Debian 11

Debian 11 — logol — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — logol — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2012-3453 Upstream summary: logol 1.5.0 uses world writable permissions for the /var/lib/logol/results directory, which allows local users to delete or overwrite arbitrary files. Table of contents Symptom & […]

Read more
Debian 11 — barbican — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — barbican — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-23451 CVE-2022-23452 CVE-2022-3100 Upstream summary: An authorization flaw was found in openstack-barbican. The default policy rules for the secret metadata API allowed any authenticated user to add, modify, […]

Read more
Debian 11 — pngcheck — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — pngcheck — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2020-27818 CVE-2020-35511 Upstream summary: A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be processed by pngcheck could […]

Read more
Debian 11 — libbluray — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libbluray — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-7810 Upstream summary: libbluray MountManager class has a time-of-check time-of-use (TOCTOU) race when expanding JAR files Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

Read more
How To Set Up WireGuard on Debian 11 — step-by-step Linux tutorial on Progressive Robot

How To Set Up WireGuard on Debian 11

In this tutorial, you will set up WireGuard on a Debian 11 server, and then configure another machine to connect to it as a peer using both IPv4 and IPv6 connections (commonly referred to as a _dual stack_ connection). You’ll also learn how to route the peer’s Internet traffic through the WireGuard server in a gateway configuration, in addition to using the VPN for an encrypted peer-to-peer tunnel.

Read more
How to Install Minio as S3-Compatible Storage on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Install Minio as S3-Compatible Storage on Debian 11

Introduction Debian 11 Bullseye is built around the ethos of stability and free software. Setting up install minio as s3-compatible storage on debian 11 on Bullseye leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Bullseye freeze. Follow each step carefully […]

Read more
Debian 11 — thin — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — thin — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-3287 Upstream summary: lib/thin/connection.rb in Thin web server before 1.2.4 relies on the X-Forwarded-For header to determine the IP address of the client, which allows remote attackers to […]

Read more
Debian 11 — zoph — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — zoph — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 9 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2006-0402 CVE-2007-3905 CVE-2008-3258 CVE-2008-6837 CVE-2008-6838 CVE-2009-2343 CVE-2014-9235 CVE-2014-9236 Upstream summary: SQL injection vulnerability in Zoph before 0.5pre1 allows remote attackers to execute arbitrary SQL commands. Table of contents […]

Read more
Debian 11 — modsecurity-crs — multiple vulnerabilities (16 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — modsecurity-crs — multiple vulnerabilities (16 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 August 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-16384 CVE-2019-11387 CVE-2019-11388 CVE-2019-11389 CVE-2019-11390 CVE-2019-11391 CVE-2019-13464 CVE-2020-22669  +8 more Upstream summary: A SQL injection bypass (aka PL1 bypass) exists in OWASP ModSecurity Core Rule Set (owasp-modsecurity-crs) through […]

Read more
How To Set Up Django with Postgres, Nginx, and Gunicorn on Debian 11 — step-by-step Linux tutorial on Progressive Robot

How To Set Up Django with Postgres, Nginx, and Gunicorn on Debian 11

Django is a powerful web framework that can help you get your Python application or website off the ground. Django includes a simplified development server for testing your code locally, but for anything even slightly production related, a more secure and powerful web server like Nginx is a major asset to your stack.

Read more
CHAT