[SECURITY] [DLA 4395-1] krita security update

Debian LTS Advisory DLA-4395-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert December 05, 2025 https://wiki.debian.org/LTS Package : krita Version : 1:4.4.2+dfsg-1+deb11u1 CVE ID : CVE-2025-59820 Loading a manipulated TGA file in krita, an image manipulation...

CVE-2025-59820

In KDE Krita before 5.2.13, loading a manipulated TGA file could result in a heap-based buffer overflow in plugins/impex/tga/kistgaimport.cpp aka KisTgaImport. Control flow proceeds even when a number of pixels becomes negative...

UBUNTU-CVE-2025-59820

In KDE Krita before 5.2.13, loading a manipulated TGA file could result in a heap-based buffer overflow in plugins/impex/tga/kistgaimport.cpp aka KisTgaImport. Control flow proceeds even when a number of pixels becomes negative...

CVE-2025-59820

In KDE Krita before 5.2.13, loading a manipulated TGA file could result in a heap-based buffer overflow in plugins/impex/tga/kistgaimport.cpp aka KisTgaImport. Control flow proceeds even when a number of pixels becomes negative...

CVE-2025-59820

In KDE Krita before 5.2.13, loading a manipulated TGA file could result in a heap-based buffer overflow in plugins/impex/tga/kistgaimport.cpp aka KisTgaImport. Control flow proceeds even when a number of pixels becomes negative...

EUVD-2021-23846

Malware in sbrugna...

EUVD-2021-13506

Malware in sbrugna...

CVE-2021-37274

Kingdee KIS Professional Edition has a privilege escalation vulnerability. Attackers can use the vulnerability to gain computer administrator rights via unspecified loopholes...

CVE-2021-26718

KIS for macOS in some use cases was vulnerable to AV bypass that potentially allowed an attacker to disable anti-virus protection...

XenForo 2.2.15 Cross Site Request Forgery

------------------------------------------------------------------------------- XenForo = 2.2.15 Widget::actionSave Cross-Site Request Forgery Vulnerability ------------------------------------------------------------------------------- - Software Link: https://xenforo.com - Affected Versions:...

Tiki Wiki CMS Groupware 24.1 tikiimporter_blog_wordpress.php PHP Object Injection Vulnerability

---------------------------------------------------------------------------------------------------- Tiki Wiki CMS Groupware input type="fi...

Tiki Wiki CMS Groupware 24.0 grid.php PHP Object Injection Vulnerability

----------------------------------------------------------------------------- Tiki Wiki CMS Groupware const popChain = 'O:25:"SearchElasticConnection":1:S:31:"\00SearchElasticConnection\00bulk";O:28:"SearchElasticBulkOper...

CVE-2021-37274

Kingdee KIS Professional Edition has a privilege escalation vulnerability. Attackers can use the vulnerability to gain computer administrator rights via unspecified loopholes...

Privilege escalation

Kingdee KIS Professional Edition has a privilege escalation vulnerability. Attackers can use the vulnerability to gain computer administrator rights via unspecified loopholes...

CVE-2021-37274

Kingdee KIS Professional Edition has a privilege escalation vulnerability. Attackers can use the vulnerability to gain computer administrator rights via unspecified loopholes...

CVE-2021-37274

CVE-2021-37274 involves Kingdee KIS Professional Edition with a privilege escalation vulnerability. Several connected sources describe attackers gaining computer administrator rights via unspecified loopholes in this product; the root cause is not detailed in the provided documents, and there is ...

Kingdee Kis Professional Edition 权限许可和访问控制问题漏洞

Kingdee Kis Professional Edition Kingdee Kis Professional Edition is an Erp software from China Kingdee Kingdee Company. Kingdee KIS Professional Edition suffers from a Privilege Permission and Access Control Issues vulnerability, which stems from Kingdee KIS Professional Edition suffers from a...

CVE-2021-26718

KIS for macOS in some use cases was vulnerable to AV bypass that potentially allowed an attacker to disable anti-virus protection...

CVE-2021-26718

CVE-2021-26718 concerns Kaspersky Internet Security (KIS) for macOS where AV bypass could occur via an XPC service. Public details describe an improper client verification in the system extension’s XPC communication (IPCService) that allowed a normal user to interact with the XPC service, inject ...

Command Execution Vulnerability in Kingdee KIS Flagship Edition of Kingdee Software Ltd.

Kingdee KIS is an ERP software. A command execution vulnerability exists in Kingdee KIS Flagship Edition of Kingdee Software Limited, which can be exploited by an attacker to gain server control privileges...