It was discovered that Vim incorrectly handled file extraction when opening maliciously crafted zip or tar archives. An attacker could possibly use this issue to create or overwrite files on the system and execute arbitrary code.
https://security-tracker.debian.org/tracker/DSA-6001-1
https://security-tracker.debian.org/tracker/DSA-5997-1
Nikita Skovoroda discovered that cipher-base did not properly manage certain inputs. An attacker could possibly use this issue to manipulate the internal state of hash functions, resulting in hash collisions, denial of service, or other un…
It was discovered that CUPS incorrectly handled authentication types other than Basic. An attacker could possibly use this issue to bypass authentication. (CVE-2025-58060) It was discovered that CUPS incorrectly handled deserialization an…