🟢 Low ⏱ 5–15 min Last verified: 19 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-7230 CVE-2015-3156 Upstream summary: The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands […]
🟢 Low ⏱ 5–15 min Last verified: 19 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2020-10380 Upstream summary: RMySQL through 0.10.19 allows SQL Injection. Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary […]
Introduction How to Enable AppArmor Mandatory Access Control on Debian 12 is a fundamental operation for any administrator maintaining a Debian 12 Bookworm server. Debian 12 Bookworm ships with the Linux 6.12 kernel, updated toolchains, and a fully refreshed package archive — meaning version numbers, configuration file paths, and some dependency chains differ from Debian […]
🟢 Low ⏱ 5–15 min Last verified: 18 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2023-5616 Upstream summary: In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could […]
🟢 Low ⏱ 5–15 min Last verified: 18 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-2053 CVE-2021-40926 Upstream summary: getID3() before 1.9.8, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial […]
🟢 Low ⏱ 5–15 min Last verified: 18 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0381 CVE-2005-3342 Upstream summary: Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files via multiple vectors including the […]
🟡 Medium ⏱ 10–30 min Last verified: 18 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-1624 CVE-2016-1968 CVE-2020-8927 Upstream summary: Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48.0.2564.109, allows remote attackers to cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 18 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2014-7231 CVE-2019-3866 CVE-2022-0718 Upstream summary: The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask […]
🟡 Medium ⏱ 10–30 min Last verified: 18 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2002-1697 CVE-2002-1746 CVE-2002-1747 Upstream summary: Electronic Code Book (ECB) mode in VTun 2.0 through 2.5 uses a weak encryption algorithm that produces the same ciphertext from the same […]
🟢 Low ⏱ 5–15 min Last verified: 18 November 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2021-23413 CVE-2022-48285 Upstream summary: This affects the package jszip before 3.7.0. Crafting a new zip file with filenames set to Object prototype values (e.g __proto__, toString, etc) results […]
