Debian 11

Debian 11 — newt — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — newt — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-2905 Upstream summary: Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of service (application crash) or possibly execute […]

Read more
Debian 11 — librest — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — librest — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-2675 Upstream summary: The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the rest_proxy_call_get_url function, which allows remote attackers to cause a denial of […]

Read more
Common Problems 120499

Debian 11 Disk Full Due to Unbounded Journal Logs

🟠 High   ⏱ 5–30 min  Last verified: 15 August 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
Debian 11 — python-bcrypt — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — python-bcrypt — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-1895 Upstream summary: The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which […]

Read more
How to Install Haskell GHCup on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Install Haskell GHCup on Debian 11

Introduction Deploying install haskell ghcup on debian 11 on a Debian 11 Bullseye machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites Ensure Debian 11 […]

Read more
Debian 11 — chromium — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — chromium — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 15 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-17480 CVE-2018-17481 CVE-2018-18335 CVE-2018-18336 CVE-2018-18337 CVE-2018-18338 CVE-2018-18339 CVE-2018-18340  +12 more Upstream summary: Execution of user supplied Javascript during array deserialization leading to an out of bounds write in […]

Read more
Debian 11 — duo-unix — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — duo-unix — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-12135 Upstream summary: bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an […]

Read more
Debian 11 — nmap — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — nmap — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 14 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-4885 CVE-2017-18594 CVE-2018-1000161 CVE-2018-15173 Upstream summary: The http-domino-enum-passwords.nse script in NMap before 6.40, when domino-enum-passwords.idpath is set, allows remote servers to upload "arbitrarily named" files via a crafted […]

Read more
Common Problems 120699

Debian 11 – Fail2ban blocks internal monitoring and trusted hosts

🟡 Medium   ⏱ 5–30 min  Last verified: 14 August 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
CHAT