Debian 11

Debian 11 — libarchive-zip-perl — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libarchive-zip-perl — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-1096 CVE-2018-10860 Upstream summary: Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file […]

Read more
Debian 11 — cryptcat — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — cryptcat — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-1653 Upstream summary: Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to communicate without encryption despite intended configuration, […]

Read more
Debian 11 — ssvnc — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ssvnc — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 13 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-20020 CVE-2018-20021 CVE-2018-20022 CVE-2018-20024 Upstream summary: LibVNC before commit 7b1ef0ffc4815cab9a96c7278394152bdc89dc4d contains heap out-of-bound write vulnerability inside structure in VNC client code that can result remote code execution Table […]

Read more
Common Problems 120645

Debian 11 Hostname Resolution Warning sudo unable to resolve host

🟢 Low   ⏱ 5–30 min  Last verified: 13 July 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
Debian 11 — oath-toolkit — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — oath-toolkit — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-7322 Upstream summary: usersfile.c in liboath in OATH Toolkit before 2.4.1 does not properly handle lines containing an invalid one-time-password (OTP) type and a user name in /etc/users.oath, […]

Read more
How to Configure HashiCorp Vault on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Configure HashiCorp Vault on Debian 11

Introduction This guide explains how to Configure HashiCorp Vault on Debian 11 on Debian 11 Bullseye. Debian Bullseye uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 11 install with the standard […]

Read more
Common Problems 120642

Debian 11 – Apache2 Fails with Address Already in Use – Port Conflict Resolution

🟠 High   ⏱ 5–30 min  Last verified: 12 July 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
Debian 11 — postfix — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — postfix — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0468 CVE-2003-0540 CVE-2005-0337 CVE-2008-2936 CVE-2008-2937 CVE-2008-3889 CVE-2009-2939 CVE-2011-0411  +3 more Upstream summary: Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos […]

Read more
How to Restrict Kernel Module Loading on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Restrict Kernel Module Loading on Debian 11

Introduction Deploying restrict kernel module loading on debian 11 on a Debian 11 Bullseye machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites Before you […]

Read more
Debian 11 — libxfixes — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libxfixes — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-1983 CVE-2016-7944 Upstream summary: Integer overflow in X.org libXfixes 5.0 and earlier allows X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related […]

Read more
CHAT