Debian 11

Debian 11 — libuev — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libuev — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-48620 Upstream summary: uev (aka libuev) before 2.4.1 has a buffer overflow in epoll_wait if maxevents is a large number. Table of contents Symptom & Impact Environment & […]

Read more
How to Install Zabbix Server on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Install Zabbix Server on Debian 11

Introduction Deploying install zabbix server on debian 11 on a Debian 11 Bullseye machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites Ensure Debian 11 […]

Read more
Debian 11 — ibus-pinyin — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ibus-pinyin — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-4509 Upstream summary: The default configuration of IBUS 1.5.4, and possibly 1.5.2 and earlier, when IBus.InputPurpose.PASSWORD is not set and used with GNOME 3, does not obscure the […]

Read more
Debian 11 — libfsntfs — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libfsntfs — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-11727 CVE-2018-11728 CVE-2018-11729 CVE-2018-11730 CVE-2018-11731 Upstream summary: The libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via […]

Read more
Debian 11 — grml-debootstrap — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — grml-debootstrap — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-1378 Upstream summary: cmdlineopts.clp in grml-debootstrap in Debian 0.54, 0.68.x before 0.68.1, 0.7x before 0.78 is sourced without checking that the local directory is writable by non-root users. […]

Read more
Debian 11 — rope — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — rope — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-3539 Upstream summary: base/oi/doa.py in the Rope library in CPython (aka Python) allows remote attackers to execute arbitrary code by leveraging an unsafe call to pickle.load. Table of […]

Read more
How to Configure Apache2 MPM Worker on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Configure Apache2 MPM Worker on Debian 11

Introduction This guide explains how to Configure Apache2 MPM Worker on Debian 11 on Debian 11 Bullseye. Debian Bullseye uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 11 install with the […]

Read more
Debian 11 — libpam-ldap — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libpam-ldap — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0734 CVE-2005-2069 CVE-2005-2641 CVE-2006-5170 Upstream summary: Unknown vulnerability in the pam_filter mechanism in pam_ldap before version 162, when LDAP based authentication is being used, allows users to bypass […]

Read more
Debian 11 — libsndfile — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libsndfile — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 May 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-4974 CVE-2009-0186 CVE-2009-1788 CVE-2009-1791 CVE-2009-4835 CVE-2011-2696 CVE-2014-9496 CVE-2014-9756  +12 more Upstream summary: Heap-based buffer overflow in the flac_buffer_copy function in libsndfile 1.0.17 and earlier might allow remote attackers […]

Read more
CHAT