Security Bugs
(Total: 1769, 21-40, 56.5225 ms)
| # | Comment | Popcon | Updated | Title |
|---|---|---|---|---|
|
normal done |
12 |
1770 |
10 days ago |
src:roundcube roundcube: Multiple security vulnerabilities
|
|
serious done |
12 |
1528 |
over 4 years ago |
roundcube CVE-2021-46144: XSS vulnerability via HTML messages with malicious CSS content
unstable
|
|
normal done |
12 |
0 |
6 months ago |
cpp-httplib CVE-2025-52887 CVE-2025-53628 CVE-2025-53629
|
|
normal done |
12 |
123971 |
14 days ago |
src:linux unprivileged user-triggerable use-after-free host panic bug
|
|
wishlist |
12 |
1986 |
7 months ago |
QA
ssmtp ssmtp doesn't validate server TLS certificates
stable
testing
unstable
|
|
normal done |
12 |
26 |
about 1 month ago |
glance CVE-2026-71196, CVE-2026-71197, CVE-2026-71198, OSSA-2026-038: Multiple SSRF vulnerabilities in Glance web-download and HTTP image APIs
|
|
normal
|
12 |
539 |
9 months ago |
src:radare2 Is radare2 suitable for stable Debian releases?
|
|
normal done |
11 |
2 |
about 14 hours ago |
src:mistral CVE-2026-93858, CVE-2026-93860, CVE-2026-93861, CVE-2026-97147, OSSA-2026-044: Four authorization and privilege vulnerabilities in Mistral
|
|
normal done |
11 |
2 |
6 days ago |
src:mistral CVE-2026-41283 OSSA-2026-020: Mistral policy enforcement bypass allows unauthorized public resource creation and arbitrary code execution
|
|
important |
11 |
119 |
over 11 years ago |
debian-installer Accepting a preseed URL from DHCP allows attacker to hijack installation
stable
testing
unstable
|
|
normal done |
11 |
1 |
2 days ago |
src:zaqar OSSA-2026-043 OpenStack Zaqar: Zaqar WebSocket project substitution allows cross-project queue access (CVE-2026-pending)
|
|
important |
11 |
316 |
over 2 years ago |
swaylock Occassional unlock without password entered
testing
unstable
|
|
normal done |
11 |
5 |
5 days ago |
src:gnocchi Cross-project metric association bypass in Gnocchi
|
|
normal |
11 |
7758 |
12 months ago |
libpodofo0.9.8 Debian Bug Tracking System <submit@bugs.debian.org>
|
|
normal done |
11 |
107868 |
over 1 year ago |
src:djvulibre djvulibre: CVE-2025-53367
|
|
normal |
11 |
36946 |
almost 5 years ago |
spice-client-glib-usb-acl-helper SECURITY - normal users are allowed full access to USB devices per default
stable
testing
unstable
|
|
normal |
11 |
7197 |
over 1 year ago |
spamassassin Default: spamd runs as root (uid/gid 0)
stable
testing
unstable
|
|
normal |
11 |
9698 |
about 1 year ago |
devscripts /usr/bin/uscan: uscan must not skip OpenPGP check after failed check in previous run
|
|
important |
10 |
251368 |
about 4 years ago |
adduser general: access granted to /home files of another user
stable
testing
unstable
|
|
normal |
10 |
113 |
about 1 year ago |
src:matrix-synapse matrix-synapse: not suitable for inclusion in trixie
|
(Total: 1769, 21-40, 56.5225 ms)