Debian 12 Bookworm

Debian 12 — miredo — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — miredo — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2006-6858 Upstream summary: Miredo 0.9.8 through 1.0.5 does not properly authenticate a Teredo bubble during UDP hole punching with HMAC-MD5-64 hashing, which allows remote attackers to impersonate an […]

Read more
Debian 12 — zip4j — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — zip4j — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2022-24615 CVE-2023-22899 Upstream summary: zip4j up to v2.10.0 can throw various uncaught exceptions while parsing a specially crafted ZIP file, which could result in an application crash. This […]

Read more
Debian 12 — ofono — multiple vulnerabilities (16 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — ofono — multiple vulnerabilities (16 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 2 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-2794 CVE-2023-4232 CVE-2023-4233 CVE-2023-4234 CVE-2023-4235 CVE-2024-7537 CVE-2024-7538 CVE-2024-7539  +8 more Upstream summary: A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug […]

Read more
Debian 12 — php-horde-trean — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — php-horde-trean — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-12095 CVE-2020-8865 Upstream summary: Horde Trean, as used in Horde Groupware Webmail Edition through 5.2.22 and other products, allows CSRF, as demonstrated by the treanBookmarkTags parameter to the […]

Read more
Debian 12 — libglvnd — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — libglvnd — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2023-45924 Upstream summary: libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen(). NOTE: this is disputed because there are no common […]

Read more
Debian 12 — scapy — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — scapy — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 May 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2019-1010142 Upstream summary: scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: _RADIUSAttrPacketListField.getfield(self..). The attack vector […]

Read more
Debian 12 — json-c — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — json-c — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-6370 CVE-2013-6371 CVE-2020-12762 CVE-2021-32292 Upstream summary: Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via unspecified vectors. […]

Read more
Debian 12 — isync — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — isync — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2013-0289 CVE-2021-20247 CVE-2021-3578 CVE-2021-3657 CVE-2021-44143 Upstream summary: Isync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) […]

Read more
Debian 12 — system-config-printer — vulnerability — patch and remediation guide — diagnosis and fix on Debian 12

Debian 12 — system-config-printer — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 April 2024 Affected versions: Debian 12 (bookworm) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2011-4405 Upstream summary: The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an "insecure connection" for queries […]

Read more
CHAT