Debian 11

How to Set Up Automatic Security Updates on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Set Up Automatic Security Updates on Debian 11

Introduction Debian 11 Bullseye is built around the ethos of stability and free software. Setting up set up automatic security updates on debian 11 on Bullseye leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Bullseye freeze. Follow each step carefully […]

Read more
Debian 11 — ksh — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ksh — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-14868 Upstream summary: In ksh version 20120801, a flaw was found in the way it evaluates certain environment variables. An attacker could use this flaw to override or […]

Read more
Debian 11 — kwallet-pam — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — kwallet-pam — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-10380 Upstream summary: kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack. Table of contents Symptom & Impact […]

Read more
Debian 11 — lynis — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — lynis — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-3986 CVE-2017-8108 CVE-2019-13033 CVE-2020-13882 Upstream summary: include/tests_webservers in Lynis before 1.5.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.*.unsorted file with an […]

Read more
Debian 11 — gri — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — gri — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2008-7291 Upstream summary: gri before 2.12.18 generates temporary files in an insecure way. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step […]

Read more
Debian 11 — groff — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — groff — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-0969 CVE-2004-1296 CVE-2009-5044 CVE-2009-5078 CVE-2009-5079 CVE-2009-5080 CVE-2009-5081 CVE-2009-5082 Upstream summary: The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 […]

Read more
Debian 11 — ruby-zip — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ruby-zip — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-5946 CVE-2018-1000544 CVE-2019-16892 Upstream summary: The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip […]

Read more
Debian 11 — libgxps — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libgxps — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-11590 CVE-2018-10733 CVE-2018-10767 Upstream summary: There is a NULL pointer dereference in the caseless_hash function in gxps-archive.c in libgxps 0.2.5. A crafted input will lead to a remote […]

Read more
How to Set Up FTP Server with vsftpd on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Set Up FTP Server with vsftpd on Debian 11

Introduction Deploying set up ftp server with vsftpd on debian 11 on a Debian 11 Bullseye machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites […]

Read more
Debian 11 — nn — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — nn — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 September 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-1788 Upstream summary: Format string vulnerability in the nn_exitmsg function in nn 6.6.0 through 6.6.3 allows remote NNTP servers to execute arbitrary code via format strings in server […]

Read more
CHAT