Debian 11

Common Problems 120531

Debian 11 – nftables Rules Missing After Reboot – Persistent Firewall Setup

🟠 High   ⏱ 5–30 min  Last verified: 5 June 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
How to Install and Configure ufw Firewall on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Install and Configure ufw Firewall on Debian 11

Introduction This guide explains how to Install and Configure ufw Firewall on Debian 11 on Debian 11 Bullseye. Debian Bullseye uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 11 install with […]

Read more
Debian 11 — libnss-ldap — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libnss-ldap — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 5 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-0825 CVE-2003-0734 CVE-2005-2069 CVE-2007-5794 Upstream summary: Buffer overflow in the DNS SRV code for nss_ldap before nss_ldap-198 allows remote attackers to cause a denial of service and possibly […]

Read more
Debian 11 — gst-plugins-good1.0 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — gst-plugins-good1.0 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-10198 CVE-2016-10199 CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9807 CVE-2016-9808 CVE-2016-9810  +12 more Upstream summary: The gst_aac_parse_sink_setcaps function in gst/audioparsers/gstaacparse.c in gst-plugins-good in GStreamer before 1.10.3 allows remote attackers to cause […]

Read more
Debian 11 — tomcat9 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — tomcat9 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-0199 CVE-2019-0221 CVE-2019-10072 CVE-2019-12418 CVE-2019-17563 CVE-2019-17569 CVE-2020-11996 CVE-2020-13934  +12 more Upstream summary: The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.14 and 8.5.0 to 8.5.37 accepted streams with […]

Read more
Debian 11 — gitit — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — gitit — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-38711 Upstream summary: In gitit before 0.15.0.0, the Export feature can be exploited to leak information from files. Table of contents Symptom & Impact Environment & Reproduction Root […]

Read more
Debian 11 — gource — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — gource — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2010-2449 Upstream summary: Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack. Table of contents Symptom […]

Read more
Debian 11 — golang-github-gin-contrib-cors — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — golang-github-gin-contrib-cors — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-25211 Upstream summary: parseWildcardRules in Gin-Gonic CORS middleware before 1.6.0 mishandles a wildcard at the end of an origin string, e.g., https://example.community/* is allowed when the intention is […]

Read more
Debian 11 — im — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — im — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 June 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2002-1395 Upstream summary: Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary […]

Read more
How to Install .NET 6 SDK on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Install .NET 6 SDK on Debian 11

Introduction Debian 11 Bullseye is built around the ethos of stability and free software. Setting up install .net 6 sdk on debian 11 on Bullseye leverages the same proven Debian packaging system that powers millions of servers worldwide, while benefiting from the latest upstream releases included in the Bullseye freeze. Follow each step carefully and […]

Read more
CHAT