Security Bugs

src:libprotocol-http2-perl libprotocol-http2-perl: CVE-2026-16028

upstream security

tiff 1 unresolved CVE in Debian Trixie (1 Critical)

security

src:libstb libstb: CVE-2023-47212

security

libapache2-mod-php Default php.conf serves php in userdirs as plaintext (potentially exposing passwords)

security

simple-cdd when set BOOT_TIMEOUT, md5sum of ./boot/grub/grub.cfg not match md5sum.txt which in iso

security

src:golang-github-lucas-clemente-quic-go golang-github-lucas-clemente-quic-go: CVE-2024-22189

upstream security

ftp.debian.org code-signing: insufficient check that file["file"] doesn't escape package via symlinks

security

src:gearmand gearmand contains a broken, oudated, embedded copy of AX_BOOST_BASE

security

src:freeimage freeimage: CVE-2024-28562 CVE-2024-28563 CVE-2024-28564 CVE-2024-28565 CVE-2024-28566 CVE-2024-28567 CVE-2024-28568 CVE-2024-28569 CVE-2024-28570 CVE-2024-28571 CVE-2024-28572 CVE-2024-28573 CVE-2024-28574 CVE-2024-28574 CVE-2024-28575 CVE-2024-28576 CVE-2024-28577 CVE-2024-28578 CVE-2024-28579 CVE-2024-28580 CVE-2024-28581 CVE-2024-28582 CVE-2024-28583 CVE-2024-28584

security

src:pappl Multiple memory safety bugs (OOB write and stack overflow) in 1.3.1

upstream fixed-upstream security

src:qemu qemu: CVE-2024-8612

upstream security

src:grpc grpc: CVE-2024-7246

fixed-upstream security upstream

src:assimp assimp: CVE-2024-46632

upstream security

src:node-undici node-undici: CVE-2024-24758

upstream security

asterisk Asterisk security update drops supplementary group permissions

security

src:nvidia-graphics-drivers-tesla-470 nvidia-graphics-drivers-tesla-470: CVE-2024-0126

wontfix security upstream

iceweasel A double-click on a word can select invisible text, including newline characters

security upstream

cairo-dock-core uses DES encryption for password storage

stable testing unstable security upstream

iceweasel mozilla-firefox: "su root -c firefox" gives root access to any other firefox loaded.

confirmed security upstream

xscreensaver Crashes with XIO: fatal IO error

stable testing unstable security