Debian 11

Debian 11 — tiemu — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — tiemu — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-20040 CVE-2017-20225 Upstream summary: TiEmu 3.03-nogdb+dfsg-3 contains a buffer overflow vulnerability in the ROM parameter handling that allows local attackers to crash the application or execute arbitrary code. […]

Read more
Debian 11 — beanstalkd — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — beanstalkd — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2010-2060 Upstream summary: The put command functionality in beanstalkd 1.4.5 and earlier allows remote attackers to execute arbitrary Beanstalk commands via the body in a job that is […]

Read more
Debian 11 — libmcrypt — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libmcrypt — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2003-0031 CVE-2003-0032 Upstream summary: Multiple buffer overflows in libmcrypt before 2.5.5 allow attackers to cause a denial of service (crash). Table of contents Symptom & Impact Environment & […]

Read more
Debian 11 — wesnoth-1.14 — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — wesnoth-1.14 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2018-1999023 Upstream summary: The Battle for Wesnoth Project version 1.7.0 through 1.14.3 contains a Code Injection vulnerability in the Lua scripting engine that can result in code execution […]

Read more
Debian 11 — pcmanfm — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — pcmanfm — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2017-8934 Upstream summary: PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability). Table of contents Symptom […]

Read more
Debian 11 — flite — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — flite — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-0027 Upstream summary: The play_wave_from_socket function in audio/auserver.c in Flite 1.4 allows local users to modify arbitrary files via a symlink attack on /tmp/awb.wav. NOTE: some of these […]

Read more
Debian 11 — giftrans — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — giftrans — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-45972 Upstream summary: The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file determines the amount of data to write. […]

Read more
Debian 11 — sredird — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — sredird — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-2386 CVE-2004-2387 Upstream summary: Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code via […]

Read more
Debian 11 — python-rsa — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — python-rsa — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2016-1494 CVE-2020-13757 CVE-2020-25658 Upstream summary: The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via […]

Read more
Debian 11 — ncftp — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — ncftp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 November 2021 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2004-1948 Upstream summary: NcFTP client 3.1.6 and 3.1.7, when the username and password are included in an FTP URL that is provided on the command line, allows local […]

Read more
CHAT