Linux

Debian 11 — openconnect — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — openconnect — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-5009 CVE-2010-3901 CVE-2010-3902 CVE-2010-3903 CVE-2012-3291 CVE-2012-6128 CVE-2013-7098 CVE-2019-16239  +2 more Upstream summary: Double free vulnerability in OpenConnect before 1.40 might allow remote AnyConnect SSL VPN servers to cause […]

Read more
Debian 11 — libapache2-mod-fcgid — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libapache2-mod-fcgid — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2010-3872 CVE-2012-1181 CVE-2013-4365 Upstream summary: A flaw was found in the mod_fcgid module of httpd. A malformed FastCGI response may result in a stack-based buffer overflow in the […]

Read more
Debian 11 — networkd-dispatcher — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — networkd-dispatcher — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-29799 CVE-2022-29800 Upstream summary: A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the OperationalState or the AdministrativeState of networkd-dispatcher. This attack […]

Read more
openSUSE Tumbleweed — freeradius-server — multiple vulnerabilities (19 CVEs) — patch and remediation guide — diagnosis and fix on openSUSE Tumbleweed

openSUSE Tumbleweed — freeradius-server — multiple vulnerabilities (19 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: openSUSE Tumbleweed 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2022:4620-1 (see also SUSE bugzilla) Related CVEs: CVE-2022-41860 CVE-2022-41861 CVE-2019-17185 CVE-2022-41859 CVE-2008-4474 CVE-2012-3547 CVE-2014-2015 CVE-2015-4680  +11 more Upstream summary: In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server […]

Read more
How to Set Up TimescaleDB on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Set Up TimescaleDB on Debian 11

Introduction Deploying set up timescaledb on debian 11 on a Debian 11 Bullseye machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites You will need […]

Read more
Debian 11 — msgpuck — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — msgpuck — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-9036 Upstream summary: An exploitable incorrect return value vulnerability exists in the mp_check function of Tarantool's Msgpuck library 1.0.3. A specially crafted packet can cause the mp_check function […]

Read more
Debian 11 — php-letodms-core — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — php-letodms-core — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-4570 Upstream summary: SQL injection vulnerability in LetoDMS_Core/Core/inc.ClassDMS.php in LetoDMS (formerly MyDMS) before 3.3.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Table of contents […]

Read more
Ubuntu 18.04 — golang-yaml.v2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — golang-yaml.v2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 April 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6287-1 Related CVEs: CVE-2021-4235 CVE-2022-3064 Upstream summary: Simon Ferquel discovered that the Go yaml package incorrectly handled certain YAML documents. If a user or an automated system were tricked into […]

Read more
Ubuntu 20.04 — stunnel4 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — stunnel4 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6901-1 Related CVEs: CVE-2021-20230 Upstream summary: It was discovered that stunnel did not properly validate client certificates when configured to use both the redirect and verifyChain options. A remote attacker […]

Read more
Common Problems 120599

Debian 11 RAID Array Degraded Without Alerting

🔴 Critical   ⏱ 5–30 min  Last verified: 1 April 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
CHAT