#debian / Page 7

AI-assisted bug hunting adds to maintainers' workload, while broad CVE rules help explain the sprawling tally ...

Multiple vulnerabilities were discovered in the Perl programming language. CVE-2025-15649 header parsing in IO::Uncompress::Unzip IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed ...

Several vulnerabilities were discovered in node-lodash, a Node.js module providing utility functions for common programming tasks. CVE-2025-13465 Prototype pollution in the _.unset and _.omit functions. A crafted property path could be used to delete ...

Multiple security issues were found in PHP, a widely-used open source general purpose scripting language, which could result in in denial of service, information disclosure, privilege escalation, incorrect validation of TLS certificates or bypass of ...

Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation, information disclosure or denial of service. For Debian 12 bookworm, these problems have been fixed in version 4.17.7-0+deb12u1.

It was discovered that incorrect error handling in ruby-rack-session may result in authentication bypass or privilege escalation in some setups. For the stable distribution (trixie), this problem has been fixed in version 2.1.1-0.1+deb13u1.

Multiple vulnerabilities have been discocvered in Wireshark, a network protocol analyzer which could result in denial of service or the execution of arbitrary code. For the stable distribution (trixie), these problems have been fixed in version 4.4 . ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For Debian 12 bookworm, these problems have been fixed in version 6.12.111-1~deb12u1. This update ...

Michael Allen discovered an out-of-bounds write vulnerability in PCRE2, a library of functions to support Perl compatible regular expressions, which could result in denial of service or potentially the execution of arbitrary code. For Debian 12 ...

Three vulnerabilities were discovered in FreeCAD, an open-source multiplatform 3D parametric modeler, which could result in arbitrary code execution, arbitrary file writes, and the disclosure of local files or triggering of remote network requests. . ...