Packages / Debian 13 (Trixie) / non-free/web / znuny

Package: znuny (6.5.15-2)

flexible web-based ticketing system

Other Packages Related to znuny:

  • dep: [otrs2]

    Open Ticket Request System Znuny

Download znuny

ArchitecturePackage sizeInstalled sizeFilesPackage
all253 KiB264 KiBlist of filesDownload

Package file paths (0)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

No package-associated file paths were observed for the displayed build metadata.

Field source: Debian 13 (Trixie) non-free amd64

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Debian 13 (Trixie) in the browserBuild an image that includes znuny

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
6.5.15-2trixie / non-freeallDebian 13 · non-free · amd64253 KiB264 KiBpool/non-free/z/znuny/znuny_6.5.15-2_all.deb
6.5.15-2trixie / non-freeallDebian 13 · non-free · arm64253 KiB264 KiBpool/non-free/z/znuny/znuny_6.5.15-2_all.deb

Field source: Debian 13 (Trixie) non-free amd64

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVESeverityVersion impact
[CVE-2026-93483]

Published:

In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header. Because the

Critical(9.5)Affected
Details (2)

  • 6.5.15-2 · all · trixie

    Affected

    nvd · znuny · debian · 13

  • 6.5.15-2 · all · trixie

    Affected

    nvd · znuny · debian · 13

[CVE-2026-77506]

Published:

Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS.

Medium(4.8)Affected
Details (2)

  • 6.5.15-2 · all · trixie

    Affected

    nvd · znuny · debian · 13

  • 6.5.15-2 · all · trixie

    Affected

    nvd · znuny · debian · 13

[CVE-2026-48188]

Published:

An improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition database layer module allows an unauthenticated SQL injection which can lead to an authentication bypass. This issue on

Critical(9.1)Affected
Details (2)

  • 6.5.15-2 · all · trixie

    Affected

    nvd · znuny · debian · 13

  • 6.5.15-2 · all · trixie

    Affected

    nvd · znuny · debian · 13

[CVE-2025-26843]

Published:

znuny: CVE-2025-26843

MediumAffected
Details (2)

  • 6.5.15-2 · all · trixie

    Affected

    dsa · znuny · debian · 13

  • 6.5.15-2 · all · trixie

    Affected

    dsa · znuny · debian · 13

[CVE-2026-50591]

Published:

In Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences.

Medium(5.4)Affected
Details (2)

  • 6.5.15-2 · all · trixie

    Affected

    nvd · znuny · debian · 13

  • 6.5.15-2 · all · trixie

    Affected

    nvd · znuny · debian · 13

[CVE-2026-50592]

Published:

In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in AdminCommunicationLog (aka the communication log administration view).

Medium(6.4)Affected
Details (2)

  • 6.5.15-2 · all · trixie

    Affected

    nvd · znuny · debian · 13

  • 6.5.15-2 · all · trixie

    Affected

    nvd · znuny · debian · 13

[CVE-2025-52204]

Published:

A Cross-Site Scripting (XSS) vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl endpoint via the OTRSCustomerInterface parameter

Medium(6.1)Affected
Details (2)

  • 6.5.15-2 · all · trixie

    Affected

    nvd · znuny · debian · 13

  • 6.5.15-2 · all · trixie

    Affected

    nvd · znuny · debian · 13

[CVE-2025-3573]

Published:

phpmyadmin: CVE-2025-3573

Medium(6.1)Affected
Details (2)

  • 6.5.15-2 · all · trixie

    Affected

    dsa · znuny · debian · 13

  • 6.5.15-2 · all · trixie

    Affected

    dsa · znuny · debian · 13

[CVE-2025-25977]

Published:

znuny: CVE-2025-25977

Medium(6.5)Affected
Details (2)

  • 6.5.15-2 · all · trixie

    Affected

    dsa · znuny · debian · 13

  • 6.5.15-2 · all · trixie

    Affected

    dsa · znuny · debian · 13

Fixed and unaffected versions (8)
CVESeverityVersion impact
[CVE-2025-26846]

Published:

znuny: CVE-2025-26846

MediumFixed
Details (2)

  • 6.5.15-2 · all · trixie

    Fixed · Fixed: 6.5.13-1

    dsa · znuny · debian · 13

  • 6.5.15-2 · all · trixie

    Fixed · Fixed: 6.5.13-1

    dsa · znuny · debian · 13

[CVE-2025-26847]

Published:

znuny: CVE-2025-26847

MediumFixed
Details (2)

  • 6.5.15-2 · all · trixie

    Fixed · Fixed: 6.5.15-2

    dsa · znuny · debian · 13

  • 6.5.15-2 · all · trixie

    Fixed · Fixed: 6.5.15-2

    dsa · znuny · debian · 13

[CVE-2025-26845]

Published:

znuny: CVE-2025-26845

MediumFixed
Details (2)

  • 6.5.15-2 · all · trixie

    Fixed · Fixed: 6.5.13-1

    dsa · znuny · debian · 13

  • 6.5.15-2 · all · trixie

    Fixed · Fixed: 6.5.13-1

    dsa · znuny · debian · 13

[CVE-2025-43926]

Published:

znuny: CVE-2025-43926

MediumFixed
Details (2)

  • 6.5.15-2 · all · trixie

    Fixed · Fixed: 6.5.15-2

    dsa · znuny · debian · 13

  • 6.5.15-2 · all · trixie

    Fixed · Fixed: 6.5.15-2

    dsa · znuny · debian · 13

[CVE-2025-26842]

Published:

znuny: CVE-2025-26842

MediumFixed
Details (2)

  • 6.5.15-2 · all · trixie

    Fixed · Fixed: 6.5.13-1

    dsa · znuny · debian · 13

  • 6.5.15-2 · all · trixie

    Fixed · Fixed: 6.5.13-1

    dsa · znuny · debian · 13

[CVE-2025-26844]

Published:

znuny: CVE-2025-26844

MediumFixed
Details (2)

  • 6.5.15-2 · all · trixie

    Fixed · Fixed: 6.5.13-1

    dsa · znuny · debian · 13

  • 6.5.15-2 · all · trixie

    Fixed · Fixed: 6.5.13-1

    dsa · znuny · debian · 13

[CVE-2024-48937]

Published:

znuny: CVE-2024-48937

MediumFixed
Details (2)

  • 6.5.15-2 · all · trixie

    Fixed · Fixed: 6.5.11-1

    dsa · znuny · debian · 13

  • 6.5.15-2 · all · trixie

    Fixed · Fixed: 6.5.11-1

    dsa · znuny · debian · 13

[CVE-2024-48938]

Published:

znuny: CVE-2024-48938

MediumFixed
Details (2)

  • 6.5.15-2 · all · trixie

    Fixed · Fixed: 6.5.11-1

    dsa · znuny · debian · 13

  • 6.5.15-2 · all · trixie

    Fixed · Fixed: 6.5.11-1

    dsa · znuny · debian · 13

Last synced:

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

6.5.15-2 / allObserved Sep 1, 2026sha256 58cdd165d02e…24b34190Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 58cdd165d02e1577925712016929f675448d5426ccb45520c3b8e45524b34190

Verify download

printf '%s %s\n' '58cdd165d02e1577925712016929f675448d5426ccb45520c3b8e45524b34190' 'znuny_6.5.15-2_all.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) non-free amd64

6.5.15-2 / allObserved Sep 1, 2026sha256 58cdd165d02e…24b34190Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 58cdd165d02e1577925712016929f675448d5426ccb45520c3b8e45524b34190

Verify download

printf '%s %s\n' '58cdd165d02e1577925712016929f675448d5426ccb45520c3b8e45524b34190' 'znuny_6.5.15-2_all.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) non-free arm64

Sources

  • Debian 13 (Trixie) non-free amd64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-non-free-amd64:873a1152a9641bbbd32ae06d9bea40c0eb9486caeea340a786d4ab84cb6de6c5

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    non-free/binary-amd64/Packages.xz
    Expected SHA-256
    873a1152a9641bbbd32ae06d9bea40c0eb9486caeea340a786d4ab84cb6de6c5
    Observed SHA-256
    873a1152a9641bbbd32ae06d9bea40c0eb9486caeea340a786d4ab84cb6de6c5
    Result
    match verified
  • Debian 13 (Trixie) non-free arm64Sep 1, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-non-free-arm64:6187284b3ec84e045bc98bc85f551b3235a274dc567fa547a853554d18217905

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    non-free/binary-arm64/Packages.xz
    Expected SHA-256
    6187284b3ec84e045bc98bc85f551b3235a274dc567fa547a853554d18217905
    Observed SHA-256
    6187284b3ec84e045bc98bc85f551b3235a274dc567fa547a853554d18217905
    Result
    match verified