[SECURITY] [DLA 4395-1] krita security update

Debian LTS Advisory DLA-4395-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert December 05, 2025 https://wiki.debian.org/LTS Package : krita Version : 1:4.4.2+dfsg-1+deb11u1 CVE ID : CVE-2025-59820 Loading a manipulated TGA file in krita, an image manipulation...

CVE-2025-59820

In KDE Krita before 5.2.13, loading a manipulated TGA file could result in a heap-based buffer overflow in plugins/impex/tga/kistgaimport.cpp aka KisTgaImport. Control flow proceeds even when a number of pixels becomes negative...

UBUNTU-CVE-2025-59820

In KDE Krita before 5.2.13, loading a manipulated TGA file could result in a heap-based buffer overflow in plugins/impex/tga/kistgaimport.cpp aka KisTgaImport. Control flow proceeds even when a number of pixels becomes negative...

CVE-2025-59820

In KDE Krita before 5.2.13, loading a manipulated TGA file could result in a heap-based buffer overflow in plugins/impex/tga/kistgaimport.cpp aka KisTgaImport. Control flow proceeds even when a number of pixels becomes negative...

CVE-2025-59820

In KDE Krita before 5.2.13, loading a manipulated TGA file could result in a heap-based buffer overflow in plugins/impex/tga/kistgaimport.cpp aka KisTgaImport. Control flow proceeds even when a number of pixels becomes negative...

EUVD-2021-23846

Malware in sbrugna...

EUVD-2021-13506

Malware in sbrugna...

CVE-2021-37274

Kingdee KIS Professional Edition has a privilege escalation vulnerability. Attackers can use the vulnerability to gain computer administrator rights via unspecified loopholes...

CVE-2021-26718

KIS for macOS in some use cases was vulnerable to AV bypass that potentially allowed an attacker to disable anti-virus protection...

XenForo 2.2.15 Cross Site Request Forgery

------------------------------------------------------------------------------- XenForo = 2.2.15 Widget::actionSave Cross-Site Request Forgery Vulnerability ------------------------------------------------------------------------------- - Software Link: https://xenforo.com - Affected Versions:...

Tiki Wiki CMS Groupware 24.1 tikiimporter_blog_wordpress.php PHP Object Injection Vulnerability

---------------------------------------------------------------------------------------------------- Tiki Wiki CMS Groupware input type="fi...

Tiki Wiki CMS Groupware 24.0 grid.php PHP Object Injection Vulnerability

----------------------------------------------------------------------------- Tiki Wiki CMS Groupware const popChain = 'O:25:"SearchElasticConnection":1:S:31:"\00SearchElasticConnection\00bulk";O:28:"SearchElasticBulkOper...

CVE-2021-37274

Kingdee KIS Professional Edition has a privilege escalation vulnerability. Attackers can use the vulnerability to gain computer administrator rights via unspecified loopholes...

CVE-2021-37274

Kingdee KIS Professional Edition has a privilege escalation vulnerability. Attackers can use the vulnerability to gain computer administrator rights via unspecified loopholes...

Privilege escalation

Kingdee KIS Professional Edition has a privilege escalation vulnerability. Attackers can use the vulnerability to gain computer administrator rights via unspecified loopholes...

CVE-2021-37274

Kingdee KIS Professional Edition has a privilege escalation vulnerability. Attackers can use the vulnerability to gain computer administrator rights via unspecified loopholes...

CVE-2021-37274

CVE-2021-37274 involves Kingdee KIS Professional Edition with a privilege escalation vulnerability. Several connected sources describe attackers gaining computer administrator rights via unspecified loopholes in this product; the root cause is not detailed in the provided documents, and there is ...

CVE-2021-37274: Undefined Security Weakness

Kingdee KIS Professional Edition has a privilege escalation vulnerability. Attackers can use the vulnerability to gain computer administrator rights via unspecified loopholes...

Kingdee KIS Professional Edition: Permissions, Licenses, and Access Control Vulnerabilities

Kingdee Kis Professional Edition Kingdee Kis Professional Edition is an Erp software from China Kingdee Kingdee Company. Kingdee KIS Professional Edition suffers from a Privilege Permission and Access Control Issues vulnerability, which stems from Kingdee KIS Professional Edition suffers from a...

PT-2021-21600

Name of the Vulnerable Software and Affected Versions Kingdee KIS Professional Edition affected versions not specified Description The issue allows attackers to gain computer administrator rights via unspecified loopholes, exploiting a privilege escalation vulnerability. Recommendations At the...