Debian 11

Debian 11 — snakeyaml — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — snakeyaml — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-18640 CVE-2022-1471 CVE-2022-25857 CVE-2022-38749 CVE-2022-38750 CVE-2022-38751 CVE-2022-38752 CVE-2022-41854 Upstream summary: The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to […]

Read more
Debian 11 — mhc — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — mhc — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0120 Upstream summary: adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink attack on a default temporary directory with a […]

Read more
Common Problems 120469

Debian 11 Stuck at GRUB Prompt After Kernel Update

🟠 High   ⏱ 5–30 min  Last verified: 16 April 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
How to Configure StrongSwan IPsec on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Configure StrongSwan IPsec on Debian 11

Introduction Deploying configure strongswan ipsec on debian 11 on a Debian 11 Bullseye machine is straightforward thanks to Debian’s policy-compliant packaging. Unlike rpm-based distributions, Debian stores configuration helpers in /etc/default/, uses update-rc.d for older init scripts, and provides dpkg-reconfigure for interactive package configuration. This tutorial stays on the systemd path throughout. Prerequisites Ensure Debian 11 […]

Read more
Debian 11 — python-mechanize — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — python-mechanize — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-32837 Upstream summary: mechanize, a library for automatically interacting with HTTP web servers, contains a regular expression that is vulnerable to regular expression denial of service (ReDoS) prior […]

Read more
Debian 11 — ircd-irc2 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ircd-irc2 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0864 Upstream summary: Buffer overflow in m_join in channel.c for IRCnet IRCD 2.10.x to 2.10.3p3 allows remote attackers to cause a denial of service. Table of contents Symptom […]

Read more
Debian 11 — hexchat — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — hexchat — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-7449 CVE-2016-2087 CVE-2016-2233 Upstream summary: The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verify that the server hostname matches a domain name […]

Read more
Debian 11 — jupyter-notebook — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — jupyter-notebook — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 15 April 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-19351 CVE-2018-19352 CVE-2018-21030 CVE-2018-8768 CVE-2019-10255 CVE-2019-9644 CVE-2020-26215 CVE-2021-32798  +3 more Upstream summary: Jupyter Notebook before 5.7.1 allows XSS via an untrusted notebook because nbconvert responses are considered to […]

Read more
How to Configure Percona XtraBackup on Debian 11 — step-by-step Debian 11 tutorial on Progressive Robot

How to Configure Percona XtraBackup on Debian 11

Introduction This guide explains how to Configure Percona XtraBackup on Debian 11 on Debian 11 Bullseye. Debian Bullseye uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 11 install with the standard […]

Read more
Common Problems 120509

Debian 11 SSH Login Fails with Permission Denied (publickey)

🟠 High   ⏱ 5–30 min  Last verified: 15 April 2022 Affected versions: Debian 11 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
CHAT