Debian: Security Advisory (DLA-4062-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-15358

Name of the Vulnerable Software and Affected Versions: Debian Linux affected versions not specified Description: The issue concerns an out-of-bounds access in the color map of the giflib package. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

PT-2025-21892 · Slurm-Wlm +1 · Slurm-Wlm +1

Name of the Vulnerable Software and Affected Versions: Debian Linux affected versions not specified Description: The issue concerns package vulnerabilities in slurm-wlm within Debian Linux. No further details are available. Recommendations: At the moment, there is no information about a newer...

PT-2025-28866

Name of the Vulnerable Software and Affected Versions: git in Debian Linux affected versions not specified Description: A flaw exists in Git GUI that allows for the creation and overwriting of arbitrary writable files. This occurs when a user clones an untrusted repository and is subsequently...

PT-2025-19756 · Chromium +3 · Chromium +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 136.0.7103.59 chromium in Debian Linux affected versions not specified Description: The issue is related to insufficient data validation in DevTools, allowing a remote attacker to bypass discretionary access...

PT-2025-54589

Name of the Vulnerable Software and Affected Versions fastdds affected versions not specified Description The description does not provide details about the nature of the issue. It only indicates the presence of package vulnerabilities within fastdds in Debian Linux. Recommendations At the moment...

PT-2025-27765

Name of the Vulnerable Software and Affected Versions: MediaWiki versions affected versions not specified Description: The issue concerns package vulnerabilities in MediaWiki, specifically within Debian Linux. No further details are provided about the nature of the issue or its potential impact...

PT-2025-27820

Name of the Vulnerable Software and Affected Versions: MediaWiki versions affected versions not specified Description: The issue concerns package vulnerabilities in MediaWiki, specifically within Debian Linux. No further details are provided about the nature of the issue or its potential impact...

PT-2025-11968 · Suricata +1 · Suricata +1

Name of the Vulnerable Software and Affected Versions: Suricata versions affected versions not specified Description: The issue concerns a problem where the decode base64 signature can cause large memory allocation. This could potentially lead to issues with the Suricata package in Debian Linux...

PT-2025-38317

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 140.0.7339.185 Microsoft Edge versions prior to 140.0.7339.185 Description A use-after-free issue exists in the WebRTC component of Google Chrome and Microsoft Edge. This flaw could allow a remote attacker to...

PT-2025-27028

Name of the Vulnerable Software and Affected Versions: Debian Linux affected versions not specified Description: The issue concerns package vulnerabilities in libssh within Debian Linux. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-27029

Name of the Vulnerable Software and Affected Versions: Debian Linux affected versions not specified Description: The issue concerns package vulnerabilities in libssh within Debian Linux. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-27033

Name of the Vulnerable Software and Affected Versions: Debian Linux affected versions not specified Description: The issue concerns package vulnerabilities in libssh. No further details are available due to the lack of information in the provided descriptions. Recommendations: At the moment, ther...

PT-2025-11339 · Unknown +3 · Ghostscript +3

Name of the Vulnerable Software and Affected Versions: Debian Linux affected versions not specified ghostscript affected versions not specified Description: The issue is caused by a buffer overflow resulting from an oversized Type 4 function in a PDF. It is also related to package vulnerabilities...

PT-2025-11338 · Unknown +3 · Ghostscript +3

Name of the Vulnerable Software and Affected Versions: Debian Linux affected versions not specified Description: The issue is related to a buffer overflow that occurs with long TTF font names in ghostscript. Recommendations: At the moment, there is no information about a newer version that contai...

PT-2025-20832

Name of the Vulnerable Software and Affected Versions: Debian Linux affected versions not specified Description: The issue concerns file existence tests via socket lookup error messages, potentially affecting the screen package in Debian Linux. No information is provided about the estimated numbe...

PT-2025-11335 · Unknown +4 · Ghostscript +4

Name of the Vulnerable Software and Affected Versions: Debian Linux affected versions not specified Description: The issue is related to a buffer overflow that occurs during the serialization of DollarBlend in font. Additionally, there are package vulnerabilities in ghostscript. Recommendations: ...

PT-2025-11342 · Unknown +1 · Ghostscript +1

Name of the Vulnerable Software and Affected Versions: Debian Linux affected versions not specified Description: The issue allows access to arbitrary files through a truncated path with invalid UTF-8. It is also related to package vulnerabilities in ghostscript. Recommendations: At the moment,...

PT-2025-21893

Name of the Vulnerable Software and Affected Versions: Debian Linux affected versions not specified Description: The issue concerns package vulnerabilities in nbdkit. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-21254 · Node.Js +5 · Llhttp +6

Name of the Vulnerable Software and Affected Versions: Node.js versions prior to the llhttp v9 upgrade node-undici in Debian Linux affected versions not specified Description: A flaw in the HTTP parser of Node.js allows improper termination of HTTP/1 headers using r rX instead of the required r r...