Detections
Analytics
Debian dsa-6552 : gir1.2-vips-8.0 - security update
high Nessus Plugin ID 367973
Synopsis
The remote Debian host is missing one or more security-related updates.Description
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6552 advisory.- ------------------------------------------------------------------------- Debian Security Advisory DSA-6552-1 [email protected] https://www.debian.org/security/ Tianyu Chen October 11, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : vips CVE ID : CVE-2025-59933 CVE-2026-33327 CVE-2026-33328 CVE-2026-35590 CVE-2026-35591 CVE-2026-69242 CVE-2026-70651 CVE-2026-70653 CVE-2026-70654
Several vulnerabilities have been discovered in vips, a fast image processing library. These vulnerabilities could result in denial of service, memory safety issues, or other security impact when processing specially crafted image files or data.
For the stable distribution (trixie), these problems have been fixed in version 8.16.1-1+deb13u2.
We recommend that you upgrade your vips packages.
For the detailed security status of vips please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/vips
Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/
Mailing list: [email protected]
Tenable has extracted the preceding description block directly from the Debian security advisory.
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Upgrade the gir1.2-vips-8.0 packages.See Also
https://packages.debian.org/source/trixie/vips
https://security-tracker.debian.org/tracker/CVE-2025-59933
https://security-tracker.debian.org/tracker/CVE-2026-33327
https://security-tracker.debian.org/tracker/CVE-2026-33328
https://security-tracker.debian.org/tracker/CVE-2026-35590
https://security-tracker.debian.org/tracker/CVE-2026-35591
https://security-tracker.debian.org/tracker/CVE-2026-69242
https://security-tracker.debian.org/tracker/CVE-2026-70651
https://security-tracker.debian.org/tracker/CVE-2026-70653
https://security-tracker.debian.org/tracker/CVE-2026-70654
https://security-tracker.debian.org/tracker/source-package/vips
Plugin Details
Severity: High
ID: 367973
File Name: debian_DSA-6552.nasl
Version: 1.1
Type: Local
Agent: unix
Family: Debian Local Security Checks
Published: 10/20/2026
Updated: 10/20/2026
Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Continuous Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 57.2
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 5.3
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2025-59933
CVSS v3
Risk Factor: High
Base Score: 7.8
Temporal Score: 6.8
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS Score Source: CVE-2026-35591
CVSS v4
Risk Factor: High
Base Score: 8.4
Threat Score: 5.7
Threat Vector: CVSS:4.0/E:U
Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H
CVSS Score Source: CVE-2026-69242
Vulnerability Information
CPE: cpe:/o:debian:debian_linux:13.0, p-cpe:/a:debian:debian_linux:gir1.2-vips-8.0, p-cpe:/a:debian:debian_linux:libvips-dev, p-cpe:/a:debian:debian_linux:libvips-doc, p-cpe:/a:debian:debian_linux:libvips-tools, p-cpe:/a:debian:debian_linux:libvips42t64
Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l
Exploit Ease: No known exploits are available
Patch Publication Date: 10/11/2026
Vulnerability Publication Date: 9/29/2025
Reference Information
CVE: CVE-2025-59933, CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591, CVE-2026-69242, CVE-2026-70651, CVE-2026-70653, CVE-2026-70654