🟠 High ⏱ 15–60 min Last verified: 3 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2018-1056 CVE-2019-8379 CVE-2019-8383 CVE-2019-9210 CVE-2022-35014 CVE-2022-35015 CVE-2022-35016 CVE-2022-35017 +4 more Upstream summary: An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing […]
🟠 High ⏱ 15–60 min Last verified: 3 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2013-4130 CVE-2013-4282 CVE-2015-3247 CVE-2015-5260 CVE-2015-5261 CVE-2016-0749 CVE-2016-2150 CVE-2016-9577 +7 more Upstream summary: The (1) red_channel_pipes_add_type and (2) red_channel_pipes_add_empty_msg functions in server/red_channel.c in SPICE before 0.12.4 do not properly […]
🟢 Low ⏱ 5–15 min Last verified: 3 September 2025 Affected versions: Debian 13 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-49091 Upstream summary: KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 9 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:14493 Related CVEs: CVE-2025-54389 Upstream summary: Advanced Intrusion Detection Environment (AIDE) is a utility that creates a database of files on the system, and then uses that database to ensure file integrity […]
🟠 High ⏱ 15–60 min Last verified: 3 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2012-3449 CVE-2015-8011 CVE-2016-10377 CVE-2016-2074 CVE-2017-14970 CVE-2017-9214 CVE-2017-9263 CVE-2017-9264 +12 more Upstream summary: Open vSwitch 1.4.2 uses world writable permissions for (1) /var/lib/openvswitch/pki/controllerca/incoming/ and (2) /var/lib/openvswitch/pki/switchca/incoming/, which allows local […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Alpine Linux edge / fixed in 0.104.1-r0 📖 ~4 min read • Source: Alpine secdb entry — grype 0.104.1-r0 Related CVEs: CVE-2025-65965 Upstream summary: Alpine community repository for vedge ships grype 0.104.1-r0 which addresses CVE-2025-65965. Table of contents Symptom & Impact Environment […]
🟢 Low ⏱ 5–15 min Last verified: 3 September 2025 Affected versions: Debian 13 (trixie) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0855 CVE-2008-2363 Upstream summary: Pan 0.13.3 and earlier allows remote attackers to cause a denial of service (crash) via a news post with a long author email address. […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: AlmaLinux 8 📖 ~4 min read • Source: AlmaLinux ALSA ALSA-2025:9318 Related CVEs: CVE-2019-10086 CVE-2025-48734 Upstream summary: The javapackages-tools packages provide macros and scripts to support Java packaging. Security Fix(es): * apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default […]
🟢 Low ⏱ 5–15 min Last verified: 3 September 2025 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2025-65807 Upstream summary: An issue in sd command v1.0.0 and before allows attackers to escalate privileges to root via a crafted command. Table of contents Symptom & Impact […]
Introduction Debian 13 Trixie is built around the ethos of stability and free software. Setting up configure an iscsi initiator on Trixie leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Trixie freeze. Follow each step carefully and the resulting configuration […]
