Linux

Debian 11 — eclipse-wtp — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — eclipse-wtp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-17637 Upstream summary: In all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files referring to external entities could be exploited to send […]

Read more
Debian 11 — plexus-archiver — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — plexus-archiver — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-1002200 Upstream summary: plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry […]

Read more
Debian 11 — remctl — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — remctl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-0493 Upstream summary: remctld in remctl before 3.14, when an attacker is authorized to execute a command that uses the sudo option, has a use-after-free that leads to […]

Read more
Debian 11 — python-fedora — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — python-fedora — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-1002150 Upstream summary: python-fedora 0.8.0 and lower is vulnerable to an open redirect resulting in loss of CSRF protection Table of contents Symptom & Impact Environment & Reproduction […]

Read more
Debian 11 — google-oauth-client-java — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — google-oauth-client-java — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-7692 CVE-2021-22573 Upstream summary: PKCE support is not implemented in accordance with the RFC for OAuth 2.0 for Native Apps. Without the use of PKCE, the authorization code […]

Read more
How to Install and Configure Fail2ban on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Install and Configure Fail2ban on Debian 11

Introduction This guide explains how to Install and Configure Fail2ban on Debian 11 on Debian 11 Bullseye. Debian Bullseye uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 11 install with the […]

Read more
Debian 11 — node-mongodb — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — node-mongodb — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 October 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-13863 CVE-2019-2391 CVE-2020-7610 CVE-2021-32050 Upstream summary: The MongoDB bson JavaScript module (also known as js-bson) versions 0.5.0 to 1.0.x before 1.0.5 is vulnerable to a Regular Expression Denial […]

Read more
CHAT