Debian GNU/Linux — recent CVEs

CVE-2026-11853 · 6.5 MEDIUM 🌩️

Wed, 10 Jun 2026 09:10:30 GMT

Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution. Debian source packages (.dsc) and upload artifacts (.changes) are manifest files that name the files that make up the artifact. The parser used to read…

CVE-2026-11852 · 6.5 MEDIUM 🌩️

Wed, 10 Jun 2026 09:10:21 GMT

Debusine is an integrated solution to build, distribute and maintain a Debian-based distribution. Files managed by debusine are organized into artifacts. The endpoints that create and delete relationships between artifacts enforced no permissions che…

CVE-2026-2219 · 7.5 HIGH 🌩️

Sat, 07 Mar 2026 08:10:53 GMT

It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data stream when uncompressing a zstd-compressed .deb archive, which may result in denial of service (infinite loop…

CVE-2025-8454 · 9.8 CRITICAL 🌩️

Fri, 01 Aug 2025 05:41:09 GMT

It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the life of a Debian Package maintainer easier), skips OpenPGP verification if the upstream sour…

CVE-2025-6297 · 8.2 HIGH 🌩️ — dpkg-deb: Fix cleanup for control member with restricted directories

Tue, 01 Jul 2025 16:16:54 GMT

It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary f…

CVE-2015-0849 · 3.9 LOW

Thu, 26 Jun 2025 21:15:16 GMT

pycode-browser before version 1.0 is prone to a predictable temporary file vulnerability.

CVE-2015-0843 · 9.8 CRITICAL 🌩️

Thu, 26 Jun 2025 21:11:01 GMT

yubiserver before 0.6 is prone to buffer overflows due to misuse of sprintf.

CVE-2015-0842 · 9.8 CRITICAL 🌩️

Thu, 26 Jun 2025 21:10:52 GMT

yubiserver before 0.6 is prone to SQL injection issues, potentially leading to an authentication bypass.

CVE-2014-6274 · 7.5 HIGH 🌩️ — S3 and Glacier remotes creds embedded in the git repo were not encrypted

Thu, 26 Jun 2025 20:59:54 GMT

git-annex had a bug in the S3 and Glacier remotes where if embedcreds=yes was set, and the remote used encryption=pubkey or encryption=hybrid, the embedded AWS credentials were stored in the git repository in (effectively) plaintext, not encrypted as…

CVE-2014-7210 · 9.8 CRITICAL 🌩️

Thu, 26 Jun 2025 20:52:47 GMT

pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered that the maintainer scripts of pdns-backend-mysql grant too wide database permissions for the pdns user. Other backends are not affec…

CVE-2014-0468 · 9.8 CRITICAL 🌩️

Thu, 26 Jun 2025 20:39:24 GMT

Vulnerability in fusionforge in the shipped Apache configuration, where the web server may execute scripts that the users would have uploaded in their raw SCM repositories (SVN, Git, Bzr...). This issue affects fusionforge: before 5.3+20140506.

CVE-2013-1424 · 5.6 MEDIUM 🌩️

Thu, 26 Jun 2025 20:02:13 GMT

Buffer overflow vulnerability in matplotlib.This issue affects matplotlib: before upstream commit ba4016014cb4fb4927e36ce8ea429fed47dcb787.

CVE-2022-2787 — stricter rules on chroot names

Sat, 27 Aug 2022 11:30:20 GMT

Schroot before 1.6.13 had too permissive rules on chroot or session names, allowing a denial of service on the schroot service for all users that may start a schroot session.

CVE-2022-1664 — directory traversal for in-place extracts with untrusted v2 and v3 source packages with debian.tar

Thu, 26 May 2022 08:20:15 GMT

Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that i…

CVE-2016-1239

Sat, 19 Feb 2022 17:05:11 GMT

duck before 0.10 did not properly handle loading of untrusted code from the current directory.

CVE-2022-0543 · 10 CRITICAL 💥 🌩️

Fri, 18 Feb 2022 19:25:16 GMT

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.

CVE-2021-20001

Fri, 11 Feb 2022 19:50:09 GMT

It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares (~/public_html), which could result in privilege escalation.

CVE-2015-1877

Wed, 02 Jun 2021 16:34:34 GMT

The open_generic_xdg_mime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote attackers to execute arbitrary commands via a crafted file.

CVE-2020-3811

Tue, 26 May 2020 13:04:41 GMT

qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability.

CVE-2020-3812

Tue, 26 May 2020 13:04:14 GMT

qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A local attacker can test for the existence of files and directories anywhere in the filesystem because qmail-verify runs as root and tests for the existence o…

CVE-2020-3810

Fri, 15 May 2020 13:42:05 GMT

Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing specially crafted deb files.

CVE-2016-7524

Thu, 06 Feb 2020 13:37:34 GMT

coders/meta.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.

CVE-2016-7523

Thu, 06 Feb 2020 13:37:33 GMT

coders/meta.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.

CVE-2016-9928

Thu, 06 Feb 2020 13:16:55 GMT

MCabber before 1.0.4 is vulnerable to roster push attacks, which allows remote attackers to intercept communications, or add themselves as an entity on a 3rd party's roster as another user, which will also garner associated privileges, via crafted XM…

CVE-2013-1437

Tue, 28 Jan 2020 14:24:02 GMT

Eval injection vulnerability in the Module-Metadata module before 1.000015 for Perl allows remote attackers to execute arbitrary Perl code via the $Version value.

CVE-2014-9481

Mon, 27 Jan 2020 15:38:50 GMT

The Scribunto extension for MediaWiki allows remote attackers to obtain the rollback token and possibly other sensitive information via a crafted module, related to unstripping special page HTML.

CVE-2015-2688

Fri, 24 Jan 2020 17:46:21 GMT

buf_pullup in Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle unexpected arrival times of buffers with invalid layouts, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via crafte…

CVE-2015-2689

Fri, 24 Jan 2020 17:46:17 GMT

Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle pending-connection resolve states during periods of high DNS load, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via crafted pac…

CVE-2015-2929

Fri, 24 Jan 2020 17:22:27 GMT

The Hidden Service (HS) client implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7 allows remote servers to cause a denial of service (assertion failure and application exit) via a malformed HS descriptor.

CVE-2015-2928

Fri, 24 Jan 2020 17:22:15 GMT

The Hidden Service (HS) server implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.7 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unspecified vectors.

CVE-2014-6275

Thu, 02 Jan 2020 21:13:55 GMT

FusionForge before 5.3.2 use scripts that run under the shared Apache user, which is also used by project homepages by default. If project webpages are hosted on the same server than FusionForge, it can allow users to incorrectly access on-disk priva…

CVE-2013-7351

Thu, 02 Jan 2020 19:42:16 GMT

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Shaarli allow remote attackers to inject arbitrary web script or HTML via the URL to the (1) showRSS, (2) showATOM, or (3) showDailyRSS function; a (4) file name to the importFile fu…

CVE-2019-3467

Mon, 23 Dec 2019 18:04:11 GMT

Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals.

CVE-2014-1867

Fri, 13 Dec 2019 13:08:00 GMT

suPHP before 0.7.2 source-highlighting feature allows security bypass which could lead to arbitrary code execution

CVE-2015-0841

Mon, 09 Dec 2019 18:49:14 GMT

Off-by-one error in the readBuf function in listener.cpp in libcapsinetwork and monopd before 0.9.8, allows remote attackers to cause a denial of service (crash) via a long line.

CVE-2015-0837

Fri, 29 Nov 2019 21:10:03 GMT

The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-computed table during modular exponentiation, related to a "Last-Level Cach…

CVE-2012-2248

Wed, 27 Nov 2019 17:40:34 GMT

An issue was discovered in dhclient 4.3.1-6 due to an embedded path variable.

CVE-2015-1396

Mon, 25 Nov 2019 15:44:16 GMT

A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-2015-1196.

CVE-2014-5255

Thu, 21 Nov 2019 22:30:50 GMT

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254.

CVE-2014-5254

Thu, 21 Nov 2019 22:26:47 GMT

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files.

CVE-2015-2793

Thu, 21 Nov 2019 19:48:14 GMT

Cross-site scripting (XSS) vulnerability in templates/openid-selector.tmpl in ikiwiki before 3.20150329 allows remote attackers to inject arbitrary web script or HTML via the openid_identifier parameter in a verify action to ikiwiki.cgi.

CVE-2012-2238

Thu, 21 Nov 2019 13:47:31 GMT

trytond 2.4: ModelView.button fails to validate authorization

CVE-2019-3466

Wed, 20 Nov 2019 17:16:16 GMT

The pg_ctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation.

CVE-2012-2237

Wed, 13 Nov 2019 18:57:55 GMT

Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before 1.4.3 and 1.5.x before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) javascript innerHTML as used when generating login forms,…

CVE-2013-1429

Thu, 07 Nov 2019 21:42:08 GMT

Lintian before 2.5.12 allows remote attackers to gather information about the "host" system using crafted symlinks.

CVE-2013-1426

Thu, 07 Nov 2019 20:46:19 GMT

Cross-site Scripting (XSS) in Mahara before 1.5.9 and 1.6.x before 1.6.4 allows remote attackers to inject arbitrary web script or HTML via the TinyMCE editor.

CVE-2013-1425

Thu, 07 Nov 2019 20:40:53 GMT

ldap-git-backup before 1.0.4 exposes password hashes due to incorrect directory permissions.

CVE-2019-3465

Thu, 07 Nov 2019 19:12:33 GMT

Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by…

CVE-2006-4245

Wed, 06 Nov 2019 02:54:19 GMT

archivemail 0.6.2 uses temporary files insecurely leading to a possible race condition.

CVE-2006-4243

Wed, 06 Nov 2019 02:43:37 GMT

linux vserver 2.6 before 2.6.17 suffers from privilege escalation in remount code.