Debian 11

Debian 11 — scheme48 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — scheme48 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-4150 Upstream summary: The scheme48-send-definition function in cmuscheme48.el in Scheme 48 allows local users to write to arbitrary files via a symlink attack on /tmp/s48lose.tmp. Table of contents […]

Read more
Debian 11 — libconfig-model-perl — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libconfig-model-perl — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-0373 CVE-2017-0374 Upstream summary: The gen_class_pod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model (aka libconfig-model-perl) before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an […]

Read more
Debian 11 — node-cookiejar — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — node-cookiejar — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-25901 Upstream summary: Versions of the package cookiejar before 2.1.4 are vulnerable to Regular Expression Denial of Service (ReDoS) via the Cookie.parse function, which uses an insecure regular […]

Read more
How to Configure Alertmanager on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Configure Alertmanager on Debian 11

Introduction Deploying configure alertmanager on debian 11 on a Debian 11 Bullseye machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites Before you begin, ensure […]

Read more
Debian 11 — system-config-printer — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — system-config-printer — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2011-4405 Upstream summary: The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an "insecure connection" for queries […]

Read more
Debian 11 — conky — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — conky — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2011-3616 Upstream summary: The getSkillname function in the eve module in Conky 1.8.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on /tmp/.cesf. […]

Read more
Debian 11 — gnu-smalltalk — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — gnu-smalltalk — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-3736 Upstream summary: ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q, and possibly other products, attempts to […]

Read more
Debian 11 — pound — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — pound — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-2026 CVE-2005-1391 CVE-2005-3751 CVE-2009-3555 CVE-2011-3389 CVE-2012-4929 CVE-2014-3566 CVE-2016-10711  +1 more Upstream summary: Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote […]

Read more
Debian 11 — slrn — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — slrn — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-0740 Upstream summary: Buffer overflow in slrnpull for the SLRN package, when installed setuid or setgid, allows local users to gain privileges via a long -d (SPOOLDIR) argument. […]

Read more
Debian 11 — python-oslo.privsep — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — python-oslo.privsep — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 July 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-38065 Upstream summary: A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and prior. Overly permissive functionality within tools leveraging this library within […]

Read more
CHAT