a denial of service or possibly […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2011-0002 CVE-2012-5630 CVE-2012-5644 CVE-2015-3245 CVE-2015-3246 Upstream summary: libuser before 0.57 uses a cleartext password value of (1) !! or (2) x for new LDAP user accounts, which makes […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 May 2026 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2026-3994 Upstream summary: A vulnerability was detected in rui314 mold up to 2.40.4. This issue affects the function mold::ObjectFilemold::X86_64::initialize_sections of the file src/input-files.cc of the component Object File […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 May 2026 Affected versions: Debian 13 (trixie) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-16165 CVE-2019-16166 CVE-2020-23856 CVE-2023-2789 CVE-2025-8735 CVE-2025-8736 Upstream summary: GNU cflow through 1.6 has a use-after-free in the reference function in parser.c. Table of contents Symptom & Impact Environment […]