Introduction This guide explains how to Set Up WordPress with Nginx on Debian 12 on Debian 12 Bookworm. Debian Bookworm uses systemd for service management, nftables as the underlying packet filter (with ufw or iptables front-ends still available), and AppArmor for mandatory access control. Every command is designed for a minimal Debian 12 install with […]
🟢 Low ⏱ 5–15 min Last verified: 21 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2015-8978 Upstream summary: In Soap Lite (aka the SOAP::Lite extension for Perl) 1.14 and earlier, an example attack consists of defining 10 or more XML entities, each defined […]
🟠 High ⏱ 15–60 min Last verified: 21 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2019-13107 CVE-2019-17533 CVE-2019-20017 CVE-2019-20018 CVE-2019-20019 CVE-2019-20020 CVE-2019-9026 CVE-2019-9027 +12 more Upstream summary: Multiple integer overflows exist in MATIO before 1.5.16, related to mat.c, mat4.c, mat5.c, mat73.c, and matvar_struct.c […]
🟠 High ⏱ 15–60 min Last verified: 21 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2003-0140 CVE-2003-0167 CVE-2004-0078 CVE-2005-2351 CVE-2006-3242 CVE-2006-5297 CVE-2006-5298 CVE-2007-1268 +12 more Upstream summary: Buffer overflow in Mutt 1.4.0 and possibly earlier versions, 1.5.x up to 1.5.3, and other programs […]
🟢 Low ⏱ 5–15 min Last verified: 21 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2007-4396 CVE-2007-4398 Upstream summary: Multiple CRLF injection vulnerabilities in (1) ixmmsa.pl 0.3, (2) l33tmusic.pl 2.00, (3) mpg123.pl 0.01, (4) ogg123.pl 0.01, (5) xmms.pl 2.0, (6) xmms2.pl 1.1.3, and […]
🟢 Low ⏱ 5–15 min Last verified: 21 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2008-2142 Upstream summary: Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows […]
🟢 Low ⏱ 5–15 min Last verified: 21 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2016-7798 Upstream summary: The openssl gem for Ruby uses the same initialization vector (IV) in GCM Mode (aes-*-gcm) when the IV is set before the key, which makes […]
🟠 High ⏱ 15–60 min Last verified: 21 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2017-12108 CVE-2017-12109 CVE-2017-12110 CVE-2017-12111 CVE-2017-2896 CVE-2017-2897 CVE-2017-2919 CVE-2018-20450 +8 more Upstream summary: An exploitable integer overflow vulnerability exists in the xls_preparseWorkSheet function of libxls 1.4 when handling a […]
🟠 High ⏱ 15–60 min Last verified: 21 September 2023 Affected versions: Debian 12 (bookworm) 📖 ~4 min read • Source: Debian Security Tracker Related CVEs: CVE-2004-0227 CVE-2008-1381 CVE-2008-3880 CVE-2008-3881 CVE-2008-3882 CVE-2008-6755 CVE-2008-6756 CVE-2013-0232 +12 more Upstream summary: Buffer overflow in the zms script in ZoneMinder before 1.19.2 may allow a remote attacker to […]
🟠 High ⏱ 5–30 min Last verified: 21 September 2023 Affected versions: Debian 12 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]
