Package Management

🟢 Low   ⏱ 5–15 min  Last verified: 2 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2001-1562 CVE-2015-2305 Upstream summary: Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format string specifiers in a filename. Table of contents Symptom […]

🟢 Low   ⏱ 5–15 min  Last verified: 2 February 2023 Affected versions: Debian 10 (buster) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-32278 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2010-2575 CVE-2018-1000801 CVE-2020-9359 Upstream summary: Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-28483 CVE-2020-36567 CVE-2023-26125 CVE-2023-29401 Upstream summary: This affects all versions of package github.com/gin-gonic/gin. When gin is exposed directly to the internet, a client's IP can be spoofed by […]

🟠 High   ⏱ 15–60 min  Last verified: 2 February 2023 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-0914 CVE-2002-1311 CVE-2003-0040 CVE-2004-0224 CVE-2004-0591 CVE-2004-0777 CVE-2004-2313 CVE-2005-1308  +7 more Upstream summary: Double Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) […]