Debian 12 Bookworm

Debian 12 — gparted — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — gparted — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2014-7208 Upstream summary: GParted before 0.15.0 allows local users to execute arbitrary commands with root privileges via shell metacharacters in a crafted filesystem label. Table of contents Symptom […]

Read more
Debian 12 — libmemcached — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — libmemcached — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-27478 Upstream summary: libmemcached-awesome is an open source C/C++ client library and tools for the memcached server. `libmemcached` could return data for a previously requested key, if that […]

Read more
Debian 12 — pithos — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — pithos — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2010-4817 CVE-2011-1500 Upstream summary: pithos before 0.3.5 allows overwrite of arbitrary files via symlinks. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage […]

Read more
Debian 12 — racket — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — racket — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 5 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-3476 CVE-2007-3477 CVE-2007-3996 CVE-2009-3546 CVE-2021-32773 Upstream summary: Array index error in gd_gif_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial […]

Read more
Debian 12 — dwarfutils — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — dwarfutils — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-8538 CVE-2015-8750 CVE-2016-2050 CVE-2016-2091 CVE-2016-5027 CVE-2016-5028 CVE-2016-5029 CVE-2016-5030  +12 more Upstream summary: dwarf_leb.c in libdwarf allows attackers to cause a denial of service (SIGSEGV). Table of contents Symptom […]

Read more
Debian 12 — openblas — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — openblas — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2021-4048 Upstream summary: An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before […]

Read more
Debian 12 — dstat — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — dstat — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2009-3894 Upstream summary: Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan horse Python module in (1) the current […]

Read more
Debian 12 — hiki — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — hiki — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-2336 CVE-2005-2803 CVE-2006-3379 CVE-2007-2836 Upstream summary: Cross-site scripting (XSS) vulnerability in Hiki 0.8.0 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via "missing pages" […]

Read more
Debian 12 — php-horde-ingo — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — php-horde-ingo — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-6275 Upstream summary: Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis […]

Read more
CHAT