🟡 Medium ⏱ 10–30 min Last verified: 1 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-0217 CVE-2011-2516 CVE-2013-2153 CVE-2013-2154 CVE-2013-2155 CVE-2013-2156 CVE-2013-2210 Upstream summary: The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the […]
🟢 Low ⏱ 5–15 min Last verified: 1 December 2021 Affected versions: Debian 10 (buster) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-31535 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]
🟠 High ⏱ 15–60 min Last verified: 1 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-20001 CVE-2017-20004 CVE-2018-1000622 CVE-2018-1000657 CVE-2018-1000810 CVE-2018-25008 CVE-2019-1010299 CVE-2020-36317 +12 more Upstream summary: In the standard library in Rust before 1.2.0, BinaryHeap is not panic-safe. The binary heap is […]
🟢 Low ⏱ 5–15 min Last verified: 1 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1000539 CVE-2019-18848 Upstream summary: Nov json-jwt version >= 0.5.0 && < 1.9.4 contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability in Decryption of AES-GCM encrypted JSON Web […]
🟢 Low ⏱ 5–15 min Last verified: 1 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-4509 Upstream summary: The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does not obscure the […]
🟢 Low ⏱ 5–15 min Last verified: 1 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2011-2188 CVE-2014-2744 Upstream summary: LuaExpat before 1.2.0 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU […]
🟠 High ⏱ 15–60 min Last verified: 1 December 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-4445 CVE-2014-3686 CVE-2015-1863 CVE-2015-4141 CVE-2015-4142 CVE-2015-4143 CVE-2015-4144 CVE-2015-4145 +12 more Upstream summary: Heap-based buffer overflow in the eap_server_tls_process_fragment function in eap_server_tls_common.c in the EAP authentication server in hostapd […]
🟠 High ⏱ 15–60 min Last verified: 30 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2009-2936 CVE-2009-4488 CVE-2013-4090 CVE-2013-4484 CVE-2015-8852 CVE-2017-12425 CVE-2017-8807 CVE-2019-15892 +11 more Upstream summary: The Command Line Interface (aka Server CLI or administration interface) in the master process in the […]
🟢 Low ⏱ 5–15 min Last verified: 30 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-20040 CVE-2017-20225 Upstream summary: TiEmu 3.03-nogdb+dfsg-3 contains a buffer overflow vulnerability in the ROM parameter handling that allows local attackers to crash the application or execute arbitrary code. […]
🔴 Critical ⏱ 5–30 min Last verified: 29 November 2021 Affected versions: Debian 9 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
