Debian 11

Debian 11 — libxext — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libxext — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-1982 Upstream summary: Multiple integer overflows in X.org libXext 1.3.1 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related […]

Read more
Debian 11 — openexr — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — openexr — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-1720 CVE-2009-1721 CVE-2009-1722 CVE-2017-12596 CVE-2017-14988 CVE-2017-9110 CVE-2017-9111 CVE-2017-9112  +12 more Upstream summary: Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of […]

Read more
Debian 11 — gnutls28 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — gnutls28 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2011-3389 CVE-2012-0390 CVE-2012-1573 CVE-2012-1663 CVE-2013-0169 CVE-2013-1619 CVE-2014-0092 CVE-2014-1959  +12 more Upstream summary: The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla […]

Read more
How to Limit Container Resources with cgroups v1 on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Limit Container Resources with cgroups v1 on Debian 11

Introduction Deploying limit container resources with cgroups v1 on debian 11 on a Debian 11 Bullseye machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites […]

Read more
Common Problems 120502

Debian 11: SSH access denied after sshd Match rule change

🔴 Critical   ⏱ 5–30 min  Last verified: 24 July 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
Debian 11 — python-pycadf — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — python-pycadf — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-4615 Upstream summary: The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before […]

Read more
Debian 11 — adequate — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — adequate — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-6409 Upstream summary: Debian adequate before 0.8.1, when run by root with the –user option, allows local users to hijack the tty and possibly gain privileges via the […]

Read more
How to Configure XFS File System on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Configure XFS File System on Debian 11

Introduction This guide explains how to Configure XFS File System on Debian 11 on Debian 11 Bullseye. Debian Bullseye uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 11 install with the […]

Read more
Debian 11 — pdftk-java — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — pdftk-java — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-37819 Upstream summary: PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java. Table of contents Symptom & Impact Environment & Reproduction Root […]

Read more
Debian 11 — fte — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — fte — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0648 Upstream summary: Multiple buffer overflows in vfte, based on FTE, before 0.50, allow local users to execute arbitrary code. Table of contents Symptom & Impact Environment & […]

Read more
CHAT