Security Bugs

(Total: 1769, 1561-1580, 27.7319 ms)

#	Comment	Popcon	Updated	Title
#1004433 grave done	14	373	over 4 years ago	varnish CVE-2022-23959: VSV00008 Varnish HTTP/1 Request Smuggling Vulnerability
#1004080 normal	4	2565	over 4 years ago	asterisk Configuration files owned by asterisk user
#1003973 normal	8	202060	23 days ago	src:tasksel Should we pull in fwupd by default for most systems? stable testing unstable
#1003033 wishlist	1	1794	almost 5 years ago	cowdancer harden package verification stable testing unstable
#1003032 normal	1	13415	almost 5 years ago	debootstrap harden signature checking testing unstable
#1003027 serious done	12	1528	over 4 years ago	roundcube CVE-2021-46144: XSS vulnerability via HTML messages with malicious CSS content unstable
#1002797 normal	1	204676	almost 5 years ago	initramfs-tools UMASK option doesn't catch all cases stable testing unstable
#1002008 important	2	118340	5 months ago	rsync integer overflow in rsync testing unstable
#1001817 important done	2	1416	over 4 years ago	rails CVE-2021-44528: Possible Open Redirect in Host Authorization Middleware stable
#1001057 serious done	5	986	over 4 years ago	grub2 CVE-2022-28735 grub2: shim_lock verifier allows non-kernel files to be loaded
#1000886 important	3	123971	4 months ago	src:linux CVE-2013-7445: Direct Rendering Manager (DRM) subsystem in the Linux Kernel through 4.x mishandles requests for GEM object stable testing unstable
#1000581 important	2	4	almost 5 years ago	node-katex Update dependency from deprecated node-babel-eslint to @babel/eslint-parser stable testing unstable
#1000198 important	3	173227	9 months ago	openssh-server insecure algorithms reported by ssh-audit testing unstable
#999899 normal	1	8631	almost 5 years ago	debian-goodies dman: bad signal handling leads to insecure use of /tmp stable testing unstable
#998197 normal	4	21596	over 2 years ago	kdeconnect kdeconnectd: should not listen on all interfaces by default testing unstable
#996904 important done	5	206	about 4 years ago	doas Add pam_limit.so to PAM configuration (Cf. #518464 for sudo) stable testing unstable
#996778 important	9	333	almost 5 years ago	xymon-client Disable by default the ability of logfetch to execute arbitrary code fetched from the Xymon server stable testing unstable
#995479 wishlist	1	93970	about 5 years ago	vte2.91 consider disabling/removing OSC7 testing unstable
#994818 important	2	1175	about 5 years ago	firejail audio input is not blocked in default.profile testing unstable
#994455 minor	1	5427	about 5 years ago	golang-github-containers-common secomp.json may be a config file stable testing unstable

(Total: 1769, 1561-1580, 27.7319 ms)